From 95ceaf106ed9887ac9ca0899a970023b4c26cd11 Mon Sep 17 00:00:00 2001 From: Renard Date: Fri, 31 Jul 2020 20:03:55 -0400 Subject: Api Fix --- cgi/modapi.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'cgi') diff --git a/cgi/modapi.py b/cgi/modapi.py index 19bf5fd..11fbf1e 100644 --- a/cgi/modapi.py +++ b/cgi/modapi.py @@ -76,16 +76,16 @@ def api_process(self, path_split): "SELECT * FROM `news` WHERE type = 1 ORDER BY `timestamp` DESC") values['news'] = news elif method == 'post': - board = formdata.get("board") + board = setBoard(formdata.get("board")) if 'id' in formdata.keys(): id = formdata.get('id') post = FetchOne("SELECT `id`, `boardid`, `parentid`,`timestamp`, `name`, `tripcode`, `email` ,`subject`,`message`,`file`,`thumb`, INET6_NTOA(`ip`) as ip,`IS_DELETED` AS `deleted`, `bumped`, `last`, `locked` FROM `posts` FROM `posts` WHERE `id` = '" + - _mysql.escape_string(id) + "' AND board = '" + _mysql.escape_string(board) + "'") + _mysql.escape_string(id) + "' AND board = '" + _mysql.escape_string(board["id"]) + "'") values['post'] = post if 'parentid' in formdata.keys(): id = formdata.get('parentid') post = FetchAll("SELECT `id`, `boardid`, `parentid`,`timestamp`, `name`, `tripcode`, `email` ,`subject`,`message`,`file`,`thumb`, INET6_NTOA(`ip`) as ip,`IS_DELETED` AS `deleted`, `bumped`, `last`, `locked` FROM `posts` FROM `posts` WHERE `parentid` = '" + - _mysql.escape_string(id) + "' AND board = '" + _mysql.escape_string(board) + "'") + _mysql.escape_string(id) + "' AND board = '" + _mysql.escape_string(board["id"]) + "'") values['posts'] = post elif method == 'reports': if len(path_split) > 3: -- cgit v1.2.1-18-gbd029