questbook

<?php 

$name = trim(htmlspecialchars(addslashes($_POST['name']))); 
$email = trim(htmlspecialchars(addslashes($_POST['email']))); 
$site = trim(htmlspecialchars(addslashes($_POST['site']))); 
if (!$site){
 $site = ''; 
} 
$text = htmlspecialchars(addslashes($_POST['text'])); 
$time = date('d.m.Y g:i a');

mysql_pconnect('localhost', 'root', 'heslo_nedam') or die('Nepodarilo sa spojit s databazou');
mysql_select_db('stranka') or die('Nepodarilo sa vybrat databázu.');


if (isset($_POST['sent']))
{ 
 if ($name != '' || $email != '' || $text != '') 
  { 
    if (ereg('^.+@.+\\..+$', $email))
     {       
      $sql = 'INSERT INTO guestbook (`name`, `email`, `site`, `text`, `time`) VALUES ("'.$name.'", "'.$email.'", "'.$site.'", "'.$text.'", "'.$time.'")'; 
      $result = mysql_query($sql); 
      header('Location: '.$_SERVER['PHP_SELF'].'?report=succes');
     } 
    else { 
         header('Location: '.$_SERVER['PHP_SELF'].'?report=badmail');
       } 
  } 
  else { 
    header('Location: '.$_SERVER['PHP_SELF'].'?report=error');
  } 
} 
?> 

<form method="post"> 
*Meno: <input type="text" name="name"><br> 
*Email: <input type="text" name="email"><br> 
Homepage: <input type="text" name="site"><br> 
*Text:<br><textarea name="text" cols="50" rows="5" wrap="soft"> 
</textarea><br> 
<input type="reset" value="Reset"> 
<input type="submit" name="sent" value="Send"> 
</form> 

<?php 

 $report = $_GET['report']; 
 switch ($report){           
                   case 'error': 
                     print 'Musite zadať všetky údaje označené hviezdičkou<br>'; 
                     break; 
                   case 'succes': 
                     print 'Pridanie príspevku bolo úspešné<br>'; 
                     break; 
                   case 'badmail': 
                     print 'Zadali ste neplatný e-mail<br>'; 
                     break; 
                   default: 
                   print 'Všetky údaje označené hviezdičkou sú povinné. Do kolonky homepage zadajte svoju stránku bez http://<br>'; 
                  } 


  define ('ROWS', 5);
  if (!isset($HTTP_GET_VARS["num"]))
   { 
     $result = mysql_query("SELECT id FROM guestbook"); 
     $num = mysql_num_rows($result); 
  } 
  else 
  { 
       $num = $HTTP_GET_VARS['num']; 
  } 
  if ($num > ROWS) 
  { 
     $od = isset($HTTP_GET_VARS['od']) ? $HTTP_GET_VARS['od'] : 1; 
     $result = mysql_query("select * from guestbook"." limit ".($od - 1).", ".ROWS); 
        
     while($row=mysql_fetch_object($result)) 
     { 
        echo 'Meno: '.$row->name.'<br>Email: '.$row->email.'<br>Homepage:<a href=http://'.$row->site.'> '.$row->site.'</a><br>čas: '.$row->time.'<br>Text:<br> <table width=500><tr><td>'.$row->text.'</td></tr></table><br><hr width=100%>'; 
     } 

     echo 'Záznamov: ' .$od.'-'; 
     echo (($od + ROWS - 1)<=$num) ? ($od + ROWS - 1) : $num; 
     echo ' Z celkom '.$num.'&&&'; 

        if ($od == 1) echo 'Začiatok&|&' ; 
       else echo '<a href='.$_SERVER['PHP_SELF'].'?num='.$num.'&od=1>Začiatok</a>&|&'; 

        if ($od < ROWS) echo 'Predchadzajuci&|&' ; 
       else echo '<a href='.$_SERVER['PHP_SELF'].'?num='.$num.'&od='.($od-ROWS).'>Predchádz ajuci</a>&|&'; 
      //Vytvor odkaz iba ked niesme na poslednej strane 
        if ($od + ROWS > $num) echo 'Následujúci&|&'; 
       else echo '<a href='.$_SERVER['PHP_SELF'].'?num='.$num.'&od='.($od+ROWS).'>Následujú ci</a>&|&'; 
    //posledna strana 
       if ($od > $celkem - ROWS) echo 'Koniec&<BR>'; 
      else echo '<a href='.$_SERVER["PHP_SELF"].'?num='.$num.'&od='.($celkem - $celkem % ROWS + 1).'>Koniec'; 
  } 
  else 
  { 
   $result = mysql_query("select * from guestbook"." limit ".$num); 
        
     while($row=mysql_fetch_object($result)) 
     { 
        echo 'Meno: '.$row->name.'<br>Email: '.$row->email.'<br>Homepage:<a href=http://'.$row->site.'> '.$row->site.'</a><br>čas: '.$row->time.'<br>Text:<br> <table width=500><tr><td>'.$row->text.'</td></tr></table><br><hr width=100%>'; 
     } 
  } 
?>