Файл: modules/zc/index.php
Строк: 323
<?php
include '../../system/core.php';
include '../../system/header.php';
if(!$user['id']){
header('Location: /index.php'); exit;
}
include '../../modules/op/c.php';
include '../../modules/privat/c.php';
switch($_GET['m']){
#Главная
default:
echo '<div class="menu">Загруз-Центр</div>';
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `moder` = '.$user['id'].''));
if($zc_r != 0){
echo '<div class="list1"><a href="/zc/moder">Панель управления</a></div>';
}
if($user['status'] == 4){
echo '<div class="list1"><a href="/zc/nr">Новый раздел</a></div>';
}
echo '<div class="menu2">Категории:</div>';
$cop = 10;
$ca = mysql_result(mysql_query("SELECT COUNT(*) FROM `zc_r`"),0);
$cp = ceil($ca/$cop);
if(isset($_GET['p']) && is_numeric($_GET['p'])){
$p = $_GET['p'];
if($_GET['p']>$cp) $p = $cp;
if($_GET['p']<1)$p = 1;
}else{
$p = 1;
}
$start = $p*$cop-$cop;
$zc_r = mysql_query("SELECT * FROM `zc_r` ORDER BY `id` LIMIT $start,$cop");
while($zc_r2 = mysql_fetch_assoc($zc_r)){
echo '<div class="raz"><img src="/modules/zc/images/unknown.png"/> <a href="/zc/r'.$zc_r2['id'].'">'.$zc_r2['name'].'</a> ('.mysql_result(mysql_query('select count(`id`) from `zc_f` where `r` = "'.$zc_r2['id'].'" and `status` = "0"'),0).')<font color="red"><b>+'.mysql_result(mysql_query('select count(`id`) from `zc_f` where `r` = "'.$zc_r2['id'].'" and `status` = "0" and `time` > "'.(time()-((60*60)*24)).'"'),0).'</b></font>';
if($user['status'] == 4) echo ' [<a href="/zc/rdel'.$zc_r2['id'].'">уд</a>] [<a href="/zc/red'.$zc_r2['id'].'">ред</a>]';
echo '<div class="lst">
'.smiles(bbcode($zc_r2['about'])).'<br>
Модератор: '.ustatus($zc_r2['moder']).' <a href="/us'.$zc_r2['moder'].'">'.uname($zc_r2['moder']).'</a> '.uaccess($zc_r2['moder']).'
</div></div>';
}
echo '<div class="raz">
Всего файлов: '.mysql_result(mysql_query('select count(`id`) from `zc_f` where `status` = "0"'),0).'<br>
(под)Категорий: '.(mysql_result(mysql_query('select count(`id`) from `zc_r`'),0)+mysql_result(mysql_query('select count(`id`) from `zc_pr`'),0)).'
</div><div class="navg">Стр. ';
if($p-2>0) echo '<a href="/zc/p1"><<</a> ';
if($p-1>0) echo '<a href="/zc/p'.($p-1).'"><</a> ';
if($p-3>0) echo '<a href="/zc/p'.($p-3).'">'.($p-3).'</a> | ';
if($p-2>0) echo '<a href="/zc/p'.($p-2).'">'.($p-2).'</a> | ';
if($p-1>0) echo '<a href="/zc/p'.($p-1).'">'.($p-1).'</a> | ';
echo '<b>'.$p.'</b>';
if($p+1<=$cp) echo ' | <a href="/zc/p'.($p+1).'">'.($p+1).'</a>';
if($p+2<=$cp) echo ' | <a href="/zc/p'.($p+2).'">'.($p+2).'</a>';
if($p+3<=$cp) echo ' | <a href="/zc/p'.($p+3).'">'.($p+3).'</a>';
if($p+1<=$cp) echo ' <a href="/zc/p'.($p+1).'">></a>';
if($p+2<=$cp) echo ' <a href="/zc/p'.ceil($ca/$cop).'">>></a>';
echo '</div>';
break;
case 'r':
$id = TextGuard($id);
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$id.''));
if(empty($id) or !is_numeric($id) or $zc_r == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | '.$zc_r['name'].'</div>';
if($user['status'] == 4){
echo '<div class="navg"><a href="/zc/npr'.$id.'">Новый подраздел</a></div>';
}
$cop = 10;
$ca = mysql_result(mysql_query("SELECT COUNT(*) FROM `zc_pr` where `r` = '".$id."'"),0);
$cp = ceil($ca/$cop);
if(isset($_GET['p']) && is_numeric($_GET['p'])){
$p = $_GET['p'];
if($_GET['p']>$cp) $p = $cp;
if($_GET['p']<1)$p = 1;
}else{
$p = 1;
}
$start = $p*$cop-$cop;
$zc_pr = mysql_query("SELECT * FROM `zc_pr` where `r` = '".$id."' ORDER BY `id` DESC LIMIT $start,$cop");
while($zc_pr2 = mysql_fetch_assoc($zc_pr)){
echo '<div class="list1"><img src="/modules/zc/images/unknown.png"/> <a href="/zc/pr'.$zc_pr2['id'].'">'.$zc_pr2['name'].'</a> ('.mysql_result(mysql_query('select count(`id`) from `zc_f` where `pr` = "'.$zc_pr2['id'].'" and `status` = "0"'),0).')';
if($user['status'] == 4) echo ' [<a href="/zc/prdel'.$zc_pr2['id'].'">уд</a>] [<a href="/zc/pred'.$zc_pr2['id'].'">ред</a>]';
echo '</div>';
}
echo '</div><div class="navg">Стр. ';
if($p-2>0) echo '<a href="/zc/r'.$id.'/p1"><<</a> ';
if($p-1>0) echo '<a href="/zc/r'.$id.'/p'.($p-1).'"><</a> ';
if($p-3>0) echo '<a href="/zc/r'.$id.'/p'.($p-3).'">'.($p-3).'</a> | ';
if($p-2>0) echo '<a href="/zc/r'.$id.'/p'.($p-2).'">'.($p-2).'</a> | ';
if($p-1>0) echo '<a href="/zc/r'.$id.'/p'.($p-1).'">'.($p-1).'</a> | ';
echo '<b>'.$p.'</b>';
if($p+1<=$cp) echo ' | <a href="/zc/r'.$id.'/p'.($p+1).'">'.($p+1).'</a>';
if($p+2<=$cp) echo ' | <a href="/zc/r'.$id.'/p'.($p+2).'">'.($p+2).'</a>';
if($p+3<=$cp) echo ' | <a href="/zc/r'.$id.'/p'.($p+3).'">'.($p+3).'</a>';
if($p+1<=$cp) echo ' <a href="/zc/r'.$id.'/p'.($p+1).'">></a>';
if($p+2<=$cp) echo ' <a href="/zc/r'.$id.'/p'.ceil($ca/$cop).'">>></a>';
echo '</div>';
break;
case 'pr':
$id = TextGuard($id);
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$id.''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_pr['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | <a href="/zc/r'.$zc_r['id'].'" style="color:#ffffff;">'.$zc_r['name'].'</a> | '.$zc_pr['name'].'</div><div class="navg">
<a href="/zc/up'.$id.'">Загрузить файл</a>
</div>';
$cop = 10;
$ca = mysql_result(mysql_query("SELECT COUNT(*) FROM `zc_f` where `pr` = '".$id."' and `status` = '0'"),0);
$cp = ceil($ca/$cop);
if(isset($_GET['p']) && is_numeric($_GET['p'])){
$p = $_GET['p'];
if($_GET['p']>$cp) $p = $cp;
if($_GET['p']<1)$p = 1;
}else{
$p = 1;
}
$start = $p*$cop-$cop;
$zc_f = mysql_query("SELECT * FROM `zc_f` where `pr` = '".$id."' and `status` = '0' ORDER BY `id` DESC LIMIT $start,$cop");
while($zc_f2 = mysql_fetch_assoc($zc_f)){
echo '<div class="raz"><img src="/modules/zc/images/archive.png"/> <a href="/zc/f'.$zc_f2['id'].'">'.$zc_f2['name'].'</a> ('.round(filesize('files/'.$zc_f2['file'].'')/1024).' кб)</div>';
}
echo '</div><div class="navg">Стр. ';
if($p-2>0) echo '<a href="/zc/pr'.$id.'/p1"><<</a> ';
if($p-1>0) echo '<a href="/zc/pr'.$id.'/p'.($p-1).'"><</a> ';
if($p-3>0) echo '<a href="/zc/pr'.$id.'/p'.($p-3).'">'.($p-3).'</a> | ';
if($p-2>0) echo '<a href="/zc/pr'.$id.'/p'.($p-2).'">'.($p-2).'</a> | ';
if($p-1>0) echo '<a href="/zc/pr'.$id.'/p'.($p-1).'">'.($p-1).'</a> | ';
echo '<b>'.$p.'</b>';
if($p+1<=$cp) echo ' | <a href="/zc/pr'.$id.'/p'.($p+1).'">'.($p+1).'</a>';
if($p+2<=$cp) echo ' | <a href="/zc/pr'.$id.'/p'.($p+2).'">'.($p+2).'</a>';
if($p+3<=$cp) echo ' | <a href="/zc/pr'.$id.'/p'.($p+3).'">'.($p+3).'</a>';
if($p+1<=$cp) echo ' <a href="/zc/pr'.$id.'/p'.($p+1).'">></a>';
if($p+2<=$cp) echo ' <a href="/zc/pr'.$id.'/p'.ceil($ca/$cop).'">>></a>';
echo '</div>';
break;
case 'up':
$id = TextGuard($id);
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$id.''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_pr['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | <a href="/zc/r'.$zc_r['id'].'" style="color:#ffffff;">'.$zc_r['name'].'</a> | <a href="/zc/pr'.$id.'" style="color:#ffffff;">'.$zc_pr['name'].'</a> | Загрузка файла</div>';
if(isset($_POST['submit'])){
$name = TextGuard($_POST['name']);
if(empty($name)) $err[] = 'Название осталось пустым...';
$about = TextGuard($_POST['about']);
if(empty($about)) $err[] = 'Описание осталось пустым...';
$rating = TextGuard($_POST['rating']);
if(empty($rating)) $rating = 0;
if($rating > $user['rating']) $err[] = 'Вы не можете поставить рейтинг для скачивание больше чем ваш.';
if(!is_numeric($rating)) $err[] = 'Ошибка ввода рейтинга...';
if(!@file_exists($_FILES['filename']['tmp_name'])) $err[] = 'Вы не выбрали файл...';
if($_FILES['filename']['size'] != 0 and $_FILES['filename']['size'] > 10024000) $err[] = 'Слишком большой файл...';
$filetype = array ( 'jpg', 'gif', 'png', 'jpeg', 'bmp', 'zip', 'rar', '7z', 'txt', 'mp3', 'avi', 'mp4', '3gp' );
$upfiletype = substr($_FILES['filename']['name'], strrpos( $_FILES['filename']['name'], "." )+1);
if(!in_array($upfiletype,$filetype)) $err[] = 'Вы пытаетесь загрузить недопустимый формат файла...';
if(!$err){
$fn = date('dmY').'_fn'.rand(1234,5678).'_'.$_FILES['filename']['name'];
move_uploaded_file($_FILES['filename']['tmp_name'], "files/".$fn."");
mysql_query("INSERT INTO `zc_f`(
`r`,
`pr`,
`name`,
`about`,
`author`,
`rating`,
`downs`,
`ldown`,
`time`,
`status`,
`file`
)VALUES(
'".$zc_r['id']."',
'".$zc_pr['id']."',
'".$name."',
'".$about."',
'".$user['id']."',
'".$rating."',
'0',
'".time()."',
'".time()."',
'1',
'".$fn."'
)");
$fid = mysql_insert_id();
mysql_query("INSERT INTO `op`(
`who`,
`ho`,
`text`,
`time`,
`read`
)VALUES(
'".$zc_r['moder']."',
'".$user['id']."',
'загрузил файл в [url=/zc/moder]Загруз-Центр[/url]!',
'".time()."',
'0'
)");
echo '<div class="okmenu">Файл успешно выставлен на модерацию.</div>';
}else{
echo '<div class="rega">';
foreach($err as $err_info){
echo $err_info.'<br>';
}
echo '</div>';
}
}
echo '<div class="list1">
<form action="/zc/up'.$id.'" method="post" enctype="multipart/form-data">
Название:<br><input name="name"/><br>
Описание:<br><textarea name="about" style="width:98%;" rows="3"></textarea><br>
Рейтинг для скачивания файла: <input name="rating" size="2"/><br>
Файл:<br><input type="file" name="filename"/><br>
<input type="submit" value="Загрузить" name="submit"/>
</form></div>';
break;
case 'f':
$id = TextGuard($id);
$zc_f = mysql_fetch_array(mysql_query('select * from `zc_f` where `id` = '.$id.' and `status` = "0"'));
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$zc_f['pr'].''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_f['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0 or $zc_f == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | <a href="/zc/r'.$zc_r['id'].'" style="color:#ffffff;">'.$zc_r['name'].'</a> | '.$zc_pr['name'].'</div>';
if($zc_r['moder'] == $user['id']){
if(isset($_GET['del'])){
unlink('files/'.$zc_f['file'].'');
mysql_query("DELETE FROM `zc_f` WHERE `id`='".$id."'");
header('Location: /zc/pr'.$zc_pr['id'].''); exit;
}
echo '<div class="list1"><small><a href="/zc/f'.$id.'?del">Удалить</a> | <a href="/zc/fe'.$id.'">Изменить</a></small></div>';
}
echo '<div class="lst"><font color="red"><b>'.$zc_f['name'].'</b></font><br>
Описание: '.smiles(bbcode($zc_f['about'])).'<br>
Загрузил: '.ustatus($zc_f['author']).' <a href="/us'.$zc_f['author'].'">'.uname($zc_f['author']).'</a> '.uaccess($zc_f['author']).'<br>
Скачиваний: '.$zc_f['downs'].'<br>
Последнее скачивание: '.times($zc_f['ldown']).'<br>
Добавлен: '.times($zc_f['time']).'<br>';
if($zc_f['rating'] > 0) echo 'Для скачки необходимо рейтинга: <font color="green">'.$zc_f['rating'].'</font>';
echo '</div>';
if($zc_f['rating'] <= $user['rating']){
echo '<div class="lst">
<a href="/zc/upf'.$id.'">Скачать '.$zc_f['file'].'</a> ('.round(filesize('files/'.$zc_f['file'].'')/1024).' кб)
</div><div class="lst">
Ссылка на файл: <input type="text" value="http://wm-pro.ru/zc/f'.$id.'"/>
</div>
<div class="lst">
Экспорт: <input type="text" value="http://wm-pro.ru/modules/zc/files/'.$zc_f['file'].'"/>
</div>';
}
if(isset($_GET['v'])){
$go = TextGuard($_GET['go']);
$zc_frating = mysql_fetch_array(mysql_query('select * from `zc_frating` where `f` = '.$id.' and `who` = "'.$user['id'].'"'));
if(empty($go) or $go != "p" && $go != "m" or $zc_frating != 0 or $user['id'] == $zc_f['author']){
header('Location: /zc/f'.$id.''); exit;
}
if($go == "p") $status = 1; elseif($go == "m") $status = 2;
mysql_query("INSERT INTO `zc_frating`(
`f`,
`who`,
`status`,
`time`
)VALUES(
'".$id."',
'".$user['id']."',
'".$status."',
'".time()."'
)");
$zc_f_author = mysql_fetch_array(mysql_query('select * from `user` where `id` = "'.$zc_f['author'].'"'));
if($zc_f_author != 0){
if($status == 1){
mysql_query("UPDATE `user` SET `rating`='".($zc_f_author['rating']+0.05)."' WHERE `id`='".$zc_f_author['id']."' limit 1");
mysql_query("INSERT INTO `op`(
`who`,
`ho`,
`text`,
`time`,
`read`
)VALUES(
'".$zc_f_author['id']."',
'".$user['id']."',
'оценил [b]положительно[/b] ваш [url=/zc/f".$id."]файл[/url]!',
'".time()."',
'0'
)");
}elseif($status == 2){
mysql_query("UPDATE `user` SET `rating`='".($zc_f_author['rating']-0.05)."' WHERE `id`='".$zc_f_author['id']."' limit 1");
mysql_query("INSERT INTO `op`(
`who`,
`ho`,
`text`,
`time`,
`read`
)VALUES(
'".$zc_f_author['id']."',
'".$user['id']."',
'оценил [b]отрицательно[/b] ваш [url=/zc/f".$id."]файл[/url]!',
'".time()."',
'0'
)");
}
}
}
echo '<div class="list1">
Рейтинг: ';
$all = mysql_result(mysql_query('select count(`id`) from `zc_frating` where `f`= "'.$id.'" and `status` = "1"'),0)-mysql_result(mysql_query('select count(`id`) from `zc_frating` where `f`= "'.$id.'" and`status` = "2"'),0);
$zc_frating = mysql_fetch_array(mysql_query('select * from `zc_frating` where `f` = '.$id.' and `who` = "'.$user['id'].'"'));
if($zc_frating == 0 && $user['id'] != $zc_f['author']) echo '<a href="/zc/f'.$id.'?v&go=p">+</a> | <a href="/zc/f'.$id.'?v&go=m">-</a>';
echo ' ';
if($all < 0) echo '<font color="red"><big><b>'.$all.'</b></big></font>';
elseif($all == 0) echo '<font color="red"><big><b>0</b></big></font>';
elseif($all > 0) echo '<font color="green"><big><b>'.$all.'</b></big></font>';
echo ' (<font color="green">'.mysql_result(mysql_query('select count(`id`) from `zc_frating` where `f`= "'.$id.'" and `status` = "1"'),0).'</font>/<font color="red">'.mysql_result(mysql_query('select count(`id`) from `zc_frating` where `f`= "'.$id.'" and`status` = "2"'),0).'</font>)<br>
<a href="/zc/fcom'.$id.'">Комментарии</a> ('.mysql_result(mysql_query('select count(`id`) from `zc_fcom` where `f` = "'.$id.'"'),0).')
</div>';
break;
case 'upf':
$id = TextGuard($id);
$zc_f = mysql_fetch_array(mysql_query('select * from `zc_f` where `id` = '.$id.' and `status` = "0"'));
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$zc_f['pr'].''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_f['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0 or $zc_f == 0){
header('Location: /zc'); exit;
}
if($zc_f['rating'] > $user['rating']){
header('Location: /zc/f'.$id.''); exit;
}
mysql_query("UPDATE `zc_f` SET `downs`='".($zc_f['downs']+1)."',`ldown`='".time()."' WHERE `id` = '".$id."' limit 1");
header('Location: /modules/zc/files/'.$zc_f['file'].'');
break;
case 'moder':
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `moder` = '.$user['id'].''));
if($zc_r == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | Панель управления</div>';
if(isset($_GET['ok0'])){
$id = TextGuard($id);
$zc_f = mysql_fetch_array(mysql_query('select * from `zc_f` where `id` = "'.$id.'"'));
if(empty($id) or $zc_f == 0){
header('Location: /zc/moder'); exit;
}
mysql_query("UPDATE `zc_f` SET `status`='0' WHERE `id`='".$id."' limit 1");
mysql_query("INSERT INTO `op`(
`who`,
`ho`,
`text`,
`time`,
`read`
)VALUES(
'".$zc_f['author']."',
'".$user['id']."',
'добавил ваш [url=/zc/f".$id."]файл[/url] в Загруз-Центр!',
'".time()."',
'0'
)");
header('Location: /zc/f'.$id.''); exit;
}
if(isset($_GET['ok1'])){
$id = TextGuard($id);
$zc_f = mysql_fetch_array(mysql_query('select * from `zc_f` where `id` = "'.$id.'"'));
if(empty($id) or $zc_f == 0){
header('Location: /zc/moder'); exit;
}
unlink('files/'.$zc_f['file'].'');
mysql_query("DELETE FROM `zc_f` WHERE `id`='".$id."'");
header('Location: /zc/moder'); exit;
}
$cop = 10;
$ca = mysql_result(mysql_query("SELECT COUNT(*) FROM `zc_f` where `r` = '".$zc_r['id']."' and `status` = '1'"),0);
$cp = ceil($ca/$cop);
if(isset($_GET['p']) && is_numeric($_GET['p'])){
$p = $_GET['p'];
if($_GET['p']>$cp) $p = $cp;
if($_GET['p']<1)$p = 1;
}else{
$p = 1;
}
$start = $p*$cop-$cop;
$zc_f = mysql_query("SELECT * FROM `zc_f` where `r` = '".$zc_r['id']."' and `status` = '1' ORDER BY `id` DESC LIMIT $start,$cop");
while($zc_f2 = mysql_fetch_assoc($zc_f)){
echo '<div class="list1">'.$zc_f2['name'].' (<a href="/modules/zc/files/'.$zc_f2['file'].'">'.$zc_f2['file'].'</a>) ('.round(filesize('files/'.$zc_f2['file'].'')/1024).' кб)<br>
Описание: '.smiles(bbcode($zc_f2['about'])).'<br>
Загрузил: '.ustatus($zc_f2['author']).' <a href="/us'.$zc_f2['author'].'">'.uname($zc_f2['author']).'</a> '.uaccess($zc_f2['author']).'</div><div class="lst">
<a href="/zc/moder?ok0&id='.$zc_f2['id'].'"><input type="submit" value="принять"/></a> <a href="/zc/moder?ok1&id='.$zc_f2['id'].'"><input type="submit" value="отклонить"/></a></div>';
}
echo '</div><div class="list1">Стр. ';
if($p-2>0) echo '<a href="/zc/moder?p=1"><<</a> ';
if($p-1>0) echo '<a href="/zc/moder?p='.($p-1).'"><</a> ';
if($p-3>0) echo '<a href="/zc/moder?p'.($p-3).'">'.($p-3).'</a> | ';
if($p-2>0) echo '<a href="/zc/moder?p='.($p-2).'">'.($p-2).'</a> | ';
if($p-1>0) echo '<a href="/zc/moder?p='.($p-1).'">'.($p-1).'</a> | ';
echo '<b>'.$p.'</b>';
if($p+1<=$cp) echo ' | <a href="/zc/moder?p='.($p+1).'">'.($p+1).'</a>';
if($p+2<=$cp) echo ' | <a href="/zc/moder?p='.($p+2).'">'.($p+2).'</a>';
if($p+3<=$cp) echo ' | <a href="/zc/moder?p='.($p+3).'">'.($p+3).'</a>';
if($p+1<=$cp) echo ' <a href="/zc/moder?p='.($p+1).'">></a>';
if($p+2<=$cp) echo ' <a href="/zc/moder?p='.ceil($ca/$cop).'">>></a>';
echo '</div>';
break;
case 'nr':
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | Новый раздел</div>';
if(isset($_POST['submit'])){
$name = TextGuard($_POST['name']);
if(empty($name)) $err[] = 'Вы не ввели название раздела...';
$about = TextGuard($_POST['about']);
if(empty($about)) $err[] = 'Вы не ввели описание раздела...';
$moder = TextGuard($_POST['moder']);
if(empty($moder) or !is_numeric($moder)) $err[] = 'Вы не выбрали модератора раздела...';
$moder_user = mysql_fetch_array(mysql_query('select * from `user` where `id` = "'.$moder.'"'));
if($moder_user == 0) $err[] = 'Такого пользователя не существует...';
if(!$err){
mysql_query("INSERT INTO `zc_r`(
`name`,
`about`,
`moder`
)VALUES(
'".$name."',
'".$about."',
'".$moder."'
)");
header('Location: /zc'); exit;
}else{
echo '<div class="rega">';
foreach($err as $err_info){
echo $err_info.'<br>';
}
echo '</div>';
}
}
echo '<div class="list1">
<form action="?m=nr" method="post">
Название:<br><input name="name"/><br>
Описание:<br><textarea name="about" style="width:98%;" rows="3"></textarea><br>
Модератор:<br><input name="moder"/></div><div class="lst">
<input type="submit" value="Добавить" name="submit"/>
</form></div>';
break;
case 'red':
$id = TextGuard($id);
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$id.''));
if(empty($id) or !is_numeric($id) or $zc_r == 0){
header('Location: /zc'); exit;
}
echo '<div class="linkmenu"><a href="/zc">Загруз-Центр</a> | '.$zc_r['name'].'</div>';
if(isset($_POST['submit'])){
$text = TextGuard($_POST['text']);
if(empty($text)) $err[] = 'Название осталось пустым...';
$about = TextGuard($_POST['about']);
if(empty($about)) $err[] = 'Описание осталось пустым...';
$moder = TextGuard($_POST['moder']);
if(empty($moder) or !is_numeric($moder)) $err[] = 'Вы не выбрали модератора раздела...';
$moder_user = mysql_fetch_array(mysql_query('select * from `user` where `id` = "'.$moder.'"'));
if($moder_user == 0) $err[] = 'Такого пользователя не существует...';
if(!$err){
mysql_query("UPDATE `zc_r` SET `name`='".$text."',`moder`='".$moder."',`about`='".$about."' WHERE `id` = '".$id."' limit 1");
header('Location: /zc'); exit;
}else{
echo '<div class="errmenu">';
foreach($err as $err_info){
echo $err_info.'<br>';
}
echo '</div>';
}
}
echo '<div class="submenu">
<form action="" method="post">
Название:<br><input name="text" value="'.$zc_r['name'].'"/><br>
Описание:<br><textarea name="about" style="width:98%;" rows="3">'.$zc_r['about'].'</textarea><br>
Модератор ('.ustatus($zc_r['moder']).' <a href="/us'.$zc_r['moder'].'">'.uname($zc_r['moder']).'</a> '.uaccess($zc_r['moder']).') <input name="moder" value="'.$zc_r['moder'].'" size="2"/><br>
<input type="submit" value="Сохранить" name="submit"/>
</form></div>';
break;
case 'rdel':
$id = TextGuard($id);
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$id.''));
if(empty($id) or !is_numeric($id) or $zc_r == 0){
header('Location: /zc'); exit;
}
$zc_pr = mysql_query('select * from `forum_pr` where `r` = "'.$id.'"');
while($zc_pr2 = mysql_fetch_array($zc_pr)){
mysql_query("DELETE FROM `zc_pr` WHERE `id` = '".$zc_pr2['id']."'");
}
$zc_f = mysql_query('select * from `forum_f` where `r` = "'.$id.'"');
while($zc_f2 = mysql_fetch_array($zc_f)){
unlink('files/'.$zc_f2['file'].'');
mysql_query("DELETE FROM `zc_f` WHERE `id` = '".$zc_f2['id']."'");
}
mysql_query("DELETE FROM `zc_r` WHERE `id` = '$id'");
header('Location: /zc/'); exit;
break;
case 'npr':
$id = TextGuard($id);
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$id.''));
if(empty($id) or !is_numeric($id) or $zc_r == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | '.$zc_r['name'].'</div>';
if(isset($_POST['submit'])){
$name = TextGuard($_POST['name']);
if(empty($name)) $err[] = 'Вы не ввели название подраздела...';
if(!$err){
mysql_query("INSERT INTO `zc_pr`(
`r`,
`name`
)VALUES(
'".$id."',
'".$name."'
)");
header('Location: /zc/r'.$id.''); exit;
}else{
echo '<div class="rega">';
foreach($err as $err_info){
echo $err_info.'<br>';
}
echo '</div>';
}
}
echo '<div class="list1">
<form action="" method="post">
Название:<br><input name="name"/><br>
<input type="submit" value="Добавить" name="submit"/>
</form></div>';
break;
case 'pred':
$id = TextGuard($id);
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$id.''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_pr['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | <a href="/zc/r'.$zc_r['id'].'" style="color:#ffffff;">'.$zc_r['name'].'</a> | '.$zc_pr['name'].'</div>';
if(isset($_POST['submit'])){
$text = TextGuard($_POST['text']);
if(empty($text)) $err[] = 'Название осталось пустым...';
if(!$err){
mysql_query("UPDATE `zc_pr` SET `name`='".$text."' WHERE `id` = '".$id."' limit 1");
header('Location: /zc'); exit;
}else{
echo '<div class="rega">';
foreach($err as $err_info){
echo $err_info.'<br>';
}
echo '</div>';
}
}
echo '<div class="list1">
<form action="" method="post">
Название:<br><input name="text" value="'.$zc_pr['name'].'"/><br>
<input type="submit" value="Сохранить" name="submit"/>
</form></div>';
break;
case 'prdel':
$id = TextGuard($id);
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$id.''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_pr['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0){
header('Location: /zc'); exit;
}
$zc_f = mysql_query('select * from `forum_f` where `pr` = "'.$id.'"');
while($zc_f2 = mysql_fetch_array($zc_f)){
unlink('files/'.$zc_f2['file'].'');
mysql_query("DELETE FROM `zc_f` WHERE `id` = '".$zc_f2['id']."'");
}
mysql_query("DELETE FROM `zc_pr` WHERE `id` = '$id'");
header('Location: /zc/r'.$zc_pr['r'].''); exit;
break;
case 'fcom':
$id = TextGuard($id);
$zc_f = mysql_fetch_array(mysql_query('select * from `zc_f` where `id` = '.$id.' and `status` = "0"'));
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$zc_f['pr'].''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_f['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0 or $zc_f == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc" style="color:#ffffff;">Загруз-Центр</a> | <a href="/zc/r'.$zc_r['id'].'" style="color:#ffffff;">'.$zc_r['name'].'</a> | <a href="/zc/pr'.$zc_pr['id'].'" style="color:#ffffff;">'.$zc_pr['name'].'</a></div>
<div class="list1">
Файл: <a href="/zc/f'.$id.'">'.$zc_f['name'].'</a>
</div><div class="menu2">
Комментарии:
</div>';
echo '<div class="list1"><form action="" method="post">
Сообщение:<br><textarea name="text" style="width:98%;" rows="3"></textarea><br>
<input type="submit" name="submit" value="Написать"/>
</form></div>';
if(isset($_POST['submit'])){
$text = TextGuard($text);
if(empty($text)) $err[] = 'Сообщение осталось пустым...';
if(!$err){
mysql_query("INSERT INTO `zc_fcom`(
`f`,
`who`,
`text`,
`time`
)VALUES(
'".$id."',
'".$user['id']."',
'".$text."',
'".time()."'
)");
mysql_query("INSERT INTO `op`(
`who`,
`ho`,
`text`,
`time`,
`read`
)VALUES(
'".$zc_f['author']."',
'".$user['id']."',
'написал [url=/zc/fcom".$id."]комментарий[/url] к вашему [url=/zc/f".$id."]файлу[/url]!',
'".time()."',
'0'
)");
header('Location: /zc/fcom'.$id.''); exit;
}else{
echo '<div class="rega">';
foreach($err as $err_info){
echo $err_info.'<br>';
}
echo '</div>';
}
}
$cop = 10;
$ca = mysql_result(mysql_query("SELECT COUNT(*) FROM `zc_fcom` where `f` = '".$id."'"),0);
$cp = ceil($ca/$cop);
if(isset($_GET['p']) && is_numeric($_GET['p']) && $ca != 0){
$p = $_GET['p'];
if($_GET['p']>$cp) $p = $cp;
if($_GET['p']<1)$p = 1;
}else{
$p = 1;
}
$start = $p*$cop-$cop;
if($ca != 0){
$zc_fcom = mysql_query("SELECT * FROM `zc_fcom` where `f` = '".$id."' ORDER BY `id` DESC LIMIT $start,$cop");
while($zc_fcom2 = mysql_fetch_assoc($zc_fcom)){
echo '<div class="raz">'.ustatus($zc_fcom2['who']).' <a href="/us'.$zc_fcom2['who'].'">'.uname($zc_fcom2['who']).'</a> '.uaccess($zc_fcom2['who']).' ('.times($zc_fcom2['time']).')';
if($user['status'] >= 1) echo ' [<a href="/zc/fcom'.$id.'?p='.$p.'&dp&pid='.$zc_fcom2['id'].'">уд</a>]';
echo '<br>'.smiles(bbcode($zc_fcom2['text'])).'</div>';
}}
if(isset($_GET['dp']) && $user['status'] >= 1){
$pid = TextGuard($_GET['pid']);
$posts = mysql_fetch_array(mysql_query('select * from `zc_fcom` where `id` = "'.$pid.'" limit 1'));
if($posts == 0 or empty($pid) or !is_numeric($pid)){
header('Location: /zc/fcom'.$id.'?p='.$p.''); exit;
}
mysql_query("DELETE FROM `zc_fcom` WHERE `id`='".$pid."'");
header('Location: /zc/fcom'.$id.'?p='.$p.''); exit;
}
echo '</div><div class="navg">Стр. ';
if($p-2>0) echo '<a href="/zc/fcom'.$id.'?p=1"><<</a> ';
if($p-1>0) echo '<a href="/zc/fcom'.$id.'?p='.($p-1).'"><</a> ';
if($p-3>0) echo '<a href="/zc/fcom'.$id.'?p'.($p-3).'">'.($p-3).'</a> | ';
if($p-2>0) echo '<a href="/zc/fcom'.$id.'?p='.($p-2).'">'.($p-2).'</a> | ';
if($p-1>0) echo '<a href="/zc/fcom'.$id.'?p='.($p-1).'">'.($p-1).'</a> | ';
echo '<b>'.$p.'</b>';
if($p+1<=$cp) echo ' | <a href="/zc/fcom'.$id.'?p='.($p+1).'">'.($p+1).'</a>';
if($p+2<=$cp) echo ' | <a href="/zc/fcom'.$id.'?p='.($p+2).'">'.($p+2).'</a>';
if($p+3<=$cp) echo ' | <a href="/zc/fcom'.$id.'?p='.($p+3).'">'.($p+3).'</a>';
if($p+1<=$cp) echo ' <a href="/zc/fcom'.$id.'?p='.($p+1).'">></a>';
if($p+2<=$cp) echo ' <a href="/zc/fcom'.$id.'?p='.ceil($ca/$cop).'">>></a>';
echo '</div>';
break;
case 'fe':
$id = TextGuard($id);
$zc_f = mysql_fetch_array(mysql_query('select * from `zc_f` where `id` = '.$id.' and `status` = "0"'));
$zc_pr = mysql_fetch_array(mysql_query('select * from `zc_pr` where `id` = '.$zc_f['pr'].''));
$zc_r = mysql_fetch_array(mysql_query('select * from `zc_r` where `id` = '.$zc_f['r'].''));
if(empty($id) or !is_numeric($id) or $zc_pr == 0 or $zc_r == 0 or $zc_f == 0){
header('Location: /zc'); exit;
}
echo '<div class="menu"><a href="/zc">Загруз-Центр</a> | <a href="/zc/r'.$zc_r['id'].'">'.$zc_r['name'].'</a> | <a href="/zc/pr'.$zc_pr['id'].'">'.$zc_pr['name'].'</a> | <a href="/zc/f'.$id.'">'.$zc_f['name'].'</a></div>';
break;
}
echo '<div class="navg"><img src="/images/homepage.gif"/> <a href="/">На главную</a></div>';
include '../../system/footer.php';
?>