Gäste: JA
User: NEIN
Admin: JA
Wenn ich im Admin Bereich unter Konfig "Schreiben in der Shoutbox ab?" ändern will, steht da einach gar nichts.
Hier mal meine Shoutbox.php:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 | <?php # Copyright by Manuel Staechele# Support www.ilch.dedefined ('main') or die ( 'no direct access' ); if ( loggedin() ) { $shoutbox_VALUE_name = $_SESSION['authname']; $shoutbox_user = $_SESSION['authid']; } else { $shoutbox_VALUE_name = 'Nickname'; $shoutbox_VALUE_user = ""; } if ( !empty($_POST['shoutbox_submit']) AND chk_antispam ('shoutbox')) { $shoutbox_nickname = escape($_POST['shoutbox_nickname'],'string'); $shoutbox_nickname = substr($shoutbox_nickname, 0, 15); $shoutbox_textarea = escape($_POST['shoutbox_textarea'],'textarea'); $shoutbox_textarea = preg_replace("/\[.?(url|b|i|u|img|code|quote)[^\]]*?\]/i","",$shoutbox_textarea); $shoutbox_textarea = strip_tags($shoutbox_textarea); $shoutbox_time = time(); $shoutbox_ip = $_SERVER['REMOTE_ADDR']; $shoutbox_cookie = $_COOKIE['id']; if($allgAr['sb_name']==1){ $erg = db_query('SELECT name FROM `prefix_banscript`'); $row = mysql_fetch_array($erg); if ( !empty($shoutbox_nickname) AND !empty($shoutbox_textarea) AND (@!in_array($shoutbox_nickname,$row))) { db_query('INSERT INTO `prefix_shoutbox` VALUES ( "" , "'.$shoutbox_nickname.'" , "'.$shoutbox_textarea.'" , "'.$shoutbox_time.'" , "'.$shoutbox_ip.'" , "'.$shoutbox_cookie.'" , "'.$shoutbox_user.'") ' ); } else echo'Der Name '.$shoutbox_nickname.' ist gesperrt!'; } elseif($allgAr['sb_name']==0){if ( !empty($shoutbox_nickname) AND !empty($shoutbox_textarea) ) { db_query('INSERT INTO `prefix_shoutbox` VALUES ( "" , "'.$shoutbox_nickname.'" , "'.$shoutbox_textarea.'" , "'.$shoutbox_time.'" , "'.$shoutbox_ip.'" , "'.$shoutbox_cookie.'" , "'.$shoutbox_user.'") ' ); }} } if (has_right($allgAr['sb_recht'])){ echo '<form action="index.php" method="POST">'; echo '<input type="text" size="15" name="shoutbox_nickname" value="'.$shoutbox_VALUE_name.'" onFocus="if (value == \''.$shoutbox_VALUE_name.'\') {value = \'\'}" onBlur="if (value == \'\') {value = \''.$shoutbox_VALUE_name.'\'}" maxlength="15">'; echo '<br /><textarea style="width: 80%" cols="15" rows="2" name="shoutbox_textarea"></textarea><br />'; echo get_antispam ('shoutbox', 0); echo '<input type="submit" value="'.$lang['formsub'].'" name="shoutbox_submit">'; echo '</form>'; } if($allgAr['S_m']=="1") echo '<marquee align="left" direction="'.$allgAr['S_m_r'].'" width="90%" height="150" scrollAmount="1" scrolldelay="10" onMouseover="this.scrollAmount=0" onMouseout="this.scrollAmount=1" style="border:none;">'; echo'<table width="94%" class="border" cellpadding="2" cellspacing="1" border="0">'; $erg = db_query('SELECT * FROM `prefix_shoutbox` ORDER BY id DESC LIMIT '.(is_numeric($allgAr['sb_limit'])?$allgAr['sb_limit']:5)); $class = 'Cnorm'; while ($row = db_fetch_object($erg) ) { $class = ( $class == 'Cmite' ? 'Cnorm' : 'Cmite' ); echo'<table width="94%" class="border" cellpadding="2" cellspacing="1" border="0">'; echo '<tr class="'.$class.'"><td>'; if($allgAr['sb_date']==1 AND !empty($row->time) ) {echo date("d.m.y-H:i",$row->time).'<br>';} echo '<b>'; if($row->user != "" AND $allgAr['N_l']== "1"){echo'<a href="index.php?user-details-'.$row->user.'">'.$row->nickname.'</a>';} else{echo $row->nickname;} echo':</b> '.preg_replace( '/([^\s]{'.$allgAr['sb_maxwordlength'].'})(?=[^\s])/', "$1\n", $row->textarea).'</td></tr>'; } echo '</table></marquee><table border="0"><tr><td><a class="box" href="index.php?shoutbox">'.$lang['archiv'].'</a></td>'; if(is_siteadmin() AND ($allgAr['bs_act']=="1") ) echo'<td><a href="admin.php?banscript">Ban Script</a></td>'; echo'</tr></table>';?> |
Wenn ich mich richtig erinnere, müsste diese shoutbox vom Banscript kommen. Naja also letztendlich soll jeder in die Shoutbox schreiben kann.
MfG Black EyE
betroffene Homepage: risinglegends08.ri.funpic.de/index.php
