Файл: news.php
Строк: 109
<?php
define('PROTECTOR', 1);
$headmod = 'news';//фикс. места
$textl='Новости';
include('files/path.php');
include($path.'files/db.php');
include($path.'files/auth.php');
include($path.'files/func.php');
include($path.'files/core.php');
include($path.'files/head.php');
include($path.'files/zag.php');
echo "<p><font color=#057F46><b>Новости игры!</b></font></p>";
//-------------------------------------- Удаление коментариев ---------------------------------------------------------
if (isset($_GET[del])){
if($udata[prava] >= 2)
{
if(empty($_GET[del])){
echo"<hr/><font color=red><p>Не выбран пост!</p></font>";
}else{
$asd = mysql_query("SELECT * FROM news_kom WHERE id='$_GET[del]' LIMIT 1");
$avto=mysql_num_rows($asd);
if($avto==0){
echo'<hr/><font color=red><p>Нет такого поста!</p></font>';
}else{
mysql_query("DELETE FROM `news_kom` WHERE id='$_GET[del]' LIMIT 1");
echo'<hr/><font color=#084fc9><p>Пост успешно удалён!</p></font>';
}
}
}else{
echo "Ошибка!Доступ закрыт!";
}
}
////////////////////////////// Коментарии /////////////////////////////////////////////////////////////////////////////////////////////////////////
if (isset($_GET[kom])){
//-------------------------------------------
if (!empty($_POST[text])) // если естьтекст записуем сообщение
{
$msg = $_POST[text];
$msg = htmlspecialchars(stripslashes(trim($msg)));
$log = htmlspecialchars(stripslashes(trim($log)));
$currHour=date("H",time());
$currDate=date("d.m.Y", time());
$currTime=date("$currHour:i", time());
// пишем антифлуд
$req6546 = mysql_query("SELECT * FROM `news_kom` WHERE `usr` = '$log' && `id_tm` = '$_GET[kom]' ORDER BY id DESC LIMIT 1");
$pr = mysql_fetch_array($req6546);
if($pr[text] == $msg){
echo'<font color=#9E0000>Антифлуд!</font><br/>';}else{
$ressave = mysql_query("INSERT INTO `news_kom` SET
`id_tm` = '$_GET[kom]',
`text` = '$msg',
`data` = '$currDate в $currTime',
`usr` = '$log'"); // создаем строку с ответом
if ($ressave == 'true') {echo "<hr><font color=#007F46>Сообщение добавленно!</font>";}
else {echo "<font color=red><p> Неудача ! </p></font>";} // неудачно =)
}
}
//----------------------------------------------
$asd = mysql_query("SELECT * FROM `news` WHERE `id` = '$_GET[kom]' LIMIT 1");
$dsa = mysql_fetch_array($asd);
$title = strip_tags($dsa['title']);
$time = strip_tags($dsa['time']);
echo "<hr/><b><font color=#6D7F3F>$title </b><small>
[$time]</small><br/></font>
<font color=grey>$text ".nl2br($dsa['text'])."</font><hr/>";
//----cчётчик комов
$count2 = mysql_result(mysql_query("SELECT COUNT(*) FROM `news_kom` WHERE `id_tm` = '$_GET[kom]'"), 0);
echo "<p><font color=#47ba82>Коментарии ($count2):</font></p>";
echo "<form method="post" action="news.php?kom=$_GET[kom]">";
echo "Текст сообщения:<br/>";
echo "<textarea name="text" rows=3></textarea><br/>";
echo "<input type="submit" value="Отправить" class="ibutton"></form><hr/>";
//---выщитует страницы----------
$count = mysql_result(mysql_query("SELECT COUNT(*) FROM `news_kom` WHERE `id_tm` = '$_GET[kom]'"), 0);
if($count > 0){
$pages = ceil($count/10);
if(isset($_GET['page'])){
$page = abs(intval($_GET['page']));
}else{
$page = 1;
}
$from = ($page-1)*10;
}
//-------------------------------
$req = mysql_query("SELECT * FROM `news_kom` WHERE id_tm = '$_GET[kom]' ORDER BY id DESC LIMIT $from, 10");
$avt = mysql_num_rows($req);
if($avt>=1)
{
function smilesmsg($string54545){
$dir = opendir ("pic/smiles");
while ($file = readdir ($dir)) {
if (ereg (".gif$", "$file")){
$file2=str_replace(".gif","",$file);
$string54545=str_replace(":$file2",'<img src="pic/smiles/'.$file.'" alt="" height="30" width="30">',$string54545);
}}
closedir ($dir);
return $string54545; }
While($tk = mysql_fetch_array($req))
{
$us = mysql_query("SELECT * FROM `users` WHERE usr = '$tk[usr]' LIMIT 1");
$usr = mysql_fetch_array($us);
if ($usr[prava]>=4) {$color = '<font color=lime>'; $color2 = '<font color=#5e995c>';}
if ($usr[prava]==2 or $usr[prava]==3) {$color = '<font color=#0026FF>'; $color2 = '<font color=#6DC2FF>';}
if ($usr[prava]==1) {$color = '<font color=#7F6A00>'; $color2 = '<font color=#A09353>';}
if ($usr[prava]==0) {$color = ''; $color2 = '';}
if($udata[prava]>=2){
$silka = " <a href="news.php?kom=$_GET[kom]&del=$tk[id]"><font color=red><small> [x] </small></font></a>";
}
$text = $tk[text];
$text = smilesmsg($text);
$text = nl2br($text);
echo "<div class=msg><a href="search.php?nick=$tk[usr]&go=go">$color $tk[usr] </font></a> <font color=grey><small>$tk[data]</small></font> $silka </div>
<div class=msg>
$color2 $text</font></div><hr/>
";
}
echo "<div class=dot><p>";
navig2($page, 'news.php?kom='.$_GET[kom].'&', $pages);
echo "</p></div>";
}else{
echo "Сообщений нет<hr/>";}
//////////////////////////////////
echo"<br/><div class=silka><a href="/news.php?">Назад</a></div>";
include($path.'files/down.php');
}
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
if ($_GET[page] == "" || $_GET[page] < 0 || $_GET[page] == "0")
{
$_GET[page] = 0;
}
$next = $_GET[page] + 1;
$back = $_GET[page] - 1;
$num = $_GET[page] * 10;
if($_GET[page] == "0")
{$i = 1;}
else{$i = ($_GET[page]*10)+1;}
$viso = mysql_num_rows(mysql_query("SELECT title FROM news"));
$puslap = floor($viso/10);
if (is_double($num) || !is_integer($num))
{
echo "Ошибка!<br/>";
}
else {
$asd = mysql_query("SELECT id,title, text, time FROM news ORDER BY id DESC LIMIT $num,10");
while($dsa = mysql_fetch_array($asd))
{
$i2 = $i++;
$title = strip_tags($dsa['title']);
$time = strip_tags($dsa['time']);
echo "<hr/><b><font color=#6D7F3F>$title </b><small>
[$time]</small><br/></font>
<font color=grey>$text ".nl2br($dsa['text'])."</font>";
$count2 = mysql_result(mysql_query("SELECT COUNT(*) FROM `news_kom` WHERE `id_tm` = '$dsa[id]'"), 0);
echo "<div class=silka><a href="news.php?kom=$dsa[id]"><font color=#47ba82>Коментарии ($count2)</font></a></div>";
}
//echo '<br/>';
echo '<hr/>';
if ($_GET[page] > 0)
{
echo "<a href="news.php?page=$back">back</a>";
}
elseif ($_GET[page] == 0)
{
echo "back";
}
echo"|";
if($_GET[page] < $puslap || $_GET[page] == "" || $_GET[page] == 0)
{echo "<a href="news.php?page=$next&">next</a><br/>";}
else
{echo "next<br/>";}
}
echo"<a href="index.php?">Назад</a>";
include($path.'files/down.php');
?>