View file xmyx.ru/files/groups/inc/group.php

File size: 17.2Kb
<?
/*
Автор скрипта: Simptom
Сайт поддержки: http://y-monitora.com
*/
if (isset($_GET['edit_status']) && isset($user) && ($user['id'] == $group['id_user'] || $user['level'] >= 4))
{
    if (isset($_POST['sim_go']))
    {
        if (isset($_POST['status']) && $_POST['status'] != NULL)
        {
            $group['status'] = my_esc($_POST['status']);
        } else {
            $group['status'] = '';
        }
        mysql_query("UPDATE `groups` SET `status` = '".$group['status']."' WHERE `id` = '".$group['id']."' LIMIT 1");
        header("Location: /groups/group.php?id=".$group['id']."");
        exit;
    }
    ?>
    <div class="sim_groups_102">
        <img class="sim_groups_103" src="<?echo Simptom::Ava($group['id']);?>" alt="*" />
        <div class="sim_groups_104">
            <h2 class="sim_groups_105">
                <?echo stripcslashes(htmlspecialchars($group['title']));?>
            </h2>
        </div>
        <div class="sim_groups_106">
            <div class="sim_groups_107">
                <i class="sim_groups_108"></i>
            </div>
            <form class="sim_groups_7" action="/groups/group.php?id=<?echo $group['id'];?>&edit_status" method="post">
                <div class="sim_groups_109">
                    <input class="sim_groups_110" name="status" value="<?echo stripcslashes(htmlspecialchars($group['status']));?>" type="text" />
                </div>
                <div class="sim_groups_67">
                    <input class="sim_groups_30" name="sim_go" value="Сохранить" type="submit" />
                </div>
            </form>
        </div>
    </div>
    <a class="sim_groups_15" href="/groups/group.php?id=<?echo $group['id'];?>">
        <div class="sim_groups_16">
            <div class="sim_groups_17">
                Назад
            </div>
        </div>
    </a>
    <?
    include_once H.'sys/inc/tfoot.php';
    exit;
}
else if (isset($_GET['edit']) && isset($user) && ($user['id'] == $group['id_user'] || $user['level'] >= 4))
{
    if (isset($_POST['sim_go']))
    {
        if (!isset($_POST['title']) || $_POST['title'] == NULL)
        {
            $err = 'Укажите название!';
        }
        if (!isset($err))
        {
            $group['title'] = my_esc($_POST['title']);
            if (isset($_POST['opis']) && $_POST['opis'] != NULL)
            {
                $group['opis'] = my_esc($_POST['opis']);
            } else {
                $group['opis'] = '';
            }
            if (isset($_POST['subject']) && $_POST['subject'] != NULL && is_numeric($_POST['subject']) && $_POST['subject'] > 0 && mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_subject` WHERE `id` = '".abs(intval($_POST['subject']))."'"), 0) > 0)
            {
                $group['subject'] = abs(intval($_POST['subject']));
            } else {
                $group['subject'] = 0;
            }
            if (isset($_POST['link']) && $_POST['link'] != NULL && filter_var($_POST['link'], FILTER_VALIDATE_URL))
            {
                $group['link'] = my_esc($_POST['link']);
            } else {
                $group['link'] = '';
            }
            if (isset($_POST['typic']) && $_POST['typic'] != NULL && is_numeric($_POST['typic']) && $_POST['typic'] >= 0 && $_POST['typic'] <= 2)
            {
                $group['typic'] = abs(intval($_POST['typic']));
            } else {
                $group['typic'] = 0;
            }
            mysql_query("UPDATE `groups` SET `title` = '".$group['title']."', `opis` = '".$group['opis']."', `subject` = '".$group['subject']."', `link` = '".$group['link']."', `typic` = '".$group['typic']."' WHERE `id` = '".$group['id']."' LIMIT 1");
            msg('Изменения сохранены.');
        }
    }
    err();
    ?>
    <div class="sim_groups_111">
        <div class="sim_groups_112">
            <img class="sim_groups_113" src="<?echo Simptom::Ava($group['id']);?>" alt="*" />
        </div>
        <div class="sim_groups_114">
            <span class="sim_groups_115">
                <?echo stripcslashes(htmlspecialchars($group['title']));?>
            </span>
            <div class="sim_groups_116">
                Группа
            </div>
        </div>
    </div>
    <div class="sim_groups_117">
        <ul class="sim_groups_118">
            <li>
                <div class="sim_groups_119">
                    <a class="sim_groups_120" href="/groups/group.php?id=<?echo $group['id'];?>&edit_ava">
                        <div class="sim_groups_121">
                            <i class="sim_groups_122"></i>
                        </div>
                        <div class="sim_groups_123">
                            <i class="sim_groups_124"></i> Изменить фотографию
                        </div>
                    </a>
                </div>
            </li>
        </ul>
    </div>
    <h4 class="sim_groups_126">
        Общая информация
    </h4>
    <div class="sim_groups_127">
        <form class="sim_groups_7" action="/groups/group.php?id=<?echo $group['id'];?>&edit" method="post">
            <div class="sim_groups_128">
                <div class="sim_groups_129">
                    Название:
                </div>
                <div class="sim_groups_130">
                    <input class="sim_groups_131" name="title" value="<?echo stripcslashes(htmlspecialchars($group['title']));?>" type="text" />
                </div>
            </div>
            <div class="sim_groups_128">
                <div class="sim_groups_129">
                    Описание:
                </div>
                <div class="sim_groups_130">
                    <textarea class="sim_groups_131" name="opis"><?echo stripcslashes(htmlspecialchars($group['opis']));?></textarea>
                </div>
            </div>
            <div class="sim_groups_128">
                <div class="sim_groups_129">
                    Тематика:
                </div>
                <div class="sim_groups_130">
                    <select class="sim_groups_131" name="subject">
                        <?
                        $q = mysql_query("SELECT * FROM `groups_subject` ORDER BY `name` ASC");
                        while ($r = mysql_fetch_array($q))
                        {
                        ?>
                            <option value="<?echo $r['id'];?>"<?echo "".($group['subject']==$r['id']?" selected='selected'":null)."";?>>
                                <?echo stripcslashes(htmlspecialchars($r['name']));?>
                            </option>
                        <?
                        }
                        ?>
                    </select>
                </div>
            </div>
            <div class="sim_groups_128">
                <div class="sim_groups_129">
                    Веб-сайт:
                </div>
                <div class="sim_groups_130">
                    <input class="sim_groups_131" name="link" value="<?echo stripcslashes(htmlspecialchars($group['link']));?>" type="text" />
                </div>
            </div>
            <div class="sim_groups_128">
                <div class="sim_groups_129">
                    Тип группы:
                </div>
                <div class="sim_groups_130">
                    <label class="sim_groups_25 sim_groups_132">
                        <input class="radio" name="typic" value="0"<?echo "".($group['typic']==0?" checked='checked'":null)."";?> type="radio" />
                        <span class="sim_groups_26">
                            <span class="sim_groups_27">
                                Открытая
                            </span><br />
                            <span class="sim_groups_28">
                                в группу могут вступить все желающие пользователи
                            </span>
                        </span>
                    </label>
                    <label class="sim_groups_25 sim_groups_132">
                        <input class="radio" name="typic" value="1"<?echo "".($group['typic']==1?" checked='checked'":null)."";?> type="radio" />
                        <span class="sim_groups_26">
                            <span class="sim_groups_27">
                                Закрытая
                            </span><br />
                            <span class="sim_groups_28">
                                в группу можно вступить по приглашению или подав заявку
                            </span>
                        </span>
                    </label>
                    <label class="sim_groups_25 sim_groups_132">
                        <input class="radio" name="typic" value="2"<?echo "".($group['typic']==2?" checked='checked'":null)."";?> type="radio" />
                        <span class="sim_groups_26">
                            <span class="sim_groups_27">
                                Частная
                            </span><br />
                            <span class="sim_groups_28">
                                в группу можно попасть только по приглашению руководителей
                            </span>
                        </span>
                    </label>
                </div>
            </div>
            <div class="sim_groups_67">
                <input class="sim_groups_30" name="sim_go" value="Сохранить" type="submit" />
            </div>
        </form>
    </div>
    <a class="sim_groups_15" href="/groups/group.php?id=<?echo $group['id'];?>">
        <div class="sim_groups_16">
            <div class="sim_groups_17">
                Назад
            </div>
        </div>
    </a>
    <?
    include_once H.'sys/inc/tfoot.php';
    exit;
}
else if (isset($_GET['edit_ava']) && isset($user) && ($user['id'] == $group['id_user'] || $user['level'] >= 4))
{
    if (isset($_POST['sim_go']))
    {
        if (isset($_FILES['p_file']) && $imgc = @imagecreatefromstring(file_get_contents($_FILES['p_file']['tmp_name'])))
        {
            if (is_file(H.'simptom/groups/files/ava/'.$group['id'].'.jpg'))
            {
                unlink(H.'simptom/groups/files/ava/'.$group['id'].'.jpg');
            }
            $img_x = imagesx($imgc);
            $img_y = imagesy($imgc);
            if ($img_x > 200 || $img_y > 200)
            {
                if ($img_x == $img_y)
                {
                    $dstW = 200;
                    $dstH = 200;
                }
                else if ($img_x > $img_y)
                {
                    $prop = $img_x/$img_y;
                    $dstW = 200;
                    $dstH = ceil($dstW/$prop);
                } else {
                    $prop = $img_y/$img_x;
                    $dstH = 200;
                    $dstW = ceil($dstH/$prop);
                }
            } else {
                $dstW = $img_x;
                $dstH = $img_y;
            }
            $screen = imagecreatetruecolor($dstW, $dstH);
            imagecopyresampled($screen, $imgc, 0, 0, 0, 0, $dstW, $dstH, $img_x, $img_y);
            imagedestroy($imgc);
            imagejpeg($screen, H.'simptom/groups/files/ava/'.$group['id'].'.jpg');
            imagedestroy($screen);
            chmod(H.'simptom/groups/files/ava/'.$group['id'].'.jpg', 0777);
            header("Location: /groups/group.php?id=".$group['id']."");
            exit;
        } else {
            $err = 'Выберите изображение!';
        }
    }
    err();
    ?>
    <div class="sim_groups_111">
        <div class="sim_groups_112">
            <img class="sim_groups_113" src="<?echo Simptom::Ava($group['id']);?>" alt="*" />
        </div>
        <div class="sim_groups_114">
            <span class="sim_groups_115">
                <?echo stripcslashes(htmlspecialchars($group['title']));?>
            </span>
            <div class="sim_groups_116">
                Группа
            </div>
        </div>
    </div>
    <div class="sim_groups_117">
        <ul class="sim_groups_118">
            <li>
                <div class="sim_groups_119">
                    <a class="sim_groups_120" href="/groups/group.php?id=<?echo $group['id'];?>&edit">
                        <div class="sim_groups_121">
                            <i class="sim_groups_122"></i>
                        </div>
                        <div class="sim_groups_123">
                            <i class="sim_groups_125"></i> Изменить информацию
                        </div>
                    </a>
                </div>
            </li>
        </ul>
    </div>
    <h4 class="sim_groups_126">
        Смена изображения
    </h4>
    <div class="sim_groups_127">
        <form class="sim_groups_7" action="/groups/group.php?id=<?echo $group['id'];?>&edit_ava" method="post" enctype="multipart/form-data">
            <div class="sim_groups_128">
                <div class="sim_groups_129">
                    Изображение:
                </div>
                <div class="sim_groups_130">
                    <input class="sim_groups_131" name="p_file" accept="image/*,image/png,image/gif,image/jpg" type="file" />
                </div>
            </div>
            <div class="sim_groups_67">
                <input class="sim_groups_30" name="sim_go" value="Сохранить" type="submit" />
            </div>
        </form>
    </div>
    <a class="sim_groups_15" href="/groups/group.php?id=<?echo $group['id'];?>">
        <div class="sim_groups_16">
            <div class="sim_groups_17">
                Назад
            </div>
        </div>
    </a>
    <?
    include_once H.'sys/inc/tfoot.php';
    exit;
}
else if (isset($_GET['dell_komm']) && isset($user) && ($user['id'] == $group['id_user'] || $user['level'] >= 4) && mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_wall` WHERE `id_group` = '".$group['id']."' AND `id` = '".abs(intval($_GET['dell_komm']))."'"), 0) > 0)
{
    if (mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_wall_komm` WHERE `id_group` = '".$group['id']."' AND `id_komm` = '".abs(intval($_GET['dell_komm']))."'"), 0) > 0)
    {
        mysql_query("DELETE FROM `groups_wall_komm` WHERE `id_group` = '".$group['id']."' AND `id_komm` = '".abs(intval($_GET['dell_komm']))."'");
    }
    if (mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_files` WHERE `id_group` = '".$group['id']."' AND `id_post` = '".abs(intval($_GET['dell_komm']))."'"), 0) > 0)
    {
        $q_f = mysql_query("SELECT * FROM `groups_files` WHERE `id_group` = '".$group['id']."' AND `id_post` = '".abs(intval($_GET['dell_komm']))."' ORDER BY `time` DESC");
        while ($post_f = mysql_fetch_array($q_f))
        {
            if (is_file(H.'simptom/groups/files/post_files/'.$post_f['id'].'.'.$post_f['ras'].''))
            {
                unlink(H.'simptom/groups/files/post_files/'.$post_f['id'].'.'.$post_f['ras'].'');
            }
            mysql_query("DELETE FROM `groups_files` WHERE `id` = '".$post_f['id']."' LIMIT 1");
        }
    }
    mysql_query("DELETE FROM `groups_wall` WHERE `id_group` = '".$group['id']."' AND `id` = '".abs(intval($_GET['dell_komm']))."' LIMIT 1");
    header("Location: /groups/group.php?id=".$group['id']."");
    exit;
}
if (isset($user) && isset($_POST['sim_go']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_users` WHERE `id_group` = '".$group['id']."' AND `id_user` = '".$user['id']."' AND `st` = '0'"), 0) > 0)
{
    if ((!isset($_POST['message']) || $_POST['message'] == NULL) && mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_files` WHERE `id_user` = '".$user['id']."' AND `id_post` = '0'"), 0) == 0)
    {
        $err = 'Введите текст сообщения!';
    }
    if (!isset($err))
    {
        if (isset($_POST['message']) && $_POST['message'] != NULL)
        {
            $msg = my_esc($_POST['message']);
        } else {
            $msg = '';
        }
        if ($user['id'] == $group['id_user'] && isset($_POST['from_group']) && $_POST['from_group'] != NULL && is_numeric($_POST['from_group']) && $_POST['from_group'] >= 0 && $_POST['from_group'] <= 1)
        {
            $from_group = abs(intval($_POST['from_group']));
        } else {
            $from_group = 0;
        }
        mysql_query("INSERT INTO `groups_wall` (`id_user`, `id_group`, `adm`, `text`, `time`) values ('".$user['id']."', '".$group['id']."', '".$from_group."', '".$msg."', '".$time."')");
        $id_f = mysql_insert_id();
        if (mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_files` WHERE `id_user` = '".$user['id']."' AND `id_post` = '0'"), 0) > 0)
        {
            mysql_query("UPDATE `groups_files` SET `id_post` = '".$id_f."', `id_group` = '".$group['id']."' WHERE `id_user` = '".$user['id']."' AND `id_post` = '0'");
        }
        msg('Сообщение успешно отправлено!');
    }
}
?>