View file guestbook.php

<?php
include('init.php');
include('topnav.php'); if(!$username) { die(header('Location: relogin.php?msg=Oops! Please login below To gain Access')); } $owner = $_GET['id']; $ownername = user_info2($owner, username);  echo '<title>' .$config->title. ' &raquo; ' .$ownername. ' Wall Post</title><br>'; fblike(); echo "<br><div class='b_head'><a href='/profile.php?uid=$owner'><font color='yellow'>$ownername 's Profile</font></a>|<font color='white'>Wall</font></div><br><form method='post' action='?id=$owner'><textarea name='message' cols='20' rows='5'></textarea><br><input type='submit' name='submit' value='write'></form>"; if($_POST['submit'] == "write") {
date_default_timezone_set('Africa/Lagos');
$date = date('Y-m-d H:i:s');
$message = $_POST['message']; mysql_query("INSERT INTO  guestbook(message,time,poster,owner,posterid)
VALUES ('$message','$date','$username','$owner','$uid')
"); echo "<div class='msg'>Comment posted</div>"; }
$query = mysql_query("SELECT * FROM `guestbook` WHERE `owner`='$owner'");  if(mysql_num_rows($query) == 0) { echo '<div class="msg">Guestbook is empty, be the first to write</div>'; } else { while($row = mysql_fetch_array($query)) { echo '<p><div class="user-info">
<ul><li><a href="/profile.php?uid=' .$row["posterid"]. '"><b>' .$row['poster']. '</b></a>&raquo;&raquo;</b>' .$row['message']. '<br>' .$row['time']. '</li></ul>'; } }  include('footer.php'); ?>