<?php
session_start();
include("config.php");
$dbh = new PDO($dbstr);

if (!isset($_POST["desc"]) || !isset($_POST["id"]) || !isset($_POST["img"])) {
    exit();
}

$id = $_POST["id"];
$desc = $_POST["desc"];
$img = $_POST["img"];

if (stripos($desc,"<script")) {
    header("Location: locdisp.php");
    exit();
}

$stm = $dbh->prepare("UPDATE hob_lieux SET description = ?, img = ? WHERE lid = ? ");
$stm->execute([$desc,$img, $id]);

header("Location: locdetail.php");