<?
  require("functions/config.php");
  require("functions/functions.php");
  require("functions/admin.php");
  $_REQUEST['cc'] = intval($_REQUEST['cc']);
  $password = md5($password);
  if($password != $_REQUEST['passwd']) $_REQUEST['passwd'] = md5($_REQUEST['passwd']);
  if($password == $_REQUEST['passwd'])
  {

     if($_REQUEST['delete'] && $_REQUEST['werg'][1])
     {
        $data = loaddata();
        $i = 0;
        foreach($data as $erg)
        {
          $erg = explode("::", $erg);
          $cerg = 0;
          foreach($erg as $terg)
          {
             $tmperg[$cerg] = ($cerg!=0) ? base64_decode($terg) : $terg;
             $cerg++;
          }
          $erg = $tmperg;

             if($_REQUEST['werg'][1] == $erg[1])
             {
               $data[$i] = "";
               echo "Eintrag gelöscht/Entry deleted

";
             }
          $i++;

        }
        adminwdata($data);

     }

     if($_REQUEST['change'])
     {

       $data = loaddata();
       $i = 0;
       foreach($data as $erg)
       {
          $erg = explode("::", $erg);
          $cerg = 0;
          foreach($erg as $terg)
          {
            $tmperg[$cerg] = ($cerg!=0) ? base64_decode($terg) : $terg;
            $cerg++;
          }
          $erg = $tmperg;

          if($_REQUEST['werg'][1]==$erg[1])
          {
            $show = ($_REQUEST['werg'][0] == "on") ? 1 : 0;
            $data[$i] = $show."::".base64_encode($_REQUEST['werg'][1])."::".base64_encode($_REQUEST['werg'][2])."::".base64_encode($_REQUEST['werg'][3])."::".base64_encode(stripslashes($_REQUEST['werg'][4]))."::".base64_encode(stripslashes($_REQUEST['werg'][5]))."::".base64_encode(stripslashes($_REQUEST['werg'][6]))."::".base64_encode(stripslashes($_REQUEST['werg'][7]))."::".base64_encode(stripslashes($_REQUEST['werg'][8]))."::".base64_encode(stripslashes($_REQUEST['werg'][9]));
            echo "Eintrag geändert/Entry changed

";
          }

         $i++;
       }
       adminwdata($data);
     }



     $data = array_reverse(loaddata());
     $table = "";
     $i = 0;
     $st = 0;
     foreach($data as $erg)
     {

       if($i >= $_REQUEST['cc'])
       {
       $entrynum = count($data);
       $erg = explode("::", $erg);
       $cerg = 0;
          foreach($erg as $terg)
          {
             if($cerg == 0)
             {
               $tmperg[$cerg] = ($terg == 1) ? "<input type=checkbox name=\"werg[0]\" checked>anzeigen?" : "<input type=checkbox name=\"werg[0]\">anzeigen?";
             }
             else
               $tmperg[$cerg] = base64_decode($terg);
             $cerg++;
          }
          $erg = $tmperg;
          unset($tmperg);
       $erg[4] = "<input type=\"text\" name=\"werg[4]\" value=\"".$erg[4]."\">";
       $erg[5] = trim($erg[5]);
       $erg[5] = "
Email: <input type=\"text\" name=\"werg[5]\" value=\"".$erg[5]."\">";
       $erg[6] = trim($erg[6]);
       $erg[6] = "
ICQ: <input type=\"text\" name=\"werg[6]\" value=\"".$erg[6]."\">";
       $erg[7] = trim($erg[7]);
       $erg[7] = "
HP: <input type=\"text\" name=\"werg[7]\" value=\"".$erg[7]."\">";
       $erg[8] = "<textarea name=\"werg[8]\" rows=5 cols=60>".$erg[8]."</textarea>";
       $erg[9] = "<textarea name=\"werg[9]\" rows=3 cols=60>".$erg[9]."</textarea>";

       $content = "IP: ".$erg[3]." <input type=hidden name=\"werg[1]\" value=\"".$erg[1]."\">
<hr>".$erg[8]."
<hr>Kommentar: 
".$erg[9]."
<input type=hidden name=\"werg[2]\" value=\"".$erg[2]."\"><input type=hidden name=\"werg[3]\" value=\"".$erg[3]."\"><input type=hidden name=cc value=\"".$_REQUEST['cc']."\"><input type=hidden name=passwd value=\"".$_REQUEST['passwd']."\"><input type=submit name=change value=\"Ändern/Change (Kommentar+Eintrag)\"> <input type=submit name=delete value=\"löschen/delete\">";
       $table .= tplprint("tpl/admtable.tpl", array(
       "NAME" => $erg[4],
       "EMAIL" => $erg[5],
       "ICQ" => $erg[6],
       "HP" => $erg[7],
       "CONTENT" => $content,
       "DATE" => date("d.m.Y", $erg[2]),
       "TIME" => date("H:i", $erg[2]),
       "SHOW" => $erg[0],
       "NUMBER" => ($entrynum-$i)));
       // änderung
       unset($erg);

        if($i == $entries+$_REQUEST['cc']-1) break;
        $st++;
       }
       $i++;
     }

     $mnum = $entrynum;

     $sites = "";
     $i=-$entries;
     $ic = 1;
     while($mnum>0)
     {
       $mnum = $mnum - $entries;
       $i = $i + $entries;
       if($_REQUEST['cc'] == $i) $sites .= "$ic ";
       else $sites .= "<a href=\"gbadmin.php?cc=$i&passwd=".$_REQUEST['passwd']."\">$ic</a> ";
       $ic++;
     }

     $menu = tplprint("tpl/menu.tpl", array(
     "ENTRYNUM" => $entrynum,
     "SITES" => $sites));
     echo tplprint("tpl/admin.tpl", array(
     "ENTRIES" => $table,
     "MENU" => $menu,
     "PASSWORD" => $_REQUEST['passwd']));



  }
  else
  {
    ?>
    <html>
    <head><title>Gästebuch Administration - Guestbook Administration</title></head>
    <body>
    <font size=4>Login:</font>


    <form action=gbadmin.php method=POST>
    Passwort: <input type=password name="passwd"> <input type=submit name="submit" value="Login">
    </form>
    </body>
    </html>
    <?php

  }

?>

...
$password = md5($password); 
  if($password != $_REQUEST['passwd']) $_REQUEST['passwd'] = md5($_REQUEST['passwd']); 
  if($password == $_REQUEST['passwd'])
...

echo $password; //um zu sehen ob das pw gseetzt ist..

$password = md5($password); 

echo $password; //um zu sehen ob das pw gseetzt ist..

echo $_REQUEST['passwd'];

  if($password != $_REQUEST['passwd']) $_REQUEST['passwd'] = md5($_REQUEST['passwd']); 

echo $_REQUEST['passwd'];

  if($password == $_REQUEST['passwd'])