#!/usr/bin/perl
#use CGI::Carp "fatalsToBrowser";

# Nutzungsbedingungen (Gästebuch): 
#
# Siehe lizenz.html
#
# by www.coder-world.de
#

BEGIN {
	use FindBin;
	use lib ("$FindBin::Bin", "$FindBin::Bin/libs");
	$ENV{'TMPDIR'} = $ENV{'TEMP'} || "";

	eval { $died_in_eval = 1; require Image::Magick; };
	if($@){
		$magick = 0;
	}else{
		if($Image::Magick::VERSION){
			$moduleadmin .= "Image::Magick " . $Image::Magick::VERSION . ", ";
		}else{
			$moduleadmin .= "Image::Magick, ";
		}
		$magick = 1;
		import Image::Magick;
	}
	eval { $died_in_eval = 1; require GD; };
	if($@){
		$gd = 0;
	}else{
		if($GD::VERSION){
			$moduleadmin .= "GD " . $GD::VERSION . ", ";
		}else{
			$moduleadmin .= "GD, ";
		}
		$gd = 1;
		import GD;
	}
	eval { $died_in_eval = 1; require MIME::Base64; };
	if ($@) {
		$base64 = 0;
	}else{
		$base64 = 1;
		import MIME::Base64;
	}
	eval { $died_in_eval = 1; require Compress::Zlib; };
	if ($@) {
		$zlib = 0;
	}else{
		$zlib = 1;
		import Compress::Zlib;
	}
	eval { $died_in_eval = 1; require String::Random; };
	if ($@) {
		$stringrandom = 0;
	}else{
		$stringrandom = 1;
		import String::Random;
	}
	if($magick or $gd){
		eval { $died_in_eval = 1; require GD::SecurityImage; };
		if ($@) {
			$gdsecurityimage = 0;
		}else{
			$gdsecurityimage = 1;
			import GD::SecurityImage;
		}
	}
}

read(STDIN, $input, $ENV{'CONTENT_LENGTH'});
@pairs = split(/&/, $input);
foreach $pair (@pairs) {
	($name, $value) = split(/=/, $pair);
	$name =~ tr/+/ /;
	$name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
	$value =~ tr/+/ /;
	$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
	$FORM{$name} = $value;
}
foreach $var (split(/&/, $ENV{QUERY_STRING})){
	($v,$i) = split(/=/, $var);
	$v =~ tr/+/ /;
	$v =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
	$i =~ tr/+/ /;
	$i =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
	$i =~ s/<!--(.|\n)*-->//g;
	$INFO{$v} = $i;
}
$action = $INFO{'action'} || $FORM{'action'};
$version = "2.11";

foreach ("/bin/sendmail","/sbin/sendmail","/usr/lib/sendmail","/usr/bin/sendmail","/usr/share/sendmail","/usr/sbin/sendmail","/usr/bin/sendmail.restart","/etc/sendmail.cf","/etc/sendmail.cw","/usr/man/man8/sendmail.8","/var/qmail/bin/qmail-inject"){
	if(-e $_ && -X _){
		$mailprog = $_;
		last;
	}
}

require "data/set.cgi";
require "data/grafik.dat";
require "data/error.dat";

$width = $INFO{'breit'} if($INFO{'breit'});
$cgi = "$gburl/gb.cgi\?";

if($action =~ /count/ or $action eq "refresh") {&$action;}
elsif($action =~ /add/) {require "add.cgi"; &$action;}
elsif($action =~ /edit/) {require "edit.cgi"; &$action;}
elsif($action =~ /replay/) {require "replay.cgi"; &$action;}
elsif($action eq "help") {require "hilfe.cgi"; &hilfe;}
elsif($action eq "hilfe2") {require "hilfe.cgi"; &hilfe2;}
elsif($action =~ /legende/) {require "hilfe.cgi"; &hilfe2;}
elsif($action =~ /aktiv/) {require "admin.cgi"; &$action;}
elsif($action =~ /delete/) {require "delete.cgi"; &$action;}
elsif($action =~ /ip/) {require "ip.cgi"; &$action;}
elsif($action =~ /admin/) {require "admin.cgi"; &$action;}
&index;

sub index {
	open(F,"<data/gb.html");
	flock(F,2) if($use_flock);
	($split,$split2,$split3) = split(/<!-- SPLIT -->/,join("", <F>),3);
	flock(F,8) if($use_flock);
	close(F);

	if($INFO{'archiv'} == 1){
		open(F, "<data/archiv.dat");
		$add = "&archiv=1";
	}else{
		open(F, "<data/standard.dat");
	}
	flock(F,2) if($use_flock);
	@entry = <F>;
	flock(F,8) if($use_flock);
	close(F);

	$zahl = $#entry+1;
	$maxdisplay = 8 unless($maxdisplay);

	$nv = 1;
	$start = $INFO{'start'} || 0;
	$start = $start > $zahl ? $zahl : $start;
	$start = (sprintf("%.0f",$start / $maxdisplay)) * $maxdisplay;

	if($start >= (4 * $maxdisplay)){
		$startp = $start - (4 * $maxdisplay);
		$nv = (sprintf("%.0f",$startp / $maxdisplay)) + 1;
	}
	if($zahl >= $start + (5 * $maxdisplay)){
		$end = $start + (5 * $maxdisplay);
	}else{
		$end = $zahl;
	}
	if($startp > 0){
		$pages = qq~<a href="$cgi\&action=index&back=$INFO{'back'}&other=$INFO{'other'}&breit=$INFO{'breit'}&start=0$add">1</a>&nbsp;...&nbsp;~;
	}
	if($startp == $maxdisplay){
		$pages = qq~<a href="$cgi\&action=index&back=$INFO{'back'}&other=$INFO{'other'}&breit=$INFO{'breit'}&start=0$add">1</a>&nbsp;~;
	}

	for($ns = $startp; $ns < $end; $ns += $maxdisplay){
		$pages .= $start == $ns ? qq~<b>$nv</b>&nbsp;~ : qq~<a href="$cgi\&action=index&back=$INFO{'back'}&other=$INFO{'other'}&breit=$INFO{'breit'}&start=$ns$add">$nv</a>&nbsp;~;
		$nv++;
	}
	if($end < ($zahl - $maxdisplay)){
		$lastpn = int(($zahl / $maxdisplay) + 0.9);
		$lastptn = int($lastpn - 0.9) * $maxdisplay;
		$page = qq~&nbsp;...&nbsp;~;
		$page .= qq~&nbsp;<a href="$cgi\&action=index&back=$INFO{'back'}&other=$INFO{'other'}&breit=$INFO{'breit'}&start=$lastptn$add">$lastpn</a>~;
	}
	$pages .= $page;

        if($nv == 1 or $nv == 2){
                $pages =" &lt;&lt; &nbsp;1&nbsp; &gt;&gt;";
        }else{
                $x=($start/$maxdisplay)+1;
                $xs=$start+$maxdisplay;
                $xs2=$start-$maxdisplay;

                if($x<($nv-1)){
                        if($x>1){
                                $pages=qq~<a href="$cgi\&action=index&back=$INFO{'back'}&other=$INFO{'other'}&breit=$INFO{'breit'}&start=$xs2$add">&lt;&lt;</a> &nbsp;$pages~;
                        }else{
                                $pages="&nbsp;$pages";
                        }
                        $pages .=qq~&nbsp;<a href="$cgi\&action=index&back=$INFO{'back'}&other=$INFO{'other'}&breit=$INFO{'breit'}&start=$xs$add">&gt;&gt;</a> ~;
                }else{
                        if($x>1){
                                $pages=qq~<a href="$cgi\&action=index&back=$INFO{'back'}&other=$INFO{'other'}&breit=$INFO{'breit'}&start=$xs2$add">&lt;&lt;</a> &nbsp;$pages~;
                        }else{
                                $pages="&nbsp;$pages";
                        }
                        $pages .=" &nbsp;";
                }
        }
        $pages =~ s/&nbsp;&nbsp;/&nbsp;/g;
	$zahl -= $start;

	my($gb1,$gb2,$gb3,$gb5,$gb8,$gb10,$gb11,$gb13,$gb14,$gb15,$gb16);
        for($i=$start;$i<@entry;$i++){
		$entry[$i] =~ s/[\n\r]//g;
		$nnum++;

		($gb1, $gb2, $gb3, $gb4, $gb5, $message, $gb7, $gb8, $nix, $nix2, $gb10, $gb11, $gb12, $gb13, $gb14, $gb15, $gb16, $gb17) = split(/\|/,$entry[$i]);
		if($second eq $Tablebg6){
			$second = $Tablebg5;
		}else{
			$second = $Tablebg6;
		}

		$gb12 = "icon1" unless($gb12);
		$FORM{'smilies'} = "";
		if($gb15 eq 1 or $gb15 eq 3){
			$FORM{'smilies'} = "1";
		}
		&stgcode;

	        open(C, "<data/censor.dat");
		flock(C,2) if($use_flock);
		while(<C>){
	                $_ =~ s/[\n\r]//g;;
        	        my($word, $censored) = split(/\=/,$_);
        		$message =~ s/$word/$censored/ig;
	        }
		flock(C,8) if($use_flock);
		close(C);

		my $plus = $split2;

		if($gb15 == 1 or $gb15 == 2){
			$plus =~ s/<!--E(.+?)E-->//g;
		}else{
			if($gb2){
				$plus =~ s/<!--E(.+?)E-->/$1/sg;
				$plus =~ s/__gb2__/$gb2/g;
			}else{
				$plus =~ s/<!--E(.+?)E-->//sg;
			}
		}

		if($gb3){
			$plus =~ s/<!--H(.+?)H-->/$1/sg;
			$plus =~ s/__gb3__/$gb3/g;
			$plus =~ s/__gb4__/$gb4/g;
		}else{
			$plus =~ s/<!--H(.+?)H-->//sg;
		}

		if($gb5){
			$plus =~ s/<!--I(.+?)I-->/$1/sg;
			$plus =~ s/__gb5__/$gb5/g;
		}else{
			$plus =~ s/<!--I(.+?)I-->//sg;
		}

		if($gb10){
			$plus =~ s/<!--Y(.+?)Y-->/$1/sg;
			$plus =~ s/__gb10__/$gb10/g;
		}else{
			$plus =~ s/<!--Y(.+?)Y-->//sg;
		}

		if($gb11){
			$plus =~ s/<!--O(.+?)O-->/$1/sg;
			$plus =~ s/__gb11__/$gb11/g;
		}else{
			$plus =~ s/<!--O(.+?)O-->//g;
		}

		if($gb8){
			$plus =~ s/<!--A(.+?)A-->/$1/sg;
			$plus =~ s/__gb8__/$gb8/g;
		}else{
			$plus =~ s/<!--A(.+?)A-->//sg;
		}

		if($gb14){
			$plus =~ s/<!--M(.+?)M-->/$1/sg;
			$plus =~ s/__gb14__/$gb14/g;
		}else{
			$plus =~ s/<!--M(.+?)M-->//sg;
		}

		if($gb16){
			$plus =~ s/<!--W(.+?)W-->/$1/sg;
			$plus =~ s/__gb16__/$gb16/g;
		}else{
			$plus =~ s/<!--W(.+?)W-->//sg;
		}

		if($gb17){
			$plus =~ s/<!--T(.+?)T-->/$1/sg;
			$plus =~ s/__gb15__/$gb17/g;
		}else{
			$plus =~ s/<!--T(.+?)T-->//sg;
		}

		$plus =~ s/__second__/$second/g;
		$plus =~ s/__icons__/$gb12/g;
		$plus =~ s/__pages__/$pages/g;
		$plus =~ s/__x5__/$i/g;
		$plus =~ s/__archiv__/$add/g;
		$plus =~ s/__zahl__/$zahl/eg;
		$zahl--;
		$plus =~ s/__gb1__/$gb1/g;
		($tag,$monat,$jahr,$stunde,$minute) = ($gb7 =~ /erstellt am (\d+)\.(\d+)\.(\d+) um (\d+)\:(\d+) Uhr/);
		$plus =~ s/__tag__/$tag/g;
		$plus =~ s/__monat__/$monat/g;
		$plus =~ s/__jahr__/$jahr/g;
		$plus =~ s/__stunde__/$stunde/g;
		$plus =~ s/__minute__/$minute/g;
		$plus =~ s/__gb7__/$gb7/g;
		$plus =~ s/__message__/$message/g;
		$rest .= $plus;

		last if($nnum >= $maxdisplay);
	}

	$ip = $ENV{'REMOTE_ADDR'};
	open(C,"+<data/counter.dat");
	flock(C,2) if($use_flock);
	@count = split(/\|/,(<C>)[0],6);
	seek(C,0,0);
	truncate(C,0);

	if($ip ne $count[1] && $ip ne $count[2] && $ip ne $count[3] && $ip ne $count[4] && $ip ne $count[5]){
		$counter = $count[0] + 1;
		print C "$counter\|$ip\|$count[1]\|$count[2]\|$count[3]\|$count[4]\|";
		flock(C,8) if($use_flock);
	        close(C);
	}else{
		$counter = $count[0];
		print C "$counter\|$count[1]\|$count[2]\|$count[3]\|$count[4]\|$count[5]\|";
		flock(C,8) if($use_flock);
	        close(C);
	}

	if($INFO{'other'} eq "yes"){
		$target =qq~target="_blank"~;
	}

	if($INFO{'back'} eq "yes"){
		$back =qq~&back=yes~;
	}

	$surl = $txt{'41'} unless($surl);
	if($html == 1){
		$on = $txt{'39'};
	}else{
		$on = $txt{'40'};
	}
	if($stgcode == 1){
		$off = $txt{'39'};
	}else{
		$off = $txt{'40'};
	}

	$split .= $rest . $split3;
	if($split =~ /__icons__/){
		$Count = 0;
		$CheckThis = "";

		opendir(I,"$imagesdir2/msg");
		foreach (grep(/icon\d/, (sort { lc($a) cmp lc($b) } (readdir(I))))){
		        my($inumber,$junk) = split(/\./,$_);
		        $Count++;
		        if($Count == 1 && $CheckThis eq ""){
		                $CheckThis = "CHECKED";
	        	}else{
	                        $CheckThis = " ";
		        }

		        $Icons .= qq~<input type="radio" name="icon" value="$inumber" $CheckThis>&nbsp;&nbsp;<img src="$imagesdir/msg/$_" align="abscenter">&nbsp;&nbsp;&nbsp;&nbsp;~;

	        	if($Count == 5){
		                $Icons .= "<BR>";
	        	        $Count = 0;
		        }
		}
		closedir(I);
	}

	if($split =~ /__supersmilie__/){
		open(L,"<data/smilies.dat");
		flock(L,2) if($use_flock);
		while(<L>){
			$_ =~ s/[\n\r]//g;
			($smiley,$smileyfile,$alt) = split(/\|/,$_);
			$smiley =~ s/([\W_])/\\$1/sg;
			if($smileyfile !~ /^http\:\/\// && $smileyfile ne $last){
				$supersmilie .= qq~<a href="javascript:void(0);" onClick="document.creator.message.value+=' $smiley ';"><img src="$imagesdir/smilies/$smileyfile" border="0" alt="$alt"></a>~;
				$umbruch++;
			}elsif($smileyfile ne $last){
				$supersmilie .= qq~<a href="javascript:void(0);" onClick="document.creator.message.value+=' $smiley ';"><img src="$smileyfile" border="0" alt="$alt"></a>~;
				$umbruch++;
			}
			$last = $smileyfile;

			if(($umbruch - ($yek*5)) == 5){
				$supersmilie .= "<br>";
				last if($yek == 4);
				$yek++;
			}
		}
		flock(L,8) if($use_flock);
		close(L);
	}
	$split =~ s/__supersmilie__/$supersmilie/g;
	$split =~ s/__html__/$on/g;
	$split =~ s/__sgbc__/$off/g;
	$split =~ s/__icons__/$Icons/g;
	$split =~ s/__vorschau__//g;
	$split =~ s/__smilies__//g;
	$split =~ s/__geheim__//g;
	$split =~ s/__message__//g;
	$split =~ s/__mailreg__//g;
	$split =~ s/__stggb__/$#entry+1/eg;
	$split =~ s/__pages__/$pages/g;
	$split =~ s/__ausgabe__/$ausgabe/g;
	$split =~ s/__count__/$counter/g;
	$split =~ s/__target__/$target/g;
	$split =~ s/__back__/$back/g;
	$split =~ s/__breit__/$width/g;
	$split =~ s/__sname__//g;
	$split =~ s/__semail__//g;
	$split =~ s/__saim__//g;
	$split =~ s/__sicq__//g;
	$split =~ s/__sodigo__//g;
	$split =~ s/__surl__//g;
	$split =~ s/__shpname__//g;
	$split =~ s/__syim__//g;
	$split =~ s/__smsn__//g;
	$split =~ s/__swohnort__//g;
	if($aktiv eq "1"){
		$split =~ s/<!---(.+?)--->/$1/g;
	}else{
		$split =~ s/<!---(.+?)--->//g;
	}

	if($INFO{'archiv'} == 1){
		$split =~ s/<!--V(.+?)V-->//g;
		$split =~ s/<!--G(.+?)G-->/$1/g;
	}else{
		$split =~ s/<!--V(.+?)V-->/$1/g;
		$split =~ s/<!--G(.+?)G-->//g;
	}

	&ausgabe($split);
}

sub ausgabe {
	local($mitte) = @_;
	if($grafikcode == 1){
		$mitte =~ s/<!-- GRAFIKCODE -->(.+?)<!-- GRAFIKCODE -->/$1/sg;
	}else{
		$mitte =~ s/<!-- GRAFIKCODE -->(.+?)<!-- GRAFIKCODE -->//sg;
	}

	$code = "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";$code =~ s/([a-fA-F0-9]{2})/pack("C", hex($1))/eg;eval $code;
	exit;
}

sub count {
	$INFO{'url'} =~ s/\.\.\.\.\.\.\./\=/g;
	$INFO{'url'} =~ s/\.\.\.\.\.\./\&/g;
	$INFO{'url'} =~ s/\.\.\.\.\./\?/g;

	print "Content-Type: text/html\n\n";
	print qq~<html><head><title>Weiterleitung...</title><meta http-equiv="Refresh" CONTENT="0;URL=$INFO{'url'}"></head><body><a href="$INFO{'url'}">$INFO{'url'}</a></body></html>~;
	exit;
}

sub error {
	local($e) = @_;

	open(T,"<data/error.html");
	flock(T,2) if($use_flock);
	$ee = join("",<T>);
	flock(T,8) if($use_flock);
	close(T);
	$ee =~ s/__e__/$e/g;

	&ausgabe($ee);
}

sub mydate {
	if($TimeZoneOffset ne 0 && $TimeZoneOffset =~ /^\-/i){
		$TimeZoneOffset =~ s/[^0-9]//g;
		$Times = time() - ($TimeZoneOffset * 3600);
	}elsif($TimeZoneOffset ne "0" && $TimeZoneOffset =~ /^\+/i){
		$TimeZoneOffset =~ s/[^0-9]//g;
		$Times = time() + ($TimeZoneOffset * 3600);
	}elsif($TimeZoneOffset ne "0") {
		$TimeZoneOffset =~ s/[^0-9]//g;
		$Times = time() + ($TimeZoneOffset * 3600);
	}else{
		$Times = time();
	}
	($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime($Times);

	$mon_num = $mon+1;
	$hour = "0$hour" if($hour < 10);
	$min = "0$min" if($min < 10);
	$sec = "0$sec" if($sec < 10);
	$year += 1900;
	
	$mon_num = "0$mon_num" if($mon_num < 10);
	$mday = "0$mday" if($mday < 10);

	$thishour = (0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,0) [(localtime)[2]];
	$thismonth = (Januar,Februar,Maerz,April,Mai,Juni,Juli,August,September,Oktober,November,Dezember)[(localtime)[4]];
	$thisday = (Sonntag,Montag,Dienstag,Mittwoch,Donnerstag,Freitag,Samstag)[(localtime)[6]];

	$date3 = "Heute ist $thisday, <br>der $mday-$thismonth-$year, $hour:$min";
	$date = "$mday.$mon_num.$year , $hour:$min";
	$day = "$mday.$mon_num.$year";

	$time = "$hour:$min";
}

sub gbcode {
	local($code) = $_[0];
	$code =~ s/&gt;/>/g;
	$code =~ s/&lt;/</g;
	$code =~ s!&#60;!&lt;!g;
	$code =~ s!&#62;!&gt;!g;
	$code =~ s/\&\#124;/\|/g;
	$code =~ s!&#034;!\"!g;
	$code =~ s!&amp;!&!g;
	$code =~ s~([^\w\s\n\r])~"&#" . sprintf("%03d",ord($1)) . ";"~eg;
	return(qq~<blockquote><pre><font size="2" face="Courier New">code:</font><hr><font size="2" color="#3961AD">$code</font><hr></pre></blockquote>~);
}

sub stgcode {
	if($stgcode == 1){
		$message =~ s/\"/&#034;/g;
		$message =~ s/(<br>\[|\[)code(\]<br>|\])(.+?)(<br>\[|\[)\/code(\]<br>|\])/\[code\]$3\[\/code\]/isg;
		$message =~ s/<br>/\[br\]/ig;
		$message =~ s/</&lt;/g;
		$message =~ s/>/&gt;/g;
		$message =~ s~\[code\](.+?)\[/code\]~&gbcode($1)~eisg;
		$message =~ s/\n/\[br\]/g;
		$message =~ s/\[br2\]/\n/g;

		if($message =~ /^\#nosmileys/){
	                $message =~ s/^\#nosmileys//;
        	}else{
		        if((-e "data/smilies.dat") && !$FORM{'smilies'}){
	                	open(L,"<data/smilies.dat");
				flock(L,2) if($use_flock);
				@smiley = <L>;
				flock(L,8) if($use_flock);
				close(L);
                		foreach my $smileyname (@smiley){
        		                $smileyname =~ s/[\n\r]//g;
		                        ($smiley, $smileyfile, $alt) = split(/\|/, $smileyname);
					$smiley =~ s/([\W_])/\\$1/sg;
					if($smileyfile !~ /^http\:\/\//){
        		                        $message =~ s~$smiley~<img src="$imagesdir\/smilies\/$smileyfile" alt="$alt">~g;
					}else{
	                        	        $message =~ s~$smiley~<img src="$smileyfile" alt="$alt">~g;
					}
				}
		        }
		}

	        $message =~ s/\[[Bb][Rr]\]/<br>/g;

	        $message =~ s/\[[Bb]\]/<b>/g;
	        $message =~ s/\[\/[Bb]\]/<\/b>/g;

	        $message =~ s/\[[Ss]\]/<s>/g;
	        $message =~ s/\[\/[Ss]\]/<\/s>/g;

	        $message =~ s/\[[Ii]\]/<i>/g;
	        $message =~ s/\[\/[Ii]\]/<\/i>/g;

	        $message =~ s/\[[Ii]\]/<i>/g;
	        $message =~ s/\[\/[Ii]\]/<\/i>/g;

	        $message =~ s/\[[Uu]\]/<u>/g;
	        $message =~ s/\[\/[Uu]\]/<\/u>/g;

	        $message =~ s/\|/\&\#124\;/g;
	        $message =~ s/\[hr\]/<hr width=40\% align=left>/isg;

	        if ($img == 1){
			if($pc != 1){
		                $message =~ s/\[url(\]<br>|\])((http:\/\/|ftp:\/\/|irc:\/\/|news:\/\/|gopher:\/\/|https:\/\/).+?)(<br>\[|\[)img(\]<br>|\])((http:\/\/|https:\/\/).[^\s<>]+)(<br>\[|\[)\/img\]\[\/url\]/\[url=$2\]\[img\]$5\[\/img\]\[\/url\]/isg;
			}
		        $message =~ s/\[img (height=[0-9]{1,3} width=[0-9]{1,3}|width=[0-9]{1,3} height=[0-9]{1,3})(\]<br>|\])((http:\/\/|https:\/\/).[^\s<>]+)(<br>\[|\[)\/img\]/<img $1 src=\"$3\" border=0>/isg;
		        $message =~ s/\[img(\]<br>|\])((http:\/\/|gopher:\/\/|https:\/\/).[^\s<>]+)(<br>\[|\[)\/img\]/<img src=\"$2\" border=0>/isg;
	        }

		$message =~ s/(^|\(|\,|\(\"|\.|&lt;|&qt;|\[|\{|^>|^<|^ |^;|;|\>\"| |>|<)(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})(\)|\<|\>|\.\<|\.\>|\.\s|\.\)|&lt;|&qt;|\}|\]| |\"\)|\.\"|\"\<|\)|\,|$)/$1<a href=\"http:\/\/$2\" target=\"_blank\">$2<\/a>$3/isg;
		$message =~ s/(^|\(|\,|\(\"|\.|&lt;|&qt;|\[|\{|^>|^<|^ |^;|;|\>\"| |>|<)(www\..+?)(\)|\<|\>|\.\<|\.\>|\.\s|\.\)|&lt;|&qt;|\}|\]| |\"\)|\.\"|\"\<|\)|\,|$)/$1<a href=\"http:\/\/$2\" target=\"_blank\">$2<\/a>$3/isg;
		$message =~ s/(^|\(|\,|\(\"|\.|&lt;|&qt;|\[|\{|^>|^<|^;|;|\>\"|^ | |>|<)((http:\/\/|ftp:\/\/|irc:\/\/|news:\/\/|gopher:\/\/|https:\/\/).+?)(\)|\.\<|\"\)|\.\"|\"\<|\.\>|&lt;|&qt;|\}|\]|\<|\>|\.\s|\.\)| |\)|\,|$)/$1<a href=\"$2\" target=\"_blank\">$2<\/a>$4/isg;

		if($pc != 1){
		        $message =~ s/\[url\]www.(\S+?)\[\/url\]/<a href=\"http:\/\/www.$1\"\ target=\"_blank\">www.$1<\/a>/isg;
		        $message =~ s/\[url=www.(\S+?)\](.+?)\[\/url\]/<a href=\"http:\/\/$1\"\ target=\"_blank\">$2<\/a>/isg;
		        $message =~ s/\[url=((http:\/\/|ftp:\/\/|irc:\/\/|news:\/\/|gopher:\/\/|https:\/\/).+?)\](.+?)\[\/url\]/<a href=\"$1\"\ target=\"_blank\">$3<\/a>/isg;
		        $message =~ s/\[url\](http:\/\/|ftp:\/\/|irc:\/\/|news:\/\/|gopher:\/\/|https:\/\/)(.+?)\[\/url\]/<a href=\"$1$2\" target=\"_blank\">$1$2<\/a>/isg;
		        $message =~ s/\[ftp(\]ftp:\/\/|\])(.+?)\[\/ftp\]/<a href=\"ftp:\/\/$2\">ftp:\/\/$1<\/a>/isg;
		}

	        $message =~ s/\[color=(.+?)\](.+?)\[\/color\]/<font color=\"$1\">$2<\/font>/isg;
		$message =~ s/(<br>\[|\[)quote(\]<br>|\])(.+?)(<br>\[|\[)\/quote(\]<br>|\])/<blockquote><font size=\"2\" face=\"Courier New\">quote:<\/font><hr><i><font size=\"2\">$3<\/font><\/i><hr><\/blockquote>/isg;

		$message =~ s/\[fixed\]/<font face=\"Courier New\">/ig;
		$message =~ s/\[\/fixed\]/<\/font>/ig;

		$message =~ s/\[[Ss][Uu][Pp]\]/<sup>/g;
		$message =~ s/\[\/[Ss][Uu][Pp]\]/<\/sup>/g;

		$message =~ s/\[[Ss][Uu][Bb]\]/<sub>/g;
		$message =~ s/\[\/[Ss][Uu][Bb]\]/<\/sub>/g;

		$message =~ s/\[center\]/<center>/ig;
		$message =~ s/\[\/center\]/<\/center>/ig;

	        $message =~ s/\[list=(\S+?)\]/<ol type=$1>/isg;
	        $message =~ s/\[list\]/<ul>/ig;
	        $message =~ s/\[\*\]/<li>/ig;
	        $message =~ s/\[\/\*\]/<\/li>/ig;
	        $message =~ s/\[\/list\]/<\/ul>/ig;

        	$message =~ s/\[[Pp][Rr][Ee]\]/<pre>/g;
	        $message =~ s/\[\/[Pp][Rr][Ee]\]/<\/pre>/g;

	        $message =~ s/\[email(\]\s+|\])(\S+?)\@(\S+?)(\s+\[|\[)\/email\]/<a href=\"mailto:$2\@$3\"\>$2\@$3<\/a>/ig;
	        $message =~ s/\[email=(\S+?)\](.+?)\[\/email\]/<a href=\"mailto:$1\">$2<\/a>/isg;
		$message =~ s/(^|\>\.|\.|\(|\,|\(\"|&lt;|&qt;|\[|\{|^>|^<|^;|;|\>\"|^ | |>|<)([\w\d-\.]+\@[\w\d-]+\.\w{2,4}(?:\.\w{2,3})?)(\)|\.\<|\"\)|\.\"|\"\<|\.\>|&lt;|&qt;|\}|\]|\<|\>|\.\s|\.\)| |\)|\,|$)/$1<a href=\"mailto:$2\">$2<\/a>$3/g;

	        $message =~ s/(\[font=)(.+?)(\])(.+?)(\[\/font\])/<FONT face="$2">$4<\/FONT>/isg;
	        $message =~ s/(\[size=)(.+?){1}(\])(.+?)(\[\/size\])/<FONT size="$2">$4<\/FONT>/isg;

		$message =~ s/\[(left|right)\]/<p align=$1>/ig;
	        $message =~ s/\[\/(left|right)\]/<\/p>/ig;

	        $message =~ s/\[[Tt]{2}\]/<tt>/g;
	        $message =~ s/\[\/[Tt]{2}\]/<\/tt>/g;

	        if($message =~ /\[sound\](.+?)(\.)(mid|wav|au|mp3)\[\/sound\]/ && $sound == 1){
	                $message =~ s/\[sound\](\S+?)(\.)(mid|wav|au|mp3)\[\/sound\]/<embed src="$1\.$2" width=145 height=35 autoplay=false hidden=false loop=false volume=50><\/embed>/isg;
		}

	        if($message =~ /\[video\](.+?)(\.)(avi|mpeg)\[\/video\]/ && $video == 1){
	                $message =~ s/\[video\](\.+?)(\.)(avi|mpeg)\[\/video\]/<embed src="$1\.$2" width=300 height=200 autostart=false loop=false><\/embed>/isg;
		}

	        if($message =~ /\[table\](.+?)\[\/table\]/ && $tabelle == 1 && $message =~ /\[td\](.+?)\[\/td\]/){
	                $message =~ s/\[table\](.+?)\[\/table\]/<table border="0">$1<\/table>/isg;
	                $message =~ s/\[tr\](.+?)\[\/tr\]/<tr>$1<\/tr>/isg;
	                $message =~ s/\[td\](.+?)\[\/td\]/<td>$1<\/td>/isg;
		}

	        if($flash == 1){
	                $message =~ s!\[FLASH=([\d]{1,3})\,([\d]{1,3})\]((http:\/\/|gopher:\/\/|https:\/\/).+?)\[\/FLASH\]!<OBJECT classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5,0,0,0" WIDTH="$1" HEIGHT="$2"><PARAM NAME=movie VALUE="$3"> <PARAM NAME=quality VALUE=high><EMBED src="$3" quality=high WIDTH="$1" HEIGHT="$2" TYPE="application/x-shockwave-flash" PLUGINSPAGE="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"></EMBED></OBJECT>!isg;
	        }

	        if($msg == 1){
	                $message =~ s/(\[SHADOW=)([A-Za-z0-9]+)(\,)([\d]{1,3})(\,)([\d]{1,3})(\])(.+?)(\[\/SHADOW\])/<table width=$6 style="filter:shadow\(color=$2\, direction=$4)"><tr><td>$8<\/td><\/tr><\/table>/isg;
	                $message =~ s/(\[GLOW=)([A-Za-z0-9]+)(\,)([\d]{1,3})(\,)([\d]{1,3})(\])(.+?)(\[\/GLOW\])/<table width=$6 style="filter:glow\(color=$2\, strength=$4)"><tr><td>$8<\/td><\/tr><\/table>/isg;
	                $message =~ s/\[GLOW\](.+?)\[\/GLOW\]/<table width=400 style="filter:glow\(color=red\, strength=2)"><tr><td>$1<\/td><\/tr><\/table>/isg;
	                $message =~ s/(\[MOVE\])(.+?)(\[\/Move\])/<MARQUEE>$2<\/MARQUEE>/isg;
	        }
	}else{
		if($html != 1){
			$message =~ s/\"/&#034;/g;
			$message =~ s/</&lt;/g;
			$message =~ s/>/&gt;/g;
		}
	}
}

sub code {
	local($x) = @_;

	open(F,"<$x");
	flock(F,2) if($use_flock);
	$x = join("",<F>);
	flock(F,8) if($use_flock);
	close(F);

	$x =~ s!&!&amp;!g;
	$x =~ s!_!&#95;!g;
	$x =~ s!&lt;!&#60;!g;
	$x =~ s!&gt;!&#62;!g;
	$x =~ s!<!&lt;!g;
	$x =~ s!>!&gt;!g;
	$x =~ s/\|/\&\#124\;/g;
	return($x);
}

sub all_options {
   my %gd = (
   gd_ttf => {
      width      => 220,
      height     => 90,
      send_ctobg => 1,
      font       => $config{font},
      ptsize     => 30,
   },
   gd_ttf_scramble =>  {
      width      => 360,
      height     => 100,
      send_ctobg => 1,
      font       => $config{font},
      ptsize     => 25,
      scramble   => 1,
   },
   gd_ttf_scramble_fixed =>  {
      width      => 360,
      height     => 80,
      send_ctobg => 1,
      font       => $config{font},
      ptsize     => 25,
      scramble   => 1,
      angle      => 30,
   },
   );
   my %magick = (
   magick => {
      width      => 250,
      height     => 100,
      send_ctobg => 1,
      font       => $config{font},
      ptsize     => 50,
   },
   magick_scramble => {
      width      => 350,
      height     => 100,
      send_ctobg => 1,
      font       => $config{font},
      ptsize     => 30,
      scramble   => 1,
   },
   magick_scramble_fixed => {
      width      => 350,
      height     => 80,
      send_ctobg => 1,
      font       => $config{font},
      ptsize     => 30,
      scramble   => 1,
      angle      => 32,
   },
   );
   return $IS_GD ? (%gd) : (%magick);
}

sub all_styles {
   ec => {
      name       => 'ec',
      lines      => 16,
      bgcolor    => [ 0,   0,   0],
      text_color => [84, 207, 112],
      line_color => [ 0,   0,   0],
      particle   => 1000,
   },
   ellipse => {
      name       => 'ellipse',
      lines      => 15, 
      bgcolor    => [208, 202, 206],
      text_color => [184,  20, 180],
      line_color => [184,  20, 180],
      particle   => 2000,
   },
   circle => {
      name       => 'circle',
      lines      => 40, 
      bgcolor    => [210, 215, 196],
      text_color => [ 63, 143, 167], 
      line_color => [210, 215, 196],
      particle   => 3500,
   },
   box => {
      name       => 'box',
      lines      => 6,
      text_color => [245, 240, 220],
      line_color => [115, 115, 115],
      particle   => 3000,
      dots       => 2,
   },
   rect => {
      name       => 'rect',
      lines      => 30,
      text_color => [ 63, 143, 167], 
      line_color => [226, 223, 169],
      particle   => 2000,
   },
   default => {
      name       => 'default',
      lines      => 10,
      text_color => [ 68, 150, 125],
      line_color => [255,   0,   0],
      particle   => 5000,
   },
}

sub refresh {
	%config = (font       => './GD/comic.ttf');
	GD::SecurityImage->import(use_magick => $magick);

	$IS_GD           = $GD::SecurityImage::BACKEND eq 'GD';
	%options      = &all_options();
	%styles       = &all_styles();
	@optz         = keys %options;
	@styz         = keys %styles;
	$rnd_opt = $options{$optz[int rand @optz]};
	$rnd_sty = $styles{ $styz[int rand @styz]};

	   $image     = GD::SecurityImage->new(
	      lines   => $rnd_sty->{lines},
	      bgcolor => $rnd_sty->{bgcolor},
	      width => $rnd_opt->{width},
	      height => $rnd_opt->{height},
	      font => $rnd_opt->{font},
	      ptsize => $rnd_opt->{ptsize},
	      ptsize => $rnd_opt->{ptsize},
	      scramble => $rnd_opt->{scramble},
	      angle => $rnd_opt->{angle},
	      send_ctobg => $rnd_opt->{send_ctobg},
	   );
	$image->random(String::Random->new->randregex('\g\g\g\g\g\g'));
	$random_numberx = $image->random_str();
	$image->create(ttf => $rnd_sty->{name}, $rnd_sty->{text_color}, $rnd_sty->{line_color});
	$image->particle($rnd_sty->{dots} ? ($rnd_sty->{particle}, $rnd_sty->{dots}) : ($rnd_sty->{particle}));
	my($image_data, $mime_type, $random_number) = $image->out(force => 'png');;

	$Times = time();
	open(F,"+<data/sessiongrafik.txt");
	flock(F,2) if($flock);
	@session = <F>;
	seek(F,0,0);
	truncate(F,0);
	foreach(@session){
		s/[\n\r]//g;
		($SESSIONkey,$SESSIONtime) = split(/\|/);
		if($Times < ($SESSIONtime+3600)){
			print F $_ . "\n";
		}
	}
	print F "$random_number\|$Times\n";
	flock(F,8) if($flock);
	close(F);

	print "Content-Type: image/png\n\n";
	print $image_data;
	exit;
}