<div id="content_form">
<h2><a href="http://www.so-klappt-es.de/secure/index.php">Gästebuch</a></h2><br/><br/>
<?php
include ("check.php");
$user = 'xxx'; //hier denn usernamen angeben
$pw = 'xxx'; //hier das passwort eintragen
$host = 'localhost'; //hier die datenbankadresse angeben, meistens localhost
$database = 'xxx'; //hier den db namen
$table = 'gbook'; //hier den namen der erstellten tabelle angeben
$link = mysql_connect($host, $user, $pw); //verbindung zur db wird aufgebaut
mysql_select_db($database, $link);
//Sicherheit
function removeSlashes($str)
{
if(is_array($str)) {
return array_map(removeSlashes, $str);
}
else {
return stripslashes($str);
}
}
if(get_magic_quotes_gpc()) {
$_POST = removeSlashes($_POST);
$_GET = removeSlashes($_GET);
}
//Sicherheit ende
if( isset($_POST['action']) && $_POST['action'] == 'save' ) {
$_POST['name'] = !empty($_POST['name'])
? $_POST['name']
: 'unbekannt';
$query = '
INSERT INTO
`'.$table.'`
SET
`name` = "'.mysql_real_escape_string($_POST['name']).'",
`$email` = "'.mysql_real_escape_string($_POST['$email']).'",
`hp` = "'.mysql_real_escape_string($_POST['hp']).'",
`inhalt` = "'.mysql_real_escape_string($_POST['inhalt']).'"
';
mysql_query($query);
$content = 'Der User '.$_POST['name'].' hat gerade einen eintrag in ihr gaestebuch vorgenommen!';
@mail('dietertreffer@dietrude.de', 'Gaestebucheintrag', $content, 'From: '.$_POST['name'].' <'.$_POST[$email].'>');
}
if( isset($_GET['action']) && $_GET['action'] == 'neu' ) {
echo '<p><a href="index.php?section=gaestebuch">zum Guestbook</a></p>';
?>
<form method="post" action="index.php?action=save§ion=gaestebuch">
<input type="hidden" name="action" value="save">
<p><label class="form">Name</label>
<input class="text" type="text" name="name"></p>
<p><label class="form">E-Mail</label>
<input class="text" type="text" name="$email"></p>
<p><label class="form">Website</label>
<input class="text" type="text" name="hp" value="http://"></p>
<p><label class="form">Eintrag</label>
<textarea class="text" name="inhalt" rows="6" cols="25"></textarea></p>
<p><input class="button" type="submit" value="eintragen"></p>
</form>
<?php
} else {
echo '<p><a href="'.$_SERVER['PHP_SELF'].'?action=neu§ion=gaestebuch">Neuer Eintrag</a></p>';
}
$query = '
SELECT *, DATE_FORMAT(tstamp,"%d.%m.%y") AS tstamp_f FROM `'.$table.'` ORDER BY tstamp DESC LIMIT 0, 50 ';
$result = mysql_query($query);
while( $row=mysql_fetch_array($result, MYSQL_ASSOC) ) {
echo '
<table width="70%">
<tr>
<td>Name:</td>
<td class="gb">'.$row['name'].'</td>
<td>Datum:</td>
<td class="gb">'.$row['tstamp_f'].'</td>
</tr>
<tr>
<td>Mail:</td>
<td class="gb">'.$row[$email].'</td>
<tr>
<td>Homepage</td>
<td class="gb">';
if( $row['hp'] == '' ) {
echo '<p>keine Homepage</p>';
} else {
echo '<p><a href="'.$row['hp'].'" target="_new">'.$row['hp'].'</a></td></tr>';
}
echo'</td></tr>
</table>
<p class="bgweiss">'.nl2br($row['inhalt']).'</p>';
}
?>
<br/><br/>
<a class="top" href="">Top<img src="img/top.gif" alt="Top"/></a>
</div>
