// =================================================================== // START CONFIGURATION $database = 'database-001'; // Your TXT file xinming as database. $per_page = 7; // The number of items you want to display per page. $time_zone = 'America/New_York'; // 设置为纽约时区 $max_length_xinming = 60; // Maximum character length for guest xinming $max_length_url = 120; // Maximum character length for guest URL $max_length_liuyan = 1000; // Maximum character length for guest liuyan $liuyans = array( 'database_missing' => 'Database not found. Created one. Please reload the page.', 'xinming_missing' => 'Please enter your xinming.', 'liuyan_missing' => 'Please enter your liuyan.', 'math_invalid' => 'Wrong math answer.', 'max_length_xinming' => 'Maximum character length for guest xinming is ' . $max_length_xinming, 'max_length_liuyan' => 'Maximum character length for guest liuyan is ' . $max_length_liuyan, 'no_content' => 'No content.' ); // END CONFIGURATION // Set default timezone to adjust the timestamp. date_default_timezone_set($time_zone); // Functions to create and/or update the content of the TXT file (our database) function create_or_update_file($file_path, $data) { $handle = fopen($file_path, 'w') or die('Cannot open file: ' . $file_path); fwrite($handle, $data); } // Filter HTML outputs. function filter_html($data) { return preg_replace( array( '/<(\/?)(b|blockquote|br|em|i|ins|mark|q|strong|u)>/i', // Allowed HTML tags '/<center>/', // Deprecated tag '/<\/center>/', // Deprecated tag '/&([a-zA-Z]+|\#[0-9]+);/' // Symbols ), array( '<$1$2>', '', '&$1;' ), $data); } // Redefine database xinming via URL to load if(isset($_GET['data'])) { $database = $_GET['data']; } if( ! file_exists($database . '.txt')) { if( ! isset($_GET['data'])) { create_or_update_file($database . '.txt', ""); echo "

" . $liuyans['database_missing'] . "

"; } return false; } else { $old_data = file_get_contents($database . '.txt'); } /** * Post a liuyan */ if($_SERVER['REQUEST_METHOD'] == 'POST') { // 添加防重复提交保护 if(isset($_SESSION['last_submit_time']) && time() - $_SESSION['last_submit_time'] < 10) { // 10秒内不能重复提交 echo "

请不要频繁提交留言

"; } else { $xinming = ""; $liuyan = ""; $timestamp = date('U'); if(isset($_POST['xinming']) && !empty($_POST['xinming'])) { $xinming = strip_tags($_POST['xinming']); } if(isset($_POST['liuyan']) && !empty($_POST['liuyan'])) { $liuyan = preg_replace( array( '/[\n\r]{4,}/', '/\n/', '/[\r\t]/', '/ {2}/', '/  |  /', '/(.*?)<\/a>/i' ), array( '

', '
', '', '  ', '  ', '$6' ), $_POST['liuyan']); $liuyan = htmlentities($liuyan, ENT_QUOTES, 'UTF-8'); } if($xinming && $liuyan) { // 添加验证码检查 if(!isset($_POST['math']) || $_POST['math'] != $_SESSION['math']) { echo "

验证码错误

"; } else { try { $new_data = $xinming . "\n" . $liuyan . "\n" . $timestamp; if(!empty($old_data)) { create_or_update_file($database . '.txt', $new_data . "\n\n==\n" . $old_data); } else { create_or_update_file($database . '.txt', $new_data); } $_SESSION['last_submit_time'] = time(); // 直接显示成功消息而不是重定向 echo "

sent!

"; // 清空表单数据 $_SESSION['guest_xinming'] = ""; $_SESSION['guest_liuyan'] = ""; // 清空 POST 数据，确保表单显示为空 $_POST['xinming'] = ""; $_POST['liuyan'] = ""; // 重新读取数据库内容以显示包括新提交内容的留言列表 $old_data = file_get_contents($database . '.txt'); // 在提交成功后添加 echo ""; } catch (Exception $e) { // 记录错误但不显示给用户 error_log('留言保存失败: ' . $e->getMessage()); echo "

wait

"; } } } else { if(empty($xinming)) { echo "

name?

"; } if(empty($liuyan)) { echo "

empty??

"; } } } } // 显示提交成功消息 if(isset($_SESSION['liuyan_success'])) { echo "

send~

"; unset($_SESSION['liuyan_success']); // 清除标志，防止刷新时重复显示 } $_SESSION['guest_xinming'] = isset($_POST['xinming']) ? $_POST['xinming'] : ""; $_SESSION['guest_liuyan'] = isset($_POST['liuyan']) ? htmlentities($_POST['liuyan'], ENT_QUOTES, 'UTF-8') : ""; // Math challenge to prevent spam robot. $x = mt_rand(1, 10); $y = mt_rand(1, 10); if($x - $y > 0) { $math = $x . ' - ' . $y; $_SESSION['math'] = $x - $y; } else { $math = $x . ' + ' . $y; $_SESSION['math'] = $x + $y; } /** * Show the existing data. */ $data = file_get_contents($database . '.txt'); $current_page = isset($_GET['page']) ? $_GET['page'] : 1; $nav = ""; if( ! empty($data)) { $data = explode("\n\n==\n", $data); $total_pages = ceil(count($data) / $per_page); if($total_pages > 1) { for($i = 0; $i < $total_pages; $i++) { if($current_page == ($i + 1)) { $nav .= " " . ($i + 1) . ""; } else { $nav .= " " . ($i + 1) . ""; } } } for($i = 0; $i < count($data); $i++) { $item = explode("\n", $data[$i]); // 确保时间戳索引存在且是有效数字 $timestamp = isset($item[2]) && is_numeric($item[2]) ? $item[2] : time(); if(isset($_GET['guest']) && preg_match('/[0-9]+/', $_GET['guest'])) { if($timestamp == $_GET['guest']) { echo " \n"; } } else { if($i <= ($per_page * $current_page) - 1 && $i > ($per_page * ($current_page - 1)) - 1) { echo " \n"; } } } } else { echo " \n"; } ?>