personalWebsite2016Version/reply.php at master · bsp3ars/personalWebsite2016Version · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
<!DOCTYPE html>
<html>
<head>
<title>Reply</title>
<meta charset="UTF-8">
<link rel="shortcut icon" href="photos/smalllogo.png" type="image/png">
<meta name="description"
	content="The Reply page for Brandon Spears, a web designer
		in the Game Programming and Web Applications Class at the Miami Valley Career Technology Center.">
<meta name="keywords"
	content="MVCTC, GW, Miami Valley CTC, Web Applications, Game Programming,
		Student Portfolio work of Brandon Spears">
<meta name="author" content="Brandon Spears">
<meta name="robots" content="index,follow" />
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" type="text/css" media="screen"
	href="css/styleSheet.css" />
<link rel="stylesheet" href="css/printstyles.css" type="text/css"
	media="print" />

<script>
			function openNav() {
				document.getElementById("mySidenav").style.width = "75%";
			}

			function closeNav() {
				document.getElementById("mySidenav").style.width = "0";
			}
		</script>
</head>
<body>
	<div class="container">
			<?php
			require ('inc/nav.php');
			require ('connection.php');
			?>
			<article>
			<h2>Post</h2>
			<?php

			if (isset ( $_SESSION ['userID'] )) {

				$postID = htmlspecialchars ( $_GET ['postID'] );

				$sql = 'SELECT userID, title, textfield, date_format(time, "%m/%d/%Y at %l:%i %p") FROM posts WHERE postID = ' . $postID . ' and approval = "Y"';
				if ($result = $dConnect->query ( $sql )) {
					while ( $row = $result->fetch_assoc () ) {
						echo "<div class='initialpost'>
						<h2>" . $row ['title'] . "</h2>
						<p>" . $row ['textfield'] . "</p>
						<h6>Posted On: " . $row ['date_format(time, "%m/%d/%Y at %l:%i %p")'] . " <br>
						Post By:";
						$userID = $row ['userID'];
						$userSQL = 'SELECT * FROM users WHERE userID = "' . $userID . '"';
						$userresult = $dConnect->query ( $userSQL );
						$userrow = $userresult->fetch_assoc ();
						echo " " . $userrow ['fName'] . " " . $userrow ['lName'] . "
						</h6></div>";
					}
				}
				echo "<h2>Replies</h2>";

				$sql = 'SELECT replyID, userID, postID, textField, date_format(time, "%m/%d/%Y at %l:%i %p") FROM reply WHERE postID = ' . $postID . ' and approval = "Y" ORDER BY replyID ASC LIMIT 25';
				if ($result = $dConnect->query ( $sql )) {
					$count = 1;
					while ( $row = $result->fetch_assoc () ) {
						echo "<div class='post'>
						<p>" . $count . ". " . $row ['textField'] . "</p>
						<h6>Posted On: " . $row ['date_format(time, "%m/%d/%Y at %l:%i %p")'] . " <br>
						Post By:";
						$userID = $row ['userID'];
						$userSQL = 'SELECT * FROM users WHERE userID = "' . $userID . '"';
						$userresult = $dConnect->query ( $userSQL );
						$userrow = $userresult->fetch_assoc ();
						echo " " . $userrow ['fName'] . " " . $userrow ['lName'] . "
						</h6></div>";
						$count ++;
					}
				}

				if (isset ( $_POST ['content'] )) {

					$approval = "N";
					$content = htmlspecialchars ( $_POST ['content'] );

					$query = 'INSERT INTO reply (userID, postID, textfield, approval) VALUES (?, ?, ?, ?)';
					$insertCheck = $dConnect->prepare ( $query );
					$insertCheck->bind_param ( 'iiss', $_SESSION ['userID'], $postID, $content, $approval );

					if ($insertCheck = $insertCheck->execute ()) {
						header ( "Refresh: 2; url=reply.php?postID=" . $_GET ['postID'] . "" );

						echo "<p>Your reply was added, congratulations!  It must be verified before it can be viewed.";
					} else {
						echo "Failed to insert the thread. ERROR: " . mysqli_connect_error ();
						require ('replyForm.php');
					}
				} else {
					require ('replyForm.php');
				}
			} else {
				echo "<p>Please log in to post to the discussion board</p>";
			}

			?>
		</article>
		<?php
		require ("inc/footer.php");
		?>
		</div>
</body>
</html>