<?php
session_start();
include("flash.php");

if (!isset($_SESSION["uid"]) || $_SESSION["uid"] == 0) {
    flash("Vous avez été déconnecté, veuillez vous authentifier de nouveau");
    header("Location: start.php");
    exit();
}

include("config.php");
$dbh=new PDO($dbstr);

if (!isset($_POST["joke"])) {
    header("Location: edit.php");
    exit();
}

$joke=$_POST["joke"];

if (preg_match("/<script/i",$joke)) {
    header("Location: edit.php");
    exit();
}

$stm=$dbh->prepare("INSERT INTO jokes_jokes(uid,ts,joke) VALUES(?,?,?)");
$stm->execute(array($_SESSION["uid"],time(),$joke));
header("Location: edit.php");