ok i changed my code into the code you submitted for me but i think it is in addcomment.php i tried it and it still did not add the message so what else could it be?
here is my full codes for profile.php and addcomment.php
**edit**
i was thinking about this code... and i was wondering if i could change it into "function get_user_id" to get the user id needed?
how could i do that in this function and how can i change it to make it work?
[syntax=php]function fetch_current_user_id($username){
$sql = "SELECT `user_id` FROM `users` WHERE `user_username` = '{$_SESSION['user_username']}'";
$result = mysql_query($sql);
return mysql_result($result, 0);
}[/syntax]
profile
[syntax=php]<?php
include('core/init.inc.php');
$user_info = fetch_user_info($_GET['uid']);
$commenting_form = '<form action="addcomment.php" method="post">
<table border="0" cellspacing="0" cellpadding="0">
<tr>
<td colspan="2"><strong>Add Comment:</strong></td>
</tr>
<tr>
<td colspan="2" align="center"><textarea name="msg_message" id="msg_message" cols="50" rows="7" style="font-family:Courier New">Message</textarea></td>
</tr>
<tr>
<td colspan="2" align="center"><input type="submit" value="Add Comment" name="msg_submit" id="msg_submit" style="width:200px;" /></td>
</tr>
</table>
</form>';
$_POST['user_id'] = $_GET['uid'];
$get_comments = mysql_query("SELECT * FROM `comments` WHERE `user_id` = {$_POST['user_id']}");
$comments_count = mysql_num_rows($get_comments);
if ($comments_count>0)
{
while ($com = mysql_fetch_array($get_comments))
{
$id = $com['id'];
$user_id = $com['user_id'];
$title = $com['text'];
$message = $com['comment'];
$comment .= '<b>'.$title.'</b><br />'.$message.'<hr />';
}
$comment .= $commenting_form;
$page_title = $comments_count.' Comments';
}
else
{
$comment = 'there are no comments at the moment.<br />'.$commenting_form;
$page_title = 'NO COMMENTS';
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<style type="text/css">
table { width: 800px; border-collapse: collapse; }
td, th { padding: 5px; border: solid 1px #444; }
</style>
<title><?php echo $user_info['username']; ?>'s Profile</title>
</head>
<body>
<center>
<?php
if (fetch_user_rank() == 1) {
// give permission
echo '<b><a href="index.php"><img src="ext/images/home.jpg"></a><a href="admin.php"><img src="ext/images/admin.jpg"></a><a href="status.php"><img src="ext/images/server-status.jpg"></a><a href="user_list.php"><img src="ext/images/members.jpg"></a><a href="edit_profile.php"><img src="ext/images/edit-profile.jpg"></a><a href="logout.php"><img src="ext/images/logout.jpg"></a></b>';
} else {
//redirect them
echo '<b><a href="index.php"><img src="ext/images/home.jpg"></a><a href="status.php"><img src="ext/images/server-status.jpg"></a><a href="user_list.php"><img src="ext/images/members.jpg"></a><a href="edit_profile.php"><img src="ext/images/edit-profile.jpg"></a><a href="logout.php"><img src="ext/images/logout.jpg"></a></b>';
}
?>
</center>
<table align="center" border="0" cellspacing="0" cellpadding="0">
<thead>
<tr>
<th width="250"><img src="<?php echo $user_info['avatar']; ?>" alt="Avatar" /></th>
<th><h1><?php echo $user_info['firstname']; ?> <?php echo $user_info['lastname']; ?></h1></th>
</tr>
</thead>
<tbody>
<?php
if ($user_info === false){
echo 'That user does NOT exist!';
}else if (fetch_user_rank() == 1) {
?>
<tr>
<td><p>Username: <?php echo $user_info['username']; ?></p></td>
<td><p>Gender: <?php echo ($user_info['gender'] == 1) ? 'Male' : 'Female'; ?></p></td>
</tr>
<tr>
<td><p>Location: <?php echo $user_info['location']; ?></p></td>
<td><p>Email: <?php echo $user_info['email']; ?></p></td>
</tr>
<tr>
<td><p>IP: <?php echo $user_info['ip']; ?></p></td>
<td><p>About Me:<br />
<?php echo $user_info['about']; ?>
</p></td>
</tr>
<tr>
<td colspan="2">
<?php echo $comment; ?><br /></td>
</tr>
<?php
}else if (fetch_user_rank() == 0){
?>
<tr>
<td><p>Username: <?php echo $user_info['username']; ?></p></td>
<td><p>Gender: <?php echo ($user_info['gender'] == 1) ? 'Male' : 'Female'; ?></p></td>
</tr>
<tr>
<td><p>Location: <?php echo $user_info['location']; ?></p></td>
<td><p>About Me:<br />
<?php echo $user_info['about']; ?>
</p></td>
</tr>
<tr>
<td colspan="2">
<?php echo $comment; ?><br /></td>
</tr>
<?php
}
?>
</tbody>
</table>
</body>
</html>[/syntax]
addcomment.php
[syntax=php]<?php
include('core/init.inc.php');
function cleanText($text)
{
$text = str_replace("\\", "\\\\", $text);
$text = str_replace("&", "&", $text);
$text = str_replace("<", "<", $text);
$text = str_replace(">", ">", $text);
$text = str_replace("\"", "&qout;", $text);
$text = str_replace(" ", " ", $text);
$text = str_replace("\n", "<br />", $text);
$text = str_replace("'", "''", $text);
return $text;
}
$user_id = $_POST['user_id'];
$msg_title = $_SESSION['user_username'];
$msg_message = cleanText($_POST['msg_message']);
$msg_submit = $_POST['msg_submit'];
if ($msg_submit&&$user_id&&$msg_title&&$msg_message)
{
mysql_query("INSERT INTO `comments` VALUES ('', '{$user_id}', '{$msg_title}', '{$msg_message}')");
}
$ref = $_SERVER['HTTP_REFERER'];
header( 'refresh: 0.1; url='.$ref);
?>[/syntax]
