Create a new topic

'; if (!isset($_SESSION['signed_in'])) { echo 'You must be signed in to create a topic.'; } else { if ($_SERVER['REQUEST_METHOD'] != 'POST') { $sql = "SELECT cat_id, cat_name, cat_description FROM categories"; $result = mysqli_query($dbc, $sql); if (!$result) { echo 'Error while selecting from database. Please try again later.'; } else { if (mysqli_num_rows($result) == 0) { echo 'There are currently no categories to post to.'; } else { echo '






'; } } } else { $sql = "BEGIN WORK;"; $result = mysqli_query($dbc, $sql); if (!$result) { echo 'An error occurred creating your topic. Try again later'; } else { $sql = "INSERT INTO topics(topic_subject, topic_date, topic_cat, topic_author) VALUES( '" . mysqli_real_escape_string($dbc, $_POST['topic_subject']) . "', NOW(), " . mysqli_real_escape_string($dbc, $_POST['topic_cat']) . ", " . $_SESSION['user_id'] .")"; $result = mysqli_query($dbc, $sql); if (!$result) { echo 'An error occured while creating your post. Please try again later.' . mysql_error(); $sql = "ROLLBACK;"; mysqli_query($dbc, $sql); } else { $topic_id = mysqli_insert_id($dbc); $sql = "INSERT INTO posts(post_content, post_date, post_topic, post_author) VALUES( '" . mysqli_real_escape_string($dbc, $_POST['post_content']) . "', NOW(), " . $topic_id . ", " . $_SESSION['user_id'] . ")"; $result = mysqli_query($dbc, $sql); if (!$result) { echo 'An error occured while creating your post. Please try again later.' . mysqli_error($dbc); $sql = "ROLLBACK;"; mysqli_query($dbc, $sql); } else { $sql = "COMMIT;"; $result = mysqli_query($dbc, $sql); echo 'You have successfully created your new topic.'; } } } } } echo ''; include 'footer.php'; ?>