PHP chk_antispam函数代码示例

                $grl = arlistee($allgAr[$row['schl']], $teAr);
                $input = '<select name="' . $row['schl'] . '">' . $grl . '</select>';
            } else {
                $input = 'Fehler in Datenbank!';
            }
        }
        $tpl->set_ar_out(array('frage' => $row['frage'], 'input' => $input, 'schl' => $row['schl'], 'help' => is_null($row['helptext']) ? 0 : 1, 'helptext' => $row['helptext']), 4);
    }
    // Kategorien-Ende ausgeben, falls nötig
    if ($katid != 0) {
        $tpl->out(5);
    }
    // Template-Footer ausgeben
    $tpl->set('antispam', get_antispam('admin_allg', 1, true));
    $tpl->out(6);
} elseif (chk_antispam('admin_allg', true)) {
    $abf = 'SELECT * FROM `prefix_config` WHERE hide = 0 ORDER BY `kat` ';
    $erg = db_query($abf);
    while ($row = db_fetch_assoc($erg)) {
        if ($row['typ'] == 'password' and $_POST[$row['schl']] == '***') {
            continue;
        } elseif ($row['typ'] == 'password') {
            require_once 'include/includes/libs/AzDGCrypt.class.inc.php';
            $cr64 = new AzDGCrypt(DBDATE . DBUSER . DBPREF);
            $_POST[$row['schl']] = $cr64->crypt($_POST[$row['schl']]);
        }
        db_query('UPDATE `prefix_config` SET wert = "' . escape($_POST[$row['schl']], 'textarea') . '" WHERE schl = "' . $row['schl'] . '"');
    }
    wd('admin.php?allg', 'Erfolgreich ge&auml;ndert', 2);
}
// -----------------------------------------------------------|

<?php

#   Copyright by: Manuel
#   Support: www.ilch.de
defined('main') or die('no direct access');
$title = $allgAr['title'] . ' :: Users :: Profil';
$hmenu = $extented_forum_menu . '<a class="smalfont" href="?user">Users</a><b> &raquo; </b> Profil' . $extented_forum_menu_sufix;
$design = new design($title, $hmenu, 1);
if ($_SESSION['authright'] <= -1) {
    $csrfCheck = chk_antispam('user_profile_edit', true);
    if (empty($_POST['submit']) || !$csrfCheck) {
        $design->header();
        $abf = 'SELECT email,wohnort,homepage,aim,msn,icq,yahoo,avatar,status,staat,gebdatum,sig,opt_pm_popup,opt_pm,opt_mail,geschlecht,spezrank FROM `prefix_user` WHERE id = "' . $_SESSION['authid'] . '"';
        $erg = db_query($abf);
        if (db_num_rows($erg) > 0) {
            $row = db_fetch_assoc($erg);
            $tpl = new tpl('user/profil_edit');
            $row['staat'] = '<option></option>' . arliste($row['staat'], get_nationality_array(), $tpl, 'staat');
            $row['geschlecht0'] = $row['geschlecht'] < 1 ? 'checked' : '';
            $row['geschlecht1'] = $row['geschlecht'] == 1 ? 'checked' : '';
            $row['geschlecht2'] = $row['geschlecht'] == 2 ? 'checked' : '';
            if ($row['status'] == 1) {
                $row['status1'] = 'checked';
                $row['status0'] = '';
            } else {
                $row['status1'] = '';
                $row['status0'] = 'checked';
            }
            if ($row['opt_mail'] == 1) {
                $row['opt_mail1'] = 'checked';
                $row['opt_mail0'] = '';

<?php

/**
 * @license http://opensource.org/licenses/gpl-2.0.php The GNU General Public License (GPL)
 * @copyright (C) 2000-2010 ilch.de
 * @version $Id$
 */
defined('main') or die('no direct access');
defined('admin') or die('only admin access');
$design = new design('Ilch Admin-Control-Panel :: Regeln', '', 2);
$design->header();
$um = '';
if (isset($_REQUEST['um'])) {
    $um = $_REQUEST['um'];
}
if (!empty($_POST['sub']) and chk_antispam('adminuser_action', true)) {
    $text = escape($_POST['text'], 'string');
    $titel = escape($_POST['titel'], 'string');
    $zahl = escape($_POST['zahl'], 'integer');
    if (empty($_POST['sid'])) {
        db_query('INSERT INTO `prefix_rules` (`text`,`titel`,`zahl`) VALUES ( "' . $text . '","' . $titel . '","' . $zahl . '" ) ');
    } else {
        $sid = escape($_POST['sid'], 'integer');
        db_query('UPDATE `prefix_rules` SET `text` = "' . $text . '", `titel` = "' . $titel . '", `zahl` = "' . $zahl . '" WHERE `id` = "' . $sid . '"');
    }
}
if (!empty($_GET['delete'])) {
    $delete = escape($_GET['delete'], 'integer');
    db_query('DELETE FROM `prefix_rules` WHERE `id` = "' . $delete . '" LIMIT 1');
}
if (empty($_GET['sid'])) {

     $sek = 4;
     if (isset($_GET['sek'])) {
         $sek = $_GET['sek'];
     }
     $diashow_html = '<meta http-equiv="refresh" content="' . $sek . '; URL=index.php?gallery-show-' . $cid . '-p' . $next . '=0&amp;diashow=shownext&amp;sek=' . $sek . '">';
     $diashow = $page . '=0&amp;diashow=stop';
 }
 # anzeigen
 $tpl = new tpl('gallery_show');
 $arr = array('cid' => $cid, 'last' => $last, 'next' => $next, 'diashow' => $diashow, 'diashow_html' => $diashow_html, 'endung' => $row['endung'], 'id' => $row['id'], 'vote_wertung' => $row['vote_wertung'], 'vote_klicks' => $row['vote_klicks'], 'bildr' => $page, 'besch' => unescape($row['besch']), 'breite' => $breite, 'hoehe' => $hoehe);
 $tpl->set_ar_out($arr, 0);
 # kommentare
 if ($allgAr['gallery_img_koms'] == 1) {
     # eintragen
     $insertmsg = '';
     if ((loggedin() or isset($_POST['name'])) and !empty($_POST['text']) and $antispam = chk_antispam('gallery')) {
         if (loggedin()) {
             $name = $_SESSION['authname'];
         } else {
             $name = escape($_POST['name'], 'string');
             if (db_count_query('SELECT COUNT(*) FROM prefix_user WHERE name = "' . $name . '"')) {
                 $insertmsg .= 'Der Name ist bereits für einen registrierten User vergeben';
             }
         }
         if (empty($insertmsg)) {
             $text = escape($_POST['text'], 'string');
             db_query("INSERT INTO prefix_koms (name,text,uid,cat) VALUES ('" . $name . "','" . $text . "'," . $row['id'] . ",'GALLERYIMG')");
         }
     } elseif (isset($_POST['subgalkom']) and !$antispam) {
         $insertmsg .= 'Falscher Antispam';
     }

<?php

#   Copyright by: Manuel
#   Support: www.ilch.de
defined('main') or die('no direct access');
if ($forum_rights['mods'] == FALSE) {
    $forum_failure[] = 'Keine Berechtigung dieses Forum zu moderiren';
}
check_forum_failure($forum_failure);
$title = $allgAr['title'] . ' :: Forum :: ' . aktForumCats($aktForumRow['kat'], 'title') . ' :: ' . $aktForumRow['name'];
$hmenu = $extented_forum_menu . '<a class="smalfont" href="index.php?forum">Forum</a><b> &raquo; </b>' . aktForumCats($aktForumRow['kat']) . '<b> &raquo; </b>' . $aktForumRow['name'] . $extented_forum_menu_sufix;
$design = new design($title, $hmenu, 1);
$design->header();
$csrfCheck = chk_antispam('forum_edit_forum', true);
if ((isset($_POST['del']) or isset($_POST['shift']) or isset($_POST['status'])) and (empty($_POST['in']) or isset($_POST['in']) and (!is_array($_POST['in']) or count($_POST['in']) < 1))) {
    wd('index.php?forum-editforum-' . $fid, 'Es wurden keine Themen gew&auml;hlt.', 2);
} elseif (isset($_POST['status']) && $csrfCheck) {
    foreach ($_POST['in'] as $k => $v) {
        $k = escape($k, 'integer');
        $astat = db_result(db_query("SELECT stat FROM prefix_topics WHERE id = " . $k), 0, 0);
        $nstat = $astat == 1 ? 0 : 1;
        db_query("UPDATE `prefix_topics` SET stat = '" . $nstat . "' WHERE id = " . $k);
    }
    wd('index.php?forum-showtopics-' . $fid, 'Status ge&auml;ndert', 2);
} elseif (!$csrfCheck || empty($_POST['del']) && empty($_POST['shift'])) {
    $limit = $allgAr['Ftanz'];
    // Limit
    $page = $menu->getA(3) == 'p' ? $menu->getE(3) : 1;
    $MPL = db_make_sites($page, "WHERE fid = '{$fid}'", $limit, '?forum-editforum-' . $fid, 'topics');
    $anfang = ($page - 1) * $limit;
    $q = "SELECT a.id, a.name, a.rep, a.erst, a.hit, a.art, a.stat, b.time, b.erst as last, b.id as pid\r\n   FROM prefix_topics a\r\n  \tLEFT JOIN prefix_posts b ON a.last_post_id = b.id\r\n  \tWHERE a.fid = {$fid}\r\n   \tORDER BY a.art DESC, b.time DESC\r\n   \tLIMIT " . $anfang . "," . $limit;

if (!isset($_SESSION['klicktime'])) {
    $_SESSION['klicktime'] = 0;
}
$topic = '';
$txt = '';
$xnn = '';
if (isset($_POST['topic'])) {
    $topic = trim(escape($_POST['topic'], 'string'));
}
if (isset($_POST['txt'])) {
    $txt = trim(escape($_POST['txt'], 'textarea'));
}
if (isset($_POST['Gname'])) {
    $xnn = trim(escape_nickname($_POST['Gname']));
}
if ($_SESSION['klicktime'] + 15 > $dppk_time or empty($topic) or empty($txt) or !empty($_POST['priview']) or empty($_POST['Gname']) and !loggedin() or !chk_antispam('newtopic')) {
    $design = new design($title, $hmenu, 1);
    $design->header($load);
    $tpl = new tpl('forum/newtopic');
    $name = '';
    if (!loggedin()) {
        $name = '<tr><td class="Cmite"0><b>' . $lang['name'] . '</b></td>';
        $name .= '<td class="Cnorm"><input type="text" value="' . unescape($xnn) . '" maxlength="15" name="Gname"></td></tr>';
    }
    if (isset($_POST['priview'])) {
        $tpl->set_out('txt', bbcode(unescape($txt)), 0);
    }
    $ar = array('name' => $name, 'txt' => escape_for_fields(unescape($txt)), 'topic' => escape_for_fields(unescape($topic)), 'fid' => $fid, 'SMILIES' => getsmilies(), 'antispam' => get_antispam('newtopic', 1));
    $tpl->set_ar_out($ar, 1);
} else {
    // save toipc

}
function admin_allg_wars_last_komms($ak)
{
    $ar = array(0 => 'nein', -1 => 'ab User', -3 => 'ab Trial', -4 => 'ab Member');
    $l = '';
    foreach ($ar as $k => $v) {
        if ($k == $ak) {
            $sel = ' selected';
        } else {
            $sel = '';
        }
        $l .= '<option' . $sel . ' value="' . $k . '">' . $v . '</option>';
    }
    return $l;
}
$csrfCheck = chk_antispam('admin_allg', true);
if (empty($_POST['submit']) || !$csrfCheck) {
    $gfx = admin_allg_gfx($allgAr['gfx']);
    $smodul = admin_allg_smodul($allgAr['smodul']);
    $wars_last_komms = admin_allg_wars_last_komms($allgAr['wars_last_komms']);
    echo '<table cellpadding="0" cellspacing="0" border="0"><tr><td><img src="include/images/icons/admin/konfiguration.png" /></td><td width="30"></td><td valign="bottom"><h1>Konfiguration</h1></td></tr></table>';
    echo '<form action="admin.php?allg" method="POST">';
    echo '<table cellpadding="3" cellspacing="1" class="border" border="0">';
    #	echo '<tr class="Chead"><td colspan="2"><b>Konfiguration</b></td></tr>';
    $ch = '';
    $abf = 'SELECT * FROM `prefix_config` ORDER BY kat,pos,typ ASC';
    $erg = db_query($abf);
    while ($row = db_fetch_assoc($erg)) {
        if ($ch != $row['kat']) {
            echo '<tr><td colspan="2" class="Cdark"><b>' . $row['kat'] . '</b></td></tr>';
        }

<?php

/**
 * @license http://opensource.org/licenses/gpl-2.0.php The GNU General Public License (GPL)
 * @copyright (C) 2000-2010 ilch.de
 * @version $Id$
 */
defined('main') or die('no direct access');
defined('admin') or die('only admin access');
if (isset($_POST['bbwy']) and isset($_POST['filename']) and isset($_POST['akl']) and chk_antispam('adminuser_action', true)) {
    // speichern
    $akl = $_POST['akl'];
    $text = $_POST['bbwy'];
    // $text = rteSafe($_POST['text']);
    $text = set_properties(array('title' => $_POST['title'], 'hmenu' => $_POST['hmenu'], 'view' => $_POST['view'], 'viewoptions' => $_POST['viewoptions'], 'wysiwyg' => $_POST['wysiwyg'])) . $text;
    $text = edit_text(stripslashes($text), true);
    $a = substr($akl, 0, 1);
    // $e = substr ( $akl, 1 );
    // if ( $e != 'neu' ) {
    // unlink ( 'include/contents/selfbp/self'.$a.'/'.$e );
    // }
    if (!empty($_POST['exfilename']) and $_POST['exfilename'] != $_POST['filename']) {
        $exfilename = escape($_POST['exfilename'], 'string');
        @unlink('include/contents/selfbp/self' . $a . '/' . $exfilename);
    }
    $filename = get_nametosave($_POST['filename']);
    $fname = 'include/contents/selfbp/self' . $a . '/' . $filename;
    save_file_to($fname, $text);
    if ($_POST['toggle'] == 0) {
        $design->header();
        wd('admin.php?selfbp=0&akl=' . $a . $filename, 'Ihre &Auml;nderungen wurden gespeichert...', 3);

            // breite und höhe des bildes
            $dimension = @getimagesize($updir . $bannername);
            $bildbreite = $dimension['0'];
            $bildhohe = $dimension['1'];
            // alles in die Datenbank schreiben
            $insert_banner = db_query("INSERT INTO `prefix_linkus`\r\n\t\t\t\t\t\t\t(\r\n\t\t\t\t\t\t\t\tname, datei, hoch, breit, link, views, klicks\r\n\t\t\t\t\t\t\t)\r\n\t\t\t\t\t\t\t\tVALUES\r\n\t\t\t\t\t\t\t(\r\n\t\t\t\t\t\t\t\t'" . $upload_name . "', '" . $bannername . "', " . $bildbreite . ", " . $bildhohe . ", '" . $upload_link . "', 0, 0\r\n\t\t\t\t\t\t\t)");
            if ($insert_banner === false) {
                echo 'Fehler beim speichern in die Datenbank';
            }
        } else {
            echo 'unbekannter Fehler beim verschieben der Datei';
        }
    }
}
// Banner Update
if (isset($_POST['seteditbanner']) and chk_antispam('adminuser_action', true)) {
    // escapes
    $edit_id = escape($_POST['hiddeneditid'], 'integer');
    $edit_name = escape($_POST['editbannername'], 'string');
    $edit_link = escape($_POST['editlink'], 'string');
    $get_edit_qry = db_query("SELECT id,name,link,datei FROM `prefix_linkus` WHERE id = " . $edit_id . "");
    $edit_row = db_fetch_assoc($get_edit_qry);
    if ($_FILES['editbannerfield']['error'] == 4 and $edit_name == $edit_row['name'] and $edit_link == $edit_row['link']) {
        wd('admin.php?linkus', 'Keine Änderungen vorgenommen', 3);
        $design->footer(1);
    } else {
        if ($_FILES['editbannerfield']['error'] == 0) {
            // alten Banner löschen
            @unlink($updir . $row['datei']);
            // Dateiname bereits vorhanden ?
            if (is_readable($updir . $_FILES['editbannerfield']['name'])) {

             $tpl->set('BBCode_ScreenMaxHoehe', $_POST['BBCode_ScreenMaxHoehe']);
         }
     }
     $tpl->out(0);
     break;
     // > Badwordlist
 // > Badwordlist
 case 'badword':
     // > Design ausgeben!
     $design = new design('Ilch Admin-Control-Panel :: BBcode-Badwords', '- Badwords', 2);
     $design->header();
     $tpl = new tpl('bbcode/badword', 1);
     $tpl->set('msgColor', '#0033FF');
     $tpl->set('Message', '');
     $tpl->set('ANTISPAM', get_antispam('adminuser_action', 0, true));
     if (isset($_POST['BB_SubmitBadword']) && $_POST['BBCode_BadPatter'] != "" && $_POST['BBCode_BadReplace'] != "" and chk_antispam('adminuser_action', true)) {
         $sql = db_query("SELECT\r\n\t\t\t\t\t\t\t\tfcBadPatter,\r\n\t\t\t\t\t\t\t\tfcBadReplace\r\n\t\t\t\t\t\t\t FROM\r\n\t\t\t\t\t\t\t \tprefix_bbcode_badword\r\n\t\t\t\t\t\t\tWHERE\r\n\t\t\t\t\t\t\t\tfcBadPatter='" . $_POST['BBCode_BadPatter'] . "'");
         $if = db_fetch_assoc($sql);
         if (isset($if['fcBadPatter'])) {
             $tpl->set('msgColor', '#FF0000');
             $tpl->set('Message', 'Badword existiert schon in der Datenbank!');
         } else {
             db_query("INSERT INTO\r\n\t\t\t\t\t\t\tprefix_bbcode_badword\r\n\t\t\t\t\t\t\t\t(fcBadPatter,fcBadReplace)\r\n\t\t\t\t\t\t\tVALUES\r\n\t\t\t\t\t\t\t\t('" . $_POST['BBCode_BadPatter'] . "','" . $_POST['BBCode_BadReplace'] . "');");
             $tpl->set('msgColor', '#0033FF');
             $tpl->set('Message', 'Badword wurde erfolgreich gespeichert!');
         }
     }
     // > Badword Löschen!
     if ($menu->get(2) == "delete") {
         db_query('DELETE FROM  `prefix_bbcode_badword` WHERE `fnBadwordNr` = "' . $menu->get(3) . '"');
     }

function kalender_listoutput()
{
    global $komsOK, $tpl, $eid, $data, $data_id, $gday, $month, $year, $days, $arr_day, $title_liste, $view, $allgAr;
    //Listbegin
    $tpl->set_ar_out(array('TITLE' => $eid ? $data_id[$eid]['title'] : $title_liste, 'TITLE_ALIGN' => $eid ? '' : ' align="center"'), "listbegin");
    //Detail
    if ($eid) {
        $aus['display'] = 'style="display:none"';
        $aus['DETAIL_DATE'] = date('d.m.Y', $data_id[$eid]['time']);
        $aus['DETAIL_TIME'] = date('H:i', $data_id[$eid]['time']);
        $aus['DETAIL_TEXT'] = BBcode($data_id[$eid]['text']);
        $aus['ID'] = $eid;
        $viewl = $allgAr['kalender_standard_list'];
        if (preg_match('%\\?kalender-v([0|1])%i', $_SERVER['HTTP_REFERER'], $match)) {
            $viewl = $match[1];
        }
        $aus['BACK_LINK'] = 'index.php?kalender-v' . $viewl . '-m' . date('m', $data_id[$eid]['time']) . '-y' . date('Y', $data_id[$eid]['time']);
        if (!$komsOK) {
            $tpl->set_ar_out($aus, 'detail');
        } else {
            if ((loggedin() or chk_antispam('kalender_komms')) and $komsOK and !empty($_POST['name']) and !empty($_POST['text'])) {
                if (loggedin()) {
                    $name = $_SESSION['authname'];
                    $userid = $_SESSION['authid'];
                } else {
                    $name = escape($_POST['name'], 'string') . ' (Gast)';
                    $userid = 0;
                }
                $text = escape($_POST['text'], 'string');
                db_query("INSERT INTO `prefix_koms` (`name`,`userid`,`text`,`time`,`uid`,`cat`) VALUES ('" . $name . "', " . $userid . ", '" . $text . "','" . time() . "', " . $eid . ", 'KALENDER')");
            }
            if (loggedin()) {
                $aus['uname'] = $_SESSION['authname'];
                $aus['readonly'] = 'readonly';
            } else {
                $aus['uname'] = '';
                $aus['readonly'] = '';
            }
            $aus['ANTISPAM'] = get_antispam('kalenderkom', 0);
            $aus['text'] = bbcode($aus['text']);
            $tpl->set_ar_out($aus, 'detail');
            $tpl->set_ar_out($aus, 'commentstart');
            $erg = db_query("SELECT `id`, `name`, `userid`, `text`, `time` FROM `prefix_koms` WHERE `uid` = " . $eid . " AND `cat` = 'KALENDER' ORDER BY `id` DESC");
            $anz = db_num_rows($erg);
            if ($anz == 0) {
                echo 'Keine Kommentare vorhanden';
            } else {
                while ($r1 = db_fetch_assoc($erg)) {
                    if (has_right(-7, 'kalender')) {
                        $del = ' <a href="index.php?kalender-v1-e' . $eid . '-d' . $r1['id'] . '"><img src="include/images/icons/del.gif" alt="l&ouml;schen" border="0" title="l&ouml;schen" /></a>';
                    }
                    $r1['zahl'] = $anz;
                    $r1['avatar'] = get_avatar($r1['userid']);
                    $r1['time'] = post_date($r1['time'], 1) . $del;
                    $r1['text'] = bbcode($r1['text']);
                    $tpl->set_ar_out($r1, 'comments');
                    $anz--;
                }
            }
        }
        $tpl->out('commentend');
        // Kommentare Ende
    } elseif ($view == 0) {
        for ($i = 0; $i < $days; $i++) {
            $date = mktime(0, 0, 0, $month, $i + 1, $year);
            $text = '';
            if (isset($data[$date])) {
                foreach ($data[$date] as $eventinfo) {
                    $text .= eventlink($tpl, $view, $eventinfo);
                    // bbcode anwenden
                    $eventinfo["text"] = BBCode($eventinfo["text"]);
                    $tooltips .= $tpl->set_ar_get($eventinfo, "tooltip");
                }
            }
            $aus['LIST_I'] = $i + 1;
            $aus['LIST_D'] = $arr_day[date('w', mktime(0, 0, 0, $month, $i + 1, $year))];
            $aus['LIST_T'] = $text;
            $class = $i % 2 ? 'Cnorm' : 'Cmite';
            $aus['LIST_CLASS'] = $i + 1 == date('j') && $month == date('n') && $year == date('Y') ? 'Cdark' : $class;
            $tpl->set_ar_out($aus, 'listitem');
            unset($aus);
        }
        showTooltips($tpl, $tooltips);
    } elseif ($view == 1) {
        // Nur ein Tag
        if (isset($data) && !empty($gday)) {
            $date = mktime(0, 0, 0, $month, $gday, $year);
            $i = 1;
            $tooltips = '';
            if (isset($data[$date])) {
                foreach ($data[$date] as $eventinfo) {
                    $text = '';
                    $text .= eventlink($tpl, $view, $eventinfo);
                    $aus['LIST_I'] = $arr_day[date('w', $date)];
                    $aus['LIST_D'] = date('H:i', $eventinfo['time']);
                    $aus['LIST_T'] = $text;
                    $class = $i % 2 ? 'Cnorm' : 'Cmite';
                    $aus['LIST_CLASS'] = $i + 1 == date('j') && $month == date('n') && $year == date('Y') ? 'Cdark' : $class;
                    $tpl->set_ar_out($aus, 'listitem');
                    unset($aus);
//.........这里部分代码省略.........

    exit;
}
$far = array('clanname', 'clanpage', 'clantag', 'clancountry', 'mailaddy', 'icqnumber', 'squad', 'meetingplace', 'message', 'xonx', 'game', 'matchtype', 'date', 'stunde', 'minute');
$x = 0;
$fightusspam = false;
$fehler = '';
foreach ($far as $v) {
    if (!empty($_POST[$v])) {
        ${$v} = escape($_POST[$v], 'string');
        $x++;
    } else {
        ${$v} = '';
    }
}
if (isset($_POST['submit'])) {
    if (chk_antispam('fightus') != true) {
        $fehler .= '&middot;&nbsp;' . $lang['incorrectspam'] . '<br/>';
        $fightusspam = false;
    } else {
        $fightusspam = true;
    }
}
if (count($far) == $x and $fightusspam == true) {
    $squad = escape($squad, 'integer');
    $abf = "SELECT `mod1`,`mod2`, `mod3`,`name` FROM `prefix_groups` WHERE `id` = " . $squad;
    $erg = db_query($abf);
    $row = db_fetch_assoc($erg);
    $txt = $lang['fightusrequest'];
    $sekunde = '00';
    $datum = get_datum($date) . ' - ' . $stunde . ':' . $minute . ':' . $sekunde;
    $clanpage = get_homepage($clanpage);

 if (empty($_POST['wer'])) {
     $fehler .= '&middot;&nbsp;' . $lang['emptywer'] . '<br/>';
 }
 if (empty($_POST['name'])) {
     $fehler .= '&middot;&nbsp;' . $lang['emptyname'] . '<br/>';
 }
 if (empty($_POST['mail'])) {
     $fehler .= '&middot;&nbsp;' . $lang['emptyemail'] . '<br/>';
 }
 if (empty($_POST['subject'])) {
     $fehler .= '&middot;&nbsp;' . $lang['emptysubject'] . '<br/>';
 }
 if (empty($_POST['txt'])) {
     $fehler .= '&middot;&nbsp;' . $lang['emptymessage'] . '<br/>';
 }
 if (chk_antispam('contact') != true) {
     $fehler .= '&middot;&nbsp;' . $lang['incorrectspam'] . '<br/>';
 }
 //
 if ($fehler == '') {
     $name = escape_for_email($_POST['name']);
     $mail = escape_for_email($_POST['mail']);
     $subject = escape_for_email($_POST['subject'], true);
     $wer = escape_for_email($_POST['wer']);
     $text = $_POST['txt'];
     $wero = false;
     foreach ($k as $a) {
         $e = explode('|', $a);
         if (md5($e[0]) == $wer) {
             $wero = true;
             $wer = $e[0];

<?php

// Copyright by Manuel
// Support www.ilch.de
defined('main') or die('no direct access');
if (loggedin()) {
    $shoutbox_VALUE_name = $_SESSION['authname'];
} else {
    $shoutbox_VALUE_name = 'Nickname';
}
if (has_right($allgAr['sb_recht'])) {
    if (!empty($_POST['shoutbox_submit']) and chk_antispam('shoutbox')) {
        $shoutbox_nickname = escape($_POST['shoutbox_nickname'], 'string');
        $shoutbox_nickname = substr($shoutbox_nickname, 0, 15);
        $shoutbox_textarea = escape($_POST['shoutbox_textarea'], 'textarea');
        $shoutbox_textarea = preg_replace("/\\[.?(url|b|i|u|img|code|quote)[^\\]]*?\\]/i", "", $shoutbox_textarea);
        $shoutbox_textarea = strip_tags($shoutbox_textarea);
        if (!empty($shoutbox_nickname) and !empty($shoutbox_textarea)) {
            db_query('INSERT INTO `prefix_shoutbox` (`nickname`,`textarea`) VALUES ( "' . $shoutbox_nickname . '" , "' . $shoutbox_textarea . '" ) ');
            header('Location: index.php?' . $menu->get_complete());
        }
    }
    echo '<form action="index.php?' . $menu->get_complete() . '" method="POST">';
    echo '<input type="text" size="15" name="shoutbox_nickname" value="' . $shoutbox_VALUE_name . '" onFocus="if (value == \'' . $shoutbox_VALUE_name . '\') {value = \'\'}" onBlur="if (value == \'\') {value = \'' . $shoutbox_VALUE_name . '\'}" maxlength="15">';
    echo '<br /><textarea style="width: 80%" cols="15" rows="2" name="shoutbox_textarea"></textarea><br />';
    $antispam = get_antispam('shoutbox', 0);
    echo $antispam;
    if (!empty($antispam)) {
        echo '<br />';
    }
    echo '<input type="submit" value="' . $lang['formsub'] . '" name="shoutbox_submit">';

 }
 $row['ssurl'] = $row['ssurl'] != '' ? '<img src="' . $row['ssurl'] . '" alt="' . $row['name'] . ' ' . $row['version'] . '" title="' . $row['name'] . ' ' . $row['version'] . '" style="float:left; border: none; padding-right:5px;" />' : '';
 $row['surl'] = empty($row['surl']) ? '' : '&nbsp;&nbsp;&nbsp; <a href="' . $row['surl'] . '" target="_blank">Demo/Screenshot</a>';
 $row['size'] = get_download_size($row['url']);
 $row['descl'] = bbcode($row['descl']);
 $row['version_kl'] = empty($row['version']) ? '' : '(' . $row['version'] . ')';
 $title = $allgAr['title'] . ' :: Downloads ' . $cattitle;
 $hmenu = '<a class="smalfont" href="?downloads">Downloads</a>' . $catname;
 $design = new design($title, $hmenu);
 $header = array('jquery/jquery.validate.js', 'forms/downloads.js');
 $design->header($header);
 $tpl->set_ar_out($row, 0);
 // Kommentare
 if ($komsOK) {
     $id = escape($menu->get(2), 'integer');
     if (chk_antispam('downloads') and isset($_POST['name']) and isset($_POST['text'])) {
         if (loggedin()) {
             $name = $_SESSION['authname'];
             $userid = $_SESSION['authid'];
         } else {
             $name = escape($_POST['name'], 'string') . ' (Gast)';
             $userid = 0;
         }
         $text = escape($_POST['text'], 'string');
         db_query("INSERT INTO `prefix_koms` (`name`,`userid`,`text`,`time`,`uid`,`cat`) VALUES ('" . $name . "', " . $userid . ", '" . $text . "','" . time() . "', " . $id . ", 'DOWNLOAD')");
     }
     if ($menu->getA(3) == 'd' and is_numeric($menu->getE(3)) and has_right(-7, 'downloads')) {
         $did = escape($menu->getE(3), 'integer');
         db_query("DELETE FROM `prefix_koms` WHERE `uid` = " . $id . " AND `cat` = 'DOWNLOAD' AND `id` = " . $did);
     }
     $r['ANTISPAM'] = get_antispam('downloads', 0);