include("mainfile.php");
cookiedecode($user);
$username = $cookie[1];
if ($username == "") {
$username = "Anonymous";
}
// Define database connection details
include("config.php");
mysql_connect($dbhost, $dbuname, $dbpass);
@mysql_select_db($dbname);
$table = "".$prefix."_flashshout";
// Attempt to connect to MySQL server
$link = @mysql_connect($dbhost, $dbuname, $dbpass);

// If the connection was unsuccessful...
if (!$link)
{
// Report error to Flash and exit
    print "&result=Fail";
    print "&errorMsg=" . urlencode("Could not connect to server");
    exit;
}

// Attempt to connect to MySQL server
$link = @mysql_connect($dbhost, $dbuname, $dbpass);

// If the connection was unsuccessful...
if (!$link)
{
// Report error to Flash and exit
    print "&result=Fail";
    print "&errorMsg=" . urlencode("Could not connect to database");
    exit;
}

// Attempt to select database. If unsuccessfull...
if (!@mysql_select_db($dbname))
{
// Report error to Flash and exit
    print "&result=Fail";
    print "&errorMsg=" . urlencode("Could not select $dbname database");
    exit;
}

// Fetch the current time
$posted = time();
$flashshoutTitle = ereg_replace("[^A-Za-z0-9 ]", "", $flashshoutTitle);
//$flashshoutBody = ereg_replace("[^A-Za-z0-9 \@\.\-\/\']", "", $flashshoutBody);
$flashshoutTitle = stripslashes($flashshoutTitle);
//$flashshoutBody = stripslashes($flashshoutBody);
// Build Query
if ($Submit == "Yes") {
$query = "INSERT INTO ".$prefix."_flashshout (ip, title, body, posted)
          VALUES('$REMOTE_ADDR', '$username', '$flashshoutBody', $posted)";
}
// Execute Query
$result = @mysql_query($query);

// If query was successful
if ($result) {

// Report success back to Flash movie
    print "&result=Okay";
}
else
{
// Otherwise, tell Flash we have an error
    print "&result=Fail";
    print "&errorMsg=" . urlencode("Couldn't add posts");
}

// Close the connection
mysql_close($link);

?>

$username = "Anonymous"; 
}