Файл: Dvig/forum/add_post.php
Строк: 49
<?php
####################
## Автор - USER-X ##
## Copyright 2013 ##
## xcms.mcdir.ru ##
####################
define( 'xcms_pro', 1 ) ;
set_time_limit( 0 ) ;
$path = '../' ;
include_once ( $path . 'core/core.php' ) ;
$title = 'Пишем пост' ;
include_once ( $path . 'core/head.php' ) ;
#########
switch ($act) {
case 'ok':
$tems = mysql_fetch_array(mysql_query('SELECT * FROM `forum_themes` WHERE `id`='.$id.''));
if($tems['id']){
if ( ! $users){
header( "location: ../index.php" ) ;
include_once ( $path . 'core/foot.php' ) ;
exit ;}
$text = isset( $_POST['text'] ) ? trim( $_POST['text'] ) : '' ;
if ( empty( $text ) ){
$_SESSION['error'] = 'Введите пост<br/>';
header("location: ".$_SERVER["HTTP_REFERER"]);
exit ;}
$themez = mysql_fetch_array(mysql_query('SELECT * FROM `forum_themes` WHERE `id`='.$id.''));
if($themez['status'] == '0'){
$_SESSION['error'] = 'Тема закрыта<br/>';
header("location: ".$_SERVER["HTTP_REFERER"]);
exit;}
#############################
$text = protect($_POST['text']);
$translate = protect($_POST['translate']);
$time = time();
$quote = intval($_GET['post']);
$quoteact = mysql_fetch_assoc(mysql_query("SELECT * from `forum_posts` WHERE `id`='$quote'"));
if($quoteact['id']){$quote = $quote;}else{$quote = 0;}
# Для уведомлений
$komu = protect($_GET['komu']);
$ktoo = protect($users['id']);
$theme = mysql_fetch_array(mysql_query('SELECT * FROM `forum_themes` WHERE `id`='.$id.''));
$podrz = mysql_fetch_array(mysql_query('SELECT * FROM `forum_podrazdel` WHERE `id`='.$id.''));
$deistvie = 'Ответил вам в теме [url=http://forum/theme.php?id='.$id.']'.$theme['name'].'[/url]';
if($time - $users['postlast'] < 15){echo'<div id="error">Допустимо 1 сообщение в 15 секунд</div>';}else{
if($komu){mysql_query("INSERT INTO `core_deistvie` SET
`komu` = '$komu',
`ktoo` = '$ktoo',
`deistvie` = '$deistvie',
`time` = '$time',
`status`='1'");}
if(!empty($translate)){$translate='1';}else{$translate='0';}
mysql_query( "INSERT INTO `forum_posts` SET
`theme` = '$id',
`razdel` = '0',
`podrazdel` = '$theme[podrazdel]',
`text` = ' $text',
`time` = '$time',
`author` = '$users[id]',
`translit` = '$translate',
`quote`='$quote'
" ) ;
mysql_query("UPDATE `users` SET `posts` = posts+1,`balans` = balans+1,`postlast`='$time' WHERE `id` = '".$users['id']."'");
mysql_query("UPDATE `forum_themes` SET `last_id` = '$users[id]', `time_last`='$time' WHERE `id` = '$id'");
echo'<meta http-equiv="refresh" content="0;url=/forum/theme'.$id.'/page=end" />';
exit ;}
}else{echo'<div id="error">В пизду иди</div>';}
break;
case 'quote':
$title = 'Цитируем' ;
#########
$total = mysql_num_rows(mysql_query( "SELECT * FROM `forum_posts` WHERE `id`='$id' limit 1" )) ;
if($users){
if ($total){
$all = mysql_fetch_array(mysql_query('SELECT * FROM `forum_posts` WHERE `id`='.$id.''));
$use = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id`='.$all['author'].''));
if($id){echo '
<div id="razd">Цитируем '.$use['login'].'</div>
<div id="body">'.check($all['text']).'</div>
<form action="add_post.php?act=ok&post='.$id.'&id='.$all['theme'].'" method="post" enctype="multipart/form-data">
<div id="razd">Сообщение:</div><div id="body">
<textarea name="text" rows="3" cols="60" id="text"></textarea><br/>';
echo'<input type="submit" value="Добавить"/></form></div>';}
}else{echo'<div id="error">Ошибка</div>';}}
break;
default;
#########
#########
$komu = protect($_GET['komu']);
$tema = intval(protect($_GET['theme']));
$total = mysql_num_rows(mysql_query( "SELECT * FROM `forum_themes` WHERE `id`='" . $tema ."' limit 1" )) ;
if($users){
if ($total){
echo '<div id="body">' ;
$count = mysql_num_rows(mysql_query( "SELECT * FROM `users` WHERE `id`='" . $komu ."' limit 1" )) ;
if($count){
$usero = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id`='.$komu.''));
echo '<form action="add_post.php?act=ok&id='.$tema.'&komu='.$komu.'" method="post" enctype="multipart/form-data"> ';}else{
echo '<form action="add_post.php?act=ok&id='.$tema.'" method="post" enctype="multipart/form-data"> ';}
if($usero){echo'Сообщение:<br/><input type="text" name="text" value="'.$usero['login'].', "/><br/>';}else{
echo'Сообщение:<br/><input type="text" name="text"/><br/>';}
echo'<input type="submit" value="Добавить"/></form>';
echo '</div>' ;}else{echo'<div id="error">Ошибка</div>';}}
#########
}
include_once ( $path . 'core/foot.php' ) ;
?>