From f9d9a944cf43163d66431a39a586e7f32f2a9741 Mon Sep 17 00:00:00 2001
From: R40fendt <r40test311@gmail.com>
Date: Thu, 17 Apr 2025 11:37:05 +0200
Subject: [PATCH] =?UTF-8?q?Startseite=20und=20Galerie=20API=20hinzugef?=
 =?UTF-8?q?=C3=BCgt?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 colorstringconvert.php |  0
 galerie/get_jahre.php  | 21 +++++++++++++++++++++
 get_ergebnisse.php     | 23 +++++++++++++++++++++++
 get_events.php         |  0
 get_forms.php          | 23 +++++++++++++++++++++++
 randomimage.php        |  0
 rowforeach.php         |  0
 submit_form.php        | 13 +++++++++++++
 8 files changed, 80 insertions(+)
 mode change 100755 => 100644 colorstringconvert.php
 create mode 100644 galerie/get_jahre.php
 create mode 100644 get_ergebnisse.php
 mode change 100755 => 100644 get_events.php
 create mode 100644 get_forms.php
 mode change 100755 => 100644 randomimage.php
 mode change 100755 => 100644 rowforeach.php
 create mode 100644 submit_form.php

diff --git a/colorstringconvert.php b/colorstringconvert.php
old mode 100755
new mode 100644
diff --git a/galerie/get_jahre.php b/galerie/get_jahre.php
new file mode 100644
index 0000000..ce45959
--- /dev/null
+++ b/galerie/get_jahre.php
@@ -0,0 +1,21 @@
+<?php
+header("Access-Control-Allow-Origin: *");
+if(!isset($_GET["event"])) die("GET event fehlt");
+$event=$_GET["event"];
+
+if(str_contains($event,"/")||str_contains($event,"\\")) die("Du kannst keine / im Event verwenden.");
+
+$blacklist=["@eaDir",".",".."];
+
+$bilderdir="../../bilder/";
+
+$scan=scandir($bilderdir.$event);
+
+$result=[];
+
+foreach ($scan as $key => $value) {
+    if(in_array($value,$blacklist)) continue;
+    if(is_dir($bilderdir.$event."/".$value)) array_push($result,$value);
+}
+
+echo json_encode($result,JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE);
diff --git a/get_ergebnisse.php b/get_ergebnisse.php
new file mode 100644
index 0000000..a8ae5ba
--- /dev/null
+++ b/get_ergebnisse.php
@@ -0,0 +1,23 @@
+<?php
+header("Access-Control-Allow-Origin: *");
+include("../mysqlverbinden.php");
+include("rowforeach.php");
+
+if(!isset($_GET["formid"])) die("GET formid fehlt");
+$formid=$_GET["formid"];
+
+if(srowforeach("SELECT COUNT(*) from `ritzenbergen-formulare` where `id`=?;",[$formid])[0][0]==0) die("Invalid Form ID");
+if(srowforeach("SELECT public from `ritzenbergen-formulare` where `id`=?;",[$formid])[0][0]==0) die("Diese Form ist nicht öffentlich!");
+
+$result=[];
+
+foreach (srowforeach("SELECT `labelone`,`labeltwo`,`timestamp` from `ritzenbergen-formular-ergebnisse` where `formularid`=?;",[$formid]) as $key => $value) {
+    array_push($result,[
+        "value1"=>$value[0],
+        "value2"=>$value[1],
+        "timestamp"=>$value[2]
+    ]);
+}
+
+echo json_encode($result,JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE);
+
diff --git a/get_events.php b/get_events.php
old mode 100755
new mode 100644
diff --git a/get_forms.php b/get_forms.php
new file mode 100644
index 0000000..f2cf129
--- /dev/null
+++ b/get_forms.php
@@ -0,0 +1,23 @@
+<?php
+header("Access-Control-Allow-Origin: *");
+
+include("rowforeach.php");
+include("../mysqlverbinden.php");
+
+$result=[];
+
+foreach (srowforeach("SELECT * from `ritzenbergen-formulare`;",[]) as $key => $value) {
+    array_push($result, [
+        "id" => $value[0],
+        "ueberschrift" => $value[1],
+        "minitext" => $value[2],
+        "inhalt" => $value[3],
+        "labelone" => $value[4],
+        "labeltwo" => $value[5],
+        "modalueberschrift" => $value[6],
+        "public" => $value[7]==1,
+        "timestamp" => $value[8]
+    ]);
+}
+
+echo json_encode($result, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
\ No newline at end of file
diff --git a/randomimage.php b/randomimage.php
old mode 100755
new mode 100644
diff --git a/rowforeach.php b/rowforeach.php
old mode 100755
new mode 100644
diff --git a/submit_form.php b/submit_form.php
new file mode 100644
index 0000000..b56581e
--- /dev/null
+++ b/submit_form.php
@@ -0,0 +1,13 @@
+<?php
+header("Access-Control-Allow-Origin: *");
+include("../mysqlverbinden.php");
+if(!isset($_GET["formid"])) die("GET formid fehlt");
+$formid=$_GET["formid"];
+
+if(!isset($_GET["value1"])) die("GET value1 fehlt");
+$value1=$_GET["value1"];
+
+if(!isset($_GET["value2"])) die("GET value2 fehlt");
+$value2=$_GET["value2"];
+
+mysqli_execute_query($db_id,"INSERT INTO `ritzenbergen-formular-ergebnisse` (`formularid`, `labelone`, `labeltwo`) VALUES (?,?,?);",[$formid,$value1,$value2]);
\ No newline at end of file