<?php
//啟動 Session
if (!isset($_SESSION)) {
  session_start();
}
//若表單送出時即先檢查驗證碼
if(isset($_POST['security_code'])){
	if(($_SESSION['security_code'] != $_POST['security_code'])||(empty($_SESSION['security_code']))){
		header("Location: ?auth=false");
		break;
	}
}
?>
<?php require_once('Connections/CCOM.php'); ?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  if (PHP_VERSION < 6) {
    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
  }

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
  $insertSQL = sprintf("INSERT INTO board (boardname, boardsex, boardsubject, boardtime, boardmail, boardweb, boardcontent) VALUES (%s, %s, %s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['boardname'], "text"),
                       GetSQLValueString($_POST['boardsex'], "text"),
                       GetSQLValueString($_POST['boardsubject'], "text"),
                       GetSQLValueString($_POST['boardtime'], "date"),
                       GetSQLValueString($_POST['boardmail'], "text"),
                       GetSQLValueString($_POST['boardweb'], "text"),
                       GetSQLValueString($_POST['boardcontent'], "text"));

  mysql_select_db($database_CCOM, $CCOM);
  $Result1 = mysql_query($insertSQL, $CCOM) or die(mysql_error());

  $insertGoTo = "board.php";
  if (isset($_SERVER['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $_SERVER['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $insertGoTo));
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>


<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link href="style.css" rel="stylesheet" type="text/css" />
<script type="text/JavaScript">
<!--
function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function YY_checkform() { //v4.65
//copyright (c)1998,2002 Yaromat.com
  var args = YY_checkform.arguments; var myDot=true; var myV=''; var myErr='';var addErr=false;var myReq;
  for (var i=1; i<args.length;i=i+4){
    if (args[i+1].charAt(0)=='#'){myReq=true; args[i+1]=args[i+1].substring(1);}else{myReq=false}
    var myObj = MM_findObj(args[i].replace(/\[\d+\]/ig,""));
    myV=myObj.value;
    if (myObj.type=='text'||myObj.type=='password'||myObj.type=='hidden'){
      if (myReq&&myObj.value.length==0){addErr=true}
      if ((myV.length>0)&&(args[i+2]==1)){ //fromto
        var myMa=args[i+1].split('_');if(isNaN(parseInt(myV))||myV<myMa[0]/1||myV > myMa[1]/1){addErr=true}
      } else if ((myV.length>0)&&(args[i+2]==2)){
          var rx=new RegExp("^[\\w\.=-]+@[\\w\\.-]+\\.[a-z]{2,4}$");if(!rx.test(myV))addErr=true;
      } else if ((myV.length>0)&&(args[i+2]==3)){ // date
        var myMa=args[i+1].split("#"); var myAt=myV.match(myMa[0]);
        if(myAt){
          var myD=(myAt[myMa[1]])?myAt[myMa[1]]:1; var myM=myAt[myMa[2]]-1; var myY=myAt[myMa[3]];
          var myDate=new Date(myY,myM,myD);
          if(myDate.getFullYear()!=myY||myDate.getDate()!=myD||myDate.getMonth()!=myM){addErr=true};
        }else{addErr=true}
      } else if ((myV.length>0)&&(args[i+2]==4)){ // time
        var myMa=args[i+1].split("#"); var myAt=myV.match(myMa[0]);if(!myAt){addErr=true}
      } else if (myV.length>0&&args[i+2]==5){ // check this 2
            var myObj1 = MM_findObj(args[i+1].replace(/\[\d+\]/ig,""));
            if(myObj1.length)myObj1=myObj1[args[i+1].replace(/(.*\[)|(\].*)/ig,"")];
            if(!myObj1.checked){addErr=true}
      } else if (myV.length>0&&args[i+2]==6){ // the same
            var myObj1 = MM_findObj(args[i+1]);
            if(myV!=myObj1.value){addErr=true}
      }
    } else
    if (!myObj.type&&myObj.length>0&&myObj[0].type=='radio'){
          var myTest = args[i].match(/(.*)\[(\d+)\].*/i);
          var myObj1=(myObj.length>1)?myObj[myTest[2]]:myObj;
      if (args[i+2]==1&&myObj1&&myObj1.checked&&MM_findObj(args[i+1]).value.length/1==0){addErr=true}
      if (args[i+2]==2){
        var myDot=false;
        for(var j=0;j<myObj.length;j++){myDot=myDot||myObj[j].checked}
        if(!myDot){myErr+='* ' +args[i+3]+'\n'}
      }
    } else if (myObj.type=='checkbox'){
      if(args[i+2]==1&&myObj.checked==false){addErr=true}
      if(args[i+2]==2&&myObj.checked&&MM_findObj(args[i+1]).value.length/1==0){addErr=true}
    } else if (myObj.type=='select-one'||myObj.type=='select-multiple'){
      if(args[i+2]==1&&myObj.selectedIndex/1==0){addErr=true}
    }else if (myObj.type=='textarea'){
      if(myV.length<args[i+1]){addErr=true}
    }
    if (addErr){myErr+='* '+args[i+3]+'\n'; addErr=false}
  }
  if (myErr!=''){alert('The required information is incomplete or contains errors:\t\t\t\t\t\n\n'+myErr)}
  document.MM_returnValue = (myErr=='');
}
//-->
</script>
<script language="javascript" type="text/javascript">
//更換驗證碼圖片
function RefreshImage(valImageId) {
	var objImage = document.images[valImageId];
	if (objImage == undefined) {
		return;
	}
	var now = new Date();
	objImage.src = objImage.src.split('?')[0] + '?width=100&height=40&characters=5&s=' + new Date().getTime();
}
</script>
</head>

<body>
<table border="0" cellpadding="0" cellspacing="0" width="700" align="center">
  <tr>
    <td><table align="left" border="0" cellpadding="0" cellspacing="0" width="700">
      <tr>
        <td><img src="images/digitalBoard_r1_c1.gif" alt="" name="digitalBoard_r1_c1" width="465" height="36" border="0" id="digitalBoard_r1_c1" /></td>
        <td><img src="images/digitalboard_r1_c6.gif" alt="" name="digitalBoard_r1_c5" width="32" height="36" border="0" id="digitalBoard_r1_c5" /></td>
        <td><table align="left" border="0" cellpadding="0" cellspacing="0" width="78">
          <tr>
            <td><img src="images/digitalBoard_r1_c7.gif" alt="" name="digitalBoard_r1_c6" width="78" height="4" border="0" id="digitalBoard_r1_c6" /></td>
          </tr>
          <tr>
            <td><a href="board.php"><img src="images/digitalboard_r2_c7.gif" alt="" name="digitalBoard_r2_c6" width="78" height="27" border="0" id="digitalBoard_r2_c6" /></a></td>
          </tr>
          <tr>
            <td><img src="images/digitalboard_r3_c7.gif" alt="" name="digitalBoard_r3_c6" width="78" height="5" border="0" id="digitalBoard_r3_c6" /></td>
          </tr>
        </table></td>
        <td><img src="images/digitalBoard_r1_c8.gif" alt="" name="digitalBoard_r1_c8" width="32" height="36" border="0" id="digitalBoard_r1_c8" /></td>
        <td><table align="left" border="0" cellpadding="0" cellspacing="0" width="78">
          <tr>
            <td><img src="images/digitalBoard_r1_c9.gif" alt="" name="digitalBoard_r1_c9" width="78" height="4" border="0" id="digitalBoard_r1_c9" /></td>
          </tr>
          <tr>
            <td><a href="post.php"><img src="images/digitalBoard_r2_c9.gif" alt="" name="digitalBoard_r2_c9" width="78" height="27" border="0" id="digitalBoard_r2_c9" /></a></td>
          </tr>
          <tr>
            <td><img src="images/digitalBoard_r3_c9.gif" alt="" name="digitalBoard_r3_c9" width="78" height="5" border="0" id="digitalBoard_r3_c9" /></td>
          </tr>
        </table></td>
        <td><img src="images/digitalBoard_r1_c10.gif" alt="" name="digitalBoard_r1_c10" width="15" height="36" border="0" id="digitalBoard_r1_c10" /></td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td><img src="images/digitalBoard_r4_c1.gif" alt="" name="digitalBoard_r4_c1" width="700" height="28" border="0" id="digitalBoard_r4_c1" /></td>
  </tr>
  <tr>
    <td background="images/digitalBoard_r5_c1.gif"><table width="636" border="0" align="center" cellpadding="0" cellspacing="0">
      <tr>
        <td style="height: 15px"><img src="images/formbox_1.gif" width="636" height="15" /></td>
      </tr>
      <tr>
        <td background="images/formbox_2.gif">&nbsp;
            <table width="99%" border="0" cellpadding="10" cellspacing="0">
              <tr valign="top">
                <td width="80" align="center" class="normaltext"><p><img src="images/talk.gif" width="80" height="80" /></p>
                    <p>我要留言</p></td>
                <td><form action="<?php echo $editFormAction; ?>" method="POST" name="form1" id="form1" onsubmit="YY_checkform('form1','boardsubject','#q','0','請填寫標題。','boardname','#q','0','請填寫姓名。','boardmail','S','2','您的電子郵件信箱格式有誤！','boardcontent','1','1','請填寫留言內容。');return document.MM_returnValue">
                  <table width="100%" border="0" cellpadding="4" cellspacing="1" bgcolor="#999999">
                    <tr valign="baseline">
                      <th width="80" valign="baseline" bgcolor="#FFFFFF" class="normaltext">標題</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><input name="boardsubject" type="text" id="boardsubject" /></td>
                    </tr>
                    <tr valign="baseline">
                      <th width="80" valign="baseline" bgcolor="#FFFFFF" class="normaltext">姓名</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><input name="boardname" type="text" id="boardname" /></td>
                    </tr>
                    <tr valign="baseline">
                      <th valign="baseline" bgcolor="#FFFFFF" class="normaltext">性別</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><input name="boardsex" type="radio" value="male.gif" checked="checked" />
                        男
                        <input name="boardsex" type="radio" value="female.gif" />
                        女</td>
                    </tr>
                    <tr valign="baseline">
                      <th valign="baseline" bgcolor="#FFFFFF" class="normaltext">電子郵件</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><input name="boardmail" type="text" id="boardmail" /></td>
                    </tr>
                    <tr valign="baseline">
                      <th valign="baseline" bgcolor="#FFFFFF" class="normaltext">個人網站</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><input name="boardweb" type="text" id="boardweb" /></td>
                    </tr>
                    <tr valign="baseline">
                      <th valign="baseline" bgcolor="#FFFFFF" class="normaltext">內容</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><textarea name="boardcontent" cols="40" rows="5" id="boardcontent"></textarea></td>
                    </tr>
                    <tr valign="baseline">
                      <th valign="baseline" bgcolor="#FFFFFF" class="normaltext">&nbsp;</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><img src="CaptchaSecurityImages.php?width=100&amp;height=40&amp;characters=5" name="imgCaptcha" id="imgCaptcha" /><a href="javascript:void(0)" onclick="RefreshImage('imgCaptcha')" style="font-size:9pt">更換圖片<br />
                      </a>
                        <input name="security_code" type="text" id="security_code" value="請輸入上方驗證碼" maxlength="10" onfocus="this.value=''" /></td>
                    </tr>
                    <tr valign="baseline">
                      <th valign="baseline" bgcolor="#FFFFFF" class="normaltext">&nbsp;</th>
                      <td valign="baseline" bgcolor="#FFFFFF" class="normaltext"><input type="submit" name="Submit" value="送出" />
                        <input name="boardtime" type="hidden" id="boardtime" value="<?php echo date('Y-m-d H:i:s');?>" /></td>
                    </tr>
                   
                  </table>
                  <input type="hidden" name="MM_insert" value="form1" />
                </form>
                </td>
              </tr>
          </table></td>
      </tr>
      <tr>
        <td><img src="images/formbox_3.gif" width="636" height="20" /></td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td><table width="700" border="0" align="left" cellpadding="0" cellspacing="0" background="images/digitalBoard_r6_c3.gif">
      <tr>
        <td width="15"><img src="images/digitalBoard_r6_c1.gif" alt="" name="digitalBoard_r6_c1" width="15" height="31" border="0" id="digitalBoard_r6_c1" /></td>
        <td width="77"><a href="login.php"><img src="images/digitalBoard_r6_c2.gif" alt="" name="digitalBoard_r6_c2" width="77" height="31" border="0" id="digitalBoard_r6_c2" /></a></td>
        <td align="right"><img src="images/digitalBoard_r6_c5.gif" alt="" name="digitalBoard_r6_c7" width="350" height="31" border="0" id="digitalBoard_r6_c7" /></td>
        <td width="15"><img src="images/digitalBoard_r6_c10.gif" alt="" name="digitalBoard_r6_c10" width="15" height="31" border="0" id="digitalBoard_r6_c10" /></td>
      </tr>
    </table></td>
  </tr>
</table>
</body>
</html>

<?php
include_once "ckeditor/ckeditor.php";
$CKEditor = new CKEditor();
$CKEditor->basePath = 'ckeditor/';
$CKEditor->replace("boardcontent");
?>
