Файл: msmenu/mschat.php
Строк: 254
<?php
if(isset($_GET['msreply']) && num($_GET['msreply'])!=NULL && mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_room` WHERE `id` = '".num($_GET['msreply'])."'"),0)!=0){
$ms = mysql_fetch_array(mysql_query("SELECT * FROM `ms_room` WHERE `id` = '".num($_GET['msreply'])."'"));
if($user['id'] == $ms['user']){
$text = 'Разрешается отправлять сообщения только другим пользователям.';
$_SESSION['msg'] = $text;
header("Location: ../msroom".$ms['type']."");
exit;
}elseif(isset($_POST['option_id']))
{
$name = my_esc($_POST['option_id']);
if(isset($_COOKIE['no_msg'])){
$text = 'Разрешается отправлять сообщения в течении 10 сек.';
$_SESSION['msg'] = $text;
header("Location: ../Link:ILinkListener-MsChat:".$ms['type'].";");
exit;
}elseif(strlen2($name)<1){
$text = 'Короткий текст';
$_SESSION['msg'] = $text;
header("Location: ../Link:ILinkListener-MsChat:".$ms['type'].";");
exit;
}
elseif(strlen2($name)>255){
$text = 'Длина текста превышает 255 символов';
$_SESSION['msg'] = $text;
header("Location: ../Link:ILinkListener-MsChat:".$ms['type'].";");
exit;
}
else
{
setcookie('no_msg',1,time()+10);
$msname = ''.$name;
mysql_query("INSERT INTO `ms_room` SET `comu` = '".$ms['user']."', `user` = '".num($user['id'])."', `msg` = '".$msname."', `time` = '".$time."', `type` = '".num($ms['type'])."'");
$text = 'Комментарий добавлен';
$_SESSION['msg'] = $text;
header("Location: ../msroom".$ms['type']."");
exit;
}
}
echo '<div class="small minor mt4">Сообщение игроку '.msuser($ms['user']).'</div>';
echo '<div>
<div>
<form id="id21" method="post" action=""><div style="width:0px;height:0px;position:absolute;left:-100px;top:-100px;overflow:hidden"><input type="hidden" name="id21_hf_0" id="id21_hf_0" /></div>
<textarea id="message-text" rows="5" name="option_id"></textarea><br/>
<div class="center">
<input type="submit" class="btni" value="Написать"/>';
echo '<a class="btni" onclick="toggleAndHideAnother('MysmilesPanel', 'bbCodesPanel');" style="margin:4px; padding:6px;">Мои Смайлы</a>
<a class="btni" onclick="toggleAndHideAnother('smilesPanel', 'bbCodesPanel');" style="margin:4px; padding:6px;">Смайлы</a>
<div class="content left" id="MysmilesPanel" style="display: none;">';
$k_post_smile = mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_my_smile` WHERE `user` = '".num($user['id'])."' ORDER BY `id` DESC"),0);
if ($k_post_smile==0){
echo '<div class="btnl">Смайлов нет.<br /> Для выбора личных смайлов зайдите в настройки и выберите из списка.<br /> Вы можете выбрать всего 25 штук.
</div>';
}
$mssmile_my_act = mysql_query("SELECT * FROM `ms_my_smile` WHERE `user` = '".num($user['id'])."' ORDER BY `id` LIMIT 25");
while($mssmile_my = mysql_fetch_array($mssmile_my_act))
{
$mssmile_my_id = mysql_fetch_array(mysql_query("SELECT * FROM `ms_smile` WHERE `id` = '".num($mssmile_my['smile'])."' LIMIT 1"));
echo '<span class="row-item btni smile" style="margin: 3px 1px;" onclick="addSmile("message-text", "'.$mssmile_my_id['name'].'");">
<img alt="" src="'.$mssmile_my_id['path'].'" /> <span>'.$mssmile_my_id['name'].'</span>
</span>';
}
echo '</div></span>
</div>
<div id="post_options_box" style="display:none"><div class="cp_option _ib" id="attached_flush" style="display:none;"></div></div>
</div>';
echo '<div class="content left" id="smilesPanel" style="display: none;">';
////////////////////// Смайлы В РАНД
$mssmile = mysql_query("SELECT * FROM `ms_smile` ORDER BY RAND() LIMIT 25");
while($mssms = mysql_fetch_array($mssmile))
{
echo '<span class="row-item btni smile" style="margin: 3px 1px;" onclick="addSmile("message-text", "'.$mssms['name'].'");">
<img alt="" src="'.$mssms['path'].'" /> <span>'.$mssms['name'].'</span>
</span>';
}
echo '</div></span>
</div>
<div id="post_options_box" style="display:none"><div class="cp_option _ib" id="attached_flush" style="display:none;"></div></div>
</div>';
echo '</form>
</div>
</div>
</div></div>
</div>
</div></div>';
}elseif(isset($_GET['msdelete']) && num($_GET['msdelete'])!=NULL && $user['admin'] == 1 || $user['admin'] == 2 && mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_room` WHERE `id` = '".num($_GET['msdelete'])."'"),0)!=0){
$ms = mysql_fetch_array(mysql_query("SELECT * FROM `ms_room` WHERE `id` = '".num($_GET['msdelete'])."'"));
mysql_query("DELETE FROM `ms_room` WHERE `id` = '".$ms['id']."'");
$_SESSION['msg'] = 'Сообщение удалено';
header("Location: ../msroom".$ms['type']."");
exit;
}elseif(isset($_GET['mschats']) && num($_GET['mschats'])!=NULL && mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_chat` WHERE `id` = '".num($_GET['mschats'])."'"),0)!=0){
$ms = mysql_fetch_array(mysql_query("SELECT * FROM `ms_chat` WHERE `id` = '".num($_GET['mschats'])."'"));
echo '<div class="content">
<img src="/img/pattern-left.png" alt="" />
'.$ms['name'].'
<img src="/img/pattern-right.png" alt="" />
</div>';
if(isset($_POST['option_id']))
{
$name = my_esc($_POST['option_id']);
if(isset($_COOKIE['no_msg'])){
$text = 'Разрешается отправлять сообщения в течении 10 сек.';
$_SESSION['msg'] = $text;
header("Location: ../msroom".$ms['id']);
exit;
}elseif(strlen2($name)<1){
$text = 'Короткий текст';
$_SESSION['msg'] = $text;
header("Location: ../msroom".$ms['id']);
exit;
}
elseif(strlen2($name)>255){
$text = 'Длина текста превышает 255 символов';
$_SESSION['msg'] = $text;
header("Location: ../msroom".$ms['id']);
exit;
}
else
{
setcookie('no_msg',1,time()+10);
mysql_query("INSERT INTO `ms_room` SET `user` = '".num($user['id'])."', `msg` = '".$name."', `time` = '".$time."', `type` = '".num($ms['id'])."'");
$text = 'Комментарий добавлен';
$_SESSION['msg'] = $text;
header("Location: ../msroom".$ms['id']);
exit;
}
}
$user['set'] = 5;
$k_post = mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_room` WHERE `type` = '".$ms['id']."' ORDER BY `id` DESC"),0);
if ($k_post==0){
echo '<div class="btnp" style="left;">';
echo 'В комнате нет сообщений';
echo '</div>';
}
$k_page=msk_page($k_post,$user['set']);
$page=mspage($k_page);
$start=$user['set']*$page-$user['set'];
$q=mysql_query("SELECT * FROM `ms_room` WHERE `type` = '".$ms['id']."' ORDER BY `id` DESC LIMIT $start, $user[set]");
while($post=mysql_fetch_array($q))
{
$sr = $start+1;
if ($sr ++ % 2)echo '<div class="btn" style="padding:4px;">'; else echo '<div class="btn" style="padding:4px;">';
if($user['id'] != $post['user'])echo '<a class="fr" href="../Link:ILinkListener-MsChat:'.$post['id'].';">Ответить</a>';
echo msuser($post['user']);
if($post['comu']) echo ' - '.msuser($post['comu']);
echo ' <span class="tasty">';
echo vremja($post['time']);
echo '</span> <br />';
if($user['admin'] == 1 || $user['admin'] == 2){
echo '<span class="fr">';
echo '<a href="../msroom'.$post['type'].';MsDelete:'.$post['id'].';"><img src="/img/cross.png" alt="" width="24" height="24"/> </a>';
echo '</span><div class="cb"></div>';
}
echo '<span class="cook">';
echo smile(br(my_esc($post['msg'])));
echo '</span>';
echo '</span><br />';
echo '</div>';
$start++;
}
if($k_page>1)msstr("../msroom".$ms['id']."/",$k_page,$page); // Вывод страниц
echo '<div>
<div>
<form id="id21" method="post" action=""><div style="width:0px;height:0px;position:absolute;left:-100px;top:-100px;overflow:hidden"><input type="hidden" name="id21_hf_0" id="id21_hf_0" /></div>
<textarea id="message-text" rows="5" name="option_id"></textarea><br/>
<div class="center">
<input type="submit" class="btni" value="Написать"/>';
////////////////////// Смайлы пользователя
echo '<a class="btni" onclick="toggleAndHideAnother('MysmilesPanel', 'bbCodesPanel');" style="margin:4px; padding:6px;">Мои Смайлы</a>
<a class="btni" onclick="toggleAndHideAnother('smilesPanel', 'bbCodesPanel');" style="margin:4px; padding:6px;">Смайлы</a>
<div class="content left" id="MysmilesPanel" style="display: none;">';
$k_post_smile = mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_my_smile` WHERE `user` = '".num($user['id'])."' ORDER BY `id` DESC"),0);
if ($k_post_smile==0){
echo '<div class="btnl">Смайлов нет.<br /> Для выбора личных смайлов зайдите в настройки и выберите из списка.<br /> Вы можете выбрать всего 25 штук.
</div>';
}
$mssmile_my_act = mysql_query("SELECT * FROM `ms_my_smile` WHERE `user` = '".num($user['id'])."' ORDER BY `id` LIMIT 25");
while($mssmile_my = mysql_fetch_array($mssmile_my_act))
{
$mssmile_my_id = mysql_fetch_array(mysql_query("SELECT * FROM `ms_smile` WHERE `id` = '".num($mssmile_my['smile'])."' LIMIT 1"));
echo '<span class="row-item btni smile" style="margin: 3px 1px;" onclick="addSmile("message-text", "'.$mssmile_my_id['name'].'");">
<img alt="" src="'.$mssmile_my_id['path'].'" /> <span>'.$mssmile_my_id['name'].'</span>
</span>';
}
echo '</div></span>
</div>
<div id="post_options_box" style="display:none"><div class="cp_option _ib" id="attached_flush" style="display:none;"></div></div>
</div>';
echo '<div class="content left" id="smilesPanel" style="display: none;">';
////////////////////// Смайлы В РАНД
$mssmile = mysql_query("SELECT * FROM `ms_smile` ORDER BY RAND() LIMIT 25");
while($mssms = mysql_fetch_array($mssmile))
{
echo '<span class="row-item btni smile" style="margin: 3px 1px;" onclick="addSmile("message-text", "'.$mssms['name'].'");">
<img alt="" src="'.$mssms['path'].'" /> <span>'.$mssms['name'].'</span>
</span>';
}
echo '</div></span>
</div>
<div id="post_options_box" style="display:none"><div class="cp_option _ib" id="attached_flush" style="display:none;"></div></div>
</div>';
echo '</form>
</div>
</div>
</div></div>
</div>
</div></div>';
}else{
echo '<div class="content">
<img src="/img/pattern-left.png" alt="" />
Чат Маресмерон
<img src="/img/pattern-right.png" alt="" />
</div>';
$user['set'] = 9;
$k_post = mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_chat`"),0);
if ($k_post==0){
}
$k_page=k_page($k_post,$user['set']);
$page=page($k_page);
$start=$user['set']*$page-$user['set'];
$q=mysql_query("SELECT * FROM `ms_chat` LIMIT $start, $user[set]");
while($post=mysql_fetch_array($q))
{
$sr = $start+1;
if ($sr ++ % 2)echo '<div class="btn">'; else echo '<div class="btn">';
/////////////////////////////////////////////////////////
echo '<a href="./msroom'.$post['id'].'" class="btnm"><img src="../img/folder.png" width="23" height="23" alt="" /> '.$post['name'].'</a>';
/////////////////////////////////////////////////////////
echo '
</div>';
$start++;
}
}
echo '<div class="center" style="padding-top:16px;">
<span class="nobr">
<a class="btni" href="../">
<span>Главная</span>
</a>
</span>
<span class="nobr">
<a class="btni" href="../mschat">
<span>Комнаты</span>
</a>
</span>
</div>';
?>