'Guestbook', 'guestbook_id'=> '0', 'entries'=> '5', 'wordcut'=> '25', 'dateformat'=> '%a, %e %b %Y, %H:%M:%S %z', 'gravatar_rating' => 'G', 'gravatar_size' => '20', 'widget_header'=> '

', 'widget_footer'=> '

', 'widget_data'=> '\\r\\nSHOW_NAME\\r\\n\\r\\n
\\r\\nSHOW_MESSAGE\\r\\n
\\r\\n
'); /* check the old HTTP_POST_VARS and new $_POST var */ if(!empty($HTTP_POST_VARS)) { $POSTVARIABLE = $HTTP_POST_VARS; } else { $POSTVARIABLE = $_POST; } $POSTVARIABLE['submit'] = (isset($POSTVARIABLE['submit'])) ? $POSTVARIABLE['submit'] : ''; if ( $POSTVARIABLE['submit'] ) { /* prevent XSS */ $remove_tags="(\||\<\/textarea\>)"; $newoptions['title'] = mysql_real_escape_string(preg_replace("/[[:punct:]]/", "", $POSTVARIABLE['DMSGuestbook_title'])); $newoptions['guestbook_id'] = sprintf("%s", $POSTVARIABLE['DMSGuestbook_guestbook_id']); $newoptions['entries'] = sprintf("%d", $POSTVARIABLE['DMSGuestbook_entries']); $newoptions['wordcut'] = sprintf("%d", $POSTVARIABLE['DMSGuestbook_wordcut']); $newoptions['dateformat'] = mysql_real_escape_string(preg_replace("/[\"\'\`\廄/\\\\]/i", "", $POSTVARIABLE['DMSGuestbook_dateformat'])); $newoptions['gravatar_rating'] = sprintf("%s", $POSTVARIABLE['DMSGuestbook_gravatar_rating']); $newoptions['gravatar_size'] = sprintf("%d", $POSTVARIABLE['DMSGuestbook_gravatar_size']); $newoptions['widget_header'] = mysql_real_escape_string(preg_replace("/$remove_tags/", "", $POSTVARIABLE['DMSGuestbook_widget_header'])); $newoptions['widget_data'] = mysql_real_escape_string(preg_replace("/$remove_tags/", "", $POSTVARIABLE['DMSGuestbook_widget_data'])); $newoptions['widget_footer'] = mysql_real_escape_string(preg_replace("/$remove_tags/", "", $POSTVARIABLE['DMSGuestbook_widget_footer'])); } if ($options != $newoptions) { $options = $newoptions; update_option('widget_dmsguestbook', $options); } global $wpdb; $table_posts = $wpdb->prefix . "posts"; $options0 = get_option('DMSGuestbook_options'); $part3 = explode("", $options0); $part4 = explode("", $part3[1]); $multi_page_id = explode(",", $part4[0]); $dataS = (isset($dataS)) ? $dataS : ''; $data = (isset($data)) ? $data : ''; for($m=0; $mget_results("SELECT ID, post_title FROM $table_posts WHERE ID = $multi_page_id[$m] ORDER BY id ASC"); if($options['guestbook_id'] != $m) { foreach ($query_posts as $result) { $data .= ""; } } else { foreach ($query_posts as $result) { $dataS .= ""; } } } $data = $dataS . $data; echo "" . __("Headline", "dmsguestbook") . "
"; echo '
' . __("This will be shown on top of you widget.", "dmsguestbook") . '

'; echo "" . __("Page id", "dmsguestbook") . "
"; echo '
' . __("Which guestbook would you like to display on your sidebar?", "dmsguestbook") . '

'; echo "" . __("Number", "dmsguestbook") . "
"; echo '
' . __("How many guestbook entries do you want to see on your widget?", "dmsguestbook") . '

'; echo "" . __("Lenght", "dmsguestbook") . "
"; echo '
' . __("Cut message text after X characters.", "dmsguestbook") . '

'; echo "" . __("Date", "dmsguestbook") . "
"; echo '
' . __("Set the date and time format.", "dmsguestbook") . '
' . __("More infos", "dmsguestbook") . ': http://www.php.net/manual/en/function.strftime.php

'; echo "" . __("Gravatar rating & Gravatar size", "dmsguestbook") . "
"; echo ' pixel

'; echo __("More infos", "dmsguestbook") . ": HTML & CSS
" . __("Don't forget to close all tags!", "dmsguestbook") . "

"; echo " " . __("Default", "dmsguestbook") . " | " . __("Example", "dmsguestbook") . " #1 | " . __("Example", "dmsguestbook") . " #2 | " . __("Example", "dmsguestbook") . " #3 | " . __("Example", "dmsguestbook") . " #4 | " . __("Example", "dmsguestbook") . " #5

"; echo "" . __("Header", "dmsguestbook") . "
"; echo '
'; echo "" . __("Data", "dmsguestbook") . "
"; echo ""; echo "" . __("Footer", "dmsguestbook") . "
"; echo ""; echo ''; ?>
" . __("Options", "dmsguestbook") . "

LINK1 - " . __("Auto link to a guestbook post", "dmsguestbook") . "
" . __("Example", "dmsguestbook") . ": <a href=\"LINK1\">
" . __("LINK1 is trying to generate a link to guestbook with the \"page_id=id\" statement which is defined under page id.", "dmsguestbook") . "

LINK2 - " . __("Auto link to a guestbook post", "dmsguestbook") . "
" . __("Example", "dmsguestbook") . ": <a href=\"LINK2\">
" . __("LINK2 is trying to generate a link to guestbook with the \"p=id\" statement where is defined under page id.", "dmsguestbook") . "

SHOW_POST - " . __("Link to the guestbook post (manually)", "dmsguestbook") . "
" . __("Example", "dmsguestbook") . " 1: <a href=\"$url/?page_id=" . __("YourGuestbookId", "dmsguestbook") . "&SHOW_POST\">

" . __("Example", "dmsguestbook") . " 2: <a href=\"$url/?p=" . __("YourGuestbookId", "dmsguestbook") . "&SHOW_POST\">

" . __("Example", "dmsguestbook") . " 3: <a href=\"$url/" . __("YourGuestbookPageName", "dmsguestbook") . "/?SHOW_POST\">

" . __("Using SHOW_POST when do you want to connect from an other webpage to your guestbook page, when do you want to define your own path or when do you have problems with LINK1 or LINK2.", "dmsguestbook") . "

SHOW_NR - " . __("Count guestbook entries", "dmsguestbook") . "
" . __("Example", "dmsguestbook") . ": (SHOW_NR)
" . __("Entries will be display in bold.", "dmsguestbook") . "

SHOW_ID - " . __("Show the database unique id", "dmsguestbook") . "
" . __("Example", "dmsguestbook") . ": (SHOW_ID)
" . __("Id will be display in bold.", "dmsguestbook") . "

SHOW_DATE - " . __("Show the date which guestbook post was saved", "dmsguestbook") . "
" . __("Example", "dmsguestbook") . ": SHOW_DATE
" . __("Date will be display in italic.", "dmsguestbook") . "

SHOW_NAME - " . __("Show the visitor name", "dmsguestbook") . "
" . __("Example", "dmsguestbook") . ": SHOW_NAME
" . __("Visitor name will be display underlined.", "dmsguestbook") . "

SHOW_MESSAGE - " . __("Show the guestbook post text") . "
" . __("Example", "dmsguestbook") . ": SHOW_MESSAGE
" . __("The whole guestbook post will be display in font size 9 pixel.", "dmsguestbook") . "

GRAVATAR - " . __("Show gravatar image if available", "dmsguestbook") . "
" . __("Example") . ": " . __("This is my gravatar image") . ": GRAVATAR

"; } /* what you see in the side of your webpage */ function widget_dmsguestbook($args) { extract($args); $options = get_option('widget_dmsguestbook'); $title = str_replace("\\", "", $options['title']); $guestbook_id = $options['guestbook_id']; $entries = $options['entries']; $wordcut = $options['wordcut']; $dateformat = $options['dateformat']; $gravatar_rating = $options['gravatar_rating']; $gravatar_size = $options['gravatar_size']; $header = str_replace("\\", "", str_replace("\\r\\n", "", str_replace("\\n","", str_replace("\\r","", $options['widget_header'])))); $footer = str_replace("\\", "", str_replace("\\r\\n", "", str_replace("\\n","", str_replace("\\r","", $options['widget_footer'])))); $widget_data = str_replace("\\","", str_replace("\\r\\n", "", str_replace("\\n","", str_replace("\\r","", $options['widget_data'])))); $DMSGuestbookWidgetContent = ""; $DMSGuestbookWidgetContent .= "\n"; $DMSGuestbookWidgetContent .= $before_widget . $before_title . $title . $after_title . "
"; global $wpdb; $table_name = $wpdb->prefix . "dmsguestbook"; /* read options, use ASC or DESC */ $options = get_option('DMSGuestbook_options'); $part1 = explode("", $options); $part2 = explode("", $part1[1]); $part3 = explode("", $options); $setlocale = explode("", $part3[1]); $guestbook_id_part1 = explode(",", $guestbook_id); $query = $wpdb->get_results("SELECT id, name, message, date, gravatar FROM $table_name WHERE flag != '1' && guestbook = '" . sprintf("%d", $guestbook_id_part1[0]) . "' && spam = '0' ORDER BY id " . sprintf("%s", $part2[0]) . " LIMIT " . sprintf("%d", $entries) . ""); $DMSGuestbookWidgetContent .= $header; $itemnr=0; $itemnr2=0; foreach ($query as $result) { $itemnr2++; /* rewrite tags */ $url=get_bloginfo('wpurl'); setlocale(LC_TIME, $setlocale[0]); $widget_data0 = str_replace("SHOW_POST", "from=$itemnr&widget_gb_step=1&select=1&widget=1&itemnr=$itemnr2", $widget_data); $widget_data1 = str_replace("SHOW_ID", "$result->id", $widget_data0); $widget_data2 = str_replace("SHOW_NR", $itemnr+1, $widget_data1); $widget_data3 = str_replace("LINK1", $url . "/?page_id=" . $guestbook_id_part1[1] . "&from=$itemnr&widget_gb_step=1&select=1&widget=1&itemnr=$itemnr2", $widget_data2); $widget_data4 = str_replace("LINK2", $url . "/?p=" . $guestbook_id_part1[1] . "&from=$itemnr&widget_gb_step=1&select=1&widget=1&itemnr=$itemnr2", $widget_data3); $widget_data5 = str_replace("SHOW_DATE", strftime($dateformat, $result->date), $widget_data4); $widget_data6 = str_replace("SHOW_NAME", stripslashes(htmlspecialchars($result->name, ENT_QUOTES)), $widget_data5); if($result->gravatar != "") { $widget_data7 = str_replace("GRAVATAR", "", $widget_data6); } else { $widget_data7 = str_replace("GRAVATAR", "", $widget_data6); } $itemnr++; $message = str_replace("[html]", "", $result->message); $message = str_replace("[/html]", "", $message); if($wordcut!=0) { $gbtext = mb_substr(str_replace("\\","",stripslashes(strip_tags($message))), 0, $wordcut) . "..."; } else { $gbtext = strip_tags(str_replace("\\","",$message)); } $widget_data8 = str_replace("SHOW_MESSAGE", stripslashes($gbtext), $widget_data7); $DMSGuestbookWidgetContent .= $widget_data8; } $DMSGuestbookWidgetContent .= $footer; $DMSGuestbookWidgetContent .= $after_widget; $DMSGuestbookWidgetContent .= "\t\n"; echo $DMSGuestbookWidgetContent; } register_sidebar_widget('DMSGuestbook', 'widget_dmsguestbook'); register_widget_control('DMSGuestbook', 'widget_dmsguestbook_control', 600, 800); } add_action('plugins_loaded', 'widget_dmsguestbook_init'); ?>