Bitte Loggen Sie sich ein
';
}
elseif($content == "false")
{$ERROR = 'Textfeld leer
';
}
elseif($name == "false")
{$ERROR = 'Benutzername leer
';
}
$com = '';
$cat = @(int)$_GET["cat"];
$topic = @(int)$_GET["topic"];
$comadd = @(int)$_GET["comadd"];
//SEITEN ANZAHL//
$seite = @(int)$_GET["p"];
if($seite == ''){$seite = 1;}
$eintraege_pro_seite = 8;
$start = $seite * $eintraege_pro_seite - $eintraege_pro_seite;
//SEITEN ENDE//
$dbh = new PDO('mysql:host='.$DB_HOST.';dbname='.$DB_NAME.'', $DB_USER, $DB_PASS);
foreach($dbh->query("SELECT U_NICK, U_COL, U_RIGHT, U_SESS FROM $rcom_user WHERE U_SESS = '".session_id()."'") as $row) {
$u_nick = $row[0];
$u_col = $row[1];
$u_right = $row[2];
$u_sess = $row[3];
}
if($u_sess == '')
{$RCOM_LOGIN = '
User Login:
';}
if($u_nick != ''){
if($u_right >= 10){
$RCOM_LOGIN = 'User: ['.$u_nick.']
';
$RCOM_LOGIN_M = '
• Eintrag hinzufügen
• Menü & Style bearbeiten
• Benutzer bearbeiten
• Statistiken
• My Account';
}
if($u_right < 8){
$RCOM_LOGIN = 'User: ['.$u_nick.']';
$RCOM_LOGIN_M = '
• My Account';
}
}
foreach($dbh->query("SELECT S_PFAD FROM $rcom_style WHERE S_AKTIVE = '1'") as $row) {
$s_pfad = $row[0];
}
if($u_right != 10) {
foreach($dbh->query("SELECT B_CAT FROM $rcom_blog WHERE B_PRIVATE = '0' ORDER BY B_CAT DESC") as $row) {
$b_cat = $row[0];
}
if($cat == ''){$cat = $b_cat;}
foreach($dbh->query("SELECT M_CAT, M_NAME FROM $rcom_menu WHERE M_PRIVATE = '0'") as $row) {
$RCOM_MENU[] = array(
'M_CAT' => $row[0],
'M_NAME' => $row[1],
);
}}else{
foreach($dbh->query("SELECT B_CAT FROM $rcom_blog ORDER BY B_CAT DESC") as $row) {
$b_cat = $row[0];
}
if($cat == ''){$cat = $b_cat;}
foreach($dbh->query("SELECT M_CAT, M_NAME FROM $rcom_menu") as $row) {
$RCOM_MENU[] = array(
'M_CAT' => $row[0],
'M_NAME' => $row[1],
);
}}
foreach($dbh->query("SELECT L_ID, L_NAME, L_URL FROM $rcom_link") as $row) {
$RCOM_LINK[] = array(
'L_ID' => $row[0],
'L_NAME' => $row[1],
'L_URL' => $row[2],
);
}
//Kommentarfunktion
if(isset($_POST['comadd'])){
$comadd = (int)$_GET["comadd"];
$CIP = $_SERVER['REMOTE_ADDR'];
$CONTENT = strip_tags(@$_POST["FCKeditor"],$ALLOWED_TAGS_COM);
$C_NAME = @strip_tags(htmlspecialchars(@$_POST["cname"],ENT_QUOTES));
$U_NAME = '';
$IP_DATA = '';
$dbh = new PDO('mysql:host='.$DB_HOST.';dbname='.$DB_NAME.'', $DB_USER, $DB_PASS);
foreach($dbh->query("SELECT IP_DATA FROM $rcom_blacklist WHERE IP_DATA = '$CIP'") as $row) {
$IP_DATA = $row[0];
}
if($IP_DATA == $CIP){header("Location: index.php?topic=$comadd");die;}
foreach($dbh->query("SELECT U_NICK FROM $rcom_user WHERE U_SESS = '".session_id()."'") as $row) {
$C_NAME = $row[0];
}
if($CONTENT == ''){header("Location: index.php?topic=$comadd&content=false");die;}
elseif($C_NAME == ''){header("Location: index.php?topic=$comadd&name=false");die;}
$dbh = new PDO('mysql:host='.$DB_HOST.';dbname='.$DB_NAME.'', $DB_USER, $DB_PASS);
foreach($dbh->query("SELECT U_NICK, U_COL, U_SESS FROM $rcom_user WHERE U_NICK = '$C_NAME'") as $row) {
$U_NAME = $row[0];
$U_COL = $row[1];
$U_SESS = $row[2];
}
if($U_NAME != $C_NAME){
$dbh->exec("INSERT INTO $rcom_comment (C_ID, C_TOPIC, C_NICK, C_COL, C_TEXT, C_DATE, C_IP) values ('', '$comadd', '$C_NAME', '', '$CONTENT', '$timestamp', '$CIP')");
$dbh->query("OPTIMIZE TABLE $rcom_comment");
foreach($dbh->query("Select COUNT(*) FROM $rcom_comment WHERE C_TOPIC = '$comadd'") as $row) {
$B_COM = $row[0];
}
$dbh->query("UPDATE $rcom_blog SET B_COM = '$B_COM' WHERE B_TOPIC = '$comadd'");
$dbh->query("OPTIMIZE TABLE $rcom_blog");
$dbh = null;
mail($MAIL_TO, 'Sie haben einen Kommentar', 'http://'.$DOMAIN_NAME.'/index.php?topic='.$comadd);
header("Location: index.php?topic=$comadd");
}
if($U_NAME == $C_NAME){
if($U_SESS == session_id()){
$dbh->exec("INSERT INTO $rcom_comment (C_ID, C_TOPIC, C_NICK, C_COL, C_TEXT, C_DATE, C_IP) values ('', '$comadd', '$C_NAME', '$U_COL', '$CONTENT', '$timestamp', '$CIP')");
$dbh->query("OPTIMIZE TABLE $rcom_comment");
foreach($dbh->query("Select COUNT(*) FROM $rcom_comment WHERE C_TOPIC = '$comadd'") as $row) {
$B_COM = $row[0];
}
$dbh->query("UPDATE $rcom_blog SET B_COM = '$B_COM' WHERE B_TOPIC = '$comadd'");
$dbh->query("OPTIMIZE TABLE $rcom_blog");
$dbh = null;
mail($MAIL_TO, 'Sie haben einen Kommentar', 'http://'.$DOMAIN_NAME.'/index.php?topic='.$comadd);
header("Location: index.php?topic=$comadd");
}else{
header("Location: index.php?topic=$comadd&userreged=true");
}
}
}
//Kommentarfunktion-Ende//
if($u_right != 10) {
//SEITENANZAHL
$page = '';
$sth = $dbh->query("SELECT COUNT(*) FROM $rcom_blog WHERE B_PRIVATE = '0' && B_CAT = '$cat'");
$menge = $sth->fetchColumn();
$wieviel_seiten = $menge / $eintraege_pro_seite;
for($a=0; $a < $wieviel_seiten; $a++)
{
$b = $a + 1;
if($seite == $b){
$page[] = array ('page1' => " $b ");
}else{
$page[] = array ('page2' => " $b ");
}
}
//SEITENANZAHL ENDE
foreach($dbh->query("SELECT B_TOPIC, B_HEAD, B_TEXT, B_DATE, B_COM FROM $rcom_blog WHERE B_PRIVATE = '0' && B_CAT = '$cat' ORDER BY `B_DATE` DESC LIMIT $start, $eintraege_pro_seite") as $row) {
$B_DATE = timestamp_convert($row[3]);
$RCOM_NEWS[] = array(
'B_TOPIC' => $row[0],
'B_HEAD' => $row[1],
'B_TEXT' => $row[2],
'B_DATE' => $B_DATE['date']. ' ' .$B_DATE['time'] ,
'B_COM' => $row[4]
);
}
foreach($dbh->query("SELECT M_NAME FROM $rcom_menu WHERE M_CAT = '$cat' && M_PRIVATE = '0'") as $row) {
$M_NAME = $row[0];
}
if($M_NAME == ''){header("Location: index.php?cat=$b_cat");}}else{
//SEITENANZAHL
$page = '';
$sth = $dbh->query("SELECT COUNT(*) FROM $rcom_blog WHERE B_CAT = '$cat'");
$menge = $sth->fetchColumn();
$wieviel_seiten = $menge / $eintraege_pro_seite;
for($a=0; $a < $wieviel_seiten; $a++)
{
$b = $a + 1;
if($seite == $b){
$page[] = array ('page1' => " $b ");
}else{
$page[] = array ('page2' => " $b ");
}
}
//SEITENANZAHL ENDE
foreach($dbh->query("SELECT B_TOPIC, B_HEAD, B_TEXT, B_DATE, B_COM FROM $rcom_blog WHERE B_CAT = '$cat' ORDER BY `B_DATE` DESC LIMIT $start, $eintraege_pro_seite") as $row) {
$B_DATE = timestamp_convert($row[3]);
$RCOM_NEWS[] = array(
'B_TOPIC' => $row[0],
'B_HEAD' => $row[1],
'B_TEXT' => $row[2],
'B_DATE' => $B_DATE['date']. ' ' .$B_DATE['time'] ,
'B_COM' => $row[4]
);
}
foreach($dbh->query("SELECT M_NAME FROM $rcom_menu WHERE M_CAT = '$cat'") as $row) {
$M_NAME = $row[0];
}if($M_NAME == ''){header("Location: index.php?cat=$b_cat");}}
if($topic != ''){
$oFCKeditor = new FCKeditor('FCKeditor');
$oFCKeditor->BasePath = 'lib/fckeditor/';
$oFCKeditor->ToolbarSet = 'Basic';
$oFCKeditor->Value = '';
$oFCKeditor->Width = '100%' ;
$oFCKeditor->Height = '200' ;
$EDITOR = $oFCKeditor->CreateHtml();
$RCOM_COMMENT = '';
if($u_right != 10) {
$dbh = new PDO('mysql:host='.$DB_HOST.';dbname='.$DB_NAME.'', $DB_USER, $DB_PASS);
foreach($dbh->query("SELECT B_TOPIC, B_HEAD, B_TEXT, B_DATE, B_OWNER, B_COL FROM $rcom_blog WHERE B_TOPIC = '$topic' && B_PRIVATE = '0'") as $row) {
$B_DATE = timestamp_convert($row[3]);
$RCOM_NEWS_VIEW[] = array(
'B_TOPIC' => $row[0],
'B_HEAD' => $row[1],
'B_TEXT' => $row[2],
'B_DATE' => $B_DATE['date']. ' ' .$B_DATE['time'],
'B_OWNER' => $row[4],
'B_COL' => $row[5]
);
}
foreach($dbh->query("SELECT C_NICK, C_COL, C_TEXT, C_DATE FROM $rcom_comment WHERE C_TOPIC = '$topic' ORDER BY C_DATE DESC ") as $row) {
$C_DATE = timestamp_convert($row[3]);
$RCOM_COMMENT[] = array(
'C_NICK' => $row[0],
'C_COL' => $row[1],
'C_TEXT' => $row[2],
'C_DATE' => $C_DATE['date']. ' ' .$C_DATE['time']
);
}
}else{
foreach($dbh->query("SELECT B_TOPIC, B_HEAD, B_TEXT, B_DATE, B_OWNER, B_COL FROM $rcom_blog WHERE B_TOPIC = '$topic'") as $row) {
$B_DATE = timestamp_convert($row[3]);
$RCOM_NEWS_VIEW[] = array(
'B_TOPIC' => $row[0],
'B_HEAD' => $row[1],
'B_TEXT' => $row[2],
'B_DATE' => $B_DATE['date']. ' ' .$B_DATE['time'],
'B_OWNER' => $row[4],
'B_COL' => $row[5]
);
}
foreach($dbh->query("SELECT C_ID, C_TOPIC, C_NICK, C_COL, C_TEXT, C_DATE, C_IP FROM $rcom_comment WHERE C_TOPIC = '$topic' ORDER BY C_DATE DESC ") as $row) {
$C_DATE = timestamp_convert($row[5]);
$RCOM_COMMENT[] = array(
'C_ID' => $row[0],
'C_TOPIC' => $row[1],
'C_NICK' => $row[2],
'C_COL' => $row[3],
'C_TEXT' => $row[4],
'C_DATE' => $C_DATE['date']. ' ' .$C_DATE['time'],
'C_IP' => $row[6],
);
}
}
if($RCOM_NEWS_VIEW == ''){header("Location: index.php?cat=$b_cat");}
if($u_right >= 10) {
try
{
$tpl = new optClass;
$tpl -> root = './templates/'.$s_pfad.'/';
$tpl -> compile = './templates_c/';
$tpl -> cache = './cache/';
$tpl -> httpHeaders(OPT_HTML);
$tpl -> cacheStatus(true, $CACHE_TIME);
$tpl -> debugConsole = $DEBUG_MODE;
$tpl -> assign('RCOM_STYLE', $s_pfad);
$tpl -> assign('RCOM_MENU', $RCOM_MENU);
$tpl -> assign('RCOM_LINK', $RCOM_LINK);
$tpl -> assign('M_NAME', $M_NAME);
$tpl -> assign('RCOM_NEWS_VIEW', $RCOM_NEWS_VIEW);
$tpl -> assign('RCOM_COMMENT', $RCOM_COMMENT);
$tpl -> assign('ERROR', $ERROR);
$tpl -> assign('EDITOR', $EDITOR);
$tpl -> assign('RCOM_LOGIN', $RCOM_LOGIN);
$tpl -> assign('RCOM_LOGIN_M', $RCOM_LOGIN_M);
$tpl -> assign('MOD', $MOD);
$tpl -> assign('FOOTER', $FOOTER);
$tpl -> parse('acp_index_view.tpl');
}
catch(optException $exception)
{
optErrorHandler($exception);
}
}else{
try
{
$tpl = new optClass;
$tpl -> root = './templates/'.$s_pfad.'/';
$tpl -> compile = './templates_c/';
$tpl -> cache = './cache/';
$tpl -> httpHeaders(OPT_HTML);
$tpl -> cacheStatus(true, $CACHE_TIME);
$tpl -> debugConsole = $DEBUG_MODE;
$tpl -> assign('RCOM_STYLE', $s_pfad);
$tpl -> assign('RCOM_MENU', $RCOM_MENU);
$tpl -> assign('RCOM_LINK', $RCOM_LINK);
$tpl -> assign('M_NAME', $M_NAME);
$tpl -> assign('RCOM_NEWS_VIEW', $RCOM_NEWS_VIEW);
$tpl -> assign('RCOM_COMMENT', $RCOM_COMMENT);
$tpl -> assign('ERROR', $ERROR);
$tpl -> assign('EDITOR', $EDITOR);
$tpl -> assign('RCOM_LOGIN', $RCOM_LOGIN);
$tpl -> assign('RCOM_LOGIN_M', $RCOM_LOGIN_M);
$tpl -> assign('MOD', $MOD);
$tpl -> assign('FOOTER', $FOOTER);
$tpl -> parse('index_view.tpl');
}
catch(optException $exception)
{
optErrorHandler($exception);
}
}
}else{
if($u_right >= 10) {
try
{
$tpl = new optClass;
$tpl -> root = './templates/'.$s_pfad.'/';
$tpl -> compile = './templates_c/';
$tpl -> cache = './cache/';
$tpl -> httpHeaders(OPT_HTML);
$tpl -> cacheStatus(true, $CACHE_TIME);
$tpl -> debugConsole = $DEBUG_MODE;
$tpl -> assign('RCOM_STYLE', $s_pfad);
$tpl -> assign('RCOM_MENU', $RCOM_MENU);
$tpl -> assign('RCOM_LINK', $RCOM_LINK);
$tpl -> assign('page', $page);
$tpl -> assign('M_NAME', $M_NAME);
$tpl -> assign('RCOM_NEWS', $RCOM_NEWS);
$tpl -> assign('RCOM_LOGIN', $RCOM_LOGIN);
$tpl -> assign('RCOM_LOGIN_M', $RCOM_LOGIN_M);
$tpl -> assign('MOD', $MOD);
$tpl -> assign('FOOTER', $FOOTER);
$tpl -> parse('acp_index.tpl');
}
catch(optException $exception)
{
optErrorHandler($exception);
}
}else{
try
{
$tpl = new optClass;
$tpl -> root = './templates/'.$s_pfad.'/';
$tpl -> compile = './templates_c/';
$tpl -> cache = './cache/';
$tpl -> httpHeaders(OPT_HTML);
$tpl -> cacheStatus(true, $CACHE_TIME);
$tpl -> debugConsole = $DEBUG_MODE;
$tpl -> assign('RCOM_STYLE', $s_pfad);
$tpl -> assign('RCOM_MENU', $RCOM_MENU);
$tpl -> assign('RCOM_LINK', $RCOM_LINK);
$tpl -> assign('page', $page);
$tpl -> assign('M_NAME', $M_NAME);
$tpl -> assign('RCOM_NEWS', $RCOM_NEWS);
$tpl -> assign('RCOM_LOGIN', $RCOM_LOGIN);
$tpl -> assign('RCOM_LOGIN_M', $RCOM_LOGIN_M);
$tpl -> assign('MOD', $MOD);
$tpl -> assign('FOOTER', $FOOTER);
$tpl -> parse('index.tpl');
}
catch(optException $exception)
{
optErrorHandler($exception);
}
}}
$dbh = null;
?>