prepare("SELECT f.*, u.Username FROM forums AS f LEFT JOIN users AS u ON f.UserId = u.UserId WHERE f.id = ?"); $stmt->execute([$postId]); $originalPost = $stmt->fetch(PDO::FETCH_ASSOC); if (!$originalPost) { echo "Thread not found."; exit(); } $originalSubject = htmlspecialchars($originalPost['Subject']); $originalUser = htmlspecialchars($originalPost['Username'] ?? 'User'); $originalDate = date("F j, Y, g:i a", $originalPost['PostedAt']); $originalContent = nl2br(htmlspecialchars($originalPost['Content'] ?? 'No content provided.')); $replySubject = "Re: " . $originalSubject; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['reply'])) { $replyText = trim($_POST['reply_text']); if (!empty($replyText)) { $stmt = $pdo->prepare("INSERT INTO forum_replies (PostId, UserId, Subject, Content, PostedAt) VALUES (?, ?, ?, ?, ?)"); $stmt->execute([ $postId, $userId, $replySubject, $replyText, time() ]); header("Location: /Forum/ShowPost.aspx?PostID=$postId"); exit(); } else { $error = "Reply cannot be empty."; } } ?>
= htmlspecialchars($error) ?>