<head>
<script>
function resize() {
if (parent.document.all.tbl1)
parent.document.all.tbl1.style.height = document.body.scrollHeight;
parent.document.all.tbl1.style.width = document.body.scrollWidth;
}
</script>
</head>
<body text="#333333" link="#333333" vlink="#333333" alink="#333333" onLoad="resize();">
<div align="left">
<?php
// SELECT CATEGORY ID #s
$allcatid = array(1); // Choose multiple categories if you wish, separated by a comma
$showname = 0; // Show each category name and group? 0 = no, 1 = yes
// --------------------
error_reporting(E_ALL ^ E_NOTICE); // Get rid of undefined variable messages
$thiscatid = $allcatid[0];
$bg = 1;
include($pathtoashnews."ashprojects/newsconfig.php");
$connection = mysql_connect("$servername","$dbusername","$dbpassword") or die ("Cannot connect to server.");
$db = mysql_select_db("$dbname", $connection) or die ("Could not select database.");
$sql = "SELECT * FROM ashnews_cat WHERE catid = '$thiscatid'";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 1");
$row = mysql_fetch_array($sql_result);
$name = $row['name'];
$permission = $row['permission'];
$embed = $row['embed'];
$newsitems = $row['newsitems'];
$usearchives = $row['usearchives'];
$usesearch = $row['usesearch'];
$usedivider = $row['usedivider'];
$charlimit = $row['charlimit'];
$usealtcolors = $row['usealtcolors'];
$altcolor1 = $row['altcolor1'];
$altcolor2 = $row['altcolor2'];
$allowhtml = $row['allowhtml'];
$modcomments = $row['modcomments'];
if ($popup == 1) {
$embed = 0;
$usedivider = 0;
echo("<html><head><link rel=stylesheet href=$pathtoashnews/ashstyle.css type=text/css></head><body>"); }
if ($embed == 1) {
include($pathtoashnews."header.php"); }
?>
<script>
function popupcomment(id) {
winpops=window.open('ashnews.php?page=showcomments&popup=1&id='+id,'','toolbar=0,location=0,directories=0,menuBar=0,resizable=0,scrollbars=yes,width=360,height=375,left=75,top=60') }
</script>
<?
// ----------------------------------------
// --------- GET TEMPLATES ----------------
$sql_template = "SELECT * FROM ashnews_templates WHERE catid = '$thiscatid'";
$sql_result_template = mysql_query($sql_template, $connection) or die ("$text_noquery - 2");
$row_template = mysql_fetch_array($sql_result_template);
$displaynews = str_replace("\'", "'", addslashes($row_template['displaynews']));
$displaycomments = str_replace("\'", "'", addslashes($row_template['displaycomments']));
$showcomment = str_replace("\'", "'", addslashes($row_template['showcomment']));
$newsdateformat = str_replace("\'", "'", addslashes($row_template['newsdateformat']));
$divider = str_replace("\'", "'", addslashes($row_template['divider']));
$showattach = str_replace("\'", "'", addslashes($row_template['showattach']));
$search = str_replace("\'", "'", addslashes($row_template['search']));
$archive = str_replace("\'", "'", addslashes($row_template['archive']));
$archivelist = str_replace("\'", "'", addslashes($row_template['archivelist']));
$userprofile = str_replace("\'", "'", addslashes($row_template['userprofile']));
$showcatname = str_replace("\'", "'", addslashes($row_template['showcatname']));
// ----------- CHANGE SMILIES TO IMAGES ----------------
$code = array();
$filename = array();
$sql_smilies = "SELECT * FROM ashnews_smilies";
$sql_result_smilies = mysql_query($sql_smilies, $connection) or die ("$text_noquery - 3");
while($row_smilies = mysql_fetch_array($sql_result_smilies)) {
$code2 = $row_smilies['code'];
$filename2 = $row_smilies['filename'];
$filename2 = "<img src=$pathtosmilies/$filename2>";
array_push($code, $code2);
array_push($filename, $filename2);
}
function tohtml($text)
{
global $code, $filename;
$output=str_replace($code,$filename,$text);
return $output;
}
// ------------------------------------------------------
// BEGIN FULL NEWS DISPLAY ARRAY
$fulldisplay = array();
// MAKE SQL STATEMENT TO GET MULTIPLE CATEGORIES
$catlist = "(";
foreach ($allcatid as $catitem) {
$catlist .= "catid = $catitem OR ";
$fulldisplay[$catitem] = "";
}
$catlist .= "catid = 0)";
if (!isset($page) || $page == "showcomments" || $page == "showmonth") {
$sql = "SELECT *, UNIX_TIMESTAMP(date) as formatted_date2, DATE_FORMAT(date, '$newsdateformat') AS formatted_date FROM ashnews_news ";
if ($page == "showcomments") {
$sql .= "WHERE id='$id' ";
$bg = 0; }
else if ($page == "showmonth") {
$sql .= "WHERE (date like '%$y-$m%') AND $catlist ORDER BY date DESC";
$i = 0; }
else {
$sql .= "WHERE $catlist ORDER BY date DESC LIMIT $newsitems"; }
if ($showsearch == 1) {
$sql = "SELECT *, DATE_FORMAT(date, '$newsdateformat') AS formatted_date FROM ashnews_news WHERE $catlist AND ( title like '%$keyword%' OR text like '%$keyword%' ) ORDER BY date DESC";
echo("<h1>$text_searchresult:</h1>"); }
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 4");
while ($row = mysql_fetch_array($sql_result)) {
$id = $row['id'];
$catid = $row['catid'];
$sticky = $row['sticky'];
$postedby = $row['postedby'];
$title = "<a name=".$id."></a>".tohtml($row['title']);
$text = tohtml(nl2br($row['text']));
$text2 = tohtml(nl2br($row['text2']));
$date = $row['formatted_date'];
$commentcount = $row['commentcount'];
$allowcomment = $row['allowcomment'];
$attach = $row['attach'];
$attachname = $row['attachname'];
$count = $row['count'];
$date2 = $row['formatted_date2'];
if ($page == "showcomments") {
$text = "$text $text2"; }
if ($sticky == 1) {
$showsticky = str_replace("\'", "'", addslashes($row_template['showsticky'])); }
else {
$showsticky = ""; }
$sql2 = "SELECT username, useremail, avatarimg FROM ashprojects_users WHERE userid='$postedby'";
$sql_result2 = mysql_query($sql2, $connection) or die ("$text_noquery - 5");
$row2 = mysql_fetch_array($sql_result2);
$name = $row2['username'];
$email = $row2['useremail'];
$avatarimg = $row2['avatarimg'];
if ($avatarimg == "") {
$avatar = ""; }
else {
$avatar = "<img src=$filepathtoattach/$avatarimg>"; }
// Show month, year for archive
if ($page == "showmonth" AND $i == 0) {
$thismonth = date("F", $date2);
echo("<h1>$thismonth, $y</h1>");
$i = 1; }
// Get proper comment text
if ($commentcount == 1) {
$commenttext = "$text_comment"; }
else {
$commenttext = "$text_comments"; }
// Check for comment allowance
if ($allowcomment == 1 AND $popup != 1) {
$commentpopup = "java script:popupcomment($id)";
$commentlink = "$PHP_SELF?page=showcomments&id=$id";
eval("\$comments = \"$showcomment\";"); }
else {
$comments = ""; }
// Check for attachment
if ($attach == 1) {
$attachlink = "$filepathtoattach/$attachname";
eval("\$displayattach = \"$showattach\";"); }
else {
$displayattach = ""; }
// Alternating background color
if ($bg == 1 AND $usealtcolors == 1) {
$altcolor = $altcolor1;
$bg = 2; }
else if ($bg == 2 AND $usealtcolors == 1) {
$altcolor = $altcolor2;
$bg = 1; }
else {
$altcolor = ""; }
// DISPLAY NEWS ITEM
$profilelink = "$PHP_SELF?page=profile&userid=$postedby&popup=$popup";
if( ($text2 != "" AND $page != "showcomments" AND $charlimit == 0) || (strlen($text) > $charlimit AND $charlimit != 0 AND $page != "showcomments") ) {
$text .= "... <B><a href=$PHP_SELF?page=showcomments&id=$id>$text_readmore</a></B>"; }
eval("\$outputnews = \"$displaynews\";");
if($usedivider == 1) {
eval("\$outputdivider = \"$divider\";");
$outputnews .= $outputdivider; }
if ($showname == 1) {
if ($sticky == 1) {
$fulldisplay[$catid] = "$outputnews $fulldisplay[$catid]"; }
else {
$fulldisplay[$catid] .= "$outputnews"; }
}
else {
if ($sticky == 1) {
$fulldisplay2 = "$outputnews $fulldisplay2"; }
else {
$fulldisplay2 .= "$outputnews"; }
}
}
// LOOP THROUGH ALL CATEGORIES AND DISPLAY
if ($showname == 1) {
foreach ($allcatid as $catitem) {
if ($page != "showcomments") {
$sql = "SELECT name FROM ashnews_cat WHERE catid='$catitem'";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 6");
$row = mysql_fetch_array($sql_result);
$catname = $row['name'];
eval("\$displaycatname = \"$showcatname\";");
echo("$displaycatname");
}
echo("$fulldisplay[$catitem]");
}
}
else {
echo("$fulldisplay2"); }
// SHOW ARCHIVE LINK
if ($usearchives == 1 AND !isset($page)) {
$archivelink = "$PHP_SELF?page=archives";
eval("\$outputarchive = \"$archive\";");
echo("$outputarchive"); }
}
// -------------- DISPLAY ARCHIVE LIST --------------
if($page == "archives") {
echo("<h1>$text_archives</h1>");
$sql = "SELECT UNIX_TIMESTAMP(date) as formatted_date FROM ashnews_news WHERE $catlist GROUP BY YEAR(date), MONTH(date) ORDER BY date DESC";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 7");
while ($row = mysql_fetch_array($sql_result)) {
$temp = $row['formatted_date'];
$m = date("m", $temp);
$month = date("F", $temp);
$year = date("Y", $temp);
$archivelink = "$PHP_SELF?page=showmonth&m=$m&y=$year";
eval("\$outputarchivelist = \"$archivelist\";");
echo("$outputarchivelist");
}
}
// --------------------------------------------------
// -------------- DISPLAY PROFILE --------------
if($page == "profile") {
$sql = "SELECT * FROM ashprojects_users WHERE userid='$userid'";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 8");
$row = mysql_fetch_array($sql_result);
$username = $row['username'];
$password = $row['password'];
$fullname = $row['fullname'];
$useremail = $row['useremail'];
$usergroup = $row['usergroup'];
$url = $row['url'];
$profile = $row['profile'];
eval("\$outputuserprofile = \"$userprofile\";");
echo("$outputuserprofile");
}
// --------------------------------------------------
if ($popup != 1 AND isset($page) AND $page != "addcomment") {
?>
<p><a href=<?php echo("$PHP_SELF#$id"); ?>><?php echo("$text_backtomain"); ?></a></p>
<?php }
// -------------- DISPLAY COMMENTS ------------------
if($page == "showcomments" AND $allowcomment == 1) {
$sql = "UPDATE ashnews_news SET count = count + 1 WHERE id='$id'";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 8.5");
echo("<h1>$text_commentstitle</h1>");
$sql = "SELECT *, DATE_FORMAT(date, '$newsdateformat') AS formatted_date FROM ashnews_comments WHERE newsid='$id' AND confirm=1 ORDER BY date DESC";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 9");
if (mysql_num_rows($sql_result) == 0) {
echo("<p>$text_nocomments</p>"); }
while ($row = mysql_fetch_array($sql_result)) {
$text = tohtml(nl2br($row['text']));
$date = $row['formatted_date'];
$name = $row['name'];
$email = $row['email'];
$comments = "";
$title = "";
$displayattach = "";
$profilelink = "mailto:$email";
$showsticky = "";
// DISPLAY COMMENT
eval("\$outputcomment = \"$displaycomments\";");
echo("$outputcomment");
// Display divider, if used
if($usedivider == 1) {
eval("\$outputdivider = \"$divider\";");
echo("$outputdivider"); }
}
$smilies = "<table border=0>";
$startend = 1;
$sql_smilies = "SELECT * FROM ashnews_smilies LIMIT 9";
$sql_result_smilies = mysql_query($sql_smilies, $connection) or die ("$text_noquery - 10");
while($row_smilies = mysql_fetch_array($sql_result_smilies)) {
$code = $row_smilies['code'];
$filename = $row_smilies['filename'];
$smiley = "<img src=$pathtosmilies/$filename border=0>";
if ($startend == 1) {
$smilies .= "<tr>";
$startend = $startend + 1; }
$smilies .= "<td><a href=\"java script:emoticon('$code')\">$smiley</a></td>";
if ($startend == 4) {
$smilies .= "</tr>";
$startend = 1; }
else {
$startend = $startend + 1; }
}
$smilies .= "</table>";
?>
<script src=<?php echo("$pathtoashnews"); ?>/ashprojects/bbcode.js language=JavaScript></script>
<form action=<?php echo("$PHP_SELF"); ?> method=post name="post">
<h1><?php echo("$text_addcomment"); ?>:</h1>
<table cellpadding="4" cellspacing="0">
<tr>
<td><p><?php echo("$text_name"); ?></p></td>
<td colspan="2"><input type=text name=newname tabindex=1></td>
</tr>
<tr>
<td><p><?php echo("$text_email"); ?></p></td>
<td colspan="2"><input type=text name=newemail tabindex=2></td>
</tr>
<tr>
<td valign="top">
<p>
<?php echo("$text_comment"); ?>
</p>
</td>
<td valign="top"><textarea name=text cols=20 rows=5 tabindex="3" class="post" onselect="storeCaret(this);" onclick="storeCaret(this);" onkeyup="storeCaret(this);"></textarea></td>
<td valign="top">
<?php echo("$smilies"); ?>
<p><a href="<?php echo("$pathtoashnews"); ?>/ashprojects/smilies.php" onclick="window.open('<?php echo("$pathtoashnews"); ?>/ashprojects/smilies.php', '_ashnewssmilies', 'HEIGHT=300,resizable=yes,scrollbars=yes,WIDTH=250');return false;" target="_ashnewssmilies"></a></p>
</td>
</tr>
<td> </td>
<td colspan="2"><input type="submit" value="Submit">
<input type="reset" value="Reset">
<input type="hidden" name="id" value="<?php echo("$id"); ?>">
<input type="hidden" name="page" value="addcomment">
<input type="hidden" name="popup" value="<?php echo("$popup"); ?>">
</td>
</tr>
</table>
</form>
<?php
}
// -------------- ADD COMMENT ----------------
if ($page == "addcomment") {
if($allowhtml == 0) {
$search = array ("'<script[^>]*?>.*?</script>'si","'<[\/\!]*?[^<>]*?>'si","'([\r\n])[\s]+'","'&(quot|#34);'i","'&(amp|#38);'i",
"'&(lt|#60);'i","'&(gt|#62);'i","'&(nbsp|#160);'i","'&(iexcl|#161);'i","'&(cent|#162);'i","'&(pound|#163);'i",
"'&(copy|#169);'i","'&#(\d+);'e");
$replace = array ("","","\\1","\"","&","<",">"," ",chr(161),chr(162),chr(163),chr(169),"chr(\\1)");
$newname = preg_replace ($search, $replace, $newname);
$text = preg_replace ($search, $replace, $text);
}
function validate_email ($newemail) {
return eregi("^([-!#\$%&'*+./0-9=?A-Z^_`a-z{|}~ ])+@([-!#\$%&'*+/0-9=?A-Z^_`a-z{|}~ ]+\\.)+[a-zA-Z]{2,4}\$", $newemail);
}
$sql = "SELECT * FROM ashprojects_ban";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 10.5");
while($row = mysql_fetch_array($sql_result)) {
$ban_ip = $row['ip'];
$ban_username = $row['username'];
if ($ban_ip == $REMOTE_ADDR) {
$invalid .= "<li>$text_ipbanned"; }
if (strtolower($ban_username) == strtolower($newname)) {
$invalid .= "<li>$text_usernamebanned"; }
}
if ($newname == "") {
$invalid .= "<li>$text_noname"; }
if ($newemail == "" || !validate_email($newemail)) {
$invalid .= "<li>$text_noemail"; }
if ($text == "") {
$invalid .= "<li>$text_nocomment"; }
if ($modcomments == 1) {
$confirm = "0"; }
else {
$confirm = "1"; }
if ($invalid == "") {
$sql = "INSERT INTO ashnews_comments SET newsid='$id', text='$text', date=NOW() + Interval $timeoffset hour,
name='$newname', email='$newemail', ip='$REMOTE_ADDR', confirm='$confirm'";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 11");
if (!$sql_result) {
echo ("<p align=center>$text_noinsert $text_comment</p><p align=center><a href=java script:history.back(1)>$text_goback</a></p>"); }
else {
if ($popup == 1) {
echo("<p align=center><a href=$PHP_SELF?page=showcomments&popup=1&id=$id>$text_backtocomments</a></p>
<p align=center><a href=java script:window.close();>$text_closewindow</a></p>"); }
else {
echo("<p align=center><a href=$PHP_SELF?page=showcomments&popup=1&id=$id>$text_backtocomments</a></p>
<p align=center>$text_comment $text_insert <a href=$PHP_SELF>$text_backtomain</a>"); }
}
$sql = "UPDATE ashnews_news SET commentcount = commentcount + 1 WHERE id='$id'";
$sql_result = mysql_query($sql, $connection) or die ("$text_noquery - 12");
}
else {
echo("<p>$text_nocommentsubmit:<br>$invalid</p><p><a href=java script:history.back(1)>$text_goback</a></p>"); }
}
// -------------------------------------------
if($usesearch == 1 AND !isset($page)) {
$searchbox = "<form action=$PHP_SELF method=post>$text_search
<input type=text name=keyword>
<input type=hidden name=showsearch value=1>
<input type=submit name=submit value=Submit>
</form>";
eval("\$outputsearch = \"$search\";");
echo("$outputsearch");
}
?>
<table width="100%" border="0" cellspacing="0" cellpadding="3">
<tr>
<td align="center"></td>
</tr>
</table>
<?php
// -----------------------
if ($embed == 1) {
include($pathtoashnews."footer.php"); }
if($popup == 1) {
echo("</body></html>"); }
?>
</div>
</body>
Slettet bruger
Ny bruger
Nybegynder
Opret
Preview
