Файл: archive_01122016_1136/public_html/friends.php
Строк: 138
<?php
$friends = "friends";
if($_GET['mode']==$friends)
{
include ("conf.php");
include ("lock.php");
include ("functions.php");
if ($user == $myrow["user"] && $pass == $myrow["pass"] && $user != '')
{
bann($user);
$id_user = $myrow['id'];
$num = 10;
@$page = $_GET['page'];
$result00 = mysql_query("SELECT COUNT(*) FROM friends WHERE id_user='".$id_user."'");
$temp = mysql_fetch_array($result00);
$posts = $temp[0];
$total = (($posts - 1) / $num) + 1;
$total = intval($total);
$page = intval($page);
if(empty($page) or $page < 0) $page = 1;
if($page > $total) $page = $total;
$start = $page * $num - $num;
$result2 = mysql_query ("select * from friends where id_user='".$id_user."' order by id desc limit $start, $num",$db);
$result33 = mysql_query ("select * from friends where id_user='".$id_user."'");
if (mysql_num_rows($result33) > 0)
{
$myrow2 = mysql_fetch_array($result2);
include ("head.php");
sms($user,$pass);
do {
$m = "Мужской";
echo "<a href='info.php?user=$user&pass=$pass&id=".$myrow2['user_id']."'>".$myrow2['user_nick']."</a>";
echo "<a href='friends.php?mode=del&user=$user&pass=$pass&ids=".$myrow2['user_id']."'><font color='red'>Удалить</font></a>";
}
while ($myrow2 = mysql_fetch_array($result2));
echo "<div class='nav'>";
if ($page != 1) echo "<a href=friends.php?mode=friends&user=$user&pass=$pass&page=".($page - 1).">Назад</a>";
if ($page != $total) echo " <a href=friends.php?mode=friends&user=$user&pass=$pass&page=".($page + 1).">Далее</a>";
echo "</div>";
}
else
{
include ("head.php");
echo "<div class='nav'>";
echo "У вас нет Друзей!<br />";
echo "</div>";
echo "<a href=friends.php?mode=add&user=$user&pass=$pass>Добавить</a>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
exit();
}
echo "<a href=friends.php?mode=add&user=$user&pass=$pass>Добавить</a>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
exit();
}
else
{
include ("head.php");
echo "<div class='nav'>";
echo "Ошибка! <br />Неверный <b>Ник</b> или <b>Пароль</b>!<br />";
echo "</div>";
echo <<<sss
<a href="index.php">На главную</a>
sss;
include ("foot.php");
}
}
$add = "add";
if($_GET['mode']==$add)
{
include ("conf.php");
include ("lock.php");
if ($user == $myrow["user"] && $pass == $myrow["pass"] && $user != '')
{
include ("head.php");
echo "<div class='nav'>";
echo <<<sss
<form name="form" action="friends.php?mode=s&user=$user&pass=$pass" method="POST">
sss;
echo "Ник: <br /><input name='user_nick' type='text' value=''><br />";
echo "<input type='submit' value='Добавить'></form>";
echo "</div>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
exit();
}
else
{
include ("head.php");
echo "<div class='nav'>";
echo "Ошибка! <br />Неверный <b>Ник</b> или <b>Пароль</b>!<br />";
echo "</div>";
echo <<<sss
<a href="index.php">На главную</a>
sss;
include ("foot.php");
exit();
}
}
$s = "s";
if($_GET['mode']==$s)
{
include ("conf.php");
include ("lock.php");
if ($user == $myrow["user"] && $pass == $myrow["pass"] && $user != '')
{
$id_user = "".$myrow['id']."";
$user_nick = $nicks = mysql_real_escape_string(trim($_POST['user_nick']));
if ($user_nick != '')
{
$result4 = mysql_query("SELECT id,pol FROM userlist WHERE user='".$user_nick."'",$db);
$myrow4 = mysql_fetch_array($result4);
$user_id = "".$myrow4['id']."";
$user_pol = "".$myrow4['pol']."";
$result3 = mysql_query("INSERT INTO friends (id_user,user_nick,user_id,user_pol) VALUES ('$id_user','$user_nick','$user_id','$user_pol')");
if (isset($id_user) and isset($user_nick))
{
if ($result3 == 'true')
{
include ("head.php");
echo "<div class='nav'>Друг добавлен!</div>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
}
}
}
else
{
unset($user_nick);
include ("head.php");
echo "<div class='nav'>Ошибка! Друг не добавлен!</div>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
}
}
else
{
include ("head.php");
echo "<div class='nav'>";
echo "Ошибка! <br />Неверный <b>Ник</b> или<b>Пароль</b>!<br /></div>";
echo "<div class='nav'><a href='index.php'>На главную</a></div>";
include ("foot.php");
}
}
$get = "get";
if($_GET['mode']==$get)
{
include ("conf.php");
include ("lock.php");
if ($user == $myrow["user"] && $pass == $myrow["pass"] && $user != '')
{
$id_user = "".$myrow['id']."";
$user_nick = htmlspecialchars(mysql_real_escape_string(trim($_GET['user_nick']))); if ($user_nick == ''){unset($user_nick); }
$result4 = mysql_query("SELECT id,pol FROM userlist WHERE user='".$user_nick."'",$db);
$myrow4 = mysql_fetch_array($result4);
$user_id = "".$myrow4['id']."";
$user_pol = "".$myrow4['pol']."";
$result3 = mysql_query("INSERT INTO friends (id_user,user_nick,user_id,user_pol) VALUES ('$id_user','$user_nick','$user_id','$user_pol')");
if (isset($id_user) and isset($user_nick))
{
if ($result3 == 'true')
{
include ("head.php");
echo "<div class='nav'>Друг добавлен!</div>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
}
}
else
{
include ("head.php");
echo "<div class='nav'>Ошибка! Друг не добавлен!</div>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
}
}
else
{
include ("head.php");
echo "<div class='nav'>";
echo "Ошибка! <br />Неверный <b>Ник</b> или<b>Пароль</b>!<br /></div>";
echo "<a href='index.php'>На главную</a>";
include ("foot.php");
}
}
$del = "del";
if($_GET['mode']==$del)
{
include ("conf.php");
include ("lock.php");
if ($user == $myrow["user"] && $pass == $myrow["pass"] && $user != '')
{
$ids = htmlspecialchars(mysql_real_escape_string(trim($_GET['ids']))); if ($ids == ''){unset($ids); }
$result3 = mysql_query("DELETE FROM friends WHERE user_id='".$ids."'");
if ($result3 == 'true')
{
include ("head.php");
echo "<div class='nav'>";
echo "Друг Удален!";
echo "</div>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
exit();
}
else
{
include ("head.php");
echo "<div class='nav'>Ошибка! Друг не Удален!</div>";
echo "<a href=menu.php?user=$user&pass=$pass>В меню</a>";
include ("foot.php");
exit();
}
}
else
{
include ("head.php");
echo "<div class='nav'>";
echo "Ошибка! <br />Неверный <b>Ник</b> или<b>Пароль</b>!<br /></div>";
echo "<a href='index.php'>На главную</a>";
include ("foot.php");
}
}
?>