session_start();
include "header.php";
?>
include "admin/connect.php";
include "admin/variables.php";
print "
";
print "";
print "";
print "";
print "";
print "";
$start = filter_input(INPUT_GET, 'start', FILTER_SANITIZE_STRING);
if ( !$start ) {
$start=0;
}
$query = "SELECT id, comment, name, mail, homepage, country FROM gbook ORDER BY ID DESC";
if ($statement = $db->prepare($query)) {
$statement->execute();
$statement->store_result();
while ($statement->fetch()) {
$statement->bind_result($id, $comment, $name, $mail, $homepage, $country);
$comment = htmlspecialchars($comment);
$comment = BBCode($comment);
$comment = smile($comment);
$name = htmlspecialchars($name);
$country = htmlspecialchars($country);
print "
";
print "";
print "";
if(isset($_SESSION['username'])) {
print " Edit Delete";
}
print " |
";
$formatcount++;
}
}
print "
";
//BBCODE function
//Local copy
function BBCode($Text) {
// Replace any html brackets with HTML Entities to prevent executing HTML or script
// Don't use strip_tags here because it breaks [url] search by replacing & with amp
// Convert new line chars to html
tags
$Text = nl2br($Text);
// Set up the parameters for a URL search string
$URLSearchString = " a-zA-Z0-9\:\/\-\?\&\.\=\_\~\#\'";
// Set up the parameters for a MAIL search string
$MAILSearchString = $URLSearchString . " a-zA-Z0-9\.@";
// Perform URL Search
$Text = preg_replace("/\[url\]([$URLSearchString]*)\[\/url\]/", '$1', $Text);
$Text = preg_replace("(\[url\=([$URLSearchString]*)\]([$URLSearchString]*)\[/url\])", '$2', $Text);
$Text = preg_replace("/\[URL\]([$URLSearchString]*)\[\/URL\]/", '$1', $Text);
$Text = preg_replace("(\[URL\=([$URLSearchString]*)\]([$URLSearchString]*)\[/URL\])", '$2', $Text);
// Perform MAIL Search
$Text = preg_replace("(\[mail\]([$MAILSearchString]*)\[/mail\])", '$1', $Text);
$Text = preg_replace("/\[mail\=([$MAILSearchString]*)\](.+?)\[\/mail\]/", '$2', $Text);
// Check for bold text
$Text = preg_replace("(\[b\](.+?)\[\/b])is",'$1',$Text);
// Check for Italics text
$Text = preg_replace("(\[i\](.+?)\[\/i\])is",'$1',$Text);
// Check for Underline text
$Text = preg_replace("(\[u\](.+?)\[\/u\])is",'$1',$Text);
// Check for strike-through text
$Text = preg_replace("(\[s\](.+?)\[\/s\])is",'$1',$Text);
// Check for over-line text
$Text = preg_replace("(\[o\](.+?)\[\/o\])is",'$1',$Text);
// Check for colored text
$Text = preg_replace("(\[color=(.+?)\](.+?)\[\/color\])is","$2",$Text);
// Check for sized text
$Text = preg_replace("(\[size=(.+?)\](.+?)\[\/size\])is","$2",$Text);
// Check for list text
$Text = preg_replace("/\[list\](.+?)\[\/list\]/is", '' ,$Text);
$Text = preg_replace("/\[list=1\](.+?)\[\/list\]/is", '' ,$Text);
$Text = preg_replace("/\[list=i\](.+?)\[\/list\]/s", '' ,$Text);
$Text = preg_replace("/\[list=I\](.+?)\[\/list\]/s", '' ,$Text);
$Text = preg_replace("/\[list=a\](.+?)\[\/list\]/s", '' ,$Text);
$Text = preg_replace("/\[list=A\](.+?)\[\/list\]/s", '' ,$Text);
$Text = str_replace("[*]", "", $Text);
// Check for font change text
$Text = preg_replace("(\[font=(.+?)\](.+?)\[\/font\])","$2",$Text);
// Images
// [img]pathtoimage[/img]
$Text = preg_replace("/\[IMG\](.+?)\[\/IMG\]/", '
', $Text);
$Text = preg_replace("/\[img\](.+?)\[\/img\]/", '
', $Text);
// [img=widthxheight]image source[/img]
$Text = preg_replace("/\[img\=([0-9]*)x([0-9]*)\](.+?)\[\/img\]/", '
', $Text);
return $Text;
}
//function for smiley icons
function smile($post) {
$smilies=array(
':)' => "
",
':(' => "
",
':p' => "
",
';)' => "
",
';smirk' => "
",
':blush' =>"
",
':angry' =>"
",
':shocked'=> "
",
':ninja'=>"
",
':cool'=>"
",
'(!)'=>"
",
'(?)'=>"
",
'(heart)'=>"
",
':{blink}'=>"
",
'{clover}'=>"
",
':[glasses]'=>"
",
':[barf]'=>"
",
':[reallymad]'=>"
",
':[evil]'=>"
"
);
$post=str_replace(array_keys($smilies), array_values($smilies), $post);
return $post;
}