submit_comment.php

<?php
session_start();
require "includes/db.php";

if($_SERVER['REQUEST_METHOD'] === 'POST'){
    
    $blog_id = intval($_POST['blog_id']);
    $name = $conn->real_escape_string($_POST['name']);
    $email = $conn->real_escape_string($_POST['email']);
    $website = $conn->real_escape_string($_POST['website']);
    $comment = $conn->real_escape_string($_POST['comment']);

    $sql = "INSERT INTO blog_comments (blog_id, commenter_name, commenter_email, commenter_website, comment_text, status)
            VALUES ($blog_id, '$name', '$email', '$website', '$comment', 'pending')";

    if($conn->query($sql)){
        $_SESSION['comment_msg'] = "Your comment has been submitted and is awaiting approval.";
    } else {
        $_SESSION['comment_msg'] = "Failed to submit comment. Please try again.";
    }

    header("Location: blog_detail.php?id=$blog_id#comments");
    exit;
}
?>