uploadGJLevel.php

<?php
include "incl/lib/connection.php";
include "incl/lib/mainLib.php";
require_once "incl/lib/injectionlibpatch.php";
$gs = new mainLib();
// check if you're actually from gd
if (!isset($_POST["secret"]) || $_POST["secret"] !== "Wmfd2893gb7") {
    exit("-1");
}
// get level info
$levelName = injectpatch::clean($_POST["levelName"]);
$levelData = $_POST["levelString"];
$levelDesc = injectpatch::clean($_POST["levelDesc"]);
$udid = injectpatch::clean($_POST["udid"]);
$userName = injectpatch::clean($_POST["userName"]);
$length = injectpatch::number($_POST["levelLength"]);
$song = injectpatch::number($_POST["audioTrack"]);


$uid = $gs->userID($udid, $userName);

// insert the level metadata into the database

$query = $db->prepare("INSERT INTO levels (levelName, description, userID, userName, length, officialSong, gameVersion, levelVersion, difficulty, downloads, likes, uploadDate, featured) VALUES (:levelName, :desc, :uid, :userName, :length, :song, 1, 1, 0, 0, 0, NOW(), 0)");
$query->execute([
':levelName' => $levelName,
':desc' => $levelDesc,
':uid' => $uid,
':userName' => $userName,
':length' => $length,
':song' => $song
]);

// get the auto generated level id

$levelID = $db->lastInsertId();

// add the level string to a file with the level id

$lvlfile = "levelData/$levelID";
file_put_contents($lvlfile, $levelData);

echo $levelID;
?>