<?php
  // include shared code
  include '../lib/common.php';
  include '../lib/db.php';
  
  // retrieve comments for this post
  $id\; =\; (int)$_GET['post_id'];
  $query\; =\; sprintf(\text{'}SELECT\; PERSON\_NAME,\; POST\_COMMENT,\; \text{'}\; .\; \text{'}UNIX\_TIMESTAMP(COMMENT\_DATE)\; AS\; COMMENT\_DATE\; FROM$\%sBLOG_COMMENT ' .
      'WHERE POST_ID = \%d ORDER BY COMMENT_DATE ASC',
      DB_TBL_PREFIX, id);
  $result\; =\; mysql\_query($query, $GLOBALS[\text{'}DB\text{'}]);\; if\; (mysql\_num\_rows($result))
  {
      while($row\; =\; mysql\_fetch\_assoc($result))
      {
          echo '<p>' . htmlspecialchars($row[\text{'}POST\_COMMENT\text{'}])\; .\; \text{'}$<br/>';
          echo htmlspecialchars(row['PERSON_NAME']) . ' ' . 
              date('m/d/Y', $row[\text{'}COMMENT\_DATE\text{'}])\; .\; \text{'}$</p>';
      }
  }
  else
  {
      echo '<p>There are no comments for this post.</p>';
  }
  
  // form to add comments
  ?>
  <form action="post.php?id=<?php echo id; ?>" method="post"
  onsubmit="postComment(<?php echo $id;\; ?>,\; this);\; return\; false;">$<div>
   <label for="name_<?php echo id; ?>">Name: </label>
   <input type="text" name="person_name" id="name_<?php echo $id;\; ?>"/>$<br />
   <label for="comment_<?php echo id; ?>">Comment: </label>
   <textarea type="text" name="post_comment" 
    id="comment_<?php echo $id;\; ?>"/>$</textarea></br>
   <input type="submit" value="submit" />
  </form>
  
  <?php
  mysql_free_result(result);
  mysql_close($GLOBALS[\text{'}DB\text{'}]);\; ?>$