Файл: modules/forum/act.php
Строк: 57
<?php
/**
* Licensed under The MIT License
* For full copyright and license information, please see the LICENSE.txt
* Redistributions of files must retain the above copyright notice.
*
* @copyright Copyright (c) 2013, Taras Chornyi, Sergiy Mazurenko, Ivan Kotliar
* @link http://perf-engine.net
* @package PerfEngine
* @license http://www.opensource.org/licenses/mit-license.php MIT License
*/
if(User::logged() && isset($_GET['id']) && $db->query("SELECT * FROM `forum_t` WHERE `id` = '". num($_GET['id']) ."'")->rowCount() == 1)
{
if((User::level()>=5 || User::Id() == $db->query("SELECT user_id FROM `forum_pt` WHERE `topic_id` = '". num($_GET['id'])."' ORDER BY time ASC LIMIT 1")->fetchColumn()) && $_GET['act'] == 'close')
{
$db->query("UPDATE `forum_t` SET `closed` = '1' WHERE `id` = '". num($_GET['id']) ."'");
redirect('/forum/topic/'.num($_GET['id']).'/?page=end');
}
elseif((User::level()>=5 || User::Id() == $db->query("SELECT user_id FROM `forum_pt` WHERE `topic_id` = '". num($_GET['id'])."' ORDER BY time ASC LIMIT 1")->fetchColumn()) && $_GET['act'] == 'open')
{
$db->query("UPDATE `forum_t` SET `closed` = '0' WHERE `id` = '". num($_GET['id']) ."'");
redirect('/forum/topic/'.num($_GET['id']).'/?page=end');
}
if(User::level()>=6 && $_GET['act'] == 'attach')
{
$db->query("UPDATE `forum_t` SET `attach` = '1' WHERE `id` = '". num($_GET['id']) ."'");
redirect('/forum/topic/'.num($_GET['id']).'/?page=end');
}
if(User::level()>=6 && $_GET['act'] == 'unpin')
{
$db->query("UPDATE `forum_t` SET `attach` = '0' WHERE `id` = '". num($_GET['id']) ."'");
redirect('/forum/topic/'.num($_GET['id']).'/?page=end');
}
///////////////// Vote //////////////////
if((User::level() == 3 || User::level()>=5 || User::Id() == $db->query("SELECT user_id FROM `forum_pt` WHERE `topic_id` = '". num($_GET['id'])."' ORDER BY time ASC LIMIT 1")->fetchColumn()) && $_GET['act'] == 'close_vote')
{
$db->query("UPDATE `forum_vote` SET `closed` = '1' WHERE `topic_id` = '". num($_GET['id']) ."'");
redirect('/forum/topic/'.num($_GET['id']).'/?page=end');
}
if((User::level() == 3 || User::level()>=5 || User::Id() == $db->query("SELECT user_id FROM `forum_pt` WHERE `topic_id` = '". num($_GET['id'])."' ORDER BY time ASC LIMIT 1")->fetchColumn()) && $_GET['act'] == 'open_vote')
{
$db->query("UPDATE `forum_vote` SET `closed` = '0' WHERE `topic_id` = '". num($_GET['id']) ."'");
redirect('/forum/topic/'.num($_GET['id']).'/?page=end');
}
///////////////// Vote //////////////////
}
else
{
redirect('/forum/');
}