Kryptronic Software Support Forum

-- 
-- Table structure for table `cmt_post`
-- 

CREATE TABLE `cmt_post` (
  `post_id` int(5) NOT NULL auto_increment,
  `p_name` varchar(40) NOT NULL,
  `dt` date NOT NULL,
  `name` varchar(25) NOT NULL,
  `email` varchar(50) NOT NULL,
  `dtl` text NOT NULL,
  `status` varchar(4) NOT NULL default 'ns',
  UNIQUE KEY `post_id` (`post_id`,`p_name`)
) ENGINE=InnoDB DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;

<? 
$proddisp = $this->globals('ecom.prod_proddetail');
$xid      = $proddisp['id'];
$p_name   = $this->xhtml_encode($xid);
$query="select name, dtl, dt from cmt_post where p_name='$p_name' and status='apv' order by dt LIMIT 10";
$result=mysql_query($query);
$num_results = mysql_num_rows($result); 
if ($num_results > 0){ 
echo "<table width='400' border='0' cellspacing='0' cellpadding='1'>";
echo "__________________________________________________________________________";
while($row=mysql_fetch_array($result)){ $dtl=nl2br($row['dtl']);
echo "<tr bgcolor='#f1f1f1'><td>$row[name]</td><td align=right>".date("m-d-Y",strtotime($row['dt']))."</td></tr>";
echo "<tr><td  colspan=2>$dtl<hr /></td></tr>";
}
echo "</table>";
}
else
{ 
echo "There are no comments about this product yet.\r\n\r\n";
} 

?>

<? 
$proddisp = $this->globals('ecom.prod_proddetail');
$xid      = $proddisp['id'];
$p_name   = $this->xhtml_encode($xid);
$app       = $this->globals('khxc_display.app');

echo "\n\n";
echo "__________________________________________________________________________\n\n";

echo "<table width='400' border='0' cellspacing='0' cellpadding='1'>
<form method=post action=''><input type=hidden name=todo value=post_comment><input type=hidden name=p_name value=$p_name><tr bgcolor='#f1f1f1'><td>Name</td><td><input type=text name=name></td></tr><tr ><td>Email</td><td><input type=text name=email>(Please enter your user account email)</td></tr><tr bgcolor='#f1f1f1'><td colspan=2><textarea name=dtl rows=3 cols=50></textarea></td></tr>
<tr ><td colspan=2 align=left><input class='khxc_formbutton' input type=submit value='Post Comment'></td></tr>
</table></form>
Only registered users may post a comment about a product.
";

?>

<? 
@$todo=$_POST['todo'];
if(isset($todo) and $todo=="post_comment"){

$p_name=$_POST['p_name'];
$p_name=mysql_real_escape_string($p_name);
$name=$_POST['name'];
$name=mysql_real_escape_string($name);
$email=$_POST['email'];
$email=mysql_real_escape_string($email);
$dtl=$_POST['dtl'];
$dtl=mysql_real_escape_string($dtl);

$query="select id FROM khxc_users where id='$email'";
$result=mysql_query($query);
$row = mysql_fetch_array($result);


$status = "OK";
$msg="";

// if userid is less than 3 char then status is not ok
if( strlen($name) <3 or strlen($name) > 25){
$msg=$msg."Your Name should be more than 2 and less than 25 char length<BR>";
$status= "NOTOK";}                         

if( strlen($dtl) <3 ){
$msg=$msg."Your comment should be more than 3 char length<BR>";
$status= "NOTOK";}                         

if ($row<1) {
$msg=$msg."Sorry you don't seem to be a registered user.  Please create an account and try again.";
$status= "NOTOK";}

if($status<>"OK"){ 
echo "<font face='Verdana' size='2' color=red>$msg</font>";
}else{ // if all validations are passed.
$dt=date("Y-m-d"); 
$status='apv'; // Change this to apv if you want all messages to be automatically approved once posted.
$query=mysql_query("insert into cmt_post(p_name,dt,name,email,dtl,status) values('$p_name','$dt','$name','$email','$dtl','$status')");
echo mysql_error();
echo "<font face='Verdana' size='2' color=green>Thank you for posting your comment<br></font>";
}
}

?>

<p class="khxc_storehead">User Comments About This Product</p>
<?php

$ns  = $this->globals('khxc.namespace');


if ($ns == 'prodshow') 
{ 
$this->include_file($app,'cmt-display.php'); // To display the comments
$this->include_file($app,'cmt-formck.php'); // Processing the form data
$this->include_file($app,'cmt-form.php'); // To display the form.
}

?>