2011-03-28 14:21:28 +00:00
|
|
|
<?
|
|
|
|
/*********************************************************************\
|
|
|
|
//--------------Get Post--------------------------------------------//
|
|
|
|
|
2013-02-22 08:00:24 +00:00
|
|
|
This gets the raw BBCode of a post. It's used for editing and
|
|
|
|
quoting posts.
|
2011-03-28 14:21:28 +00:00
|
|
|
|
2013-02-22 08:00:24 +00:00
|
|
|
It gets called if $_GET['action'] == 'get_post'. It requires
|
2011-03-28 14:21:28 +00:00
|
|
|
$_GET['post'], which is the ID of the post.
|
|
|
|
|
|
|
|
\*********************************************************************/
|
|
|
|
|
|
|
|
// Quick SQL injection check
|
2013-05-04 08:00:48 +00:00
|
|
|
if (!$_GET['post'] || !is_number($_GET['post'])) {
|
2011-03-28 14:21:28 +00:00
|
|
|
error(0);
|
|
|
|
}
|
|
|
|
|
|
|
|
// Variables for database input
|
|
|
|
$PostID = $_GET['post'];
|
|
|
|
|
2013-02-22 08:00:24 +00:00
|
|
|
// Mainly
|
2011-03-28 14:21:28 +00:00
|
|
|
$DB->query("SELECT Body FROM collages_comments WHERE ID='$PostID'");
|
|
|
|
list($Body) = $DB->next_record(MYSQLI_NUM);
|
|
|
|
|
2013-02-22 08:00:24 +00:00
|
|
|
// This gets sent to the browser, which echoes it wherever
|
2011-03-28 14:21:28 +00:00
|
|
|
|
|
|
|
echo trim($Body);
|