<?php require "../php/header.php"; $key = stripslashes($HTTP_POST_VARS['key']); $comment = stripslashes($HTTP_POST_VARS['comment']); $rating = stripslashes($HTTP_POST_VARS['rating']); if (isset($HTTP_POST_VARS['key']) && isset($HTTP_POST_VARS['comment']) && $userdata['session_logged_in'] == true && $key != "") { $comment = trim($comment); $len = strlen($comment); $info = getArchivedGameInfo($key); if ($info != null && $len > 0) { $pid = $userdata['user_id']; $comment = mysql_escape_string($comment); $commented = logHasCommented($key, $pid); $key = mysql_escape_string($key); if ($commented == true || $rating < 1 || $rating > 10) { $sqlRating = 0; } else { $sqlRating = "'" . mysql_escape_string($rating) . "'"; } $time = time(); $sql = "insert into log_comment (lc_key, lc_timestamp, lc_pid, lc_rating, lc_comment) values ('{$key}', NOW(), '{$pid}', {$sqlRating}, '{$comment}')"; mysql_query($sql); logCalculateRating($key); } else { if ($len == 0) { $error = "You must enter a comment"; } else { $error = "Map does not exist any more"; } }
* * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. */ ?> <table width=100%><tr><td><div class="subheading">Add Review/Comment</div></td></tr> <tr><td><div class="bodytext"> <form action="logaddcomment.php" method="post"> Please enter your comment below<br> <table> <tr><td class="bodytext" valign="top">Rating:</td><td class="bodytext"> <?php if (logHasCommented($info->getKey(), $userdata['user_id']) == true) { echo "Sorry you can only add one rating."; } else { echo "<select name='rating'>"; $count = 1; while ($count < 11) { echo "<option value='{$count}'>{$count}</option>"; $count++; } echo "</select>"; } ?> </td></tr> <tr><td class="bodytext" valign="top">Comments:</td><td><textarea name='comment' rows=5 cols=40></textarea></td></tr> </table><br> <input type="submit" value="Submit review"><input type="hidden" name="key" value="<?php