<?php
if($_REQUEST['action'] == 'delete') {
    include 'inc/adminauth.php';
    $loesch = "DELETE FROM bcguest WHERE id = ".$_REQUEST['id'];
    mysql_query($loesch);
    echo '<meta http-equiv="refresh" content="0; url=admin.php">';
} else if($_REQUEST['action'] == 'deladm') {
    include 'inc/adminauth.php';
    $loesch = "DELETE FROM bcguest WHERE id = ".$_REQUEST['id'];
    mysql_query($loesch);
    echo '<meta http-equiv="refresh" content="0; url=admin.php">';
} else if($_REQUEST['action'] == 'verify') {
    include 'inc/adminauth.php';
    $date = mysql_query('SELECT date FROM bcguest WHERE id = "'.$_REQUEST['id'].'"');
    $time = mysql_query('SELECT time FROM bcguest WHERE id = "'.$_REQUEST['id'].'"');
    $name = mysql_query('SELECT name FROM bcguest WHERE id = "'.$_REQUEST['id'].'"');
    $homepage = mysql_query('SELECT homepage FROM bcguest WHERE id = "'.$_REQUEST['id'].'"');
    $email = mysql_query('SELECT email FROM bcguest WHERE id = "'.$_REQUEST['id'].'"');
    $ip = mysql_query('SELECT ip FROM bcguest WHERE id = "'.$_REQUEST['id'].'"');
    $text = mysql_query('SELECT text FROM bcguest WHERE id = "'.$_REQUEST['id'].'"');
    $insert_verify = "INSERT INTO bcguest (date, time, name, homepage, email, text) VALUES ('$date', '$time', '$name', '$homepage', '$email', '$text')";
    $delete_verify = 'DELETE FROM bcguest WHERE id = "'.$_REQUEST['id'].'"';
    mysql_query($insert_verify);
    mysql_query($delete_verify);
    echo $email;
//    echo '<meta http-equiv="refresh" content="0; url=admin.php">';
} else {
    include 'inc/adminauth.php';
    $abfrage = 'SELECT * FROM bcguest ORDER BY id DESC';
    $abfrage = 'SELECT * FROM bcguest ORDER BY id DESC';
    $result = mysql_query($abfrage);
    $result = mysql_query($abfrage);
    echo '<link rel="stylesheet" type="text/css" href="style.css">
    <font size="2"><a href="index.php">Zurück zum Index</a> - <a href="logout.php">Logout</a></font><br>';
    while($row = mysql_fetch_assoc($result)) {
    echo '<script> document.title="Admin-Area";</script><br><div id="Neu"><font size="2">';
    if(strtolower(substr($row['homepage'], 0, 7)) == "http://") {
    echo '<a href="'.$row['homepage'].'"';
    } else {
    echo '<a href="http://'.$row['homepage'].'"';
    }
    echo ' target="_blank">'.$row['name'].'</a> (<a href="http://www.dnsstuff.com/tools/whois.ch?ip='.$row['ip'].'" target="_blank">'.$row['ip'].'</a>) schrieb am '.$row['date'].' um '.$row['time'].' Uhr:<hr>'.$row['text'].'<hr><a href="admin.php?action=deladm&id='.$row['id'].'"><img src="del.gif" alt="Eintrag löschen" border="0"></a> <a href="edit.php?id='.$row['id'].'"><img src="edit.gif" border="0"></a> Homepage: '.$row['homepage'].'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;E-Mail: '.$row['email'].'</font></div>';
    }
    while($row = mysql_fetch_assoc($result)) {
    echo '<br><div id="Eintrag"><font size="2">';
    if(strtolower(substr($row['homepage'], 0, 7)) == "http://") {
    echo '<a href="'.$row['homepage'].'"';
    } else {
    echo '<a href="http://'.$row['homepage'].'"';
    }
    echo ' target="_blank">'.$row['name'].'</a> (<a href="http://www.dnsstuff.com/tools/whois.ch?ip='.$row['ip'].'" target="_blank">'.$row['ip'].'</a>) schrieb am '.$row['date'].' um '.$row['time'].' Uhr:<hr>'.$row['text'].'<hr><a href="admin.php?action=delete&id='.$row['id'].'"><img src="del.gif" alt="Eintrag löschen" border="0"></a> Homepage: '.$row['homepage'].'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;E-Mail: '.$row['email'].'</font></div>';
    }
    echo '<br><meta http-equiv="refresh" content="30; url=admin.php">';
}
?>

</font><br><br><center><font size="1">Powered by: <a href="http://www.******.de.vu/">BCguestbook 2.0</a> made by <a href="mailto:********@gmx.de">Leibi</a><br>
<a href="admin.php">Admin-Area</a></font></center></body>
</html>

<?php
    if ($_REQUEST['action'] == 'login') {
      session_start();

      if(!isset($_SESSION['IP'])) {
    $_SESSION['IP'] = $_SERVER['REMOTE_ADDR'];
      }
      $username = $_POST['username'];
      $passwort = $_POST['passwort'];

      $hostname = $_SERVER['HTTP_HOST'];
      $path = dirname($_SERVER['PHP_SELF']);

      // Benutzername und Passwort werden überprüft
      if ($username == 'Leibi' && $passwort == '*********') {
       $_SESSION['username'] = $username;
       $_SESSION['adminbcsession'] = "verified";

       // Weiterleitung zur geschützten Startseite
       if ($_SERVER['SERVER_PROTOCOL'] == 'HTTP/1.1') {
        if (php_sapi_name() == 'cgi') {
         header('Status: 303 See Other');
         }
        else {
         header('HTTP/1.1 303 See Other');
         }
        }

       header('Location: http://'.$hostname.($path == '/' ? '' : $path).'/admin.php');
       exit;
       }
      }
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="de" lang="de">
 <head>
  <title>Geschützter Bereich</title>
  <link rel="stylesheet" type="text/css" href="style.css">
 </head>
 <body>
<center>
<h1>Login</h1>
 <font size="2">
  <form action="login.php?action=login" method="post">
   Username: <input type="text" name="username" class="field"><br>
   Passwort: <input type="password" name="passwort" class="field"><br>
   <input type="submit" value="Anmelden" class="button">
  </form>
  <br><br><br><br><a href="index.php">Zurück zum Index</a><hr>
  <center><font size="1">Powered by: <a href="http://www.********.de.vu/">BCguestbook 2.0</a> made by <a href="mailto:********@gmx.de">Leibi</a><br>
  <a href="admin.php">Admin-Area</a></font></center>
 </font>
 </body>
</html>

<?php
session_start();
if(!isset($_SESSION['adminbcsession']) || (!($_SESSION['adminbcsession'] == "verified")) && ($_SESSION['IP'] == $_SERVER['REMOTE_ADDR'])) {
    header('Location: login.php');
}

$mysql_host = "localhost";
$mysql_user = "pghh";
$mysql_pass = "*****";
$mysql_data = "pghh";
error_reporting(E_ALL);
$db_link = mysql_pconnect($mysql_host, $mysql_user, $mysql_pass);
mysql_select_db($mysql_data);
?>
<title>www.die-10te.de.vu</title>