2022-10-02 17:10:23 +00:00
|
|
|
|
|
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html lang="en">
|
|
|
|
|
<head>
|
|
|
|
|
<!-- Global -->
|
|
|
|
|
<?php require('../inc/head.html'); ?>
|
|
|
|
|
|
|
|
|
|
<!-- Page-specific -->
|
2022-10-02 17:56:56 +00:00
|
|
|
<title>Guestbook</title>
|
2022-10-02 17:10:23 +00:00
|
|
|
<!--<link rel="shortcut icon" href="../res/img/icons/ico/calc.ico" type="image/x-icon">-->
|
|
|
|
|
<!--<meta property="og:image" content="/res/img/icons/png/computer.png">-->
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<div class="page">
|
|
|
|
|
<?php require('../inc/nav.php') ?>
|
|
|
|
|
|
|
|
|
|
<div id="pagebody">
|
|
|
|
|
<div id="content">
|
|
|
|
|
<?php
|
2022-10-02 17:56:56 +00:00
|
|
|
$name = strip_tags($_POST["name"]);
|
|
|
|
|
$msg = strip_tags($_POST["message"]);
|
|
|
|
|
if ($msg === "" || $name === "" || strip_tags(htmlspecialchars_decode($msg)) === "") {
|
2022-10-02 17:10:23 +00:00
|
|
|
echo '<b>You must provide both a name and message!</b>';
|
|
|
|
|
} else {
|
|
|
|
|
$db = new PDO("sqlite:/mnt/data1/webdata/floppydisk/guestbook.db");
|
2022-10-02 17:56:56 +00:00
|
|
|
|
2022-10-02 17:10:23 +00:00
|
|
|
$showinfo = isset($_POST["showinfo"]) ? true : false;
|
|
|
|
|
$showip = isset($_POST["showip"]) ? true : false;
|
|
|
|
|
$ip = $_SERVER['REMOTE_ADDR'];
|
|
|
|
|
$browser = get_browser(null, true);
|
|
|
|
|
$sys = $browser['parent'] . ' (' . $browser['platform_description'] . ' ' . $browser['platform_version'] . ')';
|
|
|
|
|
|
|
|
|
|
$data = array('name' => $name, 'message' => $msg, 'show_info' => $showinfo, 'show_ip' => $showip, 'ip' => $ip, 'submitted' => time(), 'sys' => $sys);
|
|
|
|
|
|
|
|
|
|
$insert = "INSERT INTO Entries (name, message, show_info, show_ip, ip, submitted, browser_info) VALUES (:name, :message, :show_info, :show_ip, :ip, :submitted, :browser)";
|
|
|
|
|
$stmt = $db->prepare($insert);
|
|
|
|
|
$stmt->bindParam(':name', $data['name'], PDO::PARAM_STR);
|
|
|
|
|
$stmt->bindParam(':message', $data['message'], PDO::PARAM_STR);
|
|
|
|
|
$stmt->bindParam(':show_info', $data['show_info'], PDO::PARAM_STR);
|
|
|
|
|
$stmt->bindParam(':show_ip', $data['show_ip'], PDO::PARAM_STR);
|
|
|
|
|
$stmt->bindParam(':ip', $data['ip'], PDO::PARAM_STR);
|
|
|
|
|
$stmt->bindParam(':submitted', $data['submitted'], PDO::PARAM_STR);
|
|
|
|
|
$stmt->bindParam(':browser', $data['sys'], PDO::PARAM_STR);
|
|
|
|
|
$stmt->execute();
|
|
|
|
|
echo '<b>Success!</b>';
|
|
|
|
|
}
|
|
|
|
|
?><br><br>
|
|
|
|
|
<a href="./">Back</a>
|
|
|
|
|
</div> <!-- content -->
|
|
|
|
|
|
|
|
|
|
<div id="footer" class="pagefooter">
|
2022-10-03 10:03:42 +00:00
|
|
|
<?php $file = __FILE__;require('../inc/footer.php'); ?>
|
2022-10-02 17:10:23 +00:00
|
|
|
</div> <!-- footer -->
|
|
|
|
|
</div> <!-- pagebody -->
|
|
|
|
|
</div> <!-- page -->
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
