Create blogs.php
<?php
/*-----------------------------------------------------
-- Mono Country v1.0 BETA
-- A product of DBS-entertainment
-- Copyright held 2005 by Dabomstew
-- INDEX.php
-----------------------------------------------------*/
include(DIRNAME(__FILE__) . '/globals.php');
switch($_GET['action'])
{
case "userblog":
userblog();
break;
case "postblog":
postblog();
break;
case "comment":
comment();
break;
case "submitcomment":
submitcomment();
break;
case 'delete':
delete();
break;
default:
index();
break;
}
function index()
{
global $ir,$c,$userid,$h;
print"<center><font size=3><a href=blogs.php?action=userblog&ID=$userid>Your Blogs</a></font></center></br></br>";
print"<form action='blogs.php?action=postblog' method='post'>
<table width=75% border=2><tr><th colspan=2>Post New Blog</th></tr> <tr>
<td>Subject:</td> <td><input type='text' rows='1' cols='50' name='subject' value='{$_GET['ID']}' /></td></tr><tr>
<td>Main Text:</td>
<td><textarea rows=8 cols=50 name='blog'></textarea></td></tr><tr> <td colspan=2><center><input type='submit' value='Post Blog' /></center></td></tr></table></form>";
}
function postblog()
{
global $ir,$c,$userid,$h;
if(!$_POST['blog'] || !$_POST['subject'])
{
die("You did not fill out the required fields");
}
$msg=str_replace(array("\n"),array("<br />"),htmlentities($_POST['blog']));
$subject=str_replace(array("\n"),array("<br />"),htmlentities($_POST['subject']));
mysql_query("INSERT INTO blogs VALUES ('',$userid,unix_timestamp(),'$subject','$msg')",$c) or die(mysql_error());
print"Blog posted.";
}
function comment()
{
global $ir,$c,$userid,$h;
print"<form action='blogs.php?action=submitcomment' method='post'>
<table width=75% border=2><tr><th colspan=2>Add Comment To Blog</th></tr> <tr>
<td>Blog To Comment:</td> <td><input type='text' name='blogid' value='{$_GET['ID']}' /></td></tr><tr>
<td>Comment:</td>
<td><textarea rows=5 cols=40 name='comment'></textarea></td></tr><tr> <td colspan=2><center><input type='submit' value='Post Comment' /></center></td></tr></table></form>";
}
function submitcomment()
{
global $ir,$c,$userid,$h;
if(!$_POST['comment'] || !$_POST['blogid'])
{
die("You did not fill out the required fields");
}
$msg=str_replace(array("\n"),array("<br />"),htmlentities($_POST['comment']));
$to= (int) $_POST['blogid'];
mysql_query("INSERT INTO blogcomments VALUES ('',$to,$userid,unix_timestamp(),'$msg')",$c) or die(mysql_error());
print"Comment posted.";
}
function delete()
{
global $ir,$c,$userid,$h;
$commentss=mysql_query("SELECT * FROM blogcomments WHERE bcmtID={$_GET['ID']}",$c);
$comment=mysql_fetch_array($commentss);
$comments=mysql_query("SELECT * FROM blogs WHERE blogID={$comment['bcmtBLOG']}",$c);
$blog=mysql_fetch_array($commentss);
if($blog['blogUSERID'] != $userid && $ir['user_level'] < 2)
{
die("You don't have the power to delete this comment.");
}
mysql_query("DELETE FROM blogcomments WHERE bcmtBLOG={$_GET['ID']} AND bcmtID={$_GET['comment']}",$c);
print"Comment deleted.";
}
function userblog()
{
global $ir,$c,$userid,$h;
$blahj=mysql_query("SELECT * FROM users WHERE userid={$_GET['ID']}", $c);
$r=mysql_fetch_array($blahj);
print"<table width=90% border=1><tr><th>{$r['username']}'s Blogs</th></tr></table>";
$blahd=mysql_query("SELECT * FROM blogs WHERE blogUSERID={$_GET['ID']} ORDER BY blogTIME DESC limit 5", $c);
while($blog=mysql_fetch_array($blahd))
{
$posted=date('F j, Y, g:i:s a',$blog['blogTIME']);
print"<table width=90% border=1><tr><td width=30%><center><i>{$r['username']} [{$r['userid']}]</br>$posted</i></center></td><td><center><u><i>{$blog['blogSUBJECT']}</i></u></td></tr><tr><td colspan=2>{$blog['blogTEXT']}</td></tr></table><table width=90% border=1><tr><th colspan=2>Blog Comments <A href=blogs.php?action=comment&ID={$blog['blogID']}>[Add Comment]</a></th></tr>";
$blah=mysql_query("SELECT * FROM blogcomments WHERE bcmtBLOG={$blog['blogID']} ORDER BY bcmtTIME DESC limit 5", $c);
while($cmnt=mysql_fetch_array($blah))
{
$they=mysql_query("SELECT * FROM users WHERE userid={$cmnt['bcmtFROM']}",$c);
$them=mysql_fetch_array($they);
$sent=date('F j, Y, g:i:s a',$cmnt['bcmtTIME']);
print"<tr><td width=25%><b>{$them['username']} [{$them['userid']}]</br></br></b>$sent</td><Td>{$cmnt['bcmtTEXT']}</td>";
if($ir['userid'] == $r['userid'] || $ir['user_level'] > 1)
{
print"<td width=10%><a href=blogs.php?action=delete&ID={$blog['blogID']}&comment={$cmnt['bcmtID']}>Delete</a></td>";
}
print"</tr>";
}
print"</table></br></br>";
}
}
$h->endpage();
?>
Create siteblogs.php
$blahj=mysql_query("SELECT * FROM users WHERE userid={$_GET['ID']}", $c);
<?php
include(DIRNAME(__FILE__) . '/globals.php');
{
print"
<table width=90% border=1>
<tr>
<th>Blogs</th>
</tr>
</table>
";
$blahd=mysql_query("SELECT * FROM blogs WHERE blogID>0 ORDER BY blogTIME DESC limit 20", $c);
while($blog=mysql_fetch_array($blahd))
{
$blahj=mysql_query("SELECT * FROM users WHERE userid={$blog['blogUSERID']}", $c);
$r=mysql_fetch_array($blahj);
$posted=date('F j, Y, g:i:s a',$blog['blogTIME']);
print"
<table width=90% border=1>
<tr>
<td width=30%>
<center><i>{$r['username']} [{$r['userid']}]</br>$posted</i></center>
</td>
<td>
<center><u><i>{$blog['blogSUBJECT']}</i></u></center>
</td>
</tr>
<tr>
<td colspan=2>{$blog['blogTEXT']}</td>
</tr>
</table>
<table width=90% border=1>
<tr>
<th colspan=2>Blog Comments
<A href=blogs.php?action=comment&ID={$blog['blogID']}>[Add Comment]</a>
</th>
</tr>
";
$blah=mysql_query("SELECT * FROM blogcomments WHERE bcmtBLOG={$blog['blogID']} ORDER BY bcmtTIME DESC limit 5", $c);
while($cmnt=mysql_fetch_array($blah))
{
$they=mysql_query("SELECT * FROM users WHERE userid={$cmnt['bcmtFROM']}",$c);
$them=mysql_fetch_array($they);
$sent=date('F j, Y, g:i:s a',$cmnt['bcmtTIME']);
print"
<tr>
<td width=25%><b>{$them['username']} [{$them['userid']}]</br></br></b>$sent</td>
<td>{$cmnt['bcmtTEXT']}</td>
";
if($ir['userid'] == $r['userid'] || $ir['user_level'] > 1)
{
print"
<td width=10%>
<a href=blogs.php?action=delete&ID={$blog['blogID']}&comment={$cmnt['bcmtID']}>Delete</a>
</td>
";
}
print"
</tr>
";
}
print"
</table></br></br>
";
}
}
$h->endpage();
?>
That should work, just make sure you add your links.
Let me know if you have problems.
Voice4Vision