Файл: vxas.ru/adm_panel/delete_lenta.php
Строк: 44
<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
if (isset($_GET['id']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `lenta` WHERE `id` = '".intval($_GET['id'])."'"),0)==1)
{
$post=mysql_fetch_assoc(mysql_query("SELECT * FROM `lenta` WHERE `id` = '".intval($_GET['id'])."' LIMIT 1"));
$ank=mysql_fetch_assoc(mysql_query("SELECT * FROM `user` WHERE `id` = '".mysql_real_escape_string($post[id_user])."' LIMIT 1"));
if (isset($user) && ($user['level']>$ank['level']))
mysql_query("DELETE FROM `lenta` WHERE `id` = '".mysql_real_escape_string($post[id])."'");
}
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER']!=NULL)
header("Location: ".$_SERVER['HTTP_REFERER']);
else
header("Location: lenta.php?".SID);
?>