if (isset($_POST['sendMSG'])) {


                        $message    = mysql_real_escape_string($_POST['message']);
                        $message    = str_replace("final-crime.tk", "Verboden link (reclame)", $message);
                        $message    = str_replace("www.final-crime.tk", "Verboden link (reclame)", $message);
                        $message    = str_replace("www.final-crime.tk", "Verboden link (reclame)", $message);
                        $message    = str_replace("final-crime.tk", "Verboden link (reclame)", $message);
                        
                        
                        $sql = mysql_query("SELECT MAX(`id`) FROM `shoutbox`") or die(mysql_error());




                        $last_id = mysql_result($sql, 0);




                        $sql = mysql_query("SELECT `id`  FROM `shoutbox` WHERE `id`>(" . ($last_id - 15) .
                            ") AND `user_id`=" . ID . " LIMIT 1") or die(mysql_error());




                        $regex1 = "/kanke/i";


                        $regex2 = "/kanker/i";
						                




                        $string = 'http://tinypic';
                        $time_hoeren = mysql_query("SELECT `shoutbox` FROM `usertimes` WHERE `id` =" .
                            ID . " LIMIT 1") or die(mysql_error());
                        $timeho = mysql_fetch_assoc($time_hoeren);
                        $tho = $timeho['shoutbox'];




                        if (preg_match($regex1, $_POST['message']) || preg_match($regex2, $_POST['message'])) {


                            $msg = "Nou, nou.. Schelden is niet toegelaten in de shoutbox!";


                        } elseif ($tho > time()) {
                            $msg = "Je moet nog <b>" . ($tho - time()) .
                                "</b> seconden wachten voordat je weer een bericht kan plaatsen!";
                            $msg = bad($msg);


                        } else {




                            if (!empty($_POST['message']) && strlen($_POST['message']) > 0) {


                                $spacer = "[-| |\/|\.|\\\|_||\^|\$|\#|\!]*";


                              
                                $badWords = array('kanker','stront','fuck','klote','kankerhomo','kankerhoer','kankerkind',
'kankerhond','kankermongool','mongool','kankerwijf','kut','kutkind','kuthoer','kuthomo','kurwijf','lul','***','tering','teringkind','teringhoer','teringwijf','teringtyfus','tyfus','tyfuskund','bitch','slet','sletje','kutslet','klootzak','kutaap','neuken','neuk','teringbitch','straathoer','asshole','camslet','pik','pijhoer',
'pijpslet','zaadslet','zaadhoer','takkewijf','takkekind','takkehoer','takketeef','teef','trut','kreng','kutkreng','kankerkreng', );




                                $regexes = array();


                                $stop = false;


                                foreach ($badWords as $bad) {


                                    $badletters = str_split($bad);


                                    $regexes[$bad] = "/(.*?)(";


                                    foreach ($badletters as $letter) {


                                        $regexes[$bad] .= $letter . $spacer;


                                    }
                    
                                    $regexes[$bad] = substr($regexes[$bad], 0, (strlen($spacer) * -1));


                                    $regexes[$bad] .= ")(.*?)/i";


                                }


                                foreach ($regexes as $rgx) {


                                    if (preg_match($rgx, $_POST['message'])) {


                                        $stop = true;
                                    $msg = "Er stond in de text een verboden woord!";


                                    }


                                }


                                
                                
                                
                                //preg_replace(




                                if (!$stop) {




                                    mysql_query("INSERT INTO `shoutbox`(`user_id`, `bericht`, `date`) VALUES 


	


			(" . ID . ", '" . htmlspecialchars($message) . "', NOW() )") or
                                        die(mysql_error());
								 mysql_query("INSERT INTO `shoutbox_del`(`user_id`, `bericht`, `date`) VALUES 


	


			(" . ID . ", '" . htmlspecialchars($message) . "', NOW() )") or
                                        die(mysql_error());
									mysql_query("UPDATE `tutorial` SET `shoutbox`='1' WHERE `id`=".ID." LIMIT 1") or die(mysql_error());


if($__status < 2){
                                    $nieuwetijd = time() + 5;
} else {
                                    $nieuwetijd = time() + 0;
}
                                    mysql_query("UPDATE `usertimes` SET `shoutbox`=" . $nieuwetijd . " WHERE `id`=" .
                                        ID . " LIMIT 1") or die(mysql_error());


                                    $msg = "Je bericht is toegevoegd!";


                                }




                            } else {


                                $msg = "Je moet wel een bericht invullen!";


                            }




                        }




                    }

<?php
	
	session_start();


	
    header('content-type: image/png');
	if(file_exists("../IMG/captcha_bg.png")){
		$img = ImageCreateFromPNG("../IMG/captcha_bg.png");
	} elseif(file_exists("captcha_bg.png")) {
		$img = ImageCreateFromPNG("captcha_bg.png");
	}
    
    
    
    $grootte = 5;
	if(!isset($_SESSION['code_captcha'])){
		$tekst = rand(1000, 9999);
	} else {
		$tekst = $_SESSION['code_captcha'];
	}
	
	
	$kleur = ImageColorAllocate($img, 0, 0, 0); //0, 0, 0 = Zwart
	
	ImageString($img, $grootte, rand(3, 12), rand(5, 7), $tekst, $kleur);
    
    imagepng($img);
    imagedestroy($img);


?>