$action=$_POST['action'];
$name=stripslashes($_POST['name']);
$email=stripslashes($_POST['email']);
$category=stripslashes($_POST['category']);
$website=stripslashes($_POST['website']);
$title=stripslashes($_POST['title']);
$descr=stripslashes($_POST['descr']);
$linkpage=stripslashes($_POST['linkpage']);
$sl_id=stripslashes($_POST['sl_id']);
$linkurl=stripslashes($_POST['linkurl']);
function qu($value) {
$value = mysql_real_escape_string($value);
return $value;
}
if ($action=="submit") {
if (empty($name)) {
$error="You left your Name blank. This field is required.";
} else if (empty($email)) {
$error="You left your E-mail address blank. This field is required.";
} else if (!is_email($email)) {
$error="Your E-mail's syntax is not correct.";
} else if (empty($category)) {
$error="Please enter choose a Category. This field is required.";
} else if (empty($website)) {
$error="Please enter URL of your site. This field is required.";
} else if (!empty($website) && substr($website,0,7)!="http://") {
$error="Your website does not start with \"http://\".";
} else if (empty($title)) {
$error="Please enter Title. This field is required.";
} else if (empty($descr)) {
$error="Please enter Description. This field is required.";
} else if (empty($linkpage)) {
$error="Please enter LinkPage. This field is required.";
} else if (!empty($linkpage) && substr($linkpage,0,7)!="http://") {
$error="Your LinkPage does not start with \"http://\".";
}
// is linkpage on website
if (!empty($linkpage) && !empty($website)) {
$web_domain = substr($website,7);
if(strpos($web_domain,'?') != false)
$web_domain=substr($web_domain,0, strpos($web_domain,'?'));
if(strpos($web_domain,'#') != false)
$web_domain=substr($web_domain,0, strpos($web_domain,'#'));
if(strpos($web_domain,'/') != false)
$web_domain=substr($web_domain,0, strpos($web_domain,'/'));
$link_site = substr($linkpage,7);
if(strpos($link_site,'?') != false)
$link_site=substr($link_site,0, strpos($link_site,'?'));
if(strpos($link_site,'#') != false)
$link_site=substr($link_site,0, strpos($link_site,'#'));
if(strpos($link_site,'/') != false)
$link_site=substr($link_site,0, strpos($link_site,'/'));
if ($link_site != $web_domain) {
$error="The LinkPage is not on your website";
}
}
if (empty($error) && !empty($name)) {
$query="SELECT * FROM links_categ WHERE usr='".qu($name)."'";
$result = mysql_query($query);
if (mysql_num_rows($result)) {
$error="Your Name already exists in our database.";
}
}
if (empty($error) && !empty($linkpage)) {
$query="SELECT * FROM url WHERE url='".qu($linkpage)."' and status_id=1";
$result = mysql_query($query);
if (mysql_num_rows($result)) {
$error="The LinkPage already exists in our database.";
}
}
if (empty($error)) {
// insert a new user
$query="INSERT INTO links_categ (usr, email, category_id, linkurl, website, title, descr, stat)
values('".qu($name)."', '".qu($email)."','".qu($category)."' ,'".qu($linkurl)."', '".qu($website)."', '".qu($title)."', '".qu($descr)."', 8)";
mysql_query($query);
echo mysql_error();
mysql_query("USE recip_links");
$query="update site_link set last_linked=now() where id='".qu($sl_id)."'";
mysql_query($query);
mysql_query("USE womens_health");
// delete previous urls
$query="DELETE FROM url where url = '".qu($linkpage)."'";
mysql_query($query);
// insert a new url
$query="INSERT INTO url (user, url, status_id, creation_date)
values('".qu($name)."', '".qu($linkpage)."', 3, now())";
mysql_query($query);
$query="SELECT url_id FROM url WHERE url='".qu($linkpage)."'";
$result = mysql_query($query);
if ($record = mysql_fetch_object($result)) {
$url_id = $record->url_id;
}
echo mysql_error();
$body="
Click here for details:
http://www.womens-health.co.uk/f/admin/activate_link/?url_id=$url_id
";
$body_plain=strip_tags($body);
// to address, to name, from address, from name, subject, text message, html message
smail("ab@ataramedia.com", "ab", $email, $name, $email, "Link exchange request on Womens Health", $content_plain,$content);
//smail("e@nopuente.com", "Edmund", $email, $name, $email, "Link exchange request on Womens Health", $body_plain,$body);
// smail("checkurl@womens-health.co.uk", "Pregnancy-Info CheckURL", $email, $name, "Link exchange request on Pregnany-Info", $content_plain,$content);
}
}
// first page
if (empty($action)) {
$query="select * from linkcategory order by category_name";
$result = mysql_query($query);
echo mysql_error();
$arr_categ = array();
while($record = mysql_fetch_object($result)) {
$arr_categ[$record->category_id] = $record->category_name;
}
mysql_free_result($result);
$output =<<