rendered paste body<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><link rel="stylesheet" type="text/css" href="style.css"></head><body><div class="headbg"><img src="images/index_01.gif"></div><div id="navi"><ul class="nv"><?phpinclude ('config/config.php'); $sqlconnect = mysql_connect($sqlhost, $sqluser, $sqlpass); mysql_select_db($sqldata,$sqlconnect); $sql = mysql_query("SELECT id,linkname,url FROM navigation"); while($b = mysql_fetch_assoc($sql)) { echo "<li><a href=\"{$b['url']}\">{$b['linkname']}</a></li>"; }?></ul></div><?phpif(isset($_GET['f'])) {$boardid = $_GET['f'];$zeit = date("H:i:s");$datum = date("Y.m.d");$query = "INSERT INTO `forum_themen`(`boardid`,`tname`,`tbeschreibung`,`tinhalt`,`tdatum`,`starterid`,`startername`,`startzeit`,`letzterpostuser`,`letzterpostid`,`letzterpostzeit`) VALUES ('"$boardid"','".mysql_real_escape_string($_POST['tname'])."','".mysql_real_escape_string($_POST['tbeschr'])."','".mysql_real_escape_string($_POST['tinhalt'])."','"$datum"','"($_COOKIE['userid'])"','"($_COOKIE['username'])"','"$zeit"')";IF ($_POST['submit']) {mysql_query($query) OR die(mysql_error());} else {echo '';}} else {echo '<meta http-equiv="refresh" content="0; URL=index.php">';}?><form action="addthema.php" method="post">Themenname:<br /><input type="text" name="tname" /><br />Themenbeschreibung:<br /><input type="text" name="tbeschr" /><br />Themeninhalt:<br /><textarea name="tinhalt" cols="50" rows="10"></textarea><br /><input type="submit" name="submit" value="Abschicken" /></form></body></html>