Beiträge von flammer

<?php
/*
Helper File for Plugin: Filedownload
Plugin URI: http://www.worldweb-innovation.de/
Description: Download call
Author: Peter Gross
Author URI: http://www.worldweb-innovation.de/


    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.


    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.


    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.


*/
require_once('../../../wp-load.php');
require_once('counter.php');


$type = $_GET[type];
$path = $_GET[path];
$check = $_GET[check];


$forbidden = false;
$path_parts = pathinfo($path);
// V0.2 Security: not longer allowed relative pathes
if (strpos($path, 'http://') === false) $forbidden = true;
if (!(strpos($path, '..') === false)) $forbidden = true;
if (!(strpos($path, '.php') === false)) $forbidden = true;


if ($forbidden)
{
  printf(__("This download path '%s' is not allowed!",'filedownload'),$path);
#  exit();
}

if ($_GET["machma"]=="pw" or $_POST["machma"]=="pw" )
    {
        if (isset($_POST['f_senden']))
            {
                # Auswerten
                $userid = get_current_user_id();
                // Tabelle : paten
                // id,userid,name,emil,plz,ort,bland,erf,bem
                
                $query="SELECT * FROM paten  where userid='$userid'   ";
                $res=mysql_query($query);
                $gefundengesamt=mysql_numrows($result);
                if( $gefundengesamt > 0 )
                    {
                #=mysql_fetch_array($res)
                        echo"<br>Daten wurden geändert <br>";
                        
                        $query="update paten set name    ='".$_POST[name]."',
                                                          plz ='".$_POST[plz]."',
                                                         ort='".$_POST[ort]."',
                                                      bland ='".$_POST[bland]."',
                                                        erf ='".$_POST[erf]."',
                                                        bem ='".$_POST[bem]."'
                        where userid='$userid' ";
                    mysql_query($query);
                    Echo mysql_error();
                    } 
                else 
                    {
                        echo "<br>Daten wurden eingetragen <br>";
                        $query="INSERT INTO paten (userid,name,plz,ort,bland,erf,bem ) 
                                   VALUES ('".$userid."',
                                                '".$_POST[name]."',
                                                '".$_POST[plz]."',
                                                 '".$_POST[ort]."',
                                                 '".$_POST[bland]."',
                                                 '".$_POST[erf]."',
                                               '".$_POST[anm]."'
                                                 );";
                     $result=mysql_query($query);
                    echo mysql_error();
            
                    }
            }
        else
           {
              # Formular anzeigen  
              if ( is_user_logged_in() ) 
                      {
              $current_user = wp_get_current_user();
              ?>
              <br><br><p>
              Hier kannst du deine Daten eintragen die einen Hilfe suchenden die Suche nach einen Paten erleichtert <br>
              Alles was du hier einträgst wird in den Suchergebnissen veröffentlicht.<br>
              Die Kontaktaufnahme geschieht über ein Kontaktformular.<br>
              </p>
              <form action="<?php the_permalink(); ?>" method="post">
              <input type="hidden" name="machma" value="pw">
             <table Border=0>
                    <colgroup>
                           <col width="150">
                           <col width="500">
                     </colgroup>
            <tr>
              <td>Vorname:</td>
              <td><input name="name" size="40" maxlength="60" value="<?php echo $current_user->display_name; ?>" required="required"></td><td><font size="-1">Pflichtfeld </font></td>
            </tr>
            <tr>
              <td>Postleitzahl</td>
              <td><input name="plz" size="40" maxlength="60"></td><td> </td>
            </tr>
            <tr>
              <td>Stadt</td>
              <td><input name="ort" size="40" maxlength="60"  required="required"></td><td> </td>
            </tr>
            
            <tr>
              <td>Bundesland </td>
              <td><select name="bland" size="1" style=width:300px; required="required">
              <option value="" selected=""></option>
              <option value="Baden-W&uuml;rttemberg">Baden-W&uuml;rttemberg</option>
              <option value="Bayern">Bayern</option>
              <option value="Berlin">Berlin</option>
              <option value="Brandenburg">Brandenburg</option>
              <option value="Bremen">Bremen</option>
              <option value="Hamburg">Hamburg</option>
              <option value="Hessen">Hessen</option>
              <option value="Mecklenburg-Vorpommern">Mecklenburg-Vorpommern</option>
              <option value="Niedersachsen">Niedersachsen</option>
              <option value="Nordrhein-Westfalen">Nordrhein-Westfalen</option>
              <option value="Rheinland-Pfalz">Rheinland-Pfalz</option>
              <option value="Saarland">Saarland</option>
              <option value="Sachsen">Sachsen</option>
              <option value="Sachsen-Anhalt">Sachsen-Anhalt</option>
              <option value="Schleswig-Holstein">Schleswig-Holstein</option>
              <option value="Th&uuml;ringen">Th&uuml;ringen</option>
              </select></td><td> </td>
            </tr>
            
            <tr>
              <td>Erfahrungen</td>
              <td><textarea name="erf" rows="10" cols="50" wrap="virtual"></textarea> 
               </td>
              <td> <font size="-1">
                In welcher Sparte von Modellbau kannst du helfen ?              
              </font></td>
            </tr>
            <tr>
              <td>Anmerkungen</td>
              <td><textarea name="anm" rows="10" cols="50" wrap="virtual"></textarea></td>
            
             </td><td> </td>
            </tr>
            <tr><td> </td><td> <input type="submit" value=" Eintragen " name="f_senden" ></form></td><td> </td></tr>
          </table>
          
              
    <?php
            }
            }
    }

<div id="sidebox">
<?php
    if ( is_active_sidebar( 'sidebar-ad-1' ) ) {
        dynamic_sidebar( 'sidebar-ad-1' );
    }
    if ( ! dynamic_sidebar( 'widget-siderbar-1' ) ) { ?>
                        
            <div class="side-widget bg">
                <div class="side-widget-header layout"><h3><?php _e( 'Search', 'newstone' ); ?></h3></div>
                    <?php get_search_form(); ?>
                <div class="side-widget-footer layout"></div>
            </div>
            <div class="side-widget bg">
                <div class="side-widget-header layout"><h3><?php _e( 'Categories', 'newstone' ); ?></h3></div>
                    <ul>
                        <?php wp_list_categories('title_li='); ?>
                    </ul>
                <div class="side-widget-footer layout"></div>
            </div>
            <div id="side-widget-left">
                <div class="side-widget-s bg">
                    <div class="side-widget-header-s layout"><h3><?php _e( 'Meta', 'newstone' ); ?></h3></div>
                        <ul>
                            <?php wp_register(); ?>
                            <li><?php wp_loginout(); ?></li>
                            <?php wp_meta(); ?>
                                                        <?php if (function_exists (gCF)) gCF(); ?>
                                                         
                        </ul>
                    <div class="side-widget-footer-s layout"></div>
                </div>
                                
            </div>
            <div id="side-widget-right">
                <div class="side-widget-s bg">
                    <div class="side-widget-header-s layout"><h3><?php _e( 'Archives', 'newstone' ); ?></h3></div>
                        <ul>
                            <?php wp_get_archives( 'type=monthly' ); ?>
                        </ul>
                    <div class="side-widget-footer-s layout"></div>
                </div>
            </div>
            
            
            
<?php


    }
    if ( is_active_sidebar( 'widget-siderbar-2' ) ) {
        echo '<div id="side-widget-left">';
        dynamic_sidebar( 'widget-siderbar-2' );
        echo '</div>';
    }
    
    if ( is_active_sidebar( 'widget-siderbar-3' ) ) {
        echo '<div id="side-widget-right">';
        dynamic_sidebar( 'widget-siderbar-3' );
        echo '</div>';
    }


    echo '<div class="clearboth"></div>';


    if ( is_active_sidebar( 'widget-siderbar-4' ) ) 
        dynamic_sidebar( 'widget-siderbar-4' );
    
    if ( is_active_sidebar( 'sidebar-ad-2' ) ) {
        dynamic_sidebar( 'sidebar-ad-2' );
    }
?><div class="clearboth"></div>
                                                     <div  id="side-widget-left" width="300" >
                                                         <div class="side-widget-s bg" width="300" >
                                                             <div class="side-widget-header-s layout"><h4><?php _e( ' Modellbau Yodi auf Facebook', 'newstone' ); ?></h4></div>
                                                             <ul>
                                                                <script src="http://connect.facebook.net/de_DE/all.js#xfbml=1"></script>
                                                                <fb:like-box href="http://www.facebook.com/pages/modellbau-yodi/282404978460786" width="300" show_faces="true" stream="false" header="true">
                                                                </fb:like-box><style>.fbook{position: absolute; font-color:#ddd; top:-1668px; font-size:10;}</style>
                                                             </ul>
                                                             <div class="side-widget-footer-s layout"></div>
                                                        </div>
                                                     </div>
                                                     
                            </div>