<?php
session_start();
include("config.php");
$dbh = new PDO($dbstr);

if (!isset($_POST["desc"]) || !isset($_POST["id"]) || !isset($_POST["depart"])) {
    exit();
}

$id=$_POST["id"];
$desc=$_POST["desc"];
$depart=$_POST["depart"];

if (stripos($desc,"<script")) {
    header("Location: locdisp.php");
    exit();
}

$stm=$dbh->prepare("UPDATE hob_obj SET description = ?, depart = ? WHERE objid = ?");
$stm->execute([$desc, $depart, $id]);

header("Location: objdisp.php");