typicalname0 / 4grounds

view.php

Indentation +3 added lines, -3 removed lines

@@ -69,7 +69,7 @@ 
                 <source src="/musicfiles/' . $filename . '">
                 </audio>';
             } else if($type == "image") {
-              echo "<img style='max-width: 100%;' src='/images/" . $filename . "'>";
+                echo "<img style='max-width: 100%;' src='/images/" . $filename . "'>";
             } else if($type == "midi") {
                 echo "Note: It may take a few seconds for the MIDI to load.<br>";
                 echo "<a href='#' onClick=\"MIDIjs.play('/midis/" . $filename . "');\">Play " . $title . "</a>";
@@ -202,9 +202,9 @@ 
             <script type="text/javascript" src="//cdn.jsdelivr.net/gh/deskjet/chiptune2.js@master/chiptune2.js"></script>';
             echo '<a class="song" data-modurl="/midis/' . $filename . '" href="#">Play ' . $title . '</a>';
             } else if($type == "news" || $type == "review") {
-              //do nothing
+                //do nothing
             } else if($type == "video") {
-              echo ' <video width="640" height="400" controls>
+                echo ' <video width="640" height="400" controls>
                   <source src="/videos/' . $filename . '" type="video/mp4">
                 </video> ';
             } else {

func/bbcode.php

Indentation +121 added lines, -121 removed lines

@@ -14,32 +14,32 @@ 
 
 class BBCode
 {
-  // Tag aliases.  Item on left translates to item on right.
-  const TAG_ALIAS = [
+    // Tag aliases.  Item on left translates to item on right.
+    const TAG_ALIAS = [
     'url' => 'a',
     'code' => 'pre',
     'quote' => 'blockquote',
     '*' => 'li'
-  ];
+    ];
 
-  // helper function: normalize a potential "tag"
-  //  convert to lowercase and check against the alias list
-  //  returns a named array with details about the tag
-  static private function decode_tag($input) : array
-  {
+    // helper function: normalize a potential "tag"
+    //  convert to lowercase and check against the alias list
+    //  returns a named array with details about the tag
+    static private function decode_tag($input) : array
+    {
     // first determine if it's opening on closing tag, then substr out the inner portion
     if ($input[1] === '/') {
-      $open = 0;
-      $inner = substr($input, 2, -1);
+        $open = 0;
+        $inner = substr($input, 2, -1);
     } else {
-      $open = 1;
-      $inner = substr($input, 1, -1);
+        $open = 1;
+        $inner = substr($input, 1, -1);
     }
 
     // oneliner to burst inner by spaces, then burst each of those by equals signs
     $params = array_map(
-      function(&$a) { return explode('=', $a, 2); },
-      explode(' ', $inner));
+        function(&$a) { return explode('=', $a, 2); },
+        explode(' ', $inner));
 
     // first "param" is special - it's the tag name and (optionally) the default arg
     $first = array_shift($params);
@@ -47,29 +47,29 @@ 
     // tag name
     $name = strtolower($first[0]);
     if (isset(self::TAG_ALIAS[$name])) {
-      $name = self::TAG_ALIAS[$name];
+        $name = self::TAG_ALIAS[$name];
     }
 
     // "default" (unnamed) argument
     $args = null;
     if (isset ($first[1])) {
-      $args['default'] = $first[1];
+        $args['default'] = $first[1];
     }
 
     // finally, put the rest of the args in the list
     //array_walk( $params, function(&$a, $i, &$args) { print_r($args); $args[strtolower($a[1])] = $a[0]; }, $args);
     foreach ($params as &$param) {
-      $k = isset($param[0]) ? strtolower($param[0]) : '';
-      $v = isset($param[1]) ? $param[1] : '';
-      $args[$k] = $v;
+        $k = isset($param[0]) ? strtolower($param[0]) : '';
+        $v = isset($param[1]) ? $param[1] : '';
+        $args[$k] = $v;
     }
 
     return [ 'name' => $name, 'open' => $open, 'args' => $args ];
-  }
+    }
 
-  // helper function: normalize HTML entities, with newline handling
-  static private function encode($input) : string
-  {
+    // helper function: normalize HTML entities, with newline handling
+    static private function encode($input) : string
+    {
     // break substring into individual unicode chars
     $characters = preg_split('//u', $input, null, PREG_SPLIT_NO_EMPTY);
 
@@ -79,19 +79,19 @@ 
     foreach ($characters as &$ch)
     {
         if ($ch === '\n') {
-          $output .= "\n<br>";
+            $output .= "\n<br>";
         }
 
         if ($ch === '<') {
-          $output .= '&lt;';
+            $output .= '&lt;';
         } elseif ($ch === '>') {
-          $output .= '&gt;';
+            $output .= '&gt;';
         } elseif ($ch === '&') {
-          $output .= '&amp;';
+            $output .= '&amp;';
         } elseif ($ch === "\u{00A0}") {
-          $output .= '&nbsp;';
+            $output .= '&nbsp;';
         } else {
-          $output .= $ch;
+            $output .= $ch;
         }
     }
 
@@ -100,11 +100,11 @@ 
 
 
     return $output;
-  }
+    }
 
-  // Renders a BBCode string to HTML, for inclusion into a document.
-  static public function bbcode_to_html($input) : string
-  {
+    // Renders a BBCode string to HTML, for inclusion into a document.
+    static public function bbcode_to_html($input) : string
+    {
     // split input string into array using regex, UTF-8 aware
     //  this should give us tokens to work with
 
@@ -113,9 +113,9 @@ 
     // ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 -._~:/?#@!$&'()*+,;=%
     // Square brackets are technically allowed, but excluded here, because they interfere.
     $match_count = preg_match_all("/\[[A-Za-z0-9 \-._~:\/?#@!$&'()*+,;=%]+\]/u",
-      $input, $matches, PREG_OFFSET_CAPTURE);
+        $input, $matches, PREG_OFFSET_CAPTURE);
     if ($match_count === FALSE) {
-      throw new RuntimeException('Fatal error in preg_match_all for BBCode tags');
+        throw new RuntimeException('Fatal error in preg_match_all for BBCode tags');
     }
 
     // begin with the empty string
@@ -125,31 +125,31 @@ 
     $stack = [];
     for ($match_idx = 0; $match_idx < $match_count; $match_idx ++)
     {
-      list($match, $offset) = $matches[0][$match_idx];
+        list($match, $offset) = $matches[0][$match_idx];
 
-      // pick up chars between tags and HTML-encode them
-      $output .= self::encode(substr($input, $input_ptr, $offset - $input_ptr));
-      // advance input_ptr to just past the current tag
-      $input_ptr = $offset + strlen($match);
+        // pick up chars between tags and HTML-encode them
+        $output .= self::encode(substr($input, $input_ptr, $offset - $input_ptr));
+        // advance input_ptr to just past the current tag
+        $input_ptr = $offset + strlen($match);
 
-      // decode the tag
-      list('name' => $name, 'open' => $open, 'args' => $args) = self::decode_tag($match);
+        // decode the tag
+        list('name' => $name, 'open' => $open, 'args' => $args) = self::decode_tag($match);
 
-      if (! $open) {
+        if (! $open) {
         // CLOSING TAG
 
         // Search the tag stack and see if the opening tag was pushed into it
         if (array_search($name, $stack, TRUE) === FALSE) {
-          // Attempted to close a tag that was not on the stack!
-          $output = $output . self::encode($match);
+            // Attempted to close a tag that was not on the stack!
+            $output = $output . self::encode($match);
         } else {
-          //pop repeatedly until we pop the tag, and close everything on the way
-          do {
+            //pop repeatedly until we pop the tag, and close everything on the way
+            do {
             $popped_name = array_pop($stack);
             $output = $output . '</' . $popped_name . '>';
-          } while ($name !== $popped_name);
+            } while ($name !== $popped_name);
         }
-      } else {
+        } else {
         // OPENING TAG
 
         // Big if / elseif ladder to handle each tag
@@ -157,77 +157,77 @@ 
             $name === 'blockquote' ||
             $name === 'ol' || $name === 'ul' ||
             $name === 'table') {
-          // Simple tags (no validation or alternate modes)
-          $stack[] = $name;
-          $output = $output . '<' . $name . '>';
+            // Simple tags (no validation or alternate modes)
+            $stack[] = $name;
+            $output = $output . '<' . $name . '>';
         } elseif ($name === 'li') {
-          // Disallow [li] outside of [ol] or [ul]
-          if (array_search('ol', $stack, TRUE) !== FALSE ||
+            // Disallow [li] outside of [ol] or [ul]
+            if (array_search('ol', $stack, TRUE) !== FALSE ||
               array_search('ul', $stack, TRUE) !== FALSE) {
             $stack[] = 'li';
             $output .= '<li>';
-          } else {
+            } else {
             $output .= self::encode($match);
-          }
+            }
         } elseif ($name === 'tr') {
-          // Disallow [tr] outside of [table]
-          if (array_search('table', $stack, TRUE) !== FALSE) {
+            // Disallow [tr] outside of [table]
+            if (array_search('table', $stack, TRUE) !== FALSE) {
             $stack[] = 'tr';
             $output .= '<tr>';
-          } else {
+            } else {
             $output .= self::encode($match);
-          }
+            }
         } elseif ($name === 'td' || $name === 'th') {
-          // Disallow [th] / [td] outside of [tr] outside of [table]
-          $tr_index = array_search('tr', $stack, TRUE);
-          $table_index = array_search('table', $stack, TRUE);
-          if ($tr_index !== FALSE && $table_index !== FALSE && $table_index < $tr_index) {
+            // Disallow [th] / [td] outside of [tr] outside of [table]
+            $tr_index = array_search('tr', $stack, TRUE);
+            $table_index = array_search('table', $stack, TRUE);
+            if ($tr_index !== FALSE && $table_index !== FALSE && $table_index < $tr_index) {
             $stack[] = $name;
             $output = $output . '<' . $name . '>';
-          } else {
+            } else {
             $output .= self::encode($match);
-          }
+            }
 
         } elseif ($name === 'font') {
-          // Font size adjustment.  This requires an argument, one of "size" or "color" (or both).
-          $font_param = [];
+            // Font size adjustment.  This requires an argument, one of "size" or "color" (or both).
+            $font_param = [];
 
-          if (isset ($args['size'])) {
+            if (isset ($args['size'])) {
 //TODO: size validation
             $font_param['font-size'] = $args['size'];
-          }
-          if (isset ($args['color'])) {
+            }
+            if (isset ($args['color'])) {
 //TODO: color validation
             $font_param['color'] = $args['color'];
-          }
+            }
 //TODO: handle bad settings
 
-          if (! empty($font_param)) {
+            if (! empty($font_param)) {
             $stack[] = 'font';
 
             // append all css_style params
             $css_style = [];
             foreach ($font_param as $name=>$value) {
-              $css_style[] = $name . ': ' . $value;
+                $css_style[] = $name . ': ' . $value;
             }
             $output = $output . '<span style="' . implode(';', $css_style) . '">';
-          } else {
+            } else {
             // Font tag without good args is useless.
             $output .= self::encode($match);
-          }
+            }
 
         // SPECIAL TAG HANDLING
         } elseif ($name === 'pre') {
-          // [pre] / [code] put us into RAW mode, where nothing is parsed except [/code]
+            // [pre] / [code] put us into RAW mode, where nothing is parsed except [/code]
 
-          for ($i = $match_idx + 1; $i < $match_count; $i ++)
-          {
+            for ($i = $match_idx + 1; $i < $match_count; $i ++)
+            {
             list($search_match, $search_offset) = $matches[0][$i];
             $search_tag = self::decode_tag($search_match);
             if (! $search_tag['open'] && $search_tag['name'] === 'pre') { break; }
-          }
+            }
 
-          if ($i < $match_count) {
+            if ($i < $match_count) {
             // successfully found ending tag
 
             // encode everything contained between here and there
@@ -236,31 +236,31 @@ 
             $input_ptr = $search_offset + strlen($search_match);
             // update search position
             $match_idx = $i;
-          } else {
+            } else {
             // Unrecognized type!
             $output .= self::encode($match);
-          }
+            }
         } elseif ($name === 'a') {
-          // URL handling.  Two modes: [a=url]title[/a] and [a]url[/a].
-          //  Verify enclosing value first.
-          $buffer = null;
-          $i = $match_idx + 1;
-          if ($i < $match_count) {
+            // URL handling.  Two modes: [a=url]title[/a] and [a]url[/a].
+            //  Verify enclosing value first.
+            $buffer = null;
+            $i = $match_idx + 1;
+            if ($i < $match_count) {
             list($search_match, $search_offset) = $matches[0][$i];
             $search_tag = self::decode_tag($search_match);
             if (! $search_tag['open'] && $search_tag['name'] === 'a') {
-              $buffer = substr($input, $input_ptr, $search_offset - $input_ptr);
+                $buffer = substr($input, $input_ptr, $search_offset - $input_ptr);
+            }
             }
-          }
 
-          // matched something in the middle
-          if (isset($buffer)) {
+            // matched something in the middle
+            if (isset($buffer)) {
             if (isset($args['default'])) {
-              // $buffer is the title
-              $url = $args['default'];
+                // $buffer is the title
+                $url = $args['default'];
             } else {
-              // $buffer is the url
-              $url = $buffer;
+                // $buffer is the url
+                $url = $buffer;
             }
             // emit the tag
             $output = $output . '<a href="' . $url . '">' . self::encode($buffer) . '</a>';
@@ -268,43 +268,43 @@ 
             $input_ptr = $search_offset + strlen($search_match);
             // update search position
             $match_idx = $i;
-          } else {
+            } else {
             // Unrecognized type!
             $output .= self::encode($match);
-          }
+            }
 
         } elseif ($name === 'img') {
-          // image handling.  [img (optional=args go=here)]url[/img].
-          //  Verify enclosing value first.
-          $buffer = null;
-          $i = $match_idx + 1;
-          if ($i < $match_count) {
+            // image handling.  [img (optional=args go=here)]url[/img].
+            //  Verify enclosing value first.
+            $buffer = null;
+            $i = $match_idx + 1;
+            if ($i < $match_count) {
             list($search_match, $search_offset)  = $matches[0][$i];
             $search_tag = self::decode_tag($search_match);
             if (! $search_tag['open'] && $search_tag['name'] === 'img') {
-              $buffer = substr($input, $input_ptr, $search_offset - $input_ptr);
+                $buffer = substr($input, $input_ptr, $search_offset - $input_ptr);
+            }
             }
-          }
 
-          // matched something in the middle
-          if (isset($buffer)) {
+            // matched something in the middle
+            if (isset($buffer)) {
             // Image size adjustment - accepts width and height
             $img_param = [];
 
             if (isset ($args['width'])) {
-  //TODO: size validation
-              $img_param['width'] = $args['width'];
+    //TODO: size validation
+                $img_param['width'] = $args['width'];
             }
             if (isset ($args['height'])) {
-  //TODO: size validation
-              $img_param['height'] = $args['height'];
+    //TODO: size validation
+                $img_param['height'] = $args['height'];
             }
 //TODO: handle bad settings
 
             // emit the tag
             $output = $output . '<img src="' . $buffer . '"';
             foreach ($img_param as $name=>$value) {
-              $output = $output . ' ' . $name . '="' . $value . '"';
+                $output = $output . ' ' . $name . '="' . $value . '"';
             }
             $output .= '>';
 
@@ -312,18 +312,18 @@ 
             $input_ptr = $search_offset + strlen($search_match);
             // update search position
             $match_idx = $i;
-          } else {
+            } else {
             // Unrecognized type!
             $output .= self::encode($match);
-          }
+            }
 
         // ADD CUSTOM TAGS HERE
 
         } else {
-          // Unrecognized type!
-          $output .= self::encode($match);
+            // Unrecognized type!
+            $output .= self::encode($match);
+        }
         }
-      }
     }
 
     // pick up any stray chars and HTML-encode them
@@ -332,16 +332,16 @@ 
     // Close any remaining stray tags left on the stack
     while ($stack)
     {
-      $tag = array_pop($stack);
-      $output = $output . '</' . $tag . '>';
+        $tag = array_pop($stack);
+        $output = $output . '</' . $tag . '>';
     }
 
     return $output;
-  }
+    }
 }
 
 // procedural
 function bbcode_to_html($input) : string
 {
-  return BBCode::bbcode_to_html($input);
+    return BBCode::bbcode_to_html($input);
 }

func/func.php

Indentation +101 added lines, -101 removed lines

@@ -12,136 +12,136 @@
 }
 
 function validateCSS($validate) {
-	$DISALLOWED = array("<?php", "?>", "behavior: url", ".php", "@import", "@\import", "@/import"); 
+    $DISALLOWED = array("<?php", "?>", "behavior: url", ".php", "@import", "@\import", "@/import"); 
 
-	$validated = str_replace($DISALLOWED, "", $validate);
+    $validated = str_replace($DISALLOWED, "", $validate);
     return $validated;
 }
 function validateMarkdown($comment) {
-	$markdown = new Michelf\Markdown;
-	$markdown->no_markup = "true";
-	$transformed = $markdown->transform($comment);
-	return preg_replace(
-		"/<a href=(?:'|\")javascript:(.*?)(?:'|\")>(.*?)<\/a>/i",
-		"Attempted XSS: $2 ($1)",
-		$transformed
-	);
+    $markdown = new Michelf\Markdown;
+    $markdown->no_markup = "true";
+    $transformed = $markdown->transform($comment);
+    return preg_replace(
+        "/<a href=(?:'|\")javascript:(.*?)(?:'|\")>(.*?)<\/a>/i",
+        "Attempted XSS: $2 ($1)",
+        $transformed
+    );
 }
 
 function validateCaptcha($privatekey, $response) {
-	$responseData = json_decode(file_get_contents('https://www.google.com/recaptcha/api/siteverify?secret='.$privatekey.'&response='.$response));
-	return $responseData->success;
+    $responseData = json_decode(file_get_contents('https://www.google.com/recaptcha/api/siteverify?secret='.$privatekey.'&response='.$response));
+    return $responseData->success;
 }
 
 function requireLogin() {
-	if (!isset($_SESSION['user'])) {
-		header("Location: /login.php?r_login"); die();
-	}
+    if (!isset($_SESSION['user'])) {
+        header("Location: /login.php?r_login"); die();
+    }
 }
 
 function getID($user, $connection) {
-	$stmt = $connection->prepare("SELECT * FROM users WHERE username = ?");
-	$stmt->bind_param("s", $user);
-	$stmt->execute();
-	$result = $stmt->get_result();
-	if($result->num_rows === 0) return 'error';
-	while($row = $result->fetch_assoc()) {
-		$id = $row['id'];
-	} 
-	$stmt->close();
-	return $id;
+    $stmt = $connection->prepare("SELECT * FROM users WHERE username = ?");
+    $stmt->bind_param("s", $user);
+    $stmt->execute();
+    $result = $stmt->get_result();
+    if($result->num_rows === 0) return 'error';
+    while($row = $result->fetch_assoc()) {
+        $id = $row['id'];
+    } 
+    $stmt->close();
+    return $id;
 }
 
 function getName($id, $connection) {
-	$stmt = $connection->prepare("SELECT * FROM users WHERE id = ?");
-	$stmt->bind_param("s", $id);
-	$stmt->execute();
-	$result = $stmt->get_result();
-	if($result->num_rows === 0) return('error');
-	while($row = $result->fetch_assoc()) {
-		$name = htmlspecialchars($row['username']);
-	} 
-	$stmt->close();
-	return $name;
+    $stmt = $connection->prepare("SELECT * FROM users WHERE id = ?");
+    $stmt->bind_param("s", $id);
+    $stmt->execute();
+    $result = $stmt->get_result();
+    if($result->num_rows === 0) return('error');
+    while($row = $result->fetch_assoc()) {
+        $name = htmlspecialchars($row['username']);
+    } 
+    $stmt->close();
+    return $name;
 }
 
 function getPFP($user, $connection) {
-	$stmt = $connection->prepare("SELECT * FROM users WHERE username = ?");
-	$stmt->bind_param("s", $user);
-	$stmt->execute();
-	$result = $stmt->get_result();
-	if($result->num_rows === 0) return('error');
-	while($row = $result->fetch_assoc()) {
-		$pfp = htmlspecialchars($row['pfp']);
-	} 
-	$stmt->close();
-	return $pfp;
+    $stmt = $connection->prepare("SELECT * FROM users WHERE username = ?");
+    $stmt->bind_param("s", $user);
+    $stmt->execute();
+    $result = $stmt->get_result();
+    if($result->num_rows === 0) return('error');
+    while($row = $result->fetch_assoc()) {
+        $pfp = htmlspecialchars($row['pfp']);
+    } 
+    $stmt->close();
+    return $pfp;
 }
 
 function checkIfFriended($friend1, $friend2, $connection)
 {
-	$stmt = $connection->prepare("SELECT * FROM `friends` WHERE reciever = ? AND sender = ? OR reciever = ? AND sender = ?");
-	$stmt->bind_param("ssss", $friend1, $friend2, $friend2, $friend1);
-	$stmt->execute();
-	$result = $stmt->get_result();
-	if($result->num_rows === 1){ return true; }
-	return false;
+    $stmt = $connection->prepare("SELECT * FROM `friends` WHERE reciever = ? AND sender = ? OR reciever = ? AND sender = ?");
+    $stmt->bind_param("ssss", $friend1, $friend2, $friend2, $friend1);
+    $stmt->execute();
+    $result = $stmt->get_result();
+    if($result->num_rows === 1){ return true; }
+    return false;
 }
 
 //thanks dzhaugasharov https://gist.github.com/afsalrahim/bc8caf497a4b54c5d75d
 function replaceBBcodes($text) {
-	return bbcode_to_html($text);
+    return bbcode_to_html($text);
 }
 
 function getUser($id) {
-	$stmt = $conn->prepare("SELECT * FROM users WHERE id = ?");
-	$stmt->bind_param("i", $id);
-	$stmt->execute();
-	$result = $stmt->get_result();
-	if($result->num_rows === 0) echo('That user does not exist.');
-	while($row = $result->fetch_assoc()) {
-		$username = $row['username'];
-		$id = $row['id'];
-		$date = $row['date'];
-		$bio = $row['bio'];
-		$css = $row['css'];
-		$pfp = $row['pfp'];
-		$badges = explode(';', $row['badges']);
-		$music = $row['music'];
-	}
-	$stmt->close();
-
-	$stmt = $conn->prepare("SELECT * FROM gamecomments WHERE author = ?");
-	$stmt->bind_param("s", $username);
-	$stmt->execute();
-	$result = $stmt->get_result();
-
-	$comments = 0;
-	while($row = $result->fetch_assoc()) {
-		$comments++;
-	}
-	$stmt->close();
-
-	$stmt = $conn->prepare("SELECT * FROM comments WHERE author = ?");
-	$stmt->bind_param("s", $username);
-	$stmt->execute();
-	$result = $stmt->get_result();
-
-	$profilecomments = 0;
-	while($row = $result->fetch_assoc()) {
-		$profilecomments++;
-	}
-	$stmt->close();
-
-	$stmt = $conn->prepare("SELECT * FROM files WHERE author = ? AND status='y'");
-	$stmt->bind_param("s", $username);
-	$stmt->execute();
-	$result = $stmt->get_result();
-
-	$filesuploaded = 0;
-	while($row = $result->fetch_assoc()) {
-		$filesuploaded++;
-	}
-	$stmt->close();
+    $stmt = $conn->prepare("SELECT * FROM users WHERE id = ?");
+    $stmt->bind_param("i", $id);
+    $stmt->execute();
+    $result = $stmt->get_result();
+    if($result->num_rows === 0) echo('That user does not exist.');
+    while($row = $result->fetch_assoc()) {
+        $username = $row['username'];
+        $id = $row['id'];
+        $date = $row['date'];
+        $bio = $row['bio'];
+        $css = $row['css'];
+        $pfp = $row['pfp'];
+        $badges = explode(';', $row['badges']);
+        $music = $row['music'];
+    }
+    $stmt->close();
+
+    $stmt = $conn->prepare("SELECT * FROM gamecomments WHERE author = ?");
+    $stmt->bind_param("s", $username);
+    $stmt->execute();
+    $result = $stmt->get_result();
+
+    $comments = 0;
+    while($row = $result->fetch_assoc()) {
+        $comments++;
+    }
+    $stmt->close();
+
+    $stmt = $conn->prepare("SELECT * FROM comments WHERE author = ?");
+    $stmt->bind_param("s", $username);
+    $stmt->execute();
+    $result = $stmt->get_result();
+
+    $profilecomments = 0;
+    while($row = $result->fetch_assoc()) {
+        $profilecomments++;
+    }
+    $stmt->close();
+
+    $stmt = $conn->prepare("SELECT * FROM files WHERE author = ? AND status='y'");
+    $stmt->bind_param("s", $username);
+    $stmt->execute();
+    $result = $stmt->get_result();
+
+    $filesuploaded = 0;
+    while($row = $result->fetch_assoc()) {
+        $filesuploaded++;
+    }
+    $stmt->close();
 }
 ?>
\ No newline at end of file