typicalname0 / 4grounds

func/func.php

<script type='text/javascript' src='//www.midijs.net/lib/midi.js'></script>
<?php
require(__DIR__ . "/../vendor/autoload.php");

define("DEBUG_MODE", true);
session_start();
if(defined("DEBUG_MODE") && DEBUG_MODE) {
    ini_set('display_errors', 1);
    ini_set('display_startup_errors', 1);
    error_reporting(E_ALL);
}

function validateCSS($validate) {
	$DISALLOWED = array("<?php", "?>", "behavior: url", ".php", "@import", "@\import", "@/import"); 

	$validated = str_replace($DISALLOWED, "", $validate);
    return $validated;
}
function validateMarkdown($comment, $type = "comment") {
	$comment = htmlspecialchars($comment);
	$Parsedown = new Parsedown();
	$Parsedown->setSafeMode(true);

	if ($type === "profile") {
		return $Parsedown->parse($comment);
	} else {
		return $Parsedown->line($comment);
	}
}


function validateCaptcha($privatekey, $response) {
	$responseData = json_decode(file_get_contents('https://www.google.com/recaptcha/api/siteverify?secret='.$privatekey.'&response='.$response));
	return $responseData->success;
}

function requireLogin() {
	if (!isset($_SESSION['user'])) {
		header("Location: /login.php?r_login"); die();
	}
}

function getGroup($id, $conn) {
	$stmt = $conn->prepare("SELECT * FROM `groups` WHERE `id` = ?");
	$stmt->bind_param("i", $id);
	$stmt->execute();
	$result = $stmt->get_result();
	if ($result->num_rows === 0) return 'error';
	return $result->fetch_assoc();
}

function getID($user, $connection) {
	$stmt = $connection->prepare("SELECT * FROM users WHERE username = ?");
	$stmt->bind_param("s", $user);
	$stmt->execute();
	$result = $stmt->get_result();
	if($result->num_rows === 0) return 'error';
	while($row = $result->fetch_assoc()) {
		$id = $row['id'];
	} 
	$stmt->close();
	return $id;

The variable $id does not seem to be defined for all execution paths leading up to this point.

}

function getName($id, $connection) {
	$stmt = $connection->prepare("SELECT * FROM users WHERE id = ?");
	$stmt->bind_param("s", $id);
	$stmt->execute();
	$result = $stmt->get_result();
	if($result->num_rows === 0) return('error');
	while($row = $result->fetch_assoc()) {
		$name = htmlspecialchars($row['username']);
	} 
	$stmt->close();
	return $name;

The variable $name does not seem to be defined for all execution paths leading up to this point.

}

function getPFP($user, $connection) {
	$stmt = $connection->prepare("SELECT * FROM users WHERE username = ?");
	$stmt->bind_param("s", $user);
	$stmt->execute();
	$result = $stmt->get_result();
	if($result->num_rows === 0) return('error');
	while($row = $result->fetch_assoc()) {
		$pfp = htmlspecialchars($row['pfp']);
	} 
	$stmt->close();
	return $pfp;

The variable $pfp does not seem to be defined for all execution paths leading up to this point.

}

function checkIfFriended($friend1, $friend2, $connection)
{
	$stmt = $connection->prepare("SELECT * FROM `friends` WHERE reciever = ? AND sender = ? OR reciever = ? AND sender = ?");
	$stmt->bind_param("ssss", $friend1, $friend2, $friend2, $friend1);
	$stmt->execute();
	$result = $stmt->get_result();
	if($result->num_rows === 1){ return true; }
	return false;
}

function isAdmin($user, $conn) {
    $stmt = $conn->prepare("SELECT * FROM users WHERE username = ?");
    $stmt->bind_param("s", $user);
    $stmt->execute();
    $result = $stmt->get_result();
    if($result->num_rows === 0) return false;
    while($row = $result->fetch_assoc()) {
        if($row['rank'] == "Admin" || $row['rank'] == "Owner") {
            return true;
        } else {
            return false;
        }
    }
    $stmt->close();
}

function getUser($id, $connection) {
	$userResult = array();
	$stmt = $connection->prepare("SELECT * FROM users WHERE id = ?");
	$stmt->bind_param("i", $id);
	$stmt->execute();
	$result = $stmt->get_result();
	if($result->num_rows === 0) echo('That user does not exist.');
	while($row = $result->fetch_assoc()) {
		$userResult['username'] = $row['username'];
		$userResult['id'] = $row['id'];
		$userResult['date'] = $row['date'];
		$userResult['bio'] = $row['bio'];
		$userResult['css'] = $row['css'];
		$userResult['pfp'] = $row['pfp'];
		$userResult['badges'] = explode(';', $row['badges']);
		$userResult['music'] = $row['music'];
		$userResult['rank'] = $row['rank'];
		$userResult['currentgroup'] = $row['currentgroup'];
	}
	$stmt->close();

	$stmt = $connection->prepare("SELECT * FROM gamecomments WHERE author = ?");
	$stmt->bind_param("s", $userResult['username']);
	$stmt->execute();
	$result = $stmt->get_result();

	$userResult['comments'] = 0;
	while($row = $result->fetch_assoc()) {

The assignment to $row is dead and can be removed.

		$userResult['comments']++;
	}
	$stmt->close();

	$stmt = $connection->prepare("SELECT * FROM comments WHERE author = ?");
	$stmt->bind_param("s", $userResult['username']);
	$stmt->execute();
	$result = $stmt->get_result();

	$userResult['profilecomments'] = 0;
	while($row = $result->fetch_assoc()) {
		$userResult['profilecomments']++;
	}
	$stmt->close();

	$stmt = $connection->prepare("SELECT * FROM files WHERE author = ? AND status='y'");
	$stmt->bind_param("s", $userResult['username']);
	$stmt->execute();
	$result = $stmt->get_result();

	$userResult['filesuploaded'] = 0;
	while($row = $result->fetch_assoc()) {
		$userResult['filesuploaded']++;
	}
	$stmt->close();
	return $userResult;
}
?>