<?                  

/*                  
Tagbox v0.2                  

Author: Erik Boeters <erik@westland.ath.cx>                  
Website: http://westland.ath.cx/                  

SQL query:                  

CREATE TABLE `tagbox` (                  
`ID` INT NOT NULL AUTO_INCREMENT PRIMARY KEY,                  
`message` TEXT NOT NULL,                  
INDEX (`ID`),                  
UNIQUE (`ID`)                  
);                  

*/                  

// Database related settings.                  
DEFINE("SERVER", "127.0.0.1");                  
DEFINE("DATABASE", "password");                  
DEFINE("USERNAME", "login");                  
DEFINE("DBPASSWORD", "");                  

// Tagbox related.                  
DEFINE("SHOWTIME", false); // true or false                  
DEFINE("SHOWMESSAGES", "20");                  
DEFINE("TAGBOXFONTSIZE", "8"); // in pixels                  
DEFINE("TAGBOXWIDTH", "190"); // in pixels                  
DEFINE("TAGBOXHEIGHT", "70"); // in pixels                  
DEFINE("BORDERWIDTH", "1"); // in pixels                  
DEFINE("BORDERCOLOR", "#CCCCCC"); // in HEX                  
DEFINE("BGCOLOR", "#FBFBFB"); // in HEX                  

// Not neccesary to modify.                  

$db = mysql_connect(SERVER, USERNAME, DBPASSWORD);                  
DEFINE("S", $PHP_SELF);                  
$styleprops = array(TAGBOXFONTSIZE,TAGBOXFONTSIZE,TAGBOXWIDTH,TAGBOXHEIGHT,BORDERWIDTH,BORDERCOLOR,BGCOLOR);                  

function showMessages($m,$s,$style) {                  
                     $queryGetMessages = "SELECT * FROM tagbox order by ID DESC LIMIT 0, $m";                  
                     $resultGetMessages = mysql_db_query(DATABASE, $queryGetMessages);                  
                     $queryCountMessages = "SELECT * FROM tagbox";                  
                     $resultCountMessages = mysql_db_query(DATABASE, $queryCountMessages);                  
                     $o .="      <form name=\"tagbox\" action=\"$s\" method=\"post\">\n";                  
                     $o .="         <input type=\"hidden\" name=\"tagboxa\" value=\"sm\" /> <textarea title=\"# of messages: ".mysql_num_rows($resultCountMessages)."\"\n";                  
                     $o .="         style=\"WIDTH: $style[2]px;background-color : $style[6];HEIGHT: $style[3];border: $style[4]px solid $style[5];font-size: $style[0]pt;\" name=\"messages\"\n";                  
                     $o .="         readonly=\"readonly\">\n";                  
                     for($i=0;$row=mysql_fetch_array($resultGetMessages);$i++) {                  
                         $o .="$row[message]\n";                  
                     }                  
                     $o .="         </textarea><br />\n";                  
                     $o .="         <input name=\"newmessage\"\n";                  
                     $o .="         style=\"WIDTH: $style[2]px;background-color : $style[6];border: $style[4]px solid $style[5];font-size: $style[0]pt;line-height: ".($style[0]+1)."pt;\" />\n";                  
                     $o .="      </form>\n";                  
                     $o .="      <script language=\"JavaScript\" type=\"text/javascript\">\n";                  
                     $o .="         document.tagbox.newmessage.focus()\n";                  
                     $o .="      </script>\n";                  
                     return $o;                  
}                  

function sendMessage($m,$SERVER_NAME,$REQUEST_URI) {                  
                     if (!$m) {                  
                         return false;                  
                     }                  
                     if (SHOWTIME) {                  
                         $m = date ("G:i").">$m";                  
                     } else {                  
                         $m = ">$m";                  
                     }                  
                     $m = htmlspecialchars($m);                  
                     $querySendMessage = "INSERT INTO `tagbox` (`ID`, `message`) VALUES ('', '$m')";                  
                     $resultSendMessage = mysql_db_query(DATABASE, $querySendMessage);                  
                     if (!$resultSendMessage) {                  
                         return false;                  
                     } else {                  
                         header("Location: http://".$SERVER_NAME.$REQUEST_URI);                  
                     }                  
}                  

switch ($tagboxa) {                  
case "sm":                  
print sendMessage($newmessage,$SERVER_NAME,$REQUEST_URI);                  
break;                  
}                  

mysql_close($db);                  

?>                  

<html>                  
                     <head>                  
                         <t itle>                  
                             T      agb ox example                  
                         </title>                  
                     </head>                  
                     <body>                  
                     <?print showMessages(SHOWMESSAGES,S,$styleprops);?>                  
                     </body>                  
</html>

$con = @mysql_connect($ip, $user, $pass);            
if (!$con) {            
               error_s("Unable to connect to database: " . mysql_error());            
};            
                       
if (!empty($_POST)) {            
                   if ((empty($_POST["username"]))||(empty($_POST["password"]))||(empty($_POST["email"]))||(empty($_POST["tbc"])) ) {            
                           error_s("You did not enter all the required information.");            
                           exit();            
                   } else {            
                           $username = strtoupper($_POST["username"]);            
                           $password = strtoupper($_POST["password"]);            
                           $email = strtoupper($_POST["email"]);            
                           if (strlen($username) < 5) {            
                         error_s("Username too short.");            
                         exit();            
                           };            
                           if (strlen($username) > 14) {            
                         error_s("Username too long.");            
                         exit();            
                           };            
                           if (strlen($password) < 8) {            
                         error_s("Password too short.");            
                         exit();            
                           };            
                           if (strlen($password) > 12) {            
                         error_s("Password too long.");            
                         exit();            
                           };            
                           if (strlen($email) < 15) {            
                         error_s("Email was too short.");            
                         exit();            
                           };            
                           if (strlen($email) > 50) {            
                         error_s("Email was too long.");            
                         exit();            
                           };            
                           if (preg_match($user_chars,$username)) {            
                         error_s("Username contained illegal characters.");            
                         exit();            
                           };            
                           if (preg_match($user_chars,$password)) {            
                         error_s("Password contained illegal characters.");            
                         exit();            
                           };            
                           if (!preg_match($email_chars,$email)) {            
                         error_s("Email was in an incorrect format.");            
                         exit();            
                           };            
                           if ($_POST['tbc'] != "on") {            
                         $tbc = "0";            
                           } else {            
                         $tbc = "1";            
                           };            
                           $username = mysql_real_escape_string($username);            
                           $password = mysql_real_escape_string($password);            
                           $email = mysql_real_escape_string($email);            
                           $qry = @mysql_query("select username from " . mysql_real_escape_string($r_db) . ".account where username = '" . $username . "'", $con);            
                           if (!$qry) {            
                     error_s("Error querying database: " . mysql_error());            
                           };            
                           if ($existing_username = mysql_fetch_assoc($qry)) {            
                         foreach ($existing_username as $key => $value) {            
                    $existing_username = $value;            
                         };            
                           };            
                           $existing_username = strtoupper($existing_username);            
                           if ($existing_username == strtoupper($_POST['username'])) {            
                         error_s("That username is already taken.");            
                         exit();            
                           };            
                           unset($qry);            
                           $qry = @mysql_query("select email from " . mysql_real_escape_string($r_db) . ".account where email = '" . $email . "'", $con);            
                           if (!$qry) {            
                     error_s("Error querying database: " . mysql_error());            
                           };            
                           if ($existing_email = mysql_fetch_assoc($qry)) {            
                         foreach ($existing_email as $key => $value) {            
                    $existing_email = $value;            
                         };            
                           };            
                           if ($existing_email == $_POST['email']) {            
                         error_s("That email is already in use.");            
                         exit();            
                           };            
                           unset($qry);            
                           $sha_pass_hash = sha1(strtoupper($username) . ":" . strtoupper($password));            
                           $register_sql = "insert into " . mysql_real_escape_string($r_db) . ".account (username, sha_pass_hash, email, expansion) values (upper('" . $username . "'),'" . $sha_pass_hash . "','" . $email . "','" . $tbc . "')";            
                           $qry = @mysql_query($register_sql, $con);            
                           if (!$qry) {            
                     error_s("Error creating account: " . mysql_error());            
                           };            
                           echo("Account successfully created.");            
                           exit();            
                   };            
} else {            
                   echo($page);            
};            
                       
?>