View file modules/pages/up.php

<?php

$id = abs(intval($_GET['id']));
$file = $db->query('SELECT * FROM `file` WHERE `id` = '.$id)->fetch_assoc();

if ($file == 0) {
	go('/');
}

if ($file['pass'] == 0 or @$_COOKIE['filepass'] == $file['pass']) {
	$db->query("UPDATE `file` SET `up` = `up` +1 WHERE `id` = $id");
	go('/files/'.$file['file']);
} else {
$title_main = $lang['enter_pass'].' - GOload '.$lang['title'];
require_once SYS.'/header.php';

echo '
		<div class="block col-md-8">
			<h6 class="round_title">
				<a class="left" onclick="window.history.back();">
					<img src="/assets/img/left.svg" alt="back">
				</a>
				<div class="title back"><a href="/">'.$title.'</a> | '.$lang['enter_pass'].'</div>
			</h6>';

if (isset($_REQUEST['submit'])) {
	$pass = guard($_POST['pass']);
	if ($pass != $file['pass']) {
		error($lang['wrong_pass']);
	}
	setcookie('filepass', $file['pass'], time()+86400*365);
	go('/file'.$id);
}
echo '
			<div class="menu" style="position: relative;height: 158px;">
				<div class="empty pass">
					<div class="empty_words">'.$lang['enter_pass_for'].'!</div>
				</div>
			</div>
			<form action="" enctype="multipart/form-data" method="POST">

				<div class="menu" style="text-align: center;">
					<input type="number" name="pass" placeholder="'.$lang['password'].'" value="';
					if (isset($admin)) echo $file['pass'];
					echo '">
				</div>
				<div class="menu" style="text-align: center;padding-bottom: 16px;">
					<input class="btn" type="submit" name="submit" value="'.$lang['next'].'">
				</div>
			</form>
		</div>
';
echo '
		<div class="block col-md-8">
			<div class="title">'.$lang['nav'].'</div>
			<div class="link">
				<a href="/">'.$lang['go_home'].'</a>
			</div>
		</div>
';

require_once SYS.'/foot.php';
}

?>