discussion_comment.php

   1 <?php
   2
   3 include_once("auth.php");
   4 include_once("header.php");
   5
   6 if(!isset($_POST['comment'])) { die("Must Send Comment"); } else { $_POST['comment'] = mysql_real_escape_string($_POST['comment']); }
   7
   8 if(isset($_GET['sched'])) {
   9         $_GET['sched'] = mysql_real_escape_string($_GET['sched']);
  10         $sql = 'insert into discussion_post values ("",'.$user_id.',"",'.$_GET['sched'].',"'.$_POST['comment'].'",NOW())';
  11         $result = mysql_query($sql);
  12
  13         $html = '<meta HTTP-EQUIV="REFRESH" content="0; url=discussion.php?sched='.$_GET['sched'].'">';
  14
  15 } else if(isset($_GET['topic'])) {
  16         $_GET['topic'] = mysql_real_escape_string($_GET['topic']);
  17         $sql = 'insert into discussion_post values ("",'.$user_id.','.$_GET['topic'].',"","'.$_POST['comment'].'",NOW())';
  18         $result = mysql_query($sql);
  19
  20         $html = '<meta HTTP-EQUIV="REFRESH" content="0; url=discussion.php?topic='.$_GET['topic'].'">';
  21
  22 } else { die("Must Send Topic or Assignment Number"); }
  23
  24 echo $html;
  25
  26 ?>