diff --git a/includes/api.php b/includes/api.php
index 8bcc58f..4256bb4 100644
--- a/includes/api.php
+++ b/includes/api.php
@@ -1,38 +1,27 @@
wcall = $wcall
";
- switch ($wcall) {
- case "updatemerc":
- echo "DEBUG: updatemerc is called
";
- $wdo = "";
- if (isset($_GET['wdo'])) $wdo = $_GET['wdo'];
- switch ($wdo) {
- case "add":
- echo "DEBUG: updatemerc add is called
";
- $sql = "UPDATE pqs_queue SET merc = 1 WHERE id = $_GET[playerid]";
- echo "sql:
$sql
";
- mysqli_query($dbconnect, $sql) or die('Update Merc status failed: ' . mysqli_error($dbconnect));
- break;
- case "remove":
- echo "DEBUG: updatemerc remove is called
";
- $sql = "UPDATE pqs_queue SET merc = 0 WHERE id = $_GET[playerid]";
- echo "sql:
$sql
";
- mysqli_query($dbconnect, $sql) or die('Update Merc status failed: ' . mysqli_error($dbconnect));
- break;
- }
- break;
- case "updateinfo":
- $sql = "SELECT Updated FROM pqs_infopanel";
- $getid = mysqli_query($dbconnect, $sql) or die('Query failed: ' . mysqli_error($dbconnect));
- $rs1 = mysqli_fetch_array($getid);
- $updateinfo = $rs1[0];
- mysqli_query($dbconnect, $sql) or die('Query failed: ' . mysqli_error($dbconnect));
- echo json_encode($updateinfo);
- break;
- }
+ switch ($_GET['call']) {
+ case 'updatemerc':
+ $wdo = $_GET['wdo'] ?? '';
+ $playerid = (int) ($_GET['playerid'] ?? 0);
+ if ($wdo === 'add') {
+ pqs_exec("UPDATE pqs_queue SET merc = 1 WHERE id = ?", 'i', [$playerid]);
+ } elseif ($wdo === 'remove') {
+ pqs_exec("UPDATE pqs_queue SET merc = 0 WHERE id = ?", 'i', [$playerid]);
+ }
+ break;
+
+ case 'updateinfo':
+ $updated = pqs_val("SELECT Updated FROM pqs_infopanel");
+ header('Content-Type: application/json');
+ echo json_encode((string) $updated);
+ break;
+ }
}
-mysqli_close($dbconnect);
-?>
\ No newline at end of file