blog.php Neue Version

<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);
if( (isset($_GET['mode'])) AND ($_GET['mode'] == 'view') ) {
    $id = $_GET['id'];
    $sql = "SELECT * FROM blog WHERE id='".mysql_real_escape_string($id)."'";
    $entry = mysql_query($sql,$datenbank) or die(mysql_error());
    while($blog = mysql_fetch_object($entry))
    {
        echo('<div id="postinfo">'."\n");
        echo('<div class="cpostinfo">'."\n");
        echo('<h4 id="s1">Post Info</h4>'."\n");
        echo('<p><a href="?p=autor&amp;info='.$blog->autor.'" class="ml">'.$blog->autor.'</a><br />'."\n");
        echo('<a href="#" class="ml">'.$blog->datum.'</a><br />'."\n");
        echo('<p class="ml">ID<span>'.$blog->id.'</span></p>'."\n");
        echo('<a href="?p=blog&amp;mode=view&amp;id='.$blog->id.'#comments" class="ml">Kommentare</a><br />'."\n");
        echo('<g:plusone size="medium"></g:plusone></p>'."\n");
        echo('</div>'."\n");
        echo('</div>'."\n");
        echo('<div class="entry">'."\n");
        echo('<h2 id="s1">'.$blog->title.'</h2>'."\n");
        echo('<p><span>Eingetragen unter</span> <a href="?p=blog&amp;sel=cat&amp;cat='.$blog->cat.'">'.$blog->cat.'</a>'."\n");
        echo('<p>&nbsp;</p>'."\n");
        echo($blog->text);
        echo('</div>'."\n");
    }
    $kid = $_GET['id'];
    $sql2 = "SELECT * FROM blog_kommentare WHERE blog_id='".mysql_real_escape_string($kid)."' AND display='yes'";
    $entry2 = mysql_query($sql2,$datenbank) or die(mysql_error());
    while($kommentare = mysql_fetch_object($entry2))
    {
        echo('<h4 id="s1">Kommentare</h4>'."\n");
        echo('<ol>'."\n");
        echo('<li>'."\n");
        echo('<a href="'.$kommentare->homepage.'" target="_blank">'.$kommentare->name.'</a> schrieb: <br />'."\n");
        echo('<span>'.$kommentare->datum.'</span>'."\n");
        echo($kommentare->naricht);
        echo('</li>'."\n");
        echo('</ol>'."\n");
    }
        echo('<h4 id="s1">Kommentar schreiben</h4>'."\n");
        echo('<form action="?p=blog&amp;mode=view&amp;id='.$blog->id.'&amp;action=commentpdo" method="post" id="commentform">'."\n");
        echo('<label for=form-name>Name (erforderlich)</label><br />'."\n");
        echo('<input name=form-name id=name type=text required>'."\n");
        echo('<label for=form-email><br />Email (erfordlich)</label><br />'."\n");
        echo('<input name=form-email id=email type=email required>'."\n");
        echo('<label for=form-url><br />Homepage</label><br />'."\n");
        echo('<input name=form-url id=url type=url>'."\n");
        echo('<label for=form-comment><br />Dein Kommentar</label><br />'."\n");
        echo('<textarea name=form-comment id=comment required></textarea>'."\n");
        echo('<input class="button" type="submit" value="Kommentar eintragen" tabindex="5" />'."\n");
        echo('</form>'."\n");
}else if(isset($_GET['mode']) == 'archiv'){
    echo('<ul class="archive">'."\n");
    $sql = "SELECT * FROM blog ORDER BY id DESC";
    $entry = mysql_query($sql,$datenbank) or die(mysql_error());
    while($blog = mysql_fetch_object($entry))
    {
    echo('<li>'."\n");
    echo('<a href="?p=blog&amp;mode=view&id='.$blog->id.'" id="s1">'.$blog->title.'</a>'."\n");
    echo('Geschrieben am '.$blog->datum.' | Gespeichert unter <a href="?p=blog&amp;sel=cat&amp;cat='.$blog->cat.'" id="s1">'.$blog->cat.'</a>'."\n");
    echo('</li>'."\n");
    }
    echo('</ul>'."\n");
}else if(isset($_GET['sel']) == 'cat'){
    $smcat = $_GET['cat'];
    echo('<h3>Alle Artikel der Kategorie: '.$blog->cat.'</h3>'."\n");
    echo('<ul class="archive">'."\n");
    $sql = "SELECT * FROM blog WHERE cat='".mysql_real_escape_string($smcat)."' ORDER BY id DESC";
    $entry = mysql_query($sql,$datenbank) or die(mysql_error());
    while($blog = mysql_fetch_object($entry))
    {
    echo('<li>'."\n");
    echo('<a href="?p=blog&amp;mode=view&id='.$blog->id.'">'.$blog->title.'</a>'."\n");
    echo('Geschrieben am '.$blog->datum.'</a> | Gespeichert unter <a href="?p=blog&amp;sel=cat&amp;cat='.$blog->cat.'">'.$blog->cat.'</a>'."\n");
    echo('</li>'."\n");
    }
    echo('</ul>'."\n");
}else{
    $sql = "SELECT * FROM blog ORDER BY id DESC LIMIT 0, 5";
    $entry = mysql_query($sql,$datenbank) or die(mysql_error());
    while($blog = mysql_fetch_object($entry))
    {
        echo('<div id="postinfo">'."\n");
        echo('<div class="cpostinfo">'."\n");
        echo('<h4 id="s1">Post Info</h4>'."\n");
        echo('<p><a href="?p=autor&amp;info='.$blog->autor.'" class="ml">'.$blog->autor.'</a><br />'."\n");
        echo('<a href="#" class="ml">'.$blog->datum.'</a><br />'."\n");
        echo('<p class="ml">ID<span>'.$blog->id.'</span></p>'."\n");
        echo('<a href="?p=blog&amp;mode=view&amp;id='.$blog->id.'#comments" class="ml">Kommentare</a><br />'."\n");
        echo('<a href="?p=blog&amp;mode=view&amp;id='.$blog->id.'" class="ml">Permalink</a></p>'."\n");
        echo('</div>'."\n");
        echo('</div>'."\n");
        echo('<div class="entry">'."\n");
        echo('<h2 id="s1">'.$blog->title.'</h2>'."\n");
        echo('<p><span>Eingetragen unter</span> <a href="?p=blog&amp;sel=cat&amp;cat='.$blog->cat.'">'.$blog->cat.'</a>'."\n");
        echo('<p>&nbsp;</p>'."\n");
        if(strlen($blog->text) >= 500) {
            $blog->text=wordwrap($blog->text,500); //Zeilenumbruch einfügen spätestens nach 200 Zeichen
            $blog->text = substr($blog->text,0,strpos($blog->text,"\n")).'...'; //bei Zeilenumbruch Text abschneinden
        }
        echo($blog->text);
        echo('<p>&nbsp;<br />&nbsp;</p>'."\n");
        echo('<p id="s1"><a class="more" href="?p=blog&amp;mode=view&amp;id='.$blog->id.'">weiterlesen &raquo;</a></p>'."\n");
        echo('</div>'."\n");
    }
}

if(isset($_GET['action']) AND 'commentpdo' == $_GET['action']) {
    $sql = "insert into blog_kommentare (blog_id, display, datum, name, email, homepage, naricht) values (:id, 'NO', NOW(), :name, :email, :url, :text)";
    $array = array(":id"=>$_GET['id'],":name"=>$_POST['form-name'],":text"=>$_POST['form-comment'],":email"=>$_POST['form-email'],":url"=>$_POST['form-url']);
    $db_con = new PDO("mysql:host=$db_host;dbname=$db_name", $db_user, $db_pass);
    $pre = $db_con->prepare($sql,array(PDO::ATTR_CURSOR => PDO::CURSOR_FWDONLY));
    $res = $pre->execute($array);
    $row = $pre->fetchAll();
}
if(isset($_GET['action']) AND 'commentpost' == $_GET['action']) {
    mysql_query("insert into blog_kommentare (blog_id, display, datum, name, email, homepage, naricht) values (". $_GET['id'] .", 'NO', NOW(), ". $_POST['form-name'] .", ". $_POST['form-email'] .", ". $_POST['form-url'] .", ". $_POST['form-comment'] .")");
}
if(isset($_GET['action']) AND 'commentcheck' == $_GET['action']) {
    echo('<p>'.$_POST['blog_id'].'</p>'."\n");
    echo('<p>'.$_POST['form-name'].'</p>'."\n");
    echo('<p>'.$_POST['form-email'].'</p>'."\n");
    echo('<p>'.$_POST['form-url'].'</p>'."\n");
    echo('<p>'.$_POST['form-comment'].'</p>'."\n");
}
?>