View file masteru.site/panel/ras.php

<?php
$title = 'Админ панель';
require_once ('../system/function.php');
require_once ('../system/header.php');

//-----Переадресовуем не авторизированного и без левела-----//
if(!$user['id'] or $user['level'] < 1) {
echo err($title, 'У вас не достаточно прав для просмотра данной страницы!');
require_once ('../system/footer.php'); 
exit;
}
if($user['level'] > 4) {
echo err($title, 'У вас не достаточно прав для просмотра данной страницы!');
require_once ('../system/footer.php'); exit;
}
echo '<div class="title">Адм-панель / Рассылка писем</div>';
if(isset($_REQUEST['ok'])) {
$text = strong($_POST['text']);
$group = strong($_POST['group']);
if($group == 1)
{
$query = mysql_query("SELECT * FROM `users` WHERE `level` > '0'");
while($fp = mysql_fetch_array($query))
{
$con = mysql_result(mysql_query("SELECT COUNT(id) FROM `message_c` WHERE `kogo` = '12' and `kto` = '".$fp['id']."' LIMIT 1"),0);
if($con == 0) {
mysql_query("INSERT INTO `message_c` SET `kto` = '".$fp['id']."', `kogo` = '12', `time` = '".time()."', `posl_time` = '".time()."'");
mysql_query("INSERT INTO `message_c` SET `kto` = '12', `kogo` = '".$fp['id']."', `time` = '".time()."', `posl_time` = '".time()."'");
}
mysql_query("INSERT INTO `message` SET `kto` = '12', `komy` = '".$fp['id']."', `readlen` = '0', `text` = '" . $text . "', `time` = '".time()."'");
mysql_query("UPDATE `message_c` SET `posl_time`='".time()."' WHERE `kogo` = '12' and `kto`='".$fp['id']."' limit 1");
$i++;
}
}
if($group == 2)
{
$query = mysql_query("SELECT * FROM `users` WHERE `level` < '1'");
while($fp = mysql_fetch_array($query))
{
$con = mysql_result(mysql_query("SELECT COUNT(id) FROM `message_c` WHERE `kogo` = '0' and `kto` = '".$fp['id']."' LIMIT 1"),0);
if($con == 0) {
mysql_query("INSERT INTO `message_c` SET `kto` = '".$fp['id']."', `kogo` = '0', `time` = '".time()."', `posl_time` = '".time()."'");
mysql_query("INSERT INTO `message_c` SET `kto` = '0', `kogo` = '".$fp['id']."', `time` = '".time()."', `posl_time` = '".time()."'");
}
mysql_query("INSERT INTO `message` SET `kto` = '0', `komy` = '".$fp['id']."', `readlen` = '0', `text` = '".$text."', `time` = '".time()."'");
mysql_query("UPDATE `message_c` SET `posl_time`='".time()."' WHERE `kogo` = '0' and `kto`='".$fp['id']."' limit 1");
$i++;
}
}
echo '<div class="podmenu">Отправлено!</div>';
}
echo '<div class="podmenu"><form action="" method="post" enctype="multipart/form-data"> 
<textarea name="text" placeholder="Текст письма"></textarea> <br />
<select name="group">
<option value="1">Админам</option>
<option value="2">Юзерам</option>
</select><br/ >
<input type="submit" name="ok" value="Отправить" />
</form></div>';
require_once ('../system/footer.php');