diff options
Diffstat (limited to 'includes/topic_inc.php')
| -rw-r--r-- | includes/topic_inc.php | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/includes/topic_inc.php b/includes/topic_inc.php new file mode 100644 index 0000000..c16a4e0 --- /dev/null +++ b/includes/topic_inc.php @@ -0,0 +1,47 @@ +<?php + +include_once 'db_inc.php'; + +session_start(); + +$sql = "BEGIN WORK;"; +$result = mysqli_query($dbc, $sql); + +if (!$result) { + echo 'An error occurred creating your topic. Try again later'; +} + +$sql = "INSERT INTO topics(topic_subject, topic_date, topic_cat, topic_author) VALUES( +'" . mysqli_real_escape_string($dbc, $_POST['topic_subject']) . "', +NOW(), +" . mysqli_real_escape_string($dbc, $_POST['topic_cat']) . ", +" . $_SESSION['user_id'] .")"; + +$result = mysqli_query($dbc, $sql); + +if (!$result) { + echo 'An error occured while creating your post. Please try again later.' . mysql_error(); + $sql = "ROLLBACK;"; + mysqli_query($dbc, $sql); +} else { + $topic_id = mysqli_insert_id($dbc); + + $sql = "INSERT INTO posts(post_content, post_date, post_topic, post_author) VALUES( + '" . mysqli_real_escape_string($dbc, $_POST['post_content']) . "', + NOW(), + " . $topic_id . ", + " . $_SESSION['user_id'] . ")"; + + $result = mysqli_query($dbc, $sql); + + if (!$result) { + echo 'An error occured while creating your post. Please try again later.' . mysqli_error($dbc); + $sql = "ROLLBACK;"; + mysqli_query($dbc, $sql); + } else { + $sql = "COMMIT;"; + $result = mysqli_query($dbc, $sql); + } +} + +header("Location: ../topic.php?id=" . $topic_id);
\ No newline at end of file |