<?php
  session_start();
  require_once 'conn.php';
  require_once 'http.php';
  
  if (isset($\_REQUEST[\text{'}action\text{'}]))\; \{\; switch\; (strtoupper($_REQUEST['action'])) {
      case 'SUBMIT NEW POST':
        if (isset($\_POST[\text{'}subject\text{'}])\; and\; isset($_POST['body'])
            and isset($\_SESSION[\text{'}user\_id\text{'}]))\; \{$sql = "INSERT INTO forum_posts VALUES (" .
                 "NULL," . $\_POST[\text{'}topic\_id\text{'}]\; .\; ","\; .$_POST['forum_id'] .
                 "," . $\_SESSION[\text{'}user\_id\text{'}]\; .\; ",0"\; .\; ",\text{'}"\; .\; date("Y-m-d\; H:i:s",time())\; .\; "\text{'},0"\; .\; ",\text{'}"\; .$_POST['subject'] .
                 "','" . $\_POST[\text{'}body\text{'}]\; .\; "\text{'})";\; mysql\_query($sql, $conn)\; or\; die(\text{'}Could\; not\; post:\; \text{'}\; .\; mysql\_error()\; .\; "$<br>sql");
          $postid\; =\; mysql\_insert\_id();$sql = "INSERT IGNORE INTO forum_postcount " .
                 "VALUES (" . $\_SESSION[\text{'}user\_id\text{'}]\; .\; ",0)";\; mysql\_query($sql, $conn)\; or\; die(mysql\_error());$sql = "UPDATE forum_postcount SET count = count + 1 " .
                 "WHERE user_id = " . $\_SESSION[\text{'}user\_id\text{'}];\; mysql\_query($sql, $conn)\; or\; die(mysql\_error());\; \}$topicid = ($\_POST[\text{'}topic\_id\text{'}]==0?$postid:$\_POST[\text{'}topic\_id\text{'}]);\; redirect(\text{'}viewtopic.php?t=\text{'}\; .$topicid . '#post' . $postid);\; break;\; case\; \text{'}NEW\; TOPIC\text{'}:\; redirect(\text{'}compose.php?f=\text{'}\; .$_POST['forum_id']);
        break;
  
      case 'EDIT':
        redirect('compose.php?a=edit&post=' . $\_POST[\text{'}topic\_id\text{'}]);\; break;\; case\; \text{'}SAVE\; CHANGES\text{'}:\; if\; (isset($_POST['subject'])
            and isset($\_POST[\text{'}body\text{'}]))\; \{$sql = "UPDATE forum_posts " .
                 "SET subject='" . $\_POST[\text{'}subject\text{'}]\; .\; "\text{'},\; update\_id="\; .$_SESSION['user_id'] .
                 ", body='" . $\_POST[\text{'}body\text{'}]\; .\; "\text{'},\; date\_updated=\text{'}"\; .\; date("Y-m-d\; H:i:s",time())\; .\; "\text{'}\; "\; .\; "WHERE\; id="\; .$_POST['post'];
          if (isset($\_POST[\text{'}author\_id\text{'}]))\; \{$sql .= " AND author_id=" . $\_POST[\text{'}author\_id\text{'}];\; \}\; mysql\_query($sql, $conn)\; or\; die(\text{'}Could\; not\; update\; post;\; \text{'}\; .\; mysql\_error());\; \}$redirID = ($\_POST[\text{'}topic\_id\text{'}]\; ==\; 0?$_POST['post']:
          $\_POST[\text{'}topic\_id\text{'}]);\; redirect(\text{'}viewtopic.php?t=\text{'}\; .$redirID);
        break;
  
      case 'DELETE':
        if ($\_REQUEST[\text{'}post\text{'}])\; \{$sql = "DELETE FROM forum_posts " .
                 "WHERE " . "id=" . $\_REQUEST[\text{'}post\text{'}];\; mysql\_query($sql, $conn)\; or\; die(\text{'}Could\; not\; delete\; post;\; \text{'}\; .\; mysql\_error());\; \}\; redirect($_REQUEST['r']);
        break;
     }
  } else {
    redirect('index.php');
  }
  ?>