replyMessage.php
<?php include "inc.php"; ?>
<?php ob_start(); ?>
<?php
$MessageID=$_REQUEST["MessageID"];
if(!is_numeric($MessageID)){
$MessageID = 0;
}
if($MessageID<=0){
echo "参数错误!";
exit();
}
$htmlurl = $_REQUEST["htmlurl"];
if(empty($htmlurl)){
$htmlurl = "index.php";
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>留言回复</title>
</head>
<body>
<h3><?php echo $MessageID ?>-留言回复</h3>
<form name="replyform" action="" method="post">
<p><textarea name="content" cols="80" rows="10"></textarea></p>
<p><input type="submit" name="sub" value="提交回复" /></p>
</form>
<?php
if($_REQUEST["sub"]=="提交回复"){
$content = CheckInput($_REQUEST["content"]);
if(empty($content)){
echo "<script>alert('回复不能为空!');</script>";
return false;
}
$sql = "insert into Comments(MessageID,CommentContent) values('".$MessageID."','".$content."')";
$conn->exec($sql);
echo "<script>alert('回复成功!');window.location.href='".$htmlurl."';</script>";
}
?>
</body>
</html>