Hak5 Graffiti Wall

VictorOfSweden · August 16, 2008

Here's my MySQL version of the Hak5 Graffiti Wall.

Table structures:

CREATE TABLE IF NOT EXISTS `h5w_badwords` (
  `word` varchar(255) collate latin1_general_ci NOT NULL,
  `replacement` varchar(255) collate latin1_general_ci NOT NULL,
  KEY `word` (`word`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

CREATE TABLE IF NOT EXISTS `h5w_banlist` (
  `ip` varchar(16) collate latin1_general_ci NOT NULL,
  KEY `ip` (`ip`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

CREATE TABLE IF NOT EXISTS `h5w_messages` (
  `ip` varchar(16) collate latin1_general_ci NOT NULL,
  `name` varchar(256) collate latin1_general_ci NOT NULL,
  `message` varchar(256) collate latin1_general_ci NOT NULL,
  `time` timestamp NOT NULL default CURRENT_TIMESTAMP,
  KEY `time` (`time`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

common.php:

&lt;?php

define('DEBUG', 'false');

$dbname = "test";
$dbhost = "localhost";
$dbuser = "test";
$dbpass = "test";

$conn = mysql_connect($dbhost, $dbuser, $dbpass) or die("Unable to connect!");
mysql_select_db($dbname, $conn) or die("Unable to select database!");

function diemsg($msg){
	echo "$msg&lt;/div&gt;\r\n\t&lt;/body&gt;\r\n&lt;/html&gt;";
	die();
}

?&gt;

write.php:

&lt;html lang="en"&gt;
	&lt;head&gt;
		&lt;title&gt;Hak5 Graffiti Wall&lt;/title&gt;
		&lt;meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /&gt;
		&lt;meta name="keywords" content="hak5, wall, hakwall, hak5wall" /&gt;
		&lt;meta name="description" content="Hak5 Graffiti Wall" /&gt;
		&lt;meta name="author" content="Hak5" /&gt;
		&lt;style&gt;
			body { color:#fff; background:#000; }
			#msg { font-family: courier new; font-weight: bold; color: #f00; }
			#form { align: center; }
		&lt;/style&gt;
	&lt;/head&gt;
	&lt;body&gt;
		&lt;div id="msg"&gt;&lt;?php
require_once "common.php";

if(isset($_POST['name']) &amp;&amp; !empty($_POST['name'])) {
	//censor
	$blocked = array();
	$replacewith = array();
	$result = mysql_query("SELECT word, replacement FROM h5w_badwords") or diemsg("Query failed");
	while(list($word, $replacement) = mysql_fetch_array($result)){
	    $blocked[] = $word;
	    $replacewith[] = $replacement;
	}
	$name = str_ireplace($blocked, $replacewith, stripslashes(htmlentities($_POST['name'])));
	$msg = str_ireplace($blocked, $replacewith, stripslashes(htmlentities($_POST['message'])));

	//Check ban list
	$result = mysql_query("SELECT ip FROM h5w_banlist") or diemsg("Query failed");
	while(list($ip) = mysql_fetch_array($result)){
	    if($_SERVER['REMOTE_ADDR'] == $ip) diemsg("You have been banned for being lame. Come back when you grow up.");
	}

	//Check spam user
	$result = mysql_query("SELECT ip FROM h5w_messages ORDER BY time DESC LIMIT 1") or diemsg("Query failed");
	$row = mysql_fetch_assoc($result);
	if(DEBUG or $row['ip'] != $_SERVER['REMOTE_ADDR']){
  mysql_query("INSERT INTO h5w_messages (ip, name, message) VALUES ('" .  $_SERVER['REMOTE_ADDR'] ."', '" . $name . "', '" . $msg . "')") or  diemsg("Query failed");
		echo "Posted your message, ". $_SERVER['REMOTE_ADDR'] . "!";
	}else{
		echo "Please wait a while and try again!";
	}
}

mysql_close($conn);
?&gt;&lt;/div&gt;
		&lt;div id="form"&gt;
			&lt;form action="&lt;?php echo $_SERVER['PHP_SELF']; ?&gt;" method="post" enctype="application/x-www-form-urlencoded"&gt;
			Name:&lt;br /&gt;&lt;input type="text" name="name" size="14"&gt;&lt;br /&gt;&lt;br /&gt;
			Message:&lt;br /&gt;&lt;textarea rows="4" cols="25" name="message"&gt;&lt;/textarea&gt;&lt;br /&gt;&lt;br /&gt;
			&lt;input type="submit" value="Write on the Hak5 Wall" name="submit"&gt;
			&lt;/form&gt;
		&lt;/div&gt;
	&lt;/body&gt;
&lt;/html&gt;

show.php:

&lt;html lang="en"&gt;
	&lt;head&gt;
		&lt;title&gt;Hak5 Graffiti Wall&lt;/title&gt;
		&lt;meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /&gt;
		&lt;meta name="keywords" content="hak5, wall, hakwall, hak5wall" /&gt;
		&lt;meta name="description" content="Hak5 Graffiti Wall" /&gt;
		&lt;meta name="author" content="Hak5" /&gt;
		&lt;meta http-equiv="refresh" content="4"&gt;
		&lt;style&gt;
			body { color:#fff; background:#000; }
			h1 { font:700% courier new; font-weight: bold; }
		&lt;/style&gt;
	&lt;/head&gt;
	&lt;body&gt;
		&lt;?php
require_once "common.php";

$result  = mysql_query("SELECT ip, name, message FROM h5w_messages ORDER BY time  DESC LIMIT 1") or die("Query  failed\r\n\t&lt;/body&gt;\r\n&lt;/html&gt;");
list($ip, $name, $msg) = mysql_fetch_array($result);

//BB Code
$msg = str_ireplace("", "&lt;strong&gt;", $msg);
$msg = str_ireplace("", "&lt;/strong&gt;", $msg);
$msg = str_ireplace("", "&lt;em&gt;", $msg);
$msg = str_ireplace("", "&lt;/em&gt;", $msg);
$msg = str_ireplace("", "&lt;u&gt;", $msg);
$msg = str_ireplace("", "&lt;/u&gt;", $msg);
$msg = str_ireplace("[li]", "&lt;li&gt;", $msg);
$msg = str_ireplace("[/li]", "&lt;/li&gt;", $msg);

echo "&lt;h1&gt;" . $name . ": " . $msg . "&lt;/h1&gt;\r\n";

mysql_close($conn);
?&gt;
	&lt;/body&gt;
&lt;/html&gt;

Sign In

Hak5 Graffiti Wall

Recommended Posts

VictorOfSweden

Link to comment

Share on other sites

Join the conversation

Recently Browsing 0 members

Browse

Activity