isLoggedIn())
{
apidb_header("Please login");
echo "To submit a comment for an application you must be logged in. Please login now or create a new account.","\n";
exit;
}
if(!is_numeric($_REQUEST['versionId']))
{
errorpage('Internal Database Access Error');
exit;
}
if(!is_numeric($_REQUEST['thread']))
{
$_REQUEST['thread'] = 0;
}
############################
# ADDS COMMENT TO DATABASE #
############################
if(isset($_REQUEST['body']))
{
$oComment = new Comment();
$oComment->create($_REQUEST['subject'], $_REQUEST['body'], $_REQUEST['thread'], $_REQUEST['versionId']);
redirect(apidb_fullurl("appview.php?versionId=".$oComment->iVersionId));
}
################################
# USER WANTS TO SUBMIT COMMENT #
################################
else
{
apidb_header("Add Comment");
$mesTitle = "Post New Comment";
if($_REQUEST['thread'] > 0)
{
$result = query_appdb("SELECT * FROM appComments WHERE commentId = ".$_REQUEST['thread']);
$ob = mysql_fetch_object($result);
if($ob)
{
$mesTitle = "Replying To ... $ob->subject\n";
$originator = $ob->userId;
echo html_frame_start($ob->subject,500);
echo htmlify_urls($ob->body), "
\n";
echo html_frame_end();
}
}
echo "