Файл: medals/rank.php
Строк: 272
<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
if (!isset($user) && !isset($_GET['id'])){header("Location: /index.php?".SID);exit;}
if (isset($user))$ank['id']=$user['id'];
if (isset($_GET['id']))$ank['id']=intval($_GET['id']);
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id` = '$ank[id]' LIMIT 1"),0)==0){header("Location: /index.php?".SID);exit;}
$ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));
if ((!isset($_SESSION['refer']) || $_SESSION['refer']==NULL)
&& isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER']!=NULL &&
!ereg('gifts.php',$_SERVER['HTTP_REFERER']))
$_SESSION['refer']=str_replace('&','&',ereg_replace('^http://[^/]*/','/', $_SERVER['HTTP_REFERER']));
if (isset($user))
{
$p = (isset($_GET['p'])) ? htmlspecialchars($_GET['p']) : null;
switch($p){
case 'send_rank':
include_once '../sys/inc/thead.php';
$set['title']='Наградить'; // заголовок страницы
title();
aut();
if ($user['level']>3){
$pid = intval($_GET['pid']);
if (isset($_GET['go'])){
$curr=date("d.m.y / H:i");
$balls = 0;
$msg=$_POST['msg'];
$ank['id'];
if($ank==0){
msg ('Пользователь не найден :(');
}else{if (isset($user) & $user['balls']<=$balls){
msg ('У Вас не достаточно денег :(');}else{
////////////////////
mysql_query("UPDATE `user` SET `rating` = '".($ank['rating']+2)."' WHERE `id` = '$ank[id]' LIMIT 1");
mysql_query("INSERT INTO `user_voice2` (`rating`, `id_user`, `id_kont`) VALUES ('2','0','$ank[id]')");
////////////////////
mysql_query("INSERT INTO `rank` (`id_user`, `ot_id`, `text`, `time`, `id_rank`) values('$ank[id]', '$user[id]', '$msg', '$time', '$pid')",$db);
////////////////////
$msgrat="Вас наградила администрация! Зайдите на страничку!";
mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$msgrat', '$time')");
msg ('Награда произведeна:)');
}}
include_once '../sys/inc/tfoot.php';}
echo"<img src='/rank/".$pid.".gif' alt='' class='icon'/>";
echo "<form method="post" action="rank.php?p=send_rank&id=$ank[id]&pid=".$_GET['pid']."&go">";
echo "<div class='menu'>n";
echo "Награждаем:<b> $ank[nick]</b><br/>n";
echo "</div>";
echo "Ваше сообщение:<br/>";
echo "<input type="text" name="msg" value=""/><br />rn";
echo "<input type="submit" value="Наградить" />";
echo "</form>n";
}
include_once '../sys/inc/tfoot.php';
break;
}
$pod = (isset($_GET['pod'])) ? htmlspecialchars($_GET['pod']) : null;
$set['title']='Награды';
include_once '../sys/inc/thead.php';
title();
aut();
////////////
if ($user['level']>3){
switch($pod) {
case '1':
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=1"><img src='/rank/1.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=2"><img src='/rank/2.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=3"><img src='/rank/3.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=4"><img src='/rank/4.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=5"><img src='/rank/5.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=6"><img src='/rank/6.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=7"><img src='/rank/7.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=8"><img src='/rank/8.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=9"><img src='/rank/9.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=10"><img src='/rank/10.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=11"><img src='/rank/11.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=12"><img src='/rank/12.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=13"><img src='/rank/13.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=14"><img src='/rank/14.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=15"><img src='/rank/15.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=16"><img src='/rank/16.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=17"><img src='/rank/17.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=18"><img src='/rank/18.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=19"><img src='/rank/19.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=20"><img src='/rank/20.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=21"><img src='/rank/21.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=22"><img src='/rank/22.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=23"><img src='/rank/23.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=24"><img src='/rank/24.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=25"><img src='/rank/25.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=26"><img src='/rank/26.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=27"><img src='/rank/27.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=28"><img src='/rank/28.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=29"><img src='/rank/29.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=30"><img src='/rank/30.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=31"><img src='/rank/31.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=32"><img src='/rank/32.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=33"><img src='/rank/33.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=34"><img src='/rank/34.gif' alt=''></a>";
echo " <a href="rank.php?p=send_rank&id=$ank[id]&pid=35"><img src='/rank/35.gif' alt=''></a>";
break;
}
}
else{
echo "Иди на а,хакер.Нах трогать сайт нормального чела??";
}
}else{
include_once '../sys/inc/thead.php';
$set['title']='Наградить'; // заголовок страницы
title();
aut();
echo'А тебе это и не нужно :) ';}
include_once '../sys/inc/tfoot.php';
?>