<table width=100% height=100%> 
<form action="test.php" method="POST"> 
<table> 
<tr>
      <td>Email:</td>
      <td><input type="text" name="address"></td></tr> 
<tr>
      <td>Volledige naam</td>
      <td><input type="text" name="body"></td></tr> 
	  <td>Onderwerp</td>
	  <td><input type="text" name="subject"></td></tr>
<tr><td colspan=2 class="spatie"><textarea cols=30 rows=5 name="body" class="text"></textarea></td></tr> 
<tr><td>&nbsp;</td><td><input type="submit" disabled="disabled" value="Verstuur"></td></tr> 
</form> 
</table>

<?
session_start();
error_reporting(E_ALL);
$mysql_host = "mysql13.000webhost.com";
$mysql_database = "a3959822_site";
$mysql_user = "a3959822_site";
$mysql_password = "-----";




$link = mysql_connect($mysql_host, $mysql_user, $mysql_password);
mysql_select_db($mysql_database) or die(mysql_error());
$cnfg['prefix'] = 'sbox_'; 			// prefix in de MySQL tabel
$cnfg['filter_woord'] = '***'; 		// Vervangend woord voor de woordenfilter
$cnfg['spam'] = 30; 				// seconden tussen het nieuwe bericht posten
$cnfg['woordbreedte'] = 20; 				// Breedte van bepaalde woorden in shoutbox zodat ze worden ingekort
$cnfg['titel'] = 'Admin Pannel'; 		// titel, niet echt belangrijk
$cnfg['maxbreedte'] = '136'; 		// breedte van de frame, wordt later nog 16 pixels vanaf gehaald (scrollbalk)
$cnfg['kleur1'] = '#EEEEEE'; 		// kleur nummer 1
$cnfg['kleur2'] = '#DDDDDD'; 		// kleur nummer 2
$cnfg['maxlenght'] = '255'; 		// t/m 255 tekens
$cnfg['admin_naam'] = 'nub'; 		// admin naam
$cnfg['admin_pass'] = 'nub'; 		// admin wachtwoord
$cnfg['perpagina'] = 10; 			// berichten per pagina


function form($naam,$bericht,$action,$onclick)
	{
	if($onclick == 1)
		{ $rest = ' OnClick="this.value=\'\';"'; }
	else
		{ $rest = ''; }
	?>
	<center>
	<form method="post" action="<? echo $action; ?>" name="formulier">
	<input type="hidden" name="submit" value="1">
	<input type="text" size="20" name="naam" value="<? echo $naam; ?>" <? echo $rest; ?>><br>
	<input type="text" size="20" name="bericht" value="<? echo $bericht; ?>"<? echo $rest; ?>><br>
	<input type="submit" value="P O S T"><br>
	<br>
	</form>
	</center>
	<?
	}
	
function reload($page,$seconden)
	{
	echo '<meta http-equiv="refresh" content="'.$seconden.';URL='.$page.'">';
	}
?>

<?
require 'config.php';
ob_start();


if(isset($_SESSION['admin']))
{


if(isset($_GET['page']))
	{
	if($_GET['page'] == 'post')
		{
		if(isset($_COOKIE['spam']))
			{
			echo 'Je mag niet 2 berichten in '.$cnfg['spam'].' seconden posten.';
			reload('shoutbox.php',3);
			}
		elseif($_POST['naam'] == '')
			{
			echo 'Je hebt je naam niet ingevuld!<br>';
			form('Naam',$_POST['bericht'],'?page=post',0);
			}
		elseif($_POST['bericht'] == '')
			{
			echo 'Je hebt je bericht niet ingevuld!<br>';
			form($_POST['naam'],'bericht','?page=post',0);
			}
		elseif(strlen($_POST['bericht']) > $cnfg['maxlenght'])
			{
			echo 'Je bericht bevat meer dan '.$cnfg['maxlenght'].' tekens!';
			form($_POST['naam'],'bericht','?page=post',0);
			}
		else
			{
			mysql_query("INSERT INTO ".$cnfg['prefix']."berichten VALUES ('', '".$_POST['naam']."', '' ,'', '".addslashes($_POST['bericht'])."', NOW(), '".$_SERVER['REMOTE_ADDR']."')") or die("Je bericht kon niet worden toegevoegd.");
			setcookie("spam",$_POST['naam'],time()+$cnfg['spam']);
			echo '<center>je bericht is succesvol toegevoegd, Je wordt nu automatisch doorgestuurd.</center>';
			reload('shoutbox.php',2);
			}
		}
	else
		{
		reload('shoutbox.php',0);
		}
	}
else
	{
	?>
<center>
	<form method="post" action="?page=post" name="formulier">
	<input type="hidden" name="submit" value="1">
	<input type="text" size="20" name="naam" value="naam"><br>
	<input type="text" size="20" rows="12" name="bericht" value="bericht"><br>
	<input type="submit" value="P O S T"><br>
	<br>
	</form>
	</center>
	<?
	}
}
elseif(!empty($_POST['login']))
{
if($_POST['naam'] == $cnfg['admin_naam'] && $_POST['wachtwoord'] == $cnfg['admin_pass'])
	{
	$_SESSION['admin'] = 1;
	reload('admin.php',0);
	}
else
	{
	echo 'Fout wachtwoord en/of naam.';
	reload('admin.php',2);
	}
}
else
{
?>
<center>
<form method="post" action="admin.php">
<input type="hidden" name="login" value="1">
Naam:<br>
<input type="text" name="naam"><br>
<br>
Wachtwoord:<br>
<input type="password" name="wachtwoord"><br>
<br>
<input type="submit" value="Login">
</form>
</center>
<?
}
?>

<?if ($_SERVER['REQUEST_METHOD'] == 'POST'){
  $checkuserQ = mysql_query("SELECT naam FROM users WHERE naam='". mysql_real_escape_string($_POST['naam']) ."'");


  if (mysql_num_rows($checkuserQ) > 0){
 echo("<script>alert(''.['naam'].' is al geregistreert.')</script>"); 
 die();
  }
  $checkemailQ = mysql_query("SELECT email FROM users WHERE email='". mysql_real_escape_string($_POST['email']) ."'");
  if (mysql_num_rows($checkemailQ) > 0){
 echo("<script>alert('Deze email is al geregistreert.')</script>"); 
 }
	if (!filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) {  
    echo("<script>alert('Dit is geen correcte email, probeer het nog eens.')</script>"); 
	die();
}
  
 if (!$_POST['naam'] | !$_POST['email'] | !$_POST['achternaam'] | !$_POST['login'] | !$_POST['password'] | !$_POST['password2'] ) {
 		die("<script>alert('Oops, je bent een velt vergeten!')</script>");
 	}
 	if ($_POST['password'] != $_POST['password2']) {
 		echo ("<script>alert(U wachtwoorden waren niet het zelfden, probeer het nog is.')</script>");
 	die();
	}
	}
$query = "INSERT INTO users (naam, achternaam, login, email, password) VALUES ('". mysql_real_escape_string($_POST['naam']) ."', '". mysql_real_escape_string($_POST['achternaam']) ."', '". mysql_real_escape_string($_POST['login']) ."',, '". mysql_real_escape_string($_POST['email']) ."', , '". mysql_real_escape_string(md5($_POST['password'])) ."')";
mysql_query($query) or die (mysql_error());
echo "<script>alert('U bent geregistreert!')</script>";?>