added.php at HIOX GuestBook

<!-- (c) copyright 2004, HIOX INDIA 		    -->
<!-- This  is  a free tool provided by hscripts.com -->
<!-- Please get in touch with us for using          -->
<!-- this product in a commercial site.             -->
<html>
<head>
</head>

<?php

$file = "gb.php";
$open = fopen($file, "a");
include 'col.php';
?>

<body style="font-family: Arial,Verdana,san-serif; margin: 0px;" bgcolor=<?php echo($bdcolor);?>>
<table align=center width=80% height=100% cellpadding=0 cellspacing=0 border=1 bgcolor="<?php echo($bxcolor);?>">
<tr height=10% align=center>
<td height=10% align=center background="images/bg2.gif">
<font color=#223356><b>Welcome Guest</b></font>
</td>
</tr>

<tr height=70% align=center>
<td height=70%  align=left style="border-width: 10px;">
<div style="padding-left:20px; font-family: Arial,Verdana,san-serif;">

<?php

echo("<font color=$fontcol>");

$name = $_POST['name'];
$from = $_POST['from'];
$comment = $_POST['comment'];

if($html_enable == "true")
{
    $comment = htmlentities($comment, ENT_QUOTES);
 
}else{
    $comment = strip_tags($comment);
}

//---IP blocker

$rem = "XX".$_SERVER['REMOTE_ADDR'];

include 'ban.php';
  
$ipcheck = true;
  for($aa=0; $aa<count($abc); $aa++)
  {
   $ipa=strpos($rem,$abc[$aa]);
   if($ipa !== false)
    {  
     $ipcheck = false;
     echo ("<div align=center><br><font color=ff000f size=4> Please Contact Your Admin </font><br></div>" );
     break;
    }   
  }   

//---Concat the Text info.

$concat=' '.$name.' '.$from.' '.$comment;
include 'fil.php';

$toadd = true;
for($xx=0; $xx<count($asi); $xx++)
  {
      $find=strpos($concat,$asi[$xx]);
      if($find !== false)
       {
        $toadd = false;
        break;
       }
  }  

//---Message---

$ms = $comment;
$f1 = 'href=';

$tr = str_replace(' ','',$comment);

$pos = strpos($tr,$f1);
   if ($pos == True)
   { 
     echo ("<div align=center><br><font color=red size=6>Access Denied</font><br></div>"); 
   } 
   else
   {

   $comment = ereg_replace("\n", "<br>", $comment);
   $comment = ereg_replace("\r", "", $comment);
   $comment = ereg_replace("\t", "&nbsp;", $comment);
   $date = date("l dS of F Y h:i:s A");
   
//--------------------------------

$ref = $_SERVER['HTTP_REFERER'];
$ser = $_SERVER['HTTP_HOST'];

$host = parse_url($ref);

 if($ser == $host[host] && $toadd == true && $ipcheck == true)
 {
   if($name != "" && $comment != "" )
   {
	fwrite($open, "\n");
	fwrite($open, "<br>");
	fwrite($open, $date);
	fwrite($open, "<br>");
	fwrite($open, "<br>");
	fwrite($open, $name);
	fwrite($open, "<br>");
	fwrite($open, $from);
	fwrite($open, "<br>");
	fwrite($open, "<br>");
	fwrite($open, $comment);
	fwrite($open, "<br><br>");
	fwrite($open, "--&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&*&&--");

	echo("<div align=center><br><font color=green>Thanks for your signature. It has been added in my guest book</font><br></div><br><br>");

	echo($date);
	echo("<br><br>");
	echo($name);
	echo("<br>");
	echo($from);
	echo("<br><br><font color=$fontcol>");
	echo($comment);
	echo("<br></font>");
	echo("</font>");
   }
   else
   {
      echo("please add a proper entry");
   }
 }

 else
 {
   echo ("<div align=center><br><font color=red size=8>Access Denied</font><br></div>");
 }
}

?>
</div>
</td>
</tr>

<tr height=15% align=center>
<td height=15% align=center valign=top background=images/bg2.gif>
<br>
<a href="lookgb.php"><font color=#332266>Look in to My Guest Book</font></a><br>
<div align=right><font size=-1>Tool provided by <a href="http://www.hscripts.com">hscripts.com</a></font></div>
</td></tr>
</table>

</body>
</html>