ob_start();
/*
// Decide whether or not we need to show the KidsScoop popup. Have they been on this site within the last 90 days? If so, don't annoy them.
if ($_COOKIE['lastvisited'] > 0) $showpopup = false;
else $showpopup = true;
setcookie('lastvisited', time(), time()+60*60*24*90, '/', '.' . $_SERVER['HTTP_HOST']); // expire in 90 days
*/
// new policy from Mike 2/20/2017
$showpopup = false;
require('includes/config.php');
require('includes/leaderboardbanners.php');
$usfgincludes = "/var/www/html/usfamilyguide.com/user/includes";
$webmaster = 'kburger@usfamilyguide.com';
$id = $_REQUEST['id'];
if (! is_numeric($id)) exit;
if ($_POST['subscribe']) { // for KidsScoop subscriptions
require('includes/subscribe.php');
}
if ($_POST['submit']) {
//exit; // removed 2/16/12 -- too much spam and no real comments - added again 11/5/15 for the redesigned websites
$error = '';
$ok = '';
$comment = strip_tags(trim($_POST['comment']));
$commentname = strip_tags(trim($_POST['commentname']));
$response = $_POST['g-recaptcha-response'];
// reCAPTCHA check - NEW
$url = 'https://www.google.com/recaptcha/api/siteverify';
$data = array(
'secret' => '6LchGk4UAAAAAAcYNm1fyH3LZKqJVPMWaMn_vhBG',
'response' => $_POST['g-recaptcha-response'],
'remoteip' => $_SERVER['REMOTE_ADDR']
);
$options = array(
'http' => array (
'method' => 'POST',
'content' => http_build_query($data)
)
);
$context = stream_context_create($options);
$verify = file_get_contents($url, false, $context);
$captcha_success = json_decode($verify);
if ($captcha_success->success==false) {
$error .= "Please verify that you are not a robot.";
}
/*
if (stristr($comment, 'iphone')) $error .= '
No Spam';
if ($commentname == 'SweetKattyQQ') $error .= '
No Spam';
if ($commentname == 'cash for survey') $error .= '
No Spam';
*/
if (!$error && $comment) {
$query = "INSERT INTO review_replies SET reviewid='$id', posttime=NOW(), author='$commentname', reply='$comment', approved='0', ipaddress='" . $_SERVER['REMOTE_ADDR'] . "'";
$result = mysql_query($query) or die("Query failed: " . mysql_error());
mail($webmaster, 'New Parent Review Comment Awaiting Your Approval', "https://www.usfamilyguide.com/nationaladmin/reviews.php?id=$id", "From: $webmaster");
$ok = 'Thank You! Your comment will be reviewed and approved soon.';
}
}
$query = "SELECT businessid, editorid, DATE_FORMAT(posttime, '%b %D, %Y'), headline, review FROM reviews WHERE id='$id'";
$result = mysql_query($query) or die("Query failed: " . mysql_error());
list($bid, $editorid, $posted, $headline, $review) = mysql_fetch_row($result);
if (mysql_num_rows($result) != 1) {
header($_SERVER["SERVER_PROTOCOL"] . " 404 Not Found", true, 404);
echo "
The requested URL was not found on this server.
\n"; exit; } if ($bid) { // this review is associated with one of our clients - go get their name //$query = "SELECT companyname FROM clients WHERE businessid='$bid'"; $query = "SELECT companyname, active FROM clients WHERE businessid='$bid'"; // policy change 12/13/2017 $result = mysql_query($query) or die("Query failed: " . mysql_error()); list($companyname, $active) = mysql_fetch_row($result); } if ($editorid) { // written by one of our editors - go get their name $query = "SELECT lname, fname FROM editors WHERE id='$editorid'"; $result = mysql_query($query) or die("Query failed: " . mysql_error()); list($lname, $fname) = mysql_fetch_row($result); } ?>Events, Coupons, Reviews!
comments
while (list($posted, $author, $reply) = mysql_fetch_row($result)) { echo "- \n
$author$posted \n \n";
}
?>
$reply
\n