Файл: selemege.tk/gifts_vip/delete.php
Строк: 45
<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
only_reg();
if (isset($_GET['id']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `gifts_vip` WHERE `id` = '".intval($_GET['id'])."'"),0)==1)
{
$post=mysql_fetch_array(mysql_query("SELECT * FROM `gifts_vip` WHERE `id` = '".intval($_GET['id'])."' LIMIT 1"));
$ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $post[id_user] LIMIT 1"));
$ot = mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id`=$post[ot_id] LIMIT 1"));
if (isset($user) && ($user['level']>$ank['level'] || $user['level']==4 || $post['id_user']==$user['id']))
$msg2="Пользователь [b]$user[nick][/b] удалил(а) отправленный вами ViP подарок!";
mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ot[id]', '$msg2', '$time')");
mysql_query("DELETE FROM `gifts_vip` WHERE `id` = '$post[id]'");
unlink(H."/gifts_vip/".$post['link']."");
}
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER']!=NULL)
header("Location: ".$_SERVER['HTTP_REFERER']);
else
header("Location: /gifts_vip.php?id=$post[id_user]".SID);
?>