news.php

<?
$path = 'templates/';
define ("SQL_HOST","localhost");
    define ("SQL_DB","site");
    define ("SQL_LOGIN","site");
    define ("SQL_PASSWORD","");

    $db = mysql_connect(SQL_HOST,SQL_LOGIN,SQL_PASSWORD);
    if(!$db){ exit("Ошибка соединения с базой данных ".mysql_error()); }
    if(!mysql_select_db(SQL_DB,$db)){ exit("Нет такой базы данных ".mysql_error()); }
    mysql_query("SET NAMES utf8");
    mysql_query("set character_set_client ='utf8'");
    mysql_query("set character_set_results ='utf8'");
    mysql_query("set collation_connection ='utf8'");
    mysql_error($db);

    if($param[0] == 'news'){

    if($param[1] == '') {
    $query = "SELECT * FROM news";

    $result = mysql_query($query);

    while($row = mysql_fetch_assoc($result)){

       $result_news .= '
        <div><a href="/news/'.$row['id'].'">'.$row['title'].'</a></div>
        <div>'.$row['description'].'</div>
        ';
    }
    }
    if($param[1] != ''){
        $query = mysql_query("SELECT * FROM news WHERE id='".$param[1]."'");
        $row = mysql_fetch_assoc($query);




    $result_news .= '
        <div style="text-align: center; width: 800px;">
        <div>'.$row['title'].'</div>
        <div>'.$row['full_description'].'</div>

        <form method="POST">
        <input type="text" name="page_id" value="'.$param[1].'"/><br><br>
        <input type="text" name="login" value="'.$_SESSION['login'].'"/><br><br>
        <textarea name="comment" placeholder="Ваш комментарий"></textarea><br><br>
        <input type="submit" name="addcom" value="Отправить" />
        </form>


        </div>
    ';

    $query_com = mysql_query("SELECT * FROM comments WHERE page_id='".$param[1]."'");

        while ($row_com=mysql_fetch_assoc($query_com)){
                   $result_com .= '
                    <div>'.$row['author'].'</div>
                    <div>'.$row['comment'].'</div>
        ';
        }


    }
    }

    ?>