DoorsignEPD/server/harry-talk.php at c406d72187d8a80e9bb6f10a7fe647f8b83dca52 · jamct/DoorsignEPD · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
<html lang="en-EN">
<head>
<title>Doorsign</title>
</head>
<body>
     <h1>Let Harry speak!</h1>
<?php
// list of bad words - 'feel like a little dictator' option
// don't remove '/;/' from filtering list or evil things might
// happen to your dictatorship uhm... I mean csv file... ;)
$badWords = array('/\bkim\b/i','/fuck/i','/;/');

if (!isset($_GET['submess']) || !isset($_GET['name']))  {
    print("<p>Write your message here and let Harry Hamster speak! You have 52 characters.</p>
    <form action=\"harry-talk.php\">
        your message:<br><textarea name=\"submess\" rows=\"3\" cols=\"24\" maxlength=\"52\" autofocus required wrap=\"soft\"></textarea><br>
        your name: <input type=\"text\" name=\"name\" maxlength=\"8\" size=\"8\" required><br>
        <input type=\"submit\" value=\"Let Harry speak!\">
    </form>");
}
else {
    $writeout = true;

    // check for length
    if(mb_strlen($_GET['submess']) > 52) {
        print("<p>Message to long</p>");
        $writeout = false;
    }
    if (strlen($_GET['name']) > 8) {
        print("<p>Name to long!</p>");
        $writeout = false;
    }

    // check for to long words
    $words = explode(' ', $_GET['submess']);
    foreach ( $words as $word ) {
        if (mb_strlen( $word ) > 13) {
            print("<p>You are using to long words. The character per word limit is 13.</p>");
            $writeout = false;
        }
    }

    // if everything is fine write message to file
    if ($writeout == true) {

        // some filtering I'm sure I've been missing something...
        $message = trim($_GET['submess']);
        $name = $_GET['name'];
        $message = preg_replace($badWords, "*", $message);
        $message = str_replace(array("\r", "\n"), '', $message);
        $name = preg_replace($badWords, "*", $name);
        $name = str_replace(array("\r", "\n"), '', $name);

        $messinput = file("./contents/harry/messages.txt");
        $fp = fopen("./contents/harry/messages.txt", "w");
        fwrite($fp, $message.";".$name." - ".date("d.m.Y H:i")."\n");
        fwrite($fp, $messinput[0]);
        fwrite($fp, $messinput[1]);
        fclose($fp);
        print("</p>Your message was accepted! Soon it will be shown on the display.</p>");
    }
    else {
        print("<p><a href=\"harry-talk.php\">I try it again!</a></p>");
    }
}

?>
    <h2>display content right now:<h2>
        <img src="index.php?debug=true&content=harry&display=4.2">
    <p>
</body>