Codice PHP:
<?php
// NON MODIFICARE QUI SOTTO
define('IN_PHPBB', true);
$phpbb_root_path = (defined('PHPBB_ROOT_PATH')) ? PHPBB_ROOT_PATH : './';
$phpEx = substr(strrchr(__FILE__, '.'), 1);
include($phpbb_root_path . 'common.'.$phpEx);
$user->session_begin();
$user->setup('viewforum');
$smilies_path = $config['smilies_path'];
if(isset($_GET['mode'])){$mode = $_GET['mode'];}else{$mode = "";}
if(isset($_GET['action'])){$action = $_GET['action'];}else{$action = "";}
$font_style = '<font style="color: #333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 0.8em">';
$button_style = 'style="background-color: #ddd; color: #333; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 0.7em"';
function request_tag_board_var($mode, $u){
global $db;
$sql = 'SELECT *
FROM ' . USERS_TABLE . "
WHERE user_id = $u";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$var = $row[$mode];
return $var;
}
switch ($mode){
case 'admin':
session_start();
if(!isset($_SESSION['loggedin'])){
switch ($action){
default:
?>
<form action="tag_board.php?mode=admin&action=login" method="post">
<table width="100%">
<tr>
<td width="50%" align="right"><?php echo $font_style ?>Username :<?php echo "</font>"; ?></td>
<td width="50%" align="left"><input type="text" name="usr" size="15" maxlength="15"></td>
</tr>
<tr>
<td align="right"><?php echo $font_style ?>Password :<?php echo "</font>"; ?></td>
<td align="left"><input name="psw" type="password" size="15" maxlength="15"></td>
</tr>
<tr>
<td colspan="2" align="center"><input type="submit" value="Login" <?php echo $button_style ?>></td>
</tr>
</table>
</form>
<?php
break;
case 'login':
if($_POST['usr'] != $tag_board_usr OR $_POST['psw'] != $tag_board_psw){
?>
<table width="100%">
<tr>
<td align="center"><?php echo $font_style ?>Username e/o password errati<?php echo "</font>"; ?></td>
</tr>
</table>
<?php
}
else{
$_SESSION['loggedin'] = 1;
header("Location: {$phpbb_root_path}tag_board.php?mode=admin");
}
break;
}
}
else{
switch ($action){
default:
$sql = 'SELECT *
FROM ' . $table_prefix . "tag_board
ORDER BY tag_id DESC";
$result = $db->sql_query($sql);
$i = "0";
while($row = $db->sql_fetchrow($result)){
$row['tag_msg'] = htmlspecialchars($row['tag_msg']);
$row['tag_msg'] = tag_board_smilies_rep($row['tag_msg']);
$template->assign_block_vars('tag_boardrow', array(
'STYLE' => (($i % 2) != "0") ? "tb_style1" : "tb_style2",
'TIME' => $user->format_date($row['time']),
'U_PROFILE' => ($row['user_id'] == "1") ? "{$phpbb_root_path}ucp.$phpEx?mode=register" : "{$phpbb_root_path}memberlist.$phpEx?mode=viewprofile&u=".$row['user_id'],
'USERNAME_COLOUR' => request_tag_board_var('user_colour',$row['user_id']),
'USERNAME' => request_tag_board_var('username',$row['user_id']),
'TAG_MSG' => $row['tag_msg'],
'ADMIN' => "1",
'U_DELETE' => "{$phpbb_root_path}tag_board.php?mode=admin&action=delete&id=".$row['tag_id'],
'U_EDIT' => "{$phpbb_root_path}tag_board.php?mode=admin&action=edit&id=".$row['tag_id'],
'U_LOGOUT' => "{$phpbb_root_path}tag_board.php?mode=admin&action=logout",
));
$i++;
}
page_header();
$template->set_filenames(array('body' => 'tag_board_layout.html'));
page_footer();
break;
case 'delete':
if(!isset($_POST['submit'])){
?>
<form method="post">
<input type="hidden" name="submit" value="1">
<table width="100%">
<tr>
<td align="center"><?php echo $font_style ?>Sei sicuro di voler effettuare questa azione?<?php echo "</font>"; ?></td>
</tr>
<tr>
<td align="center"><input type="submit" value="Si" <?php echo $button_style ?>> <input type="button" value="No" onClick="javascript:history.go(-1)" <?php echo $button_style ?>></td>
</tr>
</table>
</form>
<?php
}
else{
$sql = 'DELETE
FROM ' . $table_prefix . "tag_board
WHERE tag_id = " . $_GET['id'];
$db->sql_query($sql);
?>
<table width="100%">
<tr>
<td align="center"><?php echo $font_style ?>Azione effettuata con successo!<?php echo "</font>"; ?></td>
</tr>
<tr>
<td align="center"><input type="button" value="Indietro" onClick="javascript:history.go(-2)" <?php echo $button_style ?>></td>
</tr>
</table>
<?php
}
break;
case 'edit':
if(!isset($_POST['submit'])){
$sql = 'SELECT *
FROM ' . $table_prefix . "tag_board
WHERE tag_id = " . $_GET['id'];
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$row['tag_msg'] = htmlspecialchars($row['tag_msg']);
echo '<meta http-equiv="content-type" content="text/html; charset=UTF-8">';
?>
<form method="post">
<input type="hidden" name="submit" value="1">
<table width="100%">
<tr>
<td align="center"><textarea name="tb_msg" cols="100" rows="5"><?php echo $row['tag_msg'] ?></textarea></td>
</tr>
<tr>
<td align="center"><input type="submit" value="Modifica" <?php echo $button_style ?>> <input type="button" value="Indietro" onClick="javascript:history.go(-1)" <?php echo $button_style ?>></td>
</tr>
</table>
</form>
<?php
}
else{
$sql = 'UPDATE
' . $table_prefix . "tag_board
SET tag_msg = '" . $_POST['tb_msg'] . "'
WHERE tag_id = " . $_GET['id'];
$db->sql_query($sql);
?>
<table width="100%">
<tr>
<td align="center"><?php echo $font_style ?>Azione effettuata con successo!<?php echo "</font>"; ?></td>
</tr>
<tr>
<td align="center"><input type="button" value="Indietro" onClick="javascript:history.go(-2)" <?php echo $button_style ?>></td>
</tr>
</table>
<?php
}
break;
case 'logout':
unset($_SESSION['loggedin']);
header("Location: {$phpbb_root_path}tag_board.php");
break;
}
}
break;
case 'write':
if($permessi == "2" OR $user->data['user_id'] != "1"){
if(!empty($_POST['tb_msg'])){
$sql = "INSERT
INTO " . $table_prefix . "tag_board
VALUE ('0', '" . $user->data['user_id'] . "', '" . $_POST['tb_msg'] . "', '" . time() . "')";
$db->sql_query($sql);
}
}
header("Location: {$phpbb_root_path}tag_board.php");
break;
case 'smilies':
if($permessi == "2" OR $user->data['user_id'] != "1"){
page_header();
$template->set_filenames(array('body' => 'tag_board_smilies.html'));
page_footer();
}
break;
case 'read':
if($permessi == "1" OR $permessi == "2" OR $user->data['user_id'] != "1"){
$sql = 'SELECT *
FROM ' . $table_prefix . "tag_board
ORDER BY tag_id DESC";
$result = $db->sql_query($sql);
$i = "0";
while($row = $db->sql_fetchrow($result)){
$row['tag_msg'] = htmlspecialchars($row['tag_msg']);
$row['tag_msg'] = tag_board_smilies_rep($row['tag_msg']);
$template->assign_block_vars('tag_boardrow', array(
'STYLE' => (($i % 2) != "0") ? "tb_style1" : "tb_style2",
'TIME' => $user->format_date($row['time']),
'U_PROFILE' => ($row['user_id'] == "1") ? "{$phpbb_root_path}ucp.$phpEx?mode=register" : "{$phpbb_root_path}memberlist.$phpEx?mode=viewprofile&u=".$row['user_id'],
'USERNAME_COLOUR' => request_tag_board_var('user_colour',$row['user_id']),
'USERNAME' => request_tag_board_var('username',$row['user_id']),
'TAG_MSG' => $row['tag_msg'],
));
$i++;
}
page_header();
$template->set_filenames(array('body' => 'tag_board_layout.html'));
page_footer();
}
break;
default:
if($permessi == "1" OR $permessi == "2" OR $user->data['user_id'] != "1"){
$sql = 'SELECT *
FROM ' . $table_prefix . "tag_board
ORDER BY tag_id DESC
LIMIT $tag_board_msg";
$result = $db->sql_query($sql);
$i = "0";
while($row = $db->sql_fetchrow($result)){
$row['tag_msg'] = htmlspecialchars($row['tag_msg']);
$row['tag_msg'] = tag_board_smilies_rep($row['tag_msg']);
$template->assign_block_vars('tag_boardrow', array(
'STYLE' => (($i % 2) != "0") ? "tb_style1" : "tb_style2",
'TIME' => $user->format_date($row['time']),
'U_PROFILE' => ($row['user_id'] == "1") ? "{$phpbb_root_path}ucp.$phpEx?mode=register" : "{$phpbb_root_path}memberlist.$phpEx?mode=viewprofile&u=".$row['user_id'],
'USERNAME_COLOUR' => request_tag_board_var('user_colour',$row['user_id']),
'USERNAME' => request_tag_board_var('username',$row['user_id']),
'TAG_MSG' => $row['tag_msg'],
));
$i++;
}
page_header();
$template->set_filenames(array('body' => 'tag_board_layout.html'));
page_footer();
}
break;
}
?>