20.000 spam message within a day.

<?php
/*-------------------------------------------------------+
| PHPFusion Content Management System
| Copyright (C) 2002 - 2011 Nick Jones
| http://www.php-fusion.co.uk/
+--------------------------------------------------------+
| Filename: news.php
| Author: Nick Jones (Digitanium)
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once "maincore.php";
require_once THEMES."templates/header.php";

// Predefined variables, do not edit these values
$i = 0;

// Number of news displayed

echo '<script type="text/javascript">';
echo "function ujratolt(){";
echo " window.location.reload()";
echo "}";
echo "window.setInterval( 'ujratolt()', 10000);";
echo "</script>";


$displayComments = 100000;

$result = dbquery("   SELECT comment_id, comment_item_id, comment_type, comment_message
               FROM ".DB_COMMENTS."
               WHERE comment_hidden='0'
               ORDER BY comment_datestamp DESC
               ");
if (dbrows($result)) {
   $output = "";
   $i = 0;
   while($data = dbarray($result)) {
      if ($i == $displayComments) { break; }
      if ($data['comment_type'] == "N") {
         $access = dbcount(   "(news_id)", DB_NEWS,
                        "news_id='".$data['comment_item_id']."' AND
                        ".groupaccess('news_visibility')." AND
                        (news_start='0'||news_start<=".time().") AND
                        (news_end='0'||news_end>=".time().") 
                        ");


         if ($access > 0) {
if(strstr($data['comment_message'], "viagra") || strstr($data['comment_message'], "cialis") || strstr($data['comment_message'], "Tramadol") || strstr($data['comment_message'], "xanax") || strstr($data['comment_message'], "tramadol")  || strstr($data['comment_message'], "zolpidem")  ){
               echo "spam: ".$data['comment_message']."<br><br>";
               $w="/news.php?readmore=120&c_start=0&c_action=delete&comment_id=".$data['comment_id'];
               echo $w."<br><br>";
               echo "<iframe src='".$w."' width='16' height='16' ></iframe>";
            }
         }
      }
   }
}