Untitled

<html>
	<body>


<?PHP
$server = '72.14.188.135';
$username = 'catz';
$password = '12345';
$database = 'All_Your_Base_Are_Belong_to_ME';

$db = mysql_connect($server, $username, $password, true);
if(!$db){
  die('The grim reaper is going to come eat you'.mysql_error());
  }
mysql_select_db($database);


if(isset($_POST['submit'])){
 $_POST['comment'] = $comment;
 $_POST['name'] = $name;
  $sqlcomment = "UPDATE Guestbook SET comment = $comment WHERE id = '1'";
 $sqlname = "UPDATE Guestbook SET name = $name WHERE id = '1'";
 if(mysql_query($sqlcomment && $sqlname)){
 echo 'Commented! <br />';
}
}

$sqlComDisp = "SELECT comment FROM Guestbook WHERE id >= '1'";
$sqlNameDisp = "SELECT comment FROM Guestbook WHERE id >= '1'";
$comQuery = mysql_query($sqlComDisp);
$nameQuery = mysql_query($sqlNameDisp);
$commentDisp = mysql_fetch_assoc($comQuery);
$nameDisp = mysql_fetch_assoc($nameQuery);

echo nl2br($commentDisp['comment']);

//mysql_fetch_assoc();
//mysql_real_escape_string();


?>

<form method="post" target="_self">
  <input type="text" size="140" name="comment" />
  <br />
  Name:<input type="text" name="name" />
  <br />
  <input type="submit" name="submit" value="Comment" />
 </form>

	</body>
</html>