 <?PHP
if ($_GET['filename']) {
	$filename = $_GET['filename'];
	$title = $_GET['title'];
	if (isset($_GET['res'])) {
		$res = $_GET['res'];
	}
}	
else
	die('Whoops!  The script encountered an unknown error.  Please go <a href="http://projects.csail.mit.edu/films/">back to the main page</a> (sorry about that) and give it another shot. '); 
if ($GET['newest'])
	$newest = $_GET['newest'];
	
$db = @mysql_connect("mysql.csail.mit.edu", "filmsai", "filmsAI+3456")
	or die('Error!  The script couldn\'t connect to the server.  Please try again in a minute or contact the webmaster.  ');
@mysql_select_db("filmsAI",$db)
	or die('Error!  The script encountered a database error.  Please try again in a minute or contact the webmaster.  ');

$filename = str_replace("/", "", $filename);
$number = substr($filename, 0, 2);
echo ('<center><h2>'.$title.'</h2></center><br><br>');
$query = @mysql_query("SELECT * FROM comments WHERE filename='$filename'") or die("The script encountered an unknown error!  Try again in a minute or contact the webmaster.");
$size = @mysql_num_rows($query);
$title = str_replace(" ", "%20", $title);
if ($size == 0) {
	echo ('<br><br><center>Nobody has entered any comments yet!  Why don\'t you <a href="http://projects.csail.mit.edu/films/commentpostPage.php?filename='.$filename.'&amp;title='.$title.'">tell us what you think</a>?  <br><br>You can also <a href="http://projects.csail.mit.edu/films/dynamicPage.php?reel%23='.$number.'&amp;res='.$res.'">go back to the film\'s page</a>.</center>');
}
else {
echo ('<br><br><div align="center">
	<form action="commentPagePage.php" name="Order" method="get">
	<input type="hidden" name="filename" value='.$filename.'/>
	<input type="hidden" name="title" value='.$title.'/>
	<select name="newest">
	<option value="newest"');
	if ($newest == 'newest') {
		echo ('selected="selected"');
	}
	echo ('>Newest First
	<option value="oldest"');
	if ($newest == 'oldest') {
		echo ('selected="selected"');
	}
	echo ('>Oldest First
	</select>
	<input name="submit" type="submit" value="Reorder comments"/>
	</form></div><br><br>
	');
echo ("<center>\n");
echo ('<table width="70%" text-align="center" border="0" cellpadding="2" cellspacing="2">
				<tbody>');
if ($newest == 'newest') {
	for ($j = $size; $j > 0; $j--) {
		$result = @mysql_fetch_array($query);
		$date = $result['date'];
		$name = $result['name'];
		$comment = $result['comment'];
		echo ('		<tr>
						<td>
							<center>
							At '.$date.' '.$name.' wrote: <br>
							'.$comment.'<br><br>
							</center>
						</td>
					</tr>');
	}
}
else {
	for ($k = 0; $k < $size; $k++) {
		$parray[$k] = @mysql_fetch_array($query);
	}
	for ($m = $size - 1; $m >= 0; $m--) { 
		$result = $parray[$m];
		$date = $result['date'];
		$name = $result['name'];
		$comment = $result['comment'];
		echo ('		<tr>
						<td>
							<center>
							At '.$date.' '.$name.' wrote: <br>
							'.$comment.'<br><br>
							</center>
						</td>
					</tr>');
	}
}
}
$title = str_replace(" ","%20", $title);
echo ('
					<tr>
						<td>
							<center>
							<a href="http://projects.csail.mit.edu/films/commentpostPage.php?filename='.$filename.'&amp;title='.$title.'">Submit your own comments!</a>
							</center>
						</td>
					</tr>
				</tbody>
				</table>
				</center>');
?>