WF.php

<!DOCTYPE html>
<?php
error_reporting(0);
?>
<html lang="en">
<head>
<script language="JavaScript">
<!--hide
var password;
var pass1="AfQ4P6!!@@";
password=prompt('Skriv in lösenord',' ');
if (password==pass1)
alert('Loggad in, Klicka ok.');
else
{
window.location="http://nyxhotell.tk";
}
//-->
</script>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<title>Word Filter</title>
<link rel="stylesheet" href="http://localhost/staff/css.css" type="text/css">
<center><h2><b><img src="http://Habbox.com/text/102/-1/Wordfilter"></b><h2/></center>
<div id="wf"><center>
<form method="post" action="#">
   Ord:<br /><input name="word" id="word" type="Text" size="100" maxlength="100"><br />
   Ersättning:<br /><input name="replacement" id="replacement" type="Text" size="100" maxlength="100"><br />
   Skriv in en etta:<br /><input name="strict" id="strict" type="Text" size="1" maxlength="1"><br />
   <input type="Submit" name="submit" id="submit" value="Lägg till">
</form>
</center>
</div>
<?php
function clear($message)
{
        if(!get_magic_quotes_gpc())
                $message = addslashes($message);
        $message = strip_tags($message);
        $message = htmlentities($message);
        return trim($message);
}
if ($_POST['submit'])
{
        if (empty($_POST['word']))
                die('Skriv ett ord.');
        else if (empty($_POST['replacement']))
                die('Skriv en ersättning.');
        else if (empty($_POST['strict']))
                die('Skriv en etta.');
        $word = clear($_POST['word']);
        $replacement = clear($_POST['replacement']);
        $strict = clear($_POST['strict']);
@       mysql_connect('localhost','root','');
        mysql_select_db('Vision(18:59)');
        if(mysql_query("INSERT INTO wordfilter (word , strict , replacement) VALUES ('$word', '$strict', '$replacement')"))
                echo 'Wordfilter tillagd.';
        mysql_close();
}
?>