Tekil Mesaj gösterimi - Güvenlik kodu

Konu Güvenlik kodu
04-09-2014, 16:35:09
Üyeliği durduruldu
Haber Sitesine çok yoğun bir şeklide saldırı başladı.Güvenlik kodu katılması lazım.ama yorumlar admin panele gidiyor. reCAPTCHA yı denedim ama sorguyu çalıştıramadım.

Haber Tekil sayfasına reCAPTCHA koymam gerekiyor.Yardım edebilir misiniz.

KOD:
<div class="HaberDetayBaslikk"><h1> <?=$sf->baslik?> </h1></div>
        <div> <?=$sf->tarih?>
        
        
      </div> <!--HaberDetayBaslik-->
        <br />
        <img src="<?=$sf->resim?>"  style="padding-right:10px; display:block; width:700px; "/>
       <div style="float:left;"> <br/>
<span class='st_facebook_large' displayText='Facebook'></span>
<span class='st_twitter_large' displayText='Tweet'></span>
<span class='st_googleplus_large' displayText='Google +'></span>      </div> 
      <div class="HaberDetayIcerik">

        <p>
        <?=$sf->icerik?>        
        </p></div>

        
    <div style="margin-top:15px; border-bottom:#CCC solid 1px; display:block;  float:left; width:700px; height:20px;" /> </div>
     <div style="float:left; margin-top:10px;  width:700px;">
     <h1 style="color:#900; display:block;"> Habere Yorum Yap </h1>
  </div>
    <form name="form1" method="post" action="">
  <table width="700" border="0" align="left" cellpadding="0" cellspacing="0" style="margin-top:5px;">
    <tr>
      <td width="111" height="25" align="left">Ad Soyad</td>
      <td width="10" height="25" align="left">:</td>
      <td width="579" height="25" align="left" style="padding:5px;"><input class="txt" type="text" name="isim" id="textfield"></td>
    </tr>
    <tr>
      <td height="25" align="left">Yorum</td>
      <td height="25" align="left">:</td>
      <td height="25" align="left" style="padding:5px;"> <textarea class="txtb" name="yorum" id="textarea" cols="45" rows="5"></textarea></td>
    </tr>
    <tr>
      <td height="53" align="left">&nbsp;</td>
      <td height="53" align="left">&nbsp;</td>
      <td height="53" align="left" >

      	<input type="submit" name="button" id="button" value="Habere Yorum Yap"></td>
    </tr>
  </table>
</form>
 <div style="  border-bottom:#CCC solid 1px; display:block;  float:left; width:700px; height:10px;" /> </div>
    
        <div style="float:left; margin-top:10px;  width:700px;">
     <h1 style="color:#900; display:block;"> Haber Yorumları </h1>
  </div>
    
    
     
      <table width="700" border="0" align="left" cellpadding="0" cellspacing="0" style="margin-top:5px;">
<?
                                                  $y = mysql_query("SELECT * FROM yorumlar WHERE haber='$_GET[id]' AND onay='1'");
                                                  while($yy=mysql_fetch_object($y)){?>
    <tr>
      <td width="92" height="25" align="left"><strong><?=$yy->isim?></strong></td>
      <td width="10" height="25" align="left">:</td>
      <td width="598" height="25" align="left" style="padding:5px;"><strong> </strong>
        <?=$yy->yorum?>
      </td>
    </tr>
    <? } ?>

  </table>

    
    
     
        
 
                     
                     
      
        
<? } elseif($_GET["altsayfa"]=="koseyazisi"){ 
$kh = mysql_fetch_object($genel->getkosesingle($_GET["id"]));
$yazar = mysql_fetch_object($genel->yazarbul($kh->yazar_id));
$hit = $kh->hit;
$hit++;
$genel->hitarttirk($kh->id,$hit);
if(!empty($_POST["isim"]) && !empty($_POST["yorum"])){
  $isim = $_POST["isim"];
  $yorum = $_POST["yorum"];
  $ip = $_SERVER['REMOTE_ADDR'];
  $sa = getdate();
  $tarih = date("d/m/y")."&nbsp;".$sa["hours"].":".$sa["minutes"].":".$sa["seconds"];
  $query = mysql_query("INSERT INTO yorumlar (isim,yorum,ip,tarih,kose) VALUES ('$isim','$yorum','$ip','$tarih','$_GET[id]')");

}
?>
       <div class="ortasolKisim"> 
          
         <div class="yazaradi"><?=$kh->baslik?></div>
         <div class="cizgi"></div> <br />
        <BR /><div class="yazaradialt"> <?=$yazar->isim?> </div>
       <div class="micon"><img src="<?=$dt->tbase?>img/micon.png"/><?=$yazar->mail?></div>
                <br/>
       
       <div class="tarihx">Tarih : <?=$kh->tarih?></div>
       <div class="kisiokudu"><?=$kh->hit?> kişi okudu</div>
        </div>
        
      <p>
        <!--HaberDetayBaslik-->
      <div class="cerceve">
        <img src="<?=$yazar->resim?>" style="display:block; width:150px;"/></div>
       <div class="HaberDetayBaslik" style="float:left;"> 

        <script>function fbs_click() {u=location.href;t=document.title;window.open('http://www.facebook.com/sharer.php?u='+encodeURIComponent(u)+'&t='+encodeURIComponent(t),'sharer','toolbar=0,status=0,width=626,height=436');return false;}</script><style> html .fb_share_link { padding:10px 0 0 50px; height:26px; background:url(<?=$dt->tbase?>img/social_icon1.png) no-repeat top left; }</style><a rel="nofollow" href="http://www.facebook.com/share.php?u=<;url>" onclick="return fbs_click()" target="_blank" class="sosyal_1"></a>
        <a href="https://twitter.com/share" class="sosyal_4" data-lang="tr"></a>
<script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+'://platform.twitter.com/widgets.js';fjs.parentNode.insertBefore(js,fjs);}}(document, 'script', 'twitter-wjs');</script>


<!-- Place this tag where you want the share button to render. -->
<div class="g-plus" data-action="share" data-annotation="bubble"></div>

<!-- Place this tag after the last share tag. -->
<script type="text/javascript">
  window.___gcfg = {lang: 'tr'};

  (function() {
    var po = document.createElement('script'); po.type = 'text/javascript'; po.async = true;
    po.src = 'https://apis.google.com/js/plusone.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(po, s);
  })();
</script>
      </div> 
        </p>
      <p>&nbsp;</p>
      <div class="HaberDetayIcerikYazar">
      <?=$kh->icerik?>
            <div class="ortasolKisim"> 
            <div class="saatrx"><a href="index.php?sayfa=yazar&yazar_id=<?=$yazar->id?>">YAZARIN ESKİ YAZILARI</a></div>
           </div>
        </p>
    </div>

        
    <div style="margin-top:15px; border-bottom:#CCC solid 1px; display:block;  float:left; width:700px; height:20px;" /> </div>
     <div style="float:left; margin-top:10px;  width:700px;">
     <h1 style="color:#900; display:block;"> Habere Yorum Yap </h1>
  </div>
    <form name="form1" method="post" action="">
  <table width="700" border="0" align="left" cellpadding="0" cellspacing="0" style="margin-top:5px;">
    <tr>
      <td width="111" height="25" align="left">Ad Soyad</td>
      <td width="10" height="25" align="left">:</td>
      <td width="579" height="25" align="left" style="padding:5px;"><input class="txt" type="text" name="isim" id="textfield"></td>
    </tr>
    <tr>
      <td height="25" align="left">Yorum</td>
      <td height="25" align="left">:</td>
      <td height="25" align="left" style="padding:5px;"> <textarea class="txtb" name="yorum" id="textarea" cols="45" rows="5"></textarea></td>
    </tr>
    <tr>
      <td height="53" align="left">&nbsp;</td>
      <td height="53" align="left">&nbsp;</td>

      <td height="53" align="left" ><input type="submit" name="button" id="button" value="Habere Yorum Yap"></td>
    </tr>
  </table>
</form>
 <div style="  border-bottom:#CCC solid 1px; display:block;  float:left; width:700px; height:10px;" /> </div>
    
    
        <div style="float:left; margin-top:10px;  width:700px;">
     <h1 style="color:#900; display:block;"> Haber Yorumları </h1>
  </div>
    
    
     
      <table width="700" border="0" align="left" cellpadding="0" cellspacing="0" style="margin-top:5px;">
<?
                                                  $y = mysql_query("SELECT * FROM yorumlar WHERE kose='$_GET[id]' AND onay='1'");;
                                                  while($yy=mysql_fetch_object($y)){?>
    <tr>
      <td width="92" height="25" align="left"><strong><?=$yy->isim?></strong></td>
      <td width="10" height="25" align="left">:</td>
      <td width="598" height="25" align="left" style="padding:5px;"><strong> </strong>
        <?=$yy->yorum?>
      </td>
    </tr>
    <? } ?>

  </table>     
        
 <hr size=2 width="100%"><br />
<?
 } ?>