diff options
Diffstat (limited to 'viewthread.php')
| -rw-r--r-- | viewthread.php | 60 | 
1 files changed, 28 insertions, 32 deletions
diff --git a/viewthread.php b/viewthread.php index d41fb9b..ae08090 100644 --- a/viewthread.php +++ b/viewthread.php @@ -1,6 +1,6 @@  <?php -include_once 'includes/db_inc.php'; -include_once 'model/Thread.php'; +include('includes/db_inc.php'); +include('includes/model/Thread.php');  session_start(); @@ -8,31 +8,31 @@ $current = new Thread();  if (!isset($_GET['id']) || !filter_var($_GET['id'], FILTER_VALIDATE_INT)) {  	http_response_code(404); -	include_once 'templates/404.php'; +	include('includes/templates/404.php');  	die();  } else {  	$result = $current->get_from_database($_GET['id'], $dbc);  	if ($result == 0) {  		http_response_code(404); -		include_once 'templates/404.php'; +		include('includes/templates/404.php');  		die();  	}  }  ?>  <!DOCTYPE html> -<html> +<html lang="en">  <head> -	<title><?= $current->subject; ?> - cflip.net forum</title> -	<link rel="stylesheet" href="styles/style.css"> +    <title><?= $current->subject; ?> - cflip.net forum</title> +    <link rel="stylesheet" href="styles/style.css">  </head>  <body> -	<?php include_once 'templates/header.php';?> -	<h1><?= $current->subject; ?></h1> -	created by <b><?= $current->author->name; ?></b> -	in <b><?= $current->category->name; ?></b> -	<abbr title="<?= date('M d, Y g:ia', strtotime($current->date_created));?>">3 days ago</abbr> +<?php include('includes/templates/header.php'); ?> +<h1><?= $current->subject; ?></h1> +created by <b><?= $current->author->name; ?></b> +in <b><?= $current->category->name; ?></b> +<abbr title="<?= date('M d, Y g:ia', strtotime($current->date_created)); ?>">3 days ago</abbr>  <?php -include_once 'model/User.php'; +include_once('includes/model/User.php');  if (isset($_SESSION['signed_in'])) {  	$user = new User(); @@ -57,32 +57,29 @@ if (isset($_SESSION['signed_in'])) {  	}  }  ?> -	<hr> -	<?php -		$posts = $current->get_posts($dbc); +<hr> +<?php +$posts = $current->get_posts($dbc); -		foreach ($posts as $post) { -			$post->display_content($dbc); -		} -	?> -	<hr> -	<h2>Reply to this thread</h2> -	<form method="post"> -		<textarea name="post_content" rows="10" cols="50"></textarea> -		<br> -		<input type="submit" name="submit"> -	</form> +foreach ($posts as $post) { +	$post->display_content($dbc); +} +?> +<hr> +<h2>Reply to this thread</h2> +<form method="post"> +    <textarea name="post_content" rows="10" cols="50"></textarea> +    <br> +    <input type="submit" name="submit"> +</form>  </body>  </html>  <?php -include_once 'includes/db_inc.php'; -include_once 'includes/functions_insert.php'; -  if ($_SERVER['REQUEST_METHOD'] == 'POST') {  	if (!isset($_SESSION['signed_in'])) {  		echo 'You must be <a href="signin.php">signed in</a> to reply to this thread.';  		return; -	}  +	}  	$post_content = filter_input(INPUT_POST, 'post_content', FILTER_SANITIZE_STRING);  	$user_id = filter_var($_SESSION['user_id'], FILTER_SANITIZE_NUMBER_INT); @@ -93,5 +90,4 @@ if ($_SERVER['REQUEST_METHOD'] == 'POST') {  		insert_post($dbc, $post_content, $current->id, $user_id, $current->category->id);  	}  } -  ?>  | 
