Esempio n. 1
0
<?php

$json['answer'] = false;
if (isset($_POST['csrf']) && isset($_SESSION['chat_csrf']) && $_SESSION['chat_csrf'] == $_POST['csrf'] && isset($_POST['msg']) && actions::post_chat_message($_POST['msg'])) {
    $json['answer'] = true;
}
echo json_encode($json);
Esempio n. 2
0
<div class="el-row-body"' . (!empty($show_chat) ? ' style="display: none;"' : '') . '>

<div id="post-chat">';
    $chat_csrf = \site\utils::str_random(10);
    if (ab_to(array('chat' => 'add'))) {
        echo '<form action="#" method="POST">
    <input type="text" name="text" value="" placeholder="' . $LANG['chat_write_input'] . '" />
    <button class="btn">' . $LANG['chat_write_button'] . '</button>
    <a href="#" class="btn useggfont" title="Reload">Z</a>
    <input type="hidden" name="chat_csrf" value="' . $chat_csrf . '" />
  </form>';
    }
    echo '</div>';
    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        if (isset($_POST['chat_csrf']) && check_csrf($_POST['chat_csrf'], 'chat_csrf') && isset($_POST['text'])) {
            actions::post_chat_message($_POST['text']);
        }
    }
    $_SESSION['chat_csrf'] = $chat_csrf;
    echo '<ul class="elements-list" id="chat-msgs-list">';
    if ($chatmsgs = admin_query::chat_messages() > 0) {
        foreach (admin_query::while_chat_messages(array('max' => 5, 'orderby' => 'date DESC')) as $item) {
            echo '<li>
  <div style="display: table;">
  <img src="' . \query\main::user_avatar($item->user_avatar) . '" alt="" />
  <div class="info-div"><h2>' . $item->user_name . '
  <span class="fright date">' . date('Y.m.d, ' . (\query\main::get_option('hour_format') == 12 ? 'g:i A' : 'G:i'), strtotime($item->date)) . '</span></h2>
  <div class="info-bar">' . \site\utils::bbcodes($item->text) . '</div>
  </div></div>
  </li>';
        }