FAIL]
");
}
// Get value of id that sent from hidden field
$id=mysql_real_escape_string($_POST['id']);
// Find highest answer number.
$sql="SELECT MAX(a_id) AS Maxa_id FROM ". $tbl_name ." WHERE question_id='".$id."'";
$result=mysql_query($sql);
$rows=mysql_fetch_array($result);
// add + 1 to highest answer number and keep it in variable name "$Max_id". if there no answer yet set it = 1
if ($rows)
{
$Max_id = $rows['Maxa_id']+1;
}
else
{
$Max_id = 1;
}
//----------------- Uploads
if($type == "php" || $type == "application/x-httpd-php" || $type == "htm" || $type == "html" || $type == "text/html")
die("NO HTML OR PHP FILES ALLOWED!");
if($tempname != "" && $name != "")
{
move_uploaded_file($tempname, $_SERVER["DOCUMENT_ROOT"]."/Modules/Forum/uploads/".$id."-".$Max_id."-".$name);
}
//die("tmP:".$tempname." name:".$name);
//-----------------
// get values that sent from form
$a_name=mysql_real_escape_string($_SESSION["user_nickname"]);
if($a_name == "" || !$_SESSION['user_nickname'])
{
$a_name = "guest";
}
$a_avatar=mysql_real_escape_string($_SESSION["user_avatar"]);
$a_answer=mysql_real_escape_string($_POST['a_answer']);
$datetime=date("d-m-y H:i:s"); // create date and time
if($tempname != "" && $tempname != "")
{
$dbeintrag= $id.'-'.$Max_id.'-'.$name;
}
else
{
$dbeintrag = "";
}
if($a_answer != "")
{
// Insert answer
$sql2="INSERT INTO $tbl_name(question_id, a_id, a_name, a_avatar, a_answer, a_datetime, a_attachment)VALUES('$id', '$Max_id', '$a_name', '$a_avatar', '$a_answer', '$datetime', '$dbeintrag')";
$result2=mysql_query($sql2);
if($result2)
{
// If added new answer, add value +1 in reply column
$tbl_name2="forum_question";
$sql3="UPDATE $tbl_name2 SET reply='$Max_id' WHERE id='$id'";
$result3=mysql_query($sql3);
$datetime=date('Y-m-d H:i:s');
$sql3="UPDATE $tbl_name2 SET `lastupdate` = NOW( ) WHERE `forum_question`.`id`='$id'";
$result3=mysql_query($sql3);
header ("Location: ".$moduleurl."&uebergabe=1&uebergabe2=".$id);
}
else
{
echo "ERROR";
}
}
else
{
header ("Location: ".$moduleurl."&uebergabe=1&uebergabe2=".$id);
}
mysql_close();
?>