guestbook.php

phpBook 是個建立於 PHP 及 MySQL 的留言板。 功能包括: -- 內建多種語法 (包括中文) -- IP 封鎖及禁止存取 -- 可自訂表情符號 -- URL-Code

    echo "       <a href=\"$PHP_SELF?action=badwords&admin=$admin\" onmouseover=\"window.status='$gb_link3desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link3</a><br>\n";
    echo "       <a href=\"$PHP_SELF?action=banned_ips&admin=$admin\" onmouseover=\"window.status='$gb_link4desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link4</a>\n";
    echo "      </div>\n";
  } elseif ($action == "badwords" && $admin==$adminpass) {
    echo "	    <table>\n";
    echo "            <tr>\n";
    echo "             <td width=\"1%\">\n";
    echo "              <div class=\"mainheader\">$guestbook_head</div>\n";
    echo "             </td>\n";
    echo "             <td>\n";
    echo "              <div class=\"mainmenu\">";
    echo "		<a href=\"$PHP_SELF?admin=$admin\" onmouseover=\"window.status='$gb_link5desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link5</a> || ";
    echo "		<a href=\"$PHP_SELF?action=admin&admin=$admin\" onmouseover=\"window.status='$gb_link2desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link2</a> || ";
    echo "		$gb_link3head</div>\n";
    echo "             </td>\n";
    echo "            </tr>\n";
    echo "           </table>\n";
    $count=0;
    $result = mysql_db_query($database, "select * from badwords") or die("Database Query Error");
    echo " <br><table align=\"center\" border=\"0\" cellspacing=\"1\" cellpadding=\"1\" width=\"100%\">\n";
    echo "   <tr>\n";
    echo "    <td class=\"class2\">\n";
    echo "      ";
    echo "    </td>\n";
    echo "    <td class=\"class1\" align=\"right\" width=\"90\">\n";
    echo "	<div class=\"smallleft\"><a href=\"$PHP_SELF?action=new_badword&admin=$admin\">New</a></div>\n";
    echo "    </td>\n";
    echo "  </tr>\n";
    echo "</table>\n";

    while ($db = mysql_fetch_array($result)) {
        echo " <table align=\"center\" border=\"0\" cellspacing=\"1\" cellpadding=\"1\" width=\"100%\">\n";
	echo "   <tr>\n";
        echo "    <td class=\"class1\">\n";
	echo "     <div class=\"smallleft\">$db[badword]</div>";
        echo "    </td>\n";
        echo "    <td class=\"class1\" align=\"right\" width=\"90\">\n";
	echo "	   <div class=\"smallleft\"><a href=\"$PHP_SELF?action=edit_badword&admin=$admin&value=$db[badword]\">Edit</a> || \n";
	echo "	   $menusep<a href=\"$PHP_SELF?action=delete_badword&admin=$admin&value=$db[badword]\">Delete</a></div>\n";
        echo "    </td>\n";
	echo "  </tr>\n";
        echo "</table>\n";
	$count++;
    }
    echo "<div class=\"smallleft\"><br>$count $gb_link3stat<br><br></div>\n";

  } elseif ($action == "edit_badword" || $action == "new_badword" && $admin==$adminpass) {
    echo "	    <table>\n";
    echo "            <tr>\n";
    echo "             <td width=\"1%\">\n";
    echo "              <div class=\"mainheader\">$guestbook_head</div>\n";
    echo "             </td>\n";
    echo "             <td>\n";
    echo "              <div class=\"mainmenu\">";
    echo "		<a href=\"$PHP_SELF?admin=$admin\" onmouseover=\"window.status='$gb_link5desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link5</a> || ";
    echo "		<a href=\"$PHP_SELF?action=admin&admin=$admin\" onmouseover=\"window.status='$gb_link2desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link2</a> || ";
    echo "		$gb_link3head</div>\n";
    echo "             </td>\n";
    echo "            </tr>\n";
    echo "           </table>\n";
    echo "<form action=\"$PHP_SELF\" method=\"GET\">\n";
    echo "<table align=\"center\" width=\"100%\">\n";
    if ($action == "edit_badword") {
	echo "<input type=\"hidden\" name=\"action\" value=\"save_edit_badword\">\n";
    } else {
        echo "<input type=\"hidden\" name=\"action\" value=\"save_new_badword\">\n";
    }
    echo "<input type=\"hidden\" name=\"value\" value=\"$value\">\n";
    echo "<input type=\"hidden\" name=\"admin\" value=\"$admin\">\n";
    echo "<tr>\n";
    echo "<td class=\"classadd1\"><div class=\"maininputleft\">$gb_link3text</div></td>\n";
    echo "<td class=\"classadd2\">\n";
    echo "<input type=text name=\"newvalue\" size=\"25\" maxlength=\"50\" value=\"$value\"></td>\n";
    echo "</tr>\n";
    echo "<tr>\n";
    echo "<td class=\"classadd2\"></td>\n";
    echo "<td class=\"classadd2\"><br><input type=submit value=Submit></td>\n";
    echo "</tr>\n";
    echo "</table>\n";
    echo "</form>\n";

  } elseif ($action == "save_edit_badword" && $admin==$adminpass) {

    $result = mysql_db_query($database, "UPDATE badwords SET badword='$newvalue' WHERE badword='$value'") or die("Database Query Error");
    echo "<script language=javascript>location.replace('$PHP_SELF?action=badwords&admin=$admin');</script>\n";

  } elseif ($action == "save_new_badword" && $admin==$adminpass) {
    $result = mysql_db_query($database, "INSERT INTO badwords (badword) VALUES('$newvalue')") or die("Database Query Error");
    echo "<script language=javascript>location.replace('$PHP_SELF?action=badwords&admin=$admin');</script>\n";

  } elseif ($action == "delete_badword" && $admin==$adminpass) {
    $result = mysql_db_query($database, "DELETE FROM badwords WHERE badword='$value'") or die("Database Query Error");
    echo "<script language=javascript>location.replace('$PHP_SELF?action=badwords&admin=$admin');</script>\n";

  } elseif ($action == "banned_ips" && $admin==$adminpass) {
    echo "	    <table>\n";
    echo "            <tr>\n";
    echo "             <td width=\"1%\">\n";
    echo "              <div class=\"mainheader\">$guestbook_head</div>\n";
    echo "             </td>\n";
    echo "             <td>\n";
    echo "              <div class=\"mainmenu\">";
    echo "		<a href=\"$PHP_SELF?admin=$admin\" onmouseover=\"window.status='$gb_link5desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link5</a> || ";
    echo "		<a href=\"$PHP_SELF?action=admin&admin=$admin\" onmouseover=\"window.status='$gb_link2desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link2</a> || ";
    echo "		$gb_link4head</div>\n";
    echo "             </td>\n";
    echo "            </tr>\n";
    echo "           </table>\n";
    $count=0;
    $result = mysql_db_query($database, "select * from banned_ips") or die("Database Query Error");
    echo " <br><table align=\"center\" border=\"0\" cellspacing=\"1\" cellpadding=\"1\" width=\"100%\">\n";
    echo "   <tr>\n";
    echo "    <td class=\"class2\">\n";
    echo "      ";
    echo "    </td>\n";
    echo "    <td class=\"class1\" align=\"right\" width=\"90\">\n";
    echo "	<div class=\"smallleft\"><a href=\"$PHP_SELF?action=new_banned_ip&admin=$admin\">New</a></div>\n";
    echo "    </td>\n";
    echo "  </tr>\n";
    echo "</table>\n";

    while ($db = mysql_fetch_array($result)) {
        echo " <table align=\"center\" border=\"0\" cellspacing=\"1\" cellpadding=\"1\" width=\"100%\">\n";
	echo "   <tr>\n";
        echo "    <td class=\"class1\">\n";
	echo "     <div class=\"smallleft\">$db[0]</div>";
        echo "    </td>\n";
        echo "    <td class=\"class1\" align=\"right\" width=\"90\">\n";
	echo "	   <div class=\"smallleft\"><a href=\"$PHP_SELF?action=edit_banned_ip&admin=$admin&value=$db[banned_ip]\">Edit</a> || \n";
	echo "	   <a href=\"$PHP_SELF?action=delete_banned_ip&admin=$admin&value=$db[banned_ip]\">Delete</a></div>\n";
        echo "    </td>\n";
	echo "  </tr>\n";
        echo "</table>\n";
	$count++;
    }
    echo "<div class=\"smallleft\"><br>$count $gb_link4stat<br><br></div>\n";

  } elseif ($action == "edit_banned_ip" || $action == "new_banned_ip") {
    echo "	    <table>\n";
    echo "            <tr>\n";
    echo "             <td width=\"1%\">\n";
    echo "              <div class=\"mainheader\">$guestbook_head</div>\n";
    echo "             </td>\n";
    echo "             <td>\n";
    echo "              <div class=\"mainmenu\">";
    echo "		<a href=\"$PHP_SELF?admin=$admin\" onmouseover=\"window.status='$gb_link5desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link5</a> || ";
    echo "		<a href=\"$PHP_SELF?action=admin&admin=$admin\" onmouseover=\"window.status='$gb_link2desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link2</a> || ";
    echo "		$gb_link4head</div>\n";
    echo "             </td>\n";
    echo "            </tr>\n";
    echo "           </table>\n";
    echo "<form action=\"$PHP_SELF\" method=\"GET\">\n";
    echo "<table align=\"center\" width=\"100%\">\n";
    if ($action == "edit_banned_ip") {
	echo "<input type=\"hidden\" name=\"action\" value=\"save_edit_banned_ip\">\n";
    } else {
        echo "<input type=\"hidden\" name=\"action\" value=\"save_new_banned_ip\">\n";
    }
    echo "<input type=\"hidden\" name=\"value\" value=\"$value\">\n";
    echo "<input type=\"hidden\" name=\"admin\" value=\"$admin\">\n";
    echo "<tr>\n";
    echo "<td class=\"classadd1\"><div class=\"maininputleft\">$gb_link4text</div></td>\n";
    echo "<td class=\"classadd2\">\n";
    echo "<input type=text name=\"newvalue\" size=\"25\" maxlength=\"50\" value=\"$value\"></td>\n";
    echo "</tr>\n";
    echo "<tr>\n";
    echo "<td class=\"classadd2\"></td>\n";
    echo "<td class=\"classadd2\"><br><input type=submit value=Submit></td>\n";
    echo "</tr>\n";
    echo "</table>\n";
    echo "</form>\n";

  } elseif ($action == "save_edit_banned_ip" && $admin==$adminpass) {
    $result = mysql_db_query($database, "UPDATE banned_ips SET banned_ip='$newvalue' WHERE banned_ip='$value'") or die("Database Query Error");
    echo "<script language=javascript>location.replace('$PHP_SELF?action=banned_ips&admin=$admin');</script>\n";

  } elseif ($action == "save_new_banned_ip" && $admin==$adminpass) {
    $result = mysql_db_query($database, "INSERT INTO banned_ips (banned_ip) VALUES('$newvalue')") or die("Database Query Error");
    echo "<script language=javascript>location.replace('$PHP_SELF?action=banned_ips&admin=$admin');</script>\n";

  } elseif ($action == "delete_banned_ip" && $admin==$adminpass) {
    $result = mysql_db_query($database, "DELETE FROM banned_ips WHERE banned_ip='$value'") or die("Database Query Error");
    echo "<script language=javascript>location.replace('$PHP_SELF?action=banned_ips&admin=$admin');</script>\n";

  } else {

    if ($admin) {$adminlink="&admin=$admin";}

    echo "	    <table>\n";
    echo "            <tr>\n";
    echo "             <td width=\"1%\">\n";
    echo "              <div class=\"mainheader\">$guestbook_head</div>\n";
    echo "             </td>\n";
    echo "             <td>\n";
    echo "              <div class=\"mainmenu\">\n";
    if ($admin==$adminpass) {
       echo " 		    <a href=\"$PHP_SELF?action=admin&admin=$admin\" onmouseover=\"window.status='$gb_link2desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link2</a> || \n";
    }
    if ($phpbookcookie==$guestbook_head && $admin!=$adminpass) {
       echo " 		    <a href=\"$PHP_SELF\" onclick=javascript:floodprotect() onmouseover=\"window.status='$gb_link1desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link1</a>\n";
    } else {
       echo " 		    <a href=\"$PHP_SELF?action=add$adminlink\" onmouseover=\"window.status='$gb_link1desc'; return true;\" onmouseout=\"window.status=''; return true;\">$gb_link1</a>\n";
    }
    echo "              </div>\n";