author_posts.php

<?php include "includes/db.php";?>

<?php include "includes/header.php";?>

<!-- Navigation -->
<?php include "includes/nav.php";?>

<!-- Page Content -->
<div class="container">

  <div class="row">

    <!-- Blog Entries Column -->
    <div class="col-md-8">
      <?php
if (isset($_GET['p_author'])) {

    $p_author = mysqli_real_escape_string($connection, $_GET['p_author']);
    //chow post to admin , even if they are draft
    if (isset($_SESSION['user_role']) && $_SESSION['user_role'] == 'admin') {
        $query = "SELECT * FROM posts WHERE post_author = '{$p_author}' ORDER BY post_id DESC";
    } else {
        $query = "SELECT * FROM posts WHERE post_author = '{$p_author}' AND post_status = 'published' ORDER BY post_id DESC";
    }

    $select_all_posts_querys = mysqli_query($connection, $query);
    if (mysqli_num_rows($select_all_posts_querys) < 1) {
        header("Location: index.php");
    } else {

        while ($row = mysqli_fetch_assoc($select_all_posts_querys)) {
            $post_title = mysqli_real_escape_string($connection, $row['post_title']);
            $post_id = mysqli_real_escape_string($connection, $row['post_id']);
            $post_author = mysqli_real_escape_string($connection, $row['post_author']);
            $post_date = mysqli_real_escape_string($connection, $row['post_date']);
            $post_image = mysqli_real_escape_string($connection, $row['post_image']);
            $post_status = mysqli_real_escape_string($connection, $row['post_status']);
            $post_content = mysqli_real_escape_string($connection, substr($row['post_content'], 0, 400));

            ?>




      <!-- First Blog Post -->



      <h2>
        <a href="post.php?p_id=<?php echo $post_id;
            ?>"><?php echo $post_title;
            ?></a>
      </h2>
      <p class="lead">
        <?php
//selecting post author from db

            $query = "SELECT * FROM users WHERE user_id = $post_author";
            $select_user_query = mysqli_query($connection, $query);
            while ($row = mysqli_fetch_assoc($select_user_query)) {

                $post_author = mysqli_real_escape_string($connection, $row['user_firstname'] . " " . $row['user_lastname']);

            }
            ?>

        All Posts By <?php echo $post_author; ?>
      </p>
      <p><span class="glyphicon glyphicon-time"></span> Posted on <?php echo $post_date; ?></p>
      <hr>
      <a href="post.php?p_id=<?php echo $post_id;
            ?>">
        <img class="img-responsive" src="images/<?php echo $post_image; ?>" alt="<?php echo $post_image; ?>">
      </a>
      <hr>
      <p><?php echo $post_content; ?></p>
      <a class="btn btn-primary" href="post.php?p_id=<?php echo $post_id ?>">Read More <span
          class="glyphicon glyphicon-chevron-right"></span></a>
      <?php

        }
    }
}?>



    </div>

    <!-- Blog Sidebar Widgets Column -->

    <?php include "includes/sidebar.php";?>
  </div>
  <!-- /.row -->

  <hr>

  <?php include "includes/footer.php";?>