ÅçÃÒ½X¥¿¤£¥¿±`,ÅçÃҫᤣ´N¤U­Óexit()´N°±¤U¨Ó,¦b°±¤U¨Ó«e,echo­Ó´X¤UÁ`¦æ?
¬JµM¯à¾É¦V¥t¤@­¶,¹ïªº¾É¨ìA­¶,¿ùªº¾É¨ìB­¶,À³¸Ó...«Ü¦n²z¸Ñ§a?
ÁÙ¬O§Ú»~·|¤FÔ£?

§Ú²q§Aªº¾É¦V¬O¥ÎJAVASCRIPT±±¨îªº¡C

­n¤£µM§Aµ¹ªºµ{¦¡½X§¹¥þ¨S¬Ý¨ì¾É¦V¡C
ÁÙ¬O§APO§¹¾ã¤@ÂIªºµ{¦¡½X¥X¨Ó¬Ý¬Ý¡C³oùبS¿ìªk¬Ý¥X§Aªº­ì¦]¡C

³o¬Ocaptcha³¡¤Àªº
<?php session_start(); if(isset($_POST["captcha"])) { if(($_SESSION['captcha_code'] == $_POST['captcha']) && (!empty($_SESSION['captcha_code'])) ) { //Passed! $captcha_msg="Thank you"; }else{ // Not passed 8-( $captcha_msg="Wrong"; if(isset($_POST["MM_insert"])){ unset($_POST["MM_insert"]); } if(isset($_POST["MM_update"])){ unset($_POST["MM_update"]); } } } class CaptchaImage { var $font = "verdana.ttf"; function hex_to_dec($hexcolor){ //convert hex hex values to decimal ones $dec_color=array('r'=>hexdec(substr($hexcolor,0,2)),'g'=>hexdec(substr($hexcolor,2,2)),'b'=>hexdec(substr($hexcolor,4,2))); return $dec_color; } function generateCode($characters) { /* list all possible characters, similar looking characters and vowels have been removed */ $possible = '123456789'; $code = ''; $i = 0; while ($i < $characters) { $code .= substr($possible, mt_rand(0, strlen($possible)-1), 1); $i++; } return $code; } function CaptchaImage($width='120',$height='30',$characters='6',$hex_bg_color='FFFFFF',$hex_text_color="FF0000",$hex_noise_color="CC0000", $img_file='captcha.jpg') { $rgb_bg_color=$this->hex_to_dec($hex_bg_color); $rgb_text_color=$this->hex_to_dec($hex_text_color); $rgb_noise_color=$this->hex_to_dec($hex_noise_color); $code = $this->generateCode($characters); /* font size will be 60% of the image height */ $font_size = $height * 0.60; $image = @imagecreate($width, $height) or die('Cannot Initialize new GD image stream'); /* set the colours */ $background_color = imagecolorallocate($image, $rgb_bg_color['r'], $rgb_bg_color['g'],$rgb_bg_color['b']); $text_color = imagecolorallocate($image, $rgb_text_color['r'], $rgb_text_color['g'],$rgb_text_color['b']); $noise_color = imagecolorallocate($image, $rgb_noise_color['r'], $rgb_noise_color['g'],$rgb_noise_color['b']); /* generate random dots in background */ for( $i=0; $i<($width*$height)/3; $i++ ) { imagefilledellipse($image, mt_rand(0,$width), mt_rand(0,$height), 1, 1, $noise_color); } /* generate random lines in background */ for( $i=0; $i<($width*$height)/150; $i++ ) { imageline($image, mt_rand(0,$width), mt_rand(0,$height), mt_rand(0,$width), mt_rand(0,$height), $noise_color); } /* create textbox and add text */ $textbox = imagettfbbox($font_size, 0, $this->font, $code); $x = ($width - $textbox[4])/2; $y = ($height - $textbox[5])/2; imagettftext($image, $font_size, 0, $x, $y, $text_color, $this->font , $code); /* save the image */ imagejpeg($image,$img_file); imagedestroy($image); echo "<img src=\"$img_file?".time()."\" width=\"$width\" height=\"$height\" alt=\"security code\" id=\"captchaImg\">"; $_SESSION['captcha_code'] = $code; } } ?>



³o¬O¾ã­Óªí³æ´¡¤J¬ö¿ýªº³¡¤À
<?php if (!isset($_SESSION)) { session_start(); } if (!function_exists("GetSQLValueString")) { function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") { if (PHP_VERSION < 6) { $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue; } $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue); switch ($theType) { case "text": $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL"; break; case "long": case "int": $theValue = ($theValue != "") ? intval($theValue) : "NULL"; break; case "double": $theValue = ($theValue != "") ? doubleval($theValue) : "NULL"; break; case "date": $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL"; break; case "defined": $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue; break; } return $theValue; } } $editFormAction = $_SERVER['PHP_SELF']; if (isset($_SERVER['QUERY_STRING'])) { $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']); } if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "pst")) { $insertSQL = sprintf("INSERT INTO test (dDATE, dNAME, items, `local`, `current`, ima, ip) VALUES (%s, %s, %s, %s, %s, %s, %s)", GetSQLValueString($_POST['time'], "date"), GetSQLValueString($_POST['name'], "text"), GetSQLValueString($_POST['item'], "text"), GetSQLValueString($_POST['local'], "text"), GetSQLValueString($_POST['current'], "text"), GetSQLValueString($_POST['ima'], "text"), GetSQLValueString($_POST['ip'], "text")); mysql_select_db($database_b31_12212597_test, $b31_12212597_test); $Result1 = mysql_query($insertSQL, $b31_12212597_test) or die(mysql_error()); $insertGoTo = "index.php"; if (isset($_SERVER['QUERY_STRING'])) { $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?"; $insertGoTo .= $_SERVER['QUERY_STRING']; } header(sprintf("Location: %s", $insertGoTo)); } mysql_select_db($database_b31_12212597_test, $b31_12212597_test); $query_Recordset1 = "SELECT * FROM test ORDER BY dID DESC"; $Recordset1 = mysql_query($query_Recordset1, $b31_12212597_test) or die(mysql_error()); $row_Recordset1 = mysql_fetch_assoc($Recordset1); $totalRows_Recordset1 = mysql_num_rows($Recordset1); $colname_Recordset2 = "-1"; if (isset($_SESSION['MM_Username'])) { $colname_Recordset2 = $_SESSION['MM_Username']; } mysql_select_db($database_b31_12212597_test, $b31_12212597_test); $query_Recordset2 = sprintf("SELECT * FROM `admin` WHERE ID = %s", GetSQLValueString($colname_Recordset2, "text")); $Recordset2 = mysql_query($query_Recordset2, $b31_12212597_test) or die(mysql_error()); $row_Recordset2 = mysql_fetch_assoc($Recordset2); $totalRows_Recordset2 = mysql_num_rows($Recordset2); $query_Recordset1 = "SELECT * FROM test ORDER BY dID DESC"; $Recordset1 = mysql_query($query_Recordset1, $b31_12212597_test) or die(mysql_error()); $row_Recordset1 = mysql_fetch_assoc($Recordset1); $totalRows_Recordset1 = mysql_num_rows($Recordset1); ?>


¤£ºÞÅçÃÒ¦¨¥\©Î¥¢±Ñ³£¬O
$insertGoTo = "index.php";
¾É¦Vindex.php
³oÃä­n«ç»ò°µ±ø¥ó ¨Ò¦p¥¢±Ñ·|«e©¹ index.php?errMsg=3 ¤§Ãþªº

¬°¤°»ò¦³ºØ,³o¨â­Óµ{¦¡®Ú¥»§¹¥þ¤£¬Û¤zªº·Pı? Orz

captchaªº³¡¥÷,¤£ºÞ¹ï¿ù,°£¤F°T®§¤£¤@¼Ë¥H¥~,­þ¨Óªº¸õ­¶?
$captcha_msg¥Î¨ì­þ¥h¤F?

¥L»¡ªº¸õ­¶¦]¸Ó¬O«ü²Ä¤G¤äµ{¦¡59¦æ¨º­Ó§a¡C

¨ä¹ê§Ú¤]¬Ýªºªá±þ±þ¡C
¦b41~60¦æ³o¬q§Ú¬Ý¤£¤Ó¥X¨Ó³o¬O®³¨Ó°µ¤°»ò¥Îªº¡C

µM«á¤]§ä¤£¨ì¥L¬O¦b­þ°µcaptcha_codeªº§PÂ_¡C
§¹¥þ¤@ÀYÃú¤ô¤¤¡C

¬ÝµÛ Dreamweaver ¥Í¦¨ MM¤j­x ­ì½X¯uªº¯»²Ö¤H

¦Ó¥BÁÙ¬O¤GºØ¨S¦ê±µ°_¨ÓªºªF¦è..

²Â¤èªk¡Aª½±µµ¹¥L¥]°_....

if(isset($_POST["captcha"])) { if(($_SESSION['captcha_code'] == $_POST['captcha']) && (!empty($_SESSION['captcha_code'])) ) { //Passed! $captcha_msg="Thank you"; if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "pst")) { $insertSQL = sprintf("INSERT INTO test (dDATE, dNAME, items, `local`, `current`, ima, ip) VALUES (%s, %s, %s, %s, %s, %s, %s)", GetSQLValueString($_POST['time'], "date"), GetSQLValueString($_POST['name'], "text"), GetSQLValueString($_POST['item'], "text"), GetSQLValueString($_POST['local'], "text"), GetSQLValueString($_POST['current'], "text"), GetSQLValueString($_POST['ima'], "text"), GetSQLValueString($_POST['ip'], "text")); mysql_select_db($database_b31_12212597_test, $b31_12212597_test); $Result1 = mysql_query($insertSQL, $b31_12212597_test) or die(mysql_error()); $insertGoTo = "index.php"; if (isset($_SERVER['QUERY_STRING'])) { $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?"; $insertGoTo .= $_SERVER['QUERY_STRING']; } header(sprintf("Location: %s", $insertGoTo)); } }else{ // Not passed 8-( $captcha_msg="Wrong"; if(isset($_POST["MM_insert"])){ unset($_POST["MM_insert"]); } if(isset($_POST["MM_update"])){ unset($_POST["MM_update"]); } } }