renamed file

item.php

@@ -0,0 +1,72 @@
+<?php
+ini_set('display_errors', 1);
+ini_set('display_startup_errors', 1);
+error_reporting(E_ALL);
+include_once('config/config.php');
+
+$ItemTitle = $_POST['ItemTitle'];
+$ItemDescription = $_POST['ItemDescription'];
+$ItemPrice = $_POST['ItemPrice'];
+$ItemLink = $_POST['ItemLink'];
+$ItemImage = $_POST['ItemImage'];
+$ListID = $_POST['ItemListID'];
+$nextPriority = 0;
+
+#--- check if the provided Link is a valid URL
+
+if (filter_var($ItemLink, FILTER_VALIDATE_URL) === FALSE) {
+    die('Not a valid URL');
+}
+
+#---
+
+#--- check if the provided Image-Link is a real image:
+
+$headers = array_change_key_case(get_headers($ItemImage, 1), CASE_LOWER);       // make all keys LowerCase
+
+if (strpos($headers['content-type'], 'image/') !== false) {
+    $strippedimagepath = strtok($ItemImage, '?');
+    $imageLocalLink = uniqid() . '.' . pathinfo($strippedimagepath, PATHINFO_EXTENSION);
+    echo "ImageLink: " . $imageLocalLink;
+    file_put_contents($imagedir . '/' . $imageLocalLink, fopen($strippedimagepath, 'r'));
+} else {
+    echo "Link is Not an Image";
+}
+
+#--- 
+
+$ItemPriceCents = floatval(str_replace(',', '.', str_replace('.', '', $ItemPrice))) * 100;
+$conn = new mysqli($servername, $username, $password, $db);
+
+// Check connection
+if ($conn->connect_error) {
+    die('Connection failed: ' . $conn->connect_error);
+}
+
+$stmt  = 'SELECT MAX( priority ) AS maxprio FROM whishes WHERE whislist = ' . $ListID . ';';
+$result = $conn->query($stmt);
+
+while ($row = mysqli_fetch_array($result)) {
+    $nextPriority = $row['maxprio'] + 1;
+}
+
+$stmt  = $conn->prepare('INSERT INTO whishes (title, description, link, image, price, whislist, priority) VALUES (?, ?, ?, ?, ?, ?, ?)');
+
+if (false === $stmt) {
+    die('prepare() failed: ' . htmlspecialchars($conn->error));
+}
+
+$rc = $stmt->bind_param('ssssiii', $ItemTitle, $ItemDescription, $ItemLink, $imageLocalLink, $ItemPriceCents, $ListID, $nextPriority);
+if (false === $rc) {
+    die('bind_param() failed: ' . htmlspecialchars($stmt->error));
+}
+
+$rc = $stmt->execute();
+if (false === $rc) {
+    die('execute() failed: ' . htmlspecialchars($stmt->error));
+}
+
+$stmt->close();
+$conn->close();
+
+header('Location: ' . $_SERVER['HTTP_REFERER']);