<?php
ob_start();
session_start();
date_default_timezone_set("Asia/Jakarta");
include('../config/koneksi.php');
$sql_0 = mysqli_query($conn,"SELECT * FROM `tb_seo` WHERE cuid = 1") or die(mysqli_error());
$s0 = mysqli_fetch_array($sql_0);
$urlweb = $s0['urlweb'];
$urlwebs = $s0['urlweb'];

    if($_POST){
        $data = array('?php','select * from','join','inner join','left join','where = ','where=','disctint','union','<script>','</script>');
        $ipaddress = $_POST['ipaddress'];
        $sessionids = $_POST['sessionid'];
        $ceksession = mysqli_query($conn,"SELECT * FROM `tb_chat` WHERE sessionid = '$sessionids'") or die(mysqli_error());
        $cs = mysqli_num_rows($ceksession);
        if($cs == 0){
            $sessionid = session_id();
        }
        else{
            session_regenerate_id();
            $sessionid = session_id();
        }
        $userid = mysqli_real_escape_string($conn,$_POST['userid']);
        $content = strtolower($_POST['content']);
        $newdesk = str_replace($data,"", $content);
        $date = date('Y-m-d H:i:s');
        sleep(1);
        $cekChat = mysqli_query($conn,"SELECT * FROM `tb_chat` WHERE ipaddress = '$ipaddress' AND sessionid = '$sessionid'") or die(mysqli_error());
        $cc = mysqli_num_rows($cekChat);
        if($cc == 0){
            $insert_chat = mysqli_query($conn,"INSERT INTO `tb_chat` (`sessionid`, `ipaddress`, `userid`, `adminid`, `content`, `created_date`, `status`) VALUES ('$sessionid','','$userid', '','$newdesk','$date',0)") or die(mysqli_error());
        }
        else {
            $insert_chat = mysqli_query($conn,"INSERT INTO `tb_chat_respon` (`sessionid`, `ipaddress`, `userid`, `content`, `jenis`, `created_date`, `status`) VALUES ('$sessionid','','$userid','$newdesk', 0,'$date',0)") or die(mysqli_error());
        }  
    }
?>