From a535a9e7e017629178b45acc2e96e1d674a0d6fc Mon Sep 17 00:00:00 2001
From: Nicolas BERNSTEIN <alexis211@gmail.com>
Date: Fri, 13 Apr 2012 19:17:17 +0200
Subject: Added : ATOM feed for blog ; abilty to comment posts.

---
 lib/blog/edcom.php | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 lib/blog/edcom.php

(limited to 'lib/blog/edcom.php')

diff --git a/lib/blog/edcom.php b/lib/blog/edcom.php
new file mode 100644
index 0000000..2b96ff9
--- /dev/null
+++ b/lib/blog/edcom.php
@@ -0,0 +1,35 @@
+<?php
+
+require("lib/markdown.php");
+
+assert_redir(count($args) == 3, 'blog');
+$comid = intval($args[2]);
+
+$com = mysql_fetch_assoc(sql(
+	"SELECT blog_comments.owner AS owner, blog_comments.text AS text, blog_comments.post AS post ".
+	"FROM blog_comments WHERE id = $comid"
+	));
+assert_error($com && $com['owner'] == $user['id'],
+	"This comment does not exist, or you are not allowed to edit it.");
+
+$com_text = $com['text'];
+if (isset($_POST['text'])) {
+	$com_text = esca($_POST['text']);
+	$com_text_html = Markdown($com_text);
+	if (trim($com_text) == "") {
+		$error = "You cannot enter an empty comment. If you want your comment to be deleted, please edit your comment so that it says so, and an administrator will delete it.";
+	} else {
+		sql("UPDATE blog_comments SET text = '" . escs($com_text) . "', text_html = '" . escs($com_text_html) . "' ".
+			"WHERE id = $comid");;
+		header("Location: view-blog-" . $com['post']);
+		die();
+	}
+}
+
+$title = "Edit comment";
+$fields = array(
+	array("label" => "Comment : ", "name" => "text", "value" => $com_text, "type" => "textarea"),
+	);
+$validate = "Edit comment";
+
+require("tpl/general/form.php");
-- 
cgit v1.2.3