1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
|
<?php require("admin/configure.php"); ?> <? require("fckeditor/fckeditor.php") ; ?> <?php session_start();
if( isset($_POST['submit'])) { if( $_SESSION['security_code'] == $_POST['security_code'] && !empty($_SESSION['security_code'] ) ) { // Insert you code for processing the form here, e.g emailing the submission, entering it into a database. //echo 'Thank you. Your message said "'.$_POST['message'].'"'; $_SESSION['guestbookname'] = $_POST['guestbookname']; $_SESSION['guestbookemail'] = $_POST['guestbookemail']; $_SESSION['guestbookdesc'] = $_POST['guestbookdesc']; header('Location: guestbookadd.php'); unset($_SESSION['security_code']); } else { // Insert your code for showing an error message here //echo 'Sorry, you have provided an invalid security code'; header("Location: guestbook.php?msg=Sorry, you have provided an invalid security code"); } } else { ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>晞望 林俊晞生命見證 晞望成長坊</title> <link rel="stylesheet" type="text/css" href="css/style.css" /> </head>
<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0"> <table width="980" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td><a href="index.php"><img src="images/home.jpg" width="980" height="55" border="0" /></a></td> </tr> <tr> <td><?php if (($_SESSION["pmenu"] == '1') || ($_SESSION["pmenu"] == '2')){ echo '<img src="images/pagebanner2.jpg" width="980" height="184" />'; } else if ($_SESSION["pmenu"] == '3'){ echo '<img src="images/pagebanner3.jpg" width="980" height="184" />'; } else if ($_SESSION["pmenu"] == '4'){ echo '<img src="images/pagebanner4.jpg" width="980" height="184" />'; } else { echo '<img src="images/pagebanner.jpg" width="980" height="184" />'; } ?></td> </tr> <tr> <td><table width="980" border="0" cellpadding="0" cellspacing="0"> <tr> <? $sql = " select * from categories where categories.parentid = '1' order by sortby limit 0, 1"; $res = mysql_query($sql); $row = mysql_fetch_array($res); $template1 = $row["template"]; ?> <? $sql = " select * from categories where categories.parentid = '2' order by sortby limit 0, 1"; $res = mysql_query($sql); $row = mysql_fetch_array($res); $template2 = $row["template"]; ?> <? $sql = " select * from categories where categories.parentid = '3' order by sortby limit 0, 1"; $res = mysql_query($sql); $row = mysql_fetch_array($res); $template3 = $row["template"]; ?> <? $sql = " select * from categories where categories.parentid = '4' order by sortby limit 0, 1"; $res = mysql_query($sql); $row = mysql_fetch_array($res); $template4 = $row["template"]; ?> <? $sql = " select * from news where news.status = 'Enable' order by newsdate desc limit 0, 1"; $res = mysql_query($sql); $row = mysql_fetch_array($res); $new = $row["newsid"]; ?> <td><a href="<?=$template1?>"><img src="images/menu01.jpg" width="140" height="31" border="0" /></a></td> <td><a href="<?=$template2?>"><img src="images/menu02.jpg" width="140" height="31" border="0" /></a></td> <td><a href="<?=$template3?>"><img src="images/menu03.jpg" width="140" height="31" border="0" /></a></td> <td><a href="<?=$template4?>"><img src="images/menu04.jpg" width="140" height="31" border="0" /></a></td> <td><a href="guestbook.php"><img src="images/menu05.jpg" width="140" height="31" border="0" /></a></td> <td><a href="contactus.php"><img src="images/menu06.jpg" width="140" height="31" border="0" /></a></td> <td><a href="news.php?newsid=<?=$new?>"><img src="images/menu07.jpg" width="140" height="31" border="0" /></a></td> </tr> </table></td> </tr> <tr> <td height="7"></td> </tr> <tr> <td><table width="980" border="0" cellpadding="0" cellspacing="0"> <tr> <td width="280"><img src="images/title05.jpg" width="280" height="33" /></td> <td width="700" align="left" valign="top"> </td> </tr> <tr> <td height="350" align="left" valign="top" bgcolor="#F2F2F2"><? echo "". $_GET['msg'] ."";?> <br><br><form action="guestbook.php" method="post" name="addform" enctype="multipart/form-data"> <table width="250" border="0" align="center" cellpadding="0" cellspacing="0" class="txt"> <tr> <td width="50" height="20" align="left" class="txt"><strong> 名字: </strong></td> <td width="200" height="20" class="txt"><input type="text" class="txt" name="guestbookname" size="25"></td> </tr> <tr> <td height="20" align="left" class="txt"><strong> 電郵: </strong></td> <td height="20" class="txt"><input type="text" name="guestbookemail" size="25" class="txt" /></td> </tr> <tr> <td height="20" colspan="2" align="left" valign="top" class="txt"><strong> 驗証碼 </strong> <input id="security_code" name="security_code" type="text" size="10" /><img src="CaptchaSecurityImages.php?width=80&height=25&characters=5" align="absmiddle" /><br /></td> </tr> <tr> <tr> <td height="20" colspan="2" align="left" valign="top" class="txt"><strong> 內容: </strong></td> </tr> <tr> <td height="20" colspan="2" align="left" valign="top" class="txt"><?php $sBasePath = $_SERVER['PHP_SELF'] ; $sBasePath = "fckeditor/"; $oFCKeditor = new FCKeditor('guestbookdesc') ; $oFCKeditor->BasePath = $sBasePath ; $oFCKeditor->Value = ""; $oFCKeditor->Width = 250; $oFCKeditor->Height = 400; $oFCKeditor->Create() ; ?></td> </tr> <tr align="center"> <td height="20" colspan="2"> </td> </tr> <tr align="center"> <td height="20" colspan="2"><input name="submit" type="submit" value="提交" /></td> </tr> <tr align="center"> <td height="20" colspan="2"> </td> </tr> </table> </form> </td> <td align="right" valign="top"><table width="680" border="0" cellpadding="0" cellspacing="0"> <? $sql = "SELECT * "; $sql .= "FROM guestbook "; $sql .= "where guestbookstatus = 'Enable' "; $sql .= "order by guestbookid desc "; $result = mysql_query($sql); while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) { ?> <tr> <td height="35" align="left" valign="top" class="titletxt"><? echo $row{'guestbookname'}; ?></td> </tr> <tr> <td align="left" valign="top" class="txt"><? echo $row{'guestbookdesc'}; ?></td> </tr> <tr> <td align="left" valign="top" class="guestbookdate"><? echo $row{'guestbookdate'}; ?></td> </tr> <tr> <td align="left" valign="top" height="30" ><hr></td> </tr> <? } ?> </table></td> </tr> <tr> <td height="50" align="left" valign="top" bgcolor="#F2F2F2"> </td> <td align="right" valign="top"> </td> </tr> </table></td> </tr> <tr> <td align="center" class="footertxt"><p>Copyright © 2009 晞望 林俊晞生命見證 All Rights Reserved. | Sponsored by <a href="http://www.onesolution.com.hk" target="_blank">One Solution Limited</a>.<br /> <a href="http://www.onesolution.com.hk" target="_blank"><img src="images/webicon137w23h.jpg" width="137" height="23" border="0" /></a> </p> </td> </tr> </table>
</body> </html> <?php } ?>
|