Файл: forum/index.php
Строк: 373
<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
/* Бан пользователя */
if (mysql_result(mysql_query("SELECT COUNT(`id`) FROM `ban` WHERE `razdel` = 'forum' AND `id_user` = '$user[id]' AND (`time` > '$time' OR `view` = '0' OR `navsegda` = '1')"), 0)!=0)
{
header('Location: /ban.php?'.SID);exit;
}
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(`id`) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_razdel']) && mysql_result(mysql_query("SELECT COUNT(`id`) FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_them']) && mysql_result(mysql_query("SELECT COUNT(`id`) FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_post']) && mysql_result(mysql_query("SELECT COUNT(`id`) FROM `forum_p` WHERE `id` = '".intval($_GET['id_post'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
)
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$razdel=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$them=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$post=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_p` WHERE `id` = '".intval($_GET['id_post'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$post2=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_p` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' ORDER BY `id` DESC LIMIT 1"));
if (isset($user)){
$ank=get_user($post['id_user']);
if (isset($_GET['act']) && $_GET['act']=='edit' && isset($_POST['msg']) && isset($_POST['post']) &&
((user_access('forum_post_ed'))
||
(isset($user) && $user['id']==$post['id_user'] && $post['time']>time()-600 && $post['id_user']==$post2['id_user']) )
)
{
$msg=$_POST['msg'];
if (isset($_POST['translit']) && $_POST['translit']==1)$msg=translit($msg);
if (strlen2($msg)<2)$err[]='Короткое сообщение';
if (strlen2($msg)>1024)$err[]='Длина сообщения превышает предел в 1024 символа';
$mat=antimat($msg);
if ($mat)$err[]='В тексте сообщения обнаружен мат: '.$mat;
if (!isset($err))mysql_query("UPDATE `forum_p` SET `msg` = '".my_esc($msg)."' WHERE `id` = '$post[id]' LIMIT 1");
}
elseif (isset($_GET['act']) && $_GET['act']=='edit' && (user_access('forum_post_ed') && ($ank['level']<$user['level'] || $ank['level']==$user['level'] && $ank['id']==$user['id']) || isset($user) && $post['id']==$post2['id'] && $post['id_user']==$user['id'] && $post['time']>time()-600)){
$set['title']='Форум - редактирование поста'; // заголовок страницы
include_once '../sys/inc/thead.php';
title();
echo "<form method='post' name='message' action='/forum/".$forum['id']."/".$razdel['id']."/".$them['id']."/".$post['id']."/edit'>n";
$msg2=output_text($post['msg'],false,true,false,false,false);
if ($set['web'] && is_file(H.'style/themes/'.$set['set_them'].'/altername_post_form.php'))
include_once H.'style/themes/'.$set['set_them'].'/altername_post_form.php';
else
echo "Сообщение:<br />n<textarea name="msg">".$msg2."</textarea><br />n";
echo "<input name='post' value='Изменить' type='submit' /><br />n";
echo "</form>n";
echo "<div class="foot">n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>" . text($razdel['name']) . "</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/" title='В подфорум'>" . text($forum['name']) . "</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
elseif (isset($_GET['act']) && $_GET['act']=='delete' && isset($user) && $them['close']==0 && ((user_access('forum_post_ed') && ($ank['level']<=$user['level'] || $ank['level']==$user['level'] && $ank['id']==$user['id'])) || $post['id']==$post2['id'] && $post['id_user']==$user['id'] && $post['time']>time()-600)){
mysql_query("DELETE FROM `forum_p` WHERE `id` = '".intval($_GET['id_post'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1");
}
elseif (isset($_GET['act']) && $_GET['act']=='msg' && $them['close']==0 && isset($user)){
$ank=get_user($post['id_user']);
$set['title']='Форум - '.text($them['name']); // заголовок страницы
include_once '../sys/inc/thead.php';
title();
aut();
echo "<form method='post' name='message' action='/forum/$forum[id]/$razdel[id]/$them[id]/new'>n";
echo "<a href='/info.php?id=$ank[id]'>Посмотреть анкету</a><br />n";
$msg2=$ank['nick'].', ';
if ($set['web'] && is_file(H.'style/themes/'.$set['set_them'].'/altername_post_form.php'))
include_once H.'style/themes/'.$set['set_them'].'/altername_post_form.php';
else
echo "Сообщение:<br />n<textarea name="msg">$ank[nick], </textarea><br />n";
echo "<input name='post' value='Отправить сообщение' type='submit' /><br />n";
echo "</form>n";
echo "<div class="foot">n";
echo "<img src='/style/icons/str.gif' alt='*'> <a href="/smiles.php">Смайлы</a><br />n";
echo "<img src='/style/icons/str.gif' alt='*'> <a href="/rules.php">Правила</a><br />n";
echo "</div>n";
echo "<div class="foot">n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>" . text($razdel['name']) . "</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/" title='В подфорум'>" . text($forum['name']) . "</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
elseif (isset($_GET['act']) && $_GET['act']=='cit' && $them['close']==0 && isset($user)){
$ank=get_user($post['id_user']);
$set['title']='Форум - '.text($them['name']); // заголовок страницы
include_once '../sys/inc/thead.php';
title();
aut();
echo "Будет процитировано сообщение:<br />n";
echo "<div class='cit'>n";
echo output_text($post['msg'])."<br />n";
echo "</div>n";
echo "<form method='post' name='message' action='/forum/$forum[id]/$razdel[id]/$them[id]/new'>n";
echo "<input name='cit' value='$post[id]' type='hidden' />";
$msg2=$ank['nick'].', ';
if ($set['web'] && is_file(H.'style/themes/'.$set['set_them'].'/altername_post_form.php'))
include_once H.'style/themes/'.$set['set_them'].'/altername_post_form.php';
else
echo "Сообщение:<br />n<textarea name="msg">$ank[nick], </textarea><br />n";
echo "<input name='post' value='Отправить сообщение' type='submit' /><br />n";
echo "</form>n";
echo "<div class="foot">n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>" . text($razdel['name']) . "</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/$forum[id]/" title='В подфорум'>" . text($forum['name']) . "</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
}
}
/*
|| Работа с разделом, темами в нём ||
*/
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_razdel']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_them']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1 )
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$razdel=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$them=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
if (isset($user)){
mysql_query("UPDATE `notification` SET `read` = '1' WHERE `id_object` = '$them[id]' AND `type` = 'them_komm' AND `id_user` = '$user[id]'");
mysql_query("UPDATE `discussions` SET `count` = '0' WHERE `id_user` = '$user[id]' AND `type` = 'them' AND `id_sim` = '$them[id]' LIMIT 1");
}
$set['title']='Форум - '.text($them['name']); // заголовок страницы
include_once '../sys/inc/thead.php';
title();
$ank2=get_user($them['id_user']);
include 'inc/set_them_act.php';
include 'inc/them.php';
echo "<div class="foot">n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/">Форум</a> | <a href="/forum/".$forum['id']."/" title='В подфорум'>" . text($forum['name']) . "</a> | <a href="/forum/".$forum['id']."/".$razdel['id']."/" title='В раздел'>" . text($razdel['name']) . "</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_razdel']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1)
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$razdel=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
if (isset($user) && isset($_GET['act']) && $_GET['act']=='new' && (!isset($_SESSION['time_c_t_forum']) || $_SESSION['time_c_t_forum']<$time-600 || $user['level']>0))
include 'inc/new_t.php'; // создание новой темы
else
{
$set['title']='Форум - '.text($razdel['name']); // заголовок страницы
include_once '../sys/inc/thead.php';
title();
include 'inc/razdel.php';
echo "<div class="foot">n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/".$forum['id']."/">" . text($forum['name']) . "</a><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/">Форум</a><br />n";
echo "</div>n";
}
include_once '../sys/inc/tfoot.php';
}
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1)
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$set['title']='Форум - '.text($forum['name']); // заголовок страницы
include_once '../sys/inc/thead.php';
title();
include 'inc/forum.php'; // содержимое
echo "<div class="foot">n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
$set['title']='Форум';
include_once '../sys/inc/thead.php';
title();
if (user_access('forum_for_create') && isset($_GET['act']) && isset($_GET['ok']) && $_GET['act']=='new' && isset($_POST['name']) && isset($_POST['opis']) && isset($_POST['pos']))
{
$name=my_esc($_POST['name']);
if (strlen2($name)<3)$err='Слишком короткое название';
if (strlen2($name)>32)$err='Слишком днинное название';
$opis=$_POST['opis'];
if (strlen2($opis)>512)$err='Слишком длинное описание';
$opis=my_esc($opis);
$pos=intval($_POST['pos']);
if (!isset($err)){
admin_log('Форум','Подфорумы',"Создание подфорума '$name'");
mysql_query("INSERT INTO `forum_f` (`opis`, `name`, `pos`) values('$opis', '$name', '$pos')");
msg('Подфорум успешно создан');
}
}
err();
echo "<div class='bzx'><span style='float:left;'>Форум</span><a href='search.php'><img src='/style/icons/searcher.png'> Поиск</a></div>";
echo "<div class="main">n";
echo "<a href='/forum/info.php?f=n'>Новые </a> | n";
echo "<a href='/forum/info.php?f=p'>Последние</a> n";
echo "</div>n";
echo "<table class='post'>n";
$q=mysql_query("SELECT * FROM `forum_f`".((!isset($user) || $user['level']==0)?" WHERE `adm` = '0'":null)." ORDER BY `pos` ASC");
if (mysql_num_rows($q)==0) {
echo " <div class='mess'>n";
echo "Нет подфорумовn";
echo " </div>n";
}
while ($forum = mysql_fetch_assoc($q))
{
/*-----------зебра-----------*/
if ($num==0){
echo " <div class='nav1'>n";
$num=1;
}
elseif ($num==1)
{
echo " <div class='nav2'>n";
$num=0;
}
/*---------------------------*/
echo "<a href='/forum/$forum[id]/'><b>" . text($forum['name']) . "</b></a> (".mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_p` WHERE `id_forum` = '$forum[id]'"),0).'/'.mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_t` WHERE `id_forum` = '$forum[id]'"),0).")n";
if ($forum['opis']!=NULL)echo '<br /><span style="size:small;color:#666;">'.output_text($forum['opis']).'</span>';
echo " </div>n";
}
echo "</table>n";
if (user_access('forum_for_create') && (isset($_GET['act']) && $_GET['act']=='new' || mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f`"),0)==0))
{
echo "<form method="post" action="/forum/index.php?act=new&ok">n";
echo "Название подфорума:<br />n";
echo "<input name="name" type="text" maxlength='32' value='' /><br />n";
echo "Описание:<br />n";
echo "<textarea name="opis"></textarea><br />n";
echo "Позиция:<br />n";
$pos=mysql_result(mysql_query("SELECT MAX(`pos`) FROM `forum_f`"), 0)+1;
echo "<input name="pos" type="text" maxlength='3' value='$pos' /><br />n";
echo "<input value="Создать" type="submit" /><br />n";
echo "<img src='/style/icons/str2.gif' alt='*'> <a href="/forum/">Отмена</a><br />n";
echo "</form>n";
}
echo "<div class='main'><a href='/user/admin.user.php?forum'><img src='/style/icons/adm.gif'> Модераторы</a><br/>";
echo "<a href='/user/info/them_p.php?id=".$user['id']."'>";
echo group($user['id'])." ";
echo "Мои темы</a><br/>";
echo "<a href='on-forum.php'><img src='/style/icons/about.gif'> Кто в форуме?</a><br/>";
echo "<a href='/rules.php'><img src='/style/icons/info_bg.gif'> Правила</a></div>";
if (user_access('forum_for_create') && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f`"),0)>0){
echo "<div class="foot">n";
echo "<img src='/style/icons/lj.gif' alt='*'> <a href="/forum/?act=new">Новый подфорум</a><br />n";
echo "</div>n";
}
include_once '../sys/inc/tfoot.php';
?>