review.php

这个版本只是修正了一些BUG

<?php
/*************************************************
   	review.php  

	Version  : 1.2
	Author   : Tracemouse ([e-mail])
	Copyright: www.vitci.com
	Writed   : 2003/12/08
	Modified : 2004/04/14
*/
require "./include/base.php";
require "./include/code.php";

if($reviewsub)
{
	$productid=intval($productid);$message=trim(censor(parseurl($message)));$author=daddslashes($author);
    	$sql = "INSERT INTO $table_review(pid,message,author,posttime) VALUES($productid,'$message','$author',$timestamp)";
	$query = $db->query($sql);
    	showmessage("success",'viewproduct.php?productid='.$productid);
}

if($action == 'del')
{
	$productid=intval($productid);$rid=intval($rid);
   	$query = $db->query("DELETE FROM $table_review WHERE rid = $rid AND pid = $productid");
   	showmessage("success!",'viewproduct.php?productid='.$productid);
}
?>