blog_editPost.php

<?PHP
    require_once("blog_db.php");

    $db = new DB();

    session_start();

    $blogID = $_SESSION['blogID'];
    $oldPostID = $_SESSION['postID'];
    $userID = $_SESSION['userID'];

    $postTitle = $_REQUEST['editPostTitle'];
    $postText = $_REQUEST['editPostText'];

    if($postTitle!= "' '" && $postText != "' '") {
        $postTitle = $db->getCon()->real_escape_string($postTitle);
        $postText = $db->getCon()->real_escape_string($postText);
        //echo("text".$postTitle."mertext");
    }

    $deletePost = false;
    
    if($postTitle == "' '" && $postText == "' '") {
        $postTitle = " ";
        $postText = " ";
        $deletePost = true;
    }

    $SQL = "SELECT postID FROM post ORDER BY postID DESC";
    //echo($SQL."\n");
    $matrix = $db->getData($SQL);

    $postID = $matrix[0][0]+1;

    $source = "blog/blog_$blogID/post_$postID/post.php";

    $SQL = "INSERT INTO post(postTitle, source, userID, blogID) VALUES('$postTitle', '$source', $userID, $blogID)";
    //echo($SQL."\n");
    $db->execute($SQL);
    
    //echo($oldPostID." ".$postID);
    $SQL = "INSERT INTO postversion(oldID, newID) VALUES($oldPostID, $postID)";
    $db->execute($SQL);
    //echo $SQL."\n";
    $old = umask(0);

    $source = str_replace("post.php", "", $source);
    mkdir($source);

    $SQL = "SELECT commentID FROM comment WHERE postID = $oldPostID";
    $matrix = $db->getData($SQL);
    
    for($i = 0; $i<count($matrix); $i++) {
        $commentID = $matrix[$i][0];
        $commentSource = $source."comment_'$commentID'.txt";
        
        $SQL = "UPDATE comment SET postID = '$postID'  WHERE commentID=$commentID";
        $db->execute($SQL);

    }

    $postFile = fopen($source."/post.php", "w");
    fwrite($postFile, $postText);

    umask($old);

    if(!$deletePost) {
        header("location: blog_blog.php?blogID=$blogID");
    }
?>