Файл: pages/clan/clan_forum.php
Строк: 548
<?php
// Physical module map v50.6: public URL stays clean while code lives in /pages.
if (!defined('GAME_ROOT')) define('GAME_ROOT', dirname(__DIR__, 2));
chdir(GAME_ROOT);
if (PHP_SAPI !== 'cli') { $_SERVER['PHP_SELF']='/clan_forum.php'; $_SERVER['SCRIPT_NAME']='/clan_forum.php'; }
/* PHP 8.4 compatibility / output buffering: by Метриум (Стэлп) */
if (ob_get_level() === 0) { ob_start(); }
?>
<style>
.button4 {
position: relative;
display: block;
font-family: Arial,Helvetica,FreeSans,"Liberation Sans","Nimbus Sans L",sans-serif;
color: rgb(245,245,245);
text-decoration: none;
padding: 5px;
margin: 6px;
border: none;
border-radius: 1px;
background: #262626;
box-shadow: 1px 2px 3px rgba(178, 178, 178, .7);
/*-webkit-animation: pulsate 1.9s linear infinite;
animation: pulsate 1.9s linear infinite;*/
/*text-shadow: 0 -1px rgba(0,0,0,.3), 0 0 5px #000, 0 0 8px #000;*/
}
.button4:hover {
cursor: pointer;
opacity:0.96;
}
.nav_link {
font-family: Monospace;
display: table;
width: 100%;
}
.test_ex { display: inline-block; padding:2px; margin: 0; min-width:8%; border: 1px solid #62351f; border-top-color: #734a32; line-height: 20px; font-size: 11px; color: #ffcb8d; }
/* Пагинация */ .page { display: inline-block; padding: 10px 0; min-width: 39px; text-decoration: none; color: #94876d; font-size: 14px; font-weight: normal; overflow: hidden; border: 1px solid #423a2b; border-radius: 3px; margin: 0 2px; } span.page { color: #584f3e; border-color: transparent; } .b-page { font-size: 0; text-align: center; white-space: nowrap; padding: 5px 0; background: #12110f; } /*///////////////////////////////*/
</style>
<?php
/* Обновление игры под PHP 8.4 / PDO и усиление безопасности: by Метриум (Стэлп) */
include './system/common.php';
include './system/functions.php';
include './system/user.php';
include './system/menu.php';
$act = isset($_GET['act']) ? $_GET['act'] : null;
switch($act) {
default:
$id = _string(_num($_GET['id'] ?? 0));
if(!$id) { header('Location: /clans/'); exit; }
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$us = db_fetch_array(db_query('SELECT * FROM `clans` WHERE `id` = "'.$id.'" '));
if(!$us) { header('Location: /clans/'); exit; }
$title = 'Форум "'.$us['name'].'"';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
$max = 10;
$count = db_result(db_query('SELECT COUNT(*) FROM `clan_forum_sub` WHERE `clan` = "'.$id.'" '),0);
$pages = ceil($count/$max);
$page = _string(_num($_GET['page'] ?? 1));
if($page > $pages) $page = $pages;
if($page < 1) $page = 1;
$start = $page * $max - $max;
if(isset($_GET['for']))
{
echo "<center><form action='clan_forum?id=$clan[id]&go' method='post'>Название :<br><input type='text' name='name'><br>Кто может создавать топы : <br>
<select name='rank'>
<option value='0'>все</option>
<option value='1'>Боец</option>
<option value='2'>Офицер</option>
<option value='3'>Генерал</option>
<option value='4'>Лидер клана</option>
</select><br/><input type='submit'
value='Создать' class='button'> </form></center>";
}
$name = _string($_POST['name'] ?? '');
$rank = _string(_num($_POST['rank'] ?? 0));
if(isset($_GET['go'])) {
db_query('INSERT INTO `clan_forum_sub` (`name`, `clan`, `rank`) VALUES ("'.$name.'", "'.$clan_memb['clan'].'", "'.$rank.'")');
header('location: /clan_forum?id='.$clan['id'].'');
}
if($count > 0) {
echo '';
$q = db_query('SELECT * FROM `clan_forum_sub` WHERE `clan` = "'.$id.'" ORDER BY `id` DESC LIMIT '.$start.', '.$max.'');
while($row = db_fetch_array($q)) {
echo '<div class="main">
<img src="/images/icon/section.png" alt="Влад_царёв"><a href="/clan_forum?act=sub&id='.$row['id'].'">
'.$row['name'].' </a> ';
if(is_array($clan_memb) && (int)($clan_memb['rank'] ?? 0) >= 3 && (int)$row['clan'] === (int)($clan['id'] ?? 0)){//Доступно для лидера и генерала
echo' [<a href="/clan_forum?act=edit_sub&id='.$row['id'].'">изменить</a>/<a href="/clan_forum?act=del_sub&id='.$row['id'].'">удалить</a>]</div>';
}
}
echo '<br></div><div class="main">
<div class="line"></div>
<div class="menuList">
<br>'.pages('/cforum.php?id='.$id.'&').'</div>';
}else{
echo '<div class="content"><font color="#909090"> Нет разделов </font></div>';
}
if(is_array($clan_memb) && is_array($clan) && (int)($clan_memb['rank'] ?? 0) >= 3 && (int)$id === (int)($clan['id'] ?? 0)){//Создавать может лидер и генерал
echo' <div class="menuList">
<a href="/clan_forum?for&id='.$id.'"> Создать раздел </a> </div>';
}
break;
case 'sub':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$sub = db_fetch_array(db_query('SELECT * FROM `clan_forum_sub` WHERE `id` = "'.$id.'" '));
if (!is_array($sub)) { header('Location: /clans/'); exit; }
$title = (string)($sub['name'] ?? 'Клановый форум');
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
$max = 10;
$count = db_result(db_query('SELECT COUNT(*) FROM `clan_forum_topic` WHERE `sub` = "'.$id.'" '),0);
$pages = ceil($count/$max);
$page = _string(_num($_GET['page'] ?? 1));
if($page > $pages) $page = $pages;
if($page < 1) $page = 1;
$start = $page * $max - $max;
if(!$id) {
header('Location: /');
exit;}
if($count > 0) {
echo '<div class="list">';
$q = db_query('SELECT * FROM `clan_forum_topic` WHERE `sub` = "'.$id.'" ORDER BY `stick` DESC, `id` DESC LIMIT '.$start.', '.$max.'');
while($row = db_fetch_array($q)) {
echo '<div class="main">
<img src="/images/icon/section.png" alt="Влад_царёв"> <a href="/clan_forum?act=topic&id='.$row['id'].'">
'.($row['stick'] == 1 ? '<b>'.$row['name'].'</b>':''.$row['name'].'').'</a>';
if(is_array($clan_memb) && is_array($clan) && (int)($clan_memb['rank'] ?? 0) >= 3 && (int)($sub['clan'] ?? 0) === (int)($clan['id'] ?? 0)){//Доступно для лидера и генерала
echo' [<a href="/clan_forum?act=edit_topic&id='.$row['id'].'">изменить</a>/<a href="/clan_forum?act=del_topic&id='.$row['id'].'">удалить</a>]';
}
}
echo '<br></div></div></div></div>';
echo '<div class="line"></div>
<div class="menuList"><li>
'.pages('/cforum.php?id='.$id.'&').'<li></div>';
}else{
echo '<div class="content"><font color="#909090"> Нет топиков </font></div>';
}
if(is_array($clan_memb) && is_array($clan) && (int)($clan_memb['rank'] ?? 0) >= 3 && (int)($sub['clan'] ?? 0) === (int)($clan['id'] ?? 0)){ //Создавать могут все кто имеет допустимый ранг
echo' <div class="menuLIST"><li>
<a href="/clan_forum?act=add_topic&id='.$id.'"> Создать топик </a> </li></div>';
}
break;
case 'topic':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$topic = db_fetch_array(db_query('SELECT * FROM `clan_forum_topic` WHERE `id` = "'.$id.'" '));
if(!$topic) {
header('location: /forum');
exit;
}
$us = db_fetch_array(db_query('SELECT * FROM `users` WHERE `id` = "'.(int)$topic['user'].'" '));
if (!is_array($us)) { $us = ['id'=>0,'login'=>'Удалённый игрок','r'=>0,'online'=>0,'access'=>0]; }
$title = ''.$topic['name'].'';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
if(!$id) {
header('Location: /');
exit;}
if(is_array($clan_memb) && (int)($clan_memb['rank'] ?? 0) >= 3) {
if(isset($_GET['stick']) == true) {
db_query('UPDATE `clan_forum_topic` SET `stick` = "'.($topic['stick'] == 0 ? 1:0).'" WHERE `id` = "'.$topic['id'].'"');
header('location: /clan_forum?act=topic&id='.$topic['id'].'');
}
if(isset($_GET['close']) == true) {
db_query('UPDATE `clan_forum_topic` SET `close` = "'.($topic['close'] == 0 ? 1:0).'" WHERE `id` = "'.$topic['id'].'"');
header('location: /clan_forum?act=topic&id='.$topic['id'].'');
}
if(isset($_GET['delete']) == true) {
$q = db_query('SELECT * FROM `clan_forum_comments` WHERE `topic` = "'.$topic['id'].'"');
while($row = db_fetch_array($q)) {
db_query('DELETE FROM `clan_forum_comments` WHERE `id` = "'.$row['id'].'"');
}
header('location: /clan_forum?act=sub&id='.$topic['sub'].'');
db_query('DELETE FROM `clan_forum_topic` WHERE `id` = "'.$topic['id'].'"');
}
echo'
<div class="content">
<div class="main">
</div>
<div class="line"></div>';
}
$q = db_query('SELECT * FROM `clan_forum_topic` WHERE `id` = "'.$id.'" ORDER BY `id` DESC LIMIT 1');
while($row = db_fetch_array($q)) {
echo'<div class="main"><img src="/images/icon/race/'.$us['r'].'.png">
<a href="/user/'.$us['id'].'/"> '.$us['login'].' </a> '._times(time() - $row['time']).' <br>
'.bb(smiles($row['text'])).'
</div>
<div class="line"></div><div class="main">';
}
$count = db_result(db_query('SELECT COUNT(*) FROM `clan_forum_comments` WHERE `topic` = "'.$topic['id'].'"'),0);
echo' <div class="content">
Комментарии: <b>'.$count.'</b>
</div>';
if($count > 0) {
echo'<div class="line"></div>
<div class="menu">';
$max = 10;
$pages = ceil($count/$max);
$page = _string(_num($_GET['page'] ?? 1));
if($page > $pages) {$page = $pages;}
if($page < 1) {$page = 1;}
$start = $page * $max - $max;
$q = db_query('SELECT * FROM `clan_forum_comments` WHERE `topic` = "'.$topic['id'].'" ORDER BY `id` LIMIT '.$start.', '.$max.'');
while($row = db_fetch_array($q)) {
$comment_user = db_query('SELECT * FROM `users` WHERE `id` = "'.$row['user'].'"');
$comment_user = db_fetch_array($comment_user);
if (!is_array($comment_user)) { $comment_user = ['id'=>0,'login'=>'Удалённый игрок','r'=>0,'online'=>0,'access'=>0]; }
echo'<img src="/images/icon/race/'.$comment_user['r'].($comment_user['online'] > time() - 300 ? '':'-off').'.png" alt="*"/> <a href="/user/'.$comment_user['id'].'/">'.$comment_user['login'].'</a>';
if($comment_user['id'] != $user['id']) {
echo' <a href="/clan_forum?act=topic&id='.$topic['id'].'&page='.$page.'&to='.$comment_user['id'].'">(»)</a>';
}
echo', '._times(time() - $row['time']).'<br>';
if($row['to']) {
$__to = db_query('SELECT * FROM `users` WHERE `id` = "'.$row['to'].'"');
$__to = db_fetch_array($__to);
if (!is_array($__to)) { $__to = ['id' => 0, 'login' => 'Удалённый игрок']; }
if($__to['id'] == $user['id']) {
echo' <font color="#90c090">';
}
echo' '.$__to['login'].', ';
if($__to['id'] == $user['id']) {
echo' </font>';
}
}
if($comment_user['access'] == 1) {
echo'<font color="f09060">';
}
if($comment_user['access'] == 2) {
echo'<font color="90c0c0">';
}
echo' '.bb(smiles($row['text'])).' ';
if($comment_user['access'] > 0) {
echo'</font>';
}
if(is_array($clan_memb) && (int)($clan_memb['rank'] ?? 0) >= 3) {//Доступно для генeрала и лидера
$comment = _string(_num($_GET['comment'] ?? 0));
if($comment) {
db_query('DELETE FROM `clan_forum_comments` WHERE `id` = "'.$comment.'"');
header('location: /clan_forum?act=topic&id='.$topic['id'].'&page='.$page);
}
echo' <a href="/clan_forum?act=topic&id='.$topic['id'].'&page='.$page.'&comment='.$row['id'].'">[x]</a>';
}
echo'</li><hr>';
}
echo'<li class="no_b">'.pages('/clan_forum.php?act=topic&id='.$topic['id'].'&').'</li>
</div><hr>';
}
echo'<div class="line"></div>
<div class="content">';
if($topic['close'] == 0) {
$text = _string($_POST['text'] ?? '');
$to = _string(_num($_GET['to'] ?? 0));
$_to = null;
if($to) {
$_to = db_query('SELECT * FROM `users` WHERE `id` = "'.$to.'"');
$_to = db_fetch_array($_to);
if(!$_to OR $_to['id'] == $user['id']) {
header('location: /clan_forum?act=topic&id='.$id.'?page='.$page);
exit;
}
}
if($_to) {
$text = str_replace($_to['login'].', ', '', $text);
}
$text = preg_replace('~[a-z][a-z0-9+.-]*://[^<>s]+~iu', '*', $text) ?? $text;
$arrReplace = array('.ru',
'.net',
'.com',
'.рф',
'.tk',
'ref=',
'.su',
'.us',
'.keo', 'http', 'www', 'пробелов', 'ебал', 'чмо', 'пидар', 'сука', 'админ пидр', 'игра мертвая', 'игра пабл', 'хочешь себе такую игру', 'хуйня','тупая уже игра',
'.mobi',
'.X-com',
'.ua',
'.keo.su',
'.ру',
'aux.su',
'Супер игра',
'. r u',
'.доброзло.де',
'.доброзло. де',
'.доброзло.д е',
'.д оброзло.де',
'.д о брозло.де',
'.д о б р о з л о.де',
'.доброз ло.д е',
'.д обр озло.де',
'.до брозл о.де',
'vtutage',
'vipgame',
'хочешь себе такую игру', 'админ лох', 'заходи на сайт', 'ссылку без',
'.ru',
'. tk',
'. t k',
'wart',
'.Ru',
'.r U',
'.ру',
'.RU',
'.Заходи в новую игру',
'.RLDOFDA',
'.де',
'английском',
'нужно вводить',
'НОВАЯ ОНЛАЙН ',
'ДОБРО ПРОТИВ',
'ЗЛА',
'ЗЛО',
'Новая игра',
'доброзло',
'до бр оз ло',
'доброзло.де',
'Заходите',
'заходи',
'Новая онлайн',
' ЗЛО',
'.mir',
'.de',
'dobrozlo',
'.tk',
'. t k',
'.t-k',
'do br oz lo',
'dob',
'.d e',
'.d e',
'.r',
'.zzz.com.ua',
'.Вот игра',
'.net',
'.pro',
'pro',
'pr o',
'http');
$size = count($arrReplace);
while($size--)
{
if(substr_count($text, $arrReplace[$size]))
{
db_query("INSERT INTO `mail` SET `from`='0',`to`='1',`text`=' Пользователь ".$user['login']." | ID: ".$user['id']." нарушает правила игры! Сообщение: ".$text."',`time`='".time()."'");
db_query("INSERT INTO `ban` SET `user`='".$user['id']."',`time`='2147483647',`text`='Нарушение правил игры!',`who`='Система', `ip`='".$user['ip']."'");
break;
}
}
$text = str_replace($arrReplace, '*', $text);
if($text) {
$timessss = time();
if($user['forum_comm_clan']<$timessss){
db_query("UPDATE `users` SET `forum_comm_clan` = '".($timessss+120)."' WHERE `id`='$user[id]' ");
db_query('INSERT INTO `clan_forum_comments` (`topic`,`user`,`to`,`text`,`time`) VALUES ("'.$topic['id'].'", "'.$user['id'].'", "'.$_to['id'].'", "'.$text.'", "'.time().'")');
header('location: /clan_forum?act=topic&id='.$topic['id'].'&page='.$pages);
}else{
echo" <div class='block_zero' align='center'><font color='red'><b>
Ошибка!<br>1 комментарий раз в две минуты!
</b> </font></div>";
}
}
echo'<form action="/clan_forum?act=topic&id='.$topic['id'].'&page='.$page.'&to='.$to.'" method="post">
Сообщение:<br/>
<textarea name="text" style="width: 100%;">';
?>
<?=($to ? $_to['login'].', ':'')?>
<?php
echo'</textarea><br/>
<input type="submit" value="Отправить"/>
</form>';
}else{
echo'<font color="#f33">Топик закрыт</font>';
}
echo'</div>';
break;
case 'add_sub':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$clan_forum_topic = db_fetch_array(db_query('SELECT * FROM `clan_forum_topic` WHERE `id` = "'.$id.'" '));
$us = db_fetch_array(db_query('SELECT * FROM `users` WHERE `id` = "'.$clan_forum_topic['user'].'" '));
$title = 'Создать раздел';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
$name = _string($_POST['name'] ?? '');
$rank = _string(_num($_POST['rank'] ?? 0));
if($name) {
db_query('INSERT INTO `clan_forum_sub` (`name`, `clan`, `rank`) VALUES ("'.$name.'", "'.$clan_memb['clan'].'", "'.$rank.'")');
header('location: /clan_forum?id='.$clan['id'].'');
}
echo'
<div class="content">
<form action="/clan_forum?act=add_razdel&id='.$id.'" method="post">
Название раздела:<br/>
<input name="name"/><br/>
Создавать топики могут:<br/>
<select name="rank">
<option value="0">все</option>
<option value="1">Боец</option>
<option value="2">Офицер</option>
<option value="3">Генерал</option>
<option value="4">Лидер клана</option>
</select><br/>
<input type="submit" value="Сохранить"/>
</form>
</div>
<div class="line"></div>';
break;
case 'edit_sub':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$sub = db_fetch_array(db_query('SELECT * FROM `clan_forum_sub` WHERE `id` = "'.$id.'" '));
$us = db_fetch_array(db_query('SELECT * FROM `users` WHERE `id` = "'.$sub['user'].'" '));
$title = 'Изменить раздел';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
$name = _string($_POST['name'] ?? '');
if($name) {
db_query('UPDATE `clan_forum_sub` SET `name` = "'.$name.'" WHERE `id` = "'.$sub['id'].'"');
header('location: /clan_forum?act=edit_sub&id='.$sub['id'].'');
}
echo'
<div class="content">
<form action="/clan_forum?act=edit_sub&id='.$sub['id'].'" method="post">
Название раздела:<br/>
<input name="name" value="'.$sub['name'].'"/> <input type="submit" value="Сохранить"/>
</form>
</div>
<div class="line"></div>';
break;
case 'del_sub':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$sub = db_fetch_array(db_query('SELECT * FROM `clan_forum_sub` WHERE `id` = "'.$id.'" '));
$us = db_fetch_array(db_query('SELECT * FROM `users` WHERE `id` = "'.$sub['user'].'" '));
$title = 'Изменить раздел';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
if(($_GET['delete'] ?? null) == true) {
$q = db_query('SELECT * FROM `clan_forum_topic` WHERE `sub` = "'.$sub['id'].'"');
while($row = db_fetch_array($q)) {
db_query('DELETE FROM `clan_forum_comments` WHERE `topic` = "'.$row['id'].'"');
}
db_query('DELETE FROM `clan_forum_topic` WHERE `sub` = "'.$sub['id'].'"');
db_query('DELETE FROM `clan_forum_sub` WHERE `id` = "'.$sub['id'].'"');
header('location: /clan_forum?id='.$clan_memb['clan'].'');
}
echo'
<div class="content">
Вы дейстаительно хотите удалить раздел: "'.$sub['name'].'"? <br/>
<a href="/clan_forum?act=del_sub&delete=true&id='.$sub['id'].'">Да</a>
</div>
<div class="line"></div>';
break;
case 'add_topic':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$clan_forum_topic = db_fetch_array(db_query('SELECT * FROM `clan_forum_topic` WHERE `id` = "'.$id.'" '));
$us = db_fetch_array(db_query('SELECT * FROM `users` WHERE `id` = "'.$clan_forum_topic['user'].'" '));
$title = 'Создать топик';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
$name = _string($_POST['name'] ?? '');
$text = _string($_POST['text'] ?? '');
$timessss = time();
if($user['forum_comm_clan_topik']<$timessss){
if($name && $text) {
$text = preg_replace('~[a-z][a-z0-9+.-]*://[^<>s]+~iu', '*', $text) ?? $text;
$arrReplace = array('.ru',
'.net',
'.com',
'.рф',
'.tk',
'ref=',
'.su',
'.us',
'.keo', 'http', 'www', 'пробелов', 'ебал', 'чмо', 'пидар', 'сука', 'админ пидр', 'игра мертвая', 'игра пабл', 'хочешь себе такую игру', 'хуйня','тупая уже игра',
'.mobi',
'.X-com',
'.ua',
'.keo.su',
'.ру',
'aux.su',
'Супер игра',
'. r u',
'.доброзло.де',
'.доброзло. де',
'.доброзло.д е',
'.д оброзло.де',
'.д о брозло.де',
'.д о б р о з л о.де',
'.доброз ло.д е',
'.д обр озло.де',
'.до брозл о.де',
'vtutage',
'vipgame',
'хочешь себе такую игру', 'админ лох', 'заходи на сайт', 'ссылку без',
'.ru',
'. tk',
'. t k',
'wart',
'.Ru',
'.r U',
'.ру',
'.RU',
'.Заходи в новую игру',
'.RLDOFDA',
'.де',
'английском',
'нужно вводить',
'НОВАЯ ОНЛАЙН ',
'ДОБРО ПРОТИВ',
'ЗЛА',
'ЗЛО',
'Новая игра',
'доброзло',
'до бр оз ло',
'доброзло.де',
'Заходите',
'заходи',
'Новая онлайн',
' ЗЛО',
'.mir',
'.de',
'dobrozlo',
'.tk',
'. t k',
'.t-k',
'do br oz lo',
'dob',
'.d e',
'.d e',
'.r',
'.zzz.com.ua',
'.Вот игра',
'.net',
'.pro',
'pro',
'pr o',
'http');
$size = count($arrReplace);
while($size--)
{
if(substr_count($text, $arrReplace[$size]))
{
db_query("INSERT INTO `mail` SET `from`='0',`to`='1',`text`=' Пользователь ".$user['login']." | ID: ".$user['id']." нарушает правила игры! Сообщение: ".$text."',`time`='".time()."'");
db_query("INSERT INTO `ban` SET `user`='".$user['id']."',`time`='2147483647',`text`='Нарушение правил игры!',`who`='Система', `ip`='".$user['ip']."'");
break;
}
}
$text = str_replace($arrReplace, '*', $text);
db_query("UPDATE `users` SET `forum_comm_clan_topik` = '".($timessss+600)."' WHERE `id`='$user[id]' ");
db_query('INSERT INTO `clan_forum_topic` (`sub`,
`name`,
`user`,
`text`,
`time`) VALUES ("'.$id.'",
"'.$name.'",
"'.$user['id'].'",
"'.$text.'",
"'.time().'")');
$topic_id = db_insert_id();
header('location: /clan_forum?act=topic&id='.$topic_id.'/');
}
}else{
echo" <div class='block_zero' align='center'><font color='#909090'>
Ошибка, создавать топик можно раз в 10 минут!
</font></div>";
}
echo'
<div class="content">
<form action="/clan_forum?act=add_topic&id='.$id.'" method="post">
Название топика:<br/>
<input name="name"/><br/>
Оглавление:<br/>
<textarea name="text" style="width: 100%;"></textarea><br/>
<input type="submit" value="Создать"/>
</form>
</div>';
break;
case 'edit_topic':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$topic = db_fetch_array(db_query('SELECT * FROM `clan_forum_topic` WHERE `id` = "'.$id.'" '));
$us = db_fetch_array(db_query('SELECT * FROM `users` WHERE `id` = "'.$topic['user'].'" '));
$title = 'Изменить топик';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
$name = _string($_POST['name'] ?? '');
$text = _string($_POST['text'] ?? '');
if($name && $text) {
db_query('UPDATE `clan_forum_topic` SET `name` = "'.$name.'", `text` = "'.$text.'" WHERE `id` = "'.$topic['id'].'"');
header('location: /clan_forum?act=edit_topic&id='.$topic['id'].'');
}
echo'
<div class="content">
<form action="/clan_forum?act=edit_topic&id='.$topic['id'].'" method="post">
Название топика:<br/>
<input name="name" value="'.$topic['name'].'"/><br/>
Оглавление:<br/>
<textarea name="text" style="width: 100%;"/>'.$topic['text'].'</textarea><br/>
<input type="submit" value="Изменить"/>
</form>
</div>';
break;
case 'del_topic':
$id = _string(_num($_GET['id'] ?? 0));
$clan_memb = db_fetch_array(db_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'" '));
$topic = db_fetch_array(db_query('SELECT * FROM `clan_forum_topic` WHERE `id` = "'.$id.'" '));
$us = db_fetch_array(db_query('SELECT * FROM `users` WHERE `id` = "'.$topic['user'].'" '));
$title = 'Изменить топик';
include './system/h.php';
echo '<div class="title">'.$title.'</div>
<div class="line"></div>';
if(isset($_GET['delete']) == true) {
$q = db_query('SELECT * FROM `clan_forum_comments` WHERE `topic` = "'.$topic['id'].'"');
while($row = db_fetch_array($q)) {
db_query('DELETE FROM `clan_forum_comments` WHERE `id` = "'.$row['id'].'"');
}
header('location: /clan_forum?act=sub&id='.$topic['sub'].'');
db_query('DELETE FROM `clan_forum_topic` WHERE `id` = "'.$topic['id'].'"');
}
echo'
<div class="content">
Вы дейстаительно хотите удалить топик: "'.$topic['name'].'"? <br/>
<a href="/clan_forum?act=del_topic&delete=true&id='.$topic['id'].'">Да</a>
</div>
<div class="line"></div>';
break;
}
include './system/f.php';
?>