Untitled

if(strip_tags($HTTP_POST_VARS['terms']) !== 'agree') {   box('Error!', 'You have to agree to the terms to post an comment.', '100');} else {   $username = htmlspecialchars(strip_tags($HTTP_POST_VARS['username']));   $comment = htmlspecialchars(strip_tags($HTTP_POST_VARS['comment']));   if(!empty($username) && !empty($comment)) {      $time = time();      mysql_query("INSERT INTO `glest_posts` (`post_nid`, `post_message`, `post_author`, `post_date`) VALUES ('{$row['news_id']}', '$comment', '$username', '$time')") || box('Error!', 'There was an error saving the comment.<br /><br />'.mysql_error(), '100');   }}