<?php

    gatekeeper();

    global $CONFIG;
    $rid = get_input('resourceid');
    $comment = addslashes(get_input('comment'));
    $private = get_input('private_comment');

    if ($rid && $comment) {
        $user_guid = $_SESSION['user']->getGUID();
        if (empty($private)) {
            $res = insert_data("INSERT INTO {$CONFIG->dbprefix}koolielu_waramu_comments (waramu_id, user_guid, comment) VALUES ('$rid', $user_guid, '$comment')");
        } else {
            $res = insert_data("INSERT INTO {$CONFIG->dbprefix}koolielu_waramu_comments (waramu_id, user_guid, comment, is_public) VALUES ('$rid', $user_guid, '$comment', 0)");
        }
        system_message(elgg_echo("generic_comment:posted"));
    }

    forward("pg/waramu/view/".$rid); 

?>