Geçen yazdan kalma kodlarım. Bu siteyi açmak nasip olmadı, bari birilerine yarasın

// Çalışıyor
function AddComment($text, $userId, $postid){
	SafeSql($userId);
	SafeSql($text);
	SafeSql($postid);
	$sql = "INSERT INTO comments (commenttext, userId, postid, commenttime) VALUES ( '%s', '%d', '%d', UNIX_TIMESTAMP() )";
	$sql = sprintf($sql, $text, $userId, $postid);
	if(MyQuery($sql)!==0){
		return 1;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function EditComment($commentid, $commenttext){
	SafeSql($commenttexttext);
	SafeSql($commentid);
	$sql = "UPDATE comments SET commenttext='%s' WHERE commentid='%d' ";
	$sql = sprintf($sql, $commenttext, $commentid);
	if(MyQuery($sql)!==0){
		return 1;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function DeleteComment($commentid){
	SafeSql($commentid);
	$sql = "DELETE FROM comments WHERE commentid='%d'";
	$sql = sprintf($sql, $commentid);
	if(MyQuery($sql)!==0){
		return 1;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function BlockComment($commentid){
	SafeSql($commentid);
	$sql = "UPDATE comments SET blocked='1' WHERE commentid='%d' ";
	$sql = sprintf($sql,$commentid);
	if(MyQuery($sql)!==0){
		return 1;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function UnblockComment($commentid){
	SafeSql($commentid);
	$sql = "UPDATE comments SET blocked='0' WHERE commentid='%d' ";
	$sql = sprintf($sql,$commentid);
	if(MyQuery($sql)!==0){
		return 1;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function ReportComment($commentId,$userId){
	SafeSql($commentId);
	SafeSql($userId);
	$sql = "INSERT IGNORE INTO reports (postid, userid, time,type) VALUES(%d,%d,UNIX_TIMESTAMP(),'c')";
	$sql = sprintf($sql,$commentId,$userId);
	if(MyQuery($sql)!==0){
		return 1;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function UnreportComment($reportId){
	SafeSql($reportId);
	$sql = "UPDATE reports SET process='1' WHERE reportid='%d' ";
	$sql = sprintf($sql,$reportId);
	if(MyQuery($sql)!==0){
		return 1;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function ListComments($postid, $type){
	SafeSql($postid);
	SafeSql($type);
	if($type == 0) // ALL
		$case = "";
	elseif($type == 1 )  //Blocked
		$case = "WHERE c.blocked='1' AND c.reported='0' ";
	elseif($type == 2 )  //Reported
		$case = "WHERE c.reported='1' AND c.blocked='0'";
	elseif($type == 3 )  //Blocked & Reported  -------> BLOCKED ÇIKARILDI
		$case = "WHERE c.blocked='1' AND c.reported='1'";
	elseif ($type == 4)  //Normal
		$case = "WHERE c.blocked='0'";
	$sql = "SELECT c.commentid, c.commenttext, c.userId, c.commenttime, u.username FROM comments c, users u ".$case." AND c.postid='%d' AND c.userid=u.userid ORDER BY commenttime";
	$sql = sprintf($sql,$postid);
	$result = MySqlMultiSelect($sql);
	if($result !== 0){
		return $result;
	}
	else{
		return 0;
	}
}
// Çalışıyor
function ShowComment($commentid){
	SafeSql($commentid);
	$sql = "SELECT commentid, commenttext, userId, postid, commenttime FROM comments WHERE blocked='0' ";
	$result = MysqlOneSelect($sql);
	if($result !== 0){
		return $result;
	}
	else{
		return 0;
	}
}

Tablo yapısı

CREATE TABLE `comments` (
  `commentid` mediumint(10) NOT NULL auto_increment,
  `commenttext` text NOT NULL,
  `userid` mediumint(7) NOT NULL,
  `postid` int(10) NOT NULL,
  `reported` tinyint(1) NOT NULL default '0',
  `blocked` tinyint(1) NOT NULL default '0',
  `commenttime` int(11) NOT NULL,
  PRIMARY KEY  (`commentid`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin5 AUTO_INCREMENT=1 ;

Sql Fonksiyonları

function SafeSql (&$value){
	if(get_magic_quotes_gpc()) {
		if(ini_get('magic_quotes_sybase')){
			$value = str_replace("''", "'", $value);
		}
		else{
			$value = stripslashes($value);
		}
	}
	$value= mysql_real_escape_string($value);
}
function MySqlOneSelect($sqlQuery){
	$result = @mysql_query($sqlQuery);
	if(!$result){
		echo 'Query failed: '.mysql_error();
		return 0;
	}
	else{
		$array = mysql_fetch_array($result);
		@mysql_free_result($result);
		return $array;
	}
}
function MySqlMultiSelect($sqlQuery){
	$result = @mysql_query($sqlQuery);
	if(!$result){
		echo 'Query failed: '.mysql_error();
		return 0;
	}
	else{
		$i=0;
		while ($array = mysql_fetch_array($result)){
			$arrayArray[$i++]=$array;
		}
		@mysql_free_result($result);
		if($i!==0){
			return $arrayArray;
		}
		else{
			return 0;
		}
	}
}
function MyQuery($sqlQuery){
	$q = @mysql_query($sqlQuery);
	if(!$q){
		echo 'Query failed: '.mysql_error();
		return 0;
	}
	else{
		return $q;
	}
}