createreview.php

<?php

$page_title = "Movie Riders";

require_once ('includes/header.php');
require_once ('includes/database.php');

$user_id = $session_id;
$movie_id = $_GET['movie_id'];
$review_rating = $_GET['review_rating'];
$review_string = $_GET['review_content'];
$review_content = mysqli_real_escape_string($conn, $review_string);

//define statement
$query_str = "INSERT INTO reviews VALUES (NULL, '$movie_id', '$user_id', '$review_rating', '$review_content')";

//execute query
$result =  @$conn->query($query_str);
?>

	<div class="container wrapper">

		<ul class="breadcrumb">
			<li><a href="movies.php">Home</a></li>
			<li><a href="movies.php">Movies</a></li>
			<li class="active">Adding Reviews</li>
		</ul>
	
		<h1 class="text-center">Add Review</h1>
	
<?php
//insertion errors
if (!$result) {
    $errno = $conn->errno;
    $errmsg = $conn->error;
    echo "Insertion failed with $errno $errmsg<br/>\n";
    $conn->close();
    exit;
} else {
?>
<div class="container wrapper">
	<h1 class="text-center text-success">Your review has been added!</h1>
</div>
    
<?php

$conn->close();
}
header( "Refresh:3; url=moviedetails.php?id=$movie_id", true, 303);
include_once('includes/footer.php');
?>