X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/d96a8550867531e92b109a0a675cd12ce1ff7843..2d7b510a9d33a552b024e1db00212658f21afce6:/widget/reply.php

diff --git a/widget/reply.php b/widget/reply.php
index 6fe9eb1..f924851 100644
--- a/widget/reply.php
+++ b/widget/reply.php
@@ -6,7 +6,7 @@ require_once 'upload.inc.php';
 if ($_POST) {
 	try {
 		$newcomment = createcomment($_POST, $Issue);
-		$target = "/{$Page->link}/$newcomment#$newcomment";
+		$target = "/{$Page->link}?last=$newcomment#$newcomment";
 		abort($target, ($Page->api ? 200 : 303) . ' reply success');
 		$_POST['reply'] = NULL;
 	}
@@ -14,11 +14,13 @@ if ($_POST) {
 		if ($Page->api) {
 			abort(ucfirst($e->getMessage()), '500 reply error');
 		}
-		print "<p class=warn>Antwoord niet opgeslagen: {$e->getMessage()}.</p>\n\n";
+		printf("<p class=warn>Antwoord niet opgeslagen: %s.</p>\n\n",
+			nl2br(htmlspecialchars($e->getMessage()))
+		);
 	}
 }
 
-$cols = '*, (SELECT json_agg(journal.*) FROM journal WHERE comment_id = comments.id) AS journal';
+$cols = "*, (SELECT json_agg(journal.*) FROM journal WHERE comment_id = comments.id AND property = 'attr') AS journal";
 $query = $Db->query("SELECT $cols FROM comments WHERE page = ? ORDER BY created", [$Page->link]);
 
 if ($row = $query->fetch()) {