<?php

$db = mysql_connect("localhost", "username", "password") or die("Could not connect."); //username and password

if(!$db) 

	die("no db");

if(!mysql_select_db("database_name",$db)) //database name

 	die("No database selected.");



if(!get_magic_quotes_gpc())

{

  $_GET = array_map('mysql_real_escape_string', $_GET); 

  $_POST = array_map('mysql_real_escape_string', $_POST); 

  $_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);

}

else

{  

   $_GET = array_map('stripslashes', $_GET); 

   $_POST = array_map('stripslashes', $_POST); 

   $_COOKIE = array_map('stripslashes', $_COOKIE);

   $_GET = array_map('mysql_real_escape_string', $_GET); 

   $_POST = array_map('mysql_real_escape_string', $_POST); 

   $_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);

}





?>

<?php

include "connect.php";

if(isset($_POST['submit'])) //if submit button push has been detected

{

   $message=$_POST['message'];

   $name=$_POST['name'];

   if(strlen($message)<1)

   {

      print "You did not input a message";

   }

   else if(strlen($name)<1)

   {

      print "You did not enter a name, please try again.";

   }

   else

   {

      $message=strip_tags($message);

      $IP=$_SERVER["REMOTE_ADDR"]; //grabs poster's IP

      $checkforbanned="SELECT IP from ipbans where IP='$IP'";

      $checkforbanned2=mysql_query($checkforbanned) or die("Could not check for banned IPS");

      if(mysql_num_rows($checkforbanned2)>0) //IP is in the banned list

      {

         print "You IP is banned from posting.";

      }

      else

      {

         $thedate = date("U"); //grab date and time of the post

         $insertmessage="INSERT into chatmessages (name,IP,postime,message) values('$name','$IP','$thedate','$message')";

         mysql_query($insertmessage) or die("Could not insert message");

    



      }

   }

 

      

}

print "<form action='submit.php' method='post' name='form'>";

print "Your name:<br>";

print "<input type='text' name='name' size='20'><br>";

print "Your message:<br>";

print "<textarea name='message' cols='40' rows='2'></textarea><br>";

print "<a onClick=\"addSmiley(':)')\"><img src='images/smile.gif'></a> "; //replace images/smile.gif with the relative path of your smiley

print "<a onClick=\"addSmiley(':(')\"><img src='images/sad.gif'></a> ";

print "<a onClick=\"addSmiley(';)')\"><img src='images/wink.gif'></a> ";

print "<input type='submit' name='submit' value='submit'></form>";

print "<script language=\"Java Script\" type=\"text/javascript\">\n";

print "function addSmiley(textToAdd)\n";

print "{\n";

print "document.form.message.value += textToAdd;";

print "document.form.message.focus();\n";

print "}\n";

print "</script>\n";

print "<br><br>";



?> 

print "<a onClick=\"addSmiley(':(')\"><img src='images/sad.gif'></a> ";

if(isset($_POST['submit'])) //if submit button push has been detected

{

<?php

include "connect.php";

$getnummessages="SELECT COUNT(*) as messagecount from chatmessages";

$getnummessages2=mysql_query($getnummessages) or die("blah");

$getnummessages3= mysql_result($getnummessages2, 0);

if($getnummessages3>21)

{

   $startrow=$getmessages3-20;

}

else

{

  $startrow=1;

}

$getmsg="SELECT name, message from chatmessages order by postime ASC limit $startrow,$getnummessages3";

$getmsg2=mysql_query($getmsg) or die(mysql_error());

while($getmsg3=mysql_fetch_array($getmsg2))

{

  $message=Smiley($message); //Smiley faces

   print "<font color='red'><b>$getmsg3[name]:</b></font> $getmsg3[message]<br>";



}



function Smiley($texttoreplace)

{

    $smilies=array( 

    

    

    ':)' => "<img src='images/smile.gif'>",

    ':blush' =>"<img src='images/blush.gif'>",

    ':angry' =>"<img src='images/angry.gif'>",

    ':o'=>     "<img src='images/shocked.gif'>",  

    'fuck'=>"$#$%",

    'Fuck'=>"&$#@"

  

 

    );



    $texttoreplace=str_replace(array_keys($smilies), array_values($smilies), $texttoreplace);

    return $texttoreplace;

}

?>

<script>

  setTimeout("window.location.replace('chatlog.php')",2000);



</script>

<?

print "<iframe src='chatlog.php'  name='chatlogframe' width='350' height='400'></iframe>";

print "<br><br>";

print "<iframe src='submit.php' width='350' height='150' frameborder='0'></iframe><br><br>";

?>

<A href='banip.php'>Ban IPS</a> | <A href='unbanip.php'>Unban IP</a> | <A href='editdelete.php'>Edit/Delete messages</a><br>

<?php

include "../connect.php";

if(isset($_POST['submit']))

{

   $banip=$_POST['banip'];

   if(strlen($banip)<1)

   {

      print "You did not list an IP to Ban";

   }

   else

   {

      $ipban="Insert into ipbans (IP) values('$banip')";

      mysql_query($ipban) or die("Could not ban IP");

      print "Ip banned.";

   }



}

else

{

    print "<form action='banip.php' method='post'>";

    print "IP to Ban:<br>";

    print "<input type='text' name='banip' size='20'><br>";

    print "<input type='submit' name='submit' value='submit'></form>";

}

?>

<?php

include "../connect.php";

if(isset($_POST['submit']))

{

   $ipselects=$_POST['ipselects'];

   $unban="Delete from ipbans where ipid='$ipselects'";

   mysql_query($unban) or die("Could not unban");

   print "IP Unbanned.";



}

else

{

    print "<form action='unbanip.php' method='post'>";

    $getips="SELECT * from ipbans";

    $getips2=mysql_query($getips) or die("Could not get IPS");

    print "<select name='ipselects'>";

    while($getips3=mysql_fetch_array($getips2))

    {

       print "<option value='$getips3[ipid]'>$getips3[IP]</option>";

    }

    print "</select><br>";

    print "<input type='submit' name='submit' value='submit'></form>";

}

?>

<?php

include "../connect.php";

if(isset($_POST['submit']))

{

  $searchterm=$_POST['searchterm'];

  $getmsg="Select * from chatmessages where message like '%$searchterm%' order by postime desc";

  $getmsg2=mysql_query($getmsg) or die("Could not get messages");

  print "<table border='1'><tr><td>Name of poster</td><td>IP</td><td>Message</td><td>Edit</td><td>Delete</td></tr>";

  while($getmsg3=mysql_fetch_array($getmsg2))

  {

     print "<tr><td valign='top'>$getmsg3[name]</td><td valign='top'>$getmsg3[IP]</td><td valign='top'>$getmsg3[message]</td><td valign='top'><A     href='editm.php?ID=$getmsg3[ID]'>Edit</a></td><td valign='top'><A href='delete.php?ID=$getmsg3[ID]'>Delete</a></td></tr>";

  } 

  print "</table>";



}

else

{

  print "<form action='editdelete.php' method='post'>";

  print "Search for messages(leaving blank will return all messages:<br>";

  print "<input type='text' name='searchterm' size='20'><br>";

  print "<input type='submit' name='submit' value='submit'></form>";



}

?>

<?php

include "../connect.php";

if(isset($_POST['submit']))

{

   $ID=$_POST['ID'];

   $themessage=$_POST['themessage'];

   $updatemsg="Update chatmessages set message='$themessage' where ID='$ID'";

   mysql_query($updatemsg) or die("Could not get message");

   print "Message updated.";



}

else

{

  $ID=$_GET['ID'];

  $getmessage="SELECT *  from chatmessages where ID='$ID'";

  $getmessage2=mysql_query($getmessage) or die("Could not get message");

  $getmessage3=mysql_fetch_array($getmessage2);

  print "<form action='editm.php' method='post'>";

  print "<input type='hidden' name='ID' value='$ID'>";

  print "<textarea name='themessage' rows='5' cols='50'>$getmessage3[message]</textarea><br><br>";

  print "<input type='submit' name='submit' value='submit'></form>";

 



}

?>

<?php

include "../connect.php";

if(isset($_POST['submit']))

{

   $ID=$_POST['ID']; 

   $delmessage="Delete from chatmessages where ID='$ID'";

   mysql_query($delmessage) or die("Could not delete message");

   print "Message Deleted.";



}

else

{

   $ID=$_GET['ID'];

   print "<form action='delete.php' method='post'>";

   print "Are you sure you want to delete this message?<br>";

   print "<input type='hidden' name='ID' value='$ID'>";

   print "<input type='submit' name='submit' value='Delete'></form>";

}

?>