/login'); } require("../../include/variables.php"); require("../../include/init.php"); require("../../include/main-functions.php"); require("../../include/inputs.php"); require("../../include/panels.php"); $pdo = sqlConnect($sqlDatabaseHost, $sqlDatabaseName, $sqlDatabaseUser, $sqlDatabasePass); if(isset($_POST['article-content']) && isset($_POST['classification'])) { $sqlRequest = "SELECT ID FROM articles WHERE ID >= 1 ORDER BY ID DESC LIMIT 1"; $request = $pdo->prepare($sqlRequest); $request->execute(); $result = $request->fetchAll(PDO::FETCH_ASSOC); $articleID = (int)$result[0]['ID'] + 1; file_put_contents($rootFilePath . "content/articles/" . $articleID . ".md", nl2br($_POST['article-content'])); $sqlRequest = "INSERT INTO articles (ID, title, author, resume, classification) VALUES (:articleID, :title, :author, :resume, :classification)"; $request = $pdo->prepare($sqlRequest); $request->bindParam(":articleID", $articleID); $request->bindParam(":title", htmlspecialchars($_POST['article-title'])); $request->bindParam(":author", $_SESSION['userID']); $request->bindParam(":resume", htmlspecialchars($_POST['article-resume'])); $request->bindParam(":classification", $_POST['classification'], PDO::PARAM_INT); if($request->execute()) { header("Location: /editor?article=" . $articleID); } else { $status = "Erreur SQL"; } } ?>