//  xgaestebuch - Neueintrag - 14.10.2001
      // ------------------------------------------------------------
      elseif($_REQUEST['aktion'] == "neu")
      {
        kopf();
?>      <div align="center"class="normal"> [ <a href="xgaestebuch.<?php echo $dateiendung; ?>" class="normal">&laquo; zur&uuml;ck</a> ] </div>
        <hr noshade width="75%">
        <br>
        <form action="xgaestebuch.<?php echo $dateiendung; ?>" method="post" name="xgaestebuch">
        <input type="hidden" name="<?php echo session_name(); ?>" value="<?php echo session_id(); ?>">

<?php   rahmen_auf("neuer G&auml;stebucheintrag",$ktupel['konfiguration_tabellenbreite']);
?>      <table cellspacing="3" cellpadding="3" align="center" border="0" width="100%">
          <tr>
            <td colspan="2">
              <table cellspacing="2" cellpadding="2" align="center" border="0" width="100%">
                <tr>
                  <td valign="top" align="right" class="beschriftung">Name:</td>
                  <td valign="top" align="left"  class="normal"><input type="text" name="xgaestebuch_name"      value="<?php echo stripslashes(htmlentities($_REQUEST['xgaestebuch_name'])); ?>"  class="textfeld"></td>
                </tr>
<?php           if($ktupel['konfiguration_emailerlaubt'] == "ja")
                {
?>              <tr>
                  <td valign="top" align="right" class="beschriftung">E-Mail:</td>
                  <td valign="top" align="left"  class="normal"><input type="text" name="xgaestebuch_email"     value="<?php echo stripslashes(htmlentities($_REQUEST['xgaestebuch_email'])); ?>" class="textfeld"></td>
                </tr>
<?php           }
                if($ktupel['konfiguration_wwwerlaubt'] == "ja")
                {
?>              <tr>
                  <td valign="top" align="right" class="beschriftung">Homepage:<br><span class="klein">mit http://</span></td>
                  <td valign="top" align="left"  class="normal"><input type="text" name="xgaestebuch_www"       value="<?php echo stripslashes(htmlentities($_REQUEST['xgaestebuch_www'])); ?>"   class="textfeld"></td>
                </tr>
<?php           }
?>              <tr>
                  <td valign="top" align="right" class="beschriftung">Kommentar:<br>
<?php             if($ktupel['konfiguration_htmlerlaubt'] == "ja")
                  {
?>                  <span class="klein">HTML erlaubt.</span>
<?php             }
                  else
                  {
?>                  <span class="klein">HTML <b>nicht</b> erlaubt.</span>
<?php             }
?>                </td>
                  <td valign="top" align="left"  class="normal"><textarea rows="<?php echo $rows; ?>" name="xgaestebuch_eintrag" id="xgaestebuch_eintrag" class="textfeld"><?php echo stripslashes(htmlentities($_REQUEST['xgaestebuch_eintrag'])); ?></textarea></td>
                </tr>
<?php           bbcode();
?>            </table>
            </td>
          </tr>
          <tr>
            <td colspan="2" align="center" class="normal"><hr noshade></td>
          </tr>
          <tr>
            <td align="center" class="normal"><input type="submit" name="xgaestebuch_klick1" value="Speichern" class="schaltflache"></td>
            <td align="center" class="normal"><input type="submit" name="xgaestebuch_klick2" value="Vorschau"  class="schaltflache"></td>
          </tr>
        </table>
<?php   rahmen_zu();
?>      <input type="hidden" name="xgaestebuch_datum"    value="<?php echo $datum; ?>">
        <input type="hidden" name="aktion"               value="speichern">
        <input type="hidden" name="quelle"               value="eintragneu<?php echo substr(md5($_SERVER['REMOTE_ADDR']),0,16) ;?>">
        <input type="hidden" name="id"                   value="<?php echo $_REQUEST['id'];      ?>">
        <input type="hidden" name="von"                  value="<?php echo $_REQUEST['von'];     ?>">
        <input type="hidden" name="bis"                  value="<?php echo $_REQUEST['bis'];     ?>">
<?php   if($ktupel['konfiguration_spamschutz'] == "ja")
        {
?>      <input type="hidden" name="spamschutz"           value="<?php echo substr(md5($_SERVER['REMOTE_ADDR']),0,16); ?>">
<?php   }
?>      </form>
<?php   fuss();
      }



//  Neueintrag speichern - 15.10.2003
        // ------------------------------------------------------------
        elseif($_REQUEST['xgaestebuch_klick1'] == "Speichern" && $_REQUEST['quelle'] == "eintragneu".substr(md5($_SERVER['REMOTE_ADDR']),0,16))
        {
          if($ktupel['konfiguration_spamschutz'] == "ja")
          {
            if($_REQUEST['spamschutz'] != substr(md5($_SERVER['REMOTE_ADDR']),0,16))
            {
              $ziel = "Location: xgaestebuch.".$dateiendung."?von=".$_REQUEST['von']."&bis=".$_REQUEST['bis'];
              header ($ziel);
              exit;
            }
          }


          $sql = "INSERT INTO  ".$tabelle_eintraege." (xgaestebuch_name,
                                                       xgaestebuch_email,
                                                       xgaestebuch_www,
                                                       xgaestebuch_datum,
                                                       xgaestebuch_zeitstempel,
                                                       xgaestebuch_eintrag)
                                               VALUES ('".addslashes($_REQUEST['xgaestebuch_name'])."',
                                                       '".addslashes($_REQUEST['xgaestebuch_email'])."',
                                                       '".addslashes($_REQUEST['xgaestebuch_www'])."',
                                                       '".addslashes($_REQUEST['xgaestebuch_datum'])."',
                                                       '".$jetzt."',
                                                       '".addslashes($_REQUEST['xgaestebuch_eintrag'])."')";

          $ergebnis = mysql_query($sql, $datenbankID) or fehler("Eintrag konnte nicht gespeichert werden!",__FILE__,__LINE__,$sql,mysql_error());
          emailbenachrichtigung();
          $ziel = "Location: xgaestebuch.".$dateiendung."?von=".$_REQUEST['von']."&bis=".$_REQUEST['bis'];
          header ($ziel);
          exit;
        }