rendered paste body<?php
require("connect.php");
if($_POST['Sendmessage'])
{
$input_username = $_POST['username'];
$input_message = $_POST['sendmessage'];
$select = mysql_query("SELECT username FROM messages");
$username = $select;
$select_message = mysql_query("SELECT message FROM messages");
$message = $select_message;
if($input_username == "" || $input_message == "")
{
echo "Please enter a username and message before submitting.";
}
else if($input_username == "admin" || $input_username == "livelonger87" || $input_username == "Admin" || $input_username == "Livelonger87")
{
echo "Username cannot be the same as the site admins.";
}
else
{
$insert_username = mysql_query("INSERT INTO messages (username, message) VALUES ('$input_username', '$input_message')");
if(!$insert_username)
{
echo "An error occured whilst attempting to send your message. Please try again.";
}
else
{
echo "Thank you for submitting a message.";
}
}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Messenger test</title>
</head>
<body>
<form id="sendmessage" name="sendmessage" method="post" action="message.php">
<label>Username:
<input type="text" name="username" id="username" />
<br />
<br />
Send message: <br />
<textarea name="sendmessage" cols="100" rows="2" id="sendmessage"></textarea>
</label>
<p>
<label>
<input type="submit" name="Sendmessage" id="Sendmessage" value="Send" />
</label>
</p>
<p>*Note: Please refresh the page to recieve a message.</p>
<p> </p>
<p><strong>Messages recieved:</strong></p>
<p> </p>
<p> </p>
<p> </p>
</form>
<?php
while ($username_row = mysql_fetch_array($select))
{
echo $username_row;
}
?>
<p> </p>
</body>
</html>
<?php
mysql_close($con)
?>