From c3261c820c157c0975c5fc9bc3cdb7b3ac785dac Mon Sep 17 00:00:00 2001
From: Jakob <jakob.matzkowski@gmx.de>
Date: Sun, 8 Mar 2020 16:57:47 +0100
Subject: [PATCH] submit posts

---
 threadr/board/submit.php | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/threadr/board/submit.php b/threadr/board/submit.php
index 3939d9f..582f78f 100644
--- a/threadr/board/submit.php
+++ b/threadr/board/submit.php
@@ -1,4 +1,15 @@
 <?php
-  %REQUIRE_LOGIN%
-  /*submit.php*/
+%REQUIRE_LOGIN%
+  
+$pdo = new PDO('mysql:host=localhost;dbname=web', 'webstuff', 'Schei// auf Pa$$w0rter!')
+
+$error = false;
+$error_message = "";
+if (!$error) {
+  $statement = $pdo->prepare('INSERT INTO posts (board_id, user_id, title, content,) VALUES (:bid,:uid,:title,:content)');
+  $result = $statement->execute(array('bid'=>$id, 'uid'=>$_SESSION[user_id], 'title'=>$_POST[title], 'content'=>$_POST[content]));
+  if (!$result) {
+    $error_message = "<p>Error: SQL error.</p><pre>" . $statement->queryString . "</pre><pre>" . $statement->errorInfo()[2] . "</pre>";
+  }
+}
 ?>
\ No newline at end of file