komentarze

<article class="col-12 col-lg-6 mb-md-4">
                <h3 class="col-12  text-center text-danger mt-2">Masz jakieś uwagi? Napisz komentarz :)</h3>
                <form method="post">
                        <h6 class="text-center">Podaj adres E-mail</h6>
                            <input type="email" class="form-control col-12 col-lg-6 mx-lg-auto text-center" name="email" placeholder="E-mail" required>
                        <h6 class="text-center mt-3">Podaj Twój nick</h6>
                            <input type="text" class="form-control col-12 col-lg-6 mx-lg-auto text-center" name="nick" placeholder="Nick" required>
                        <h6 class="text-center mt-3">Twój komentarz</h6>
                            <textarea class="form-control col-12 col-lg-6 mx-auto text-center mt-1" name="komentarz" placeholder="Dodaj Komentarz"  rows="3" required></textarea>
                        <aside class="d-lg-flex justify-content-center">
                            <button class="btn btn-primary col-12  col-lg-4 mr-2 mt-2" type="submit">Wyślij</button>
                            <input class="btn btn-primary col-12  col-lg-4  mt-2" type="reset" value="Wyczyść">
                        </aside>
                </form>
            </article>
                    <?php
                    include("skryptyPHP/dane.php");
                    $connection = mysqli_connect($dbHost, $dbUser, $dbPassword, $dbDatabase)
                        or die('Brak połączenia z serwerem MySQL.<br />Błąd: '.mysqli_error($connection));
                    mysqli_set_charset($connection, "utf-8");

                    if(!empty($_POST["email"])&&!empty($_POST["nick"])&&!empty($_POST["komentarz"]))
                    {
                        $email=$_POST["email"];
                        $nick=$_POST["nick"];
                        $komentarz=nl2br($_POST["komentarz"]);

                        $query = "INSERT INTO `komentarze` (`data`, `email`, `nick`, `komentarz`) VALUES (?, ?, ?, ?)";
                        $statement = $connection->prepare($query);
                        $statement->bind_param("ssss", $data, $email, $nick, $komentarz);
                        $data = date("d-m-Y H:i:s");
                        $email = $connection->real_escape_string($email);
                        $nick = $connection->real_escape_string($nick);
                        $komentarz = $connection->real_escape_string($komentarz);
                        $statement->execute();
                        $statement->close();
                    }

                    ?>