if(isset($_GET['action']) AND 'commentpost' == $_GET['action']) {
$sqlk = "INSERT INTO blog_kommentare
                    (
                        blog_id,
                        display,
                        datum,
                        name,
                        email,
                        homepage,
                        naricht
                    )
        VALUES
                    (
                        ".intval($_GET['id']).",
                        'no',
                        NOW(),
                        '".mysql_real_escape_string($_POST['form-name'])."',
                        '".mysql_real_escape_string($_POST['form-email'])."',
                        '".mysql_real_escape_string($_POST['form-url'])."',
                        '".mysql_real_escape_string($_POST['form-comment'])."'
                    )";
$qry = mysql_query($sqlk,$datenbank) or die(mysql_error());
}