Wall/wall_process.php at master · mepps/Wall · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
<?php
	session_start();
	require_once("include/connection.php");
	$query = "SELECT * FROM users WHERE email = '{$_SESSION['user']['email']}';";
	$user_info = fetch_record($query);
	$_SESSION['user_id'] = $user_info["id"];

if ($_POST['action'] == "post")
	{
	postMessage($_POST['message_post']);
	unset($_POST['action']);
	}
if ($_POST['action'] == 'log_off')
{
	session_destroy();
	header("location: index.php");
}
if ($_POST['action'] == 'comment')
{
	postComment($_POST['comment']);
}
if ($_POST['action'] == 'delete_message')
{
	deleteMessage($_POST['delete_id']);
}
if ($_POST['action'] == 'delete_comment')
{
	deleteComment($_POST['delete_id']);
}
function postMessage($user_message)
{
	if(empty($user_message))
	{
		$_SESSION['post_error'] = "Did you mean to enter a message?";
		header('location: wall.php');
	}
	else
	{
		$query = "INSERT INTO messages (message, user_id, created_at) VALUES ('". mysql_real_escape_string($user_message) . "'," .  $_SESSION['user_id'] . ", NOW());";
		mysql_query($query);
		header("location: wall.php");
	}
}
function postComment($user_comment)
{
	if (empty($user_comment))
	{
		header('location: wall.php');
	}
	else
	{
		$query = "INSERT INTO comments (comment, user_id, message_id, created_at) VALUES ('" . mysql_real_escape_string($user_comment) . "'," .  $_SESSION['user_id']

			. ", " . $_POST['comment_id'] . ", NOW());";
		mysql_query($query);
		header("location: wall.php");
	}
}
function deleteMessage($message_id)
{
	$query = "DELETE FROM comments where message_id = " . (int)$message_id . ";";
	mysql_query($query);
	$query = "DELETE FROM messages WHERE id=" . (int)$message_id . ";";
	mysql_query($query);
	header('location: wall.php');
}
function deleteComment($comment_id)
{
	$query = "DELETE FROM comments where id = " . (int)$comment_id . ";";
	mysql_query($query);
	header('location: wall.php');
}
?>