diff --git a/inc/functions.php b/inc/functions.php index 9436e4b6..21be6294 100644 --- a/inc/functions.php +++ b/inc/functions.php @@ -43,6 +43,7 @@ } function openBoard($uri) { + global $sql; $boards_res = mysql_query(sprintf("SELECT * FROM `boards` WHERE `uri` = '%s' LIMIT 1", mysql_real_escape_string($uri)), $sql) or error(mysql_error($sql)); if($_board = mysql_fetch_array($boards_res)) { setupBoard($_board); diff --git a/post.php b/post.php index 251c54b4..fcaf3bf5 100644 --- a/post.php +++ b/post.php @@ -70,6 +70,7 @@ $post['password'] = $_POST['password']; $post['filename'] = $_FILES['file']['name']; $post['has_file'] = $OP || !empty($_FILES['file']['tmp_name']); + $post['board'] = $_POST['board']; if($post['has_file']) { $size = $_FILES['file']['size']; @@ -80,6 +81,7 @@ 'maxsz'=>commaize(MAX_FILESIZE)))); } + sql_open(); if(!openBoard($post['board'])) error(ERROR_NOBOARD); $trip = generate_tripcode($post['name']); @@ -185,7 +187,6 @@ // Todo: Validate some more, remove messy code, allow more specific configuration // MySQLify - sql_open(); mysql_safe_array($post); $id = post($post, $OP);