Comment Box

bloods33ker

Registered
Значи имам comment box въпроса е как да забраня PHP/HMTL въобште всякакъв код ?

Ето source
Код:
<div align=justify style="width:410px">     
		<form id="test_form" action="<?php echo $_SERVER[PHP_SELF]; ?>" method="post">
			<div>
				<h1><center> Comment Box! </center></h1>
				<label for="comment">Enter your comment here</label>
				<textarea name="comment" id="comment" cols="5" rows="5"></textarea>
				<label for="name">Name (optional)</label>
				<input type="text" name="name" id="name" />
				<label for="email">Email (optional)</label>
				<input type="text" name="email" id="email" />
				<input type="submit" id="submit" value="Post a Comment" name="submit" />
			</div>
		</form>

<hr noshade color="#2B547E" size="4">

<?php

/* Copyright Surferseden.inc .... For information please refer to http://www.surferseden.com 
 
   Hope you find this script helpful. Please dont remove this notice */

$script_filename = getenv('PATH_TRANSLATED');
if (empty($script_filename)) {
	$script_filename = getenv('SCRIPT_FILENAME');
}
	$script_filename = str_replace('', '/', $script_filename);
	$script_filename = str_replace('//', '/', $script_filename);
	$dir_fs_www_root_array = explode('/', dirname($script_filename));
	$dir_fs_www_root = array();
	for ($i=0, $n=sizeof($dir_fs_www_root_array)-1; $i<$n; $i++) {
		$dir_fs_www_root[] = $dir_fs_www_root_array[$i];
	}
$dir_fs_www_root = implode('/', $dir_fs_www_root) . '/'; 




if (isset($_POST['submit']))
{

$name=$_POST['name'];
$email=$_POST['email'];
$comments=$_POST['comment'];

$file= getcwd().'/comment.txt' or die('Could not open the file!');
$data= file_get_contents($file);
   
if ($comments!="")
{
	

	if($name=="")
	{
	if ($email==""){
	$data = '<br/><font color="orange" face="arial" size="2">'."anonymous".'</font><font color="#6D7B8D" face="arial" size="2"><i>'."  ".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	else {
	$data ='<br/><font color="orange" face="arial" size="2">'."anonymous".'</font><font color="#6D7B8D" face="arial" size="2"><i>'."  ($email)".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	
	}

	else
	{
	if ($email==""){
	$data = '<br/><font color="orange" face="arial" size="2">'."$name".'</font><font color="#6D7B8D" face="arial" size="2"><i>'." ".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	else {
	$data = '<br/><font color="orange" face="arial" size="2">'."$name".'</font><font color="#6D7B8D" face="arial" size="2"><i>'."  ($email)".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	

	}

}
else

echo "<font color=\"red\"> Enter comment! </font>";


}

$file= getcwd().'/comment.txt' or die('Could not open the file!');
$data= file_get_contents($file);
echo $data;

?>

Коментарите отиват в txt файл.
 
Код:
<div align=justify style="width:410px">     
		<form id="test_form" action="<?php echo $_SERVER[PHP_SELF]; ?>" method="post">
			<div>
				<h1><center> Comment Box! </center></h1>
				<label for="comment">Enter your comment here</label>
				<textarea name="comment" id="comment" cols="5" rows="5"></textarea>
				<label for="name">Name (optional)</label>
				<input type="text" name="name" id="name" />
				<label for="email">Email (optional)</label>
				<input type="text" name="email" id="email" />
				<input type="submit" id="submit" value="Post a Comment" name="submit" />
			</div>
		</form>

<hr noshade color="#2B547E" size="4">

<?php

/* Copyright Surferseden.inc .... For information please refer to http://www.surferseden.com 
 
   Hope you find this script helpful. Please dont remove this notice */

$script_filename = getenv('PATH_TRANSLATED');
if (empty($script_filename)) {
	$script_filename = getenv('SCRIPT_FILENAME');
}
	$script_filename = str_replace('', '/', $script_filename);
	$script_filename = str_replace('//', '/', $script_filename);
	$dir_fs_www_root_array = explode('/', dirname($script_filename));
	$dir_fs_www_root = array();
	for ($i=0, $n=sizeof($dir_fs_www_root_array)-1; $i<$n; $i++) {
		$dir_fs_www_root[] = $dir_fs_www_root_array[$i];
	}
$dir_fs_www_root = implode('/', $dir_fs_www_root) . '/'; 




if (isset($_POST['submit']))
{

$name=htmlspecialchars($_POST['name']);
$email=htmlspecialchars($_POST['email']);
$comments=htmlspecialchars($_POST['comment']);

$file= getcwd().'/comment.txt' or die('Could not open the file!');
$data= file_get_contents($file);
   
if ($comments!="")
{
	

	if($name=="")
	{
	if ($email==""){
	$data = '<br/><font color="orange" face="arial" size="2">'."anonymous".'</font><font color="#6D7B8D" face="arial" size="2"><i>'."  ".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	else {
	$data ='<br/><font color="orange" face="arial" size="2">'."anonymous".'</font><font color="#6D7B8D" face="arial" size="2"><i>'."  ($email)".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	
	}

	else
	{
	if ($email==""){
	$data = '<br/><font color="orange" face="arial" size="2">'."$name".'</font><font color="#6D7B8D" face="arial" size="2"><i>'." ".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	else {
	$data = '<br/><font color="orange" face="arial" size="2">'."$name".'</font><font color="#6D7B8D" face="arial" size="2"><i>'."  ($email)".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
	file_put_contents($file,$data); 
	}
	

	}

}
else

echo "<font color=\"red\"> Enter comment! </font>";


}

$file= getcwd().'/comment.txt' or die('Could not open the file!');
$data= file_get_contents($file);
echo $data;

?>
така?
 
<div align=justify style="width:410px">
<form id="test_form" action="<?php echo $_SERVER[PHP_SELF]; ?>" method="post">
<div>
<h1><center> Comment Box! </center></h1>
<label for="comment">Enter your comment here</label>
<textarea name="comment" id="comment" cols="5" rows="5"></textarea>
<label for="name">Name (optional)</label>
<input type="text" name="name" id="name" />
<label for="email">Email (optional)</label>
<input type="text" name="email" id="email" />
<input type="submit" id="submit" value="Post a Comment" name="submit" />
</div>
</form>

<hr noshade color="#2B547E" size="4">

<?php

/* Copyright Surferseden.inc .... For information please refer to http://www.surferseden.com

Hope you find this script helpful. Please dont remove this notice */

$script_filename = getenv('PATH_TRANSLATED');
if (empty($script_filename)) {
$script_filename = getenv('SCRIPT_FILENAME');
}
$script_filename = str_replace('', '/', $script_filename);
$script_filename = str_replace('//', '/', $script_filename);
$dir_fs_www_root_array = explode('/', dirname($script_filename));
$dir_fs_www_root = array();
for ($i=0, $n=sizeof($dir_fs_www_root_array)-1; $i<$n; $i++) {
$dir_fs_www_root[] = $dir_fs_www_root_array[$i];
}
$dir_fs_www_root = implode('/', $dir_fs_www_root) . '/';




if (isset($_POST['submit']))
{

$name=$_POST['name'];
$email=$_POST['email'];
$comments=$_POST['comment'];

$file= getcwd().'/comment.txt' or die('Could not open the file!');
$data= file_get_contents($file);
$data = htmlspecialchars(trim($data));

if ($comments!="")
{


if($name=="")
{
if ($email==""){
$data = '<br/><font color="orange" face="arial" size="2">'."anonymous".'</font><font color="#6D7B8D" face="arial" size="2"><i>'." ".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
file_put_contents($file,$data);
}
else {
$data ='<br/><font color="orange" face="arial" size="2">'."anonymous".'</font><font color="#6D7B8D" face="arial" size="2"><i>'." ($email)".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
file_put_contents($file,$data);
}

}

else
{
if ($email==""){
$data = '<br/><font color="orange" face="arial" size="2">'."$name".'</font><font color="#6D7B8D" face="arial" size="2"><i>'." ".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
file_put_contents($file,$data);
}
else {
$data = '<br/><font color="orange" face="arial" size="2">'."$name".'</font><font color="#6D7B8D" face="arial" size="2"><i>'." ($email)".'</i></font><br/><hr color="#2B547E" size="1" class="dashes">'.'<font color="#2B547E" face="georgia" size="4" >'."$comments".'</font><br/><br/><br/>'.$data;
file_put_contents($file,$data);
}


}

}
else

echo "<font color=\"red\"> Enter comment! </font>";


}

$file= getcwd().'/comment.txt' or die('Could not open the file!');
$data= file_get_contents($file);
echo $data;

?>
 

Back
Горе