Просмотр архива socvenix


<?
include_once 'i.php';
                                verh(); aut();
$id = intval($_GET['id']);
$uz   =  mysql_fetch_assoc
                      (mysql_query(
                                   "SELECT * FROM `user` where 
                                    `id` = '".$id."'  
                                          limit 1"));
                                                         $kol = mysql_result(mysql_query(
                               "SELECT count(*) FROM `zvezda` where `komu` = '".$id."'")
                                                                                    ,0);
   if(empty($uz['nick'])){ echo ' <div class="prof">Такой обитатель не обнаружен в бд!</div> '; 
                                                                niz();  exit;  }
$set['title'] = 'Звёзды '.$uz['nick'];
$star = (isset($_GET['star']) ? htmlspecialchars(mysql_real_escape_string(trim($_GET['star']))) : NULL);
$add = (isset($_GET['add']) ? htmlspecialchars(mysql_real_escape_string(trim($_GET['add']))) : NULL);
$addok = (isset($_GET['addok']) ? htmlspecialchars(mysql_real_escape_string(trim($_GET['addok']))) : NULL);
       if(isset($add) && $us['level_access']>=150){
echo '<form action="zvezda.php?id='.$id.'&addok" method="post" name="form" enctype="multipart/form-data">';
echo 'За что: <br/>';
echo '<textarea name="text"></textarea><br />';
echo '<input type="submit" value="Добавить" />';
echo '</form>';

                      }
     if(isset($addok) && $us['level_access']>=150){
                   if($uz['id']==$us['id']){echo'<div class="prof">Вы не можете вручать звёзды самому себе!</div>'; niz(); exit; }
           $text = htmlspecialchars(mysql_real_escape_string($_POST['text']));
                       if(empty($text)){$text='Без комментария...';}
              mysql_query("INSERT INTO `zvezda` SET `komu` = '".$id."',
                                                    `kto` = '".$us['id']."',
                                                    `time` = '".$_SERVER['REQUEST_TIME']."',
                                                    `text` = '".$text."'");
                            echo'<div class="prof">Готово, нах!</div>';
                                       
                       }
                             if(isset($star)){
$sid = intval($_GET['sid']);  
  $sd   =  mysql_fetch_assoc
                      (mysql_query(
                                   "SELECT * FROM `zvezda` where 
                                    `id` = '".$sid."' and `komu` = '".$us['id']."'  
                                          limit 1"));
  $kto   =  mysql_fetch_assoc
                      (mysql_query(
                                   "SELECT * FROM `user` where 
                                    `id` = '".$sd['kto']."'  
                                          limit 1"));
if(isset($sid)){
if($uz['id']!==$sd['komu']){echo'<div class="prof">У этого обитателя нет такой звезды!</div>'; niz(); exit;}
if(empty($sd['text'])){ echo'<div class="prof">У этого обитателя нет такой звезды!</div>';           niz(); exit;    }
                     echo '<div class="prof">Звезда <img src="img/zvezda.png" alt="*" /> вручена пользователю <b><a href="/'.$id.'">'.$uz['nick'].'</a></b><br/>Причина: <b>'.$sd['text'].'</b><br/>Вручил: <b><a href="/'.$kto['id'].'">'.$kto['nick'].'</a></b> ('.vr($sd['time']).')</div>';
                            }
                                                     
                                             }
                        
                                     if($kol == 0){ 
                            echo'<div class="prof">Звёзд у этого обитателя ещё нет!</div>'; 
                                                     }else{
          echo'<div class="prof">';

$z   = mysql_query("SELECT * FROM `zvezda` where 
                                     `komu` = '".$us['id']."'  
                                         order by `id` desc limit 20");                                   
while($a = mysql_fetch_assoc($z)) {
echo '<a href="/zvezda.php?id='.$a['komu'].'&star&sid='.$a['id'].'"><img src="img/zvezda.png" alt="*" /></a> ';
                                }
          echo'</div>';
                           }
                             
                  
                       niz();
?>