Posting comment at the end of the page using PHP MySQL or SQLite

Database used and table 🔝

CREATE TABLE `cmt_post` (
  `post_id` int(5) NOT NULL auto_increment,
  `p_name` varchar(10) NOT NULL,
  `dt` date NOT NULL,
  `name` varchar(25) NOT NULL,
  `email` varchar(50) NOT NULL,
  `dtl` text NOT NULL,
  `status` varchar(4) NOT NULL default 'ns',
  UNIQUE KEY `post_id` (`post_id`,`p_name`)
) ENGINE=InnoDB DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;

CREATE TABLE `cmt_post` (
  `post_id` integer primary key,
  `p_name` text,
  `dt` text,
  `name` text,
  `email` text,
  `dtl` text,
  `status` text default 'ns'
)

Integration of script with different Posts 🔝

//////// start of comment /////////////
$p_name="1be"; // Unique file name of the page. 
require "config.php"; //Remove if  already have db connection
require "cmt-display.php"; // To display the comments
require "cmt-formck.php"; // Processing the form data
require "cmt-form.php"; // To display the form.
/////// end of comment //////////////

Displaying the comments posted by users cmt-display.php 🔝

SELECT name,dtl,dt FROM cmt_post WHERE p_name=:p_name AND status='apv' ORDER BY dt

<?Php
//require 'config.php'; // remove if database connection is already there
$query="SELECT name,dtl,dt FROM cmt_post WHERE p_name=:p_name and status='apv' ORDER BY dt";

$step = $my_conn->prepare($query);
$step->bindParam(':p_name', $p_name,PDO::PARAM_STR,10);
$step->execute();
$step = $step->fetchAll();

echo "<table width='400' border='0' cellspacing='1' cellpadding='0'>";
foreach($step as $row){$dtl=nl2br($row['dtl']);
echo "<tr bgcolor='#f1f1f1'><td>$row[name]</td>
	<td align=right>".date("d-m-Y",strtotime($row['dt']))."</td></tr>";
echo "<tr ><td colspan=2>$dtl</td></tr>";
}
echo "</table>";
?>

Posting of comments: showing the form by cmt-form.php 🔝

<?Php
echo "<table width='400' border='0' cellspacing='1' cellpadding='0'>
<form method=post action=''><input type=hidden name=todo value=post_comment>
<tr bgcolor='#f1f1f1'><td>Name</td><td><input type=text name=name></td></tr>
<tr ><td>Email</td><td><input type=text name=email>( not to be displayed)</td></tr>
<tr bgcolor='#f1f1f1'><td colspan=2>
<textarea name=dtl rows=3 cols=50></textarea>
</td></tr>
<tr ><td colspan=2 align=center><input type=submit value='Post Comment'></td></tr>
</table></form>
";
?>

Storing the posted comment in database table cmt-formck.php 🔝

<?Php
@$todo=$_POST['todo'];
if(isset($todo) and $todo=="post_comment"){

$name=$_POST['name']; // Collect name as entered by user 
$email=$_POST['email'];
$dtl=$_POST['dtl'];

$status = "OK"; // flag for input validation
$msg="";

// if name  is less than 3 char then status is not ok
if( strlen($name) <3 or strlen($name) > 25){
$msg=$msg."Your Name  should be more than 2 and less than25 char length<BR>";
$status= "NOTOK";}					

if( strlen($dtl) <3 ){
$msg=$msg."Your comment should be more than 3 char length<BR>";
$status= "NOTOK";}					


if($status<>"OK"){ // validation failed
echo "<font face='Verdana' size='2' color=red>$msg</font>";
}else{ // if all validations are passed.
$dt=date("Y-m-d"); 
$status='ns'; //Change this to apv if you want all messages to be automatically approved once posted.

$query="INSERT INTO cmt_post(p_name,dt,name,email,dtl,status)
 values(:p_name,'$dt',:name,:email,:dtl,'$status')";
$step=$my_conn->prepare($query);
$step->bindParam(':p_name',$p_name,PDO::PARAM_STR, 10);
$step->bindParam(':name',$name,PDO::PARAM_STR, 15);
$step->bindParam(':email',$email,PDO::PARAM_STR,50);
$step->bindParam(':dtl',$dtl,PDO::PARAM_STR);

if($step->execute()){
$mem_id=$my_conn->lastInsertId(); 
echo " <font face='Verdana' size='2' color=green>Thank you for posting your comment<br></font>";
}
else{
echo " Not able to add data please contact Admin ";
} // 
} // if status is ok 
}// Checking of if condition if form is submittted
?>

Admin : Admin Area to mangage comments posted 🔝

$query="SELECT * FROM cmt_post order by dt ";

echo "<table width='100%' border='0' cellspacing='1' cellpadding='0'>";
foreach($my_conn->query($query) as $row){
echo "<tr bgcolor='#f1f1f1'><td><b>id</b>:$row[post_id] <b>name</b>:$row[name] 
 <b>email</b>:$row[email] <b>status</b>:$row[status] <a href='list-dtl.php?post_id=$row[post_id]&f_name=list.php'>Details</a></td>
 <td align=right>".date("d-m-Y",strtotime($row['dt']))."</td></tr>
 <tr ><td colspan=2>$row[dtl]</td></tr>";
}
echo "</table>";

Admin: Displaying details and updating status 🔝

$post_id=$_GET['post_id'];
$f_name=$_GET['f_name'];
$query="select * from cmt_post where post_id=:post_id";
$count=$my_conn->prepare($query);
$count->bindParam(":post_id",$post_id,PDO::PARAM_INT,3);

if($count->execute()){
echo " Success <br>";
$row = $count->fetch(PDO::FETCH_OBJ);


echo "<table width='100%' border='0' cellspacing='1' cellpadding='0'>";
echo "<tr bgcolor='#f1f1f1'><td><b>id</b>:$row->post_id <b>name</b>:$row->name 
<b>email</b>:$row->email <b>status</b>:$row->status</td>
<td align=right>".date("d-m-Y",strtotime($row->dt))."</td></tr>";
echo "<tr ><td colspan=2>$row->dtl</td></tr>";
echo "</table>";
echo "<hr>";
}else{
//$row=$count->fetchAll();
print_r($dbo->errorInfo()); 
}

@$todo=$_POST['todo'];

if($todo=="status-up"){
$f_name=$_POST['f_name'];
$post_id=$_POST['post_id'];
$status=$_POST['status'];


if($status=="del"){
$query="DELETE FROM cmt_post WHERE post_id=:post_id";
$step=$my_conn->prepare($query);
$step->bindParam(":post_id",$post_id,PDO::PARAM_INT,3);
$step->execute();
if($step->rowCount() <> 1){
header ("Location: $f_name?msg=<br>Not able to delete Record "); 
}else{header ("Location: $f_name?msg=<br>Record  deleted "); }

}else{
$query="UPDATE cmt_post SET status='$status' WHERE post_id=:post_id";
$step=$my_conn->prepare($query);
$step->bindParam(":post_id",$post_id,PDO::PARAM_INT,3);
$step->execute();
if($step->rowCount() <> 1){
header ("Location: $f_name?msg=<br>Not able to update Record"); 
}else{header ("Location: $f_name?msg=<br>Record updated "); }
}
}// end of todo checking
else{
header ("Location: $f_name?msg=<br>Data Problem"); 
}

Using SQLite or MySQL 🔝

<?Php
#### FOR SQLite Database ######
// This will create the database if not exists in the same location where the script is running.
// For a different location give the path details. 
//$my_conn = new PDO('sqlite:D:\\sqlite-data\\student.db');// different path
$my_conn = new PDO('sqlite:'.dirname(__FILE__).'/comment.db'); // same location
$my_conn->setAttribute(PDO::ATTR_ERRMODE,PDO::ERRMODE_EXCEPTION);
#### end of SQLite database connection #####


###### PHP PDO with MySQL ##### For php PDO use below lines ##
/*
$host_name = "localhost"; // or different host 
$database = "my_db";   // Change your database name
$username = "root";    // Your database user id 
$password = "password";// Your password

//////// Do not Edit below /////////
try {
$my_conn = new PDO('mysql:host='.$host_name.';dbname='.$database, $username, $password);
} catch (PDOException $e) {
print "Error!: " . $e->getMessage() . "<br/>";
die();
}
*/
####### END of PHP PDO ######
?>

Download the script with Database details 🔝