Viewing file:  save.php (4.69 KB) -rw-rw-rw-
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
/**
* $Id: save.php,v 1.12.2.15.2.11 2006/12/01 11:09:37 thorstenr Exp $
*
* Saves a user FAQ record and sends an email to the user
*
* @author Thorsten Rinne <thorsten@phpmyfaq.de>
* @since 2002-09-16
* @copyright (c) 2001-2006 phpMyFAQ Team
*
* The contents of this file are subject to the Mozilla Public License
* Version 1.1 (the "License"); you may not use this file except in
* compliance with the License. You may obtain a copy of the License at
* http://www.mozilla.org/MPL/
*
* Software distributed under the License is distributed on an "AS IS"
* basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
* License for the specific language governing rights and limitations
* under the License.
*/
if (!defined('IS_VALID_PHPMYFAQ')) {
header('Location: http://'.$_SERVER['HTTP_HOST'].dirname($_SERVER['SCRIPT_NAME']));
exit();
}
$captcha = new PMF_Captcha($db, $sids, $pmf->language, $_SERVER['HTTP_USER_AGENT'], $_SERVER['REMOTE_ADDR']);
if ( isset($_POST['username']) && $_POST['username'] != ''
&& isset($_POST['usermail']) && checkEmail($_POST['usermail'])
&& isset($_POST['rubrik']) && is_array($_POST['rubrik'])
&& isset($_POST['thema']) && $_POST['thema'] != ''
&& isset($_POST['content']) && $_POST['content'] != ''
&& IPCheck($_SERVER['REMOTE_ADDR'])
&& checkBannedWord(htmlspecialchars(strip_tags($_POST['thema'])))
&& checkBannedWord(htmlspecialchars(strip_tags($_POST['content'])))
&& checkCaptchaCode() ) {
Tracking("save_new_entry",0);
$datum = date("YmdHis");
$content = $db->escape_string(safeHTML(nl2br($_POST["content"])));
$contentlink = $db->escape_string(safeHTML($_POST["contentlink"]));
if (substr($contentlink,7) != "") {
$content = $content."<br />".$PMF_LANG["msgInfo"]."<a href=\"http://".substr($contentlink,7)."\" target=\"_blank\">".$contentlink."</a>";
}
$thema = $db->escape_string(safeHTML($_POST["thema"]));
$selected_category = $_POST["rubrik"];
$keywords = $db->escape_string(safeHTML($_POST["keywords"]));
$author = $db->escape_string(safeHTML($_POST["username"]));
$usermail = $IDN->encode($db->escape_string(safeHTML($_POST["usermail"])));
$db->query(sprintf("INSERT INTO %sfaqdata (id, lang, solution_id, revision_id, active, thema, content, keywords, author, email, comment, datum) VALUES (%d, '%s', %d, %d, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s')", SQLPREFIX, $db->nextID(SQLPREFIX."faqdata", "id"), $LANGCODE, getSolutionId(), 0, 'no', $thema, $content, $keywords, $author, $usermail, 'y', $datum));
foreach ($selected_category as $_category) {
$db->query(sprintf("INSERT INTO %sfaqcategoryrelations (category_id, category_lang, record_id, record_lang) VALUES (%d, '%s', %d, '%s')", SQLPREFIX, intval($_category), $lang, $db->insert_id(SQLPREFIX.'faqdata', 'id'), $LANGCODE));
}
$db->query(sprintf("INSERT INTO %sfaqvisits (id, lang, visits, last_visit) VALUES (%d, '%s', %d, %d)", SQLPREFIX, $db->insert_id(SQLPREFIX.'faqdata', 'id'), $lang, 1, time()));
$additional_header = array();
$additional_header[] = 'MIME-Version: 1.0';
$additional_header[] = 'Content-Type: text/plain; charset='. $PMF_LANG['metaCharset'];
if (strtolower($PMF_LANG['metaCharset']) == 'utf-8') {
$additional_header[] = 'Content-Transfer-Encoding: 8bit';
}
$additional_header[] = 'From: '.$usermail;
$subject = $PMF_CONF["title"];
if (function_exists('mb_encode_mimeheader')) {
$subject = mb_encode_mimeheader($subject);
}
$body = unhtmlentities($PMF_LANG['msgMailCheck'])."\n".$PMF_CONF['title'].": http://".$_SERVER['HTTP_HOST'].('80' == $_SERVER['SERVER_PORT']? '' : ':'.$_SERVER['SERVER_PORT']).dirname($_SERVER['PHP_SELF'].'/admin');
if (ini_get('safe_mode')) {
mail($IDN->encode($PMF_CONF["adminmail"]), $subject, $body, implode("\r\n", $additional_header));
} else {
mail($IDN->encode($PMF_CONF["adminmail"]), $subject, $body, implode("\r\n", $additional_header), "-f$usermail");
}
$tpl->processTemplate ("writeContent", array(
"msgNewContentHeader" => $PMF_LANG["msgNewContentHeader"],
"Message" => $PMF_LANG["msgNewContentThanks"]
));
} else {
if (IPCheck($_SERVER["REMOTE_ADDR"]) == FALSE) {
$tpl->processTemplate ("writeContent", array(
"msgNewContentHeader" => $PMF_LANG["msgNewContentHeader"],
"Message" => $PMF_LANG["err_bannedIP"]
));
} else {
Tracking("error_save_entry", 0);
$tpl->processTemplate ("writeContent", array(
"msgNewContentHeader" => $PMF_LANG["msgNewContentHeader"],
"Message" => $PMF_LANG["err_SaveEntries"]
));
}
}
$tpl->includeTemplate("writeContent", "index");
?>
|