<?php
defined (
'main'
)
or
die
(
'no direct access'
);
$query
= db_query(
'SELECT * FROM `prefix_spambox_confic`'
);
while
(
$row
= db_fetch_assoc(
$query
))
{
function
MessageFormat(
$message
)
{
$message
= preg_replace(
"/<\/?[^\\<>|\/]*>/"
,
""
,
$message
);
for
(
$i
=10;
$i
<68;
$i
++) {
$message
=
str_replace
(
"s"
.
$i
,
"<img src=\"include/images/spambox/smilies/s"
.
$i
.
".gif\">"
,
$message
);
}
$message
= preg_replace(
'#arschloch#i'
,
'*****'
,
$message
);
$message
= preg_replace(
'#arsch#i'
,
'*****'
,
$message
);
$message
= preg_replace(
'#depp#i'
,
'*****'
,
$message
);
$message
= preg_replace(
'#idiot#i'
,
'*****'
,
$message
);
$message
= preg_replace(
'#penner#i'
,
'*****'
,
$message
);
$message
= preg_replace(
"/\[b\](.+?)\[\/b\]/is"
,
"<b>\\1</b>"
,
$message
);
$message
= preg_replace(
"/\[u\](.+?)\[\/u\]/is"
,
"<u>\\1</u>"
,
$message
);
$message
= preg_replace(
"/\[i\](.+?)\[\/i\]/is"
,
"<i>\\1</i>"
,
$message
);
$message
= preg_replace(
"/\[pre\](.+?)\[\/pre\]/is"
,
"<pre>\\1</pre>"
,
$message
);
$message
= preg_replace(
"/\[left\](.+?)\[\/left\]/is"
,
"<div align=\"left\">\\1</div>"
,
$message
);
$message
= preg_replace(
"/\[center\](.+?)\[\/center\]/is"
,
"<div align=\"center\">\\1</div>"
,
$message
);
$message
= preg_replace(
"/\[right\](.+?)\[\/right\]/is"
,
"<div align=\"right\">\\1</div>"
,
$message
);
$message
= preg_replace(
"/\[move\](.+?)\[\/move\]/is"
,
"<marquee>\\1</marquee>"
,
$message
);
$message
= preg_replace(
"/\[url=(.+)\](.+)\[\/url\]/is"
,
"<a href=\"\\1\">\\2</a>"
,
$message
);
$message
= preg_replace(
"/(([\.a-zA-Z0-9_-]+)@([.a-zA-Z0-9_-]+)([\.a-zA-Z0-9_-]+))/"
,
"<a href=\"mailto:\\2@\\3\\4\">\\1</a>"
,
$message
);
$message
=
nl2br
(
$message
);
return
$message
;
}
if
(
$_SESSION
[
'authright'
] <= 0) {
echo
'<a align="center" onclick="switchinfo(\'Eintragen\');return false;" href="#"><b><span style="text-transform: uppercase;"><u><b><font size="+1">Eintragen</font></b></u></span><br></b></a>'
;
echo
'<hr>'
;
echo
'<script language="JavaScript" type="text/javascript" src="include/includes/js/spambox.js"></script>'
;
?><script type=
"text/javascript"
>
function
switchinfo(Layer_Name) {
var
GECKO = document.getElementById? 1:0 ;
var
NS = document.layers? 1:0 ;
var
IE = document.all? 1:0 ;
if
(GECKO)
{document.getElementById(Layer_Name).style.display= (document.getElementById(Layer_Name).style.display==
'block'
) ?
'none'
:
'block'
;}
else
if
(NS)
{document.layers[Layer_Name].display=(document.layers[Layer_Name].display==
'block'
) ?
'none'
:
'block'
;}
else
if
(IE)
{document.all[Layer_Name].style.display=(document.all[Layer_Name].style.display==
'block'
) ?
'none'
:
'block'
;}
}
</script><?php
echo
'<div id="Eintragen" style="display:none">'
;
if
(loggedin()) {
$nickname
=
$_SESSION
[
'authname'
];
$user_id
=
$_SESSION
[
'authid'
];
}
else
{
$nickname
=
'Gast'
;
$user_id
= 0;
}
echo
'<form method="POST" name="spambox">'
;
echo
'<p align=
"left"
>ihre Nickfarbe bitte<select size=
"1"
name=
"color"
>
<option value=
"'.$row['nickfarbe'].'"
>
'.$row['
nicknamefarbe
'].'
</option>
<option value=
"ffffff"
>weiß</option>
<option value=
"ff0000"
>rot</option>
<option value=
"222222"
>Grau</option>
<option value=
"0000ff"
>Blau</option>
<option value=
"ffd700"
>Gold</option>
<option value=
"008000"
>Grün</option>
<option value=
"ff69b4"
>Pink</option>
<option value=
"800000"
>dunkel rot</option>
</select></p>';
echo
' <p align=
"left"
>ihre Textfarbe bitte<select size=
"1"
name=
"color1"
>
<option value=
"'.$row['textfarbe'].'"
>
'.$row['
textfarbename
'].'
</option>
<option value=
"000000"
>schwarz</option>
<option value=
"ff0000"
>rot</option>
<option value=
"222222"
>Grau</option>
<option value=
"0000ff"
>Blau</option>
<option value=
"ffd700"
>Gold</option>
<option value=
"008000"
>Grün</option>
<option value=
"ff69b4"
>Pink</option>
<option value=
"800000"
>dunkel rot</option>
</select></p>';
echo
'<input type="hidden" name="user_id" value="'
.
$user_id
.
'" />'
;
echo
'<input type="hidden" name="nickname" value="'
.
$nickname
.
'" '
;
if
(loggedin())
echo
'readonly="readonly"'
;
echo
'/>'
;
echo
'<br>Tickertext<br><textarea style="width: 60%" "hight: 65px" cols="15" rows="2" name="ticker"></textarea><br>'
;
echo
'Text<br><textarea style="width: 95%" "hight: 100px" cols="15" rows="2" size="50" maxlength="50" name="spam"></textarea>'
;
echo
'<hr>'
;
echo
'<p><a><img src=
"include/images/spambox/bbcode/b.gif"
onClick=
"bbcode(\'[b]\', \'[/b]\')"
title=
"Fettschrift [b]Dein Text[/b]"
/></a>
';
echo
'<a><img src=
"include/images/spambox/bbcode/u.gif"
onClick=
"bbcode(\'[u]\', \'[/u]\')"
title=
"Unterstrichen [u]Dein Text[/u]"
/></a>
';
echo
'<a><img src=
"include/images/spambox/bbcode/i.gif"
onClick=
"bbcode(\'[i]\', \'[/i]\')"
title=
"Kursiv [i]Dein Text[/i]"
/></a>
';
echo
'<a><img src=
"include/images/spambox/bbcode/url.gif"
onClick=
"bbcode(\'[url=\',\']|Link|[/url]\')"
title=
"Link Adresse [url=deinlink]|Link|[/u]"
/></a></p>
';
echo
'<hr>'
;
echo
'<a align="center" onclick="switchinfo(\'sb_smilies\');return false;" href="#"><b>'
.
$row
[
'smilies'
].
'<br></b></a>'
;
echo
'<hr>'
;
?><script type=
"text/javascript"
>
function
switchinfo(Layer_Name) {
var
GECKO = document.getElementById? 1:0 ;
var
NS = document.layers? 1:0 ;
var
IE = document.all? 1:0 ;
if
(GECKO)
{document.getElementById(Layer_Name).style.display= (document.getElementById(Layer_Name).style.display==
'block'
) ?
'none'
:
'block'
;}
else
if
(NS)
{document.layers[Layer_Name].display=(document.layers[Layer_Name].display==
'block'
) ?
'none'
:
'block'
;}
else
if
(IE)
{document.all[Layer_Name].style.display=(document.all[Layer_Name].style.display==
'block'
) ?
'none'
:
'block'
;}
}
</script><?php
echo
'<div id="sb_smilies" style="display:none">'
;
for
(
$e
=10;
$e
<68;
$e
++) {
echo
'<a href="javascript: put_sb(\'s'
.
$e
.
' \')"><img src="include/images/spambox/smilies/s'
.
$e
.
'.gif" border ="0"/></a> '
;
}
echo
'<br>Hintergrundbild wählen<input type="text" name="Bild" />'
;
echo
'<hr>'
;
echo
'</div>'
;
echo
get_antispam (
'spambox'
, 0);
echo
'<p align="left"><input type="submit" name="submit" value="Spammen" /></p>'
;
echo
'<hr />'
;
echo
'</form>'
;
echo
'</div>'
;
}
else
{
echo
'Bitte einloggen um zu Spammen<br><hr>'
;
}
if
(isset(
$_POST
[
'submit'
]) AND
$_POST
[
'submit'
] ==
'Spammen'
AND chk_antispam (
'spambox'
)) {
if
(loggedin()) {
$_POST
[
'nickname'
] =
$_SESSION
[
'authname'
];
if
(
$_POST
[
'user_id'
] !=
$_SESSION
[
'authid'
]) {
$break
= true;
}
$_POST
[
'user_id'
] =
$_SESSION
[
'authid'
];
}
else
{
if
(
$_POST
[
'user_id'
] != 0)
$break
= true;
$_POST
[
'nickname'
] = escape(
$_POST
[
'nickname'
],
'string'
);
}
if
(
$_POST
[
'color'
] !=
''
) {
if
(
strlen
(
$_POST
[
'color'
]) != 6) {
$_POST
[
'color'
] =
'ffffff'
;
}
}
$spam
=
strip_tags
(
$_POST
[
'spam'
]);
$_POST
[
'spam'
] = escape(
$_POST
[
'spam'
],
'string'
);
$_POST
[
'nicknamefarbe'
] = escape(
$_POST
[
'nicknamefarbe'
],
'string'
);
$_POST
[
'textfarbename'
] = escape(
$_POST
[
'textfarbename'
],
'string'
);
$_POST
[
'ticker'
] = escape(
$_POST
[
'ticker'
],
'string'
);
$_POST
[
'Bild'
] = escape(
$_POST
[
'Bild'
],
'string'
);
$_POST
[
'color'
] = escape(
$_POST
[
'color'
],
'string'
);
$_POST
[
'color1'
] = escape(
$_POST
[
'color1'
],
'string'
);
if
(!
empty
(
$_POST
[
'ticker'
])
or
$_POST
[
'spam'
])
{
if
(
$break
!= true) {
db_query('INSERT INTO prefix_spambox VALUES(
""
,
"'.$_POST['user_id'].'"
,
"<br>'.$_POST['spam'].'<br>"
,
"'.$_POST['color'].'"
,
"'.$_POST['nickname'].'"
,
"'.time().'"
,
"'.$_POST['color1'].'"
,
"'.$_POST['Bild'].'"
,
"'.$_POST['ticker'].'"
)');
}
}
echo
'Bitte warten<meta http-equiv="refresh" content="0; url=index.php">'
;
}
$query
= db_query(
'SELECT * FROM `prefix_spambox` ORDER BY time DESC LIMIT 0, '
.
$row
[
'anzeige'
].
' '
);
echo
'<div style="overflow:auto; height:'
.
$row
[
'höhe'
].
';">'
;
while
(
$result
= db_fetch_assoc(
$query
))
{
echo
'<table style=
"hight:200px width:100%;"
background=
"'.$result['Bild'].'"
border=
"0"
cellpadding=
"0"
cellspacing=
"0"
>';
echo
''
;
echo
'
<tr>
<td>
<b><b><b><a href=
"index.php?user-details-'.$result['user_id'].'"
><font color=
"#'.$result['color'].'"
>
'.$result['
nickname
'].'
</a></b></b></b><br></font>
<font color=
"#'.$result['color'].'"
>
'.date('
d.m.Y || H:i:s
' ,$result['
time
']).'
</font>
<br>';
$result
[
'ticker'
] = MessageFormat(
$result
[
'ticker'
]);
echo
'<font color="#'
.
$result
[
'color1'
].
'"><marquee direction="left" scrollamount="5">'
.
$result
[
'ticker'
].
'</marquee></font>'
;
$result
[
'text'
] = MessageFormat(
$result
[
'text'
]);
$result
[
'text'
] = preg_replace(
'/([^\s]{'
.
$row
[
'wortlänge'
].
'})(?=[^\s])/'
,
"$1\n"
,
$result
[
'text'
]);
if
(
$result
[
'color'
] !=
''
)
echo
'<font color="#'
.
$result
[
'color1'
].
'">'
.
$result
[
'text'
].
'</font>'
;
else
echo
$result
[
'text'
];
echo
'
<hr /></td></tr>
';
echo
'</table>'
;
}
}
echo
'</div>'
;
echo
'<a href="?spamboxarchiv"><u><i><b><font size="+1">zum Archiv</font></b></i></u></a>'
;
?>