-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathaddchatter.php
151 lines (135 loc) · 3.96 KB
/
addchatter.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
<?php session_start(); ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<!--- header and style definitions -->
<title>Chatter - ThatShouldBeAComic.com</title>
<head>
<!--[if lt IE 9]>
<script src="http://www.dreamreign.com/include/excanvas.js"></script>
<![endif]-->
<link rel="stylesheet" type="text/css" href="thatshouldbeacomic.css" />
</head>
<?php
require_once 'config.php';
date_default_timezone_set("America/New_York");
$halt = $_GET['halt'];
$lastmsg = $_SESSION['lastMsg'];
$image = $_GET['image'];
$submit = $_POST['submit'];
$email = $_SESSION['email'];
$displayName = $_SESSION['displayName'];
if (!($email))
{ $email = strip_tags($_POST['Email']); }
if (!($displayName))
{ $displayName = strip_tags($_POST['DisplayName']); }
$message = strip_tags($_POST['Message']);
$date = date("Y-m-d H:i:s");
$headBack = $GLOBALS['FQP'] . "addchatter.php";
if ($headBack)
{
$headBack = "Location: $headBack";
}
if (empty($lastMsg))
{
$toSend = "Select `MsgID`, `Nickname`, `DateTime`, `Message` FROM `chatter` WHERE recipient IS NULL;";
}
else
{
$toSend = "Select `MsgID`, `Nickname`, `DateTime`, `Message` FROM `chatter` WHERE MsgID > $lastmsg AND recipient IS NULL;";
}
$connect = mysql_connect("localhost", $GLOBALS['DB_FULLUSER'],$GLOBALS['DB_PASSWORD']) or die("cannot connect!");
mysql_select_db($GLOBALS['DB_NAME']) or die ("Cannot find DB!");
$query = mysql_query($toSend) or die ("Unknown Retreive Query error 9998");
$numrows= mysql_num_rows($query);
if ($numrows>0)
{
echo "\n<div id='newmsg'>";
echo "\n<textarea id='log' rows='30' cols='100' name='log'>";
while ($row = mysql_fetch_assoc($query))
{
$msgID = $row['MsgID'];
$nick = $row['Nickname'];
$time = $row['DateTime'];
$msg = $row['Message'];
echo "\n[$time] <$nick> $msg ";
}
echo "\n</textarea> </div>";
if ($halt > 0)
{
die();
}
}
if ($submit)
{
if ($email)
{
$toSend = "SELECT Email FROM `User` WHERE Email ='$email';";
$connect= mysql_connect("localhost", $GLOBALS['DB_FULLUSER'],$GLOBALS['DB_PASSWORD']) or die("Cannot connect!");
mysql_select_db($GLOBALS['DB_NAME']) or die("Cannot find DB!");
$query = mysql_query($toSend) or die("Unknown User Query error!");
$numrows= mysql_num_rows($query);
if ($numrows>0)
{
while ($row = mysql_fetch_assoc($query))
{
$dbemail = $row['Email'];
}
}
else
{
echo "\nNo user created yet. <a href=\"adduser.php\">Create user</a>";
}
}
else
die("Email not entered");
if ($dbemail && $message)
{
$toSend =
"INSERT INTO `chatter`
VALUES (NULL, '$displayName','$email','$date','$message', NULL, NULL);";
$connect= mysql_connect("localhost", $GLOBALS['DB_FULLUSER'],$GLOBALS['DB_PASSWORD']) or die("Cannot connect!");
mysql_select_db($GLOBALS['DB_NAME']) or die("Cannot find DB!");
$query = mysql_query($toSend) or die("Unknown Query error! 9999");
header($headBack);
}
else
echo "<strong>Blank field detected!</strong>";
}
echo "<form action='addchatter.php' method='POST'>";
?>
<script type="text/javascript" src="phpget.js"></script>
<script type="text/javascript">
window.onload=function(){
var timeoutIdMsg=0;
timeoutIdMsg = setInterval( "getMessages()", 2000 );
document.getElementById('log').scrollTop = document.getElementById("log").scrollHeight;
}
</script>
<table>
<?php if ($email) echo "<!--"?><tr>
<td>
E-mail:
</td>
<td>
<input type='text' name='Email'></input>
</td>
</tr><?php if ($email) echo "--> $email";?>
<?php if ($displayName) echo "<!--"?><tr>
<td>
Nickname:
</td>
<td>
<input type='text' name='DisplayName'></input>
</td>
<tr><?php if ($displayName) echo "--> $displayName";?>
<td>
Message:
</td>
<td>
<textarea rows="2" cols="100" name='Message'></textarea>
</td>
</tr>
<tr>
<td></td><td><input type='submit' name='submit' value='Send'></td>
</tr>
</table>
</form>