SRM/WebPage/place/postactions.php

<?php
if($place == "assets" && $sched == "save"){
    if(isset($newscriptid)){
        $schedtime = trim($_POST["datetime"]);
        $addsched = "INSERT INTO schedules (assetid, scriptid, runtime, userid) values (?, ?, ?, ?)";
        if($stmt = mysqli_prepare($link, $addsched)){
            mysqli_stmt_bind_param($stmt, "iisi", $asset, $newscriptid, $schedtime, $userid);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=assets&asset=$asset&do=scripts");
                exit;
            }else{
                echo "Oops! Something went wrong. Please try again later.";
            }
        }
    }
}elseif($place == "scripts" && $do == "scriptedit"){
    if(isset($script)){
        $theshell = trim($_POST["shell"]);
        $data = trim($_POST["script"]);
        $scriptname = trim($_POST["scriptname"]);
        $editscript = "UPDATE scripts set name = ?, shell = ?, data = ? where id = $script";
        if($stmt = mysqli_prepare($link, $editscript)){
            mysqli_stmt_bind_param($stmt, "sss", $scriptname, $theshell, $data);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=scripts&script=$script");
                exit;
            }else{
                echo "Oops! Something went wrong. Please try again later.";
            }
        }
    }
}elseif($place == "scripts" && $do == "newscript"){
    if(isset($script)){
        $theshell = trim($_POST["shell"]);
        $data = trim($_POST["script"]);
        $scriptname = trim($_POST["scriptname"]);
        $addscript = "INSERT into scripts (name, shell, data) values (?, ?, ?)";
        if($stmt = mysqli_prepare($link, $addscript)){
            mysqli_stmt_bind_param($stmt, "sss", $scriptname, $theshell, $data);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=scripts&script=$script");
                exit;
            }else{
                echo "Oops! Something went wrong. Please try again later.";
            }
        }
    }
}