18 include(
'server.php');
19 if(!$_SESSION[
'loggedin']) {
20 header(
"location: index.php");
37 $servername =
"localhost";
42 $db = mysqli_connect($servername, $username, $pass, $dbname);
46 if(isset($_POST[
'submit'])){
47 $name = mysqli_real_escape_string($db, $_POST[
'name']);
48 $roll = mysqli_real_escape_string($db, $_POST[
'roll']);
49 $email = mysqli_real_escape_string($db, $_POST[
'email']);
50 $coursetaken = mysqli_real_escape_string($db, $_POST[
'coursetaken']);
51 $company = mysqli_real_escape_string($db, $_POST[
'companyname']);
52 $story = mysqli_real_escape_string($db, $_POST[
'story']);
53 $student_id = mysqli_real_escape_string($db, $_POST[
'student_id']);
54 $roundprovided = implode(
",", $_POST[
'roundprovided']);
55 $roundcleared = implode(
",", $_POST[
'roundcleared']);
58 $created = date(
'Y-m-d H:i:s');
60 $story = str_replace(array(
"\n",
"\n",
"\\n",
"\\n"),
"<br/>",$story);
63 if(empty($name)){array_push($error,
"Name is required");}
64 if(empty($roll)) {array_push($error,
"roll is required");}
65 if(empty($email)){array_push($error,
"Email is required");}
66 if(empty($coursetaken)){array_push($error,
"Course Name is required");}
67 if(empty($company)){array_push($error,
"Company Name is required");}
68 if(empty($story)){array_push($error,
"Story is required");}
74 $inset_query =
"INSERT INTO posts(student_id,name,roll,email,coursetaken,companyname,story,roundprovided,roundcleared,created_at) VALUES ('$student_id','$name','$roll','$email','$coursetaken','$company','$story','$roundprovided','$roundcleared','$created')";
76 mysqli_query($db, $inset_query) or die(mysqli_error());
78 header(
"location: profile.php");