Ok, I fixed
that as well,
but I'm still
getting the
same error
(only now for
line 24). Here
is the entire
code. I had to
hand-type it
from this site
to my text
editor as my
Copy/Paste
wasn't working
for some
reason. I'm
sure there are
some more
errors in
there, but
I've looked it
over three
times today and
have found
none. Maybe
I'm
overlooking
something?
Code:
<?
//connect to
your
database
//query
comments for
this page of
this article
$inf =
"SELECT *
FROM
'chinako_comme
nts' WHERE
page =
'".strip
slashes($_SERVE
R['REQUEST_URI
'])."'
ORDER BY time
DESC";
$info =
mysql_query($in
f);
if(!$info) die
(mysql_error())
;
$info_rows =
mysql_num_rows
($info);
if($info_rows
> 0) {
echo
'<h5>Com
ments:</h5&g
t;';
echo
'<table
width="95
%">';
while($info2 =
mysql_fetch_obj
ect($info))
{
echo
'<tr>';
echo
'<td>&q
uot;'.stripsla
shes
($info2->sub
ject).'"
by: <a
href="'.
$info2->cont
act.'"&g
t;'.stripslash
es($info2->u
sername).'<
/a></td&g
t;<td><
;div
align="ri
ght">
@
'.date('h:i:s
a',
$info2->time
).' on
'.$info2->d
ate.'</div&
gt;</td>
';
echo
'</tr>&l
t;tr>';
echo '<td
colspan="
2">'.
stripslashes($i
nfo2->commen
t).'</td>
;';
echo
'</tr>'
;}
}//end while
echo
'</table>
;';
echo '<hr
width="95
%"
noshade>';<
br />
} else echo
'No comments
for this page.
Feel free to be
the first
<br>';
if(isset($_POST
['submit']))
{
if(!addslashes
($_POST
['username'])
)
die('<u>
ERROR</u>
you must enter
a username to
add a
comment.');
if(!addslashes
($_POST
['contact']))
die('<u>
ERROR:</u>
; enter contact
method in
contact
field.');
if(!addslashes
($_POST
['subject']))
die('<u>
ERROR:</u>
; enter a
subject to your
comment);
if(!addslashes
($_POST
['comment']))
die('<u>
ERROR:</u>
; cannot add
comment if you
do not enter
one!?);
//this is for a
valid
contact
if(substr($_PO
ST
['contact'],0
,7) !=
'mailto:'
&&
!strstr($_POST
['contact'],
'//')) {
if(strstr
($_POST['conta
ct'],'@'))
$_POST['conta
ct'] =
"http://
".$_POST[
'contact'].&q
uot;";
} //end valid
contact
//try to
prevent
multiple posts
and
flooding...
$c =
"SELECT *
from
'comments'
WHERE ip =
'".
$_SERVER['REMO
TE_ADDR'].&qu
ot;'";
$c2 =
mysql_query($c)
;
while($c3 =
mysql_fetch_obj
ect($c2)) {
$difference =
time() -
$c3->time;
if($difference
< 300)
die('<u>
ALERT:</u>
;
'.$c3->user
name.', You
have already
commented
earlier; if you
have a
question, try
the
forum!<br>
;');
} //end
while
//add
comment
$q
="INSERT
INTO
'comments'
(article_id,
page, date,
time, username,
ip, contact,
subject,
comment) VALUES
('".
$_GET['id'].
"',
'".$_POS
T['page'].&q
uot;',
'".$_POS
T['date'].&q
uot;',
'".$_POS
T['time'].&q
uot;',
'".addsl
ashes(htmlspeci
alchars($_POST[
'username']))
."',
'".$_SER
VER['REMOTE_AD
DR']."'
,
'".addsl
ashes(htmlspeci
alchars($_POST[
'contact'])).
"',
'".addsl
ashes(htmlspeci
alchars($_POST[
'subject'])).
"',
'".addsl
ashes(htmlspeci
alchars(n12br($
_POST['comment
'])))."
')";
$q2 =
mysql_query($q)
;
if(!$q2)
die(mysql_error
());
//refresh page
so they can see
new comment
header('Locati
on: http://' .
$_SERVER['HTTP
_HOST'] .
$_POST['page'
] .
"#comment
s");
} else {
//display
form
?>
<form
name="com
ments"
action="&
lt;?
$_SERVER['PHP_
SELF'];
?>"
method="p
ost"><
br />
<input
type="hid
den"
name="pag
e"
value="&l
t;? echo
($_SERVER['REQ
UEST_URI']);
?>">
;
<input
type="hid
den"
name="dat
e"
value="&l
t;? echo
(date("F
j, Y."));
?>">
;
<input
type="hid
den"
name="tim
e"
value="&l
t;? echo
(time());
?>">
;
<table
width="90
%"
border="0
"
cellspacing=&q
uot;0"
cellpadding=&q
uot;0">
;
<tr>
<td><
div
align="ri
ght">U
sername:
</div><
;/td>
<td><
input
name="use
rname"
type="tex
t"
size="30
"
value="&
quot;></t
d>
</tr>
<tr>
<td><
div
align="ri
ght">C
ontact:
</div><
;/td>
<td><
input
type="tex
t"
name="con
tact"
size="30
"
value="&
quot;>
<i>(email
or
url)</i>&
lt;/td>
</tr>
<td><
div
align="ri
ght">S
ubject:
</div><
;/td>
<td><
input
type="tex
t"
name="sub
ject"
size="30
"
value="&
quot;></t
d>
</tr>
<tr>
<td><
div
align="ri
ght">C
omment:
</div><
;/td>
<td><
textarea
name="com
ment"
cols="45
"
rows="5&
quot;
wrap="VIR
TUAL">
</textarea&g
t;</td>
</tr>
<tr>
<td><
/td>
<td
colspan="
2"><
;input
type="res
et"
value="Re
set
Fields"&g
t;
<input
type="sub
mit"
name="sub
mit"
value="Ad
d
Comment"&
gt;</td><
br />
</tr>
</table>
</form><
br />
<?
} //end
else
?>
