View file d.php

File size: 9.82Kb
<?
list($msec,$sec)=explode(chr(32),microtime()); 
$HeadTime=$sec+$msec;

include "ini.php";
include "includes/func_validate.php";
include "includes/func_val_text.php";
include 'includes/func_pages2.php';
include 'includes/func_tr.php';
define('IN_WAPP_CHAT', true);
$p=validate($p);
$id=intval($id);
$dbid=intval($_GET['dbid']);
$room=intval($room);

list($id,$pass,$kicked,$kicktime,$refresh,$invisible,$pol,$about,$translit,$version)=mysql_fetch_array(mysql_query("select id,pass,kicked,kicktime,refresh,invisible,pol,about,translit,version from users where id='".$id."';"));
if($pass!=$p || empty($id) || empty($p))die('<card title="Error!"><p><small>'.$lang['incorrect_pass_id'].'<br/><anchor>'.$lang['back'].'<prev/></anchor></small></p></card></wml>');

include 'b.php';

if($version=='html')
{
ini_set('url_rewriter.tags','');

session_start();
include'includes/gzip.php';
}
include "includes/header.php";

switch ($mode) 
{  
  case "read":

$onpage=5;

list($login)=mysql_fetch_array(mysql_query("select login from users where id='".$dbid."';"));

if($version=='html')
{
echo'<head><title>'.$login.'</title></head><link rel="stylesheet" type="text/css" href="css.css"/></head><body>';
echo'<table align="center" border="0" cellspacing="1" cellpadding="5" width="280">';
echo'<div class="a">';
}
else
{
print '<card title="'.$login.'"><p><small>';
}

$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;
$base_url="d.php?mode=read&amp;id=$id&amp;lg=$lg&amp;p=$p&amp;room=$room&amp;dbid=$dbid&amp;start=";
$num_items=mysql_num_rows(mysql_query("select id from blogs where userid='".$dbid."';"));

$rq=mysql_query("select id,text,time from blogs where userid='".$dbid."' order by time desc limit $start,$onpage;");

while (list($comment_id,$text,$time)=mysql_fetch_array($rq))
{
$allkomms=mysql_result(mysql_query("select count(id) from comments where commid='".$comment_id."';"),0);

if($version=='html')
{
print '</div><div class="b"><b><u>'.date("d.m.Y-H:i",$time).'</u></b></div><div class="a">'.$text.'<br/>
[<a href="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'&amp;dbid='.$dbid.'&amp;mode=comment&amp;mes_id='.$comment_id.'">Комментарии</a>-'.$allkomms.']<br/>';
}
else
{
print '<b><u>'.date("d.m.Y-H:i",$time).'</u></b><br/>'.$text.'<br/>
[<a href="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'&amp;dbid='.$dbid.'&amp;mode=comment&amp;mes_id='.$comment_id.'">Комментарии</a>-'.$allkomms.']<br/>';
}
}
		print pages($base_url, $num_items, $onpage, $start);

    break;

 case "comment":
 $mes_id=intval($mes_id);
 $del=intval($del);
 
 list($check)=mysql_fetch_array(mysql_query("select userid from blogs where id='".$mes_id."';"));
 if($check!=$dbid) die('<card title="Error!"><p><small>Неизвестный идентификатор дневника!<br/><anchor>'.$lang['back'].'<prev/></anchor><br/></small></p></card></wml>');
 
 list($login)=mysql_fetch_array(mysql_query("select login from users where id='".$dbid."'"));
 
if($version=='html')
{
echo'<head><title>'.$login.'(дневник)</title></head><link rel="stylesheet" type="text/css" href="css.css"/></head><body>';
echo'<table align="center" border="0" cellspacing="1" cellpadding="5" width="280">';
echo'<div class="a">';
}
else
{
print '<card title="'.$login.'(дневник)"><p>';
}

 if(!empty($del) && $dbid==$id)
 {
 mysql_query("delete from comments where id='".$del."';");
 echo"<small>Комментарий успешно удален!</small><br/>";
 }
 
 if(!empty($komm_text))
{
list($whoadds)=mysql_fetch_array(mysql_query("select login from users where id='".$id."';"));
if($tr==1) $komm_text=tr($komm_text);
$komm_text=val_text($komm_text);
mysql_query("insert into comments(id,commtext,commtime,commwho,commid) values(0,'".$komm_text."','".time()."','".$whoadds."','".$mes_id."');");
print '<small><b>Комментарий добавлен!</b></small><br/>';
unset($komm_text);
}
$onpage=4;

//print '<br/>';
$rand=rand(1,9999);
if($version=='html')
{
print '<form action="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'&amp;dbid='.$dbid.'&amp;mode=comment&amp;mes_id='.$mes_id.'" method="post">
<input name="komm_text"/><br/>';
echo'<input type="checkbox" name="tr" value="1"/>'.$lang['translit'].'<br/>';
print'<input type="submit" value="'.$lang['add_record'].'"></form>';
}
else
{
print '<input name="komm_text'.$rand.'"/><br/>'.
      '<select name="tr'.$rand.'" multiple="true" value="0" title="'.$lang['translit'].'">'.
      '<option value="1">'.$lang['translit'].'</option>'.
      '</select><br/><small>';
print '<anchor>'.$lang['add_record'].'<go href="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'&amp;dbid='.$dbid.'&amp;mode=comment&amp;mes_id='.$mes_id.'" method="post">';
print'<postfield name="komm_text" value="$(komm_text'.$rand.')"/><postfield name="tr" value="$(tr'.$rand.')"/></go></anchor><br/>';
}

$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;
$base_url="d.php?mode=comment&amp;id=$id&amp;lg=$lg&amp;p=$p&amp;room=$room&amp;dbid=$dbid&amp;mes_id=$mes_id&amp;start=";
$num_items=mysql_num_rows(mysql_query("select id from comments where commid='".$mes_id."';"));

$rq=mysql_query("select id,commtext,commtime,commwho from comments where commid='".$mes_id."' order by commtime desc limit $start,$onpage;");

while (list($commid,$ctext,$ctime,$cwho)=mysql_fetch_array($rq))
{
if($version=='html')
{
print '</div><div class="b"><b>'.$cwho.'('.date("d.m.Y-H:i",$ctime).')</b></div><div class="a">'.$ctext.'<br/>';
if($dbid==$id) echo"<a href=\"d.php?mode=comment&amp;id=$id&amp;lg=$lg&amp;p=$p&amp;room=$room&amp;dbid=$dbid&amp;mes_id=$mes_id&amp;del=$commid&amp;start=$start\">[удалить]</a><br/>";
}
else
{
print '<b>'.$cwho.'('.date("d.m.Y-H:i",$ctime).')</b><br/>'.$ctext.'<br/>';
if($dbid==$id) echo"<a href=\"d.php?mode=comment&amp;id=$id&amp;lg=$lg&amp;p=$p&amp;room=$room&amp;dbid=$dbid&amp;mes_id=$mes_id&amp;del=$commid&amp;start=$start\">[удалить]</a><br/>";
}
}
print pages($base_url, $num_items, $onpage, $start);

 break;
 ///////////////////////////////////////////////////////////////////////////////////////
  default:
 
 if($version=='html')
{
echo'<head><title>'.$lang['my_blog'].'</title></head><link rel="stylesheet" type="text/css" href="css.css"/></head><body>';
echo'<table align="center" border="0" cellspacing="1" cellpadding="5" width="280">';
echo'<div class="a">';
}
else
{
print '<card title="'.$lang['my_blog'].'"><p><small>';
}

if(!empty($blog_text) && mysql_num_rows(mysql_query("select id from blogs where userid='".$id."' and text='".val_text($blog_text)."' and time>".(time()-300).";"))<1)
{
$blog_text=val_text($blog_text);
mysql_query("insert into blogs(userid,text,time) values('".$id."','".$blog_text."','".time()."');");
print '<b>'.$lang['added_to_blog'].'</b><br/>';
unset($blog_text);
}
if($del)
{
list($verify)=mysql_fetch_array(mysql_query("select userid from blogs where id='".intval($mes_id)."';"));
if($verify!=$id) die('Процедура отклонена. идите нахуй</small></p></card></wml>');
mysql_query("delete from blogs where id='".intval($mes_id)."';");
mysql_query("delete from comments where commid='".intval($mes_id)."';");
print '<u>'.$lang['record_deleted'].'</u><br/>';
}

$rand=rand(1,9999);

if($version=='html')
{
print '<form action="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'" method="post">
'.$lang[text].':<br/><input name="blog_text"/><br/>';
print'<input type="submit" value="'.$lang['add_record'].'"></form>';
}
else
{
print $lang['text'].':</small><br/>';
print '<input name="blog_text'.$rand.'"/><br/>';
print '<small><anchor>'.$lang['add_record'].'<go href="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'" method="post">'.
'<postfield name="blog_text" value="$(blog_text'.$rand.')"/></go></anchor><br/>';
}

$onpage=5;


$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;
$base_url="d.php?id=$id&amp;lg=$lg&amp;p=$p&amp;room=$room&amp;start=";
$num_items=mysql_num_rows(mysql_query("select id from blogs where userid='".$id."';"));

$rq=mysql_query("select text,time,id from blogs where userid='".$id."' order by time desc limit $start,$onpage;");
	while(list($text,$time,$mesid)=mysql_fetch_array($rq))
	{
if($version=='html')
{
print '</div><div class="b"><b>('.date("d.m.Y-H:i",$time).')</b>-<a href="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'&amp;del=true&amp;mes_id='.$mesid.'">'.$lang['delete'].'</a></div><div class="a">';
print $text.'<br/>';
}
else
{
print $text.' <br/><b>('.date("d.m.Y-H:i",$time).')</b>-<a href="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'&amp;del=true&amp;mes_id='.$mesid.'">'.$lang['delete'].'</a><br/>';
}		
	}
print pages($base_url, $num_items, $onpage, $start);

  break;
}

print $version=='html' ? '<hr>' : '---<br/>';
if($mode!='comment' && $mode!='read') print '<a href="d.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'&amp;mode=k&amp;dbid='.$id.'&amp;mode=read">Режим просмотра</a><br/>';
print '<a href="c.php?id='.$id.'&amp;lg='.$lg.'&amp;p='.$p.'&amp;room='.$room.'">'.$lang['back_into_chat'].'</a>';



if($version=='html')
{
echo'</div><div class="b">';
include'includes/gzip_foot.php';
include'includes/traffic.php';
echo"$cmp(всего $_SESSION[traffic] kb, сэкономлено ".($_SESSION[traffic2]-$_SESSION[traffic])." kb)<br/>";
list($msec,$sec)=explode(chr(32),microtime());
print round(($sec+$msec)-$HeadTime,4)." sec.";
echo'</body></html>';
} 
else 
{
echo'<br/>';
list($msec,$sec)=explode(chr(32),microtime());
print round(($sec+$msec)-$HeadTime,4)." sec.";
print "</small></p></card></wml>";
}


mysql_close();	
?>