blog.php Kommentarprüfung

<?php
    }
    }
    if(isset($_GET['action']) AND 'commentpost' == $_GET['action']) {
    require_once('core/include/recaptchalib.php');
  $privatekey = "6Lfpvs4SAAAAAGH7bNbO-ItVzjlWbuouO-JfuGGk";
  $resp = recaptcha_check_answer ($privatekey,
                                $_SERVER["REMOTE_ADDR"],
                                $_POST["recaptcha_challenge_field"],
                                $_POST["recaptcha_response_field"]);

  if (!$resp->is_valid) {
    // What happens when the CAPTCHA was entered incorrectly
    die ("The reCAPTCHA wasn't entered correctly. Go back and try it again." .
         "(reCAPTCHA said: " . $resp->error . ")");
  } else {
    $sqlk = "INSERT INTO blog_kommentare
                    (
                        blog_id,
                        display,
                        datum,
                        name,
                        email,
                        homepage,
                        naricht
                    )
        VALUES
                    (
                        ".intval($_GET['id']).",
                        'yes',
                        NOW(),
                        '".mysql_real_escape_string($_POST['form-name'])."',
                        '".mysql_real_escape_string($_POST['form-email'])."',
                        '".mysql_real_escape_string($_POST['form-url'])."',
                        '".mysql_real_escape_string($_POST['form-comment'])."'
                    )";
    $qry = mysql_query($sqlk,$datenbank) or die(mysql_error());
    }
}
    if(isset($_GET['action']) AND 'commentcheck' == $_GET['action']) {
        echo('<p>'.$_POST['blog_id'].'</p>'."\n");
        echo('<p>'.$_POST['form-name'].'</p>'."\n");
        echo('<p>'.$_POST['form-email'].'</p>'."\n");
        echo('<p>'.$_POST['form-url'].'</p>'."\n");
        echo('<p>'.$_POST['form-comment'].'</p>'."\n");
    }
?>