<?php
include("auth.php");
include( "../inc/nocache.inc" );
include( "../dbopen.php" );
###############################################

 $id=((!isset($_POST["id"]))?"":$_POST["id"]);
 $REPLY=((!isset($_POST["REPLY"]))?"":$_POST["REPLY"]);

 if ( get_magic_quotes_gpc() != 1 ) {
	 $REPLY = addslashes($REPLY);
 }
 	 $REPLY = htmlspecialchars(trim($REPLY));

 $sSQL = "UPDATE guestbook SET reply = '$REPLY'
	   WHERE guestbook_id = ".$id;

mysql_query($sSQL,$link);
mysql_close($link);

header("Location: gb.php");
?>