CydandClaude Opus 4.8 530326b8e4 Parameterize registration.php; atomic player delete ...

- All staff paths (build, lock, edit, editgame, delete, add, search) and the
  render SELECTs now use db.php helpers with bound params. Removes SQL injection
  via playerid/missionid/callsign/newtype/newmap/buildmissions.
- Delete routes through new pqs_remove_player() (shared lock + transaction,
  resyncs numplayers from real occupancy instead of a raw numplayers-1).
- Drop a stray buggy line ($callsign from an undefined $line) and guard
  $_SERVER['SERVER_ADDR']. build now sets nummercs=0 (strict-mode safe).

Verified on the stack: build/edit/delete/editgame/lock/search all work; delete
resyncs numplayers; no errors.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-01 14:04:04 -05:00

..

api.php

Rewrite api.php: parameterized, no DEBUG output

2026-07-01 13:50:51 -05:00

config.php

Fix config.php: fetch pqs_pods row before reading pod vars

2026-07-01 13:41:23 -05:00

db.php

Add centralized DB helper; fix legacy mysql_error() landmines

2026-07-01 12:51:13 -05:00

getconsole.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

getcurrent.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

getgroup.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

getqueue.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

getreg.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

graph.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

infopanel.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

mechpods.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

now.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00

queue.php

Parameterize registration.php; atomic player delete

2026-07-01 14:04:04 -05:00

smallinfopanel.php

Initial commit of PQS

2026-07-01 10:59:51 -05:00