<?php

	session_start();

	$con = mysql_connect("IP","root", "pass") or die (mysql_error());

	$db = mysql_select_db("gameserver_betax", $con);

?>

<?php

	if(isset ($_SESSION['uid'])) {

		if(isset($_POST['submit'])){

			$mesg = $_POST['message'];

			if($mesg){

				if(strlen($mesg) < 256){

					$sql = "INSERT INTO shoutbox VALUES ('".mysql_insert_id()."', '".$_SESSION['uid']."', '".$mesg."', '".date("Y-m-d")."')";

					$res = mysql_query($sql) or die(mysql_error());

					echo "Message sent!";

				}else{

					echo "Message length must be more than 1 character and no more than 255 characters!<br>";

				}

			}else{

				echo "Cannot send empty message!";

			}

			echo "<form action='shoutbox.php' method='post'>";

			echo "<input type='text' name='message' style='width: 134px;'> <input type='submit' name='submit' value='Send'>";

			echo "</form>";

			$sql = "SELECT * FROM shoutbox ORDER BY msgid DESC LIMIT 10";

			$res = mysql_query($sql) or die(mysql_error());

			echo "<div class='shoutbox'>";

			while($row = mysql_fetch_assoc($res)){

				echo "<b>".$row['sender']."</b><br>".$row['message']."<br><br>";

			}

			echo "</div>";

		}else{

			echo "<form action='shoutbox.php' method='post'>";

			echo "<input type='text' name='message' style='width: 134px;'> <input type='submit' name='submit' value='Send'>";

			echo "</form>";

			$sql = "SELECT * FROM shoutbox ORDER BY msgid DESC LIMIT 10";

			$res = mysql_query($sql) or die(mysql_error());

			echo "<div class='shoutbox'>";

			while($row = mysql_fetch_assoc($res)){

				echo "<b>".$row['sender']."</b><br>".$row['message']."<br><br>";

			}

			echo "</div>";

		}

	}else{

		echo "You are not logged in. Please <a href='accmgr.php'>login</a>!";

	}

?>