You need the exact DOI or it fails

classes/mysql.class.php

 <?
+
 //-----------------------------------------------------------------------------------
 /////////////////////////////////////////////////////////////////////////////////////
 /*//-- MySQL wrapper class ----------------------------------------------------------
   USE THIS FUNCTION EVERY TIME YOU USE AN UNVALIDATED USER-SUPPLIED VALUE IN
   A DATABASE QUERY!
 
-
 //--------- Advanced usage ---------------------------------------------------------
 
 * The conventional way of retrieving a row from a result set is as follows:
 
   Of course, this example is contrived, but you get the point.
 
-
 -------------------------------------------------------------------------------------
 *///---------------------------------------------------------------------------------
 
   die('Mysqli Extension not loaded.');
 }
 
-//Handles escaping
+// Handles escaping
 function db_string($String, $DisableWildcards = false) {
   global $DB;
-  //Escape
+  // Escape
   $String = $DB->escape_str($String);
-  //Remove user input wildcards
+  // Remove user input wildcards
   if ($DisableWildcards) {
     $String = str_replace(array('%','_'), array('\%','\_'), $String);
   }
   return $Array;
 }
 
-//TODO: revisit access levels once Drone is replaced by ZeRobot
+// @todo Revisit access levels once Drone is replaced by ZeRobot
 class DB_MYSQL {
   public $LinkID = false;
   protected $QueryID = false;
       $this->QueryID = mysqli_stmt_get_result($this->StatementID);
 
       if (DEBUG_MODE) {
-        // in DEBUG_MODE, return the full trace on a SQL error (super useful
-        // for debugging). do not attempt to retry to query
+        // In DEBUG_MODE, return the full trace on a SQL error (super useful
+        // For debugging). do not attempt to retry to query
         if (!$this->QueryID) {
           echo '<pre>' . mysqli_error($this->LinkID) . '<br><br>';
           debug_print_backtrace();
   }
 
   /*
-   * returns an integer with the number of rows found
-   * returns a string if the number of rows found exceeds MAXINT
+   * Returns an integer with the number of rows found
+   * Returns a string if the number of rows found exceeds MAXINT
    */
   function record_count() {
     if ($this->QueryID) {
   }
 
   /*
-   * returns true if the query exists and there were records found
-   * returns false if the query does not exist or if there were 0 records returned
+   * Returns true if the query exists and there were records found
+   * Returns false if the query does not exist or if there were 0 records returned
    */
   function has_results() {
     return ($this->QueryID && $this->record_count() !== 0);
     return mysqli_get_host_info($this->LinkID);
   }
 
-  // You should use db_string() instead.
+  // You should use db_string() instead
   function escape_str($Str) {
     $this->connect(0);
     if (is_array($Str)) {
 
   /**
    * This function determines whether the last query caused warning messages
-   * and stores them in $this->Queries.
+   * and stores them in $this->Queries
    */
   function warnings() {
     $Warnings = [];
       $e = mysqli_get_warnings($this->LinkID);
       do {
         if ($e->errno == 1592) {
-          // 1592: Unsafe statement written to the binary log using statement format since BINLOG_FORMAT = STATEMENT.
+          // 1592: Unsafe statement written to the binary log using statement format since BINLOG_FORMAT = STATEMENT
           continue;
         }
         $Warnings[] = 'Code ' . $e->errno . ': ' . display_str($e->message);

sections/upload/upload_handle.php

     $Cache->increment('stats_group_count');
 
     // Add screenshots
+    // @todo Clear DB_MYSQL::exec_prepared_query() errors
     $Screenshots = explode("\n", $T['Screenshots']);
     $Screenshots = array_map('trim', $Screenshots);
 
     $Screenshots = array_filter($Screenshots, function ($s) {
         return preg_match('/^'.DOI_REGEX.'$/i', $s);
-        #return preg_match('/^'.IMAGE_REGEX.'$/i', $s);
     });
 
     $Screenshots = array_unique($Screenshots);
         (GroupID, UserID, Time, Image)
       VALUES (?, ?, NOW(), ?)", $GroupID, $LoggedUser['ID'], $Screenshot);
         foreach ($Screenshots as $Screenshot) {
+            $DB->db_string($Screenshot); # Maybe unnecessary
             $DB->exec_prepared_query();
         }
     }