OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	06/17/2025 10:17:24 AM	rwxrwxr-x
📄 bindex.php	5.85 KB	05/19/2025 10:07:19 AM	rw-r--r--
📄 createForm.php	4.21 KB	05/19/2025 10:07:19 AM	rw-r--r--
📄 function.php	1.11 KB	05/19/2025 10:07:19 AM	rw-r--r--
📄 index.php	5.67 KB	05/19/2025 10:07:19 AM	rw-r--r--
📄 save-form.php	2.13 KB	05/19/2025 10:07:19 AM	rw-r--r--

Editing: save-form.php

<?php
// save-form.php
$data = json_decode(file_get_contents('php://input'), true);

// Check if data is received
if (!isset($data['formType']) || !isset($data['fields'])) {
    echo json_encode(['error' => 'Invalid data']);
    exit;
}

// Database connection
$host = 'localhost';
$user = 'root';
$password = '';
$dbname = 'your_database'; // Replace with your actual DB name

$conn = new mysqli($host, $user, $password, $dbname);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

$formType = $conn->real_escape_string($data['formType']);

$tableName = 'form_' . strtolower(str_replace(' ', '_', $formType));

$sql = "CREATE TABLE IF NOT EXISTS `$tableName` (id INT AUTO_INCREMENT PRIMARY KEY";

// Loop through the fields and dynamically create the table columns
foreach ($data['fields'] as $field) {
    $fieldName = $conn->real_escape_string($field['name']);
    $fieldType = $field['type'];

// Ensure fieldType is either text or varchar for simplicity
    if ($fieldType == 'password' || $fieldType == 'email') {
        $sql .= ", `$fieldName` VARCHAR(255)";  // We use VARCHAR for general types
    } else {
        $sql .= ", `$fieldName` TEXT";  // Default to TEXT for other field types
    }
}

// Close the table definition
$sql .= ")";

if ($conn->query($sql) === TRUE) {
   
    $fieldNames = [];
    $fieldValues = [];
    foreach ($data['fields'] as $field) {
        $fieldNames[] = "`" . $conn->real_escape_string($field['name']) . "`";
        $fieldValues[] = "'" . $conn->real_escape_string($field['value']) . "'";
    }

$fieldNames = implode(", ", $fieldNames);
    $fieldValues = implode(", ", $fieldValues);

// Insert form data into the created table
    $insertSql = "INSERT INTO `$tableName` ($fieldNames) VALUES ($fieldValues)";
    if ($conn->query($insertSql) === TRUE) {
        echo json_encode(['success' => 'Form submitted and saved successfully']);
    } else {
        echo json_encode(['error' => 'Error saving form data']);
    }
} else {
    echo json_encode(['error' => 'Error creating table']);
}

$conn->close();
?>