View file xmyx.ru/files/js/count/black.php

<?
/*
Автор скрипта: Tw1nGo
Сайт: http://xmyx.ru
*/
if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && !empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest')
{
    define("H", $_SERVER["DOCUMENT_ROOT"].'/');
    include_once H.'sys/inc/start.php';
    include_once H.'sys/inc/compress.php';
    include_once H.'sys/inc/sess.php';
    include_once H.'sys/inc/settings.php';
    include_once H.'sys/inc/db_connect.php';
    include_once H.'sys/inc/ipua.php';
    include_once H.'sys/inc/fnc.php';
    include_once H.'sys/inc/user.php';

    if (isset($_GET['uid']))
    {
        $ank = mysql_fetch_assoc(mysql_query("SELECT * FROM `user` WHERE `id` = '".abs(intval($_GET['uid']))."' LIMIT 1"));
    }
    if (!isset($_GET['uid']) || !isset($ank) || $ank['id'] <= 0 || !isset($user))
    {
    
    }
    else {
      if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user_black` WHERE `id_user` = '$user[id]' AND `id_black` = '$ank[id]'"),0) == 0) {
        mysql_query("INSERT INTO `user_black` (`id_user`, `id_black`, `time`) values('$user[id]', '$ank[id]', '$time')");
        ?>
        <span class="cm_label">Разблокировать</span>
        <?
      }
      else{
        mysql_query("DELETE FROM `user_black` WHERE `id_user` = '$user[id]' AND `id_black` = '$ank[id]'");
        ?>
        <span class="cm_label">Заблокировать</span>
        <?
      }
    }
}
else {
    exit("<center>Самый умный? А такое видел ? ..!.,<br />by Tw1nGo 2k18</center>");
}