Файл: vxas.ru/soo/banned.php
Строк: 153
<?
require '../sys/inc/start.php';
require '../sys/inc/compress.php';
require '../sys/inc/sess.php';
require '../sys/inc/home.php';
require '../sys/inc/settings.php';
require '../sys/inc/db_connect.php';
require '../sys/inc/ipua.php';
require '../sys/inc/fnc.php';
require '../sys/inc/user.php';
if(isset($_GET['s']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `soo` WHERE `id` = '".intval($_GET['s'])."' LIMIT 1"),0)==1)
{
$s=intval($_GET['s']);
$soo=mysql_fetch_assoc(mysql_query("SELECT * FROM `soo` WHERE `id` = '".mysql_real_escape_string($s)."' LIMIT 1"));
$set['title']=$soo['name'].' - Забаненные'; // заголовок страницы
require '../sys/inc/thead.php';
title();
if($soo['konf_soo']==0 || isset($user) && (mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_users` WHERE `id_soo` = '".mysql_real_escape_string($soo[id])."' AND `id_user`='".mysql_real_escape_string($user[id])."' AND `invit`='0' AND `activate`='0' LIMIT 1"),0)==1 || $user['id']==$soo['admid']))
{
if(isset($user) && ($user['id']==$soo['admid'] || mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_users` WHERE `id_soo` = '".mysql_real_escape_string($soo[id])."' AND `id_user`='".mysql_real_escape_string($user[id])."' AND `mod`='1' LIMIT 1"),0)==1))
{
if(isset($_GET['ban']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_users` WHERE `id_user` = '".intval($_GET['ban'])."' AND `activate`='0' AND `invit`='0' LIMIT 1"),0)==1 && $_GET['ban']!=$user['id'])
{
if(isset($_POST['ban_time']) && is_numeric($_POST['ban_time']) && isset($_POST['ban_type']) && ($_POST['ban_type']==0 || $_POST['ban_type']==1) && isset($_POST['prich']) && $_POST['prich']!=NULL)
{
$ban_time = intval($_POST['ban_time']);
$ban_type = intval($_POST['ban_type']);
if($ban_type==0)$time_ban=$time+60*60*$ban_time; else $time_ban=$time+60*60*24*$ban_time;
$prich=htmlspecialchars($_POST['prich']);
if (isset($_POST['translit']) && $_POST['translit']==1)$prich=translit($prich);
$mat=antimat($prich);
if ($mat)$err[]='В тексте причины обнаружен мат: '.$mat;
if (strlen2($prich)>1024){$err[]='Причина слишком длинная';}
elseif (strlen2($prich)<2){$err[]='Короткая причина';}
if(!isset($err))
{
mysql_query("UPDATE `soo_users` SET `ban`='".mysql_real_escape_string($time_ban)."' WHERE `id_user`='".intval($_GET['ban'])."' AND `id_soo`='".mysql_real_escape_string($soo[id])."' LIMIT 1");
mysql_query("UPDATE `soo_users` SET `prich`='".my_esc($prich)."' WHERE `id_user`='".intval($_GET['ban'])."' AND `id_soo`='".mysql_real_escape_string($soo[id])."' LIMIT 1");
msg('Юзер успешно забанен');
}
}else{
$ban=intval($_GET['ban']);
$us=get_user($ban);
echo'Забанить юзера '.htmlspecialchars($us['nick']).'<br/>';
echo'<form method="post" action="?s='.htmlspecialchars($soo['id']).'&ban='.htmlspecialchars($ban).'">';
echo'На срок<br/>';
echo'<input type="text" name="ban_time" size="3">';
echo'<select name="ban_type">';
echo'<option value="1">Дней</option>';
echo'<option value="0">Часов</option>';
echo'</select><br/>';
echo'Причина (обязательно)<br/>';
echo'<textarea name="prich"></textarea><br/>';
if ($user['set_translit']==1)echo '<label><input type="checkbox" name="translit" value="1"/> Транслит</label><br />';
echo'<input type="submit" value="Отправить"></form><br/>';
}
}
err();
if(isset($_GET['del']) && $user['id']==$soo['admid'] && mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_users` WHERE `id_user` = '".intval($_GET['del'])."' AND `activate`='0' AND `invit`='0' AND `ban`>'".mysql_real_escape_string($time)."' LIMIT 1"),0)==1)
{
mysql_query("UPDATE `soo_users` SET `ban`='".mysql_real_escape_string($time)."' WHERE `id_user`='".intval($_GET['del'])."' AND `id_soo`='".mysql_real_escape_string($soo[id])."' LIMIT 1");
mysql_query("UPDATE `soo_users` SET `prich`='' WHERE `id_user`='".intval($_GET['del'])."' AND `id_soo`='".mysql_real_escape_string($soo[id])."' LIMIT 1");
msg('Участник успешно разбанен');
}
}
if(isset($user) && mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_users` WHERE `id_user` = '".mysql_real_escape_string($user[id])."' AND `activate`='0' AND `invit`='0' AND `ban`>'".mysql_real_escape_string($time)."' LIMIT 1"),0)==1)
{
$us_ban=mysql_fetch_assoc(mysql_query("SELECT * FROM `soo_users` WHERE `id_soo` = '".mysql_real_escape_string($soo[id])."' AND `id_user`='".mysql_real_escape_string($user[id])."' LIMIT 1"));
echo'Вы забанены в данном сообществе до за '.output_text($us_ban['prich']).'<br/>';
echo'Вернетесь '.vremja($us_ban['ban']).'<br/>';
if($soo['rules']!=NULL)
{
echo'<b>А пока можете пока почитать правила сообщества</b><br/>';
echo'<div class="menu">'.output_text($soo['rules']).'</div>';
}
}else{
$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_users` WHERE `id_soo`='".mysql_real_escape_string($soo[id])."' AND `activate`='0' AND `invit`='0' AND `ban`>'".mysql_real_escape_string($time)."'"),0);
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
if ($k_post==0)
{
?>
<div class='noy'>Забаненных нет</div>
<?
}
$q=mysql_query("SELECT * FROM `soo_users` WHERE `id_soo`='".mysql_real_escape_string($soo[id])."' AND `activate`='0' AND `invit`='0' AND `ban`>'".mysql_real_escape_string($time)."' ORDER BY `ban` DESC LIMIT $start, $set[p_str]");
while ($ank = mysql_fetch_assoc($q))
{
$us=get_user($ank['id_user']);
if($num==1){
echo "<div class='enk_div'>n";
$num=0;
}else{
echo "<div class='enk2_div'>n";
$num=1;}
echo ''.status($us['id']).' <a href="info.php?s='.htmlspecialchars($soo['id']).'&id='.htmlspecialchars($us['id']).'">'.htmlspecialchars($us['nick']).'</a><br />';
echo '<span class="ank_n">Забанен до:</span> <span class="ank_d">'.vremja($ank['ban']).'</span><br/>';
echo '<span class="ank_n">Причина:</span> <span class="ank_d">'.output_text($ank['prich']).'</span>';
if(isset($user) && $user['id']==$soo['admid'])echo'</br/><a href="?s='.htmlspecialchars($soo['id']).'&del='.htmlspecialchars($us['id']).'">Разбанить</a>';
echo "</div>n";
}
if ($k_page>1)str("?s=$soo[id]&",$k_page,$page); // Вывод страниц
echo '<div class="fyt"><img src="img/back.png" alt="" class="icon"/> <a href="index.php?s='.htmlspecialchars($soo['id']).'">В сообщество</a><br/>';
echo "</div>n";
}
}else{
?>
<div class='noy'>Вам недоступен просмотр забаненных участников данного сообщества</div>
<?
}
}else{
header("Location:index.php");
}
require '../sys/inc/tfoot.php';
?>