1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38
| if(isset($_POST['cmd']) && $_POST['cmd']=="creer"){
$tmp[0] = addslashes(strip_tags($_POST['sujet']));
$tmp[1] = trim($conceptRTEvalue);
$tmp[2] = $_POST['id_forum'];
$tmp[3] = $_POST['parent'];
// Verification de l'existence du forum et non-verrouillé
$sql="SELECT forum_statut_id FROM forum WHERE forum_statut_id=1 AND id_forum=".$tmp[2]."";
$res=sql_query($sql);
if(sql_num_rows($res)!=1) {
redirection("index.php");
exit;
}
// Verification de l'existence du parent et non-verrouillé
if(!empty($tmp[3])){
$sql="SELECT forum_statut_id FROM forum_post WHERE forum_statut_id=1 AND id_forum_post=".$tmp[3]."";
$res=sql_query($sql);
if(sql_num_rows($res)!=1) {
redirection("index.php");
exit;
}
}else{
// Si pas de parent, on prend la valeur courante de l'ID
$tmp[3] = "currval('forum_post_id_forum_post_seq'::text)";
}
$sql="INSERT INTO forum_post (forum_post_sujet, " .
" forum_post_message," .
" forum_post_parent," .
" forum_statut_id," .
" id_forum," .
"id_membre," .
"ip_creat,ip_last) VALUES ('".$tmp[0]."','".$tmp[1]."',".$tmp[3].",1,".$tmp[2].",".$_SESSION['id'].",'".$_SERVER['REMOTE_ADDR']."','".$_SERVER['REMOTE_ADDR']."')";
sql_query($sql);
redirection("index.php");
exit; |
Partager