View file super2/apanel.php

World Fastest and Cheapest Hosting
Buy Cheapest Web Domains
File size: 48.74Kb 
<?php
require 'connect.php';
require 'header.php';
require 'result.php';

if($row['level'] < 7)
{
print $top.'
<card id="error" title="Error">
<p align="center">
У вас нет прав доступа!
</p>
</card>
</wml>';
mysql_close();
exit;
}

$us = $row['user'];
$login = $row['user'];

if($row['fsize'] == 'small')
{
$fsize1 = '<small>';
$fsize2 = '</small>';
}
elseif($row['fsize'] == 'big')
{
$fsize1 = '<big>';
$fsize2 = '</big>';
}
else
{
$fsize1 = null;
$fsize2 = null;
}

$fi = fopen('syst/admlog.dat', 'a');
fputs($fi, $us.' visited apanel '.gmdate('j F H:i', time() + $correct_time).', his ip: '.$_SERVER['REMOTE_ADDR'].', user agent: '.$_SERVER['HTTP_USER_AGENT']."\n************\n");
fclose($fi);

$levels0 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level=0 LIMIT 1'));
$lev0 = $levels0['name'];

$levels1 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level=1 LIMIT 1'));
$lev1 = $levels1['name'];

$levels2 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level=2 LIMIT 1'));
$lev2 = $levels2['name'];

$levels3 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level=3 LIMIT 1'));
$lev3 = $levels3['name'];

$levels4 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level=4 LIMIT 1'));
$lev4 = $levels4['name'];

$levels5 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level=5 LIMIT 1'));
$lev5 = $levels5['name'];

$levels6 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level=6 LIMIT 1'));
$lev6 = $levels6['name'];

$levels7 = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `levels` WHERE level>6 LIMIT 1'));
$lev7 = $levels7['name'];

ob_start();

print $top.'
<head><meta http-equiv="Cache-Control" content="no-cache" forua="true"/></head>
<card id="apanel" title="aPanel">
<p>';

////////////////////////////////////////////////////////////////////////////////////////////////
$time = gmdate('H:i', time() + $correct_time);

switch($_GET['go'])
{
default:
print $fsize1.'<strong>[System]</strong>('.$time.')&gt;привет, '.$us.' =)<br/><br/>
Ник Юзверя<br/>
'.$fsize2.'
<input name="nick'.$ref.'" type="text" emptyok="true"/><br/>
'.$fsize1.'
<a href="apanel.php?go=view&amp;id='.$id.'&amp;ps='.$ps.'&amp;nick=$(nick'.$ref.')">Изменить</a><br/>
---<br/>
<strong>Пинок</strong><br/>
На Сколько (мин)<br/>
'.$fsize2.'
<input name="wtime'.$ref.'" format="3N" emptyok="true" type="text"/><br/>
'.$fsize1.'
Причина<br/>
'.$fsize2.'
<input name="whykik'.$ref.'" maxlength="200" type="text" emptyok="true"/><br/>
'.$fsize1.'
<anchor>Пнуть
<go href="kick.php?go=1&amp;id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="nick" value="$(nick'.$ref.')"/>
<postfield name="wtime" value="$(wtime'.$ref.')"/>
<postfield name="whykik" value="$(whykik'.$ref.')"/>
</go></anchor><br/>
<anchor>Забанить Ник
<go href="bann.php?id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="nick" value="$(nick'.$ref.')"/>
</go></anchor>
<br/>
<anchor>Забанить IP+SOFT
<go href="bannaip.php?id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="nick" value="$(nick'.$ref.')"/>
</go></anchor>
<br/>
<anchor>Удалить Юзверя
<go href="deluser.php?id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="nick" value="$(nick'.$ref.')"/>
</go></anchor><br/>
---<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=editrooms&amp;ref='.$ref.'">Изменить Комнаты</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=editlevels&amp;ref='.$ref.'">Изменить Статусы</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=bots&amp;ref='.$ref.'">Настройка Ботов</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=addanek&amp;ref='.$ref.'">Добавить Анекдот</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=addvopr&amp;ref='.$ref.'">Добавить Вопрос</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=optimize&amp;ref='.$ref.'">Оптимизация</a><br/>
---<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=fullign&amp;ref='.$ref.'">Удалить Всех Из ПИ</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=unpin&amp;ref='.$ref.'">Снять Пинок</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=unban&amp;ref='.$ref.'">Разбанить Ники</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clbanip&amp;ref='.$ref.'">Разбанить IP+SOFT</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clzap&amp;ref='.$ref.'">Чистка Записок</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clroom&amp;ref='.$ref.'">Чистка Комнат</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clusers&amp;ref='.$ref.'">Чистка Юзверей</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clearlogs&amp;ref='.$ref.'">Чистка Логов</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=log&amp;ref='.$ref.'">Логи</a> ('.round((filesize('syst/log.dat')+filesize('syst/intim.dat'))/1024,1).' kb)<br/>
---<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=tell&amp;ref='.$ref.'">Обьявление в Чат</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=mnews&amp;ref='.$ref.'">Добавить Новость</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=dnews&amp;ref='.$ref.'">Удалить Новость</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=mmeet&amp;ref='.$ref.'">Добавить Встречу</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=dmeet&amp;ref='.$ref.'">Удалить Встречу</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=mobi&amp;ref='.$ref.'">Добавить Обьявление</a><br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=dobi&amp;ref='.$ref.'">Удалить Обьявление</a><br/>
'.$fsize2;
break;

case 'log':
$f = array_reverse(file('syst/log.dat'));

foreach($f as $var)
{print $var.'<br/>';}
break;

case 'mnews':
$content = check($_POST['content']);
$date = gmdate('j.m.Y', time() + $correct_time);
if(empty($content)) $error=$error.'<u>Пустое содержание встречи!</u><br/>';
if(empty($_POST['action']))
{
print $fsize1;
print 'Новость:<br/>';
print $fsize2;
print '<input name="content"/><br/>';
print $fsize1;
print '<anchor>Добавить<go href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=mnews" method="post">
<postfield name="action" value="add"/>
<postfield name="content" value="$(content)"/>
<postfield name="date" value="'.$date.'"/>
</go></anchor>';
print $fsize2;
print '<br/>';
}
else
{
if(empty($error))
{
if($content != $last_news['content'])
{
if(mysql_query("insert into news values(0,'$login','$content','$date');"))
{
print $fsize1;
print '<strong>Ваша новость успешно добавлена!</strong><br/>';
}
else
{
print $fsize1;
print '<strong>Ошибка записи новости!</strong><br/>';
print $fsize2;
}
}
else
{
print $fsize1;
print '<strong>Такая новость уже добавлена!</strong><br/>';
}
print $fsize2;
}
else
{
print $fsize1;
print $error;
print $fsize2;
}
}
break;

case 'dnews':
$q = mysql_query('select id,content from news order by id desc;');
if(mysql_affected_rows() == 0)
{
print $fsize1;
print 'Новостей нет!<br/>';
print $fsize2;
}
else
{
if(empty($_GET['action']))
{
while($arr=mysql_fetch_assoc($q))
{
print $fsize1;
print '<a href="apanel.php?action=del&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=dnews&amp;mid='.$arr['id'].'">'.$arr['id'].'</a>: '.$arr['content'].'<br/>';
print $fsize2;
}
}
else
{
$mid = intval($_GET['mid']);
if(mysql_query('delete from news where id='.$mid.' limit 1;'))
{
print $fsize1;
print '<strong>Запись успешно удалена!</strong><br/>';
print $fsize2;
}
}
}
break;

case 'mmeet':
$title = check($_POST['title']);
$content = check($_POST['content']);
$organizatory = check($_POST['organizatory']);
if(empty($title)) $error=$error.'<u>Название не введено!</u><br/>';
if(empty($content)) $error=$error.'<u>Пустое содержание встречи!</u><br/>';
if(empty($organizatory)) $error=$error.'<u>Организаторов нет!</u><br/>';
if(empty($_POST['action']))
{
print $fsize1;
print 'Название:<br/>';
print $fsize2;
print '<input type="text" name="title"/><br/>';
print $fsize1;
print 'Содержание:<br/>';
print $fsize2;
print '<input type="text" name="content"/><br/>';
print $fsize1;
print 'Организаторы:<br/>';
print $fsize2;
print '<input type="text" name="organizatory"/><br/>';
print $fsize1;
print '<anchor>Добавить<go href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=mmeet" method="post">
<postfield name="action" value="add"/>
<postfield name="title" value="$(title)"/>
<postfield name="content" value="$(content)"/>
<postfield name="organizatory" value="$(organizatory)"/>
</go></anchor>';
print $fsize2;
print '<br/>';
}
else
{
if(empty($error))
{
if($title != $last_meet['title'])
{
if(mysql_query("insert into vstrechi values(0,'$login','$title','$content','$organizatory');"))
{
print $fsize1;
print '<strong>Ваша встреча успешно добавлена!</strong><br/>';
print $fsize2;
} else {
print $fsize1;
print '<strong>Проблемы с базой данных!</strong><br/>';
print $fsize2;
}
} else {
print $fsize1;
print '<strong>Такая встреча уже добавлена!</strong><br/>';
print $fsize2;
}
} else {
print $fsize1;
print $error;
print $fsize2;
}
}
break;

case 'dmeet':
$q = mysql_query('select id,title from vstrechi order by id desc;');
if (mysql_affected_rows() == 0)
{
print $fsize1;
print 'Встреч нет!<br/>';
print $fsize2;
}
else
{
if(empty($_GET['action']))
{
while($arr=mysql_fetch_assoc($q))
{
print $fsize1;
print '<a href="apanel.php?action=del&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=dmeet&amp;mid='.$arr['id'].'">'.$arr['title'].'</a><br/>';
print $fsize2;
}
}
else
{
$mid = intval($_GET['mid']);
if(mysql_query('delete from vstrechi where id='.$mid.' limit 1;'))
{
print $fsize1;
print '<strong>Запись успешно удалена!</strong><br/>';
print $fsize2;
}
}
}
break;

case 'mobi':
$title = check($_POST['title']);
$content = check($_POST['content']);
if(empty($title)) $error=$error.'<u>Название не введено!</u><br/>';
if(empty($content)) $error=$error.'<u>Пустое содержание встречи!</u><br/>';
if(empty($_POST['action']))
{
print $fsize1;
print 'Название:<br/>';
print $fsize2;
print '<input name="title"/><br/>';
print $fsize1;
print 'Содержание:<br/>';
print $fsize2;
print '<input name="content"/><br/>';
print $fsize1;
print '<anchor>Добавить<go href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=mobi" method="post">
<postfield name="action" value="add"/>
<postfield name="title" value="$(title)"/>
<postfield name="content" value="$(content)"/>
</go></anchor>';
print $fsize2;
print '<br/>';
}
else
{
if(empty($error))
{
if($title != $last_obiav['title'])
{
if(mysql_query("insert into obiav values(0,'$login','$title','$content');"))
{
print $fsize1;
print '<strong>&#x412;&#x430;&#x448;&#x435; &#x43E;&#x431;&#x44A;&#x44F;&#x432;&#x43B;&#x435;&#x43D;&#x438;&#x435; &#x443;&#x441;&#x43F;&#x435;&#x448;&#x43D;&#x43E; &#x434;&#x43E;&#x431;&#x430;&#x432;&#x43B;&#x435;&#x43D;&#x43E;!</strong><br/>';
print $fsize2;
} else {
print $fsize1;
print '<strong>Проблемы с базой данных!</strong><br/>';
print $fsize2;
}
} else {
print $fsize1;
print '<strong>&#x422;&#x430;&#x43A;&#x43E;&#x435; &#x43E;&#x431;&#x44A;&#x44F;&#x432;&#x43B;&#x435;&#x43D;&#x438;&#x435; &#x443;&#x436;&#x435; &#x434;&#x43E;&#x431;&#x430;&#x432;&#x43B;&#x435;&#x43D;&#x43E;</strong><br/>';
print $fsize2;
}
}
else
{
print $fsize1;
print $error;
print $fsize2;
}
}
break;

case 'dobi':
$q = mysql_query('select * from obiav order by id desc;');
if (mysql_affected_rows() == 0)
{
print $fsize1;
print 'Объявлений нет!<br/>';
print $fsize2;
}
else
{
if(empty($_GET['action']))
{
while($arr=mysql_fetch_assoc($q))
{
print $fsize1;
print '<a href="apanel.php?action=del&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=dobi&amp;mid='.$arr['id'].'">'.$arr['title'].'</a><br/>';
print $fsize2;
}
}
else
{
$mid = intval($_GET['mid']);
if(mysql_query('delete from obiav where id='.$mid.' limit 1;'))
{
print $fsize1;
print '<strong>&#x41E;&#x431;&#x44A;&#x44F;&#x432;&#x43B;&#x435;&#x43D;&#x438;&#x435; &#x443;&#x441;&#x43F;&#x435;&#x448;&#x43D;&#x43E; &#x443;&#x434;&#x430;&#x43B;&#x435;&#x43D;&#x43E;!</strong><br/>';
print $fsize2;
}
}
}
break;


case 'view':
$nick = check($_GET['nick']);
if($nick=='')$nick=0;

$result = mysql_query("select id,pass,posts,status,level,credits,gposts,mafcredits,byeotv,inv from `antihack_users` where user = '".$nick."'");

if(mysql_affected_rows() == 0)
{
print $fsize1;
print 'Нет такого юзера!<br/>';
print $fsize2;
break;
}
$row = mysql_fetch_assoc($result);
$usid = $row['id'];
print $fsize1;
print 'ID-'.$usid.'<br/>
Ник:<br/>
'.$fsize2.'
<input name="upnick'.$ref.'" value="'.$nick.'"/><br/>
'.$fsize1.'
Пароль:<br/>
'.$fsize2.'
<input name="upass'.$ref.'" value="'.$row['pass'].'"/><br/>
'.$fsize1.'
А постов та:<br/>
'.$fsize2.'
<input name="posts'.$ref.'" value="'.$row['posts'].'"/><br/>
'.$fsize1.'
Игровой счёт:<br/>
'.$fsize2.'
<input name="gposts'.$ref.'" value="'.$row['gposts'].'"/><br/>
'.$fsize1.'
Ответов в викторине:<br/>
'.$fsize2.'
<input name="credits'.$ref.'" value="'.$row['credits'].'"/><br/>
'.$fsize1.'
Купил ответов:<br/>
'.$fsize2.'
<input name="byeotv'.$ref.'" value="'.$row['byeotv'].'"/><br/>
'.$fsize1.'
Кредитов в Мафии:<br/>
'.$fsize2.'
<input name="mafcredits'.$ref.'" value="'.$row['mafcredits'].'"/><br/>
'.$fsize1.'
Статус:<br/>
'.$fsize2.'
<input name="status'.$ref.'" value="'.$row['status'].'"/><br/>
'.$fsize1.'
Невидимость:<br/>
'.$fsize2.'
<select name="inv'.$ref.'">';
if(!$row['inv']){
print '<option value="0">Отключена</option>
<option value="1">Включена</option>';
}
else{
print '<option value="1">Включена</option>
<option value="0">Отключена</option>';
}
print '</select><br/>
'.$fsize1.'
Должность:<br/>
'.$fsize2.'
<select name="level'.$ref.'">';
if($row['level'] == 0)print '<option value="0">'.$lev0.'</option>';
elseif($row['level'] == 1)print '<option value="1">'.$lev1.'</option>';
elseif($row['level'] == 2)print '<option value="2">'.$lev2.'</option>';
elseif($row['level'] == 3)print '<option value="3">'.$lev3.'</option>';
elseif($row['level'] == 4)print '<option value="4">'.$lev4.'</option>';
elseif($row['level'] == 5)print '<option value="5">'.$lev5.'</option>';
elseif($row['level'] == 6)print '<option value="6">'.$lev6.'</option>';
elseif($row['level'] == 7)print '<option value="7">'.$lev7.'</option>';
if ($row['level']!=0) print '<option value="0">'.$lev0.'</option>';
if ($row['level']!=1) print '<option value="1">'.$lev1.'</option>';
if ($row['level']!=2) print '<option value="2">'.$lev2.'</option>';
if ($row['level']!=3) print '<option value="3">'.$lev3.'</option>';
if ($row['level']!=4) print '<option value="4">'.$lev4.'</option>';
if ($row['level']!=5) print '<option value="5">'.$lev5.'</option>';
if ($row['level']!=6) print '<option value="6">'.$lev6.'</option>';
if ($row['level']!=7) print '<option value="7">'.$lev7.'</option>';
print '</select><br/>
'.$fsize1.'
---<br/>
<anchor>
&#x41B;&#x438;&#x447;&#x43D;&#x44B;&#x439; c&#x43C;a&#x439;&#x43B;
<go href="loadsmile.php">
<postfield name="id" value="'.$row['id'].'"/>
<postfield name="ps" value="'.$row['pass'].'"/>
</go></anchor><br/>
<anchor>
&#x424;o&#x442;o
<go href="foto.php">
<postfield name="id" value="'.$row['id'].'"/>
<postfield name="ps" value="'.$row['pass'].'"/>
</go></anchor><br/>
---<br/>
'.$fsize2.'
<anchor>Сохранить
<go href="apanel.php?go=upd&amp;id='.$id.'&amp;ps='.$ps.'" method="post">
<postfield name="upid" value="'.$row['id'].'"/>
<postfield name="upnick" value="$(upnick'.$ref.')"/>
<postfield name="upass" value="$(upass'.$ref.')"/>
<postfield name="posts" value="$(posts'.$ref.')"/>
<postfield name="gposts" value="$(gposts'.$ref.')"/>
<postfield name="credits" value="$(credits'.$ref.')"/>
<postfield name="mafcredits" value="$(mafcredits'.$ref.')"/>
<postfield name="byeotv" value="$(byeotv'.$ref.')"/>
<postfield name="status" value="$(status'.$ref.')"/>
<postfield name="inv" value="$(inv'.$ref.')"/>
<postfield name="level" value="$(level'.$ref.')"/>
</go></anchor>
<br/>';
break;

case 'upd':
$upnick = check($_POST['upnick']);
if(!$upnick)
{
print $fsize1;
print 'error<br/>';
print $fsize2;
break;
}
$upass = check($_POST['upass']);
if(!$upass)
{
print $fsize1;
print 'error<br/>';
print $fsize2;
break;
}
$upid = intval($_POST['upid']);
$b = mysql_fetch_assoc(mysql_query('SELECT `user`,`level` FROM `antihack_users` WHERE id = '.$upid));
$prl = $b['level'];
$nick = $b['user'];

mysql_query("SELECT `id` FROM `antihack_users` WHERE `user` = '".$upnick."'");

if((mysql_affected_rows() != 0) && ($upnick != $nick))
{
print $fsize1;
print 'Пользователь с таким ником уже сушествует<br/>';
print $fsize2;
break;
}
//$status=rus_to_k($status);

$status = check($_POST['status']);
$posts = intval($_POST['posts']);
$gposts = intval($_POST['gposts']);
$credits = intval($_POST['credits']);
$mafcredits = intval($_POST['mafcredits']);
$byeotv = intval($_POST['byeotv']);
$inv = intval($_POST['inv']);
$level = intval($_POST['level']);

if(mysql_query("UPDATE `antihack_users` SET user='".$upnick."', pass='".$upass."', posts=".$posts.",gposts=".$gposts.",credits=".$credits.",mafcredits=".$mafcredits.",byeotv=".$byeotv.", status='".$status."', inv=".$inv.", level=".$level." WHERE id = ".$upid))
{
if($prl != $level)
{
$lv = array($lev0,$lev1,$lev2,$lev3,$lev4,$lev5,$lev6,$lev7);
$ur = $lv[$level];
for($i=0; $i<=9; $i++)
{
$st = time();
$today = gmdate('H:i', time() + $correct_time);
$mes = '<strong>'.$lev7.' '.$us.' присваивает '.$nick.' уровень '.$ur.'</strong>';
$rnd = rand(0,99999999);
mysql_query("INSERT INTO room".$i." SET klu4=".$rnd.", time='".$today."', who='Admin', message='".$mes."', id=".$st.", towhom='', hid=0, usid=1");
}
}


$f = fopen('syst/log.dat','a');
fputs($f,"\n".gmdate('Y.m.d H:i', time() + $correct_time).' '.$us.' изменил данные '.$nick);
fclose($f);


print $fsize1;
print 'Профайл изменен<br/>';
print $fsize2;
}
else
{
print $fsize1;
print 'Database error:<br/>';
print $fsize2;
print mysql_error();
}
break;

case 'addanek':
print $fsize1;
print 'При включенном транслите анекдоты транслитерируются<br/>
Анекдот:<br/>';
print $fsize2;
print '<input name="anek" maxlength="160"/><br/>';
print $fsize1;
print '---<br/>
<anchor>Добавить<go href="apanel.php?go=goaddanek&amp;id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="anek" value="$(anek)"/>
</go></anchor>
<br/>';
print $fsize2;
break;

case 'goaddanek':
if($row['translit']==1)$anek = trun_to_rus($anek);
$anek = $_POST['anek'];
$anek = check($anek);
$r = mysql_query('select MAX((klu4)) as num from anekdot');
$a = mysql_fetch_assoc($r);
$k = $a['num']+1;
mysql_query("Insert into anekdot set klu4=".$k.", message='".$anek."'");
if(mysql_error() == false)
{
print $fsize1;
print 'Анекдот был добавлен в базу<br/>
Всего анекдотов: '.$k.'<br/>';
print $fsize2;
}
else
{
print $fsize1;
print 'Ошибка при записи!<br/>';
print $fsize2;
print 'ERROR '.mysql_error().'<br/>';
}
break;


case 'addvopr':
print $fsize1;
print 'При включенном транслите вопросы и ответы транслитерируются<br/>
Вопрос:<br/>';
print $fsize2;
print '<input name="vopros" maxlength="160"/><br/>';
print $fsize1;
print 'Ответ:<br/>';
print $fsize2;
print '<input name="answ" maxlength="60"/><br/>';
print $fsize1;
print '<anchor>Добавить<go href="apanel.php?go=goaddvopr&amp;id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="vopros" value="$(vopros)"/>
<postfield name="answ" value="$(answ)"/>
</go></anchor>
<br/>';
print $fsize2;
break;


case 'goaddvopr':
$vopros = check($_POST['vopros']);
$answ = check($_POST['answ']);
if($row['translit']==1)
{
$vopros = trun_to_rus($vopros);
$answ = trun_to_rus($answ);
}
$tran=strtr($answ,array('а'=>'a','б'=>'b','в'=>'v','г'=>'g','д'=>'d','е'=>'e','ё'=>'e','ж'=>'j','з'=>'z','и'=>'i','й'=>'i','к'=>'k','л'=>'l','м'=>'m','н'=>'n','о'=>'o','п'=>'p','р'=>'r','с'=>'s','т'=>'t','у'=>'u','ф'=>'f','х'=>'h','ш'=>'w','щ'=>'w','ц'=>'c','ч'=>'4','ь'=>'.','ъ'=>'.','ы'=>'y','э'=>'e','ю'=>'yu','я'=>'ya','А'=>'A','Б'=>'B','В'=>'V','Г'=>'G','Д'=>'D','Е'=>'E','Ё'=>'E','Ж'=>'J','З'=>'Z','И'=>'I','Й'=>'I','К'=>'K','Л'=>'L','М'=>'M','Н'=>'N','О'=>'O','П'=>'P','Р'=>'R','С'=>'S','Т'=>'T','У'=>'U','Ф'=>'F','Х'=>'H','Ш'=>'W','Щ'=>'W','Ц'=>'C','Ч'=>'4','Ь'=>'.','Ъ'=>'.','Ы'=>'Y','Э'=>'E','Ю'=>'Yu','Я'=>'Ya'));
@mysql_query('SELECT * FROM `questions`');
$k = mysql_affected_rows()+1;
mysql_query("INSERT INTO `questions` SET number=".$k.", vopros='".$vopros."', answer='".$answ."',  tran='".$tran."'");
if (mysql_error() == false)
{
print $fsize1;
print 'Вопрос был добавлен в базу<br/>
Всего вопросов: '.$k.'<br/>';
print $fsize2;
}
else
{
print $fsize1;
print 'Ошибка при записи!<br/>';
print $fsize2;
print 'ERROR '.mysql_error().'<br/>';
}
break;


case 'tell':
print $fsize1;
print 'Текст:<br/>';
print $fsize2;
print '<input name="txt" maxlength="255"/><br/>';
print $fsize1;
print '<anchor>Ok<go href="apanel.php?go=gotell&amp;id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="txt" value="$(txt)"/>
</go></anchor>
<br/>';
print $fsize2;
break;


case 'gotell':
$txt = check($_POST['txt']);
if ($row['translit']==1)$txt = trun_to_rus($txt);
$rnd = rand(0,99999999);
$today = gmdate('H:i', time() + $correct_time);
$time = time();
for($num = 0; $num <= 20; $num++)
{
$room = 'room'.$num;
$txt = '<strong>'.$txt.'</strong>';
mysql_query("Insert into ".$room." set klu4=".$rnd.", time='".$today."', who='".$us."', message='".$txt."', id='".$time."', towhom='', hid=0, usid=".$id);
}
if(mysql_error() == false)
{
print $fsize1;
print 'Объявление сделано<br/>';
print $fsize2;
}
else
{
print $fsize1;
print 'Ошибка при записи!<br/>';
print $fsize2;
print 'ERROR '.mysql_error().'<br/>';
}
break;


case 'fullign':
$r = mysql_query('SELECT * from `antihack_users` WHERE inv = 2');
$a = mysql_fetch_assoc($r);
while($a !== false)
{
$pid = $a['id'];
mysql_query('UPDATE `antihack_users` set inv = 0 WHERE id = '.$pid);
$a = mysql_fetch_assoc($r);
}
print $fsize1;
print 'Пи снят со всех пользователей!<br/>';
print $fsize2;
break;


case 'clzap':
print $fsize1;

if(!$_GET['num'])
{
print 'Удалить записки, давностью более<br/>
'.$fsize2.'
<input name="num" format="*N" size="4" value="10"/>
'.$fsize1.'
дней<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clzap&amp;num=$(num)">Удалить</a><br/>';
}
else
{
$num = intval($_GET['num']);
if($num)
{
$time = time() - ($num*86400);

if(mysql_query('DELETE FROM `zapiski` WHERE time < '.$time))
{print 'Записки старше '.$num.' дней удалены!<br/>';}
else
{print 'Ошибка при удалении записок<br/>';}
}
else
{print 'Введите количество дней<br/>';}
}
print $fsize2;
break;

case 'clbanip':
$q = mysql_query('SELECT `klu4`,`ip`,`soft`,`user` FROM `bannlist` ORDER BY `klu4` DESC;');
if(empty($_GET['act']))
{
while($arr=mysql_fetch_assoc($q))
{
print $fsize1;
print '<a href="apanel.php?act=cl&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=clbanip&amp;nk='.$arr['klu4'].'">'.$arr['ip'].' '.$arr['soft'].'</a> '.$arr['user'].'<br/>
---<br/>';
print $fsize2;
}
if(mysql_affected_rows() != 0)
{
print $fsize1;
print '<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clbanip&amp;ref='.$ref.'&amp;act=unbannall">&#x0420;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x0438;&#x0442;&#x044C; &#x0432;&#x0441;&#x0435; IP+SOFT</a><br/>';
print $fsize2;
}
else
{
print $fsize1;
print '&#x041D;&#x0435;&#x0442; &#x0417;&#x0430;&#x0431;&#x0430;&#x043D;&#x043D;&#x0435;&#x043D;&#x044B;&#x0445; &#x043F;&#x043E; IP+SOFT!<br/>';
print $fsize2;
}
}
elseif($_GET['act'] == 'unbannall')
{
mysql_query('DELETE FROM `bannlist`');
print $fsize1;
print 'Таблица банов по IP+SOFT очищена<br/>';
print $fsize2;
}
else
{
$nk = intval($_GET['nk']);
if(mysql_query('DELETE FROM `bannlist` WHERE klu4='.$nk))
{
print $fsize1;
print 'IP+SOFT &#x0443;&#x0441;&#x043F;&#x0435;&#x0448;&#x043D;&#x043E; &#x0440;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x043D;&#x0435;&#x043D;&#x044B;!<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clbanip">&#x0420;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x0438;&#x0442;&#x044C; &#x0435;&#x0449;&#x0451;</a><br/>';
print $fsize2;
}
}
break;



case 'clroom':
print $fsize1;
print 'Таблицы комнат очищены!<br/>';
print $fsize2;
if(isset($_GET['rm']))
{
print $fsize1;
print '<a href="chat.php?id='.$id.'&amp;ps='.$ps.'&amp;rm='.$rm.'&amp;ref='.$ref.'">В чат</a><br/>';
print $fsize2;
}

for($num=0; $num<=20; $num++)
{mysql_query('TRUNCATE TABLE `room'.$num.'`');}
mysql_query('TRUNCATE TABLE `maf1`');


$f = fopen('syst/log.dat', 'a');
fputs($f, "\n".gmdate('Y.m.d H:i', time() + $correct_time).' '.$us.' очистил комнаты');
fclose($f);
break;





case 'clusers':
print $fsize1;
if(!$_GET['num'])
{
print 'Удалить юзверей, которые не появлялись более<br/>
'.$fsize2.'
<input name="num" format="*N" size="4" value="50"/>
'.$fsize1.'
дней<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clusers&amp;num=$(num)">Удалить</a><br/>';
}
else
{
$num = intval($_GET['num']);
if($num)
{
$time = time() - ($num*86400);
if(mysql_query('DELETE FROM `antihack_users` WHERE id > 10 AND `onl` < '.$time))
{
print 'Юзвери которые не появлялись более '.$num.' дней удалены!<br/>';

$f = fopen('syst/log.dat', 'a');
fputs($f, "\n".gmdate('Y.m.d H:i', time() + $correct_time).' '.$us.' удалил пользователей которые не были в чате более '.$num.' дней');
fclose($f);
}
else
{print 'Ошибка при удалении юзверей<br/>';}
}
else
{print 'Введите количество дней<br/>';}
}
print $fsize2;
break;



case 'optimize':
if(mysql_query('OPTIMIZE TABLE `anekdot`, `bannlist`, `bomj`, `questions`, `doktor`, `golos`, `help`, `ingame1`, `komissar`,`levels`, `maf1`, `mafaction1`, `mafia`, `maniac`, `news`, `obiav`, `optim`, `room0`, `room1`, `room2`, `room3`, `room4`, `room5`, `room6`, `room7`, `room8`, `room9`, `room10`, `room11`, `room12`, `room13`, `room14`, `room15`, `room16`, `room17`, `room18`, `room19`, `room20`, `rooms`, `scores1`, `setting`, `antihack_users`, `vopros`, `vstrechi`, `zapiski`') && mysql_query('ANALYZE TABLE `anekdot`, `bannlist`, `bomj`, `questions`, `doktor`, `golos`, `help`, `ingame1`, `komissar`,`levels`, `maf1`, `mafaction1`, `mafia`, `maniac`, `news`, `obiav`, `optim`, `room0`, `room1`, `room2`, `room3`, `room4`, `room5`, `room6`, `room7`, `room8`, `room9`, `room10`, `room11`, `room12`, `room13`, `room14`, `room15`, `room16`, `room17`, `room18`, `room19`, `room20`, `rooms`, `scores1`, `setting`, `antihack_users`, `vopros`, `vstrechi`, `zapiski`'))
{print $fsize1.'Таблицы Оптимизированы!<br/>'.$fsize2;}
else
{print $fsize1.'Ошибка При Оптимизации!<br/>'.$fsize2;}
break;


case 'fullignmake':
$nk = intval($_GET['nk']);
$inf = mysql_fetch_assoc(mysql_query('SELECT * FROM `antihack_users` WHERE id='.$nk));
$level = $inf['level'];
$fignik = $inf['user'];
$figid = $inf['id'];
if($level == 7)
{
print $fsize1;
print 'Админа нельзя добавить в ПИ!<br/>';
print $fsize2;
break;
}

$f = fopen('syst/log.dat', 'a');
fputs($f, "\n".gmdate('Y.m.d H:i', time() + $correct_time).' '.$us.' добавил '.$fignik.' в полный игнор');
fclose($f);

mysql_query('UPDATE `antihack_users` SET inv = 2 WHERE id = '.$figid);
print $fsize1;
print $fignik.' в игноре для всех!<br/>';
print $fsize2;
break;

case 'clbanniks':
mysql_query('UPDATE `antihack_users` SET `banned`=0 WHERE `banned`=1');
print $fsize1;
print '&#x0412;&#x0441;&#x0435; &#x043D;&#x0438;&#x043A;&#x0438; &#x0443;&#x0441;&#x043F;&#x0435;&#x0448;&#x043D;&#x043E; &#x0440;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x0435;&#x043D;&#x044B;!<br/>';
print $fsize2;
break;

case 'clearlogs':
$fp=fopen('syst/log.dat', 'w');
fclose($fp);
$fp=fopen('syst/intim.dat', 'w');
fclose($fp);

print $fsize1;
print '&#x0412;&#x0441;&#x0435; &#x041B;&#x041E;&#x0413;-&#x0444;&#x0430;&#x0439;&#x043B;&#x044B; &#x0443;&#x0441;&#x043F;&#x0435;&#x0448;&#x043D;&#x043E; &#x043E;&#x0447;&#x0438;&#x0449;&#x0435;&#x043D;&#x044B;!<br/>';
print $fsize2;
break;

case 'unban':
$q = mysql_query('SELECT `id`,`user` FROM `antihack_users` WHERE `banned`=1 ORDER BY `id` DESC;');
if(empty($_GET['act']))
{
while($arr=mysql_fetch_assoc($q))
{
print $fsize1;
print '<a href="apanel.php?act=unbann&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=unban&amp;nk='.$arr['id'].'">'.$arr['user'].'</a><br/>';
print $fsize2;
}
if(mysql_affected_rows() != 0)
{
print $fsize1;
print '---<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clbanniks&amp;ref='.$ref.'">&#x0420;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x0438;&#x0442;&#x044C; &#x0432;&#x0441;&#x0435; &#x043D;&#x0438;&#x043A;&#x0438;</a><br/>';
print $fsize2;
}
else
{
print $fsize1;
print '&#x041D;&#x0435;&#x0442; &#x0417;&#x0430;&#x0431;&#x0430;&#x043D;&#x043D;&#x0435;&#x043D;&#x044B;&#x0445; &#x041D;&#x0438;&#x043A;&#x043E;&#x0432;!<br/>';
print $fsize2;
}
}
else
{
$nk = intval($_GET['nk']);
if(mysql_query('UPDATE `antihack_users` SET `banned`=0 WHERE `id`='.$nk))
{
print $fsize1;
print '&#x041D;&#x0438;&#x043A; &#x0440;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x043D;&#x0435;&#x043D;!<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=unban">&#x0420;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x0438;&#x0442;&#x044C; &#x0435;&#x0449;&#x0451;</a><br/>';
print $fsize2;
}
}
break;

case 'clbanip':
$q = mysql_query('select klu4,ip,soft from bannlist order by klu4 desc;');
if(empty($_GET['act']))
{
while($arr=mysql_fetch_assoc($q))
{
print $fsize1;
print '<a href="apanel.php?act=cl&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=clbanip&amp;nk='.$arr['klu4'].'">'.$arr['ip'].' '.$arr['soft'].'</a><br/>
---<br/>';
print $fsize2;
}
if(mysql_affected_rows() != 0)
{
print $fsize1;
print '<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clbanip&amp;ref='.$ref.'&amp;act=unbannall">&#x0420;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x0438;&#x0442;&#x044C; &#x0432;&#x0441;&#x0435; IP+SOFT</a><br/>';
print $fsize2;
}
else
{
print $fsize1;
print '&#x041D;&#x0435;&#x0442; &#x0417;&#x0430;&#x0431;&#x0430;&#x043D;&#x043D;&#x0435;&#x043D;&#x044B;&#x0445; &#x043F;&#x043E; IP+SOFT!<br/>';
print $fsize2;
}
}
elseif($_GET['act']=='unbannall')
{
mysql_query('DELETE from bannlist');
print $fsize1;
print 'Таблица банов по ip+soft очищена<br/>';
print $fsize2;
}
else
{
$nk = intval($_GET['nk']);
if(mysql_query('delete from bannlist where klu4='.$nk))
{
print $fsize1;
print 'IP+SOFT &#x0443;&#x0441;&#x043F;&#x0435;&#x0448;&#x043D;&#x043E; &#x0440;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x043D;&#x0435;&#x043D;&#x044B;!<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=clbanip">&#x0420;&#x0430;&#x0437;&#x0431;&#x0430;&#x043D;&#x0438;&#x0442;&#x044C; &#x0435;&#x0449;&#x0451;</a><br/>';
print $fsize2;
}
}
break;



case 'unpin':
$q = mysql_query('SELECT `user`,`id`,`kik`,`whokik`,`whykik` FROM `antihack_users` WHERE `kik` ORDER BY `visit` DESC');
if(empty($_GET['act']))
{
while($arr=mysql_fetch_assoc($q))
{
print $fsize1;
print '<a href="apanel.php?act=x&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=unpin&amp;nk='.$arr['id'].'">'.$arr['user'].'</a> ('.$arr['whokik'].', причина: '.$arr['whykik'].', когда: '.gmdate('d/m/Y H:i',$arr['kik']+$correct_time).')<br/>';
print $fsize2;
}
if(mysql_affected_rows() == 0)
{
print $fsize1;
print 'Выпнутых юзеров нет<br/>';
print $fsize2;
}
}
else
{
$nk = intval($_GET['nk']);
mysql_query('UPDATE `antihack_users` SET kik=null,whokik=null,whykik=null WHERE id = '.$nk);
print $fsize1;
print 'Ок<br/>';
print $fsize2;
}
break;




case 'editrooms':
$q = mysql_query('SELECT rm,name,hidden FROM `rooms`');
if(empty($_GET['act']))
{
$i = 0;
while($arr=mysql_fetch_assoc($q))
{
print $fsize1.'
<a href="apanel.php?act=rnm&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=editrooms&amp;rm='.$arr['rm'].'">'.$arr['rm'].'. '.$arr['name'].'</a>
'.$fsize2.'
<select name="hidden'.($i++).'" value="'.$arr['hidden'].'">
<option value="0">Показывать</option>
<option value="1">Скрывать</option>
</select>
<br/>';
}

print '---<br/>
<anchor>Изменить
<go href="apanel.php?act=skoka&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=editrooms" method="post">
<postfield name="hidden0" value="$(hidden0)"/>
<postfield name="hidden1" value="$(hidden1)"/>
<postfield name="hidden2" value="$(hidden2)"/>
<postfield name="hidden3" value="$(hidden3)"/>
<postfield name="hidden4" value="$(hidden4)"/>
<postfield name="hidden5" value="$(hidden5)"/>
<postfield name="hidden6" value="$(hidden6)"/>
<postfield name="hidden7" value="$(hidden7)"/>
<postfield name="hidden8" value="$(hidden8)"/>
<postfield name="hidden9" value="$(hidden9)"/>
<postfield name="hidden10" value="$(hidden10)"/>
<postfield name="hidden11" value="$(hidden11)"/>
<postfield name="hidden12" value="$(hidden12)"/>
<postfield name="hidden13" value="$(hidden13)"/>
<postfield name="hidden14" value="$(hidden14)"/>
<postfield name="hidden15" value="$(hidden15)"/>
<postfield name="hidden16" value="$(hidden16)"/>
<postfield name="hidden17" value="$(hidden17)"/>
<postfield name="hidden18" value="$(hidden18)"/>
<postfield name="hidden19" value="$(hidden19)"/>
<postfield name="hidden20" value="$(hidden20)"/>
<postfield name="hidden21" value="$(hidden21)"/>
</go></anchor><br/>';
}
elseif($_GET['act']=='dornm')
{
$rm = intval($_GET['rm']);
$roomname = check($_POST['roomname']);

mysql_query("UPDATE `rooms` SET name='".$roomname."' WHERE rm=".$rm);
print $fsize1;
print '&#x041A;&#x043E;&#x043C;&#x043D;&#x0430;&#x0442;&#x0430; &#x0443;&#x0441;&#x043F;&#x0435;&#x0448;&#x043D;&#x043E; &#x043F;&#x0435;&#x0440;&#x0435;&#x0438;&#x043C;&#x0435;&#x043D;&#x043E;&#x0432;&#x0430;&#x043D;&#x043D;&#x0430;!<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=editrooms">&#x0420;&#x0435;&#x0434;&#x0430;&#x043A;&#x0442;&#x0438;&#x0440;&#x043E;&#x0432;&#x0430;&#x0442;&#x044C; &#x043A;&#x043E;&#x043C;&#x043D;&#x0430;&#x0442;&#x044B;</a><br/>';
print $fsize2;

$f = fopen('syst/log.dat', 'a');
fputs($f, "\n".gmdate('Y.m.d H:i', time() + $correct_time).' '.$us.' изменил комнаты');
fclose($f);
}
elseif($_GET['act']=='skoka')
{
$hidden0 = intval($_POST['hidden0']);
$hidden1 = intval($_POST['hidden1']);
$hidden2 = intval($_POST['hidden2']);
$hidden3 = intval($_POST['hidden3']);
$hidden4 = intval($_POST['hidden4']);
$hidden5 = intval($_POST['hidden5']);
$hidden6 = intval($_POST['hidden6']);
$hidden7 = intval($_POST['hidden7']);
$hidden8 = intval($_POST['hidden8']);
$hidden9 = intval($_POST['hidden9']);
$hidden10 = intval($_POST['hidden10']);
$hidden11 = intval($_POST['hidden11']);
$hidden12 = intval($_POST['hidden12']);
$hidden13 = intval($_POST['hidden13']);
$hidden14 = intval($_POST['hidden14']);
$hidden15 = intval($_POST['hidden15']);
$hidden16 = intval($_POST['hidden16']);
$hidden17 = intval($_POST['hidden17']);
$hidden18 = intval($_POST['hidden18']);
$hidden19 = intval($_POST['hidden19']);
$hidden20 = intval($_POST['hidden20']);
$hidden21 = intval($_POST['hidden21']);


mysql_query("UPDATE `rooms` SET hidden='$hidden0' WHERE rm=0");
mysql_query("UPDATE `rooms` SET hidden='$hidden1' WHERE rm=1");
mysql_query("UPDATE `rooms` SET hidden='$hidden2' WHERE rm=2");
mysql_query("UPDATE `rooms` SET hidden='$hidden3' WHERE rm=3");
mysql_query("UPDATE `rooms` SET hidden='$hidden4' WHERE rm=4");
mysql_query("UPDATE `rooms` SET hidden='$hidden5' WHERE rm=5");
mysql_query("UPDATE `rooms` SET hidden='$hidden6' WHERE rm=6");
mysql_query("UPDATE `rooms` SET hidden='$hidden7' WHERE rm=7");
mysql_query("UPDATE `rooms` SET hidden='$hidden8' WHERE rm=8");
mysql_query("UPDATE `rooms` SET hidden='$hidden9' WHERE rm=9");
mysql_query("UPDATE `rooms` SET hidden='$hidden10' WHERE rm=10");
mysql_query("UPDATE `rooms` SET hidden='$hidden11' WHERE rm=11");
mysql_query("UPDATE `rooms` SET hidden='$hidden12' WHERE rm=12");
mysql_query("UPDATE `rooms` SET hidden='$hidden13' WHERE rm=13");
mysql_query("UPDATE `rooms` SET hidden='$hidden14' WHERE rm=14");
mysql_query("UPDATE `rooms` SET hidden='$hidden15' WHERE rm=15");
mysql_query("UPDATE `rooms` SET hidden='$hidden16' WHERE rm=16");
mysql_query("UPDATE `rooms` SET hidden='$hidden17' WHERE rm=17");
mysql_query("UPDATE `rooms` SET hidden='$hidden18' WHERE rm=18");
mysql_query("UPDATE `rooms` SET hidden='$hidden19' WHERE rm=19");
mysql_query("UPDATE `rooms` SET hidden='$hidden20' WHERE rm=20");
mysql_query("UPDATE `rooms` SET hidden='$hidden21' WHERE rm=21");

print $fsize1.'Hac&#x442;po&#x439;&#x43A;&#x438; &#x438;&#x437;&#x43C;e&#x43D;e&#x43D;&#x44B;!<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=editrooms">&#x0420;&#x0435;&#x0434;&#x0430;&#x043A;&#x0442;&#x0438;&#x0440;&#x043E;&#x0432;&#x0430;&#x0442;&#x044C; &#x043A;&#x043E;&#x043C;&#x043D;&#x0430;&#x0442;&#x044B;</a><br/>'.$fsize2;
}
else
{
$rm = intval($_GET['rm']);
$arr = mysql_fetch_assoc(mysql_query('SELECT `name` FROM `rooms` WHERE rm='.$rm));
$name = $arr['name'];
print $fsize1;
print '&#x041D;&#x0430;&#x0437;&#x0432;&#x0430;&#x043D;&#x0438;&#x0435; &#x043A;&#x043E;&#x043C;&#x043D;&#x0430;&#x0442;&#x044B;:<br/>';
print $fsize2;
print '<input name="roomname" maxlength="24" value="'.$name.'"/><br/>';
print $fsize1;
print '<anchor>Ok<go href="apanel.php?act=dornm&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=editrooms&amp;rm='.$rm.'" method="post">
<postfield name="roomname" value="$(roomname)"/>
</go></anchor>
<br/>
---<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=editrooms">&#x0420;&#x0435;&#x0434;&#x0430;&#x043A;&#x0442;&#x0438;&#x0440;&#x043E;&#x0432;&#x0430;&#x0442;&#x044C; &#x043A;&#x043E;&#x043C;&#x043D;&#x0430;&#x0442;&#x044B;</a><br/>';
print $fsize2;
}
break;


case 'bots':
$setting = @mysql_query('Select * from `setting` where klu4=1');
$set = mysql_fetch_assoc($setting);
print $fsize1;
print '<strong>Настройка Ботов</strong><br/>
Принимать ответы с компа (викт):<br/>';
print $fsize2;
print '<select name="vict'.$ref.'">';
if($set['vict'] == 0)
{
print '<option value="0">Нет</option>
<option value="1">Да</option>';
}
else
{
print '<option value="1">Да</option>
<option value="0">Нет</option>';
}
print '</select><br/>';
print $fsize1;
print 'Интервал Умника (сек):<br/>';
print $fsize2;

print '<input name="nvictint'.$ref.'" format="*N" size="3" type="text" value="'.$set["victint"].'"/><br/>';
/*
print "<select name=\"nvictint$ref\">\n";
if($set["victint"] === "10"){
print "<option value=\"10\">10</option>\n";
}
elseif($set["victint"] === "30"){
print "<option value=\"30\">30</option>\n";
}
elseif($set["victint"] === "60"){
print "<option value=\"60\">60</option>\n";
}
elseif($set["victint"] === "120"){
print "<option value=\"120\">120</option>\n";
}
print "<option value=\"10\">10</option>\n";
print "<option value=\"30\">30</option>\n";
print "<option value=\"60\">60</option>\n";
print "<option value=\"120\">120</option>\n";
print "</select><br/>\n";
*/

print $fsize1;
print 'Шутник:<br/>';
print $fsize2;
print '<select name="shut'.$ref.'">';
if($set['shut'] == 0)
{
print '<option value="0">Включен</option>
<option value="1">Отключен</option>';
}
else
{
print '<option value="1">Отключен</option>
<option value="0">Включен</option>';
}
print '</select><br/>';
print $fsize1;
print 'Интервал шутника (сек):<br/>';
print $fsize2;

print '<input name="nshutint'.$ref.'" format="*N" size="3" type="text" value="'.$set["shutint"].'"/><br/>';
/*
print "<select name=\"nshutint$ref\">\n";
if($set["shutint"] === "600"){
print "<option value=\"600\">10</option>\n";
}
elseif($set["shutint"] === "1800"){
print "<option value=\"1800\">30</option>\n";
}
elseif($set["shutint"] === "3600"){
print "<option value=\"3600\">60</option>\n";
}
elseif($set["shutint"] === "7200"){
print "<option value=\"7200\">120</option>\n";
}
print "<option value=\"600\">10</option>\n";
print "<option value=\"1800\">30</option>\n";
print "<option value=\"3600\">60</option>\n";
print "<option value=\"7200\">120</option>\n";
print "</select><br/>\n";
*/
print $fsize1;
print 'Комнаты для шутника:<br/>С';
print $fsize2;
print '<input size="2" name="roomon'.$ref.'" format="2N" value="'.$set['roomon'].'"/>';
print $fsize1;
print 'до:';
print $fsize2;
print '<input size="2" name="roomoff'.$ref.'" format="2N" value="'.$set['roomoff'].'"/><br/>';
print $fsize1;
print 'Продавец:<br/>';
print $fsize2;
print '<select name="prod'.$ref.'">';
if($set['prod'] == 0)
{
print '<option value="0">Включен</option>
<option value="1">Отключен</option>';
}
else
{
print '<option value="1">Отключен</option>
<option value="0">Включен</option>';
}
print '</select><br/>';
print $fsize1;
print '<strong>Имена ботов</strong><br/>';
print $fsize2;
$system = @mysql_fetch_array(@mysql_query('Select user from `antihack_users` where id=1 LIMIT 1;'));
print $fsize1;
print 'ID-1:';
print $fsize2;
print '<input name="system'.$ref.'" maxlength="12" value="'.$system[0].'"/><br/>';
$umnik = @mysql_fetch_array(@mysql_query('Select user from `antihack_users` where id=2 LIMIT 1'));
print $fsize1;
print 'ID-2:';
print $fsize2;
print '<input name="umnik'.$ref.'" maxlength="12" value="'.$umnik[0].'"/><br/>';
$shutnik = @mysql_fetch_array(@mysql_query ("Select user from `antihack_users` where id=3 LIMIT 1;"));
print $fsize1;
print 'ID-3:';
print $fsize2;
print '<input name="shutnik'.$ref.'" maxlength="12" value="'.$shutnik[0].'"/><br/>';
$prodavec = @mysql_fetch_array(@mysql_query('Select user from `antihack_users` where id=4 LIMIT 1'));
print $fsize1;
print 'ID-4:';
print $fsize2;
print '<input name="prodavec'.$ref.'" maxlength="12" value="'.$prodavec[0].'"/><br/>';
$mafia = @mysql_fetch_array(@mysql_query('Select user from `antihack_users` where id=5 LIMIT 1'));
print $fsize1;
print 'ID-5:';
print $fsize2;
print '<input name="mafia'.$ref.'" maxlength="12" value="'.$mafia[0].'"/><br/>';
print $fsize1;
print '<anchor>Обновить<go href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=updbots&amp;ref='.$ref.'" method="post">
<postfield name="vict" value="$(vict'.$ref.')"/>
<postfield name="shut" value="$(shut'.$ref.')"/>
<postfield name="prod" value="$(prod'.$ref.')"/>
<postfield name="nvictint" value="$(nvictint'.$ref.')"/>
<postfield name="nshutint" value="$(nshutint'.$ref.')"/>
<postfield name="roomon" value="$(roomon'.$ref.')"/>
<postfield name="roomoff" value="$(roomoff'.$ref.')"/>
<postfield name="system" value="$(system'.$ref.')"/>
<postfield name="umnik" value="$(umnik'.$ref.')"/>
<postfield name="shutnik" value="$(shutnik'.$ref.')"/>
<postfield name="prodavec" value="$(prodavec'.$ref.')"/>
<postfield name="mafia" value="$(mafia'.$ref.')"/>
</go></anchor>
<br/>';
print $fsize2;
break;

case 'updbots':
$vict = intval($_POST['vict']);
$shut = intval($_POST['shut']);
$prod = intval($_POST['prod']);
$nvictint = intval($_POST['nvictint']);
$nshutint = intval($_POST['nshutint']);
if($nshutint < 60)
{$nshutint = 2400;}
$roomon = intval($_POST['roomon']);
$roomoff = intval($_POST['roomoff']);

$system = check($_POST['system']);
$umnik = check($_POST['umnik']);
$shutnik = check($_POST['shutnik']);
$prodavec = check($_POST['prodavec']);
$mafia = check($_POST['mafia']);

if(!isset($error))
{
$result = mysql_query('SELECT * FROM `setting` WHERE klu4 = 1');
if(mysql_affected_rows() == 0)
{$error = 'database error...';}
else
{
mysql_query("UPDATE `setting` SET vict=".$vict.", shut=".$shut.", prod=".$prod.", victint=".$nvictint.", shutint=".$nshutint.", roomon=".$roomon.", roomoff=".$roomoff." WHERE klu4 = 1");
mysql_query("UPDATE `antihack_users` SET user='".$system."' WHERE id=1");
mysql_query("UPDATE `antihack_users` SET user='".$umnik."' WHERE id=2");
mysql_query("UPDATE `antihack_users` SET user='".$shutnik."' WHERE id=3");
mysql_query("UPDATE `antihack_users` SET user='".$prodavec."' WHERE id=4");
mysql_query("UPDATE `antihack_users` SET user='".$mafia."' WHERE id=5");
$msg = 'Настройки ботов изменены';

$f = fopen('syst/log.dat', 'a');
fputs($f, "\n".gmdate('Y.m.d H:i', time() + $correct_time).' '.$us.' изменил настройки ботов');
fclose($f);
}
}
else
{$error = mysql_error();}
if(isset($error))
{print $error;}
print $fsize1;
print '<strong>'.$msg.'</strong><br/>';
print $fsize2;
break;

case 'editlevels':
$lev = mysql_query('SELECT `level`,`name` FROM `levels`');
if(empty($_GET['act']))
{
while($arr=mysql_fetch_assoc($lev))
{
print $fsize1;
print '<a href="apanel.php?act=rnm&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=editlevels&amp;level='.$arr['level'].'">'.$arr['level'].'. '.$arr['name'].'</a><br/>';
print $fsize2;
}
}
elseif($_GET['act']=='dornm')
{
$level = intval($_GET['level']);
$levelname = check($_POST['levelname']);
mysql_query("UPDATE `levels` SET name='".$levelname."' WHERE level=".$level);
print $fsize1;
print '&#x0421;&#x0442;&#x0430;&#x0442;&#x0443;&#x0441; &#x0443;&#x0441;&#x043F;&#x0435;&#x0448;&#x043D;&#x043E; &#x043F;&#x0435;&#x0440;&#x0435;&#x0438;&#x043C;&#x0435;&#x043D;&#x043E;&#x0432;&#x0430;&#x043D;!<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=editlevels">&#x0420;&#x0435;&#x0434;&#x0430;&#x043A;&#x0442;&#x0438;&#x0440;&#x043E;&#x0432;&#x0430;&#x0442;&#x044C; &#x0441;&#x0442;&#x0430;&#x0442;&#x0443;&#x0441;&#x044B;</a><br/>';
print $fsize2;

$f = fopen('syst/log.dat', 'a');
fputs($f, "\n".gmdate('Y.m.d H:i', time() + $correct_time).' '.$us.' изменил статусы');
fclose($f);
}
else
{
$level = intval($_GET['level']);
$lev = mysql_query('SELECT `name` FROM `levels` WHERE level='.$level);
$arr=mysql_fetch_assoc($lev);
$name = $arr['name'];
print $fsize1;
print '&#x041D;&#x0430;&#x0437;&#x0432;&#x0430;&#x043D;&#x0438;&#x0435; &#x0441;&#x0442;&#x0430;&#x0442;&#x0443;&#x0441;&#x0430;:<br/>';
print $fsize2;
print '<input name="levelname" maxlength="200" value="'.$name.'"/><br/>';
print $fsize1;
print '<anchor>Ok<go href="apanel.php?act=dornm&amp;id='.$id.'&amp;ps='.$ps.'&amp;go=editlevels&amp;level='.$level.'" method="post">
<postfield name="levelname" value="$(levelname)"/>
</go></anchor>
<br/>
---<br/>
<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;go=editlevels">&#x0420;&#x0435;&#x0434;&#x0430;&#x043A;&#x0442;&#x0438;&#x0440;&#x043E;&#x0432;&#x0430;&#x0442;&#x044C; &#x0441;&#x0442;&#x0430;&#x0442;&#x0443;&#x0441;&#x044B;</a><br/>';
print $fsize2;
}
break;
}
print $fsize1;
print '---<br/>';
print $fsize2;
if($_GET['go'])
{
print $fsize1;
print '<a href="apanel.php?id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'">Админка</a><br/>';
print $fsize2;
}
print $fsize1;
print '<a href="enter.php?id='.$id.'&amp;ps='.$ps.'">Прихожая</a><br/>';
print $fsize2;
print '</p></card></wml>';

$pagesize=round((ob_get_length())/1024,1);
mysql_query("UPDATE `antihack_users` SET alltraf='".($row['alltraf']+$pagesize)."', lasttraf='".$pagesize."' WHERE id=".$id);
mysql_close();
ob_end_flush();
?>