php gjestebok problem

Andre3 · 28. september 2005

har lastet ned et gjestebok script som jeg bruker på siden min www.kibk.com/testside.php men nå jeg posterer en melding vil den ikke registrere den. Hvorfor?

Håper noen kan hjelpe meg

Silverviper · 28. september 2005

hei,

kan du poste scriptet her

så kan jeg ta en kikk på det.

Chris

Andre3 · 28. september 2005

<?php

/* KONFIGURASJON */

$MaxLenName = 50;

$MaxLenMessage = 500;

$MaxLenComment = 300;

$MaxWordLen = 50;

$EntriesPerPage = 10;

$TableWidth = 450;

$BorderColor = "#000000";

$NameInputSize = 50;

$EmailInputSize = 50;

$HomepageInputSize = 50;

$MessageSizeCols = 50;

$MessageSizeRows = 10;

$CommentSizeCols = 50;

$CommentSizeRows = 5;

$URLToThisPage = "testside.php?go=gjestebok";

$EntryFile = "data/gbook_entries.dat"; // må chmoddes 0666!

$IPLogFile = "data/gbook_iplog.dat"; // må chmoddes 0666!

$SmileyDir = "smileys";

/* SCRIPTET STARTER HER *****************************************************/

$action = $_GET['action'];

$entry = $_GET['entry'];

$start = $_GET['start'];

$id = $_POST['id'];

$name = $_POST['name'];

$email = $_POST['email'];

$url = $_POST['url'];

$message = $_POST['message'];

$comment = $_POST['comment'];

if (ereg("^[^?]+$", $URLToThisPage)) $URLToThisPage = $URLToThisPage . "?";

if (!file_exists($EntryFile)) {

$fp = fopen($EntryFile, "w");

fwrite($fp, "");

fclose($fp);

}

if (!file_exists($IPLogFile)) {

$fp = fopen($IPLogFile, "w");

fwrite($fp, "");

fclose($fp);

}

// sjekk om logget inn

if ($_SESSION['auth']) $LoggedIn = "yes";

else $LoggedIn = "no";

// flood detector

function FloodDetector($IPLogFile) {

$done = 0;

$line = 0;

$file = file($IPLogFile);

$ip = getenv("REMOTE_ADDR");

$hour = date("HdmY");

while($file[$line]) {

$a = explode("|", $file[$line]);

if (($a[0] == $ip) && ($a[1] == $hour)) { $done = 1; }

$line++;

}

if ($done == 1) return true;

else {

$a = implode($file, "");

$fp = fopen($IPLogFile, "w");

fwrite($fp, $ip . "|" . $hour . "|\n" . $a);

fclose($fp);

return false;

}

// skriv innlegg

if ($action == "sign") {

?>

<!--

function addsmile(smiley) {

doc_content = document.sign.message.value + smiley

document.sign.message.value = doc_content

document.sign.message.focus()

}

// -->

</script>

<?php

echo <<< end

<h1>Skriv innlegg</h1>

<p><b>Epost:</b><br>

<p><b>Hjemmeside:</b><br>

<p><b>Melding:</b><br>

</form>

<p>Navn og melding må fylles ut.</p>

<p><a href="$URLToThisPage&action=view">Tilbake til gjesteboken!</a></p>

end;

}

elseif ($action == "dosign") {

echo "<h1>Skriv innlegg</h1>\n";

if (!empty($name) && !empty($message)) {

if ($url == "http://") { $url = ""; }

$name = stripslashes($name);

$name = ltrim($name);

$name = rtrim($name);

$message = stripslashes($message);

$message = ltrim($message);

$message = rtrim($message);

if (strlen($name) > $MaxLenName) echo "<p><i>ERROR! Navnet er for langt! Max $MaxLenName tegn!</i></p>\n";

elseif (strlen($message) > $MaxLenMessage) echo "<p><i>ERROR! Meldingen er for lang! Max $MaxLenMessage tegn!</i></p>\n";

elseif (!empty($email) && !ereg("^[^@ ()$#><;%*?&+='\{}æøåÆØÅ]+@[^@ ()$#><;%*?&+='\{}æøåÆØÅ]+\.[^@ ()$#><;*%?&+='\{}æøåÆØÅ\.]+$", $email)) echo "<p><i>ERROR! Feil format på mailadresse!</i></p>\n";

elseif (!empty($url) && !ereg("^[a-zA-Z0-9]+://[^ ()$#>\<;*&+'{}æøåÆØÅ]+$", $url)) echo "<p><i>ERROR! Feil format på hjemmesideadresse!</i></p>\n";

elseif (!ereg("^[^|]+$", $name)) echo "<p><i>ERROR! Navnet inneholder ulovlige tegn! (|)</i></p>\n";

elseif (!ereg("^[^|]+$", $message)) echo "<p><i>ERROR! Meldingen inneholder ulovlige tegn! (|)</i></p>\n";

else {

$id = date("ymdHis");

$ip = getenv("REMOTE_ADDR");

$host = gethostbyaddr($ip);

$name = htmlspecialchars($name);

$name = str_replace("æ","æ",$name);

$name = str_replace("ø","ø",$name);

$name = str_replace("å","å",$name);

$name = str_replace("Æ","Æ",$name);

$name = str_replace("Ø","Ø",$name);

$name = str_replace("Å","Å",$name);

$message = htmlspecialchars($message);

$message = str_replace("æ","æ",$message);

$message = str_replace("ø","ø",$message);

$message = str_replace("å","å",$message);

$message = str_replace("Æ","Æ",$message);

$message = str_replace("Ø","Ø",$message);

$message = str_replace("Å","Å",$message);

$message = str_replace("

","<br>",$message);

$message = str_replace("\n","<br>",$message);

$message = wordwrap($message, $MaxWordLen, " ", 1);

$done = 0;

$line = 0;

$file = file($EntryFile);

while ($file[$line]) {

$a = explode("|", $file[$line]);

if ($a[0] == $id) {

$done = 1;

}

$line++;

}

if ($done == 1) echo "<p><i>ERROR! Et innlegg med samme ID eksisterer allerede! Prøv igjen!</i></p>\n";

else {

if (FloodDetector($IPLogFile)) echo "<p><i>ERROR! Flooding-sperre: Du har allerede skrevet et innlegg i løpet av denne timen!</i></p>\n";

else {

$a = implode($file, "");

$fp = fopen($EntryFile, "w");

fwrite($fp,$id . "|" . $name . "|" . $email . "|" . $url . "|" . $message . "||" . date("d/m/Y") . "|" . date("H:i:s") . "|" . $ip . "|" . $host . "|\n" . $a);

fclose($fp);

echo "<p><i>Innlegget er lagret i databasen!</i></p>\n";

}

else { echo "<p><i>ERROR! Nødvendige felt mangler</i></p>\n"; }

echo "<p><a href=\"$URLToThisPage&action=view\">Tilbake til gjesteboken!</a></p>\n";

}

elseif (($action == "edit") || ($action == "doedit") || ($action == "delete") || ($action == "dodelete")) {

if ($LoggedIn == "yes") {

// rediger innlegg

if ($action == "edit") {

?>

<!--

function addsmile(smiley) {

doc_content = document.edit.message.value + smiley

document.edit.message.value = doc_content

document.edit.message.focus()

}

// -->

</script>

<!--

function addcommentsmile(smiley) {

doc_content = document.edit.comment.value + smiley

document.edit.comment.value = doc_content

document.edit.comment.focus()

}

// -->

</script>

<?php

echo "<h1>Rediger innlegg</h1>\n";

$done = 0;

$line = 0;

$file = file($EntryFile);

while ($file[$line]) {

$a = explode("|", $file[$line]);

if ($a[0] == $entry) {

$id = $a[0];

$name = $a[1];

$email = $a[2];

$url = $a[3];

$message = $a[4];

$comment = $a[5];

$date = $a[6];

$time = $a[7];

$ip = $a[8];

$host = $a[9];

$done = 1;

}

$line++;

}

if ($done == 1) {

$editemail = $email;

$editurl = $url;

$editmessage = str_replace("<br>","

",$message);

$editcomment = str_replace("<br>","

",$comment);

$message = str_replace("X(","<img src=\"$SmileyDir/angry.gif\" alt=\"\">",$message);

$message = str_replace(":f","<img src=\"$SmileyDir/flirt.gif\" alt=\"\">",$message);

$message = str_replace(":x","<img src=\"$SmileyDir/dead.gif\" alt=\"\">",$message);

$message = str_replace("","<img src=\"$SmileyDir/frown.gif\" alt=\"\">",$message);

$message = str_replace(":h","<img src=\"$SmileyDir/cool.gif\" alt=\"\">",$message);

$message = str_replace(":i","<img src=\"$SmileyDir/idea.gif\" alt=\"\">",$message);

$message = str_replace("","<img src=\"$SmileyDir/smile.gif\" alt=\"\">",$message);

$message = str_replace("","<img src=\"$SmileyDir/wink.gif\" alt=\"\">",$message);

$message = str_replace(":l","<img src=\"$SmileyDir/hrmpf.gif\" alt=\"\">",$message);

$message = str_replace(":o","<img src=\"$SmileyDir/redface.gif\" alt=\"\">",$message);

$message = str_replace(":00","<img src=\"$SmileyDir/look.gif\" alt=\"\">",$message);

$message = str_replace("","<img src=\"$SmileyDir/tounge.gif\" alt=\"\">",$message);

$message = str_replace(":q","<img src=\"$SmileyDir/quest.gif\" alt=\"\">",$message);

$message = str_replace(":r","<img src=\"$SmileyDir/shame.gif\" alt=\"\">",$message);

$message = str_replace("","<img src=\"$SmileyDir/biggrin.gif\" alt=\"\">",$message);

$message = str_replace(":e","<img src=\"$SmileyDir/supergrin.gif\" alt=\"\">",$message);

$comment = str_replace("X(","<img src=\"$SmileyDir/angry.gif\" alt=\"\">",$comment);

$comment = str_replace(":f","<img src=\"$SmileyDir/flirt.gif\" alt=\"\">",$comment);

$comment = str_replace(":x","<img src=\"$SmileyDir/dead.gif\" alt=\"\">",$comment);

$comment = str_replace("","<img src=\"$SmileyDir/frown.gif\" alt=\"\">",$comment);

$comment = str_replace(":h","<img src=\"$SmileyDir/cool.gif\" alt=\"\">",$comment);

$comment = str_replace(":i","<img src=\"$SmileyDir/idea.gif\" alt=\"\">",$comment);

$comment = str_replace("","<img src=\"$SmileyDir/smile.gif\" alt=\"\">",$comment);

$comment = str_replace("","<img src=\"$SmileyDir/wink.gif\" alt=\"\">",$comment);

$comment = str_replace(":l","<img src=\"$SmileyDir/hrmpf.gif\" alt=\"\">",$comment);

$comment = str_replace(":o","<img src=\"$SmileyDir/redface.gif\" alt=\"\">",$comment);

$comment = str_replace(":00","<img src=\"$SmileyDir/look.gif\" alt=\"\">",$comment);

$comment = str_replace("","<img src=\"$SmileyDir/tounge.gif\" alt=\"\">",$comment);

$comment = str_replace(":q","<img src=\"$SmileyDir/quest.gif\" alt=\"\">",$comment);

$comment = str_replace(":r","<img src=\"$SmileyDir/shame.gif\" alt=\"\">",$comment);

$comment = str_replace("","<img src=\"$SmileyDir/biggrin.gif\" alt=\"\">",$comment);

$comment = str_replace(":e","<img src=\"$SmileyDir/supergrin.gif\" alt=\"\">",$comment);

if (!empty($comment)) $comment = "\n <br><br><b>Kommentar:</b>\n $comment\n";

else $comment = "";

$pagetarget = "_blank";

$mailtarget = "_blank";

if (empty($url)) { $url = "$URLToThisPage&action=nopage&start=$start"; $pagetarget = "_self"; }

if (empty($email)) { $email = "$URLToThisPage&action=nomail&start=$start"; $mailtarget = "_self"; }

else $email = "mailto:".$email;

echo <<< end

<tr><td><b>$name</b></td><td align="right">[ <a href="$email" target="$emailtarget">email</a> | <a href="$url" target="$pagetarget">hjemmeside</a> ]</td></tr>

$message$comment

<tr><td style="font-size: 10px;">Skrevet: $date, $time</td><td style="font-size: 10px;" align="right">[ <a href="$URLToThisPage&action=edit&entry=$id">rediger</a> | <a href="$URLToThisPage&action=delete&entry=$id">slett</a> ]</td></tr>

</table><br>

<p><b>Epost:</b><br>

<p><b>Hjemmeside:</b><br>

<p><b>Melding:</b><br>

<textarea name='message' cols='$MessageSizeCols' rows='$MessageSizeRows'>$editmessage</textarea><br>

<p><b>Kommentar:</b><br>

<textarea name='comment' cols='$CommentSizeCols' rows='$CommentSizeRows'>$editcomment</textarea><br>

</form>

<p>Navn og melding må fylles ut.</p>

end;

}

else echo "<p><i>ERROR! Innlegget finnes ikke!</i></p>\n";

echo "<p><a href=\"$URLToThisPage&action=view\">Tilbake til gjesteboken!</a></p>\n";

}

elseif ($action == "doedit") {

echo "<h1>Rediger innlegg</h1>\n";

$done = 0;

$line = 0;

$file = file($EntryFile);

while ($file[$line]) {

$a = explode("|", $file[$line]);

if ($a[0] == $id) {

$done = 1;

}

$line++;

}

if ($done == 1) {

if (!empty($name) && !empty($message)) {

if ($url == "http://") $url = "";

$name = stripslashes($name);

$name = ltrim($name);

$name = rtrim($name);

$message = stripslashes($message);

$message = ltrim($message);

$message = rtrim($message);

$comment = stripslashes($comment);

$comment = ltrim($comment);

$comment = rtrim($comment);

if (strlen($name) > $MaxLenName) echo "<p><i>ERROR! Navnet er for langt! Max $MaxLenName tegn!</i></p>\n";

elseif (strlen($message) > $MaxLenMessage) echo "<p><i>ERROR! Meldingen er for lang! Max $MaxLenMessage tegn!</i></p>\n";

elseif (strlen($comment) > $MaxLenComment) echo "<p><i>ERROR! Kommentaren er for lang! Max $MaxLenComment tegn!</i></p>\n";

elseif (!empty($email) && !ereg("^[^@ ()$#><;%*?&+='\{}æøåÆØÅ]+@[^@ ()$#><;%*?&+='\{}æøåÆØÅ]+\.[^@ ()$#><;*%?&+='\{}æøåÆØÅ\.]+$", $email)) echo "<p><i>ERROR! Feil format på mailadresse!</i></p>\n";

elseif (!empty($url) && !ereg("^[a-zA-Z0-9]+://[^ ()$#>\<;*&+'{}æøåÆØÅ]+$", $url)) echo "<p><i>ERROR! Feil format på hjemmesideadresse!</i></p>\n";

elseif (!ereg("^[^|]+$", $name)) echo "<p><i>ERROR! Navnet inneholder ulovlige tegn! (|)</i></p>\n";

elseif (!ereg("^[^|]+$", $message)) echo "<p><i>ERROR! Meldingen inneholder ulovlige tegn! (|)</i></p>\n";

elseif (!ereg("^[^|]+$", $comment)) echo "<p><i>ERROR! Kommentaren inneholder ulovlige tegn! (|)</i></p>\n";

else {

$name = htmlspecialchars($name);

$name = str_replace("æ","æ",$name);

$name = str_replace("ø","ø",$name);

$name = str_replace("å","å",$name);

$name = str_replace("Æ","Æ",$name);

$name = str_replace("Ø","Ø",$name);

$name = str_replace("Å","Å",$name);

$message = htmlspecialchars($message);

$message = str_replace("æ","æ",$message);

$message = str_replace("ø","ø",$message);

$message = str_replace("å","å",$message);

$message = str_replace("Æ","Æ",$message);

$message = str_replace("Ø","Ø",$message);

$message = str_replace("Å","Å",$message);

$message = str_replace("

","<br>",$message);

$message = str_replace("\n","<br>",$message);

$message = wordwrap($message, $MaxWordLen, " ", 1);

$comment = htmlspecialchars($comment);

$comment = str_replace("æ","æ",$comment);

$comment = str_replace("ø","ø",$comment);

$comment = str_replace("å","å",$comment);

$comment = str_replace("Æ","Æ",$comment);

$comment = str_replace("Ø","Ø",$comment);

$comment = str_replace("Å","Å",$comment);

$comment = str_replace("

","<br>",$comment);

$comment = str_replace("\n","<br>",$comment);

$comment = wordwrap($comment, $MaxWordLen, " ", 1);

$line = 0;

$file = file($EntryFile);

while ($file[$line]) {

$a = explode("|", $file[$line]);

if ($a[0] == $id) {

$a[1] = $name;

$a[2] = $email;

$a[3] = $url;

$a[4] = $message;

$a[5] = $comment;

$file[$line] = implode($a, "|");

}

$line++;

}

$a = implode($file, "");

$fp = fopen($EntryFile, "w");

fwrite($fp, $a);

fclose($fp);

echo "<p><i>Innlegget er redigert!</i></p>\n";

}

else echo "<p><i>ERROR! Nødvendige felt mangler</i></p>\n";

}

else echo "<p><i>ERROR! Innlegget finnes ikke!</i></p>\n";

echo "<p><a href=\"$URLToThisPage&action=view\">Tilbake til gjesteboken!</a></p>\n";

}

// slett innlegg

elseif ($action == "delete") {

echo "<h1>Slett innlegg</h1>\n";