Файл: ubiznes.mobi/inc/firms/forums.php
Строк: 151
<?
if(isset($_GET['forums'])){
if(isset($_GET['razdel']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_firms_name` WHERE `id` = '".(intval($_GET['razdel']))."' AND `id_firm` = '$firms[id]'"),0)>0){
$razdel=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_firms_name` WHERE `id` = '".(intval($_GET['razdel']))."' LIMIT 1"));
if(isset($_GET['topic']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_firms` WHERE `id` = '".(intval($_GET['topic']))."' AND `id_firm` = '$firms[id]' "),0)>0){
$topic=mysql_fetch_assoc(mysql_query("SELECT * FROM `forum_firms` WHERE `id` = '".(intval($_GET['topic']))."' AND `type` = 'tema' LIMIT 1"));
$visit=mysql_fetch_array(mysql_query("SELECT * FROM forum_firms WHERE id='".$topic['id']."'"));
$visit_array=explode(',',$visit['visit']);
$visit_num=count($visit_array)+$sum_num;
if(!in_array($user['id'],$visit_array)){
$visit_array[$visit_num]=$user['id'];
mysql_query("UPDATE forum_firms SET visit='".implode(',',$visit_array)."' WHERE id='".$topic['id']."'");
}
echo'<div class="block event"> <h3> <a href=/?firms&about='.$firms['id'].'&forums&razdel='.$razdel['id'].'> '.hsc($razdel['name']).' </a> / '.hsc($topic['name']).' </h3> </div>';
echo'<div class="block">
'.nc($topic['id_user']).' <span class="small minor"> '.vremja($topic['time']).' </span></br>
'.output_text($topic['msg'],$topic['id_user']).' </div>';
if($topic['lock']==1){
echo'<div class="block"><span class="small minor"> Тема закрыта </span></div>';
}
$q=mysql_query("SELECT * FROM `forum_firms` WHERE `id_razdel` = '$topic[id]' AND `type` = 'komm' AND `id_firm` = '$firms[id]' ORDER BY `id` ASC LIMIT 10");
if(mysql_num_rows($q)==0){ echo'<div class="block"> Список комментариев пуст </div>'; }
else{
echo'<div class="block">';
while($post=mysql_fetch_assoc($q)){
echo''.nc($post['id_user']).' <span class="small minor"> '.vremja($post['time']).' </span></br>
'.($post['otvet']>0?nc($post['otvet']).', ':null).output_text($post['msg'],$post['id_user']).'</br>
'.($post['id_user']!=$user['id']?'
<a class="small minor" href=/?firms&about='.$firms['id'].'&forums&razdel='.$razdel['id'].'&topic='.$topic['id'].'&otvet='.$post['id_user'].'> [ответить] </a>
<a class="small minor" href=/?firms&about='.$firms['id'].'&forums&razdel='.$razdel['id'].'&topic='.$topic['id'].'&jalob='.$post['id'].'> [жалоба] </a> </span></br>
':null).'</br>';
}
echo'</div>';
}
if($topic['lock']==0){
if(isset($_GET['msg_go']) && !$ban_act){
$msg=mysql_real_escape_string($_POST['msg']);
$otvet=intval($_POST['otvet']);
if($msg!=null){
mysql_query("INSERT INTO `forum_firms` SET `id_firm` = '$firms[id]',`otvet` = '$otvet',`type` = 'komm', `id_razdel` = '$topic[id]', `msg` = '$msg', `time` = '$time',`id_user` = '$user[id]'");
mysql_query("UPDATE `forum_firms` SET `visit` = '' WHERE `id` = '".$topic['id']."'");
mysql_query("UPDATE `forum_firms_name` SET `visit` = '' WHERE `id` = '".$razdel['id']."'");
header("location:/?firms&about=$firms[id]&forums&razdel=$razdel[id]&topic=$topic[id]"); exit;
}else{err_game("Пустое поле сообщения");}
}
if(isset($ban_act)){
echo' <center> <div class="block"> <font color="red"> У Вас активен обет молчания, Вы не можете писать </font></div> </center>';
}else{
echo '<script type="text/javascript" src="/js/smile.js"></script>
<div class="block">
<center>
<form method="post" action="/?firms&about='.$firms['id'].'&forums&razdel='.$razdel['id'].'&topic='.$topic['id'].'&msg_go" id="myform">
<div>
<div><label>Сообщение:
<textarea id="msg" class="wide" rows="5" name="msg"></textarea>
</label>
<input type="hidden" name="otvet" value="'.intval($_GET['otvet']).'"></br>
</div>
<table style="width:90%;">
<tr>
<td style="width:33%; text-align: left;">
<a href="#" onclick="{smiles(); return false;}">
<span class="cbtn green"><span class="cb_end"><span class="cb_ttl">
<img width="16" height="16" src="images/icons/smiles.png">
</span></span></span>
</a>
</td>
<td style="width:33%; text-align: center;">
<a href="#" onclick="{document.getElementById('myform').submit(); return false;}">
<span class="cbtn green" style="min-width: 135px;"><span class="cb_end"><span class="cb_ttl">Отправить</span></span></span>
</a>
</td>
<td style="width:33%; text-align: right;">
<a href="/?chat">
<span class="cbtn green"><span class="cb_end"><span class="cb_ttl">
<img width="16" height="16" src="images/icons/refresh.png">
</span></span></span>
</a>
</td>
</tr>
</table>';
echo"<label><input type='hidden' value='$ank[nick]' name='nick'></label><label><input type='hidden' value='$ank[id]' name='d'></label>";
echo'</form>
</center>
<div id="smiles" style="display: none; text-align: center;">';
$result = mysql_query('SELECT * FROM `smiles` ORDER BY `id` ASC');
while($posts=mysql_fetch_array($result)){
$exp=explode(',',$posts['name']);
?>
<span><a href="javascript:sml('msg', '<?=$exp[0];?>')"><img src="/images/smiles/<?=$posts[img];?>"></a></span>
<?
}
echo '</div>';
echo'</div>';
}
}
back("/?firms&about=$firms[id]&forums&razdel=$razdel[id]"); include_once'sys/foot.php';
}
echo'<div class="block event"> <h3> <a href=/?firms&about='.$firms['id'].'&forums> Форум </a> / '.hsc($razdel['name']).' </h3> </div>';
$q=mysql_query("SELECT * FROM `forum_firms` WHERE `type` = 'tema' AND `id_razdel` = '$razdel[id]' AND `id_firm` = '$firms[id]' ORDER BY `id` DESC");
$visit=mysql_fetch_array(mysql_query("SELECT * FROM forum_firms_name WHERE id='".$razdel['id']."'"));
$visit_array=explode(',',$visit['visit']);
$visit_num=count($visit_array)+$sum_num;
if(!in_array($user['id'],$visit_array)){
$visit_array[$visit_num]=$user['id'];
mysql_query("UPDATE forum_firms_name SET visit='".implode(',',$visit_array)."' WHERE id='".$razdel['id']."'");
}
if(mysql_num_rows($q)==0){
echo'<div class="block"> Тем в данном разделе нет </div>';
}else{
echo'<div class="block">';
while($post=mysql_fetch_assoc($q)){
$visit_array=explode(',',$post['visit']);
$visit_num=count($visit_array)+$sum_num;
echo (!in_array($user['id'],$visit_array)?'<img width="16" height="16" src="/images/icons/forum_topic_new.png">':'<img width="16" height="16" src="/images/icons/forum_topic.png">').'
<a href=/?firms&about='.$firms['id'].'&forums&razdel='.$razdel['id'].'&topic='.$post['id'].'> '.hsc($post['name']).' </a></br>';
}
echo'</div>';
}
back("/?firms&about=$firms[id]&forums"); include_once'sys/foot.php';
}
echo'<div class="block event"> <h3> <a href=/?firms&about='.$firms['id'].'> '.hsc($firms['name']).' </a> / Форум </h3> </div>';
$q=mysql_query("SELECT * FROM `forum_firms_name` WHERE `id_firm` = '$firms[id]' ORDER BY `id` ASC");
if(mysql_num_rows($q)==0){
echo'<div class="block"> Разделов на форуме нет </div>';
}else{
echo'<div class="block">';
while($post=mysql_fetch_assoc($q)){
$visit_array=explode(',',$post['visit']);
$visit_num=count($visit_array)+$sum_num;
echo (!in_array($user['id'],$visit_array)?'<img width="16" height="16" src="/images/icons/forum_new.png">':'<img width="16" height="16" src="/images/icons/forum.png">').'
<a href=/?firms&about='.$firms['id'].'&forums&razdel='.$post['id'].'> '.hsc($post['name']).' </a></br>';
}
echo'</div>';
}
include_once'sys/foot.php';
}