View file xmyx.ru/user/privacy/fnc/privace_wall.php

<?php
if(!$user['level']>=4){
	if(isset($_GET['id'])){
	$ank = mysql_fetch_array(mysql_query("SELECT `id`,`nick` FROM `user` WHERE `id` = '".(int)abs($_GET['id'])."'  LIMIT 1"));
	if($ank['id'] != $user['id']){
		$privac = mysql_fetch_array(mysql_query("SELECT `edit_wall_send`,`edit_wall_send_value` FROM `user_privacy` WHERE `user` = '".$ank['id']."'"));
if($privac['edit_wall_send'] == 1 && mysql_result(mysql_query("SELECT COUNT(`user`) FROM `frends` WHERE (`user` = '".$user['id']."' AND `frend` = '".$ank['id']."') OR (`user` = '".$ank['id']."' AND `frend` = '".$user['id']."') LIMIT 1"),0) != 2 || $privac['edit_wall_send'] == 2 || $privac['edit_wall_send'] == 3 && in_array($user['id'], explode(",", $privac['edit_wall_send_value'])) != 1){
		if($privac['edit_wall_send'] == 1 && mysql_result(mysql_query("SELECT COUNT(`user`) FROM `frends` WHERE (`user` = '".$user['id']."' AND `frend` = '".$ank['id']."') OR (`user` = '".$ank['id']."' AND `frend` = '".$user['id']."') LIMIT 1"),0) != 2){
	echo '<div class="mess">';
		echo 'Пользователю на стене могут писать только его друзья!';
		echo '</div>';	
	}elseif($privac['edit_wall_send'] == 2){
	echo '<div class="mess">';
		echo 'Пользователь запретил чтоб писали у его на стене!';
		echo '</div>';
}elseif($privac['edit_wall_send'] == 3 && in_array($user['id'], explode(",", $privac['edit_wall_send_value'])) != 1){
	echo '<div class="mess">';
		echo 'Пользователю могут писать на стене только некоторые друзья!';
		echo '</div>';
}
		$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `stena` WHERE `id_stena` = '$ank[id]'"),0);
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
if ($k_post==0){
echo "  <div class='mess'>\n";
echo "Нет сообщений\n";
echo "  </div>\n";
}else{
if (isset($user)){
echo "<div id='comments' class='menus'>";
echo "<div class='webmenu'>";
echo "<a href='/info.php?id=$ank[id]&amp;page=$page&amp;sort=1' class='".($user['sort']==1?'activ':'')."'>Внизу</a>";
echo "</div>"; 
echo "<div class='webmenu'>";
echo "<a href='/info.php?id=$ank[id]&amp;page=$page&amp;sort=0' class='".($user['sort']==0?'activ':'')."'>Вверху</a>";
echo "</div>"; 
echo "</div>";
}
}
$q=mysql_query("SELECT * FROM `stena` WHERE `id_stena` = '$ank[id]' ORDER BY id $sort LIMIT $start, $set[p_str]");
$num=0;
while ($post = mysql_fetch_assoc($q)){
if ($num==0)
{echo "  <div class='nav1'>\n";
$num=1;
}elseif ($num==1)
{echo "  <div class='nav2'>\n";
$num=0;}
$ank_stena=mysql_fetch_assoc(mysql_query("SELECT * FROM `user` WHERE `id` = $post[id_user] LIMIT 1"));
if ($set['set_show_icon']==2){
avatar($ank_stena['id']);
}
elseif ($set['set_show_icon']==1)
{
echo "".group($ank_stena['id'])."";
}
echo "<a href='/info.php?id=$ank_stena[id]'>$ank_stena[nick]</a>\n";
echo "".medal($ank_stena['id'])." ".online($ank_stena['id'])."";
if (isset($user))echo " <a href='/info.php?id=$ank[id]&amp;response=$ank_stena[id]'>[*]</a>";
echo " (".vremja($post['time']).")<br />";
echo output_text($post['msg'])."<br />\n";
if (isset($user))
{
$l=mysql_result(mysql_query("SELECT COUNT(*) FROM `stena_like` WHERE `id_stena` = '$post[id]'"),0);
echo '<div style="text-align:right;"> <a href="?id='.$ank['id'].'&amp;likepost='.$post['id'].'&amp;page='.$page.'" >&hearts; '.$l.'</a> ';
if (isset($user) && $ank_stena['id']!=$user['id'])echo "<a href=\"/info.php?id=$ank[id]&amp;page=$page&amp;spam=$post[id]\"><img src='/style/icons/blicon.gif' alt='*' title='Это спам'></a>"; 
if (user_access('guest_delete') || $ank['id']==$user['id'])
{
echo "<a href='?id=$ank[id]&amp;delete_post=$post[id]'><img src='/style/icons/delete.gif' alt='удалить' /></a>\n";
}
echo "   </div>\n";
}
echo "</div>\n";
}
if ($k_page>1)str('?id='.$ank['id'].'&',$k_page,$page); // Вывод страниц
	include_once H.'sys/inc/tfoot.php';
	exit();
	}
}
}
}