View file xmyx.ru/files/groups/php/in.php

<?

if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && !empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest')
{
    define("H", $_SERVER["DOCUMENT_ROOT"].'/');
    include_once H.'sys/inc/start.php';
    include_once H.'sys/inc/compress.php';
    include_once H.'sys/inc/sess.php';
    include_once H.'sys/inc/settings.php';
    include_once H.'sys/inc/db_connect.php';
    include_once H.'sys/inc/ipua.php';
    include_once H.'sys/inc/fnc.php';
    include_once H.'sys/inc/user.php';

// Конфигурационный файл
require H.'club/config.php';

    if (isset($_GET['id']))
    {
        $group = mysql_fetch_assoc(mysql_query("SELECT * FROM `groups` WHERE `id` = '".abs(intval($_GET['id']))."' LIMIT 1"));
    }
    if (!isset($_GET['id']) || !isset($group) || $group['id'] <= 0 || !isset($user))
    {
?>
<div class="vk_oshibka">Ошибка!</div>
<?
    } else {
        if (mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_users` WHERE `id_group` = '".$group['id']."' AND `id_user` = '".$user['id']."'"), 0) == 0)
        {
if ($group['typic'] == 0)
{
	mysql_query("INSERT INTO `groups_users` (`id_user`, `id_group`, `time`) values ('".$user['id']."', '".$group['id']."', '".$time."')");
?>
<div class="basisGroup__buttonsRow" id="g_in_<?echo $group['id'];?>">
<div class="dropdown">
<a class="dropdown__item dropdown__item_toggler" onclick="show_gr_menu();">Вы состоите в группе</a>
<div class="dropdown__menu" id="show_gr_menu">
<div class="dropdown__item dropdown__item_ghost">Вы состоите в группе</div>
<a class="dropdown__item" onclick="g_out(<?echo $group['id'];?>);">Выйти из группы</a> 
<?
if ($group['typic'] == 0 || $group['typic'] == 1 || ($group['typic'] == 2 && mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_users` WHERE `id_group` = '".$group['id']."' AND `id_user` = '".$user['id']."' AND `adm` > '2'"), 0) > 0))
{
?>   
<a class="dropdown__item" href="/group<?= $group['id']?>?act=invite">Пригласить друзей</a>
<?
}
?>
</div>
</div>
</div>
<?
}
else if ($group['typic'] == 1)
{
                mysql_query("INSERT INTO `groups_users` (`id_user`, `id_group`, `st`, `time`) values ('".$user['id']."', '".$group['id']."', '1', '".$time."')");
?>
<div class="basisGroup__buttonsRow" id="g_in_<?echo $group['id'];?>">
<div class="dropdown">
<a class="dropdown__item dropdown__item_toggler" onclick="show_gr_menu();">Ожидаем подтверждения</a>
<div class="dropdown__menu" id="show_gr_menu">
<div class="dropdown__item dropdown__item_ghost">Ожидаем подтверждения</div>
<a class="dropdown__item" onclick="g_out(<?echo $group['id'];?>);">Выйти из группы</a> 
</div>
</div>
</div>
<?
} else {
?>
<div class="vk_oshibka">Ошибка!</div>
<?
            }
        }
        else if (mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_users` WHERE `id_group` = '".$group['id']."' AND `id_user` = '".$user['id']."' AND `st` = '2'"), 0) > 0)
        {
            mysql_query("UPDATE `groups_users` SET `st` = '0' WHERE `id_group` = '".$group['id']."' AND `id_user` = '".$user['id']."' AND `st` = '2' LIMIT 1");
?>
<div class="basisGroup__buttonsRow" id="g_in_<?echo $group['id'];?>">
<div class="dropdown">
<a class="dropdown__item dropdown__item_toggler" onclick="show_gr_menu();">Вы состоите в группе</a>
<div class="dropdown__menu" id="show_gr_menu">
<div class="dropdown__item dropdown__item_ghost">Вы состоите в группе</div>
<a class="dropdown__item" onclick="g_out(<?echo $group['id'];?>);">Выйти из группы</a> 
<?
if ($group['typic'] == 0 || $group['typic'] == 1 || ($group['typic'] == 2 && mysql_result(mysql_query("SELECT COUNT(*) FROM `groups_users` WHERE `id_group` = '".$group['id']."' AND `id_user` = '".$user['id']."' AND `adm` > '2'"), 0) > 0))
{
?>   
<a class="dropdown__item" href="/group<?= $group['id']?>?act=invite">Пригласить друзей</a>
<?
}
?>
</div>
</div>
</div>
<?
        } else {
?>
<div class="vk_oshibka">Ошибка!</div>
<?
        }
    }
} else {
    exit("<center>А вот хрен тебе ..!.,<br />by Tw1nGo</center>");
}
?>