Viewing file:  savecomment.php (2.63 KB) -rw-rw-rw-
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
/**
* $Id: savecomment.php,v 1.7.2.9.2.6 2006/04/25 12:07:24 matteo Exp $
*
* Saves the posted comment
*
* @author Thorsten Rinne <thorsten@phpmyfaq.de>
* @since 2002-08-29
* @copyright (c) 2001-2006 phpMyFAQ Team
*
* The contents of this file are subject to the Mozilla Public License
* Version 1.1 (the "License"); you may not use this file except in
* compliance with the License. You may obtain a copy of the License at
* http://www.mozilla.org/MPL/
*
* Software distributed under the License is distributed on an "AS IS"
* basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
* License for the specific language governing rights and limitations
* under the License.
*/
if (!defined('IS_VALID_PHPMYFAQ')) {
header('Location: http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']));
exit();
}
$captcha = new PMF_Captcha($db, $sids, $pmf->language, $_SERVER['HTTP_USER_AGENT'], $_SERVER['REMOTE_ADDR']);
if ( isset($_POST['user']) && $_POST['user'] != ''
&& isset($_POST['mail']) && checkEmail($_POST['mail'])
&& isset($_POST['comment']) && $_POST['comment'] != ''
&& IPCheck($_SERVER['REMOTE_ADDR'])
&& checkBannedWord(htmlspecialchars(strip_tags($_POST['comment'])))
&& checkCaptchaCode() ) {
$id = (isset($_POST["id"])) ? (int)$_POST["id"] : 0;
Tracking("save_comment", $id);
$helped = ""; // not used in this version - maybe in the future
$comment = nl2br($db->escape_string(safeHTML($_POST["comment"])));
$comment_by_user = $db->escape_string(safeHTML($_POST["user"]));
$comment_by_mail = $db->escape_string(safeHTML($_POST["mail"]));
$result = $db->query("INSERT INTO ".SQLPREFIX."faqcomments (id_comment, id, usr, email, comment, datum, helped) VALUES (".$db->nextID(SQLPREFIX."faqcomments", "id_comment").", ".$id.", '".$comment_by_user."', '".$comment_by_mail."', '".$comment."', ".time().", '".$helped."')");
$tpl->processTemplate ("writeContent", array(
"msgCommentHeader" => $PMF_LANG["msgWriteComment"],
"Message" => $PMF_LANG["msgCommentThanks"]
));
} else {
if (IPCheck($_SERVER["REMOTE_ADDR"]) == FALSE) {
$tpl->processTemplate ("writeContent", array(
"msgCommentHeader" => $PMF_LANG["msgWriteComment"],
"Message" => $PMF_LANG["err_bannedIP"]
));
} else {
Tracking("error_save_comment", $id);
$tpl->processTemplate ("writeContent", array(
"msgCommentHeader" => $PMF_LANG["msgWriteComment"],
"Message" => $PMF_LANG["err_SaveComment"]
));
}
}
$tpl->includeTemplate("writeContent", "index");
|