diff --git a/public/articolo.php b/public/articolo.php index 3fd5794..d4a9279 100644 --- a/public/articolo.php +++ b/public/articolo.php @@ -25,7 +25,7 @@ try { $media = DaoMediaHandler::getMainMediaFromModel($articolo); $medias = DaoMediaHandler::getMedias($articolo); - $commenti = GlobalVariables::get("dao")->query("CommentiModel", + $commenti = GlobalVariables::get("dao")->query("CommentoModel", array("notizia"=>$articolo->id,"status"=>CommentoModel::STATUS_ACCEPTED), array("sort"=>array("about.data"=>-1)) ); @@ -81,15 +81,19 @@ try { } if(array_key_exists("sendCommento", $_POST) && strcmp($_POST["sendCommento"] ,"Send")==0){ - $saveable = new stdClass(); - $saveable->user = UserLoginManager::getLogged(); - $saveable->notizia = $articolo->id; - $saveable->titolo = $_POST["titolo"]; - $saveable->testo = $_POST["commento"]; - $saveable->status = CommentoModel::STATUS_PENDING; - - $commento = new CommentoModel($savable); - GlobalVariables::get("dao")->save($commento); + if(UserLoginManager::isLogged()){ + $saveable = new stdClass(); + + $saveable->user = $user->id; + $saveable->notizia = $articolo->id; + $saveable->titolo = strip_tags($_POST["titolo"]); + $saveable->testo = strip_tags($_POST["commento"]); + $saveable->status = CommentoModel::STATUS_PENDING; + +// var_dump($saveable); + $commento = new CommentoModel($saveable); + GlobalVariables::get("dao")->save($commento); + } } }catch(GUIException $ex){ @@ -133,7 +137,6 @@ GUIHandler::generateHtmlHeaders(array("additionalHeaders"=>$additionalHeaders)); hasProperty("sondaggio") && !is_null($articolo->sondaggio)){?>