aurweb/web/template/pkg_comment_form.php

<div id="generic-form" class="box">
	<h2><?php echo __("Add Comment"); ?></h2>
	<form call="general-form" action="<?php echo $_SERVER['REQUEST_URI'] ?>" method="post">
		<fieldset>
<?php
if (isset($_REQUEST['comment']) && check_token()) {
	echo '<p>' . __('Comment has been added.') . '</p>';
}
?>
			<div>
				<input type="hidden" name="ID" value="<?php echo intval($_REQUEST['ID']) ?>" />
				<input type="hidden" name="token" value="<?php echo htmlspecialchars($_COOKIE['AURSID']) ?>" />
			</div>
			<p>
				<label for="id_comment"><?php echo __("Comment") . ':' ?></label>
				<textarea id="id_comment" name="comment" cols="80" rows="10"></textarea>
			</p>
			<p>
				<label></label>
				<input type="submit" value="<?php echo __("Add Comment") ?>" />
			</p>
		</fieldset>
	</form>
</div>