CIS444_Project/new_post.php at master · jhanlon8/CIS444_Project · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
<?php
	session_set_cookie_params(30 * 60, "/; samesite=Strict", $_SERVER['HTTP_HOST'], 1, 0);
	session_start();

	if (!isset($_SESSION["user"])){
		header("location:login.php");
		exit();
	}
?>


<!DOCTYPE html>
<!--
Project Name: Cougar Rescue Forum
Course: CIS444
Description: This file is the html for the new post/reply page.
			 The course and topic are prefilled according to the post or
			 subforum that the user has clicked either "new post" or "reply" from.
-->
<html lang="en" class="hidden-subforum">

	<head>
		<title>Cougar Rescue Forum</title>
		<meta charset="utf-8" />
		<link rel="icon" href="images/cr_logo.png" type="image/x-icon" />
		<script type="text/javascript" src="nav.js"></script>
		<link rel="stylesheet" href="cougar_rescue.css" />

		<script type="text/javascript" src="new_post.js"></script>
	</head>

		<body id="new-post" class="pagestyle" onload="checkForum();" >

			<div id="navlist" class="navlist">
				<div>
					<img class="logo" src="images/cr_logo_plain.png" alt="Cougar Rescue Forum Logo" />
				</div>

				<form id="logoutForm" method="post" action="logout.php">
						<input name="logout" aria-label="logout" type="submit" class="logoutNav" value="Logout"/>
				</form>
				<a href="search.php">Search</a>
				<a href="view_profile.php">Profile</a>
				<a href="main.php">Home</a>

			</div>

			<div id="nPost" class="nPost">
				<form id="new-post-form" method="post">
					<div class="create"><h1 class="postheader">Create New Post/Reply</h1></div>
					<hr class="break">


					<div class="table">
						<div  class="class floatleft">Class:</div>
						<div id="course-name"  class="classes floatleft">

						</div>
					</div>

					<div class="table">

						<div  class="topic floatleft">Topic: </div>
						<div id="course-forum" class="topics floatleft">

						</div>
					</div>

					<br />
					<br />
					<div class="table">
						<div class="title floatleft">Title:</div>
						<div class="titleText floatleft">
							<input aria-label="user enters their title" type="text" name="TextTitle" placeholder="Title" id="TextTitle" required />
						</div>
					</div>
					<br />
					<br />

					<div class="table">
						<div class="text floatleft">Description:</div>
						<div class="userText floatleft">
							<textarea  aria-label="user types their post/reply here" rows="8" cols="80" name="UsersText"
							placeholder="Type your post or reply here..." id="UsersText" class="postdescription"  required ></textarea>
						</div>
					</div>
					<input aria-label="submit button" value="Submit" class="submit adminlogin" type="submit" name="sbutton"
					id="subButton"/>
				</form>
			</div>


		<?php
			//$db = mysqli_connect("localhost", "root", "", "cis444");
			$db = mysqli_connect("db", "root", "test", "myDb");

			//$db = mysqli_connect("db", "group3", "g5tw9ShSexHH", "group3");
			if (mysqli_connect_errno())
			{
				print "Connect failed: " . mysqli_connect_error();
				exit();
			}


			if (isset($_POST['sbutton']))
			{


				$title = addslashes($_POST['TextTitle']);

				$description = addslashes($_POST['UsersText']);

				//when the subforum URL is 0 then it is a new post with no replies  //DONT THINK THIS IS CORRECT
				if(!isset($_GET["postid"]))
				{
					//Create query
					$query = "INSERT INTO Posts (subType, crsNumber, title, content, postDate, postStatus, userEmail)
					VALUES ('". $_GET["subforum"] . "','" .  $_GET["course"] . "','" . $title . "','" .  $description . "', NOW(), NULL,'" . $_SESSION["user"] . "');";

				}
				else {
					//print "in else";
					//Create query
					$query = "INSERT INTO Replies (postID, subType, crsNumber, replyTitle, replyContent, replyTime, replyStatus, replyAuthor)
					VALUES (" . $_GET["postid"] . ",'" . $_GET["subforum"] . "','" .  $_GET["course"] . "','" . $title . "','" .  $description . "', NOW(), NULL,'" . $_SESSION["user"] . "');";
				}
				print $query;
				//Execute queries
				//$result = mysqli_query($db, $query1);

				$result = mysqli_query($db, $query);

				if (!$result) {
					print '<script type="text/javascript"> alert("Error: the query could not be executed."' . mysqli_error() . ');</script>';
					exit();
				}
				else {
					print '<script type="text/javascript">redirect();</script>';

				}

			}
			mysqli_close($db);

		?>

	</body>
</html>