comments.php

<?
/*---------------------------------------------------------------*/
/*-------------- PHP code DB Connection & Posts -----------------*/
/*------------------- ©409523(2009/2010) ------------------------*/
/*---------------------------------------------------------------*/
 
//Define database details fill in the blanks with your own details
define("HOST", " "); //Hostname
define("USER", " ");  //Username
define("PASSWORD", " ");  //Password
define("DB", " ");  //Database Name
 
//FUNCTIONS
 
//Connect to the Database
function connect($db, $user, $password)
{
  $connect = @mysql_connect($db, $user, $password);
  if (!$connect)
  die("Could not connect: ".mysql_error());
  else
  {
		  $db = mysql_select_db(DB);
		  if(!$db)
			  die("Could not select database: ".mysql_error());
		  else
     return $connect;
	 }
}
//Get Exisitng Content
function getContent($connect, $num)
{
  $sqlQuery = @mysql_query("SELECT date, name, comment FROM yourDatabaseTableName ORDER BY date DESC LIMIT ".$num, $connect);
	  if(!$sqlQuery)
		  die("Error: ".mysql_error());
	  else
    return $sqlQuery;
}
//Insert Data Into Database
function insertMessage($user, $message)
{
  $query = sprintf("INSERT INTO yourDatabaseTableName(name, comment) VALUES('%s', '%s');", mysql_real_escape_string(strip_tags($user)), mysql_real_escape_string(strip_tags($message)));
	 $sqlQuery = @mysql_query($query);
	 if(!$sqlQuery)
		 die("Error: ".mysql_error());
	 else
		 return $sqlQuery;
}
 
    //Manage requests 
    if(!$_POST['action'])
    {
      header ("Location: index.html"); 
    }
      else
      {
        $connect = connect(HOST, USER, PASSWORD);
        switch($_POST['action']){
         //Case Updating the code
         case "update":
         $sqlQuery = getContent($connect, 20);
         while($row = mysql_fetch_array($sqlQuery))
         {
           $result .= "<li><img src=\"/images/commentIcon.png\" alt=\"\" /> <span class=\"commentName\">".$row['name']."&nbsp;</span><span class=\"commentDate\"> &#64;".$row['date']."</span><br /><br /><hr /><br /><span class=\"commentText\"> ".$row['comment']."</span><br /><br /></li>";
         }
         echo $result;
         break;
         //Case Inserting Data
         case "insert":
         echo insertMessage($_POST['name'], $_POST['comment']);
         break;
      }
      mysql_close($connect);
    }
 
?>