new one
PHP Code:
<?
define('IN_TRACKER', true);
@error_reporting(E_ALL & ~E_NOTICE);
@ini_set('error_reporting', E_ALL & ~E_NOTICE);
@ini_set('display_errors', '1');
@ini_set('display_startup_errors', '0');
@ini_set('ignore_repeated_errors', '1');
@ignore_user_abort(1);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
@session_start();
define ('ROOT_PATH', dirname(dirname(__FILE__))."/");
function timer() {
list($usec, $sec) = explode(" ", microtime());
return ((float)$usec + (float)$sec);
}
$tstart = timer();
function textbbcode($form,$name,$content="") {
?>
<script language=javascript>
function SmileIT(smile,form,text){
document.forms[form].elements[text].value = document.forms[form].elements[text].value+" "+smile+" ";
document.forms[form].elements[text].focus();
}
function PopMoreSmiles(form,name) {
link='moresmiles.php?form='+form+'&text='+name
newWin=window.open(link,'moresmile','height=500,width=450,resizable=no,scrollbars=yes');
if (window.focus) {newWin.focus()}
}
function PopMoreTags(form,name) {
link='moretags.php?form='+form+'&text='+name
newWin=window.open(link,'moresmile','height=500,width=775,resizable=no,scrollbars=yes');
if (window.focus) {newWin.focus()}
}
function BBTag(tag,s,text,form){
switch(tag)
{
case '";
document.forms[form].elements[s].value="QUOTE ";
}
break;
case '[img]':
if (document.forms[form].elements[s].value=="IMG ")
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"[img]";
document.forms[form].elements[s].value="IMG*";
}
else
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"[/img]";
document.forms[form].elements[s].value="IMG ";
}
break;
case '[url="http://':%20%20%20%20if%20(document.forms%5bform%5d.elements%5bs%5d.value=="URL%20")%20%20%20%20%20%20%20{%20%20%20%20%20%20%20%20document.forms%5bform%5d.elements%5btext%5d.value%20=%20document.forms%5bform%5d.elements%5btext%5d.value+"%5burl%5d";%20%20%20%20%20%20%20%20document.forms%5bform%5d.elements%5bs%5d.value="URL*";%20%20%20%20%20%20%20%20}%20%20%20%20%20%20%20else%20%20%20%20%20%20%20%20%20%20%20{%20%20%20%20%20%20%20%20%20%20%20document.forms%5bform%5d.elements%5btext%5d.value%20=%20document.forms%5bform%5d.elements%5btext%5d.value+""]':
if (document.forms[form].elements[s].value=="URL ")
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="URL*";
}
else
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="URL ";
}
break;
case '[*]':
if (document.forms[form].elements[s].value=="List ")
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"[*]";
}
break;
case '[b]':
if (document.forms[form].elements[s].value=="B ")
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="B*";
}
else
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="B ";
}
break;
case '[i]':
if (document.forms[form].elements[s].value=="I ")
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="I*";
}
else
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="I ";
}
break;
case '[u]':
if (document.forms[form].elements[s].value=="U ")
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="U*";
}
else
{
document.forms[form].elements[text].value = document.forms[form].elements[text].value+"";
document.forms[form].elements[s].value="U ";
}
break;
}
document.forms[form].elements[text].focus();
}
</script>
<table width="100%" style='margin: 3px' cellpadding="0" cellspacing="0">
<tr>
<td class=embedded colspan=2>
<table cellpadding="2" cellspacing="1">
<tr>
<td class=embedded><input style="font-weight: bold;" type="button" name="bold" value="B " onclick="java script: BBTag('[b]','bold','<? echo $name; ?>','<? echo $form; ?>')" /></td>
<td class=embedded><input style="font-style: italic;" type="button" name="italic" value="I " onclick="java script: BBTag('[i]','italic','<? echo $name; ?>','<? echo $form; ?>')" /></td>
<td class=embedded><input style="text-decoration: underline;" type="button" name="underline" value="U " onclick="java script: BBTag('[u]','underline','<? echo $name; ?>','<? echo $form; ?>')" /></td>
<td class=embedded><input type="button" name="li" value="List " onclick="java script: BBTag('[*]','li','<? echo $name; ?>','<? echo $form; ?>')" /></td>
<td class=embedded><input type="button" name="quote" value="QUOTE " onclick="java script: BBTag('[quote]','quote','<? echo $name; ?>','<? echo $form; ?>')" /></td>
<td class=embedded><input type="button" name="url" value="URL " onclick="java script: BBTag('[url]','url','<? echo $name; ?>','<? echo $form; ?>')" /></td>
<td class=embedded><input type="button" name="img" value="IMG " onclick="java script: BBTag('[img]','img','<? echo $name; ?>','<? echo $form; ?>')" /></td>
<td class=embedded>*<? echo MORE_TAGS;?></td>
</tr>
</table>
</td>
</tr>
<tr>
<td class=embedded>
<textarea name="<? echo $name; ?>" rows="15" cols="80"><? echo $content; ?></textarea>
</td>
<td class=embedded>
<table cellpadding="3" cellspacing="1">
<?
global $smilies, $BASEURL;
while ((list($code, $url) = each($smilies)) && $count<20) {
if ($count % 4==0)
print("<tr>");
print("\n<td class=embedded style='padding: 3px; margin: 2px'><a href=\"java script: SmileIT('".str_replace("'","\'",$code)."','$form','$name')\"><img border=0 src=pic/smilies/".$url."></a></td>");
$count++;
if ($count % 4==0)
print("</tr>");
}
?>
</table>
<center><? echo MORE_SMILES;?></center>
</td>
</tr>
</table>
<?
}
// INCLUDE BACK-END
if (empty($rootpath))
$rootpath = ROOT_PATH;
require_once($rootpath . 'include/core.php');
?>
shoutbox.php must be in root
PHP Code:
<?
require_once("include/bittorrent.php");
dbconn(false);
loggedinorreturn();
//deleting messages
if (isset($_GET['del']))
{
if (is_numeric($_GET['del']))
{
$query = "SELECT * FROM shoutbox WHERE id=".$_GET['del'];
$result = mysql_query($query);
}
else {
echo "<center>Invalid message ID</center>";
exit;}
$row = mysql_fetch_row($result);
if ( (get_user_class() >= UC_MODERATOR) )
{
$query = "DELETE FROM shoutbox WHERE id=".$_GET['del'];
mysql_query($query);
}
}
?>
<html><head>
<title>ShoutBox</title>
<META HTTP-EQUIV=REFRESH CONTENT="600; URL=shoutbox.php">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
<style type="text/css">
A {color: #000000; font-weight: bold; }
A:hover {color: #FF0000;}
.small {font-size: 8pt; font-family: verdana; }
.date {font-size: 7pt;}
</style>
<STYLE>BODY {
SCROLLBAR-3DLIGHT-COLOR: #004E98;
SCROLLBAR-ARROW-COLOR: #004E98;
SCROLLBAR-DARKSHADOW-COLOR: white;
SCROLLBAR-BASE-COLOR: white
}
</STYLE>
</head>
<body bgcolor=#F5F4EA>
<?
/*
if ($CURUSER["chatpost"] == 'no')
{
print("<h2><br><center>You are banned.</center></h2>");
exit;
}
else
{
*/
if($_GET["sent"]=="yes")
if(!$_GET["shbox_text"])
{
$userid=$CURUSER["id"];
}
else
{
$userid=$CURUSER["id"];
$username=$CURUSER["username"];
$date=time();
$text=trim($_GET["shbox_text"]);
mysql_query("INSERT INTO shoutbox (id, userid, username, date, text) VALUES ('id'," . sqlesc($userid) . ", " . sqlesc($username) . ", $date, " . sqlesc($text) . ")") or sqlerr(__FILE__, __LINE__);
}
$res = mysql_query("SELECT * FROM shoutbox ORDER BY date DESC LIMIT 70") or sqlerr(__FILE__, __LINE__);
if (mysql_num_rows($res) == 0)
print("\n");
else
{
print("<table border=0 cellspacing=0 cellpadding=2 width='100%' align='left' class='small'>\n");
while ($arr = mysql_fetch_assoc($res))
{
$res2 = mysql_query("SELECT username,class,avatar,donor,title,enabled,warned FROM users WHERE id=$arr[userid]") or sqlerr(__FILE__, __LINE__);
$arr2 = mysql_fetch_assoc($res2);
if (get_user_class() >= UC_MODERATOR) {
$del="[<a href=/shoutbox.php?del=".$arr[id].">D</a>]";
}
print("<tr><td><font color=gray><span class='date'>".strftime("%H:%M",$arr["date"]).":.</font>
$del
</span>
<a href='userdetails.php?id=".$arr["userid"]."' target='_blank'>".$arr["username"]."</a>" .
($arr2["donor"] == "yes" ? "<img src=pic/star.gif alt='??????????'>" : "") .
($arr2["class"] == "3" ? "<img src="."/pic/rel.gif alt='???????'>" : "") .
($arr2["class"] == "2" ? "<img src="."/pic/vip.gif alt='VIP'>" : "") .
($arr2["class"] == "1" ? "<img src="."/pic/kan.gif alt='????????'>" : "") .
($arr2["warned"] == "yes" ? "<img src="."/pic/warned.gif alt=\"Warned\">" : "") .format_comment(
" $arr[text]
"));
}
print("</table>");
}
?>
</body>
</html>
|