xXx

Hexid M1n1 5h3ll MobiLe

C:/Abyss Web Server/htdocs/pppblogold/_[ Writable ]

File:C:/Abyss Web Server/htdocs/pppblogold/comment_add_cgi.php

<?php
require_once('scripts/sb_functions.php');
global $logged_in;
$logged_in = logged_in( false, true );
if ( !session_id() ) {
    session_start();
}

read_config();
sb_language( 'comments' );

// Verify information being passed:
$ok = false;
if ( array_key_exists( 'y', $_POST ) && array_key_exists( 'm', $_POST ) && array_key_exists( 'entry', $_POST ) && array_key_exists( 'comment_capcha', $_POST ) ) {
    // Dis-allow dots, and slashes to make sure the
    // user is not able to back-up a directory.
    //
    // Make sure the string lengths are correct.
    if ( $_POST['blog_text'] != '' && 
	 $_POST['comment_name'] != '' &&
	 $_SESSION[ 'capcha_' . $_POST[ 'entry' ] ] != '' &&
	 $_POST[ 'comment_capcha' ] == $_SESSION[ 'capcha_' . $_POST[ 'entry' ] ] ) {
	if ( strpos( $_POST[ 'y' ], array( '/', '.', '\\', '%' ) ) === false && strlen( $_POST[ 'y' ] ) == 2 &&
	     strpos( $_POST[ 'm' ], array( '/', '.', '\\', '%' ) ) === false && strlen( $_POST[ 'm' ] ) == 2 &&
	     strpos( $_POST[ 'entry' ], array( '/', '.', '\\', '%' ) ) === false && strlen( $_POST[ 'entry' ] ) == 18 ) {
	    
	    // Verify that the file exists.
	    if ( entry_exists ( $_POST[ 'y' ], $_POST[ 'm' ], $_POST[ 'entry' ] ) ) {
		$ok = write_comment( $_POST[ 'y' ], $_POST[ 'm' ], $_POST[ 'entry' ], sb_stripslashes( $_POST[ 'comment_name' ] ), sb_stripslashes( $_POST[ 'comment_email' ] ), sb_stripslashes( $_POST[ 'comment_url' ] ), $_POST[ 'comment_remember' ], sb_stripslashes( $_POST[ 'blog_text' ] ) );
		@session_unregister( 'capcha_' . $_GET[ 'entry' ] );
	    }
	}
    }
}

if ( $ok === true ) {
    $relative_url = 'comments.php?y='.$_POST[ 'y' ].'&m='.$_POST[ 'm' ].'&entry='.$_POST[ 'entry' ];
    redirect_to_url( $relative_url );
}

html_header('',false);

function page_content() {
    global $lang_string, $user_colors;
		
    if ( $ok !== true ) {
	echo $lang_string[ 'error_add' ].$ok.'<p />';
    }
		
    echo( '<a href="index.php">' . $lang_string[ 'home' ] . '</a><br /><br />' );
}
global $blog_config;
if ( $blog_config[ 'blog_comments_popup' ] == 1 ) {
    theme_popuplayout();
} else {
    theme_pagelayout();
}

html_footer();

?>

Your Access Expired	Date. in : 02-11-2025
Regist : 09-12-2024	Expired : 01-12-2027