Файл: adm_panel/polls.php
Строк: 139
<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
$qq=mysql_query("SELECT * FROM `private_poll` WHERE `time` < '$time'");
while($post=mysql_fetch_array($qq))
{
$group=mysql_fetch_array(mysql_query("SELECT * FROM `user_group` WHERE `id` = '$post[group]'"));
$who=get_user($post['id_who']);
$ank=get_user($post['id_user']);
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `private_pollen` WHERE `id_poll` = '$post[id]' AND `var` = 'plus'"),0)>=mysql_result(mysql_query("SELECT COUNT(*) FROM `private_pollen` WHERE `id_poll` = '$post[id]' AND `var` = 'minus'"),0))
{
mysql_query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('2', '$ank[id]', 'Доброго времени суток!
Поздравляем, теперь Вы $group[name] нашего сайта!
Назначил [b]$who[nick][/b].', '$time')");
mysql_query("UPDATE `user` SET `group_access` = '$group[id]' WHERE `id` = '$ank[id]' LIMIT 1");
admin_log('Пользователи','Изменение статуса',"Пользователь '$ank[nick]': Статус '$ank[group_name]' изменен на '".mysql_result(mysql_query("SELECT `name` FROM `user_group` WHERE `id` = '".intval($post['group'])."'"),0)."'");
mysql_query("DELETE FROM `private_poll` WHERE `id` = '$post[id]'");
}
else
{
mysql_query("DELETE FROM `private_poll` WHERE `id` = '$post[id]'");
mysql_query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('2', '$ank[id]', 'Доброго времени суток.
Сожелеем, но должность "$group[name]" Вам не досталась!', '$time')");
}
}
if($user['group_access']>1)
{
$set['title']='Выборы';
include_once '../sys/inc/thead.php';
title();
aut();
if(isset($_GET['yes']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `private_poll` WHERE `id` = '".intval($_GET['yes'])."' AND `good` = '0'"),0)!=0 && mysql_result(mysql_query("SELECT COUNT(*) FROM `private_pollen` WHERE `id_poll` = '".intval($_GET['yes'])."' AND `id_user` = '$user[id]'"),0)==0)
{
mysql_query("INSERT INTO `private_pollen` (`id_poll`, `id_user`, `var`) VALUES ('".intval($_GET['yes'])."', '$user[id]', 'plus')");
header("Location:?");
}
elseif(isset($_GET['no']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `private_poll` WHERE `id` = '".intval($_GET['no'])."' AND `good` = '0'"),0)!=0 && mysql_result(mysql_query("SELECT COUNT(*) FROM `private_pollen` WHERE `id_poll` = '".intval($_GET['no'])."' AND `id_user` = '$user[id]'"),0)==0)
{
mysql_query("INSERT INTO `private_pollen` (`id_poll`, `id_user`, `var`) VALUES ('".intval($_GET['no'])."', '$user[id]', 'minus')");
header("Location:?");
}
if($user['id']==1)
{
if(isset($_GET['del']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `private_poll` WHERE `id` = '".intval($_GET['del'])."'"),0)!=0)mysql_query("DELETE FROM `private_poll` WHERE `id` = '".intval($_GET['del'])."' LIMIT 1");
if(isset($_GET['extern']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `private_poll` WHERE `id` = '".intval($_GET['extern'])."'"),0)!=0)
{
$post=mysql_fetch_array(mysql_query("SELECT * FROM `private_poll` WHERE `id` = '".intval($_GET['extern'])."'"));
$group=mysql_fetch_array(mysql_query("SELECT * FROM `user_group` WHERE `id` = '$post[group]'"));
$who=get_user($post['id_who']);
$ank=get_user($post['id_user']);
mysql_query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('2', '$ank[id]', 'Доброго времени суток!
Поздравляем, теперь Вы $group[name] нашего сайта!
Назначил [b]$who[nick][/b].', '$time')");
admin_log('Пользователи','Изменение статуса',"Пользователь '$ank[nick]': Статус '$ank[group_name]' изменен на '".mysql_result(mysql_query("SELECT `name` FROM `user_group` WHERE `id` = '".intval($post['group'])."'"),0)."'");
mysql_query("UPDATE `user` SET `group_access` = '$group[id]' WHERE `id` = '$ank[id]' LIMIT 1");
mysql_query("DELETE FROM `private_poll` WHERE `id` = '$post[id]'");
}
}
$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `private_poll`"),0);
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
$q=mysql_query("SELECT * FROM `private_poll` ORDER BY `id` DESC LIMIT $start, $set[p_str]");
if ($k_post==0)
{
echo "<div class='p_t'>Здесь пусто!<br/>n</div>n";
}
while ($post = mysql_fetch_assoc($q))
{
$group=mysql_fetch_array(mysql_query("SELECT * FROM `user_group` WHERE `id` = '$post[group]'"));
$who=get_user($post['id_who']);
$ank=get_user($post['id_user']);
echo "<div style='border: solid #C0D0FF; border-width: 1px 0 1px 0; margin: 1px 0 1px 0; background: #F8FBFF'><div style='padding:2px'>n";
echo "Кандидат: <b><a style='color: #79358c' href='/info.php?id=$ank[id]'>$ank[nick]</a></b><font color='green'>($group[name])</font><br/>n";
echo "Назначил: <b><a style='color: #79358c' href='/info.php?id=$who[id]'>$who[nick]</a></b><br/>n";
if($post['good']==0)echo "Дата окончания:".vremja($post['time'])."<br/>n";
if($post['good']==0)
{
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `private_pollen` WHERE `id_poll` = '$post[id]' AND `id_user` = '$user[id]'"),0)==0)echo "<a href='?yes=$post[id]' style='color:green'>За</a> | <a href='?no=$post[id]' style='color:red'>Против</a>n";
else echo "<font color='green'>За (".mysql_result(mysql_query("SELECT COUNT(*) FROM `private_pollen` WHERE `id_poll` = '$post[id]' AND `var` = 'plus'"),0).")</font> | <font color='red'>Против (".mysql_result(mysql_query("SELECT COUNT(*) FROM `private_pollen` WHERE `id_poll` = '$post[id]' AND `var` = 'minus'"),0).")</font>n";
if($user['id']==1)echo "<br/>n<a href='?del=$post[id]'><span color='red'>[удалить]</span></a> | <a href='?extern=$post[id]'><span color='green'>[назначить экстерном]</span></a>n";
}
echo "</div>n</div>n";
}
include_once '../sys/inc/tfoot.php';
}
else header("Location:/umenu.php");
?>