defined ('main') or die ( 'no direct access' );
$shoutbox_VALUE_name = getenv("REMOTE_ADDR");
$datum=date(" j.n.Y");
$zeit=date(" @ H:i");
if ( $_SESSION['authright'] <= -1 ) {
// registrierte User
if ( $_SESSION['authright'] <= -1 ) {
$shoutbox_VALUE_name = $_SESSION['authname'];
} else {
$shoutbox_VALUE_name = 'Nickname';
}
if ( !empty($_POST['shoutbox_submit']) ) {
$shoutbox_nickname = escape($_POST['shoutbox_nickname'],'string');
$shoutbox_nickname = substr($shoutbox_nickname, 0, 15);
$shoutbox_textarea = escape($_POST['shoutbox_textarea'],'textarea');
$shoutbox_textarea = preg_replace("/[.?(url|b|i|u|img|code|quote)[^]]*?]/i","",$shoutbox_textarea);
$shoutbox_textarea = strip_tags($shoutbox_textarea);
if ( !empty($shoutbox_nickname) AND !empty($shoutbox_textarea) ) {
db_query('INSERT INTO `prefix_shoutbox` VALUES ( "" , "'.$shoutbox_nickname.''.$zeit.'<br>'.$datum.'" , "'.$shoutbox_textarea.'" ) ' );
}
}
echo '<form action="index.php" method="POST">';
echo '<input type="text" size="20" name="shoutbox_nickname" value="'.$shoutbox_VALUE_name.'" onFocus="if (value == ''.$shoutbox_VALUE_name.'') {value = ''}" onBlur="if (value == '') {value = ''.$shoutbox_VALUE_name.''}" maxlength="15">';
echo '<br /><textarea cols="25" rows="3" name="shoutbox_textarea"></textarea><br />';
echo '<input type="submit" value="'.$lang['formsub'].'" name="shoutbox_submit">';
}
else {
//Gaeste
echo "<font color=#000000><b><br>Zum Posten<br>Bitte Einloggen!<p></p></b></font>";
echo "Deine IP:<br><b>$shoutbox_VALUE_name</b><br><br>";
echo '</form><table width="100%" align="center" class="border" cellpadding="2" cellspacing="1" border="0">';
}
echo '</form><table width="96%" class="border" cellpadding="2" cellspacing="1" border="0">';
$erg = db_query('SELECT * FROM `prefix_shoutbox` ORDER BY id DESC LIMIT 3');
$class = 'Cnorm';
while ($row = db_fetch_object($erg) ) {
$class = ( $class == 'Chead' ? 'Cnorm' : 'Cmite' );
echo '<tr class="'.$class.'"><td><b>'.$row->nickname.':</b> '.preg_replace( '/([^s]{10})(?=[^s])/', "$1n", $row->textarea).'</td></tr>';
}
echo '</table><a class="box" href="?m=boxes/shoutbox&archiv=1" onClick="window.open('#', 'external','width=500,height=400,scrollbars=yes,resizable=no')" target="external">Archiv</a>';
?>
</center>