<?php
require_once('db_login.php');
require_once('connect.php');
$postID = $_POST[postID];
$title = htmlentities($_POST['title']);
$body = htmlentities($_POST['body']);
$action = htmlentities($_POST['action']);
$categoryID = htmlentities($_POST['categoryID']);
if ($_GET['action']=='delete' and !$stop)
{
$postID = $_GET["postID"];
$query = "Delete From posts Where postID = $postID";
$result = mysql_query($query);
if(!$result)
{
die("Could not execute query: <br/>" . mysql_error());
}
echo ("Deleted Successfully.<br/>");
$stop = "TRUE";
}
if ($_GET[postID] AND !$stop){
$query = "SELECT * FROM users NATURAL JOIN posts NATURAL JOIN categories WHERE postID = $_GET[postID]";
$result = mysql_query($query);
if(!$result)
{
die("Could not execute query: <br/>" . mysql_error());
}
//fetching data to be edited
while ($result_row = mysql_fetch_array($result, MYSQL_ASSOC))
{
$a = $result_row["title"];
$b = $result_row["body"];
$c = $result_row["postID"];
$e = $result_row["categoryID"];
$f = $result_row["userID"];
}
echo '<form action="modify_post.php?" method="POST">';
echo '<label><b>Title</b> : <input type="text" name="title" value="'.$a.'"></label>';
echo '<br />'.'<br />';
echo '<label><b>Body</b> : <textarea name="body" cols="40" rows="4"4>'.$b.'</textarea></label>';
echo '<input type="hidden" name="action" value="edit">';
echo '<input type="hidden" name="postID" value="'.$c.'"</label>';
echo '<input type="hidden" name="userID" value="'.$f.'"';
echo '<input type="hidden" name="categoryID" value="'.$e.'"'.'<br>';
//echo $userID . $catID;    

echo '<p><b>Category</b> : <select name="categ">';
$query = "Select categoryID, category From categories";
$result = mysql_query($query);
if(!$result){
die("Could not query: </b>" . mysql_error());
}
while($result_row = mysql_fetch_array($result, MYSQL_ASSOC))
{
$id = $result_row["categoryID"];
echo '<option';
//echo $cat;
echo ">$result_row[category]";
echo '</option>';}
echo '</select>';
echo '<br/>';

echo '<br/>';
echo '<input type="submit" name="t" value="Post" />';
echo '</form>';
$stop="TRUE";
}
// Form submitted validate fields
if ($_POST["t"] AND !$stop){
if($title == ""){
echo ("Title must not be null.<br>");
$found_error="TRUE";
$stop="TRUE";
}
if($body == ""){
echo ("Body must not be null.<br>");
$found_error="TRUE";
$stop="TRUE";
}
//validated now hitting database
if($_POST['action']=="edit" AND !$stop){
//use update query
echo $userID;
echo $categoryID;
//echo $postID;
//$query = "Insert into Posts values (NULL,'$categoryID','$userID','$title','$body','NULL')";
//$result = mysql_query($query);
//if(!$result) {
//die("Could not execute query: <br/>" . mysql_error());}
//echo ("Updated Successfully.<br>");
$stop="TRUE";
}
}
?>

echo('something '.$somevar.' more stuff '.
'other stuff);

//fetching data to be edited.
while ($result_row = mysql_fetch_array($result, MYSQL_ASSOC))
{
$a = $result_row["title"];
$b = $result_row["body"];
$c = $result_row["postID"];
$e = $result_row["categoryID"];
$f = $result_row["userID"];
}
echo '<form action="modify_post.php?" method="POST">';
echo '<label><b>Title</b> : <input type="text" name="title" value="'.$a.'"></label>';
echo '<br />'.'<br />';
echo '<label><b>Body</b> : <textarea name="body" cols="40" rows="4"4>'.$b.'</textarea></label>';
echo '<input type="hidden" name="action" value="edit">';
echo '<input type="hidden" name="postID" value="'.$c.'"</label>';
echo '<input type="hidden" name="userID" value="'.$f.'"';
echo '<input type="hidden" name="categoryID" value="'.$e.'"'.

echo '<input type="hidden" name="userID" value="'.$f.'"';
echo '<input type="hidden" name="categoryID" value="'.$e.'"'.