diff --git a/includes/api.php b/includes/api.php index 8bcc58f..4256bb4 100644 --- a/includes/api.php +++ b/includes/api.php @@ -1,38 +1,27 @@ wcall = $wcall
"; - switch ($wcall) { - case "updatemerc": - echo "DEBUG: updatemerc is called
"; - $wdo = ""; - if (isset($_GET['wdo'])) $wdo = $_GET['wdo']; - switch ($wdo) { - case "add": - echo "DEBUG: updatemerc add is called
"; - $sql = "UPDATE pqs_queue SET merc = 1 WHERE id = $_GET[playerid]"; - echo "sql:
$sql
"; - mysqli_query($dbconnect, $sql) or die('Update Merc status failed: ' . mysqli_error($dbconnect)); - break; - case "remove": - echo "DEBUG: updatemerc remove is called
"; - $sql = "UPDATE pqs_queue SET merc = 0 WHERE id = $_GET[playerid]"; - echo "sql:
$sql
"; - mysqli_query($dbconnect, $sql) or die('Update Merc status failed: ' . mysqli_error($dbconnect)); - break; - } - break; - case "updateinfo": - $sql = "SELECT Updated FROM pqs_infopanel"; - $getid = mysqli_query($dbconnect, $sql) or die('Query failed: ' . mysqli_error($dbconnect)); - $rs1 = mysqli_fetch_array($getid); - $updateinfo = $rs1[0]; - mysqli_query($dbconnect, $sql) or die('Query failed: ' . mysqli_error($dbconnect)); - echo json_encode($updateinfo); - break; - } + switch ($_GET['call']) { + case 'updatemerc': + $wdo = $_GET['wdo'] ?? ''; + $playerid = (int) ($_GET['playerid'] ?? 0); + if ($wdo === 'add') { + pqs_exec("UPDATE pqs_queue SET merc = 1 WHERE id = ?", 'i', [$playerid]); + } elseif ($wdo === 'remove') { + pqs_exec("UPDATE pqs_queue SET merc = 0 WHERE id = ?", 'i', [$playerid]); + } + break; + + case 'updateinfo': + $updated = pqs_val("SELECT Updated FROM pqs_infopanel"); + header('Content-Type: application/json'); + echo json_encode((string) $updated); + break; + } } -mysqli_close($dbconnect); -?> \ No newline at end of file