Query("INSERT INTO `review_respond` SET `review_id` = '".mysql_real_escape_string($_GET['id'])."', `naam`= '".mysql_real_escape_string($_POST['naam'])."', `reactie` = '".mysql_real_escape_string($_POST['ervaring'])."' ") or die (mysql_error()); } $sql = $oDatabase->Query("SELECT * FROM `review_respond` WHERE `review_id` = '".mysql_real_escape_string($_GET['id'])."' ORDER BY `id`DESC "); $aResponds = array(); while($oRes = mysql_fetch_object($sql)){ $aResponds[] = $oRes; } $oSmarty->assign("aResponds",$aResponds); $sql = $oDatabase->Query("SELECT * FROM `reviews` WHERE `id` = '".mysql_real_escape_string($_GET['id'])."' "); $oRes = mysql_fetch_object($sql); $oSmarty->assign("oData",$oRes); $oSmarty->assign("metaTitle","Beoordeel document ".$_GET['id']."."); $oSmarty->assign("metaDesc","Beoordeel CV's en Solliciatiebrieven van anderen, beoordeel document ".$_GET['id']); $oSmarty->display("review.tpl"); ?>