Untitled

<html>
<head>
</head>
<body>
<?php
require_once('admin/config.php');
mysql_select_db($db, $conn);
session_start();
if (!($conn)) {
echo "Fehler bei der Verbindung: " . mysql_error();
exit();
}
$news = mysql_query("SELECT * FROM news ORDER BY id ASC");
if($_GET['show'] != ''){
$data = mysql_fetch_assoc(mysql_query("SELECT * FROM news WHERE id='".$_GET['show']."';"));
	echo "<b>".$data['title']."<a></b> geschrieben von ".$data['username'].", am ".date('d.m.Y, H:i', $data['time'])."<br />
		".$data['message']."<br />Kommentare:<br />";


	$comments = mysql_query("SELECT * FROM news_comment WHERE id='".$_GET['show']."' ORDER BY time ASC");
	$i = 1;
	while($dat = mysql_fetch_array($comments)) {
	echo '<div id="'.$i.'" style="margin-bottom: 15px;">
	'.$i.' by '.$dat['username'].'</span></td><td style="vertical-align: middle; line-height: 22px;" align="right"><span style="margin-right: 5px;">'.date('d.m.Y, H:i', $dat['time']).'</span></td></tr></table></div>
	<div style="margin-left: 10px; margin-right: 10px;">'.htmlspecialchars($dat["comment"]).'</div></div>';
	$i = $i+1;
	}
	if (isset($_SESSION["login"]) && $_SESSION["login"] == "user") {
    echo'Write an comment:<br /><form action="index.php?show='.$_GET['show'].'" method="post">
		<textarea name="text" width="200" rows="3"></textarea><br />
		<input type="submit" name="submit" value="send"></form>';
	echo"	</div></div>";
	if($_POST['submit']){
	$insert = mysql_query("INSERT INTO news_comment(id, comment, username, time) VALUES('".$_GET['show']."', '".$_POST['text']."', '".$_SESSION['username']."', '".time()."')");
	}
}
else{
echo'Einloggen um Kommentar zu schreiben!';
}
}
else {
while($data = mysql_fetch_array($news)) {

	echo '<b><a href="./index.php?show='.$data['id'].'">'.$data['title'].'<a></b> geschrieben von '.$data['username'].', am '.date('d.m.Y, H:i', $data['time']).'<br />
		'.$data['message'].'<br /><br />';

}
}
?><br />
</body>
</html>