Файл: group_forum/inc/them.php
Строк: 234
<?
echo "<div class="headering">$urlik / <a href="/group">Группы</a> / <a href="/group/group?id=".$group[id]."">".output_text($group['name'])."</a> / <a href="/group_forum/$group[id]/">Форум</a> / <a href="/group_forum/$group[id]/$razdel[id]/">".$razdel['name']."</a> / ".output_text($them['name'])."</div>";
if(!$user){ header("location: /"); }else
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_r` WHERE".((!isset($user) || $user['level']==0 || mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==0)?" `adm` = '0' AND":null)." `id` = '".$razdel['id']."' AND `id_group` = '".$group['id']."'"),0)==0){
msg('тема находится в разделе для администрации, для вас доступ закрыт');
include_once '../sys/inc/tfoot.php';
exit;}
if (isset($_GET['act']) && $_GET['act']=='txt')
{
ob_clean();
ob_implicit_flush();
header('Content-Type: text/plain; charset=utf-8', true);
header('Content-Disposition: attachment; filename="'.retranslit($them['name']).'.txt";');
echo "Тема: ".$them['name']." (".$group['name'].")rn";
$q=mysql_query("SELECT * FROM `group_forum_p` WHERE `id_them` = '".$them['id']."' AND `id_group` = '".$group['id']."' ORDER BY `time` ASC");
//echo "rn";
while ($post = mysql_fetch_assoc($q))
{
echo "rn";
$ank=get_user($post['id_user']);
echo "".$ank['nick']." (".date("j M Y в H:i", $post['time']).")rn";
echo trim(br($post['msg'],"rn"))."rn";
}
echo "rnИсточник: http://".$_SERVER['SERVER_NAME']."/group_forum/$group[id]/".$razdel['id']."/$them[id]/rn";
exit;
}
##############Код повышаем рейтинг поста###################
if(isset($_GET['r'])){
$rat=mysql_fetch_assoc(mysql_query("SELECT * FROM `group_forum_p` WHERE `id` = '".intval($_GET['r'])."' AND `id_them` = '".$them['id']."' AND `id_group` = '".$group['id']."' LIMIT 1"));
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_p_rating` WHERE `id_user` = '".$user['id']."' AND `id_post` = '".$rat['id']."'"), 0)==0 && $rat['id_user']!=$user['id']){
mysql_query("UPDATE `group_forum_p` SET `rating` = '".($rat['rating']+1)."' WHERE `id` = '".$rat['id']."' AND `id_group` = '".$group['id']."' LIMIT 1",$db);
mysql_query("INSERT INTO `group_forum_p_rating` (`id_user`, `id_post`, `rating`) values('".$user['id']."', '".$rat['id']."','1')",$db);}
}
if (isset($user) && isset($_GET['f_del']) && is_numeric($_GET['f_del']) && isset($_SESSION['file'][$_GET['f_del']]))
{
unlink($_SESSION['file'][$_GET['f_del']]['tmp_name']);
}
if (isset($user) && isset($_GET['act']) && $_GET['act']=='new' && isset($_FILES['file_f']) && preg_match("#.#", $_FILES['file_f']['name']) && isset($_POST['file_s']))
{
copy($_FILES['file_f']['tmp_name'], H.'sys/tmp/'.$user['id'].'_'.md5_file($_FILES['file_f']['tmp_name']).'.group.tmp');
chmod(H.'sys/tmp/'.$user['id'].'_'.md5_file($_FILES['file_f']['tmp_name']).'.group.tmp', 0777);
if (isset($_SESSION['file']))$next_f=count($_SESSION['file']);else $next_f=0;
$file=esc(stripcslashes(htmlspecialchars($_FILES['file_f']['name'])));
$_SESSION['file'][$next_f]['name']=preg_replace("#.[^.]*$#", NULL, $file); // имя файла без расширения
$_SESSION['file'][$next_f]['ras']=strtolower(preg_replace("#^.*.#", NULL, $file));
$_SESSION['file'][$next_f]['tmp_name']=H.'sys/tmp/'.$user['id'].'_'.md5_file($_FILES['file_f']['tmp_name']).'.group.tmp';
$_SESSION['file'][$next_f]['size']=filesize(H.'sys/tmp/'.$user['id'].'_'.md5_file($_FILES['file_f']['tmp_name']).'.group.tmp');
$_SESSION['file'][$next_f]['type']=$_FILES['file_f']['type'];
}
if (isset($user) && ($them['close']==0 || $them['close']==1 && user_access('forum_post_close') && mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==1) && isset($_GET['act']) && $_GET['act']=='new' && isset($_POST['msg']) && !isset($_POST['file_s']))
{
$msg=$_POST['msg'];
if (isset($_POST['translit']) && $_POST['translit']==1)$msg=translit($msg);
if (strlen2($msg)<2)$err='Короткое сообщение';
if (strlen2($msg)>10000)$err='Длина сообщения превышает предел в 10000 символа';
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_p` WHERE `id_them` = '".$them['id']."' AND `id_group` = '".$group['id']."' AND `id_user` = '".$user['id']."' AND `msg` = '".my_esc($msg)."' LIMIT 1"),0)!=0)$err='Ваше сообщение повторяет предыдущее';
if (!isset($err))
{
mysql_query("INSERT INTO `group_forum_p` (`id_group`, `id_them`, `id_user`, `msg`, `time`) values('".$group['id']."', '".$them['id']."', '".$user['id']."', '".my_esc($msg)."', '".$time."')");
$post_id=mysql_insert_id();
if (isset($_SESSION['file']) && isset($user))
{
for ($i=0; $i<count($_SESSION['file']);$i++)
{
if (isset($_SESSION['file'][$i]) && is_file($_SESSION['file'][$i]['tmp_name']))
{
mysql_query("INSERT INTO `group_forum_files` (`id_post`, `name`, `ras`, `size`, `type`, `id_group`) values('".$post_id."', '".$_SESSION['file'][$i]['name']."', '".$_SESSION['file'][$i]['ras']."', '".$_SESSION['file'][$i]['size']."', '".$_SESSION['file'][$i]['type']."','".$group['id']."')");
$file_id=mysql_insert_id();
copy($_SESSION['file'][$i]['tmp_name'], H.'group/files/forum/files/'.$file_id.'.frf');
unlink($_SESSION['file'][$i]['tmp_name']);
}
}
unset($_SESSION['file']);
}
unset($_SESSION['msg']);
mysql_query("UPDATE `group_forum_t` SET `time` = '".$time."' WHERE `id` = '".$them['id']."' AND `id_group` ='$group[id]' LIMIT 1");
include_once '../akt_rating.php';
$post1=mysql_fetch_array(mysql_query("SELECT * FROM `group_forum_t` WHERE `id`='".$them['id']."' AND `id_group` ='$group[id]' ORDER BY `time` ASC LIMIT 1"));
$an=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = '".$post1['id_user']."' LIMIT 1"));
$us_adm = $an['id'];
if($user['id']!=$us_adm) {
$msgrat1="В вашей теме оставили сообщение [url=/group_forum/$group[id]/".$razdel['id']."/".$them['id']."/?page=end]".$them['name']."[/url] (".$group['name'].")";
mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '".$an['id']."', '".$msgrat1."', '".$time."')"); }
if(@$_GET['ud'] && $user['id']!=$_GET['ud'] && @$_GET['ud']!=$us_adm) {
$msg1="Вам ответили в теме [url=/group_forum/$group[id]/".$razdel['id']."/".$them['id']."/?page=end]".$them['name']."[/url] (".$group['name'].")";
mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '".intval($_GET['ud'])."', '".$msg1."', '".$time."')");
msg('Ответ принят');
}
else {
msg('Сообщение успешно добавлено');
}
//msg('Сообщение успешно добавлено');
aut();
header("Refresh: 1; url=/group_forum/$group[id]/".$razdel['id']."/".$them['id']."/?page=end".SID);
echo "<div class='line'>n";
echo "<a style='font-weight:bold;' href="/group_forum/$group[id]/".$razdel['id']."/".$them['id']."/?page=end" title='Перейти в тему'>Перейти в тему</a><br />n";
echo "<a href="/group_forum/$group[id]/" title='Вернуться в форум'>Вернуться в форум</a><br />n";
echo "</div>n";
include_once '../sys/inc/tfoot.php';
}
}
$kto=get_user($them['kto']);
if ($them['close']==1)
echo "<div class='busi'>Тема закрыта модератором <a href='/profile?id=".$kto['id']."'>".$kto['nick']."</a></div>";
if (isset($user) && $user['balls']>=50 && $user['rating']>=0 && isset($_GET['id_file'])
&&
mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_files` WHERE `id` = '".intval($_GET['id_file'])."' AND `id_group`='$group[id]'"), 0)==1
&&
mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_files_rating` WHERE `id_user` = '".$user['id']."' AND `id_file` = '".intval($_GET['id_file'])."'"), 0)==0)
{
if (isset($_GET['rating']) && $_GET['rating']=='down')
{
mysql_query("INSERT INTO `group_forum_files_rating` (`id_user`, `id_file`, `rating`) values('".$user['id']."', '".intval($_GET['id_file'])."', '-1')");
msg ('Ваш отрицательный отзыв принят');
}
elseif(isset($_GET['rating']) && $_GET['rating']=='up')
{
mysql_query("INSERT INTO `group_forum_files_rating` (`id_user`, `id_file`, `rating`) values('".$user['id']."', '".intval($_GET['id_file'])."', '1')");
msg ('Ваш положительный отзыв принят');
}
}
if (isset($_GET['delete']) && isset($user) && $them['close']==0 && (user_access('forum_post_ed') || mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==1)){
mysql_query("DELETE FROM `group_forum_p` WHERE `id` = '".intval($_GET['delete'])."' AND `id_them` = '".intval($_GET['id_them'])."' AND `id_group` = '".$group['id']."' LIMIT 1");
msg('сообщение удалено');
}
err();
aut();
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_t_rating` WHERE `id_them` = '$them[id]' AND `id_user` = '$user[id]'"), 0)==0)mysql_query("INSERT INTO `group_forum_t_rating` (`id_user`, `id_group`) values('".$user['id']."', '".$group['id']."')");
if (isset($user))mysql_query("DELETE FROM `group_online` WHERE `id_user` = '".$user['id']."' AND `id_group`='$group[id]'");
mysql_query("DELETE FROM `group_online` WHERE `time` < '".($time-150)."' AND `id_group`='$group[id]'");
if (isset($user))mysql_query("INSERT INTO `group_online` (`id_user`, `time`, `gde`, `id_group`) values('".$user['id']."', '".$time."', '3', '".$group['id']."')");
echo '<div class="line">';
$themank=get_user($them['id_users']);
echo "".online($themank['id'])." ";
echo "<a href='/profile?id=".$themank['id']."' title='$themank[nick]'>n";
echo $themank['nick'];
echo "</a>n";
echo "(".vremja($them['time']).")<br />n";
echo output_text($them['opis'])."<br />";
echo "</div>n";
echo "<div class="busi">В теме ".mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_p` WHERE `id_group` = '".$group['id']."' AND `id_them` = '".$them['id']."'"),0)." комм.</div>";
###############
$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `group_forum_p` WHERE `id_them` = '$them[id]' AND `id_group` = '$group[id]'"),0);
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
if ((user_access('forum_post_ed') || mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==1 || isset($user) && $ank2['id']==$user['id']) && isset($_GET['act']) && $_GET['act']=='post_delete'){$lim=NULL;}else $lim=" LIMIT $start, $set[p_str]";
$q=mysql_query("SELECT * FROM `group_forum_p` WHERE `id_them` = '$them[id]' AND `id_group` = '$group[id]' ORDER BY `time` ASC$lim");
if (mysql_num_rows($q)==0) {
echo "<div class='line'>";
echo "Нет сообщений в теме "<small>". htmlspecialchars($them[name])."</small>"n";
echo "</div>";
}
$post_k=$start;
while ($post = mysql_fetch_assoc($q))
{
$ank=get_user($post['id_user']);
$post_k++;
if ((user_access('forum_post_ed') || isset($user) && $ank2['id']==$user['id']) && isset($_GET['act']) && $_GET['act']=='post_delete')
{
echo "<input type='checkbox' name='post_$post[id]' value='1' />";
}
if ($set['show_num_post']==1)$num_post=$post_k.'. '; else $num_post=NULL;
echo '<div class="line">';
if (isset($user) && $them['close']==0){
echo "".online($ank['id'])." $num_post <a href='/group_forum/$group[id]/$razdel[id]/".$them['id']."/?id_post=$post[id]&act=msg' title='Ответить $ank[nick]'>$ank[nick]</a> (".vremja($post['time']).")<br />n";
}
else{
echo "".online($ank['id'])." $num_post <a href='/profile?id=$ank[id]' title='Анкета $ank[nick]'>$ank[nick]</a> (".vremja($post['time']).")<br />n";
}
echo output_text($post['msg'])."<br />n";
include H.'/group_forum/inc/file.php';
####################код ссылка на мне понравилось и ссылка на тех кто проголосовал########################
if (isset($user) && (user_access('forum_post_ed') || mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==1)){
echo "<a href='/group_forum/$group[id]/$razdel[id]/".$them['id']."/?delete=$post[id]'>Удалить</a> / n";
}
echo "<a href='/group_forum/$group[id]/$razdel[id]/".$them['id']."/?id_post=$post[id]&act=msg' title='Ответить $ank[nick]'>Ответ</a><br/>n";
echo "</div>n";
}
if ((user_access('forum_post_ed') || mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==1 || isset($user) && $ank2['id']==$user['id']) && isset($_GET['act']) && $_GET['act']=='post_delete'){}
elseif ($k_page>1)str("/group_forum/$group[id]/$razdel[id]/".$them['id']."/?",$k_page,$page); // Вывод страниц
if ((user_access('forum_post_ed') || mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==1 || isset($user) && $ank2['id']==$user['id']) && isset($_GET['act']) && $_GET['act']=='post_delete'){}
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `group` WHERE `id` = '$group[id]' AND `write` = '1'"), 0)==1 && mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]'"), 0)==0){}
elseif (isset($user) && ($them['close']==0 || $them['close']==1 && user_access('forum_post_close') || mysql_result(mysql_query("SELECT COUNT(*) FROM `group_user` WHERE `id_group` = '$group[id]' AND `id_user` = '$user[id]' AND `level` > '0'"), 0)==1))
{
echo '<div class="line">';
if ($user['set_files']==1)
echo "<form method='post' name='message' enctype='multipart/form-data' action='/group_forum/$group[id]/$razdel[id]/".$them['id']."/?act=new'>n";
else
echo "<form method='post' name='message' action='/group_forum/$group[id]/$razdel[id]/".$them['id']."/?act=new'>n";
if (isset($_POST['msg']) && isset($_POST['file_s']))$msg2=output_text($_POST['msg'],false,true,false,false,false); else $msg2=NULL;
if ($set['web'] && is_file(H.'style/themes/'.$set['set_them'].'/altername_post_form.php'))
include_once H.'style/themes/'.$set['set_them'].'/altername_post_form.php';
else
echo "Сообщение:<br />n<textarea name="msg" style="width:90%" rows="7">$msg2</textarea><br />n";
if ($user['set_files']==1){
if (isset($_SESSION['file']))
{
echo "Прикрепленные файлы:<br />n";
for ($i=0; $i<count($_SESSION['file']);$i++)
{
if (isset($_SESSION['file'][$i]) && is_file($_SESSION['file'][$i]['tmp_name']))
{
echo "<img src='/style/themes/$set[set_them]/forum/14/file.png' alt='' />n";
echo $_SESSION['file'][$i]['name'].'.'.$_SESSION['file'][$i]['ras'].' (';
echo size_file($_SESSION['file'][$i]['size']);
echo ") <a href='/group_forum/$group[id]/$razdel[id]/".$them['id']."/?d_file=$i' title='Удалить из списка'><img src='/style/themes/$set[set_them]/forum/14/del_file.png' alt='' /></a>n";
echo "<br />n";
}
}
}
echo "<input name='file_f' type='file' /><br />n";
echo "<input name='file_s' value='Прикрепить файл' type='submit' /><br />n";
}
echo "<input name='post' name='save' value='Отправить' type='submit' /><br />n";
echo "</form>n";
echo "</div>n";
}
echo '<div class="line">';
echo "<a href='/group_forum/who.php?id=$group[id]&idr=$razdel[id]&idt=$them[id]'>Кто на форуме?</a> (".mysql_result(mysql_query("SELECT COUNT(*) FROM `group_online` WHERE `id_group` = '$group[id]' AND `gde` = '3'"),0).")<br/>n";
echo "<a href="/group_forum/$group[id]/$razdel[id]/".$them['id']."/?act=txt">Скачать тему в txt</a><br />n";
echo "</div>n";
?>