Файл: www/chat.php
Строк: 50
<?php
include 'inc/mysql.php';
include 'inc/check.php';
include 'inc/functions.php';
top();
include 'inc/account.php';
include 'inc/interface.php';
if(isset($_SESSION['auth']) && $_SESSION['auth']==1){
echo '
Общий чат
<br>
<br>
<a href="chat.php?">Обновить</a> | <a href="/smile.php">Смайлы</a>
<br>
';
if($_GET['go']=='delete' && $account['status']=="moder"){
if(isset($_GET['id'])){
$del = $_GET['id'];
}else{
$del = "";
}
if($del!==""){
mysql_query("DELETE FROM `chat` WHERE `id` = '$del'");
mysql_query("OPTIMIZE TABLE `chat`");
header ("Location: chat.php"); exit;
}else{
header ("Location: chat.php"); exit;
}}
if(isset($_POST['msg'])){
$_POST['msg'] = trim($_POST['msg']);
if(!empty($_POST['msg'])){
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `chat` WHERE `account`='".$account['id']."'"),0)>0 AND 5>(time()-mysql_result(mysql_query("SELECT `time` FROM `chat` WHERE `account`='".$account['id']."' ORDER BY `id` DESC LIMIT 1"),0)))$err[]='Нельзя писать так часто!';
if(strlen($_POST['msg'])>1024) $err[]='Слишком длинное сообщение!';
if(strlen($_POST['msg'])<2) $err[]='Слишком короткое сообщение!';
}else{
$err[]='Пустое сообщение!';
}
if(!$err){
$msg = mysql_real_escape_string($_POST['msg']);
$msg = $msg;
mysql_query("INSERT INTO `chat`(`account`,`msg`,`time`) VALUES('".$account['id']."','$msg','".time()."')");
header("Location: chat.php"); exit;
}else{
foreach($err as $value){
echo '
<font color="red">'.$value.'</font>
<div class="line"></div>
';
}
}
}
$say=$say;
$say = str_replace("$say","$say, ",$say);
echo '
<form method="post" action="chat.php?">
Сообщение [2-1024]:
<br>
<textarea name="msg" class="text" rows="2" cols="30">'.$say.'</textarea><br>
<input type="submit" class="submit" value="Отправить">
</form>
<div class="line"></div>
';
$cop=10;
$ca=mysql_result(mysql_query("SELECT COUNT(*) FROM `chat`"),0);
$cp=ceil($ca/$cop);
if(isset($_GET['page']) && is_numeric($_GET['page'])){
$page = $_GET['page'];
if($_GET['page']>$cp) $page=$cp;
if($_GET['page']<1)$page=1;
}else{
$page=1;
}
$start=$page*$cop-$cop;
$q=mysql_query("SELECT * FROM `chat` ORDER BY `id` DESC LIMIT $start,$cop");
while ($result=mysql_fetch_assoc($q)){
$_user = mysql_fetch_assoc(mysql_query("SELECT * FROM `account` WHERE `id`='".$result['account']."'"));
if($account['status']=="moder"){
echo '<a href="?go=delete&id='.$result['id'].'">[x]</a> ';
}
if($_user['status']=="moder"){
echo '[<font color="#9b1518">М</font>] ';
echo '
<a href="?say='.$_user['name'].'">'.$_user['name'].'</a>: ';
echo "<font color='#9b1518'>".smiles(htmlspecialchars(stripslashes($result['msg'])))."</font><br />";
}else{
echo '
<a href="?say='.$_user['name'].'">'.$_user['name'].'</a>: ';
echo "<br>".smiles(htmlspecialchars(stripslashes($result['msg'])))."<br />";
}
}
echo '
<div class="line"></div>
Страницы
';
if($page-1>0){
echo '<a href="?page='.($page-1).'"><</a> ';
}
if($page-1>0){
echo '<a href="?page='.($page-1).'">'.($page-1).'</a> ';
}
echo '<b>'.$page.'</b>';
if($page+1<=$cp){
echo ' <a href="?page='.($page+1).'">'.($page+1).'</a>';
}
if($page+1<=$cp){
echo ' <a href="?page='.($page+1).'">></a>';
}
}else{
header("Location: /?"); exit;
}
down();
?>