X-Git-Url: https://mop.ddnsfree.com/gitweb/?a=blobdiff_plain;f=web%2Findex_wr.php;h=bdf5741a4c535ad0ff6555632077c998f9e8ce0e;hb=6c9695ab5561cc68fd29e29e63358cc902e9eeca;hp=60c9af921a89bdeccb5078b085ace52764236f2b;hpb=4f18d0e24bd1c4c2895bfa13c9d164e2ddd22d47;p=brisk.git

diff --git a/web/index_wr.php b/web/index_wr.php
index 60c9af9..bdf5741 100644
--- a/web/index_wr.php
+++ b/web/index_wr.php
@@ -2,7 +2,7 @@
 /*
  *  brisk - index_wr.php
  *
- *  Copyright (C) 2006-2008 Matteo Nastasi
+ *  Copyright (C) 2006-2009 Matteo Nastasi
  *                          mailto: nastasi@alternativeoutput.it 
  *                                  matteo.nastasi@milug.org
  *                          web: http://www.alternativeoutput.it
@@ -52,7 +52,7 @@ if (array_search($_SERVER['REMOTE_ADDR'], $G_black_list) !== FALSE) {
 
 $is_spawn = FALSE;
 
-log_wr('COMM: '.$mesg);
+log_wr('COMM: '.xcapemesg($mesg));
 
 $sem = Room::lock_data();
 if (($room = &Room::load_data()) == FALSE) {
@@ -63,7 +63,7 @@ if (($room = &Room::load_data()) == FALSE) {
 }
 if (($user = &$room->get_user($sess, &$idx)) == FALSE) {
   Room::unlock_data($sem);
-  $argz = explode('|', $mesg);
+  $argz = explode('|', xcapemesg($mesg));
 
   if ($argz[0] == 'getchallenge') {
     GLOBAL $cli_name;
@@ -107,6 +107,9 @@ if (($user = &$room->get_user($sess, &$idx)) == FALSE) {
   else if ($argz[0] == 'about') {
     echo show_notify(str_replace("\n", " ", $G_room_about), 0, "torna ai tavoli", 400, 200);
   }
+  else if ($argz[0] == 'passwdhowto') {
+    echo show_notify(str_replace("\n", " ", $G_room_passwdhowto), 0, "torna ai tavoli", 400, 200);
+  }
   else if ($argz[0] == 'roadmap') {
     echo show_notify(str_replace("\n", " ", $G_room_roadmap), 0, "torna ai tavoli", 400, 200);
   }
@@ -119,7 +122,7 @@ if (($user = &$room->get_user($sess, &$idx)) == FALSE) {
   }
   exit;
 }
-$argz = explode('|', $mesg);
+$argz = explode('|', xcapemesg($mesg));
 
 log_wr('POSTSPLIT: '.$argz[0]);
 
@@ -235,6 +238,14 @@ else if ($user->stat == 'room') {
     log_wr($user->comm[$user->step % COMM_N]);
     $user->step_inc();
     
+  }
+  else if ($argz[0] == 'passwdhowto') {
+    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+    $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_passwdhowto), 0, "torna ai tavoli", 600, 500);
+
+    log_wr($user->comm[$user->step % COMM_N]);
+    $user->step_inc();
+    
   }
   else if ($argz[0] == 'about') {
     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
@@ -261,7 +272,7 @@ else if ($user->stat == 'room') {
     
   }
   else if ($argz[0] == 'chatt') {
-    $room->chatt_send(&$user,$mesg);
+    $room->chatt_send(&$user, xcapemesg($mesg));
   }
   /**********************
    *                    *