newPost.php

<!DOCTYPE html>
<html lang="en">
<!-- SMIPO Create new thread
	@author James

 -->
<?php
require("connect.php");
$thread_id = $_GET['thread'];
$req = $_GET['req'];
$topic = $_GET['topic'];
$sql = 'SELECT * FROM Topics WHERE topic_id = ' . $thread_id;
$result = $db->query($sql);
$row = $result->fetchRow();
$board_id = $row['board_id'];
?>
<head>

    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="">
    <meta name="author" content="">

    <title>New Post - SMIPO</title>

    <!-- Bootstrap Core CSS -->
    <link href="css/bootstrap.min.css" rel="stylesheet">

    <!-- Custom CSS -->
    <link href="css/smipo.css" rel="stylesheet">

    <!-- Fonts -->
    <link href="http://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800" rel="stylesheet" type="text/css">
    <link href="http://fonts.googleapis.com/css?family=Josefin+Slab:100,300,400,600,700,100italic,300italic,400italic,600italic,700italic" rel="stylesheet" type="text/css">

    <!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->
    <!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
    <!--[if lt IE 9]>
        <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
        <script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script>
    <![endif]-->

</head>

<body>

    <?php require_once("navigation.php"); ?>

    <div class="container">

        <div class="row">
            <div class="box">
                <div class="col-lg-12">
                    <hr>
                    <h2 class="intro-text text-center"> 
						<?php echo "<p>Posting to the " . $row['topic_subject'] . " thread</p><br />";?>
                    </h2>
                    <hr>
                </div>
					<div class="row">
					<!-- main content area -->
						<div id="boards" >
							<center>
							<?php
							// flagMail(the thread, the topic name, link to topic)
							// mails people subscribed to this thread
							function flagMail($th_id, $top) {
								require("connect.php");
								// which users are subscribed to this thread
								$userArray = array();
								$inc = 0;
								$flagSQL = "SELECT * FROM Flagged WHERE t_id=$th_id";
								$flagResult = $db->query($flagSQL);
								while ($row = $flagResult->fetchRow()) {
									$uid = $row['u_id'];
									$userSQL = "SELECT * FROM members WHERE member_id=$uid";
									$userResult = $db->query($userSQL);
									$userRow = $userResult->fetchRow();
									$userArray[$inc] = $userRow['email'];
									$inc ++;
								}
								// send e-mails
								foreach ($userArray as &$us) {
									$mailString = "Hello $us,\n A fellow SMIPO member has replied to $top on the SMIPO forums.";
									$mailString = wordwrap($mailString, 70);
									mail($us, "A new reply on $top thread on the SMIPO forums", $mailString);
								}
							} 
							
							
							
								if($req == 'new') {
									// request now equal to post
									echo "<form method='POST' action='newPost.php?thread=" . $thread_id . "&req=pos&topic=$topic'>";
									echo "<br>Post Data<br>";
									echo "<textarea name='reply' cols='75' rows='10'></textarea><br><br>";
									echo "<input type='submit' value='Submit'>";
									echo "</form>";
									echo "<div class='clearfix'></div>";
								}
								else {
									/* Get topic info from post and user info from session variables */
									$reply = $_POST['reply'];
									$username = $_SESSION['user'];
									$user_id = $_SESSION['user_id'];
									$logged_in = $_SESSION['logged_in'];
									$status = $_SESSION['status'];
									/* sanitize */
									$reply = htmlspecialchars($reply);
									$reply = stripslashes($reply);
									$reply = mysql_real_escape_string($reply);
									/* user is logged in and allowed to post */
									if ($logged_in == true && $status >= 0) {			
										/* insert first reply into Replies table */
										$insert_sql = "INSERT INTO Replies (reply_content, reply_date, reply_topic, reply_by, thread_id)" .
													  " VALUES ('$reply', CURDATE(), '$topic', $user_id, $thread_id)";
									    $db->query($insert_sql);
										/* end insert */
										flagMail($thread_id, $topic);
										header("Location: thread.php?board=$board_id&thread=$thread_id");
									}
									/* user is not allowed */
									else {
										echo "Not allowed to post";
									}
								}
							?>
							</center>
							
						</div>
						
					</div>
					
				</div>
				
                <div class="clearfix"></div>
            </div>
        </div>		
		

    </div>
    <!-- /.container -->

    <footer>
        <div class="container">
            <div class="row">
                <div class="col-lg-12 text-center">
                    <p>Copyright &copy; Radford SMIPO 2016</p>
                </div>
            </div>
        </div>
    </footer>

    <!-- jQuery -->
    <script src="js/jquery.js"></script>

    <!-- Bootstrap Core JavaScript -->
    <script src="js/bootstrap.min.js"></script>

</body>

</html>