<?php
function escape($s)
{
return htmlspecialchars($s, ENT_QUOTES, 'UTF-8');
}
if (isset($_POST['action'])) {
if ($_POST['action'] === 'add') {
$_POST['title'] = (isset($_POST['title'])) ? (string) $_POST['title']
: '';
$_POST['text'] = (isset($_POST['text'])) ? (string) $_POST['text']
: '';
if (trim($_POST['title']) === '') {
$_POST['title'] = 'leer';
}
if (trim($_POST['text']) === '') {
$_POST['text'] = 'leer';
}
if (get_magic_quotes_gpc()) {
$_POST['title'] = stripslashes($_POST['title']);
$_POST['text'] = stripslashes($_POST['text']);
}
$data = unserialize(file_get_contents('./entries.txt'));
if (!is_array($data)) {
$data = array();
}
$data[] = array('title' => $_POST['title'],
'text' => $_POST['text'],
'date' => time());
file_put_contents('./entries.txt', serialize($data));
}
}
$data = unserialize(file_get_contents('./entries.txt'));
if (!is_array($data)) {
$data = array();
}
header('Content-Type: text/html; charset=UTF-8');
?><!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>New</title>
</head>
<body>
<form method="post" action="">
<p>Titel: <input type="text" name="title" /></p>
<p>Text:</p>
<textarea name="text" cols="60"rows="10"></textarea>
<p><input type="hidden" name="action" value="add" />
<input type="submit" value="Hinzufügen" /></p>
</form>
<hr />
<?php foreach ($data as $entry): ?>
<h1><?php echo escape($entry['title']); ?></h1>
<p><?php echo date('Y-m-d H:i:s', $entry['date']); ?></p>
<p><?php echo nl2br(escape($entry['text'])); ?></p>
<?php endforeach; ?>
</body>
</html>