W33 - content review

<h3>Validace nového obsahu:</h3>
<p>návod jak správně validovat... bude tu až ho někdo napíše</p>
<?php

$query = $dbh->prepare("SELECT * FROM achievements WHERE enabled = 0 && obsolete = 0 && validated = 0 && achid = :achid");
$query->bindParam(':achid', $_POST['achid'], PDO::PARAM_INT, 20);
$query->execute();
$result = $query->fetchAll();
foreach($result as $row){
$_SESSION['validating'] = $row['achid'];
echo 'Achievement name: '.$row['name'];
echo "<br>";
echo 'Achievement points: '.$row['points'];
echo "<br>";
echo 'Achievement description: '.$row['description'];
echo "<br>";
echo 'Achievement parameters:';
$paramids = explode(",", $row['paramids'], -1); /*mínus jedna je tam protože záznamv db obvykle končí čárkou.*/
foreach($paramids as $paramk => $paramv){
$dbkey = explode("=", $paramv);
$query = $dbh->prepare("SELECT * FROM params WHERE pid = :pid");
$query->bindParam(':pid', $dbkey[0], PDO::PARAM_INT, 8);
$query->execute();
$result2 = $query->fetchAll();
foreach($result2 as $row2){
echo '<br>';
echo $row2['pname'].": ".$dbkey[1];
}}
echo "<br>";
echo '<form method="post" action="valrevievd.php"><input type="text" name="comment" value="komentář k validaci" maxlenght="600"><br><input type="submit" name="Aprove" value="Aprove" class="button"> OR <input type="submit" name="Deny" value="Deny" class="button"><br></form>';
}
?>