View file www/top.php

<?php
$us=$_GET['id'];
$ps=$_GET['ps'];
$room=htmlspecialchars(mysql_escape_string($_GET['room']));
$id_ml=intval($_GET['id_ml']);

$us=mysql_escape_string(htmlspecialchars(trim($us)));
$ps=mysql_escape_string(htmlspecialchars(trim($ps)));
include("ini.php");
$login = autorize();
if($login) {
@mysql_query("update `c_users` set `ltime`='".time()."', `room`='prih', `nev`='0' where `id`='".$id."';");
if(empty($tyu))$tyu="left";
if(empty($title))$title="Сменить топик";
if($room){
$query_settings = @mysql_query("select * from `c_komnota` where room='$room';");
$settings = @mysql_fetch_array($query_settings);
if(empty($settings['id'])){header("Location:enter.php?f=$f&id=$id&ps=$ps"); }
if(($post_chat_us>=3000)or($liven_us>3)){
$id_ml=$settings['id'];

$act=bug($_POST['act']);

if(empty($act)){
if($f=="h"){
$body=$body."<form action=\"".$_SERVER['PHP_SELF']."?f=$f&amp;id=$id&amp;ps=$ps&amp;room=$room&amp;id_ml=$id_ml\" method=\"post\">
".$divN."
Топик:<br/>
<input name=\"topic\" maxlength=\"150\" size=\"17\" value=\"".$settings['topik']."\"/><br/>
<br />
<input type=\"hidden\" name=\"refresh\" value=\"1\"/>
<input type=\"hidden\" name=\"act\" value=\"abb\"/>
<input class=\"ibutton\" type=\"submit\" value=\"Далее\"/>$divK</form>";
}else{
$body=$body."".$divN."
Топик:<br/>
<input name=\"topic$ref\" maxlength=\"150\" size=\"17\" value=\"".$settings['topik']."\"/><br/>
<br />
<anchor>Далее<go href=\"".$_SERVER['PHP_SELF']."?f=$f&amp;id=$id&amp;ps=$ps&amp;room=$room&amp;id_ml=$id_ml\" method=\"post\">
<postfield name=\"topic\" value=\"$(topic$ref)\"/>
<postfield name=\"refresh\" value=\"2\"/>
<postfield name=\"act\" value=\"act\"/>
</go></anchor><br/><br />";
}
}else{
$topic=bug($_POST['topic']);
if(empty($topic)) $error=$error.'Отсутствует топик!<br/>';
if(empty($error))
{
@mysql_query("update `c_komnota` set topik='".$topic."' WHERE `id`='".intval($id_ml)."';");
if($liven_us<=4)@mysql_query("update `c_users` set post_chat='".($post_chat_us-300)."' WHERE `id` = '".$id."' AND `pass`='".$pss."';");
header("Location:room.php?f=$f&id=$id&ps=$ps&room=$room");
echo 'ok';
}else{
$body=$body."$error";
}
}
////////////////////////////////////////////////////////////////переходы формата//////////////////////////////
/*
if($f=="h"){
$body=$body."$div2 [xHTML|<a href=\"".$_SERVER['PHP_SELF']."?f=w&amp;id=$id&amp;ps=$ps&amp;room=$room\">WML</a>]".$divK.$divK."";
}else{
$body=$body."$div2 [<a href=\"".$_SERVER['PHP_SELF']."?f=h&amp;id=$id&amp;ps=$ps&amp;room=$room\">xHTML</a>|WML]".$divK.$divK."";
}
*/
/////////////////////////////////////////////оболочка////////////////////////////////////////
include("temp/obolocka.php");
}else{
header("Location:room.php?f=$f&id=$id&ps=$ps&room=$room");
}
}else{
header("Location:enter.php?f=$f&id=$id&ps=$ps");}
}else{
header("Location:./?f=$f");
}
?>