SWAMPy

✎ CARVE FLESH

EDITING: create.php

<?php
header("Access-Control-Allow-Origin: *");
header("Content-Type: application/json; charset=UTF-8");
include_once __DIR__ . '/../config/db.php';

$database = new Database();
$db = $database->getConnection();

$data = json_decode(file_get_contents("php://input"));

if (empty($data->name) || empty($data->email) || empty($data->phone) || empty($data->message)) {
    http_response_code(400);
    echo json_encode(["message" => "Name, email, phone, and message are required."]);
    exit;
}

$query = "INSERT INTO quotes (name, email, phone, context, message, product_id, status, created_at)
          VALUES (:name, :email, :phone, :context, :message, :product_id, 'unread', NOW())";
$stmt = $db->prepare($query);

$name = htmlspecialchars(strip_tags($data->name));
$email = htmlspecialchars(strip_tags($data->email));
$phone = htmlspecialchars(strip_tags($data->phone));
$context = isset($data->context) ? htmlspecialchars(strip_tags($data->context)) : 'General';
$message = htmlspecialchars(strip_tags($data->message));
$product_id = (isset($data->product_id) && $data->product_id !== '') ? $data->product_id : null;

$stmt->bindParam(':name', $name);
$stmt->bindParam(':email', $email);
$stmt->bindParam(':phone', $phone);
$stmt->bindParam(':context', $context);
$stmt->bindParam(':message', $message);
$stmt->bindParam(':product_id', $product_id);

if ($stmt->execute()) {
    http_response_code(201);
    echo json_encode(["message" => "Quote submitted successfully.", "id" => $db->lastInsertId()]);
} else {
    http_response_code(500);
    echo json_encode(["message" => "Failed to submit quote."]);
}
?>

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📄 create.php	PHP	1.6 KB	2026-06-22 11:02	EDIT
📄 delete.php	PHP	1.2 KB	2026-06-18 14:10	EDIT
📄 get.php	PHP	1.7 KB	2026-06-22 10:13	EDIT
📄 index.php	PHP	996 B	2026-06-22 11:35	EDIT
📄 update_status.php	PHP	1.1 KB	2026-06-18 14:10	EDIT