function revres( ) {
global $tableprefix, $useruid, $datim;
$output .= "<div id=\"pagetitle\">"._MANAGEREVIEWS."</div>";
if($_POST['submit']) {
$query = "SELECT review, reviewid, sid, seriesid FROM ".$tableprefix."fanfiction_reviews WHERE reviewid = '$_POST[rid]' LIMIT 1";
$result = mysql_query($query) or die(_FATALERROR."Query: ".$query."<br />Error: (".mysql_errno( ).") ".mysql_error( ));
list($review, $reviewid, $sid, $seriesid) = mysql_fetch_row($result);
$updated = addslashes($review . "<br><br><i>"._AUTHORSRESPONSE.": " . $_POST['response']."</i>");
$update = "UPDATE ".$tableprefix."fanfiction_reviews SET review = '$updated', respond = '1' WHERE reviewid = '$reviewid'";
mysql_query($update) or die(_FATALERROR."Query: $update<br />Error: (".mysql_errno( ).") ".mysql_error( ));
if($sid) $back = sprintf(_BACK2REVIEWS, "sid=$sid");
else $back = sprintf(_BACK2REVIEWS, "seriesid=$seriesid");
$output .= "<center>"._ACTIONSUCCESSFUL." ".$back."</center>";
}
else {
$query ="SELECT review.*,DATE_FORMAT(review.date, '$datim')as date, member.uid as memberuid FROM ".$tableprefix."fanfiction_reviews as review LEFT JOIN ".$tableprefix."fanfiction_authors as member ON member.uid = review.member WHERE review.reviewid = '$_GET[reviewid]' LIMIT 1";
$result = mysql_query($query) or die(_FATALERROR."Query: ".$query."<br />Error: (".mysql_errno( ).") ".mysql_error( ));
$reviews = mysql_fetch_array($result);
if($reviews[seriesid]) $query2 = "SELECT owner as uid FROM ".$tableprefix."fanfiction_series WHERE seriesid = '$reviews[seriesid]'";
else $query2 = "SELECT uid FROM ".$tableprefix."fanfiction_stories WHERE sid = '$reviews[sid]'";
$result2 = mysql_query($query2) or die(_FATALERROR."Query: ".$query2."<br />Error: (".mysql_errno( ).") ".mysql_error( ));
$user = mysql_fetch_array($result2);
if($useruid == $user[uid]) {
$output .= "<table class=\"tblborder\" cellpadding=\"2\" cellspacing=\"0\" align=\"center\"><tr><th class=\"tblborder\">"._REVIEW."</th></tr>";
$output .= "<tr><td class=\"tblborder\">$reviews[review]<br>";
if($reviews[member] == "1") {
$output .= " - <a href=\"viewuser.php?uid=$reviews[memberuid]\"> $reviews[reviewer]</a> $reviews[date]";
}
else $output .= " - $reviews[reviewer] $reviews[date]";
$output .= "</td></tr></table>";
$output .= "<form method=\"POST\" enctype=\"multipart/form-data\" action=\"user.php?action=revres\">";
$output .= "<center>"._RESPONSE.":<br><br><INPUT type=\"hidden\" name=\"rid\" value=\"$_GET[reviewid]\"><textarea class=\"textbox\" name=\"response\" cols=\"40\" rows=\"5\"></TEXTAREA><br><br><INPUT type=\"submit\" class=\"button\" name=\"submit\" value=\""._SUBMIT."\"></form>";
}
else $output .= "<center>"._NOTAUTHORIZED."</center>";
}
return $output;
}
// end revres function
