View file super2/profile.php

File size: 5.67Kb
<?php
// Чат GBodr
// Версия: 1.0
// Автор: Gemorroj

require 'connect.php';
require 'header.php';
require 'result.php';

$us = $row['user'];
if(!isset($err))
{$err = null;}

if($_GET['go'] != 1)
{
$name = $row['name'];
$city = $row['city'];
$op = $row['op'];
$mob = $row['mob'];
$infa = $row['infa'];
$avtootvet = $row['avtootvet'];
$pass = $row['pass'];

print $top.'
<card id="profile" title="Анкета">
<p>
<small>
<strong>'.$us.'</strong><br/>
*Ваш пароль:<br/>
</small>
<input name="pass" maxlength="20" value="'.$pass.'" type="text"/><br/>
<small>*Ваше имя:<br/></small>
<input name="name" maxlength="15" value="'.$name.'" type="text"/><br/>';

if($row['sex'] == 1)
{
print '<small>
Пол:<br/>
</small>
<select name="sex">
<option value="1">M</option>
<option value="0">Ж</option>
</select><br/>';
}
else
{
print '<small>
Пол:<br/>
</small>
<select name="sex">
<option value="0">Ж</option>
<option value="1">M</option>
</select><br/>';
}

@list($day, $month, $year) = split('-', $row['birth']);
print '<small>
*Дата рождения:<br/>
</small>
<input size="2" name="days" value="'.$day.'" format="2N" type="text"/>-<input size="2" name="months" value="'.$month.'" format="2N" type="text"/>-<input size="4" name="years" value="'.$year.'" format="4N" type="text"/><br/>
<small>
Город:<br/>
</small>
<input name="city" maxlength="32" value="'.$city.'" type="text"/><br/>
<small>
Сотовый оператор:<br/>
</small>
<input name="op" maxlength="20" value="'.$op.'" type="text" emptyok="true"/><br/>
<small>
Модель телефона:<br/>
</small>
<input name="mob" maxlength="40" value="'.$mob.'" type="text" emptyok="true"/><br/>
<small>
Номер телефона:<br/>
</small>
+<input name="number" maxlength="11" value="'.$row["number"].'" format="*N" type="text" emptyok="true"/><br/>
<small>
E-mail:<br/>
</small>
<input name="mail" maxlength="64" value="'.$row["mail"].'" type="text" emptyok="true"/><br/>
<small>
ICQ:<br/>
</small>
<input name="icq" value="'.$row["icq"].'" type="text" format="9N" emptyok="true"/><br/>
<small>
*О себе:<br/>
</small>
<input name="infa" maxlength="220" value="'.$infa.'" type="text"/><br/>
<small>
Текст автоответчика (записки):<br/>
</small>
<input name="avtootvet" maxlength="200" value="'.$avtootvet.'" type="text" emptyok="true"/><br/>
<small>
<anchor>Изменить
<go href="profile.php?go=1&amp;id='.$id.'&amp;ps='.$ps.'&amp;ref='.$ref.'" method="post">
<postfield name="pass" value="$(pass)"/>
<postfield name="name" value="$(name)"/>
<postfield name="sex" value="$(sex)"/>
<postfield name="day" value="$(days)"/>
<postfield name="month" value="$(months)"/>
<postfield name="year" value="$(years)"/>
<postfield name="city" value="$(city)"/>
<postfield name="op" value="$(op)"/>
<postfield name="mob" value="$(mob)"/>
<postfield name="number" value="$(number)"/>
<postfield name="mail" value="$(mail)"/>
<postfield name="icq" value="$(icq)"/>
<postfield name="infa" value="$(infa)"/>
<postfield name="avtootvet" value="$(avtootvet)"/>
</go></anchor><br/>
<a href="enter.php?id='.$id.'&amp;ps='.$ps.'">Прихожая</a>
</small>
</p></card></wml>';
mysql_close();
}
else
{
$error = true;

$pass = $_POST['pass'];
$pass = ereg_replace(" +",' ',$pass);
$pass = check($pass);

$name = $_POST['name'];
$name = ereg_replace(" +",' ',$name);
$name = check($name);

$city = $_POST['city'];
$city  = ereg_replace(" +",' ',$city);
$city = check($city);

$infa = $_POST['infa'];
$infa  = ereg_replace(" +",' ',$infa);
$infa = substr($infa,0,400);
$infa = check($infa);

$avtootvet = $_POST['avtootvet'];
$avtootvet = ereg_replace(" +",' ',$avtootvet);
$avtootvet = substr($avtootvet,0,400);
$avtootvet = check($avtootvet);

$op = $_POST['op'];
$op  = ereg_replace(" +",' ',$op);
$op = check($op);

$mob = $_POST['mob'];
$mob  = ereg_replace(" +",' ',$mob);
$mob = check($mob);

$number = $_POST['number'];
if(!is_numeric($number))
{$number = null;}

$mail = trim($_POST['mail']);
if (!preg_match("/^[0-9a-z_\-\.]+@[0-9a-z_\-^\.]+\.[a-z0-9]{2,6}$/i", $mail))
{$mail = null;}

$sex = intval($_POST['sex']);

$day = intval($_POST['day']);

$month = intval($_POST['month']);

$year = intval($_POST['year']);

$icq = intval($_POST['icq']);

$emp = '&#x041D;&#x0435; &#x0437;&#x0430;&#x043F;&#x043E;&#x043B;&#x043D;&#x0435;&#x043D;&#x044B; &#x043E;&#x0431;&#x044F;&#x0437;&#x0430;&#x0442;&#x0435;&#x043B;&#x044C;&#x043D;&#x044B;&#x0435; &#x043F;&#x043E;&#x043B;&#x044F;!';

if(!$pass)
{$msg = $emp;}
elseif(!preg_match("!^[a-z0-9]+$!i",$pass))
{
$msg = '&#x0412; &#x043F;&#x0430;&#x0440;&#x043E;&#x043B;&#x0435; &#x043E;&#x0431;&#x043D;&#x0430;&#x0440;&#x0443;&#x0436;&#x0435;&#x043D;&#x044B; &#x0437;&#x0430;&#x043F;&#x0440;&#x0435;&#x0448;&#x0435;&#x043D;&#x043D;&#x044B;&#x0435; &#x0437;&#x043D;&#x0430;&#x043A;&#x0438;!';
}
elseif(!$name)
{$msg = $emp;}
elseif(!$day)
{$msg = $emp;}
elseif(!$month)
{$msg = $emp;}
elseif(!$year)
{$msg = $emp;}
elseif(!$infa)
{$msg = $emp;}
else
{
$birth = $day.'-'.$month.'-'.$year;

$ins_str = "UPDATE `antihack_users` SET pass='".$pass."', name='".$name."', sex=".$sex.", birth='".$birth."', city='".$city."', mail='".$mail."', icq=".$icq.", infa='".$infa."', op='".$op."', mob='".$mob."', number='".$number."', avtootvet='".$avtootvet."' where id = ".$id;
if(mysql_query($ins_str))
{
$msg = 'Данные изменены';
$error = false;
}
else
{$msg = 'database error...';}

//mysql_close();
}
if($error)
{
print $top.'
<card id="error" title="Error" ontimer="profile.php?id='.$id.'&amp;ps='.$ps.'">
<timer value="5"/>
<p>
'.$msg.'
</p></card></wml>';
}
else
{
print $top.'
<card id="ok" title="Ok" ontimer="cabinet.php?id='.$id.'&amp;ps='.$pass.'&amp;ref='.$ref.'">
<timer value="5"/>
<p>
'.$msg.'
</p></card></wml>';
}
}
?>