get(2);
$aktMenu = escape($menu->get(3),'integer');
$abf1323 = 'SELECT * FROM prefix_user WHERE id = "'.$uid.'"';
$erg1323 = db_query($abf1323);
$name = db_fetch_assoc($erg1323);
$tpl = new tpl ( 'user/usergb' );
$uid = $menu->get(2);
$aktMenu = escape($menu->get(3),'integer');
if(!$menu->get(4))$menu->set('view',4);
$users = '';
$uquery = db_query("SELECT name FROM prefix_user");
while ($uds = db_fetch_object($uquery)) {
$username = $uds -> name;
if (!empty($users)) $users = $users.', ';
$users = $users.'"'.$username.'"';
}
$ar74 = array(
'DATE' => $row['date'],
'NICKNAME' => $row['name'],
'TXT' => bbcode($row['txt']),
'HOMEPAGE' => $homepage,
'EMAIL' => $email,
'uname' => $_SESSION['authname'],
'USERS' => $users,
'UID' => $uid,
'DEL' => $del,
'AKTMENU' => $aktMenu
);
$tpl->set_ar_out($ar74,0);
##VIEW
if($menu->get(4) == "view") {
$limit = 5; // Limit
$page = ($menu->getA(5) == 'p' ? $menu->getE(5) : 1 );
$MPL = db_make_sites ($page , "" , $limit , "index.php?user-details-$uid-$aktMenu-view" , 'usergb' );
$anfang = ($page - 1) * $limit;
$abf = "SELECT * FROM `prefix_usergb` WHERE uid = $uid ORDER BY id DESC LIMIT $anfang, $limit";
$erg = db_query($abf);
while(@$row = db_fetch_assoc($erg))
{
if(substr($row['page'],0,7) == "http://") {
$homepage = '
';
} else {
$homepage = '';
}
if($row['mail'] == "") {
$email = '';
} else {
$email = '
';
}
if(is_admin() || $uid == $_SESSION['authid']) {
$del = '
';
} else {
$del = '';
}
$ar2 = array(
'DATE' => $row['date'],
'NICKNAME' => $row['name'],
'TXT' => bbcode($row['txt']),
'HOMEPAGE' => $homepage,
'EMAIL' => $email,
'UID' => $uid,
'AKTMENU' => $aktMenu,
'DEL' => $del
);
$tpl->set_ar_out($ar2,1);
}
$tpl->set_out('SITELINK', $MPL, 2);
}
##ADD
if($menu->get(4) == "add") {
$class = ( $class == 'Cmite' ? 'Cnorm' : 'Cmite' );
$ar3 = array(
'CLASS' => $class,
'UID' => $uid,
'AKTMENU' => $aktMenu,
'ANTISPAM' => get_antispam ('usergb', 1)
);
$tpl->set_ar_out($ar3,3);
}
## INSERT
if($menu->get(4) == "insert") {
if($_POST['email'] == "" || $_POST['nick'] == "" || $_POST['txt'] == "") {
$link = "index.php?user-details-$uid-$aktMenu-add";
$text = "Bitte alle Pflichtfelder ausfüllen!";
wd ($link, $text);
} else {
if(chk_antispam ('usergb')) {
$date = date("d.m.Y", time());
$ip = $_SERVER['REMOTE_ADDR'];
$bet = "Neuer Eintrag in deinem Gästebuch!";
$txt = "Hallo $name[name], es hat jemand in dein Gästebuch geschrieben.
Klicke auf den Link um direkt dorthin zu kommen: [url=?user-details-$uid-$aktMenu-view]Link[/url]";
sendpm(1, $uid, $bet, $txt);
# $txt = escape($_POST['txt'], 'textarea');
# $name = escape($_POST['name'], 'string');
# $mail = escape($_POST['mail'], 'string');
# $page = escape($_POST['page'], 'string');
$ins = db_query("INSERT INTO `prefix_usergb` (name, mail, page, uid, date, ip, txt) VALUES ('".$_POST['nick']."', '".$_POST['email']."', '".$_POST['homepage']."', '".$uid."', '".$date."', '".$ip."', '".$_POST['txt']."')");
if($ins == true) {
$link2 = "index.php?user-details-$uid-$aktMenu-view";
$text2 = "Erfolgreich eingetragen!";
wd ($link2, $text2);
} else {
echo mysql_error();
}
} else {
$antitxt = "Anti-Spam nicht korrekt!";
$antilink = "index.php?user-details-$uid-$aktMenu-add";
wd ($antilink, $antitxt);
}
}
}
## DELETE
if($menu->get(4) == "del") {
$pid = escape($menu->get(5),'integer');
$delete = "DELETE FROM `prefix_usergb` WHERE id = ".$pid." LIMIT 1";
$erg = db_query($delete);
$link3 = "index.php?user-details-$uid-$aktMenu-view";
$text3 = "Eintrag gelöscht!";
wd ($link3, $text3);
}
?>