/************************Powered By:*************************/ /************************************************************/ /** **/ /** "Automonial" Automated Testimonial script **/ /** Ver.: .9.5.2 (Idiot Croissant) **/ /** **/ /** Written by: schwim of Suspect Coding **/ /** Website: http://www.roughingthesuspect.com **/ /** **/ /************************************************************/ /************************************************************/ /** **/ /** This script is released under the GNU GPL license. **/ /** **/ /** blah, blah, blah, blah, blah, blah, blah, blah, **/ /** whitenoisehearingmyselftalklovethesounditsimportant **/ /** yada yada yada yada yada yada yada yada yada yada **/ /** **/ /** supercalifragilisticexpialidiciusindianarmburn **/ /** atomic wedgie. Amen. **/ /** **/ /** If you have a problem with the script, I want to **/ /** help you, but please use the forum at the RTS website.**/ /** Posting on the forum helps others who might run into **/ /** The same problem as you. **/ /** **/ /** thanks, **/ /** json **/ /** **/ /************************************************************/ /********************.:Suspect Coding:.**********************/ Changelog: .9.5.2 Feature/Fix release This upgrade takes care of the bugs reported by the users of .9.5.0 and also makes some feature additions, most notable of these being: Features: - Started implementing anti-spam features. - Multiple admins with configurable permissions. Fixes: - Included a missing language definition in test_block (thanks JeremyBush) - Corrected index.php not using table border, padding and spacing values, but instead hard coded values. (thanks sam_m) - Index.php was not using scripturl to determine link locations, causing problems if index.php was placed outside of the testimonial folder. (thanks jspangler) - PHP include code now points to script path and no longer points to script URL (thanks Andy) - Removed use of depractated session_register() in the login function. - Alignment issues resolved for our shortbus browser of the day, Opera. Izzums widdle bwowser having pwobwems wiff assuming awignment? .9.5.0 Feature release This upgrade is a feature release. While closing a few holes in the code, mostly I just wanted to make the script more like what I originally imagined. To that end, I have added the following: - The front end is now completely customizable with header and footer pages, as well as database driven css values, allowing you to make the blocks look like the rest of your site. - You can now tell the random block how many testimonials to show. You're no longer forced to show only one. - Pagination, both publicly and in the admin section. - Some more ability to 'hide' what script you are using by adding a sitename value, so you can make your script blend into your site better. - language file integration. Although I don't doubt that I missed a spot, I have moved all text over to a language file and set it up to where you can simply drop the lang file into your directory and choose it from the admin menu. Of course, you'll have to create that language file first, as you wouldn't want me to create a file for Mandarin Chinese. - I've split up the admin code into different pages, so we weren't loading all of the code with each page generation. The code was beginning to get quite unwieldy, and it is now much more manageable for those of you who might want to play around in it. There is a lot more, but to be honest, it's been almost a year since I started this update, and between lost code, screw ups and such, I can no longer remember everything that I did. When you play around with it, you will be able to see the changes. Just enjoy them. .9.0.1 Security and function release This upgrade deals mostly with security holes found in .9.0.0. It's suggested very strongly that you upgrade, lest you computer catch on fire, and bad men are waiting at your door when you arrive home. Included substr functions to the form input on the public side as well as the admin login to prohibit bad guys from trying to submit long strings to overrun your server. Nixed the dependency on stripslashes & addslashes, and now use mysql_real_escape_string to properly insert data. Turn off magic_quotes_runtime via a call in config, and combat magic_quotes_gpc with a function to strip the slashes it adds. Altered test_block.php to show a little paragraph if no records are present in the approved testimonials table. added a check on the ID variable being passed to view a testimonial, both to make sure that it's a number, and also for length. Moved admin global header and footer to separate files to shorten up the admin index, just to make it easier to edit. .9.0.0 The script is created. Yippee.