Файл: tchat.php
Строк: 154
<?php
define('PROTECTOR', 1);
$headmod = 'chat';//фикс. места
$textl='Чат';
include('files/path.php');
include($path.'files/db.php');
include($path.'files/auth.php');
include($path.'files/func.php');
include($path.'files/core.php');
include($path.'files/head.php');
include($path.'files/zag.php');
$req1 = mysql_query("SELECT * FROM `users` WHERE `usr` = '$nickas'"); $usdata = mysql_fetch_array($req1); if($usdata[prava] ==2){$admi="<font color=#fff>[m]";} elseif($usdata[prava] ==0){$admi="<font color=#fff>";}elseif($usdata[prava] ==3){$admi="<font color=#fff>[m*]";}elseif($usdata[prava] ==4){$admi="<font color=#fff>[a]";}elseif($usdata[prava] ==5){$admi="<font color=#fff>[a*]";}
$mod=htmlspecialchars(trim($_GET['mod']));
switch($mod){
default:
function AddBB($var) {
$search = array(
'/[b](.*?)[/b]/is',
'/[i](.*?)[/i]/is',
'/[adm](.*?)[/adm]/is',
'/[u](.*?)[/u]/is',
'/[url](.*?)[/url]/is',
'/[url=(.*?)](.*?)[/url]/is',
'/[color=(.*?)](.*?)[/color]/is'
);
$replace = array(
'<strong>$1</strong>',
'<em>$1</em>',
'<font color="red">$1</font>',
'<u>$1</u>',
'<a href="$1">$1</a>',
'<a href="$1">$2</a>',
'<font color="$1">$2</font>'
);
$var = preg_replace ($search, $replace, $var);
return $var;
}
function smiles($string){
$dir = opendir ("pic/smiles");
while ($file = readdir ($dir)) {
if (ereg (".gif$", "$file")){
$file2=str_replace(".gif","",$file);
$string=str_replace(".$file2.",'<img src="pic/smiles/'.$file.'" alt="">',$string);
}}
closedir ($dir);
return $string; }
/////////////
$rand = rand(1000,9999);
///////////////////
echo'<div class="hid" align="left">';
echo "<a href="smile.php?">Смайлы</a><br/>";
echo "<a href="tchat.php?r=$rand">Обновить</a>";
echo "<form action="tchat.php?mod=writes" method="POST">";
echo "<input type="text" name="zin" maxlength="5000"/> <input type="submit" value="Написать" class="ibutton"></div>";
$page = (isset($_GET['page'])) ? $_GET['page'] : NULL;
$page=intval($page);
if ($page == "" || $page < 0 || $page == "0")
{
$page = 0;
}
$next = $page + 1;
$back = $page - 1;
$num = $page * 10;
if($page == "0")
{$i = 1;}
else{$i = ($_GET[page]*10)+1;}
$viso = mysql_num_rows(mysql_query("SELECT komentaras FROM tchat"));
$puslap = floor($viso/10);
$times = date("H:i");
echo "<center>-=$times=-</center>";
$asd = mysql_query("SELECT * FROM tchat ORDER BY id DESC LIMIT $num,10");
echo"<div align='left'>";
while($dsa = mysql_fetch_array($asd))
{
$nickas = strip_tags(htmlspecialchars(mysql_real_escape_string($dsa['nick'])));
$koment = strip_tags(mysql_real_escape_string($dsa['komentaras']));
$time = strip_tags($dsa['time']);
$koment = smiles(AddBB(mysql_real_escape_string($koment)));
$req1 = mysql_query("SELECT * FROM `users` WHERE `usr` = '$nickas'"); $usdata = mysql_fetch_array($req1); if($usdata[prava] ==2){$admi="<font color='ffffff'>[m]</font>";} elseif($usdata[prava] ==0){$admi="";}elseif($usdata[prava] ==3){$admi="<font color='ffffff'>[m']</font>";}elseif($usdata[prava] ==4){$admi="<font color='ffffff'>[a]</font>";}elseif($usdata[prava] ==5){$admi="<font color='ffffff'>[a']</font>";} if($usdata[prava]>=2){$admi2="<font color='87cefa'>";} if($usdata[prava]<=1){$admi2="";}
if($usdata[storona]=="white"){echo" <img src='/pic/main/white.png' alt='*'/>";} if($usdata[storona]=="black"){echo"<img src='/pic/main/black.png' alt='*'/>";} echo "<b><a href="search.php?nick=$nickas&go=go">$admi2$nickas</font></a></b>$admi
<a href="chat.php?nick=$nickas&mod=write">»</a> <font color='ffffff'>$time</font></br> "; echo $koment; echo"</font>";
if($udata[prava]>=2){
echo"[<a href="chat.php?mod=del_post&p=$dsa[id]">X</a>]";
}
echo'<div class="hr"></div>';
}
echo "</div>";
if($udata[prava] >= 5)
{
echo "<a href="tchat.php?mod=trinti">Удалить сообщения</a><br/>";
}
$skok= mysql_num_rows(mysql_query("SELECT * FROM tchat"));
$koll=$skok/10;
$koll= ceil ($koll);
$koll2=$koll-1;
$page = (isset($_GET['page'])) ? $_GET['page'] : NULL;
$page=intval($page);
if($viso>10){
if ($page > 0)
{$page1=$page;
echo "<a href="tchat.php?page=0">«</a> <a href="tchat.php?page=$back">$page1</a> ";
}elseif ($page == 0){echo "« 1";}
if ($page>0){
$page3=$page+1;
echo " $page3 ";
}
if($page < $puslap || $page == "" || $page == 0){
$page2=$page+2;
echo " <a href="tchat.php?page=$next">$page2</a> ";
echo"<a href="tchat.php?page=$koll2">»</a>";
}else{
$page2=$page+2;
echo "$page2 »";}
echo " ($koll)";
}
break;
case 'del_post':
$page = (isset($_GET['page'])) ? $_GET['page'] : NULL;
$page=intval($page);
$p = (isset($_GET['p'])) ? $_GET['p'] : NULL;
if($udata[prava] >= 2)
{
if(empty($p)){
echo"Не выбран пост!<br/>";
}else{
$asd = mysql_query("SELECT * FROM komentarai WHERE id='intval($_GET[p])' LIMIT 1");
$avto=mysql_num_rows($asd);
if($avto==0){
echo'Нет такого поста!<br/>';
}else{
mysql_query("DELETE FROM `komentarai` WHERE id='intval($_GET[p])' LIMIT 1");
echo'Пост успешно удалён!<br/>';
echo "<a href="tchat.php?">Назад</a>";
}
}
}else{
echo "Ошибка!Доступ закрыт!";
}
break;
case 'write':
echo"<b>Сообщение</b><br/>";
echo "<form action="tchat.php?mod=writes" method="POST">";
$nick = (isset($_GET['nick'])) ? $_GET['nick'] : NULL;
if (isset($nick))
{
$nick = htmlspecialchars(mysql_real_escape_string($nick));
echo "<input type="text" name="zin" maxlength="250" value="$nick, " size="10"/><br/>";
}
else
{
echo "<input type="text" name="zin" maxlength="250" size="10"/><br/>";
}
echo "<input type="submit" value="Ok" class="ibutton"><br/>";
echo "<img src='img/feather.png' alt=''><a href="tchat.php?">Назад</a><br>";
break;
case 'writes':
if($udata[lvl]<5){
echo'Писать в чат можно с 5 уровня!';
$rand = rand(1000,9999);
echo"<br/><a href="chat.php?r=$rand">Продолжить»</a>";
include($path.'files/down.php');
exit;
}
$msg=$_POST['zin'];
$msg=substr($msg, 0, 512);
$msg=stripslashes(htmlspecialchars(mysql_real_escape_string($msg)));
$msg=str_replace("rn","<br />",$msg);
$msg=str_replace("r","<br />",$msg);
$msg=str_replace("n","<br />",$msg);
$msg = addslashes($msg);
$msg=preg_replace ("|[rn]+|si","",$msg);
$a = mysql_num_rows(mysql_query("SELECT komentaras FROM tchat WHERE komentaras = '$msg'"));
$b = mysql_fetch_array(mysql_query("SELECT kada FROM tchat WHERE nick = '$log' ORDER BY kada DESC LIMIT 1"));
$data_kom = strip_tags($b['kada']);
$data = date("y/m/d H:i:s", strtotime("+20 seconds"));
$data_dbr = date("y/m/d H:i:s");
$time = date("H:i");
if($data_dbr >= $data_kom && $msg != "")
{
mysql_query("INSERT INTO tchat SET nick = '$log', komentaras = '$msg', kada = '$data', time = '$time'");
$rand = rand(1000,9999);
echo'<script type="text/javascript">window.location = "tchat.php?r='.$rand.'"</script>';
echo'Сообщение успешно написанно<br/><a href="tchat.php?r='.$rand.'">Продолжить»</a>';
//end
}
elseif($data_dbr < $data_kom)
{
$sec = $data_kom-$data_dbr;
$rand = rand(1000,9999);
echo "Защита от Флуда! Подождите $sec секунд<br/>";
echo"<a href="tchat.php?r=$rand">Продолжить</a>";
}
elseif($msg == "")
{
$rand = rand(1000,9999);
echo "Вы не написали сообщение!<br/>";
echo"<a href="tchat.php?r=$rand">Продолжить</a>";
}
else
{
$rand = rand(1000,9999);
echo "Ошибка!<br/>";
echo"<a href="tchat.php?r=$rand">Продолжить</a>";
}
break;
case 'trinti':
if($udata[prava] >= 5)
{
mysql_query("DELETE FROM tchat");
echo "Все сообщения удалены!";
echo "<br/><a href="tchat.php?">Назад</a><br/></div>";
}
else
{
echo "Ошибка!Доступ закрыт!<br/></div>";
}
break;
}
include($path.'files/down.php');
?>