Файл: test.zfarm.mobi/mystyleforum/linkindex.php
Строк: 306
<?
/////////////////////////
/*
Author MyStyle ZomBi.Biz
Год 2013 Права предоставлены автору Шехову Виталию Александровичу
http://vk.com/online_user
*/
/////////////////////////
what(0, 'forum');
$ku = $user;
$set['p_str'] = 10;
if(intval($_GET['forum'])!=NULL && mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_forum` WHERE `id` = '".intval($_GET['forum'])."'"),0)!=0)$forum=mysql_fetch_array(mysql_query("SELECT * FROM `mystyle_forum` WHERE `id` = '".intval($_GET['forum'])."'"));
if(isset($forum) && $forum['type']=='tema')
{
$fk=mysql_fetch_array(mysql_query("SELECT * FROM `mystyle_forum` WHERE `type` = 'komm' AND `mother` = '$forum[id]' ORDER BY `time` ASC LIMIT 1"));
$mother=mysql_fetch_array(mysql_query("SELECT * FROM `mystyle_forum` WHERE `id` = '$forum[mother]'"));
if($mother['locked']==1 && $ku['status']<=1)header("Location:?forum");
if(isset($_GET['edit']) && $ku['status']>1)
{
echo '<div class="event"><h1>Редактирование топика</h1></div>';
if($_GET['edit']=='ok')
{
$name=$_POST['name'];
$msg=$_POST['msg'];
if($name==NULL)
{
echo err_game("Слишком короткое название");
$err=1;
}
if($msg==NULL)
{
echo err_game("Слишком короткое сообщение");
$err=1;
}
if(!isset($err))
{
mysql_query("UPDATE `mystyle_forum` SET `name` = '".my_esc($name)."', `msg` = '".my_esc($msg)."' WHERE `id` = '$forum[id]'");
mysql_query("UPDATE `mystyle_forum` SET `msg` = '".my_esc($msg)."' WHERE `id` = '$fk[id]'");
header("Location:?forum=$forum[id]");
exit;
}
}
echo '<div class="content"><div class="block">';
echo "<form class="btn" action='?forum=$forum[id]&edit=ok' method='post'><ul><li><label><div>Заголовок:</div><div><input class="btnp" type='text' class='wide' value='".hsc($forum['name'])."' name='name'></div></label></li><li><label><div>Сообщение:</div><div><textarea class="btnp" rows='5' name='msg'>".hsc($forum['msg'])."</textarea></div></label></li><li><input type='submit' value='Сохранить'></li></ul></form></div>";
}
elseif(isset($_GET['lock']) && $ku['status']>1)
{
mysql_query("UPDATE `mystyle_forum` SET `locked` = '".($forum['locked']==1?"0":"1")."' WHERE `id` = '$forum[id]'");
header("Location:?forum=$forum[id]");
}
elseif(isset($_GET['pin']) && $ku['status']>1)
{
mysql_query("UPDATE `mystyle_forum` SET `pined` = '".($forum['pined']==1?"0":"1")."' WHERE `id` = '$forum[id]'");
header("Location:?forum=$forum[id]");
}
elseif(isset($_GET['del']) && $ku['status']>1)
{
if($_GET['del']=='ok')
{
mysql_query("delete from `mystyle_forum` where `mother` = '$forum[id]' and `type` = 'komm'");
mysql_query("delete from `mystyle_forum` where `id` = '$forum[id]' and `type` = 'tema'");
header("Location:?forum=$mother[id]");
}
else echo '<div class="btn"><h1>Подтверждение</h1></div><div class="content"><div class="block"><ul class="block"><li><span class="title">Вы уверены?</span></li><li class="pt"><img alt="" width="16" height="16" src="images/icons/tick.png"> <a href="?forum='.$forum['id'].'&del=ok"><span>
Да, подтверждаю</span></a></li><li><img alt="" width="16" height="16" src="images/icons/cross.png"> <a href="?forum='.$forum['id'].'"><span>
Нет, отказываюсь</span></a></li></ul></div>';
}
elseif(isset($_GET['del_komm']) && intval($_GET['del_komm'])!=NULL && mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_forum` WHERE `id` = '".intval($_GET['del_komm'])."' AND `type` = 'komm' AND `id` != '$fk[id]'"),0)!=0 && $ku['status']>1)
{
mysql_query("delete from `mystyle_forum` where `mother` = '$forum[id]' and `type` = 'komm' and `id` = '".intval($_GET['del_komm'])."'");
header("Location:?forum=$forum[id]");
}
else
{
echo "<div class='event'><h1><a class="btnp" href='?forum=$mother[id]'>".hsc($mother['name'])."</a> / ".hsc($forum['name'])."</h1></div>";
if(isset($_GET['otv']) && intval($_GET['otv'])!=NULL && mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_user` WHERE `id` = '".intval($_GET['otv'])."'"),0)!=0 && intval($_GET['otv'])!=$ku['id'])
{
$idq = intval($_REQUEST['idq']);
$sql = mysql_query("SELECT * FROM mystyle_user WHERE id = ".intval($_GET['otv'])."") or die(mysql_error());
$us = mysql_fetch_assoc($sql);
if(intval($_GET['otv'])) $komu = htmlspecialchars('' . $us['nick'] . ', ');
}
if(isset($_GET['add']) && $_GET['add']=='ok' && $forum['locked']==0)
{
$msg=$_POST['msg'];
if($msg==NULL)
{
echo err_game("Слишком короткое сообщение");
$err=1;
}
if(!isset($err))
{
mysql_query("INSERT INTO `mystyle_forum` SET `msg` = '".my_esc($msg)."', `id_user` = '$ku[id]', `type` = 'komm', `mother` = '$forum[id]', `time` = '$time'".(isset($otv)?", `otvet` = '$otv[id]'":null)."");
mysql_query("UPDATE `mystyle_forum` SET `time_obnov` = '$time' WHERE `id` = '$forum[id]'");
$page = $_GET['page'];
header("Location:?forum=$forum[id]&page=$page");
exit;
}
}
echo "<div class='content'><div class='block'>";
echo "<ul>";
$k_post = mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_forum` WHERE `type` = 'komm' AND `mother` = '$forum[id]'"),0);
if ($k_post==0)
{
echo "Список пуст...";
}
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
$q=mysql_query("SELECT * FROM `mystyle_forum` WHERE `type` = 'komm' AND `mother` = '$forum[id]' ORDER BY `time` ASC LIMIT $start, $set[p_str]");
while($post=mysql_fetch_array($q))
{
$ank=mysql_fetch_array(mysql_query("SELECT * FROM `mystyle_user` WHERE `id` = '$post[id_user]'"));
$anku=mysql_fetch_array(mysql_query("SELECT * FROM `mystyle_user` WHERE `id` = '$ank[id_user]'"));
echo "<li class="btn"><div><span class='small'><span>";
if($post['otvet']!=0 && mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_user` WHERE `id` = '$post[otvet]'"),0)!=0)
{
$otvet=mysql_fetch_array(mysql_query("SELECT * FROM `mystyle_user` WHERE `id` = '$post[otvet]'"));
$otvetu=mysql_fetch_array(mysql_query("SELECT * FROM `mystyle_user` WHERE `id` = '$otvet[id_user]'"));
}
echo "<a class='' href='?User&UserLinkProfile=$ank[id]'>".users($ank['id'])."</a></span> <span class='minor'><span>".vremja($post['time'])."</span></span></span>
<span class='title'><p>".(isset($otvet)?"".($ku['id']==$otvet['id']?"<span class='rare'>":null)."$otvetu[nick]".($ku['id']==$otvet['id']?"</span>":null).", ":null)."".mat(smile(br($post['msg'])))."</p></span></div><div class='small'>".($fk['id']!=$post['id']?"".($forum['locked']==0?"".($ank['id']!=$ku['id']?"<a class='minor' href='?forum=$forum[id]&otv=$ank[id]'>[ответить]</a>":null)."":null)."":null)."";
if($ku['status']>1 && $post['id']!=$fk['id'])echo " <a class='small minor' href='?forum=$forum[id]&del_komm=$post[id]'>[удалить]</a>";
echo "</div></li>";
}
/////////////////////////
if($forum['locked']==0)echo "<form class="btn" action='?forum=$forum[id]&add=ok&page=$page".(isset($otv)?"&otv=$otv[id]":null)."' method='post'><ul><li><label><div>Сообщение".(isset($otv)?" для $otvu[nick]":null)."</div><div><input class="btn" name='msg' type='text' value='$komu' rows='3'></div></label></li><li><input class="btn" type='submit' value='Написать'></li></ul></form>";
else echo "<div class='pt minor'>Топик закрыт.</div>";
///////////////////////
if ($k_page>1)str("?forum=$forum[id]&",$k_page,$page); // Вывод страниц
echo "</ul>";
echo "<ul class='pt'>";
if($ku['status']>1)echo "<li class="btn"><img alt='o' width='' height='16' src='images/icons/moderate.png'> <a href='?forum=$forum[id]".(!isset($_GET['moderate'])?"&moderate":null)."'>Управление</a></li>";
if(isset($_GET['moderate']) && $ku['status']>1)
{
echo "<li class="btn"><img alt='o' width='16' height='16' src='images/icons/forum_pin.png'> <a href='?forum=$forum[id]&pin'><span>".($forum['pined']==0?"При":"От")."крепить</span></a></li>";
echo "<li class="btn"><img alt='o' width='16' height='16' src='images/icons/forum_close.png'> <a href='?forum=$forum[id]&lock'><span>".($forum['locked']==0?"За":"От")."крыть</span></a></li>";
echo "<li class="btn"><img alt='o' width='16' height='16' src='images/icons/forum_move.png'> <a href='?forum=$forum[id]&moderate".(!isset($_GET['replace'])?"&replace":null)."'>Перенести</a><br></li>";
if(isset($_GET['replace']))
{
if($_GET['replace']=='ok' && mysql_result(mysql_query("SELECT COUNT(*) FROM `kolhoz_forum` WHERE `id` = '".intval($_POST['forum'])."' AND `type` = 'razdel'"),0)!=0)
{
mysql_query("UPDATE `mystyle_forum` SET `mother` = '".intval($_POST['forum'])."' WHERE `id` = '$forum[id]'");
header("Location:?forum=$forum[id]");
}
echo "<li class="btn">";
echo "<form class="btn" method='post' action='?forum=$forum[id]&moderate&replace=ok'><div>Перенос топика "<span>".hsc($forum['name'])."</span>"</div><label>Новый раздел<br>";
echo "<select class="btn" name='forum'>";
$q=mysql_query("SELECT * FROM `mystyle_forum` WHERE `id` != '$mother[id]' AND `type` = 'razdel'");
while($post=mysql_fetch_array($q))
{
echo "<option value='$post[id]'>".hsc($post['name'])."</option>";
}
echo "</label><br><input class="btn" type='submit' value='Перенести'></form></li>";
}
}
if($ku['status']>1)echo "<li class="btn"><img alt='o' width='16' height='16' src='images/icons/delete.png'> <a href='?forum=$forum[id]&del'>Удалить</a></li>";
if($ku['status']>1)echo "<li class="btn"><img alt='o' width='16' height='16' src='images/icons/forum_edit.png'> <a href='?forum=$forum[id]&edit'>Изменить</a></li>";
echo "</ul></div>";
}
}
elseif(isset($forum) && $forum['type']=='razdel' && ($forum['locked']==1 && $ku['status']>1 || $forum['locked']==0))
{
if(isset($_GET['add']) && $ku['level']>=1 && ($forum['admod']==1 && $ku['status']>1 || $forum['admod']==0))
{
echo "<div class="btn"><h1>Создание топика</h1></div>";
if($_GET['add']=='ok')
{
$name=$_POST['name'];
$msg=$_POST['msg'];
if($name==NULL)
{
echo err_game("Слишком короткое название");
$err=1;
}
if($msg==NULL)
{
echo err_game("Слишком короткое сообщение");
$err=1;
}
if(!isset($err))
{
mysql_query("INSERT INTO `mystyle_forum` SET `name` = '".my_esc($name)."', `msg` = '".my_esc($msg)."', `id_user` = '$ku[id]', `type` = 'tema', `mother` = '$forum[id]', `time` = '$time', `time_obnov` = '$time'");
$id=mysql_insert_id();
mysql_query("INSERT INTO `mystyle_forum` SET `msg` = '".my_esc($msg)."', `id_user` = '$ku[id]', `type` = 'komm', `mother` = '$id', `time` = '$time'");
header("Location:?forum=$id");
exit;
}
}
echo "<div class="content"><div class="btn">";
echo "<form class="btn" action='?forum=$forum[id]&add=ok' method='post'><ul><li><label><div>Заголовок:</div><div><input class="btn" type='text' class='wide' value='' name='name'></div></label></li><li><label><div>Сообщение:</div><div><textarea class="btn" class='wide' rows='5' name='msg'></textarea></div></label></li><li><input class="btn" type='submit' value='Написать'></li></ul></form></div>";
}
elseif(isset($_GET['edit']) && $ku['status']>1)
{
echo "<div class="btn"><h1>Редактирование раздела</h1></div>";
if($_GET['edit']=='ok')
{
$name=$_POST['name'];
if($name==NULL)
{
echo err_game("Слишком короткое название");
$err=1;
}
if(!isset($err))
{
if($_POST['admod']==1)$admod=1;else $admod=0;
if($_POST['locked']==1)$locked=1;else $locked=0;
mysql_query("UPDATE `mystyle_forum` SET `name` = '".my_esc($name)."', `admod` = '$admod', `locked` = '$locked' WHERE `id` = '$forum[id]'");
header("Location:?forum=$forum[id]");
exit;
}
}
echo '<div class="content"><div class="block">';
echo "<form class="btn" action='?forum=$forum[id]&edit=ok' method='post'><ul><li><label><div>Название:</div><div><input class="btn" type='text' class='wide' value='".hsc($forum['name'])."' name='name'></div></label></li>";
echo "<input class="btn" type='checkbox' name='admod' value='1'".($forum['admod']==1?" checked='checked'":null)."> <span>Создает топики только администрацыя</span><br/>";
echo "<input class="btn" type='checkbox' name='locked' value='1'".($forum['locked']==1?" checked='checked'":null)."> <span>Давать доступ только администрации</span><br/>";
echo "<li><input class="btn" type='submit' value='Сохранить'></li></ul></form></div>";
}
elseif(isset($_GET['del']) && $ku['status']>1)
{
if($_GET['del']=='ok')
{
$q=mysql_query("SELECT * FROM `mystyle_forum` WHERE `mother` = '$forum[id]' AND `type` = 'tema'");
while($post=mysql_fetch_array($q))
{
mysql_query("delete from `mystyle_forum` where `mother` = '$post[id]' and `type` = 'komm'");
mysql_query("delete from `mystyle_forum` where `id` = '$post[id]'");
}
$links = mysql_query("SELECT * FROM `mystyle_forum` WHERE `type` = 'razdel' AND `pos` > '$forum[pos]' ORDER BY `pos` ASC");
while ($p = mysql_fetch_array($links))
{
mysql_query("UPDATE `mystyle_forum` SET `pos` = '".($p['pos']-1)."' WHERE `id` = '$p[id]' LIMIT 1");
}
mysql_query("delete from `mystyle_forum` where `id` = '$forum[id]' and `type` = 'razdel'");
header("Location:?forum");
}
else echo '<div class="btn"><h1>Подтверждение</h1></div><div class="content"><div class="block"><ul class="block"><li><span class="title">Вы уверены?</span></li><li class="pt"><img alt="" width="16" height="16" src="images/icons/tick.png"> <a href="?forum='.$forum['id'].'&del=ok"><span>
Да, подтверждаю</span></a></li><li><img alt="" width="16" height="16" src="images/icons/cross.png"> <a href="?forum='.$forum['id'].'"><span>
Нет, отказываюсь</span></a></li></ul></div>';
}
else
{
echo "<div class="btn"><h1><a href='?forum'>Форум</a> / ".hsc($forum['name'])."</h1></div>";
echo '<div class="content"><div class="block"><ul>';
$k_post = mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_forum` WHERE `type` = 'tema' AND `mother` = '$forum[id]'"),0);
if ($k_post==0)
{
echo "Список пуст...";
}
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
$q=mysql_query("SELECT * FROM `mystyle_forum` WHERE `type` = 'tema' AND `mother` = '$forum[id]' ORDER BY `pined` DESC, `time_obnov` DESC LIMIT $start, $set[p_str]");
while($post=mysql_fetch_array($q))
{
echo "<li class="btn"><div>".($post['locked']==1?"<img width='16' height='16' src='images/icons/forum_topic_closed.png' alt='x' title='x'>":"<img width='16' height='16' src='images/icons/forum_topic.png' alt='*' title='*'>")." <a href='?forum=$post[id]'><span style='font-
weight:bold'>".hsc($post['name'])."</span></a></div><div class='small'></div></li>";
}
if ($k_page>1)str("?forum=$forum[id]&",$k_page,$page); // Вывод страниц
echo "</ul>";
echo "<ul class="btn">";
echo "<li></li>";
if($ku['level']>=1 && ($forum['admod']==1 && $ku['status']>1 || $forum['admod']==0))echo "<li><img width='16' height='16' src='images/icons/forum_topic_new.png' alt='*' title='*'> <a href='?forum=$forum[id]&add'>Создать топик</a></li>";
if($ku['status']>1)echo "<li><img alt='o' width='16' height='16' src='images/icons/delete.png'> <a href='?forum=$forum[id]&del'>Удалить</a></li>";
if($ku['status']>1)echo "<li><img alt='o' width='16' height='16' src='images/icons/forum_edit.png'> <a href='?forum=$forum[id]&edit'>Изменить название</a></li>";
echo "</ul></div>";
}
}
else
{
if(isset($_GET['add']) && $ku['status']>1)
{
echo '<div class="event"><h1>Создание раздела</h1></div>';
if($_GET['add']=='ok')
{
$name=$_POST['name'];
if($name==NULL)
{
echo err_game("Слишком короткое название");
$err=1;
}
if(!isset($err))
{
if($_POST['admod']==1)$admod=1;else $admod=0;
$pos=mysql_result(mysql_query("SELECT MAX(`pos`) FROM `mystyle_forum` WHERE `type` = 'razdel'"), 0)+1;
mysql_query("INSERT INTO `mystyle_forum` SET `name` = '".my_esc($name)."', `id_user` = '$ku[id]', `type` = 'razdel', `mother` = '0', `time` = '$time', `admod` = '$admod', `pos` = '$pos', `locked` = '".($_POST['locked']==1?"1":"0")."'");
header("Location:?forum");
exit;
}
}
echo '<div class="content"><div class="block">';
echo "<form action='?forum&add=ok' method='post'><ul><li><label><div>Название:</div><div><input class="btnp" type='text' value='' name='name'></div></label></li>";
echo "<input type='checkbox' name='admod' value='1'> <span>Создает топики только администрацыя</span><br/>";
echo "<input type='checkbox' name='locked' value='1'> <span>Давать доступ только администрации</span><br/>";
echo "<li><input type='submit' value='Создать'></li></ul></form></div>";
}
else
{
if (isset($_GET['up']) && $ku['status']>1)
{
$up=mysql_fetch_assoc(mysql_query("SELECT * FROM `mystyle_forum` WHERE `id` = '".intval($_GET['up'])."' AND `type` = 'razdel' LIMIT 1"));
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_forum` WHERE `pos` < '$up[pos]' AND `type` = 'razdel' LIMIT 1"),0)!=0)
{
mysql_query("UPDATE `mystyle_forum` SET `pos` = '".($up['pos'])."' WHERE `pos` = '".($up['pos']-1)."' AND `type` = 'razdel' LIMIT 1");
mysql_query("UPDATE `mystyle_forum` SET `pos` = '".($up['pos']-1)."' WHERE `id` = '".intval($_GET['up'])."' AND `type` = 'razdel' LIMIT 1");
}
}
elseif (isset($_GET['down']) && $ku['status']>1)
{
$down=mysql_fetch_assoc(mysql_query("SELECT * FROM `mystyle_forum` WHERE `id` = '".intval($_GET['down'])."' AND `type` = 'razdel' LIMIT 1"));
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_forum` WHERE `pos` > '$down[pos]' AND `type` = 'razdel' LIMIT 1"),0)!=0)
{
mysql_query("UPDATE `mystyle_forum` SET `pos` = '".($down['pos'])."' WHERE `pos` = '".($down['pos']+1)."' AND `type` = 'razdel' LIMIT 1");
mysql_query("UPDATE `mystyle_forum` SET `pos` = '".($down['pos']+1)."' WHERE `id` = '".intval($_GET['down'])."' AND `type` = 'razdel' LIMIT 1");
}
}
echo "<div class="btn"><h1>Форум</h1></div>";
echo '<div class="content"><div class="block"><ul>';
$q=mysql_query("SELECT * FROM `mystyle_forum` WHERE `type` = 'razdel' ORDER BY `pos` ASC");
while($post=mysql_fetch_array($q))
{
echo "<li class="btn"><img width='16' height='16' src='images/icons/forum.png' alt='*' title='*'> <a href='?forum=$post[id]'><span>".hsc($post['name'])."</span></a> (".mysql_result(mysql_query("SELECT COUNT(*) FROM `mystyle_forum` WHERE `type` = 'tema' AND `mother` = '$post[id]'"),0).")";
if(isset($_GET['moderate']))echo "<a href='?forum&moderate&up=$post[id]'><img width='16' height='16' src='images/icons/up.png' alt='o'></a> <a href='?forum&moderate&down=$post[id]'><img width='16' height='16' src='images/icons/down.png' alt='o'></a>";
echo "</li>";
}
echo "</ul>";
echo "<ul class="btn">";
if($ku['status']>1)echo "<li><img width='16' height='16' src='images/icons/moderate.png' alt='o'> <a href='?forum".(!isset($_GET['moderate'])?"&moderate":null)."'>Управление</a></li><li><img width='16' height='16' src='images/icons/forum_new.png' alt='*' title='*'> <a href='?forum&add'>Создать раздел</a></li>";
echo "</ul></div>";
}
}
/////////////////////////
/*
Author MyStyle ZomBi.Biz
Год 2013 Права предоставлены автору Шехову Виталию Александровичу
http://vk.com/online_user
*/
/////////////////////////
?>