From 328f0665f3832ef180d3399d6fb6153545d6c6bd Mon Sep 17 00:00:00 2001
From: Hendrik <hendrik.huang@student.uva.nl>
Date: Thu, 26 Jan 2017 11:35:18 +0100
Subject: [PATCH] add basic post functionality

---
 website/public/API/postComment.php | 16 ++++++++++++++++
 website/public/API/postPost.php    | 17 +++++++++++++++++
 website/queries/post.php           |  2 +-
 website/views/post-view.php        |  5 +++--
 website/views/profile.php          |  6 +++---
 5 files changed, 40 insertions(+), 6 deletions(-)
 create mode 100644 website/public/API/postComment.php
 create mode 100644 website/public/API/postPost.php

diff --git a/website/public/API/postComment.php b/website/public/API/postComment.php
new file mode 100644
index 0000000..c5b30cc
--- /dev/null
+++ b/website/public/API/postComment.php
@@ -0,0 +1,16 @@
+<?php
+
+session_start();
+
+require("../../queries/post.php");
+require("../../queries/connect.php");
+require("../../queries/checkInput.php");
+
+if (empty($_POST['newcomment-content'])) {
+} else {
+    makeComment($_POST['postID'],
+        $_SESSION['userID'],
+        test_input($_POST['newcomment-content']));
+}
+
+header("Location: ../profile.php");
\ No newline at end of file
diff --git a/website/public/API/postPost.php b/website/public/API/postPost.php
new file mode 100644
index 0000000..b52e96b
--- /dev/null
+++ b/website/public/API/postPost.php
@@ -0,0 +1,17 @@
+<?php
+
+session_start();
+
+require("../../queries/post.php");
+require("../../queries/connect.php");
+require("../../queries/checkInput.php");
+
+if (empty($_POST['newpost-title'])) {
+} else {
+    makePost($_SESSION['userID'],
+             null,
+             test_input($_POST['newpost-title']),
+             test_input($_POST['newpost-content']));
+}
+
+header("Location: ../profile.php");
\ No newline at end of file
diff --git a/website/queries/post.php b/website/queries/post.php
index 0183a5d..5940267 100644
--- a/website/queries/post.php
+++ b/website/queries/post.php
@@ -76,7 +76,7 @@ function makePost($userID, $groupID, $title, $content) {
 }
 
 function makeComment($postID, $userID, $content) {
-    $stmt = $_GLOBAL["db"]->prepare("
+    $stmt = $GLOBALS["db"]->prepare("
         INSERT INTO
             `comment` (
                 `postID`, 
diff --git a/website/views/post-view.php b/website/views/post-view.php
index 044c23e..0f091a6 100644
--- a/website/views/post-view.php
+++ b/website/views/post-view.php
@@ -21,8 +21,9 @@ echo("
 
 <div class='post-comments'>
     <div class="commentfield">
-        <form name="newcomment" method="post">
-            <textarea placeholder="Laat een reactie achter..."></textarea> <br>
+        <form action="API/postComment.php" name="newcomment" method="post">
+            <input type="hidden" name="postID" value="<?= $postID ?>">
+            <textarea name="newcomment-content" Laat een reactie achter..."></textarea> <br>
             <input type="submit" value="Reageer!">
         </form>
     </div>
diff --git a/website/views/profile.php b/website/views/profile.php
index 19b9eae..404d957 100644
--- a/website/views/profile.php
+++ b/website/views/profile.php
@@ -58,9 +58,9 @@
             if ($_SESSION["userID"] === $userID) {
          ?>
                 <div class="post platform">
-                    <form>
-                        <input type="text" class="newpost" placeholder="Titel">
-                        <textarea class="newpost" placeholder="Schrijf een berichtje..."></textarea>
+                    <form action="API/postPost.php" method="post">
+                        <input type="text" name="newpost-title" class="newpost" placeholder="Titel">
+                        <textarea class="newpost" name="newpost-content" placeholder="Schrijf een berichtje..."></textarea>
                         <input type="submit" value="Plaats!">
                     </form>
                 </div>