Subversion Repositories cheapmusic

<?php
include_once('php/clsLibGTIN.php');
include_once('php/constants.php');

error_reporting(E_ALL);

  // add new entry to wishlist
function addWishlist($wlArr) {
    $conn = MySessionHandler::getDBSessionId();

    $created = mysqli_real_escape_string($conn, time());
    $modified = $created;

    $uid = $_SESSION['sessData']['userID'];
    $mid = mysqli_real_escape_string($conn, $wlArr->{'mid'});
    $title = mysqli_real_escape_string($conn, $wlArr->{'title'});
    $artist = mysqli_real_escape_string($conn, $wlArr->{'artist'});
    $format = 'Any';
    $price = 'NULL';
    $thumbnail = mysqli_real_escape_string($conn, $wlArr->{'thumbnail'});

    $sql = "INSERT
            INTO wishlist
            (id, created, modified, uid, mid, title, artist, format, price, thumbnail)
            VALUES (NULL, '$created', '$modified', '$uid', '$mid', '$title', '$artist', '$format', '$price', '$thumbnail')";

    if ($result = mysqli_query($conn, $sql)) {
        $_SESSION['wishlistAdd'] = "<div class=\"alert alert-success alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>$title by $artist added to the wishlist.</div>";
    } else {
        $error = mysqli_errno($conn);
        if ($error == 1062) {
            $_SESSION['wishlistAdd'] = "<div class=\"alert alert-warning alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>$title by $artist already on the wishlist.</div>";
        } else {
            $_SESSION['wishlistAdd'] = "<div class=\"alert alert-danger alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>Error. Could not add $title by $artist to the wishlist.</div>";
            error_log("MySQL Read Wishlist SQL: " . $sql);
            error_log("MySQL Write Wishlist Error: " . mysqli_error($conn) . " (" . $error . ")");
        }
    }

    return;
}

function checkWishlist($mid) {
    $conn = MySessionHandler::getDBSessionId();

    $uid = $_SESSION['sessData']['userID'];

    $sql = "SELECT id
            FROM wishlist
            WHERE uid = '$uid' and mid = '$mid'";

    if ($result = mysqli_query($conn, $sql)) {
        if (mysqli_num_rows($result) > 0) {
            return true;
        }
    } else if (mysqli_errno($conn)) {
       error_log("MySQL Read Wishlist SQL: " . $sql);
       error_log("MySQL Read Wishlist Error: " . mysqli_error($conn) . " (" . mysqli_errno($conn) . ")");
       return true;
    }

    return false;
}