Vote Script funzt nicht

<?php
//****************************** Wichtige Variablen ************************************************** ***************
$vote = 1; // Voteskript aktiv (1 = Ja, Jede andere Zahl = Nein)
$timelimit = 43500; // Das Zeitlimit in Sekunden (12 Stunden = 43200 Sekunden)
$character = $_POST['Charakter']; // Charakter-ID für das Senden der Items
$ChoosedItem = $_POST['ChooseItem']; // Variable für die Auswahl der Items
$timestamp = time(); // Zeit, die zusammen mit $timelimit die Sperrzeit ergibt
$ip = $_SERVER['REMOTE_ADDR']; // IP (wird geloggt)
$datum = date("Y-m-d H:i:s",$timestamp); // Datum (wird geloggt)

if ($ChoosedItem == 1) { // Eigenschaften des ersten zu wählenden Items
$rewardName = "Scroll of Experience ES (S)"; // Exakter Name des Items
$rewardId = '30148'; // ID des Items
$rewardAmount = '4';} // Anzahl des Items
elseif ($ChoosedItem == 2){ // Eigenschaften des zweiten zu wählenden Items
$rewardName = "Special Upcut Stone"; // Exakter Name des Items
$rewardId = '30058'; // ID des Items
$rewardAmount = '4';} // Anzahl des Items
elseif ($ChoosedItem == 3){ // Eigenschaften des dritten zu wählenden Items
$rewardName = "Scroll of Sprint"; // Exakter Name des Items
$rewardId = '10490'; // ID des Items
$rewardAmount = '8';} // Anzahl des Items
else { // Eigenschaften des dritten zu wählenden Items
$rewardName = "Remantis Laccotte"; // Exakter Name des Items
$rewardId = '10206'; // ID des Items
$rewardAmount = '6'; // Anzahl des Items
}
//************************************************** ************************************************** ***************
if ($vote == 1) {
$db = @mssql_select_db('HOMEPAGE_DBF') or die ("Homepage-Error #001");
$result = mssql_fetch_row(mssql_query("SELECT top 1 character, ip, date, time FROM VOTE_TBL WHERE ip = '$ip' order by time DESC"));
$last = date('Y-m-d H:i:s',mktime(date('H'),date('i'),date('s'),date(' m'),date('d')-1,date('y')));
$lastday = mssql_fetch_row(mssql_query("SELECT count(*) FROM VOTE_TBL where [date] > '$last'"));
$alltime = mssql_fetch_row(mssql_query("SELECT count(*) FROM VOTE_TBL"));

if($ip == $result[1] and ($timestamp - $result[3] < $timelimit)){

$vote_allow = 0;
$votetime = $timelimit-($timestamp - $result[3]);
$Stunden = floor($votetime / 3600);
$Minuten = floor(($votetime / 3600 - $Stunden) * 60);
$Sekunden = floor((($votetime / 3600 - $Stunden) * 60 - $Minuten) * 60);
$votenotice = 'Du kannst erneut in <b>'.$Stunden.'</b> Stunden, <b>'.$Minuten.'</b> Minuten und <b>'.$Sekunden.'</b> Sekunden voten.';
mssql_close($link);
}
else {$vote_allow = 1; $votenotice = '<span id="OpenVoteWindow" onclick="OpenVoteWindow();">Klicke hier, um für BloodyFlyff zu voten.<br /><b>' .$lastday[0].'</b> Leute haben die letzten 24 Stunden gevotet!</span>';}
mssql_close($link);
} else {$votenotice = 'Das Voteskript ist zur Zeit nicht verfügbar.'; mssql_close($link);}



if ($vote_allow == 1) {
if(isset($_POST['submitvote'])){
require_once("xinc_antisql.php");
$antisql = preg_replace($check,"",$_POST['Charakter'].$_POST['ChooseItem']);

if ($_POST['Charakter'].$_POST['ChooseItem'] != $antisql or $ChoosedItem == '0' or $ip == $result[0] and ($timestamp - $result[1] < $timelimit)) {$votenotice = '<b>Fehler #01:</b><br />Wähle bitte ein <b>Item</b> aus und/oder trage einen <b>gültigen Charakternamen</b> ein.';}
else {
$db = @mssql_select_db('CHARACTER_01_DBF') or die ("Homepage-Error #012");
$result = mssql_query("SELECT m_idPlayer, m_szName FROM CHARACTER_TBL WHERE m_szName = '$character';"); $sql_row = mssql_fetch_row($result); $character1 = $sql_row[0];
if($_POST['Charakter'] != $sql_row[1]) {$votenotice = '<b>Fehler:</b><br />Es existiert kein Charakter, der "<i>'.$_POST['Charakter'].'</i>" heist.';}
else {
$db = @mssql_select_db('HOMEPAGE_DBF') or die ("Homepage-Error #03");
mssql_query("INSERT INTO VOTE_TBL (character, ip, date, time) VALUES ('$character', '$ip', '$datum', '$timestamp')");
$db = @mssql_select_db('CHARACTER_01_DBF') or die ("Homepage-Error #04");
mssql_query("INSERT INTO ITEM_SEND_TBL([m_idPlayer], [serverindex], [Item_Name], [Item_count], [idSender], [adwItemId0]) VALUES ('{$character1}', '01', '{$rewardName}', '{$rewardAmount}', '0000001', '{$rewardId}');");
$votenotice = 'Vielen Dank, '.$_POST['Charakter'].'. :)';}

mssql_close($link);
}
}
}
?>

<!-- Votebox -->



<script type="text/javascript">
function OpenVoteWindow() {$("#VoteWindow").fadeIn(500); $("#OpenVoteWindow").fadeOut(0);}
function OpenLinks() {var VoteWindow = window.open("http://topofgames.com/index.php?do=votes&id=23040");}
</script>
<?php include('Votescript/xinc_vote.php');?>

<form action="" method="post">
<label>Character:<br></label> <input type="text" name="Charakter"/><br>
<br /> <select name="ChooseItem">
<option value="0">*** Please choose an Item ***</option>
<option value="1">3x Scroll of Amplification ES (S)</option>
<option value="2">2x Scroll of Element Change</option>
<option value="3">5x Scroll of Resurrection</option>
<option value="4">1x Silver Battery (12h)</option>
</select>
<br /><br>
<center><input type="submit" name="submitvote" onclick="OpenLinks(<?php echo $opensite?>);" value="Vote for Battle-For-Eternity!"/></center>
</form>

<div>
<center><?php echo $votenotice;?></center>
</div>




<!-- Votebox -->

<?php
$check[0] = "/\\--/";
$check[1] = "/';/";
$check[2] = "/ACCOUNT_DBF/";
$check[3] = "/CHARACTER_01_DBF/";
$check[4] = "/HOMEPAGE_DBF/";
$check[5] = "/LOGGING_01_DBF/";
$check[6] = "/RANKING_DBF/";
?>

<?php
//****************************** Wichtige Variablen ************************************************** ***************
$vote = 1; // Voteskript aktiv (1 = Ja, Jede andere Zahl = Nein)
$timelimit = 43200; // Das Zeitlimit in Sekunden (12 Stunden = 43200 Sekunden)
$character = $_POST['Charakter']; // Charakter-ID für das Senden der Items
$ChoosedItem = $_POST['ChooseItem']; // Variable für die Auswahl der Items
$timestamp = time(); // Zeit, die zusammen mit $timelimit die Sperrzeit ergibt
$ip = $_SERVER['REMOTE_ADDR']; // IP (wird geloggt)
$datum = date("Y-m-d H:i:s",$timestamp); // Datum (wird geloggt)

if ($ChoosedItem == 1) { // Eigenschaften des ersten zu wählenden Items
$rewardName = "Scroll of Amplification ES (S)"; // Exakter Name des Items
$rewardId = '30148'; // ID des Items
$rewardAmount = '3';} // Anzahl des Items
elseif ($ChoosedItem == 2){ // Eigenschaften des zweiten zu wählenden Items
$rewardName = "Scroll of Element Change"; // Exakter Name des Items
$rewardId = '20037'; // ID des Items
$rewardAmount = '2';} // Anzahl des Items
elseif ($ChoosedItem == 3){ // Eigenschaften des dritten zu wählenden Items
$rewardName = "Scroll of Resurrection"; // Exakter Name des Items
$rewardId = '10431'; // ID des Items
$rewardAmount = '5';} // Anzahl des Items
else { // Eigenschaften des dritten zu wählenden Items
$rewardName = "Silver Battery"; // Exakter Name des Items
$rewardId = '26454'; // ID des Items
$rewardAmount = '1'; // Anzahl des Items
}
//************************************************** ************************************************** ***************

if ($vote == 1) {
$link = mssql_connect('NAME\SQLEXPRESS', 'sa', 'PW');
$db = @mssql_select_db('HOMEPAGE_DBF') or die ("Homepage-Error #00");
$result = mssql_fetch_row(mssql_query("SELECT top 1 character, ip, date, time FROM VOTE_TBL WHERE ip = '$ip' order by time DESC"));
$last = date('Y-m-d H:i:s',mktime(date('H'),date('i'),date('s'),date(' m'),date('d')-1,date('y')));
$lastday = mssql_fetch_row(mssql_query("SELECT count(*) FROM VOTE_TBL where [date] > '$last'"));
$alltime = mssql_fetch_row(mssql_query("SELECT count(*) FROM VOTE_TBL"));

if($ip == $result[1] and ($timestamp - $result[3] < $timelimit)){

$vote_allow = 0;
$votetime = $timelimit-($timestamp - $result[3]);
$Stunden = floor($votetime / 3600);
$Minuten = floor(($votetime / 3600 - $Stunden) * 60);
$Sekunden = floor((($votetime / 3600 - $Stunden) * 60 - $Minuten) * 60);
$votenotice = 'You can vote again in <b>'.$Stunden.'</b> hours, <b>'.$Minuten.'</b> minutes and <b>'.$Sekunden.'</b> seconds.';
mssql_close($link);
}
else {$vote_allow = 1; $votenotice = '<span id="OpenVoteWindow" onclick="OpenVoteWindow();">Click here to vote for Battle-For-Eternity.<br /><b>' .$lastday[0].'</b> People have vote in the last 24 hours!</span>';}

} else {$votenotice = 'The vote script is currently not available.'; mssql_close($link);}



if ($vote_allow == 1) {
if(isset($_POST['submitvote'])){
require_once("xinc_antisql.php");
$antisql = preg_replace($check,"",$_POST['Charakter'].$_POST['ChooseItem']);

if ($_POST['Charakter'].$_POST['ChooseItem'] != $antisql or $ChoosedItem == '0' or $ip == $result[0] and ($timestamp - $result[1] < $timelimit)) {$votenotice = '<b>Error #01:</b><br />Please select an <b>Item</ b> and/or wear a<b>valid character names</ b>.';}
else {
$link = mssql_connect('NAME\SQLEXPRESS', 'sa', 'PW');
$db = @mssql_select_db('CHARACTER_01_DBF') or die ("Homepage-Error #01");
$result = mssql_query("SELECT m_idPlayer, m_szName FROM CHARACTER_TBL WHERE m_szName = '$character';"); $sql_row = mssql_fetch_row($result); $character1 = $sql_row[0];
if($_POST['Charakter'] != $sql_row[1]) {$votenotice = '<b>Error:</b><br />A character with the name "<i>'.$_POST['Charakter'].'</i>" doesn´t exist.';}
else {
$db = @mssql_select_db('HOMEPAGE_DBF') or die ("Homepage-Error #03");
mssql_query("INSERT INTO VOTE_TBL (character, ip, date, time) VALUES ('$character', '$ip', '$datum', '$timestamp')");
$db = @mssql_select_db('CHARACTER_01_DBF') or die ("Homepage-Error #04");
mssql_query("INSERT INTO ITEM_SEND_TBL([m_idPlayer], [serverindex], [Item_Name], [Item_count], [idSender], [adwItemId0]) VALUES ('{$character1}', '01', '{$rewardName}', '{$rewardAmount}', '0000001', '{$rewardId}');");
$votenotice = 'Thank you very much, '.$_POST['Charakter'].'. :)';}

mssql_close($link);
}
}
}
?>