<?PHP
/************************************************************************/
/* DUNE by NPDS                                                         */
/* ===========================                                          */
/*                                                                      */
/* BLOC-NOTES engine for NPDS - Philippe Brunier & Arnaud Latourrette   */
/*                                                                      */
/* NPDS Copyright (c) 2002-2007 by Philippe Brunier                     */
/*                                                                      */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License.       */
/************************************************************************/

if (strstr($bnid,"..") || strstr($bnid,"./") || stristr($bnid, "script") || stristr($bnid, "cookie") || stristr($bnid, "iframe") || stristr($bnid, "applet") || stristr($bnid, "object") || stristr($bnid, "meta") ) {
   die();
}
$result = sql_query("select texte from ".$NPDS_Prefix."blocnotes where bnid='$bnid'");
if (sql_num_rows($result) > 0) {
   list($texte)=sql_fetch_row($result);
}
$texte=StripSlashes(split_string_without_space($texte, 20));
echo "document.write('<script>document.A$bnid.texteBlocNote.value=unescape(\'".str_replace(chr(13).chr(10),"\\\\n",str_replace("'","\\\\\'",$texte))."\');</script>')";
?>