<?php
session_start();
include("config.php");
$dbh = new PDO($dbstr);

if (!isset($_POST["desc"]) || !isset($_POST["depart"])) {
    exit();
}

$desc=$_POST["desc"];
$depart=$_POST["depart"];

if (stripos($desc,"<script")) {
    header("Location: locdisp.php");
    exit();
}

$stm=$dbh->prepare("INSERT INTO hob_obj(description, depart) VALUES (? , ?)");
$stm->execute([$desc, $depart]);

header("Location: objdisp.php");