View file shoutbox.php

<?php
ERROR_REPORTING(0);

/*
-------------------------------------------
+ BOT Chat for PBNL
+ Script Coded By Judinho of CodeX Team!
+ 2go:- judinho59
+ judinho59@gmail.com
+ http://codemmunity.com
---------------------------------------------
*/


require("init.php");
$action=$_GET["act"];
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER']!=NULL) {
$refresh=$_SERVER['HTTP_REFERER'];
}
elseif (ereg("&pass=", $_SERVER['HTTP_REFERER'])) {
$refresh='/member/index.php';
} else {
$refresh='shoutbox.php';
}
if($action=="shout") { if(isset($_POST["submit"]))  { $poster=$_POST["poster"];
$message=$_POST["message"];
$date=time();
//CLEAN
$message=cleanvalues($message);//RATE
$squery=mysql_fetch_array(mysql_query("SELECT * FROM b_users WHERE username='$user'"));
$rate=$squery["rate"]+1;
mysql_query("UPDATE b_users SET rate=$rate Where username='$user'");

$insert=mysql_query("INSERT INTO b_shout SET poster='$poster', message='$message', date='$date'");
include('bot.php');
if(!$insert)
{
header("location: $refresh");

}
else
{
header("location: $refresh"); } }
else
{ header("location: $refresh"); }
}
elseif($action=="del")
{ $id=(int)$_GET["id"];
$delete=mysql_query("DELETE FROM b_shout WHERE id=$id");
header("location: $refresh");
exit(); } elseif($action=="") { header("location: index.php"); }
include"../footer.php";
?>