000

<?php
$host="localhost"; // Host name
$username="buyersch_post"; // Mysql username
$password="FDDdma222"; // Mysql password
$db_name="buyersch_question"; // Database name
$tbl_name="forum_answer2"; // Table name

// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

// Get value of id that sent from hidden field
$id=$_POST['id'];

// Find highest answer number.
$sql="SELECT MAX(a_id) AS Maxa_id FROM $tbl_name WHERE question_id='$id'";
$result=mysql_query($sql);
$rows=mysql_fetch_array($result);

// add + 1 to highest answer number and keep it in variable name "$Max_id". if there no answer yet set it = 1
if ($rows) {
$Max_id = $rows['Maxa_id']+1;
}
else {
$Max_id = 1;
}

// get values that sent from form
$a_name=$_POST['a_name'];
$a_name=strip_tags(htmlspecialchars_decode($a_name));
$a_email=$_POST['a_email'];
$a_email=strip_tags(htmlspecialchars_decode($a_email));
$a_answer=$_POST['a_answer'];
$a_answer=strip_tags(htmlspecialchars_decode($a_answer));
$a_data = @file_get_contents($_FILES['a_data']['tmp_name']);
$a_data = @mysql_real_escape_string($a_data);

if(!$a_name)
{
$a_name = "Anonymous";
}

$datetime=date("d/m/y H:i:s"); // create date and time

// Insert answer

$sql2="INSERT INTO $tbl_name(question_id, a_id, a_name, a_email, a_answer, a_datetime, a_data)VALUES('$id', '$Max_id', '$a_name', '$a_email', '$a_answer', '$datetime', '$a_data')";
$result2=mysql_query($sql2);

if($result2) //&& $a_data)
{

echo "<meta http-equiv=Refresh content='2;url=view_topic2.php?id=".$id."'>";
echo " POST SUCCESSFUL ";

// If added new answer, add value +1 in reply column
$tbl_name2="forum_question2";
$sql3="UPDATE $tbl_name2 SET reply='$Max_id' WHERE id='$id'";
$result3=mysql_query($sql3);
$sql4="UPDATE $tbl_name2 SET datetime='$datetime' WHERE id='$id'";
$result4=mysql_query($sql4);

}

mysql_close();
?>