aboutsummaryrefslogtreecommitdiff
path: root/guestbook/submit.php
blob: 67659a6ca0a3438eb00b08a2a342c00e0927a203 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
<!DOCTYPE html>
<html lang="en">
<head>
	<!-- Global -->
	<?php require('../inc/head.html'); ?>

	<!-- Page-specific -->
	<title>Bookmarks</title>
	<!--<link rel="shortcut icon" href="../res/img/icons/ico/calc.ico" type="image/x-icon">-->
	<!--<meta property="og:image" content="/res/img/icons/png/computer.png">-->
</head>
<body>
<div class="page">  
<?php require('../inc/nav.php') ?>

<div id="pagebody">
	<div id="content">
		<?php
		// Open the DB
		if ($_POST['name'] === "" || $_POST['message'] === "") {
		    echo '<b>You must provide both a name and message!</b>';
		} else {
		    $db = new PDO("sqlite:/mnt/data1/webdata/floppydisk/guestbook.db");
		    $name = $_POST["name"];
		    $msg = strip_tags($_POST["message"]);
		    $showinfo = isset($_POST["showinfo"]) ? true : false;
		    $showip = isset($_POST["showip"]) ? true : false;
		    $ip = $_SERVER['REMOTE_ADDR'];
		    $browser = get_browser(null, true);
		    $sys = $browser['parent'] . ' (' . $browser['platform_description'] . ' ' . $browser['platform_version'] . ')';
		
		    $data = array('name' => $name, 'message' => $msg, 'show_info' => $showinfo, 'show_ip' => $showip, 'ip' => $ip, 'submitted' => time(), 'sys' => $sys);
		
		    $insert = "INSERT INTO Entries (name, message, show_info, show_ip, ip, submitted, browser_info) VALUES (:name, :message, :show_info, :show_ip, :ip, :submitted, :browser)";
		    $stmt = $db->prepare($insert);
		    $stmt->bindParam(':name', $data['name'], PDO::PARAM_STR);
		    $stmt->bindParam(':message', $data['message'], PDO::PARAM_STR);
		    $stmt->bindParam(':show_info', $data['show_info'], PDO::PARAM_STR);
		    $stmt->bindParam(':show_ip', $data['show_ip'], PDO::PARAM_STR);
		    $stmt->bindParam(':ip', $data['ip'], PDO::PARAM_STR);
		    $stmt->bindParam(':submitted', $data['submitted'], PDO::PARAM_STR);
		    $stmt->bindParam(':browser', $data['sys'], PDO::PARAM_STR);
		    $stmt->execute();
			echo '<b>Success!</b>';
		}
		?><br><br>
		<a href="./">Back</a>
	</div> <!-- content -->

	<div id="footer" class="pagefooter">
		<!-- Created <span class="date">Sat 26 Mar 2011 03:11:41 PM CET</span> -->
	</div> <!-- footer -->
</div> <!-- pagebody -->
</div> <!-- page -->
</body>
</html>