<?php
	$tx=$_POST['tx'];
	$aa=$_POST['aa'];
	$vs=$_POST['vs'];
	include("./conn.php");
	@mysql_select_db('silata', $db) or errmsg();
	function errmsg()
		{
			print("Няма връзка с базата данни!");
			exit;
		}
	function sql_safe($text)
		{
			return mysql_real_escape_string(trim($text));
		}
	function html_safe($text)
		{
			return htmlspecialchars(trim($text), ENT_QUOTES);
		}
	$tx=html_safe($tx);
	$tx=sql_safe($tx);
	$aa=html_safe($aa);
	$aa=sql_safe($aa);
	$vs=html_safe($vs);
	$vs=sql_safe($vs);
	if (!empty($_SERVER['HTTP_CLIENT_IP']))
		{
			$ip=$_SERVER['HTTP_CLIENT_IP'];
		}
	elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))
		{
			$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
		}
	else
		{
			$ip=$_SERVER['REMOTE_ADDR'];
		}
	$check_enter=0;
	$res=mysql_query("SELECT ip FROM `settings` WHERE `ip` = '".$ip."' LIMIT 1", $db);
		while ($rows=mysql_fetch_row($res))
			{
				$check_enter++;
			}
	if ($check_enter==0)
		{
			$res=mysql_query("INSERT INTO `settings` (`i` , `ip` , `tx` , `aa` , `vs`) VALUES (NULL ,  '".$ip."',  '".$tx."',  '".$aa."',  '".$vs."')", $db);
		}
	else
		{
			$res=mysql_query("UPDATE `settings` SET `tx`='".$tx."', `aa`='".$aa."', `vs`='".$vs."' WHERE `ip`='".$ip."'", $db);
		}
	if ($res)
		{
			print("<script>window.location.href='/?saved'; </script>");
		}
	else
		{
			print("<script>window.location.href='/?error'; </script>");
		}
?>