Gitlab@Informatics

Skip to content
Snippets Groups Projects
Commit 9e20ea7a authored by 65160023's avatar 65160023
Browse files

Edit add_review.php

parent 7303d669
No related branches found
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
Showing
with 44 additions and 32 deletions
add_review.php
+ 44
− 32
View file @ 9e20ea7a
<?php <?php
error_reporting(E_ALL);
ini_set('display_errors', 1);
include 'components/connect.php'; include 'components/connect.php';
session_start(); // ตรวจสอบว่ามี session หรือไม่
$user_id = $_SESSION['user_id'] ?? ''; // ตรวจสอบว่าผู้ใช้ล็อกอินหรือไม่
if(isset($_GET['get_id'])){ if(isset($_GET['get_id'])){
$get_id = $_GET['get_id']; $get_id = $_GET['get_id'];
}else{ }else{
$get_id = '';
header('location:all_posts.php'); header('location:all_posts.php');
exit();
} }
if(isset($_POST['submit'])){ if(isset($_POST['submit'])){
if(!empty($user_id)){
function create_unique_id(){ if($user_id != ''){
return uniqid();
}
$id = create_unique_id(); $id = create_unique_id();
$title = filter_var($_POST['title'], FILTER_SANITIZE_STRING); $title = $_POST['title'];
$description = filter_var($_POST['description'], FILTER_SANITIZE_STRING); $title = filter_var($title, FILTER_SANITIZE_STRING);
$rating = filter_var($_POST['rating'], FILTER_SANITIZE_STRING); $description = $_POST['description'];
$description = filter_var($description, FILTER_SANITIZE_STRING);
$rating = $_POST['rating'];
$rating = filter_var($rating, FILTER_SANITIZE_STRING);
try {
$verify_review = $conn->prepare("SELECT * FROM `reviews` WHERE post_id = ? AND user_id = ?"); $verify_review = $conn->prepare("SELECT * FROM `reviews` WHERE post_id = ? AND user_id = ?");
$verify_review->execute([$get_id, $user_id]); $verify_review->execute([$get_id, $user_id]);
...@@ -35,13 +31,13 @@ if(isset($_POST['submit'])){ ...@@ -35,13 +31,13 @@ if(isset($_POST['submit'])){
$add_review->execute([$id, $get_id, $user_id, $rating, $title, $description]); $add_review->execute([$id, $get_id, $user_id, $rating, $title, $description]);
$success_msg[] = 'Review added!'; $success_msg[] = 'Review added!';
} }
} catch (PDOException $e) {
die("Error: " . $e->getMessage());
}
}else{ }else{
$warning_msg[] = 'Please login first!'; $warning_msg[] = 'Please login first!';
} }
} }
?> ?>
<!DOCTYPE html> <!DOCTYPE html>
<html lang="en"> <html lang="en">
...@@ -50,13 +46,21 @@ if(isset($_POST['submit'])){ ...@@ -50,13 +46,21 @@ if(isset($_POST['submit'])){
<meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>add review</title> <title>add review</title>
<!-- custom css file link -->
<link rel="stylesheet" href="css/style.css"> <link rel="stylesheet" href="css/style.css">
</head> </head>
<body> <body>
<!-- header section starts -->
<?php include 'components/header.php'; ?> <?php include 'components/header.php'; ?>
<!-- header section ends -->
<!-- add review section starts -->
<section class="account-form"> <section class="account-form">
<form action="" method="post"> <form action="" method="post">
<h3>post your review</h3> <h3>post your review</h3>
<p class="placeholder">review title <span>*</span></p> <p class="placeholder">review title <span>*</span></p>
...@@ -72,11 +76,19 @@ if(isset($_POST['submit'])){ ...@@ -72,11 +76,19 @@ if(isset($_POST['submit'])){
<option value="5">5</option> <option value="5">5</option>
</select> </select>
<input type="submit" value="submit review" name="submit" class="btn"> <input type="submit" value="submit review" name="submit" class="btn">
<a href="view_post.php?get_id=<?= htmlspecialchars($get_id); ?>" class="option-btn">go back</a> <a href="view_post.php?get_id=<?= $get_id; ?>" class="option-btn">go back</a>
</form> </form>
</section> </section>
<!-- add review section ends -->
<!-- sweetalert cdn link -->
<script src="https://cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js"></script>
<!-- custom js file link -->
<script src="js/script.js"></script> <script src="js/script.js"></script>
<?php include 'components/alers.php'; ?>
</body> </body>
</html> </html>
\ No newline at end of file
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment