<?php
require_once("./config.php");
require_once("./functions.php");

//database connection check

$dbc=@mysql_connect($dbserver,$dbuser,$dbpass);
if (!$dbc)
    {
        die(mysql_error());
    }
else
    {
        mysql_query("SET NAMES 'utf8'");    //set encoding
    }

//database select check

@mysql_select_db($dbname,$dbc) or die (mysql_error());
//post
$email_error=0;


if (isset($_GET['page']))
    {
        $page=$_GET['page'];
    }
else $page=1;

$email_error=postpost($_POST);

getposts($page);


?>
<form method='POST'action='<?php echo $_SERVER['PHP_SELF'];?>'>
<input type='text' name='author' value="<?php if(isset($_POST['author'])) echo $_POST['author']; ?>">Имя</br>
<input type='text' name='email' value="<?php if(isset($_POST['email'])) echo $_POST['email']; ?>">Email <?php if($email_error) echo "неправильный Email";?></br>
<textarea name='post' cols='30' rows='10'></textarea></br>
<input type='submit' value="отправить">

</form>
<?php
//closing connection
if (@mysql_close($dbc))
    {
        echo("DB connection closed</br>");
    }
else
    {
        echo("couldn't close DB connection</br>");
    }
?>


//config.php

<?php
// database options
$dbserver='localhost';  // server
$dbuser='root';         // username
$dbpass='123123';       // password
$dbname='guestbook';    // database
?>



//functions.php

<?php
function getposts($page_n)
{
    if(!is_numeric($page_n)) $page_n=1;
    $page_n=floor($page_n);
    if($page_n<=1)
        {
            $limit=0;
        }
        else $limit=$page_n*3-1;


    $query="SELECT * FROM posts ORDER BY id DESC LIMIT ".$limit.",3 ";
    $q=mysql_query($query);
    echo "последние 3 записи:<br>";
    while($postdata=mysql_fetch_assoc($q))
        {
            echo    '<div style="border: black solid 1px; padding: 5px; margin: 5px">
                        <a href="mailto:'.$postdata['email'].'">'.$postdata['author'].'</a> написал  '.$postdata['putdate'].
                        '<hr>'
                        .$postdata['post'].
                        '<br> с адреса: '
                        .$postdata['ip'].
                    '</div>';
        }
        echo '<a href="'.$_SERVER['PHP_SELF'].'?page='.($page_n+1).'">старые записи</a><br>';

        if ($page_n>=2) echo '<a href="'.$_SERVER['PHP_SELF'].'?page='.($page_n-1).'">новые записи</a>';
}

function postpost($data)
{
if((isset($data['author'])) AND (isset($data['email'])) AND (isset($data['post'])))
    {
    if(($data['author']!='') AND ($data['email']!='') AND ($data['post']!=''))
        {
            $new_post_author=strip_tags($_POST['author']);
            $new_post_text=nl2br(htmlspecialchars($_POST['post']));
            $new_post_email=strip_tags($_POST['email']);
            $new_post_addr=$_SERVER['REMOTE_ADDR'];
            if (eregi ("^([a-z0-9_]|\\-|\\.)+@(([a-z0-9_]|\\-)+\\.)+[a-z]{2,4}$", $new_post_email))
                {
                $postquery="INSERT INTO posts VALUES (NULL,'".$new_post_author."','".$new_post_text."',NOW(),'".$new_post_email."','".$new_post_addr."')";
                $nq=mysql_query($postquery);
                if(!$nq) die(mysql_error());
                }
            else
                {
                    echo "<font color=red>неверный Email</font>";

                    return 1;
                }
        }
    }

}
?>