Файл: users/forum/s_o_ok.php
Строк: 49
<?
$name=$_POST['name'];
if (isset($_POST['translit_name']) && $_POST['translit_name']==1)$name=translit($name);
$name=esc(stripcslashes(htmlspecialchars($_POST['name'])));
if(strlen2($name)<1)
{
$err[]="Введите название";
}
if(strlen2($name)>60)
{
$err[]="Название слишком длинное";
}
$name=my_esc($name);
$text=$_POST['text'];
$text=esc(stripcslashes(htmlspecialchars($_POST['text'])));
if (isset($_POST['translit_text']) && $_POST['translit_text']==1)$text=translit($text);
$result1=$_POST['result1'];
if(strlen2($result1)<1)
{
$err[]="1 вариант обязателен для заполнения";
}
$result1=my_esc($result1);
$result2=$_POST['result2'];
if(strlen2($result2)<1)
{
$err[]="2 вариант обязателен для заполнения";
}
$result2=my_esc($result2);
$result3=$_POST['result3'];
$result3=my_esc($result3);
$result4=$_POST['result4'];
$result4=my_esc($result4);
$result5=$_POST['result5'];
$result5=my_esc($result5);
$result6=$_POST['result6'];
$result6=my_esc($result6);
$result7=$_POST['result7'];
$result7=my_esc($result7);
$result8=$_POST['result8'];
$result8=my_esc($result8);
$result9=$_POST['result9'];
$result9=my_esc($result9);
$result10=$_POST['result10'];
$result10=my_esc($result10);
if(strlen2($text)<1)
{
$err[]="Введите текст";
}
if(strlen2($text)>100000)
{
$err[]="Текст слишком длинный";
}
$text=my_esc($text);
if(!isset($err))
{
mysql_query("INSERT INTO `forum` (`id_comm`, `mother`, `type`, `name`, `time`, `text`, `id_user`, `count`, `opros`) values ('0', '$forum[id]', 'tema', '$name', '$time', '$text', '$user[id]', '$forum[count]/$forum[id]', '1')");
$them['id']=mysql_insert_id();
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result1', '1')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result2', '2')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result3', '3')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result4', '4')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result5', '5')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result6', '6')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result7', '7')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result8', '8')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result9', '9')");
mysql_query("INSERT INTO `forum_opros` (`id_them`, `var`, `num`) VALUES ('$them[id]', '$result10', '10')");
$q = mysql_query("SELECT * FROM `frends` WHERE `user` = '$user[id]' AND `lenta_forum` = '1' AND `i` = '1'");
while ($f = mysql_fetch_array($q))
{
$a = mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = '$f[frend]' LIMIT 1"));
$msg_lenta="Создал опрос [url=/users/forum/?id=$them[id]]$name [/url]";
mysql_query("INSERT INTO `lenta` (`id_user`, `id_kont`, `msg`, `time`) values('$user[id]', '$a[id]', '$msg_lenta', '$time')");
}
header("Location: /users/forum/?id=$forum[id]");
}
err();
?>