Файл: modules/forum/red_msg.php
Строк: 35
<?php
require '../../system/func_for_game2.inc.php';
if(isset($_GET['r'])){$razdel=num($_GET['r']);}else{$razdel=0;}
if(isset($_GET['id'])){$id=num($_GET['id']);}else{$id=0;}
if(isset($_GET['msg'])){$msg=num($_GET['msg']);}else{$msg=0;}
$proverka_theme = mysqli_num_rows(mysqli_query($link,"SELECT * FROM `forum_msg` WHERE `id`='$msg'"));
$msgf=mysqli_fetch_array(mysqli_query($link,"SELECT * FROM `forum_msg` WHERE `id`='$msg'"));
if($proverka_theme!=0){
if ($user['adm']== "razrab" or $user['adm'] == "administrator" or $user['adm'] == "moder" or $msgf['id_add'] == $user['id'])
{
if (empty($_POST['submit']))
{
head('Форум');
echo'<div class="block center"><div class="block2" ><div class="block3" >
<form action="/forum/red_msg?r='.$razdel.'&id='.$id.'&msg='.$msg.'" method="post">
<div class="razrivt"></div>
<textarea class="textarea" rows="3" style="width: 100%; min-width: 180px;" name="text" type="text">'.vivod($msgf['msg']).'</textarea>
<input type="submit" name="submit" class="submit2" value="Изменить">
</form>
</div></div></div>';
}else{
$msgn=vvod($_POST['text']);
$thema_msg=mysqli_fetch_array(mysqli_query($link,"SELECT * FROM `forum_msg` WHERE `id_theme`='".num($msgf['id_theme'])."' order by `id` limit 1 "));
if($msgf['id_add']==1 or $msgf['id_add']==51){
if($user['id']==1 or $user['id']==51){
if($thema_msg['id']==$msg){mysqli_query($link,"UPDATE `forum_theme` SET `name`='$msgn' WHERE `id`='".num($msgf['id_theme'])."'");}
/*** запись лога ***/
logi_users(2,num($user['id']),'
Отредактировал смс на форуме: '.$msgn.'');
mysqli_query($link,"UPDATE `forum_msg` SET `msg`='$msgn' WHERE `id`='$msg'");}}else{
if($thema_msg['id']==$msg){mysqli_query($link,"UPDATE `forum_theme` SET `name`='$msgn' WHERE `id`='".num($msgf['id_theme'])."'");}
/*** запись лога ***/
logi_users(2,num($user['id']),'
Отредактировал смс на форуме: '.$msgn.'');
mysqli_query($link,"UPDATE `forum_msg` SET `msg`='$msgn' WHERE `id`='$msg'");}
go("/forum?r=$razdel&id=$id");
}
}else{
go("/forum?r=$razdel&id=$id");
}
}else{
go("/forum?r=$razdel&id=$id");
}
foot();
?>