View file xmyx.ru/albums/act/dell_photo.php

<?php defined('ACCESS') OR die('No direct script access...');

/*
* Author - Tw1nGo
* VK - https://vk.com/tw1ngo93
*/

if (isset($_GET['id']))
{
    $photo = mysql_fetch_assoc(mysql_query("SELECT * FROM `photos_user` WHERE `id` = '".abs(intval($_GET['id']))."' LIMIT 1"));
    $album = mysql_fetch_assoc(mysql_query("SELECT * FROM `photos` WHERE `id` = '".$photo['id_album']."' LIMIT 1"));
    $ank = mysql_fetch_assoc(mysql_query("SELECT * FROM `user` WHERE `id` = '".$album['id_user']."' LIMIT 1"));
}

if (!isset($album) || $album['id'] <= 0){
	header("Location: /");
	exit;
}

if (!isset($_GET['id']) || !isset($photo) || $photo['id'] <= 0){
	header("Location: ?act=album&id=".$album['id']."");
	exit;
}

if (isset($user) && $user['id'] == $ank['id'] || $user['level'] >= 4)
{

if (isset($_GET['yes'])){

	@unlink(H."files/photos/size50/".$photo['id']."".$photo['hash'].".jpg");
	@unlink(H."files/photos/size100/".$photo['id']."".$photo['hash'].".jpg");
	@unlink(H."files/photos/size200/".$photo['id']."".$photo['hash'].".jpg");
	@unlink(H."files/photos/original/".$photo['id']."".$photo['hash'].".jpg");

	mysql_query("DELETE FROM `photos_user` WHERE `id` = '$photo[id]' LIMIT 1");
	mysql_query("DELETE FROM `user_wall` WHERE `type` = 'avatar'  AND `id_object` = '".$photo['id']."' LIMIT 1");
	
	$_SESSION['message'] = 'Фотография успешно удалена.';
	header("Location: ?act=album&id=".$album['id']."");
	exit;

}

$set['title'] = ''.text($photo['name']).'';
include_once '../sys/inc/thead.php';
shapka_VK(true, '?act=photo&id='.$photo['id'].'', 'Фотография');

$cnt = mysql_fetch_assoc(mysql_query("
      SELECT COUNT(ph.id) AS 'cnt', 
      SUM(IF(ph.id > '$photo[id]', 1, 0)) AS 'left',
      SUM(IF(ph.id < '$photo[id]', 1, 0)) AS 'right', 
      (SELECT id FROM photos_user WHERE id > $photo[id] AND id_album = $album[id] ORDER BY id ASC LIMIT 1) AS 'id_left',
      (SELECT id FROM photos_user WHERE id < $photo[id] AND id_album = $album[id] ORDER BY id DESC LIMIT 1) AS 'id_right'
      FROM photos_user AS ph 
      WHERE ph.id_album = '$album[id]'
"));

?>
<div class="pcont">
<div class="media_view photo_view">

<div class="pv_summary">Удаление фотографии  <?php echo ($cnt['left'] + 1); ?> из <?php echo ($cnt['cnt']); ?></div>
<div class="pv_tag_wrap"></div>

<div class="pv_body pv_touch pv_touch_full pv_icons_hide">
      <a class="thumb_item" href="/files/photos/size200/<?= $photo['id'] . $photo['hash']?>.jpg"><div class="pv_photo_wrap" id="pv_photo_tags" onclick="return photo.closeTags(event);">
      <img src="/files/photos/size200/<?= $photo['id'] . $photo['hash']?>.jpg" class="ph_img" alt=""></div>
      </a>
      <div class="pv_nav">
  <table class="row_table pv_nav_cont"><tbody><tr>
<?
if($cnt['left']){
?>
    <td class="pv_nav_left">
      <a href="?act=dell_photo&id=<?= $cnt['id_left']?>" class="pv_nav_link" onclick="return photo.prev(event);">
        <span class="pv_icon" style="opacity: 1;"><i class="i_icon"></i></span>
        <span class="pv_nav_label">« пред.</span>
      </a>
    </td>
<?
}
?>
<td class="pv_nav_z">
      <a href="/files/photos/original/<?= $photo['id'] . $photo['hash']?>.jpg" class="pv_nav_link" onclick="return photo.fullscreen('/files/photos/original/<?= $photo['id'] . $photo['hash']?>.jpg', event);">
        <span class="pv_icon"><i class="i_icon"></i></span>
      </a>
</td>
<?
if($cnt['right']){
?>
<td class="pv_nav_right">
<a href="?act=dell_photo&id=<?= $cnt['id_right']?>" class="pv_nav_link" onclick="return photo.next(event);">
<span class="pv_icon" style="opacity: 1;"><i class="i_icon"></i></span>
<span class="pv_nav_label">след. »</span>
</a>
</td>
<?
}
?>
</tr></tbody></table>
</div>
</div>
</div>

<div class="pv_footer bl_cont">
<div class="form_item">
<div class="fi_row">
<span>Вы действительно хотите удалить фото <b><?= $photo['name']?></b>?! <span>
</div>
<div class="fi_row">
<a href="?act=dell_photo&id=<?= $photo['id']?>&yes" class="button">Удалить</a>
<div class="near_btn"><a href="?act=photo&id=<?= $photo['id']?>">Отмена</a></div>
</div>
</div>
</div></div>
<?
}
else{
	header("Location: /?");
	exit;
}