From c53fa9093063661d09d2c62932a433781b8e4194 Mon Sep 17 00:00:00 2001
From: kit <s4119s4119@onmail.com>
Date: Fri, 23 Feb 2024 20:45:08 +0000
Subject: [PATCH] minor fixes

---
 README.md | 1 -
 com.php   | 2 +-
 sub.php   | 3 +++
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index f6b4fe4..4dafff2 100644
--- a/README.md
+++ b/README.md
@@ -22,7 +22,6 @@ this was created on garbage free hosting so it probably works anywhere you can g
 - there's probably some vulnerability that allows code execution
 - comments SUCK!!! they look so awful
 - it uses mysqli instead of something more secure like pdo
-- i think you can post without an account and i forgot to fix that
 - the logout button is always visible even when you log out
 - the navbar buttons are inconsistent
 - the colors are ugly!!!
diff --git a/com.php b/com.php
index 03fb5c1..3211343 100755
--- a/com.php
+++ b/com.php
@@ -1,6 +1,6 @@
 <?php
 
-// this is the script that actually submits the post into the db
+// this is the script that actually submits the comment into the db
 
 session_start();
 include('config.php');
diff --git a/sub.php b/sub.php
index b76dd72..f6613e3 100755
--- a/sub.php
+++ b/sub.php
@@ -18,6 +18,9 @@ if ($_POST['url'] == "") {
 if ($_POST['title'] == "") {
     die('Empty');
 }
+if ($_SESSION['name'] == "") {
+  die('You are not logged in!');
+}
 $sql = "INSERT INTO posts (url, title, poster)
 VALUES ('". $_POST['url']. "', '". $_POST['title'] ."', '".htmlspecialchars($_SESSION['name'], ENT_QUOTES)."')";