Файл: user/otp.php
Строк: 171
<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
only_reg();
if (isset($_GET['id']))$ank['id']=intval($_GET['id']);
$ank=get_user($ank['id']);
$set['title']='Отпичаток для '.$ank['nick'];
include_once '../sys/inc/thead.php';
title();
aut();
if (is_file(H."sys/avatar/$ank[id].gif"))
$img = '../sys/avatar/'.$ank['id'].'.gif';
elseif (is_file(H."sys/avatar/$ank[id].jpg"))
$img = '../sys/avatar/'.$ank['id'].'.jpg';
elseif (is_file(H."sys/avatar/$ank[id].png"))
$img = '../sys/avatar/'.$ank['id'].'.png';
elseif ($_SERVER['PHP_SELF']!='')
$img = '../style/themes/$set[set_them]/user.png';
list($width, $height) = getimagesize($img);
if ($user['balls']>=10){
if (isset($_POST['save'])){
$left = rand(0, $width-45);
$top = rand(0, $height-25);
$time2 = $time+60*60*24*2;
if (isset($_POST['ava_throw'])){
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==1)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 1, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==2)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 2, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==3)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 3, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==4)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 4, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==5)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 5, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==6)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 6, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==7)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 7, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==8)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 8, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==9)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 9, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==10)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 10, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==11)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 11, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==12)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 12, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==13)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 13, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==14)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 14, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==15)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 15, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==16)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 16, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==17)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 17, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
if (isset($_POST['ava_throw']) && $_POST['ava_throw']==18)
{
mysql_query('INSERT INTO `ava_throw` (`id_ank`, `otp`, `id_user`, `left`, `top`, `time`) VALUES('.$ank['id'].', 18, '.$user['id'].', '.$left.', '.$top.', '.$time2.')');
}
$aval = mysql_insert_id();
mysql_query('UPDATE `user` SET `balls` = `balls` - 10 WHERE `id` = ' . $user['id'] . ' LIMIT 1');
mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$user[nick] оставил отпичаток на вашей аве', '$time')");
if (isset($_POST['komm']) && strlen2($_POST['komm'])<=512)
{
if (preg_match('#[^A-zА-я0-9 _-=+()*?.,]#ui',$_POST['komm']))$err[]='В поле "Комментарий" используются запрещенные символы';
else {
mysql_query("UPDATE `ava_throw` SET `komm` = '".my_esc($_POST['komm'])."' WHERE `id` = '".$aval."' LIMIT 1");
}
}
else $err[]='Комментарий привышает 512 символов';
msg('Успешно!');
}
else {$err = 'не выбран ляп';}
}
} else{$err = 'У вас недостаточно баллов';}
err();
echo "<div style='position:relative;'>";
avatar($ank['id']);
$ava_q=mysql_query("SELECT * FROM `ava_throw` WHERE `id_ank` = $ank[id]");
while ($ava = mysql_fetch_assoc($ava_q))
{
if ($ava['time']>=$time)
echo "<img style='position:absolute;top: 25px;left: 45px;' src='/style/ava/$ava[otp].png'></img>";
}
echo "</div>";
echo "<br />";
echo "Цена отпичатка <strong>50</strong> монет";
echo '<br />';
echo "Отпичаток сотрется через <strong>2</strong> дня!";
echo "<br />";
echo "<form method='post' action='?id=$ank[id]&$passgen'>";
echo "<strong>Отпичаток</strong>:<br />
<img src='/style/ava/1.png' alt='1' /><input name='ava_throw' type='radio' value='1' />
<img src='/style/ava/2.png' alt='2' /><input name='ava_throw' type='radio' value='2' />
<img src='/style/ava/3.png' alt='3' /><input name='ava_throw' type='radio' value='3' />
<img src='/style/ava/4.png' alt='4' /><input name='ava_throw' type='radio' value='4' />
<img src='/style/ava/5.png' alt='5' /><input name='ava_throw' type='radio' value='5' />
<img src='/style/ava/6.png' alt='6' /><input name='ava_throw' type='radio' value='6' /><br />
<img src='/style/ava/7.png' alt='7' /><input name='ava_throw' type='radio' value='7' />
<img src='/style/ava/8.png' alt='8' /><input name='ava_throw' type='radio' value='8' />
<img src='/style/ava/9.png' alt='9' /><input name='ava_throw' type='radio' value='9' />
<img src='/style/ava/10.png' alt='10' /><input name='ava_throw' type='radio' value='10' />
<img src='/style/ava/11.png' alt='11' /><input name='ava_throw' type='radio' value='11' />
<img src='/style/ava/12.png' alt='12' /><input name='ava_throw' type='radio' value='12' /><br />
<img src='/style/ava/13.png' alt='13' /><input name='ava_throw' type='radio' value='13' />
<img src='/style/ava/14.png' alt='14' /><input name='ava_throw' type='radio' value='14' />
<img src='/style/ava/15.png' alt='15' /><input name='ava_throw' type='radio' value='15' />
<img src='/style/ava/16.png' alt='16' /><input name='ava_throw' type='radio' value='16' />
<img src='/style/ava/17.png' alt='17' /><input name='ava_throw' type='radio' value='17' />
<img src='/style/ava/18.png' alt='18' /><input name='ava_throw' type='radio' value='18' /><br />
<br />
Комментарий:<br />
<input type='text' name='komm' maxlength='512' /><br />";
echo "<input type='submit' name='save' value='Заляпать!' />
</form>";
echo "<div class='foot1'>n";
if(isset($_SESSION['refer']) && $_SESSION['refer']!=NULL && otkuda($_SESSION['refer'])){
icon_levo();echo "<a href='$_SESSION[refer]'>".otkuda($_SESSION['refer'])."</a><br />n";
}
icon_levo();echo "<a href='office.php'>Кабинет</a><br />n";
echo "</div>";
include_once '../sys/inc/tfoot.php';
?>