<?

if ( !defined('KONTROLABLOG') )
{
	
	
	define('KONTROLABLOG', true);


	function admin_log_adv($tekst, $type=0, $link=0,$color=0,$link_title=0)
	{
		$logfile="/blog_logs/".date("Ym").".txt";
	
		$file=fopen($logfile, "a");
		flock($file, 2); 
		fputs($file, "\n".date("G:i:s d-m-Y")."|".$_SERVER['REMOTE_ADDR']."|$tekst|$link|$type|$color|$link_title");
		flock($file, 3); 
		fclose($file);
	}

	function spamer_log($tekst)
	{
	$logfile="/spammers.log";

		$file=fopen($logfile, "a");
		flock($file, 2); 
		fputs($file, "\n".date("Y.m.d G:i:s")."|$tekst");
		flock($file, 3); 
		fclose($file);
	}	
		
		
		//statyczne blokowania

		
	function myexit()
	{	
		spamer_log($_SERVER['REMOTE_ADDR']."|".$_SERVER['REQUEST_URI']."|".gethostbyaddr($_SERVER['REMOTE_ADDR'])."|".$_SERVER['HTTP_USER_AGENT']);
		include "/city_distribute_blog.php";
		exit();
	}


	function ban_and_exit()
	{
		$ip_prawdziwe= $_SERVER['REMOTE_ADDR'];
		$host=gethostbyaddr($ip_prawdziwe);
		
		/*include "/classSpamersBlog.php";
		$spammers = new Spamers();
		admin_log_adv("WWW EATER! $ip_prawdziwe ".$host." (".$_SERVER["HTTP_USER_AGENT"].")", 4, 0, "r");
		$spammers->AddIp($ip_prawdziwe);
		*/
		myexit();
	}


	$ip_prawdziwe = $_SERVER['REMOTE_ADDR'];
	//blokowanie hostow	
	$host=gethostbyaddr($ip_prawdziwe);

	if(stristr($host,"anonymouse")) myexit();
	if(stristr($host,"draculahosting")) myexit();
	if(stristr($host,"pool.ukrtel.net")) myexit();
	if(stristr($host,".hostnoc.net")) myexit();
	if(stristr($host,".keymachine.de")) myexit();
	if(stristr($host,".kimsufi.com")) { header('HTTP/1.1 403 Forbidden'); exit();}
	if(stristr($host,".ecatel.net")) myexit();
	if(stristr($host,"dynamic-pppoe.uch.net")) myexit();
	if(stristr($host,"orange.orange.sk")) myexit();
	//if(stristr($host,"comcast.net")) myexit();
	if(stristr($host,"cssgroup.lv")) myexit();
	if(stristr($host,".altushost.com")) myexit();
	if(stristr($host,"telesp.net.br")) myexit();
	if(stristr($host,"dedicated.hosteurope.de")) myexit();
	if(stristr($host,"proclanhosting.com")) myexit();
	if(stristr($host,"unassigned.psychz.net")) myexit();
	if(stristr($host,".netart.pl")) myexit();
	if(stristr($host,".kimsufi.com")) myexit();
	if(stristr($host,".bezeqint.net")) myexit();

	if(stristr(substr($host, -3, 3),".ru")) myexit();
	if(stristr(substr($host, -3, 3),".tr")) myexit();
	if(stristr(substr($host, -3, 3),".tw")) myexit();
	if(stristr(substr($host, -3, 3),".cn")) myexit();
	if(stristr(substr($host, -3, 3),".ua")) myexit();
	if(stristr(substr($host, -3, 3),".md")) myexit();

	/*trakery stron - blokowanie przegladarek*/
	if (stristr($_SERVER["HTTP_USER_AGENT"], "teleport")) {myexit();} 
	if (stristr($_SERVER["HTTP_USER_AGENT"], "ripper")) {myexit();} 
	if (stristr($_SERVER["HTTP_USER_AGENT"], "offline")) {myexit();}
	if (stristr($_SERVER["HTTP_USER_AGENT"], "HTTrack")) {ban_and_exit();}
	if (stristr($_SERVER["HTTP_USER_AGENT"], "WebZIP")) {myexit();}
	if (stristr($_SERVER["HTTP_USER_AGENT"], "WebCopier")) {ban_and_exit();}
	if (stristr($_SERVER["HTTP_USER_AGENT"], "WebStripper")) {myexit();}  
	if (stristr($_SERVER["HTTP_USER_AGENT"], "deltaSCAN")) {myexit();}

/*
	$spamers=file('/spammers.txt');

	for($i=0; $i<count($spamers); $i++)
	{
		if(substr($ip_prawdziwe,0,strlen(chop($spamers[$i])))==chop($spamers[$i]))
		{
			myexit();

		}
	}
*/
}//define
?>
<? 
include_once "kontrola_blog.php";

function random_string($dlugosc)
{
	$znaki = "123456789abcdefghijklmnopqrstuvwxyz";
	for ($i=0; $i < $dlugosc; $i++)
	{
		$los .= substr($znaki, rand(0, strlen($znaki)-1), 1)."";
	}
	return $los;
}

$blog="";

if(isset($_GET['blog']))
	$blog=strtolower($_GET['blog']);
else if(isset($_POST['blog']))
	$blog=strtolower($_POST['blog']);

if($blog)
{
	$blog=strip_tags(strtolower($blog));

	include 'top.php';


	$action="";
	if(isset($_GET['action']))
		$action=$_GET['action'];

	$mod="";
	if(isset($_GET['mod']))
		$mod=$_GET['mod'];
	elseif(isset($_POST['mod']))
		$mod=$_POST['mod'];

	//jesli zaden konkretny mod, wyswietl startowy bloga
	if (!$mod)
	{

		$ip_prawdziwe = $_SERVER['REMOTE_ADDR'];

		require('scripts/rcb_functions.php');
		$loggedin = rcb_loggedin(false);		

		//zapisywanie statystyk wuswietlen
		if (!$loggedin)
		{
			if (file_exists("config/$blog"."_stat.txt"))
			{
				$ilosc=filesize("config/$blog"."_stat.txt");
				if ($ilosc==999)
				{
					rcb_appendfile("config/$blog"."_statb.txt","-");
					rcb_writefile("config/".$blog."_stat.txt", "");
				}
				else
				{
					rcb_appendfile("config/$blog"."_stat.txt","-");
				}
			}
			else
			{
				rcb_writefile("config/".$blog."_stat.txt", "");
			}
		}
		//koniec statystyki
			
		rcb_printheader();
		rcb_printbodystart();

		rcb_printcontentstart();

		if(isset($_GET['post']))
		{
			if(!rcb_printpost($_GET['post'], $loggedin))
			{
				rcb_printcustompost('Error', "Post $_GET[post] not found.");
				$jeden=1;
			}
		}
		elseif(isset($_GET['y']))
		{
			if(isset($_GET['m']))
			{
				if(isset($_GET['d']))
				{
					if(!rcb_printarchive($loggedin, $_GET['y'], $_GET['m'], $_GET['d']))
						rcb_printcustompost('Error', "No posts for $_GET[y]-$_GET[m]-$_GET[d].");
				}
				elseif(!rcb_printarchive($loggedin, $_GET['y'], $_GET['m']))
					rcb_printcustompost('Error', "No posts for $_GET[y]-$_GET[m].");
			}
			elseif(!rcb_printarchive($loggedin, $_GET['y']))
				rcb_printcustompost('Error', "No posts for $_GET[y].");
		}
		elseif(!rcb_printarchive($loggedin))
			rcb_printcustompost('No posts', 'No posts.');

		if(isset($_GET['post']))
		{
			echo "<div class=\"post\" '><div style='margin-left:10px;margin-right:10px'>\n";
			echo "Comments<BR><BR>";
			$postm = rcb_readfile("data/".$blog."_".$_GET['post'].".txt");
			$partsm = preg_split("/(\r\n|\r|\n)/", $postm, 2);
			$wpise=explode("----+-",$partsm[1]);
			for ($i = 1; $i < count($wpise); $i++) 
			{
				if ($wpise[$i])
				{
					echo "<HR>\n".nl2br($wpise[$i]);
					if ($loggedin)
					{
						echo "<div align=\"right\"><a HREF=\"at.php?blog=$blog&mod=edit&delcom=$i&post=".$_GET['post']."\">delete</A></DIV>";
					}
				}
				
			}
			if (count($wpise)==1)
				echo"No comments";
			echo "<BR><HR><B>Add comment</B>";
			
			rcb_printformstart('edit', 'post', "at.php");
			print "<input TYPE=\"hidden\" name=\"post\" value=\"".$_GET['post']."\"><input TYPE=\"hidden\" name=\"blog\" value=\"$blog\"><input TYPE=\"hidden\" name=\"mod\" value=\"edit\">";
		
			echo "<br/>\n";
			rcb_printforminput('Your nick', 'nick', 'text', 20, "");

			//rcb_printformtextarea('', 'coma', "$coma_form");
			print "<textarea name=\"coma\" cols=\"48\" rows=\"8\" wrap=\"soft\"></textarea><br/><br/>\n";

			$kod="";
			for ($i=0; $i < 6; $i++)
			{
				$kod.=random_string(3).",";
			}
			$kod.=random_string(3).",".rand(1,6);
			for ($i=0; $i < 5; $i++)
			{
				$kod.=",".rand(0,6);
			}

			echo "<img SRC=\"obrazblog.php?xyz=$kod\"> &nbsp;<B>przepisz poprawnie kod</B>";
			rcb_printforminput('', 'kodzik', 'hidden', 88, "$kod");
			rcb_printforminput('kod z obrazka', 'fartuch', 'text', 6, "");
	//		rcb_printformbutton('DONT ADD', 'add', 'submit');
			print "&nbsp;&nbsp;";
			rcb_printformbutton('ADD', 'mm', 'submit');
			rcb_printformend();
			echo "</DIV></div>\n";
		}
		
		$obramowka= strtoupper($rcb_colors[10]);
		$link=strtoupper($rcb_colors[19]);
		$tlo=strtoupper($rcb_colors[9]);
		$alternatywny=$tlo;
		echo "<div class=\"post\">\n";
		echo "<div class=\"text\" style=\"text-align:center\">\n";
		
		echo "<script type=\"text/javascript\"><!--\n";
		echo "google_ad_client = \"pub-9869058927250426\";\n";
		echo "google_alternate_color = \"$alternatywny\";\n";
		echo "google_ad_width = 468;\n";
		echo "google_ad_height = 60;\n";
		echo "google_ad_format = \"468x60_as\";\n";
		echo "//2007-01-07: blog e-ang\n";
		echo "google_ad_channel =\"8045553185\";\n";
		echo "google_color_border = \"$tlo\";\n";
		echo "google_color_bg = \"$tlo\";\n";
		echo "google_color_link = \"$link\";\n";
		echo "google_color_url = \"000000\";\n";
		echo "google_color_text = \"333333\";\n";
		echo "//--></script>\n";
		echo "<script type=\"text/javascript\"\n";
		echo "  src=\"http://pagead2.googlesyndication.com/pagead/show_ads.js\">\n";
		echo "</script>\n";
		
		echo "</div></div>\n";
		
		echo "<div class=\"post\">\n";
		echo "<div class=\"text\" style=\"text-align:left\">\n";
		print "This is english blog. User $nazwausera writes in english. If you would like to have blog like this, you can register your own for free.";
		print '<center><a HREF="http://www.blog.e-ang.pl">Register your own english blog</A><BR></CENTER>';
		print '<a HREF="http://www.e-ang.pl/" title="Angielski">Język angielski</a> <a HREF="http://www.e-ang.pl/Matura.html" title="matura z angielskiego">matura z angielskiego</a>  <a HREF="http://www.e-ang.pl/Gramatyka.html" title="angielski gramatyka">Gramatyka angielska</a>';
		echo "</div></div>\n";	
			
			
		rcb_printcontentend();
		
		if(isset($_GET['y']))
		{
			if(isset($_GET['m']))
			{
				if(isset($_GET['d']))
					rcb_printnav($loggedin, $_GET['y'], $_GET['m'], $_GET['d']);
				else
					rcb_printnav($loggedin, $_GET['y'], $_GET['m']);
			}
			else rcb_printnav($loggedin, $_GET['y']);
		}
		else
			rcb_printnav($loggedin);
		rcb_printbodyend();
		print '<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">'.
		'</script>'.
		'<script type="text/javascript">'.
		'_uacct = "UA-461865-2";'.
		'urchinTracker();'.
		'</script>';

	}
	// konkretny mod
	else
	{
		if(file_exists("$mod.php"))
			include "$mod.php";
		else
			die("Module Error");
		
		include 'end.php';
	}

}
else
{
	die("User Error!");
}
?>