session_start();
require("../inc/config.inc.php");
require("../inc/functions.inc.php");
if ( $_GET['username'] ) {
$username = $_GET[username];
} else {
$username = str_replace (".klack.org", "", $_SERVER['HTTP_HOST']);
$username = str_replace ("www.", "", $username);
}
if ( preg_match("/.*\..*/",$username) ) {
$username = check_own_domain($_SERVER['HTTP_HOST']);
}
$firstch = substr( $username, 0, 1);
$lastch = substr( $username, -1, 1);
if ( check_user_status($username) == 1 ) {
echo "Diese Homepage wurde gesperrt";
exit;
}
if ( check_user_exists($username) == 'false' ) { exit; }
if ( check_secure_site($username,'guestbook.html') == 1 ) {
if( $_SERVER['PHP_AUTH_USER'] == '' || $_SERVER['PHP_AUTH_PW'] == '') {
Header("WWW-Authenticate: Basic realm=\"Sicherheitsbereich\"");
Header("HTTP/1.0 401 Unauthorized");
secure_error();
exit;
} else {
if ( check_authentificated($username,$_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW']) != 1 ) {
Header("HTTP/1.0 401 Unauthorized");
secure_error();
exit;
}
}
}
$language = select_language($username);
@require("../inc/lang/$language.inc.php");
$langAdminError = _GUEST05 ;
$langBsGuestbook = _GUEST04 ;
$langEmail = _GUEST09;
$langEntry = _GUEST08;
$langGbAdmin = _GUEST01 ;
$langMessage = _GUEST02;
$langName = _GUEST03 ;
$langSubmit = _GUEST06 ;
$langSubmitModif = _GUEST07 ;
if ( $_POST[doit] == "Senden" ) {
$done = "";
if(isset($_POST['g-recaptcha-response']) && !empty($_POST['g-recaptcha-response'])) {
$captcha_response = htmlspecialchars($_POST['g-recaptcha-response']);
$curl = curl_init();
$captcha_verify_url = "https://www.google.com/recaptcha/api/siteverify";
$recaptcha_site_secret = "6LdnvF0UAAAAAB_AzkK619T2VDlYRojrd5VPox60";
curl_setopt($curl, CURLOPT_URL,$captcha_verify_url);
curl_setopt($curl, CURLOPT_POST, true);
curl_setopt($curl, CURLOPT_POSTFIELDS, "secret=".$recaptcha_site_secret."&response=".$captcha_response);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
$captcha_output = curl_exec ($curl);
curl_close ($curl);
$captcha_success = json_decode($captcha_output);
//var_dump($captcha_success);
if($captcha_success->success==true) {
if (count_gbook_entries($_POST['youripaddr'])<250) {
$done = write_entries($_POST);
} else {
$done[code] = 0;
$done[msg] = "Zu viele Einträge sind nicht erlaubt";
}
} else {
$done[code] = 0;
$done[msg] = "Bitte geben Sie den Sicherheitscode ein";
// $f = @fopen($base_dir .'/blacklist.txt', 'a');
// fwrite($f, $username.','.$_SERVER['REMOTE_ADDR'] ."\n");
// fclose($f);
}
} else {
$done[code] = 0;
$done[msg] = "Bitte geben Sie den Sicherheitscode ein";
}
if ( $done[code] == 1 ) {
$color = "darkgreen";
} else {
$color = "darkred";
}
$done = "$done[msg]";
}
if ( $_POST['num'] != "" && preg_match("/^\d+$/", $_POST['num'])) {
$num = $_POST['num'];
} else {
$num = "0";
}
$gblayout = _get_gb_layout($username);
$sqls = "select javascriptname,javascripttext,layout,color,bgcolor from $db_tablese where username='$username'";
mysql_select_db("$database") or die ("Could not select database $database");
$results = mysql_query ($sqls);
$rowse = mysql_fetch_row ($results);
if ( $rowse[2] == '' ) {
$rowse[2] = 't1';
$rowse[3] = 'c1';
}
$sitecode = file_get_contents("$base_dir/templates/$rowse[2]/$rowse[3]/index.html");
$java2 = "\n";
$java2 .= "\n";
$siteheader = _get_website_header($username, $sitename, $java2);
$include_text = shell_exec("HTTP_HOST=$username REQUEST_URI='guestbook.html' /var/www/vhosts/klack.org/cgi-bin/include.pl");
$include_text = str_replace("Content-type: text/html", "", $include_text);
$sitefooter = "$include_text