Add/View Comments

   1 <?php 
   2 session_start();
   3 ?>

   1 <?php
   2   // Helpful Functions
   3 
   4   /* 
   5    * Simple function to display input forms for comments. 
   6    * 
   7    * We are just printing/echo'ing some forms. You could change them here.
   8    */
   9 function display_forms() {
  10   echo "<form action='" . $_SERVER['PHP_SELF'] . "' method='post'>\n";
  11   echo "  <fieldset name='comment-forms'>\n";
  12   echo "    <legend>Add a Comment</legend>\n";
  13   echo "    <label for='comment-title'>Title:</label>\n";
  14   echo "    <input type='text' id='comment-title' name='title' maxlength='255' value='" . $_POST['title'] . "'/><br />\n";
  15   echo "    <label for='comment-content'>Comment:</label><br />\n";
  16   echo "    <textarea name='content' id='comment-content' rows='10' cols='40'>" . $_POST['content'] . "</textarea><br />\n";
  17   echo "    <input type='submit' name='submit' value='Add Comment' />\n";
  18   echo "  </fieldset>\n";
  19   echo "</form>\n";
  20 }
  21 
  22 /*
  23  * This displays the comments by reading the comments file for the
  24  * the specific file and prints it out.
  25  */
  26 function display_comments() {
  27   $comment_file = rtrim(__FILE__, '.php') . '.comments.txt';
  28   if (is_file($comment_file)) {
  29     echo file_get_contents($comment_file);
  30   }
  31 }
  32 
  33 
  34 /*
  35  * Adds a comment to the comment file. 
  36  * The comment file is a simple text file in the same directory as the file
  37  * 
  38  * So, if the filename is MyFrameDoc.1.4.html
  39  * In ePublisher we change the extension to .php -> MyFrameDoc.1.4.php
  40  * Which makes the comment file -> MyFrameDoc.1.4.comments.txt
  41  */
  42 function add_comment($title, $content) {
  43   
  44   // Check the session to see if this is a repost by the same user. 
  45   // 
  46   if ($_SESSION['comment-title'] == $title && $_SESSION['comment-content'] == $content) {
  47     return "";
  48   }
  49   
  50   /*
  51    * Create a quick bit of HTML to save in the comment file.
  52    * There should probably be some more checking here but for now it should be ok
  53    * 
  54    * WARNING: Your sys-admin will say this is a security hole. Please listen to him/her 
  55    *          and try to improve things.
  56    */
  57   $new_comment_string = "<div class='comment-block>\n";
  58   $new_comment_string .= "  <h4>" . htmlentities($title) . "</h4>\n";
  59   // making new lines actual line breaks
  60   $new_comment_string .= "  <div class='comment-content'>" . nl2br(htmlentities($content)) . "</div>\n";
  61   $new_comment_string .= "</div>\n";
  62   
  63   // Comment filename is the same as the requested file except with an extension
  64   // of 'comments.txt'
  65   $comment_file = rtrim(__FILE__, '.php') . '.comments.txt';
  66   
  67   // open the comment file for writing only at the beginning, if it is not there create it.
  68   $comment_file_handle = fopen($comment_file, "a+");
  69   if (fwrite($comment_file_handle, $new_comment_string)) {
  70     fclose($comment_file_handle);
  71     $_SESSION['comment-title'] = $title;
  72     $_SESSION['comment-content'] = $content;
  73     return "Comment Added!";
  74   } else {
  75     fclose($comment_file_handle);
  76     return "Error writing comment file. Please contact myemail@somedomain.com.";
  77   }
  78 }
  79 
  80 
  81 /* 
  82  * This is the actual logic of the script.
  83  */
  84 if ($_POST['submit'] == "Add Comment") {
  85   if ($_POST['title'] != '' && $_POST['content'] != '') {
  86     echo add_comment($_POST['title'], $_POST['content']);
  87     display_forms();
  88   } else {
  89     echo "Please fill in the title and the content fields.";
  90     display_forms();
  91   }
  92  } else {
  93   display_forms();
  94  }
  95 display_comments();
  96 ?>