<?
	require_once("includes/config.php");
		
	if(!isset($_POST["id"]) || empty($_POST["id"]))
	{
		blog_redirect("index.php");
	}
	
	// get values from post	
	$id = mysql_real_escape_string(trim($_POST["id"]));
	$author = isset($_POST["author"]) ? mysql_real_escape_string(trim($_POST["author"])) : "";
	$email = isset($_POST["email"]) ? mysql_real_escape_string(trim($_POST["email"])) : "";
	$content = isset($_POST["content"]) ? mysql_real_escape_string(trim($_POST["content"])) : "";
	
	// validate form submission
	if(empty($author) || empty($email) || empty($content))
	{
		$feedback = new Feedback(Feedback::FAILURE);
		$feedback->addMessage("Please enter your name, email, and a comment.");
		$feedback->setValues(array( "author"=>$author, "email"=>$email, "content"=>$content));
		$_SESSION[BLOG_FEEDBACK] = $feedback;
		blog_redirect(blog_createpostlink($id, "#leavecomment"));
	}

	// validate email address ___@____.___
	if(!preg_match("/^([a-z0-9._-])+@[a-z0-9.]+\.[a-z]{2,6}$/i", $email))
	{
		$feedback = new Feedback(Feedback::FAILURE);
		$feedback->addMessage("Please enter a valid email address.");
		$feedback->setValues(array( "author"=>$author, "email"=>$email, "content"=>$content));
		$_SESSION[BLOG_FEEDBACK] = $feedback;
		blog_redirect(blog_createpostlink($id, "#leavecomment"));		
	}
	
	// insert comment into database
	$result = mysql_query("INSERT INTO comments (author, email, content, post_id) VALUES ('$author', '$email', '$content', $id);");
	if($result === FALSE)
	{
		$feedback = new Feedback(Feedback::FAILURE);
		$feedback->addMessage("Unable to save comment, please try again later. [" . mysql_error() . "]");
		$feedback->setValues(array( "author"=>$author, "email"=>$email, "content"=>$content));
		$_SESSION[BLOG_FEEDBACK] = $feedback;
		blog_redirect(blog_createpostlink($id, "#leavecomment"));
	}

	// success! return user to the post with message that comment was added
	$feedback = new Feedback(Feedback::CommentAdded);
	$feedback->addMessage("Thank you, your comment has been added!");
	$_SESSION[BLOG_FEEDBACK] = $feedback;	
	blog_redirect(blog_createpostlink($id, "#comments"));
?>