feed

status.php

       && getimagesize($_FILES["media"]["tmp_name"]) !== false)
   {
     global $media_path;
-    $media = $media_path . dechex(time());
-    move_uploaded_file($_FILES["media"]["tmp_name"], $media);
+    $media = dechex(time());
+    move_uploaded_file($_FILES["media"]["tmp_name"], $media_path . $media);
   }
 
   $u = database_exec("SELECT `id`, `username` FROM users WHERE `id` = ".
 function status_feed()
 {
   check_token();
-  $page = get_get("page", false);
-  $limit = get_get("limit", false);
-  $sdatabase_exec("SELECT * FROM status ORDER BY id DESC LIMIT :begin, :count",
-    array(":begin" => intval(($page - 1) * $limit), ":count" => $limit));
+  $limit = check_int(get_get("limit", false), 15);
+  if ($limit < 1)
+    $limit = 15;
+  $page = max((check_int(get_get("page", false), 1) - 1), 0) * $limit;
+  $s = database_query("SELECT * FROM status ORDER BY `id` DESC ".
+    "LIMIT $page, $limit");
+  $data = array();
+  global $media_url;
+  while (($u = $s->fetch()) !== false)
+  {
+    $date = new DateTime($u['date']);
+    $data[] = array("id" => intval($u["id"]), "status" => $u["status"],
+    "creation_date" => $date->format(DateTime::ISO8601),
+    "latitude" => $u["latitude"] === null ? null : floatval($u["latitude"]),
+    "longitude" => $u["longitude"] === null ? null : floatval($u["longitude"]),
+    "author_username" => "42",
+    "nb_confirm_up" => intval($u["up"]),
+    "nb_confirm_down" => intval($u["down"]),
+    "media_url" => ($u["media"] !== null ) ? $media_url . $u["media"] : null);
+  }
+  echo json_encode($data);
 }
 ?>