$indir = "1"; include "../functions.php"; $m = makesafe($_GET['m']); $p = makesafe($_GET['p']); if(!isset($_POST['url']) || !isset($_POST['title']) || !isset($_POST['excerpt'])) { header("Location: {$baseurl}blogs/$p/$m/redir/"); } else { $tb_url = makesafe($_POST['url']); $title = makesafe($_POST['title']); $excerpt = makesafe($_POST['excerpt']); $blog_name = makesafe($_POST['blog_name']); $curtime = time(); strip_tags($excerpt); $excerpt = substr($excerpt, 0, 255); // check post exists $blogq = $mysqli->query("SELECT id FROM {$table_prefix}blogs WHERE pagename='$p'"); if($blogq->num_rows > 0) { $res = $blogq->fetch_assoc(); $blogid = $res['id']; $postq = $mysqli->query("SELECT tracksacc FROM {$table_prefix}blogposts WHERE id='$m' AND blogid='$blogid'"); if($postq->num_rows > 0) { $res = $postq->fetch_assoc(); $tracksacc = $res['tracksacc']; if($tracksacc == "1") { $tracksq = $mysqli->query("SELECT fromurl FROM {$table_prefix}trackbacks WHERE pageid='$blogid' AND entryid='$m'"); if($tracksq->num_rows > 0) $error = "Your URL has already been submitted for a trackback on this post."; else { $insertdata = "NULL, '$blogid', '$m', '$blog_name - $title', '$tb_url', '$excerpt', '$curtime', '$trackmod'"; if(!$mysqli->query("INSERT INTO {$table_prefix}trackbacks VALUES($insertdata)")) $error = "Sorry - trackback info could not written to database."; else { if($commsmail == 1) { $titleq = $mysqli->query("SELECT * FROM {$table_prefix}$area WHERE id='$blogid'"); if($titleq->num_rows > 0) { $res = $titleq->fetch_assoc(); $pagetitle = $res['pagetitle']; $pagename = $res['pagename']; $entryq = $mysqli->query("SELECT * FROM {$table_prefix}blogposts WHERE id='$m'"); $res = $entryq->fetch_assoc(); $pagetitle .= " $splitter " . $res['entrytitle']; $entryname = $res['pagename']; $urlbit = "news/$pagename/$entryname/"; $subject = "$sitetitle $splitter New trackback on $pagetitle"; $message = "Hello,
\n\nA new trackback has been posted on your site, in "$pagetitle":\n\n$commmessage\n\nTo view who posted it, and any other trackbacks, go to {$baseurl}$urlbit\n\nThanks,\n\n$sitetitle"; htmlmail($siteemail, "\"$sitetitle\" <$siteemail>", $subject, $message); } } } } } else $error = "Sorry - that post does not accept trackbacks."; } else $error = "Post does not exist"; } else $error = "Blog does not exist."; if(!empty($error)) $err = 1; response($err, $error); } function response($err, $error) { header('Content-Type: text/xml'); if ($err == "1") { echo '\n"; echo "