-
prepare("SELECT ROUND(AVG(R1.rating),1) as averageRating FROM rating R1 RIGHT JOIN (SELECT MAX(R2.timestamp) AS timestamp FROM rating R2 GROUP BY R2.username) R2 ON R1.timestamp=R2.timestamp WHERE post_id=$post"))
+{
+ $sql->execute();
+ $sql->bind_result($averageRating);
+ while ($sql->fetch()){}}
+//ocena uzytkownika
+if(!empty($_SESSION['user'])){
+$user=$_SESSION['user'];
+if ($sql = $mysqli->prepare("SELECT rating FROM rating WHERE post_id=$post AND username='$user'"))
+{
+ $sql->execute();
+ $sql->bind_result($userRating);
+while ($sql->fetch()){}} }
+
$trash = '';
if ($sql = $mysqli->prepare("SELECT * FROM post WHERE post_id =$post"))
{
@@ -88,8 +106,33 @@ if ($sql = $mysqli->prepare("SELECT * FROM post WHERE post_id =$post"))
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Średnia ocena:
+
+
+
+
+
+
+
+
-
+
+
+
+
+
+
+
+
+
close();
}
@@ -132,15 +189,16 @@ else die( "Błąd w zapytaniu SQL! Sprawdź kod SQL w PhpMyAdmin." );
-if ($sql = $mysqli->prepare("SELECT * FROM comments ORDER BY comment_id"))
+if ($sql = $mysqli->prepare("SELECT comments.comment_id, comments.post_id, comments.username, comments.tekst, comments.data_dodania, comments.data_modyfikacji, user.user_id FROM comments LEFT JOIN user ON comments.username=user.username WHERE post_id =$post ORDER BY comment_id"))
{
$sql->execute();
- $sql->bind_result($comment_id,$post_id,$username,$tekst,$data_dodania, $data_modyfikacji); ?>
-
Komentarze
+ $sql->bind_result($comment_id,$post_id,$username,$tekst,$data_dodania, $data_modyfikacji, $user_id); ?>
+
Komentarze
fetch())
{ ?>
+
@@ -148,8 +206,30 @@ if ($sql = $mysqli->prepare("SELECT * FROM comments ORDER BY comment_id"))
$sql->close();
$mysqli->close();
} ?>
+
+
Dodaj komentarz:
+
+
+
+
+
+
+
+
diff --git a/blog-post/rating.php b/blog-post/rating.php
index 81331c2..a6f2d1e 100644
--- a/blog-post/rating.php
+++ b/blog-post/rating.php
@@ -1,12 +1,13 @@
-real_escape_string($_POST['rating']);
$_SESSION['rating'] = $rating;
- $sql = "INSERT INTO rating (rating)"
- . "Values ($rating)";
+ $sql = "INSERT INTO rating (post_id, username, rating)"
+ . "Values ($post, '$user', $rating)";
if($mysqli->query($sql) === true){
$_SESSION['message'] = "Dodanie oceny się powiodło!";