Файл: forum/index.php
Строк: 637
<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_razdel']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_them']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_post']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_p` WHERE `id` = '".intval($_GET['id_post'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
)
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$razdel=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$them=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$post=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_p` WHERE `id` = '".intval($_GET['id_post'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$post2=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_p` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' ORDER BY `id` DESC LIMIT 1"));
if (isset($user)){
$ank=get_user($post['id_user']);
if (isset($_GET['act']) && $_GET['act']=='edit' && isset($_POST['msg']) && isset($_POST['post']) &&
(
(user_access('forum_post_ed'))
||
(isset($user) && $user['id']==$post['id_user'] && $post['time']>time()-600 && $post['id_user']==$post2['id_user'])
)
)
{
$msg=$_POST['msg'];
if (isset($_POST['translit']) && $_POST['translit']==1)$msg=translit($msg);
if (strlen2($msg)<2)$err[]='Короткое сообщение ';
if (strlen2($msg)>10024)$err[]='Длина сообщения превышает предел в 10000 символов';
$mat=antimat($msg);
if ($mat)$err[]='В тексте сообщения обнаружен мат: '.$mat;
if (!isset($err)){
mysql_query("INSERT INTO `forum_phis` (`id_user`, `id_forum`, `id_razdel`, `id_them`, `id_post`, `msg`, `data`) VALUES ('$user[id]', '".intval($_GET['id_forum'])."', '".intval($_GET['id_razdel'])."', '".intval($_GET['id_them'])."', '".intval($_GET['id_post'])."', '$post[msg]', '$time')");
mysql_query("UPDATE `forum_p` SET `msg` = '".my_esc($msg)."', `red`='1' WHERE `id` = '$post[id]' LIMIT 1");
}}
elseif (isset($_GET['act']) && $_GET['act']=='edit' && (user_access('forum_post_ed') && ($ank['level']<$user['level'] || $ank['level']==$user['level'] && $ank['id']==$user['id']) || isset($user) && $post['id_user']==$user['id'])){
$set['title']='Форум - редактирование поста'; // заголовок страницы
include_once '../sys/inc/thead.php';
title();
echo "<form method='post' name='message' action='/forum/$forum[id]/$razdel[id]/$them[id]/$post[id]/edit'>n";
$msg2=output_text($post['msg'],false,true,false,false,false);
echo "Сообщение:<br />n<textarea name="msg" cols='12' rows='2' style='width:70%'>".$msg2."</textarea><br />n";
echo "<input name='post' value='Изменить' type='submit' />n";
if ($user['set_translit']==1)echo "<label><input type="checkbox" name="translit" value="1" /> Транслит</label><br />n";
echo "</form>n";
icon_del();echo "<a href="/forum/$forum[id]/$razdel[id]/$them[id]/$post[id]/delete" title='Удалить пост'>Удалить пост</a><br />n";
echo "<div class="foot1">n";
icon_pravo();echo "<a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>$razdel[name]</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/" title='В подфорум'>$forum[name]</a><br />n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
elseif (isset($_GET['act']) && $_GET['act']=='delete' && isset($user) && $them['close']==0 && ((user_access('forum_post_ed') && ($ank['level']<=$user['level'] || $ank['level']==$user['level'] && $ank['id']==$user['id'])) || $post['id']==$post2['id'] && $post['id_user']==$user['id'] && $post['time']>time()-600)){
mysql_query("DELETE FROM `forum_p` WHERE `id` = '".intval($_GET['id_post'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1");
mysql_query("DELETE FROM `forum_opr` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_post` = '".intval($_GET['id_post'])."'");
mysql_query("DELETE FROM `forum_opres` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_post` = '".intval($_GET['id_post'])."'");
mysql_query("DELETE FROM `forum_phis` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_post` = '".intval($_GET['id_post'])."'");
}
elseif (isset($_GET['act']) && $_GET['act']=='msg' && $them['close']==0 && isset($user)){
$ank=get_user($post['id_user']);
$set['title']='Форум - '.$them['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
top();
echo "<form method='post' name='message' action='/forum/$forum[id]/$razdel[id]/$them[id]/new'>n";
echo "<a href='/user/profile.php?id=$ank[id]'>Посмотреть профиль</a><br />n";
$msg2=$ank['nick'].', ';
echo "Сообщение:<br />n<textarea name="msg" cols='12' rows='2' style='width:50%'>$ank[nick],</textarea><br />n";
echo "<input name='post' value='Отправить сообщение' type='submit' />n";
if ($user['set_translit']==1)echo "<label><input type="checkbox" name="translit" value="1" /> Транслит</label><br />n";
echo "</form>n";
echo "<div class="foot1"><center>n";
echo "<a href="/smiles/">Смайлы</a> | n";
echo "<a href="/bb-code.php">ББ-коды</a></center>n";
echo "</div>n";
echo "<div class="foot1">n";
icon_pravo();echo "<a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>$razdel[name]</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/" title='В подфорум'>$forum[name]</a><br />n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
elseif (isset($_GET['act']) && $_GET['act']=='cit' && $them['close']==0 && isset($user)){
$ank=get_user($post['id_user']);
$set['title']='Форум - '.$them['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
top();
echo "Будет процетировано сообщение:<br />n";
echo "<div class='cit'>n";
echo output_text($post['msg'])."<br />n";
echo "</div>n";
echo "<form method='post' name='message' action='/forum/$forum[id]/$razdel[id]/$them[id]/new&id_usa=$ank[id]'>n";
echo "<input name='cit' value='$post[id]' type='hidden' />";
$msg2=$ank['nick'].', ';
echo "Сообщение:<br />n<textarea name="msg" cols='12' rows='2' style='width:50%'>$ank[nick], </textarea><br />n";
echo "<input name='post' value='Отправить сообщение' type='submit' />n";
if ($user['set_translit']==1)echo "<label><input type="checkbox" name="translit" value="1" /> Транслит</label><br />n";
echo "</form>n";
echo "<div class="foot1">n";
icon_pravo();echo "<a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>$razdel[name]</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/" title='В подфорум'>$forum[name]</a><br />n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
elseif (isset($_GET['act']) && $_GET['act']=='golos' && $them['close']==0 && isset($user) && isset($_GET['id_var']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_opr` WHERE `id` = '".intval($_GET['id_var'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_post` = '".intval($_GET['id_post'])."'"),0)==1){
$set['title']='Форум - '.$them['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
top();
$prov_p=mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_p` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id`= '".intval($_GET['id_post'])."' AND `opros`='1' ",$db), 0);
$prov=mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_opres` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_post`='".intval($_GET['id_post'])."' AND `id_user`='$user[id]' ",$db), 0);
if ($prov_p==0){$err[]='К данному посту опрос не прикреплён!';}
elseif ($prov!=0){$err[]='Вы уже принимали участие в данном опросе!';}
elseif(!isset($err)){
mysql_query("INSERT INTO `forum_opres` (id_user, id_var, id_forum, id_razdel, id_them, id_post) values('$user[id]', '".intval($_GET['id_var'])."', '".intval($_GET['id_forum'])."', '".intval($_GET['id_razdel'])."', '".intval($_GET['id_them'])."', '".intval($_GET['id_post'])."')");
msg('Ваш голос успешно принят');
}
err();
echo "<div class="foot1">n";
icon_pravo();echo "<a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>$razdel[name]</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/" title='В подфорум'>$forum[name]</a><br />n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
elseif (isset($_GET['act']) && $_GET['act']=='hist' && isset($user) ){
$set['title']='Форум - '.$them['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
top();
err();
$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_phis` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_post` = '".intval($_GET['id_post'])."'"),0);
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
echo "<table class='post'> n";
if ($k_post==0)
{
echo " <tr>n";
echo " <td class='p_t'>n";
echo "Истории изменений не найденоn";
echo " </td>n";
echo " </tr>n";
}
echo "</table>n";
$q=mysql_query("SELECT * FROM `forum_phis` WHERE `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_post` = '".intval($_GET['id_post'])."' ORDER BY id DESC LIMIT $start, $set[p_str]");
while ($post = mysql_fetch_assoc($q))
{
echo "<table class='posti'> n";
$ank=get_user($post['id_user']);
echo " <tr>n";
echo " <td class='icon15' rowspan='2' title='$ank[p_avatar]'>n";
avatar_little($ank['id']);
echo " </td>n";
echo " <td class='p_t'>n";
online($ank['id']);
echo "<a href='/user/profile.php?id=$ank[id]' title='$ank[p_nick]'>n";
echo GradientText("$ank[nick]", "$ank[ncolor]", "$ank[ncolor2]");
echo "</a>n";
echo "<a href='/user/ank.php?id=$ank[id]' title='Анкета $ank[nick]'>";
icon_info_ank();echo "</a> ";
medals($ank['id']);
strana($ank['id']);
echo "<span style='float : right;'><font color='red'>(".vremja($post['data']).")</font></span>n";
echo "<div style='border-bottom:1px dashed #99BCFF;'></div>n";
echo output_text($post['msg'])."<br />n";
echo " </td>n";
echo " </tr>n";
echo "</table>n";
}
if ($k_page>1)str('?',$k_page,$page); // Вывод страниц
echo "<div class="foot1">n";
icon_pravo();echo "<a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>$razdel[name]</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/" title='В подфорум'>$forum[name]</a><br />n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
elseif (isset($_GET['act']) && $_GET['act']=='zhal' && $them['close']==0 && isset($user)){
$set['title']='Форум - '.$them['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
top();
if (isset($_POST['msg']) && isset($user))
{
$msg=$_POST['msg'];
if (isset($_POST['translit']) && $_POST['translit']==1)$msg=translit($msg);
$mat=antimat($msg);
if ($mat)$err[]='В тексте сообщения обнаружен мат: '.$mat;
if (strlen2($msg)>1000){$err[]='Сообщение слишком длинное';}
elseif (strlen2($msg)<2){$err[]='Короткое сообщение';}
elseif (mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_zhal` WHERE `id_user` = '$user[id]' AND `msg` = '".my_esc($msg)."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' AND `id_post` = '".intval($_GET['id_post'])."' LIMIT 1"),0)!=0){$err='Ваше сообщение повторяет предыдущее';}
elseif(!isset($err)){
mysql_query("INSERT INTO `forum_zhal` (id_user, data, msg, id_forum, id_razdel, id_them, id_post) values('$user[id]', '$time', '".my_esc($msg)."', '".intval($_GET['id_forum'])."', '".intval($_GET['id_razdel'])."', '".intval($_GET['id_them'])."', '".intval($_GET['id_post'])."')");
mysql_query("UPDATE `user` SET `balls` = '".($user['balls']+1)."' WHERE `id` = '$user[id]' LIMIT 1");
msg('Жалоба успешно добавлена');
}
}
err();
if (isset($user))
{
echo "<form method="post" name='message' action="?$passgen">n";
echo "Текст жалобы:<br />n<textarea name="msg" cols='12' rows='2' style='width:50%'></textarea><br />n";
echo "<input value="Отправить" type="submit" />n";
if (isset($user) && $user['set_translit']==1)echo "<label><input type="checkbox" name="translit" value="1" /> Транслит</label><br />n";
echo "</form>n";
}
echo "<div class="foot1">n";
icon_pravo();echo "<a href="/forum/$forum[id]/$razdel[id]/$them[id]/?page=end" title='Вернуться в тему'>В тему</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>$razdel[name]</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/" title='В подфорум'>$forum[name]</a><br />n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
}
}
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_razdel']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_them']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1 )
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$razdel=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$them=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_t` WHERE `id` = '".intval($_GET['id_them'])."' AND `id_razdel` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$set['title']='Форум - '.$them['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
title();
$ank2=get_user($them['id_user']);
include 'inc/set_them_act.php';
include 'inc/them.php';
include 'inc/set_them_form.php';
echo "<div class="foot1">n";
icon_levo();echo "<a href="/forum/$forum[id]/$razdel[id]/" title='В раздел'>$razdel[name]</a><br />n";
icon_levo();echo "<a href="/forum/$forum[id]/" title='В подфорум'>$forum[name]</a><br />n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1
&& isset($_GET['id_razdel']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."'"),0)==1)
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$razdel=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_r` WHERE `id` = '".intval($_GET['id_razdel'])."' AND `id_forum` = '".intval($_GET['id_forum'])."' LIMIT 1"));
if (isset($user) && isset($_GET['act']) && ($_GET['act']=='new' or $_GET['act']=='newop') && (!isset($_SESSION['time_c_t_forum']) || $_SESSION['time_c_t_forum']<$time-600 || $user['level']>0))
{
if ($_GET['act']=='new')include 'inc/new_t.php'; // создание новой темы
if ($_GET['act']=='newop')include 'inc/new_op.php'; // создание опроса
}
else
{
$set['title']='Форум - '.$razdel['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
title();
if (user_access('forum_razd_edit'))include 'inc/set_razdel_act.php';
include 'inc/razdel.php';
if (user_access('forum_razd_edit'))include 'inc/set_razdel_form.php';
echo "<div class="foot1">n";
if (isset($user) && (!isset($_SESSION['time_c_t_forum']) || $_SESSION['time_c_t_forum']<$time-600 || $user['level']>0)){
icon_levo();echo "<a href="/forum/$forum[id]/">$forum[name]</a><br />n";
}
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
}
include_once '../sys/inc/tfoot.php';
}
if (isset($_GET['id_forum']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f` WHERE".((!isset($user) || $user['level']==0)?" `adm` = '0' AND":null)." `id` = '".intval($_GET['id_forum'])."'"),0)==1)
{
$forum=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_f` WHERE `id` = '".intval($_GET['id_forum'])."' LIMIT 1"));
$set['title']='Форум - '.$forum['name']; // заголовок страницы
include_once '../sys/inc/thead.php';
title();
include 'inc/set_forum_act.php'; // действия над подфорумом
include 'inc/forum.php'; // содержимое
include 'inc/set_forum_form.php'; // формы действий над подфорумом
echo "<div class="foot1">n";
icon_levo();echo "<a href="/forum/">Форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
$set['title']='Форум'; // заголовок страницы
include_once '../sys/inc/thead.php';
title();
if (user_access('forum_for_create') && isset($_GET['act']) && isset($_GET['ok']) && $_GET['act']=='new' && isset($_POST['name']) && isset($_POST['opis']) && isset($_POST['pos']))
{
$name=esc(stripcslashes(htmlspecialchars($_POST['name'])));
if (isset($_POST['translit1']) && $_POST['translit1']==1)$name=translit($name);
if (strlen2($name)<3)$err='Слишком короткое название';
if (strlen2($name)>100)$err='Слишком днинное название';
$name=my_esc($name);
if (!preg_match("#^([A-zА-я0-9-_() ])+$#ui",$name))$err='В названии форума присутствуют запрещенные символы';
$opis=$_POST['opis'];
if (isset($_POST['translit2']) && $_POST['translit2']==1)$opis=translit($opis);
if (strlen2($opis)<0)$err='Короткое описание';
if (strlen2($opis)>1000)$err='Слишком длинное описание';
$opis=my_esc($opis);
$pos=intval($_POST['pos']);
if (!isset($err)){
admin_log('Форум','Подфорумы',"Создание подфорума '$name'");
mysql_query("INSERT INTO `forum_f` (`opis`, `name`, `pos`) values('".mysql_real_escape_string($opis)."', '$name', '$pos')");
msg('Подфорум успешно создан');
}
}
err();
aut(); // форма авторизации
if(!isset($user))
{
$set['title']='Ошибка';
include_once '../sys/inc/thead.php';
title();
err();
echo "<div class='foot1'>n";
echo"<center>Система определила Вас как Гостя сайта, для полноценного пользования и просмотра сайта. Вам необходимо пройти <a href='/aut.php'>Авторизацию</a> или <br/><a href='/reg.php'>Регистрацию</a><img src='/style/smiles/ops.gif' alt='' class='icon'/></center>";
echo "</div>";
include_once '../sys/inc/tfoot.php';
exit();
}
echo "<div class='foot1'>n";
icon_admin();echo "<a href='/forum/moders.php'>Модераторы форума</a><br/> n";
icon_info();echo "<a href='/info/forum.php' > Правила </a><font color='red'><b>[обязательно прочитать]</b></font><br/>n";
icon_search();echo "<a href='/forum/search.php'>Поиск</a>n";
echo "</div>";
echo "<div class="foot1">n";
icon_new();echo "Новые: <a href='/forum/new_p.php'><font color='red'>посты</font></a> | n";
echo "<a href='/forum/new_t.php'><font color='red'>темы</font></a> ";
echo "</div>n";
echo "<div class="foot1">n";
icon_my();echo "Мои: <a href='/forum/my_p.php'><font color='red'>посты</font></a> | n";
echo "<a href='/forum/my_t.php'><font color='red'>темы</font></a> | ";
$k_p_zakl=mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_zakl` WHERE `id_user` = '$user[id]'"),0);
if(isset($user)){
echo " <a href='/user/zakl.php'><font color='red'>закладки</font></a> +$k_p_zakl<br />n";
};
echo "</div>n";
$q=mysql_query("SELECT * FROM `forum_f`".((!isset($user) || $user['level']==0)?" WHERE `adm` = '0'":null)." ORDER BY `pos` ASC");
echo "<table class='post'>n";
if (mysql_num_rows($q)==0) {
echo " <tr>n";
echo " <td class='p_t'>n";
echo "Нет подфорумовn";
echo " </td>n";
echo " </tr>n";
}
echo "</table>n";
while ($forum = mysql_fetch_assoc($q))
{
echo "<table class='posti'>n";
echo " <tr>n";
echo " <td class='icon15'>n";
icon_podforum();
echo " </td>n";
echo " <td class='p_t1'>n";
echo "<a href='/forum/$forum[id]/'>$forum[name] </a><font color='#0099FF'>+".mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_t` WHERE `id_forum` = '$forum[id]'"),0)."</font> <font color='red'>+".mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_p` WHERE `id_forum` = '$forum[id]'"),0)."</font>";
echo "<span style='float : right;'><span style='font-size:x-small;'><font color='#363636'>";
if ($forum['opis']!=NULL)echo output_text($forum['opis'])."<br />n";
echo "</font></span></span>";
echo " </td>n";
echo " </tr>n";
echo "</table>n";
}
if (user_access('forum_for_create') && (isset($_GET['act']) && $_GET['act']=='new' || mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f`"),0)==0))
{
echo "<form method="post" action="/forum/index.php?act=new&ok">n";
echo "<input name="name" type="text" maxlength='32' value='' />Название подфорума<br />n";
if ($user['set_translit']==1)echo "<label><input type="checkbox" name="translit1" value="1" /> Транслит</label><br />n";
echo "<textarea name="opis"></textarea>Описание<br />n";
if ($user['set_translit']==1)echo "<label><input type="checkbox" name="translit2" value="1" /> Транслит</label><br />n";
$pos=mysql_result(mysql_query("SELECT MAX(`pos`) FROM `forum_f`"), 0)+1;
echo "<input name="pos" type="text" maxlength='3' value='$pos' />Позиция<br />n";
echo "<input value="Создать" type="submit" /><br />n";
echo "«<a href="/forum/">Отмена</a><br />n";
echo "</form>n";
}
if (user_access('forum_for_create') && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_f`"),0)>0){
echo "<div class="foot1">n";
icon_forum_add();echo "<a href="/forum/?act=new">Новый подфорум</a><br />n";
echo "</div>n";
}
echo "<div class='foot1'>";
echo "Сейчас обсуждают:";
echo "</div>n";
include 'incnew.php';
echo "<div class="foot1">n";
echo "Всего на форуме <font color='red'>";
echo mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_p`"),0).'</font> постов в <font color="red"> '.mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_t`"),0);
echo " </font>темах";
echo "</div>n";
echo "<div class="foot1"><center>n";
if (user_access('adm_info'))echo "<a href='/forum/adm.php'>Жалобы</a> | n";
echo "<a href='/forum/online.php'>Кто в форуме?</a> [";
echo mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `date_last` > '".(time()-300)."' AND `url` like '/forum/%'"), 0).'';
echo "] | <a href='/forum/files_list.php'>Топ файлов</a>n";
echo "</center></div>n";
include_once '../sys/inc/tfoot.php';
?>