Mine

<?php
#   Copyright by: www.dastiac.de.gg
#   Support: www.ilch.de


defined ('main') or die ( 'no direct access' );
defined ('USERDetails') or die ( 'no direct access' );

$tpl = new tpl ( 'user/usergb' );
$uid = $menu->get(2);
$aktMenu = escape($menu->get(3),'integer');

$abf1323 = 'SELECT * FROM prefix_user WHERE id = "'.$uid.'"';
$erg1323 = db_query($abf1323);
$name = db_fetch_assoc($erg1323);

$tpl = new tpl ( 'user/usergb' );
$uid = $menu->get(2);
$aktMenu = escape($menu->get(3),'integer');
 if(!$menu->get(4))$menu->set('view',4);
  $users = '';
  $uquery = db_query("SELECT name FROM prefix_user");
  while ($uds = db_fetch_object($uquery)) {
    $username = $uds -> name;
    if (!empty($users)) $users = $users.', ';
    $users = $users.'"'.$username.'"';
    }

$ar74 = array(
               'DATE' => $row['date'],
               'NICKNAME' => $row['name'],
               'TXT' => bbcode($row['txt']),
               'HOMEPAGE' => $homepage,
               'EMAIL' => $email,
               'uname' => $_SESSION['authname'],
               'USERS' => $users,
               'UID' => $uid,
               'DEL' => $del,
               'AKTMENU' => $aktMenu
             );

$tpl->set_ar_out($ar74,0);

##VIEW

if($menu->get(4) == "view") {

$limit = 5;  // Limit
$page = ($menu->getA(5) == 'p' ? $menu->getE(5) : 1 );
$MPL = db_make_sites ($page , "" , $limit , "index.php?user-details-$uid-$aktMenu-view" , 'usergb' );
$anfang = ($page - 1) * $limit;
$abf = "SELECT * FROM `prefix_usergb` WHERE uid = $uid ORDER BY id DESC LIMIT $anfang, $limit";
$erg = db_query($abf);

while(@$row = db_fetch_assoc($erg))
    {
if(substr($row['page'],0,7) == "http://") {
$homepage = '<a href="'.$row['page'].'" target="_blank"><img src="include/images/icons/page.gif" border="0"></a>';
} else {
$homepage = '<a href="http://'.$row['page'].'" target="_blank"><img src="include/images/icons/page.gif" border="0"></a>';
}
if($row['mail'] == "") {
$email = '';
} else {
$email = '<a href="mailto:'.$row['mail'].'"><img src="include/images/icons/mail.gif" border="0"></a>';
}
if(is_admin() || $uid == $_SESSION['authid']) {
$del = '<a href="?user-details-'.$uid.'-'.$aktMenu.'-del-'.$row['id'].'"><img src="include/images/icons/del.gif" border="0"></a>';
} else {
$del = '';
}

$ar2 = array(
               'DATE' => $row['date'],
               'NICKNAME' => $row['name'],
               'TXT' => bbcode($row['txt']),
               'HOMEPAGE' => $homepage,
               'EMAIL' => $email,
               'UID' => $uid,
               'AKTMENU' => $aktMenu,
               'DEL' => $del
               );

$tpl->set_ar_out($ar2,1);
}
$tpl->set_out('SITELINK', $MPL, 2);
}

##ADD


if($menu->get(4) == "add") {

$class = ( $class == 'Cmite' ? 'Cnorm' : 'Cmite' );
$ar3 = array(
            'CLASS' => $class,
            'UID' => $uid,
            'AKTMENU' => $aktMenu,
			'ANTISPAM' => get_antispam ('usergb', 1)
            );
$tpl->set_ar_out($ar3,3);
}




## INSERT


if($menu->get(4) == "insert") {

if($_POST['email'] == "" || $_POST['nick'] == "" || $_POST['txt'] == "") {
$link = "index.php?user-details-$uid-$aktMenu-add";
$text = "Bitte alle Pflichtfelder ausfüllen!";
wd ($link, $text);
} else {
if(chk_antispam ('usergb')) {
$date = date("d.m.Y", time());
$ip = $_SERVER['REMOTE_ADDR'];
$bet = "Neuer Eintrag in deinem Gästebuch!";
$txt = "Hallo $name[name], es hat jemand in dein Gästebuch geschrieben.
        Klicke auf den Link um direkt dorthin zu kommen: [url=?user-details-$uid-$aktMenu-view]Link[/url]";
sendpm(1, $uid, $bet, $txt);
# $txt = escape($_POST['txt'], 'textarea');
# $name = escape($_POST['name'], 'string');
# $mail = escape($_POST['mail'], 'string');
# $page = escape($_POST['page'], 'string');
$ins = db_query("INSERT INTO `prefix_usergb` (name, mail, page, uid, date, ip, txt) VALUES ('".$_POST['nick']."', '".$_POST['email']."', '".$_POST['homepage']."', '".$uid."', '".$date."', '".$ip."', '".$_POST['txt']."')");
if($ins == true) {
$link2 = "index.php?user-details-$uid-$aktMenu-view";
$text2 = "Erfolgreich eingetragen!";
wd ($link2, $text2);
} else {
echo mysql_error();
}
} else {
$antitxt = "Anti-Spam nicht korrekt!";
$antilink = "index.php?user-details-$uid-$aktMenu-add";
wd ($antilink, $antitxt);
}
}
}
## DELETE
if($menu->get(4) == "del") {
$pid = escape($menu->get(5),'integer');
$delete = "DELETE FROM `prefix_usergb` WHERE id = ".$pid." LIMIT 1";
$erg = db_query($delete);

$link3 = "index.php?user-details-$uid-$aktMenu-view";
$text3 = "Eintrag gel&ouml;scht!";
wd ($link3, $text3);
}


?>