<?php

require_once($_SERVER['DOCUMENT_ROOT']."/config.php");

if($_SESSION['id'] && $_POST['comment'] && $_POST['object_id'] && is_numeric($_POST['object_id'])) {
    $post = clearInputData($_POST);

    $sqlObj = "SELECT objects.id_add_user FROM objects WHERE objects.id=$post[object_id]";
    $rezObj = mysql_query($sqlObj);
    $obj = mysql_fetch_assoc($rezObj);

    $idUser = $_SESSION['id'];
    $from_id = $_SESSION['id'];
    if($obj['id_add_user'] > 0){
        $idUser = $obj['id_add_user'];
    }

    if ($post['event_id']) {
        $sql = "UPDATE user_object_events SET comment = '$post[comment]' WHERE id = $post[event_id] AND object_id = $post[object_id]";
    } else {
        $sql = "INSERT INTO user_object_events (user_id, from_id, object_id, type, comment) VALUES ($idUser, $from_id, $post[object_id], 'comment', '$post[comment]')";
    }

    mysql_query($sql);
}