author_posts.php

<?php include("includes/header.php"); ?>

    <!-- Navigation -->
<?php include("includes/nav.php"); ?>

    <!-- Page Content -->
    <div class="container">

        <div class="row">

            <!-- Blog Entries Column -->
            <div class="col-md-8">


                <?php 

                if(isset($_GET['p_id'])){

                    $the_post_id = $_GET['p_id'];
                    $the_post_author = $_GET['author'];
                }


                $query = "SELECT * FROM posts WHERE post_user = '{$the_post_author}'";
                $select_all_posts_query = mysqli_query($connection, $query);

                while ($row = mysqli_fetch_assoc($select_all_posts_query)) {
                    $post_title = $row['post_title'];
                    $post_user = $row['post_user'];
                    $post_date = $row['post_date'];
                    $post_image = $row['post_image'];
                    $post_content = $row['post_content'];

                    ?>


                <h1 class="page-header">
                    Page Heading
                    <small>Secondary Text</small>
                </h1>

                <!-- First Blog Post -->
                <h2>
                    <a href="#"><?php echo $post_title ?></a>
                </h2>
                <p class="lead">
                    All post by <?php echo $post_user ?>
                </p>
                <p><span class="glyphicon glyphicon-time"></span> Posted <?php echo $post_date ?></p>
                <hr>
                <img class="img-responsive" src="images/<?php echo $post_image ?>" alt=""> <!-- it get data (img link) from db, it has been entered manually by me -->
                <hr>
                <p><?php echo $post_content ?></p>

                <hr>



              <?php  } ?>
               
            

                <!-- Blog Comments -->
                <?php 

                    if(isset($_POST['create_comment']))
                    {


                        $the_post_id = $_GET['p_id']; //using the post id in the url
                        $comment_author = $_POST['comment_author'];
                        $comment_email = $_POST['comment_email'];
                        $comment_content = $_POST['comment_content'];
                        
                        if(!empty($comment_author) && !empty($comment_email) && !empty($comment_content)) {

                            $query = "INSERT INTO comments (comment_post_id, comment_author, comment_email, comment_content, comment_status, comment_date)";

                            $query .= " VALUES ( $the_post_id, '{$comment_author}', '{$comment_email}', '{$comment_content}', 'unapproved', now() )";

                            $create_comment_query = mysqli_query($connection, $query);

                            if (!$create_comment_query) 
                            {
                                die('QUERY FAILED'. mysqli_error($connection));
                            }
                            //query for comment count
                            $query = "UPDATE posts SET post_comment_count = post_comment_count + 1";
                            $query .= " WHERE post_id = $the_post_id";
                            $update_comment_count = mysqli_query($connection, $query);
                            
                        }

                        else
                        {
                            echo "<script>alert('Field cannot be empty')</script>";
                        }
                    }

                 ?>


            </div>

            <!-- Blog Sidebar Widgets Column -->
        <?php include("includes/sidebar.php"); ?>

        </div>
        <!-- /.row -->
</div>
        <hr>

   <?php include("includes/footer.php"); ?>