threadr.lostcave.ddnss.de/threadr/board/submit.php

<?php
%REQUIRE_LOGIN%

if (isset($_GET['reply_to'])) {
  $reply_to = $_GET['reply_to'];
} else {
  $reply_to = -1;
}

if ($_POST['title']==="" || $_POST['content']==="") {
  echo "<section><center><h1>Please fill out both the title field and content box.</h1></center></section>";
}

else {
  $error = false;
  $error_message = "";
  if (!$error) {
    $statement = $pdo->prepare("INSERT INTO posts (board_id, user_id, content, title, reply_to) VALUES (:bid, :uid, :content, :title, :replyto)");
    $result = $statement->execute(array('bid'=>$id, 'uid'=>$_SESSION[user_id], 'content'=>$_POST['content'], 'title'=>$_POST['title'], 'replyto'=>$reply_to));
  }
  if (!$result) {
      $error_message = "<p>Error: SQL error.</p><pre>" . $statement->queryString . "</pre><pre>" . $statement->errorInfo()[2] . "</pre>";
  }

  echo "<section><center><h1>Post submitted.</h1></center></section>";
}
?>