X-Git-Url: http://mop.ddnsfree.com/gitweb/?a=blobdiff_plain;f=web%2Findex_wr.php;h=bdf5741a4c535ad0ff6555632077c998f9e8ce0e;hb=af67c942a2b5e706f2020506206d9fabd24776e8;hp=f1e55f133ea66cad8279e5b956032c329d79e2fa;hpb=cb0ba3960a1911a231d114b25560e8bce211a79a;p=brisk.git

diff --git a/web/index_wr.php b/web/index_wr.php
index f1e55f1..bdf5741 100644
--- a/web/index_wr.php
+++ b/web/index_wr.php
@@ -52,7 +52,7 @@ if (array_search($_SERVER['REMOTE_ADDR'], $G_black_list) !== FALSE) {
 
 $is_spawn = FALSE;
 
-log_wr('COMM: '.$mesg);
+log_wr('COMM: '.xcapemesg($mesg));
 
 $sem = Room::lock_data();
 if (($room = &Room::load_data()) == FALSE) {
@@ -63,7 +63,7 @@ if (($room = &Room::load_data()) == FALSE) {
 }
 if (($user = &$room->get_user($sess, &$idx)) == FALSE) {
   Room::unlock_data($sem);
-  $argz = explode('|', $mesg);
+  $argz = explode('|', xcapemesg($mesg));
 
   if ($argz[0] == 'getchallenge') {
     GLOBAL $cli_name;
@@ -107,6 +107,9 @@ if (($user = &$room->get_user($sess, &$idx)) == FALSE) {
   else if ($argz[0] == 'about') {
     echo show_notify(str_replace("\n", " ", $G_room_about), 0, "torna ai tavoli", 400, 200);
   }
+  else if ($argz[0] == 'passwdhowto') {
+    echo show_notify(str_replace("\n", " ", $G_room_passwdhowto), 0, "torna ai tavoli", 400, 200);
+  }
   else if ($argz[0] == 'roadmap') {
     echo show_notify(str_replace("\n", " ", $G_room_roadmap), 0, "torna ai tavoli", 400, 200);
   }
@@ -119,7 +122,7 @@ if (($user = &$room->get_user($sess, &$idx)) == FALSE) {
   }
   exit;
 }
-$argz = explode('|', $mesg);
+$argz = explode('|', xcapemesg($mesg));
 
 log_wr('POSTSPLIT: '.$argz[0]);
 
@@ -235,6 +238,14 @@ else if ($user->stat == 'room') {
     log_wr($user->comm[$user->step % COMM_N]);
     $user->step_inc();
     
+  }
+  else if ($argz[0] == 'passwdhowto') {
+    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+    $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_passwdhowto), 0, "torna ai tavoli", 600, 500);
+
+    log_wr($user->comm[$user->step % COMM_N]);
+    $user->step_inc();
+    
   }
   else if ($argz[0] == 'about') {
     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
@@ -261,7 +272,7 @@ else if ($user->stat == 'room') {
     
   }
   else if ($argz[0] == 'chatt') {
-    $room->chatt_send(&$user,$mesg);
+    $room->chatt_send(&$user, xcapemesg($mesg));
   }
   /**********************
    *                    *