23 lines
774 B
PHP
23 lines
774 B
PHP
<?php
|
|
%REQUIRE_LOGIN%
|
|
|
|
$title=$_POST['title'];
|
|
$content=$_POST['content'];
|
|
if ($title==="" || $content==="") {
|
|
echo "<section><center><h1>Please fill out both the title field and content box.</h1></center></section>";
|
|
}
|
|
else {
|
|
$error = false;
|
|
$error_message = "";
|
|
if (!$error) {
|
|
$statement = $pdo->prepare("INSERT INTO posts (board_id, user_id, content, title) VALUES (:bid, :uid, :content, :title)");
|
|
$result = $statement->execute(array('bid'=>$id, 'uid'=>$_SESSION[user_id], 'content'=>$content, 'title'=>$title));
|
|
}
|
|
if (!$result) {
|
|
$error_message = "<p>Error: SQL error.</p><pre>" . $statement->queryString . "</pre><pre>" . $statement->errorInfo()[2] . "</pre>";
|
|
}
|
|
|
|
echo "<section><center><h1>Post submitted.</h1></center></section>";
|
|
}
|
|
?>
|