1 files changed, 13 insertions, 2 deletions
diff --git a/famille.py b/famille.py
index 237a122..4a8cb73 100644
--- a/famille.py
+++ b/famille.py
@@ -56,12 +56,23 @@ def add_news():
     elif request.method == 'GET':
         return render_template("news/add.html")
 
-@app.route('/news/<int:news_id>/')
+@app.route('/news/<int:news_id>/', methods=['GET', 'POST'])
 @login_required
 def show_news(news_id):
     news = query_db("SELECT * FROM news LEFT JOIN users ON news.user_id = users.id "
                     "WHERE news.id = ?", (news_id,), True)
-    return render_template("news/show.html", news=news)
+    if request.method == 'GET':
+        comments = query_db("SELECT * FROM comments LEFT JOIN users "
+                            "ON comments.user_id = users.id "
+                            "WHERE comments.news_id = ?", (news_id,))
+        return render_template("news/show.html", news=news, comments=comments)
+    elif request.method == 'POST':
+        user_id = session['user_id']
+        content = request.form['content']
+        g.db.execute("INSERT INTO comments ('user_id', 'content', 'news_id') "
+                     "VALUES (?, ?, ?)", (user_id, content, news_id))
+        g.db.commit()
+        return redirect(url_for('show_news', news_id=news_id))
         
 @app.route('/login/', methods=['GET', 'POST'])
 def login():