Файл: system/modules/distinguish.php
Строк: 79
<?php
/*
Appointment: Выделить человека на фото
File: distinguish.php
*/
if(!defined('MOZG'))
die('Hacking attempt!');
NoAjaxQuery();
if($logged){
$act = $_GET['act'];
$user_id = $user_info['user_id'];
switch($act){
//################### Отмечаем человека на фото ###################//
case "mark":
$i_left = intval($_POST['i_left']); if($i_left < 0) $i_left = 0;
$i_top = intval($_POST['i_top']); if($i_top < 0) $i_top = 0;
$i_width = intval($_POST['i_width']); if($i_width < 0) $i_width = 0;
$i_height = intval($_POST['i_height']); if($i_height < 0) $i_height = 0;
$photo_id = intval($_POST['photo_id']);
$muser_id = intval($_POST['user_id']);
$mphoto_name = ajax_utf8(strip_data(textFilter($_POST['user_name'], false, true)));
$msettings_pos = $i_left.", ".$i_top.", ".$i_width.", ".$i_height;
if($user_id == $muser_id) $approve = 1;
else $approve = 0;
if($mphoto_name AND $muser_id == 0)
$row_no = $db->super_query("SELECT COUNT(*) AS cnt FROM `".PREFIX."_photos_mark` WHERE mphoto_id = '".$photo_id."' AND mphoto_name = '".$mphoto_name."'");
else
$row = $db->super_query("SELECT COUNT(*) AS cnt FROM `".PREFIX."_photos_mark` WHERE muser_id = '".$muser_id."' AND mphoto_id = '".$photo_id."'");
if($row['cnt'])
$db->query("UPDATE `".PREFIX."_photos_mark` SET msettings_pos = '".$msettings_pos."' WHERE muser_id = '".$muser_id."' AND mphoto_id = '".$photo_id."'");
elseif($row_no['cnt'])
$db->query("UPDATE `".PREFIX."_photos_mark` SET msettings_pos = '".$msettings_pos."' WHERE mphoto_id = '".$photo_id."' AND mphoto_name = '".$mphoto_name."'");
else
if($_POST['user_ok'] == 'yes'){
$db->query("INSERT INTO `".PREFIX."_photos_mark` SET muser_id = '".$muser_id."', mphoto_id = '".$photo_id."', mdate = '".$server_time."', msettings_pos = '".$msettings_pos."', mapprove = '".$approve."', mmark_user_id = '".$user_id."'");
if($user_id != $muser_id)
$db->query("UPDATE `".PREFIX."_users` SET user_new_mark_photos = user_new_mark_photos+1 WHERE user_id = '".$muser_id."'");
} else
$db->query("INSERT INTO `".PREFIX."_photos_mark` SET muser_id = '".rand(0, 100000)."', mphoto_id = '".$photo_id."', mdate = '".$server_time."', msettings_pos = '".$msettings_pos."', mphoto_name = '".$mphoto_name."', mmark_user_id = '".$user_id."', mapprove = 1");
mozg_clear_cache_file('photos_mark/p'.$photo_id);
break;
//################### Удаление отметки ###################//
case "mark_del":
$photo_id = intval($_POST['photo_id']);
$muser_id = intval($_POST['user_id']);
$mphoto_name = ajax_utf8(strip_data(textFilter($_POST['user_name'], false, true)));
$row = $db->super_query("SELECT user_id FROM `".PREFIX."_photos` WHERE id = '".$photo_id."'");
if($mphoto_name AND $muser_id == 0)
$row_mark = $db->super_query("SELECT mmark_user_id FROM `".PREFIX."_photos_mark` WHERE mphoto_id = '".$photo_id."' AND mphoto_name = '".$mphoto_name."'");
else
$row_mark = $db->super_query("SELECT mmark_user_id, mapprove FROM `".PREFIX."_photos_mark` WHERE mphoto_id = '".$photo_id."' AND muser_id = '".$muser_id."'");
if($row['user_id'] == $user_id OR $user_id == $muser_id OR $user_id == $row_mark['mmark_user_id']){
if($mphoto_name AND $muser_id == 0)
$db->query("DELETE FROM `".PREFIX."_photos_mark` WHERE mphoto_id = '".$photo_id."' AND mphoto_name = '".$mphoto_name."'");
else {
$db->query("DELETE FROM `".PREFIX."_photos_mark` WHERE mphoto_id = '".$photo_id."' AND muser_id = '".$muser_id."' AND mphoto_name = ''");
if(!$row_mark['mapprove'])
$db->query("UPDATE `".PREFIX."_users` SET user_new_mark_photos = user_new_mark_photos-1 WHERE user_id = '".$muser_id."'");
}
mozg_clear_cache_file('photos_mark/p'.$photo_id);
}
break;
//################### Потверждение отметки ###################//
case "mark_ok":
$photo_id = intval($_POST['photo_id']);
$row = $db->super_query("SELECT mapprove FROM `".PREFIX."_photos_mark` WHERE mphoto_id = '".$photo_id."' AND muser_id = '".$user_id."'");
if($row AND !$row['mapprove']){
$db->query("UPDATE `".PREFIX."_photos_mark` SET mapprove = '1' WHERE mphoto_id = '".$photo_id."' AND muser_id = '".$user_id."'");
$db->query("UPDATE `".PREFIX."_users` SET user_new_mark_photos = user_new_mark_photos-1 WHERE user_id = '".$user_id."'");
mozg_clear_cache_file('photos_mark/p'.$photo_id);
}
break;
//################### Загрузка 110 друзей из списка ###################//
case "load_friends":
$photo_id = intval($_POST['photo_id']);
$all_limit = 110;
if($_POST['page'] == 2) $limit = $all_limit.", ".($all_limit*2);
else $limit = "0, ".$all_limit;
$sql_ = $db->super_query("SELECT SQL_CALC_FOUND_ROWS tb1.friend_id, tb2.user_search_pref FROM `".PREFIX."_friends` tb1, `".PREFIX."_users` tb2 WHERE tb1.user_id = '".$user_id."' AND tb1.friend_id = tb2.user_id AND tb1.subscriptions = 0 ORDER by `user_search_pref` ASC LIMIT ".$limit, 1);
$myRow = $db->super_query("SELECT user_search_pref FROM `".PREFIX."_users` WHERE user_id = '".$user_id."'");
if($sql_){
$cnt = 0;
foreach($sql_ as $row){
$friend .= '<tr id="user_'.$row['friend_id'].'" class="echoUsersList"><td width="170"><div onClick="Distinguish.SelectUser('.$row['friend_id'].', ''.$row['user_search_pref'].'', '.$photo_id.')">'.$row['user_search_pref'].'</div></td></tr>';
$cnt++;
}
if($cnt == $all_limit AND !$_POST['page'])
$added_script = "setTimeout('Distinguish.FriendPage(2, ".$photo_id."')', 2500)";
}
echo <<<HTML
<script type="text/javascript" src="/templates/{$config['temp']}/js/fave.filter.js"></script>
<script type="text/javascript">
{$added_script}
</script>
<table class="food_planner" id="fave_users">
<tr id="user_{$user_id}"><td width="170"><div onClick="Distinguish.SelectUser({$user_id}, '{$myRow['user_search_pref']}', {$photo_id})">Я</div></td></tr>
{$friend}
</table>
HTML;
break;
}
$tpl->clear();
$db->free();
} else
echo 'no_log';
die();
?>