w moim skrypcie
<?
require_once("backend/functions.php");
dbconn(false);
loggedinonly();
if ($site_config['INVITEONLY']== false){
stdhead("Invite");
begin_frame("Invite");
echo "<BR><BR>Invites are disabled, please use the register link.<BR><BR>"; end_frame();
stdfoot();
}
$res = mysql_query("SELECT COUNT(*) FROM users") or sqlerr
(__FILE__, __LINE__);
if($CURUSER["invites"] == 0)
show_error_msg("Sorry","No invites!");
$mess= unesc($_POST["mess"]);
if (!$mess)
show_error_msg("Error", "You must enter a message!");
if (!mkglobal("email"))
function barkmsg($msg) {
stdhead();
begin_frame("ERROR");
echo "<BR><BR>Invite Failed!<BR><BR>"; end_frame();
stdfoot();
}
if (!validemail($email))
show_error_msg("Error", "That doesn't look like a valid email address.");
// check if email addy is already in use
if ($a[0] != 0)
show_error_msg("Error", "The e-mail address $email is already in use.");
$secret = mksecret();
$editsecret = mksecret();
$ret = mysql_query("INSERT INTO users (username, secret, editsecret, email, status, invited_by, added) VALUES (" . implode(",", array_map("sqlesc", array($username, $secret, $editsecret, $email, 'pending', $CURUSER["id"]))) . ",'" . get_date_time() . "')");
if (!$ret) {
show_error_msg("Error", "Username already exists!");
}
$id2 = $CURUSER["id"];
$invites = $CURUSER["invites"]-1;
$invitees = $CURUSER["invitees"];
$invitees2 = "$id $invitees";
$ret2 = mysql_query("UPDATE users SET invites='$invites', invitees='$invitees2' WHERE id = $id2");
$username=$CURUSER["username"];
$psecret = md5($editsecret); $headers = 'MIME-Version: 1.0' . "r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "r\n";
$siteurl=$site_config['SITEURL'];
$header= $them["header"];
eval($header == "$siteurl = \"$siteurl\";"); $body = "$header";
mail($email, $siteurl, $body, $headers);
header("Refresh: 0; url=account-confirm-ok.php?type=invite&email=" . urlencode($email));
?>
w lini
<?php
$body= "$header"
?>
jest wyswietlany text z mysql
czyli ten;
<b>Zosta
¶e
ś zaproszony do naszej spo
łeczno
ści
</b></td> <td class='fcapend'><img src='".$site_config['SITEURL']."/themes/default/images/blank.gif' alt='' style='display: block;' height='24' width='1'></td> <td class='fcapmain'><img src='".$site_config['SITEURL']."/themes/default/images/blank.gif' alt='' style='display: block;' height='24' width='1'></td> <td class='ftr'><img src=".$site_config['SITEURL']."/themes/default/images/blank.gif' alt='' style='display: block;' height='24' width='9'></td></tr></tbody></table> <table cellpadding='0' cellspacing='0'><tbody><tr><td class='fml'><img src='".$site_config['SITEURL']."/themes/default/images/blank.gif' alt='' style='display: block;' height='8' width='9'></td> <td class='fmmain'>You have been invited to ".$site_config['SITEURL']." by ".$username.". They have
specified this address (".$email.") as your email. If you do not know this person, please ignore this email. Please do not reply.
Message:
-------------------------------------------------------------------------------
".$message."
-------------------------------------------------------------------------------
This is a private site and you must agree to the rules before you can enter:
$siteurl/rules.php
".$site_config['SITEURL']."/faq.php
To confirm your invitation, you have to follow this link:
$siteurl/confirminvite.php?id=".$id."&secret=".$psecret."
After you do this, you will be able to use your new account. If you fail to
do this, your account will be deleted within a few days. We urge you to read
the RULES and FAQ before you start using ".$site_config['SITEURL'].".
<BR><BR></td><td class='fmr'>
<img src=$siteurl/themes/default/images/blank.gif' alt='' style='display: block;' height='8' width='9'>
</td></tr></tbody></table><table cellpadding='0' cellspacing='0'><tbody><tr><td class='fbl'> <img src=$siteurl/themes/default/images/blank.gif' alt='' style='display: block;' height='10' width='9'></td><td class='fbm'> <img src=$siteurl/themes/default/images/blank.gif' alt='' style='display: block;' height='10' width='3'></td><td class='fbr'> <img src=$siteurl/themes/default/images/blank.gif' alt='' style='display: block;' height='10' width='9'></td></tr></tbody></table></td></tr></tbody></table><BR>
Ja chciałbym żeby serwer po popraniu z bazy interpretował php czyli to: $siteurl $site_config['SITEURL']."/