AutoShell

jkghkghkghkghkghkghkghkkghghkkghkgh hgghkghkghghkghhgkhgkghghkkghkhghkgkghkghkgh hjlhlhjhjlhjlhjlhjlhjlhjlhjhjl AutoShell

?? Editing: submit_answers.php

<?php
require_once __DIR__ . '/config.php';
secureSessionStart();
header('Content-Type: application/json');

try {
    // Validate request
    if ($_SERVER['REQUEST_METHOD'] !== 'POST' || $_SERVER['HTTP_X_REQUESTED_WITH'] !== 'XMLHttpRequest') {
        throw new Exception("Invalid request method");
    }

// Get and validate input
    $input = json_decode(file_get_contents('php://input'), true);
    if (json_last_error() !== JSON_ERROR_NONE) {
        throw new Exception("Invalid JSON input");
    }

// Verify CSRF token
    if (empty($input['csrf_token']) || !verifyCsrfToken($input['csrf_token'])) {
        throw new Exception("Invalid CSRF token");
    }

// Validate quiz session
    if (empty($_SESSION['current_quiz']['id']) || 
        empty($input['quiz_id']) || 
        $input['quiz_id'] !== $_SESSION['current_quiz']['id']) {
        throw new Exception("Invalid or expired quiz session");
    }

// Validate answers
    if (empty($input['answers']) || !is_array($input['answers'])) {
        throw new Exception("No answers provided");
    }

// Calculate score
    $score = 0;
    $totalQuestions = count($_SESSION['current_quiz']['questions']);
    $results = [];
    
    foreach ($input['answers'] as $answer) {
        if (!isset($answer['question_id']) || !isset($answer['user_answer'])) {
            continue;
        }
        
        $questionId = (int)$answer['question_id'];
        if ($questionId < 0 || $questionId >= $totalQuestions) {
            continue;
        }
        
        $correctAnswer = $_SESSION['current_quiz']['questions'][$questionId]['answer'];
        $isCorrect = $answer['user_answer'] === $correctAnswer;
        
        if ($isCorrect) {
            $score++;
        }
        
        $results[] = [
            'question_id' => $questionId,
            'question_text' => $_SESSION['current_quiz']['questions'][$questionId]['question'],
            'user_answer' => $answer['user_answer'],
            'correct_answer' => $correctAnswer,
            'is_correct' => $isCorrect
        ];
    }

// Save to database
    $db = getDBConnection();
    $db->begin_transaction();

try {
        // Insert quiz result
        $quizId = $db->real_escape_string($_SESSION['current_quiz']['id']);
        $userIp = $db->real_escape_string($_SERVER['REMOTE_ADDR']);
        $topic = $db->real_escape_string($_SESSION['current_quiz']['topic']);
        
        $insertResult = "INSERT INTO quiz_results 
            (quiz_id, user_ip, topic, score, total_questions, created_at)
            VALUES ('$quizId', '$userIp', '$topic', $score, $totalQuestions, NOW())";
        
        if (!$db->query($insertResult)) {
            throw new Exception("Failed to save quiz results: " . $db->error);
        }
        
        $resultId = $db->insert_id;
        
        // Insert answers
        foreach ($results as $result) {
            $qId = (int)$result['question_id'];
            $qText = $db->real_escape_string($result['question_text']);
            $userAns = $db->real_escape_string($result['user_answer']);
            $correctAns = $db->real_escape_string($result['correct_answer']);
            $isCorrect = $result['is_correct'] ? 1 : 0;
            
            $insertAnswer = "INSERT INTO quiz_answers 
                (result_id, question_id, question_text, user_answer, correct_answer, is_correct)
                VALUES ($resultId, $qId, '$qText', '$userAns', '$correctAns', $isCorrect)";
            
            if (!$db->query($insertAnswer)) {
                throw new Exception("Failed to save answer: " . $db->error);
            }
        }
        
        $db->commit();
        
        // Clear quiz session
        unset($_SESSION['current_quiz']);
        
        echo json_encode([
            'status' => 'success',
            'message' => 'Quiz results saved successfully!',
            'score' => $score,
            'total_questions' => $totalQuestions,
            'percentage' => round(($score / $totalQuestions) * 100),
            'csrf_token' => generateCsrfToken()
        ]);
        
    } catch (Exception $e) {
        $db->rollback();
        throw $e;
    }
    
} catch (Exception $e) {
    error_log("Error in submit_answers.php: " . $e->getMessage());
    http_response_code(400);
    echo json_encode([
        'status' => 'error',
        'message' => $e->getMessage(),
        'csrf_token' => generateCsrfToken()
    ]);
}

Path:

home / dhw4kgxay284 / public_html / php /

?? Editing: submit_answers.php

Path:

?? Upload