PI18-WebDev/gbook.php at main · DimaLeon2000/PI18-WebDev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
<!DOCTYPE html >
<?php
	define('DB_HOST','localhost');
	define('DB_LOGIN','root');
	define('DB_PASSWORD','');
	define('DB_NAME','gbook');
	$link=mysqli_connect(DB_HOST,DB_LOGIN, DB_PASSWORD, DB_NAME);
	function clearStr($data){
	global $link;
	return mysqli_real_escape_string($link,trim(strip_tags($data)));}
	if($_SERVER['REQUEST_METHOD']=='POST'){
		$name = clearStr($_POST['name']);
		$email = clearStr($_POST['email']);
		$msg = clearStr($_POST['msg']);
		$sql = "INSERT INTO msgs(name, email, msg) VALUES('$name','$email','$msg')";
		mysqli_query($link,$sql) or die(mysqli_error($link));
		header('Location:'.$_SERVER['REQUEST_URI']);
		exit;
	}
	if(isset($_GET['del'])){
		$del=abs((int)$_GET['del']);
		if($del){
			$sql="DELETE FROM msgs WHERE id=$del";
			mysqli_query($link,$sql) or die(mysqli_error($link));
			header('Location:'.$_SERVER['PHP_SELF']);
			exit;
		}
	}
?>
<html>
<head>
	<title>Гостевая книга</title>
	<meta charset="windows-1251" />
</head>
<body>
<h1>Гостевая книга</h1>
<form action="<?php echo $_SERVER['REQUEST_URI']; ?>" method="post">
	Ваше имя:<br />
	<input type="text" name="name" /><br />
	Ваш E-mail:<br />
	<input type="text" name="email" /><br />
	Сообщение:<br />
	<textarea name="msg" cols="50" rows="5"></textarea><br />
	<br />
	<input type="submit" value="Добавить!" />
</form>
<?php
	$sql= "SELECT id, name, email, msg, UNIX_TIMESTAMP(datetime) as dt FROM msgs ORDER BY id DESC LIMIT 5";
	$res=mysqli_query($link,$sql) or die(mysqli_error($link));
	mysqli_close($link);
	while($row=mysqli_fetch_assoc($res)){
		$id=$row['id'];
		$name=$row['name'];
		$email=$row['email'];
		$dt=date('d-m-Y H:i:s',$row['dt']);
		$msg=$row['msg'];
		echo <<<HTML
			<hr>
			<p><a href = "mailto:$email">$name</a> @ $dt <br>$msg</p>
			<p align='right'><a href="{$_SERVER['REQUEST_URI']}?del=$id">Удалить</a></p>
		HTML;
	}
?>
</body>
</html>