<?
include './sql.inc';

$headers .= "From: Guest Book $webaddr <$mailfrom>\n";
$headers .= "Return-Path: <$mailfrom>\n";
$headers .= "X-Sender: <$mailfrom>\n";
$headers .= "X-Priority: 1\n";

if ($Web=="http://") $Web="";

if (stristr($Mail, "@yahoo.com") || stristr($Comment, "<a href") \
    || stristr($Comment, "http:") || stristr($Comment, "[url") || stristr($Comment, "@"))
{
#  mail("$mailto","Novy SPAM na $webaddr - $Person - $Mail - $Web - ".$_SERVER['REMOTE_ADDR'],$Comment, $headers);*/
 	die("Nepovoleny obsah knihy hostu / Invalid guestbook entry");
}

if (!stristr($kontrola,"2009") && $Person!="" && $Comment!="")
 	die("Nepovoleny obsah knihy hostu / Invalid guestbook entry");

$Person=strip_tags($Person);
$Mail=strip_tags($Mail);
$Web=strip_tags($Web);
$Comment=strip_tags($Comment);

if($Person!="" && $Comment!="")
{
  mysql_query("INSERT INTO fa_guestbook (date,person,mail,web,comment,ip) VALUES (NOW(),'$Person','$Mail','$Web','".nl2br($Comment)."','".$_SERVER['REMOTE_ADDR']."')");
  mail("$mailto","Novy prispevek na $webaddr - $Mail",$Comment, $headers);
}

header("Location: http://$webaddr/index.php?sek=17");
?>