View file chat/inc/room.php

<?php

if (isset($_POST['msg']) && isset($user)) {
    $msg = $_POST['msg'];
    $mat = antimat($msg);

    if ($mat) {
        $err[] = 'В тексте сообщения обнаружен мат: ' . $mat;
    }

    if (strlen2($msg) > 512) {
        $err[] = 'Сообщение слишком длинное';
    } elseif (strlen2($msg) < 2) {
        $err[] = 'Короткое сообщение';
    } elseif (dbresult(dbquery("SELECT COUNT(*) FROM `chat_post` WHERE `id_user` = '$user[id]' AND `msg` = '" . mysql_real_escape_string($msg) . "' AND `time` > '" . ($time - 300) . "' LIMIT 1"), 0) != 0) {
        $err = 'Ваше сообщение повторяет предыдущее';
    } elseif (!isset($err)) {
        if (isset($_POST['privat'])) {
            $priv = abs(intval($_POST['privat']));
        } else {
            $priv = 0;
        }

        dbquery("INSERT INTO `chat_post` (`id_user`, `time`, `msg`, `room`, `privat`) values('$user[id]', '$time', '" . my_esc($msg) . "', '$room[id]', '$priv')");

        $_SESSION['message'] = 'Сообщение успешно добавлено';

        header("Location: /chat/room/$room[id]/" . rand(1000, 9999) . "/");

        exit;
    }
}

if ($room['umnik'] == 1) {
    include 'inc/umnik.php';
}

if ($room['shutnik'] == 1) {
    include 'inc/shutnik.php';
}

err();
aut(); // форма авторизации

echo "<div class='list-group'>\n";
if (isset($user)) {
    echo "<form class='list-group-item' method=\"post\" name='message' action=\"/chat/room/$room[id]/" . rand(1000, 9999) . "/\">\n";
    echo "$tPanel<textarea name=\"msg\" class='form-control'></textarea><br />\n";
    echo "<button type='submit' class='btn btn-success'><i class='mdi mdi-cursor-default-outline'></i> Отправить</button>\n";
    echo " <a href='/chat/room/$room[id]/" . rand(1000, 9999) . "/' class='btn btn-light'>Обновить</a><br />\n";
    echo "</form>\n";
}

$k_post = dbresult(dbquery("SELECT COUNT(*) FROM `chat_post` WHERE `room` = '$room[id]' AND (`privat`='0'" . (isset($user) ? " OR `privat` = '$user[id]'" : null) . ")"), 0);
$k_page = k_page($k_post, $set['p_str']);
$page = page($k_page);
$start = $set['p_str'] * $page - $set['p_str'];


if ($k_post == 0) {
    echo "<div class='list-group-item'>\n";
    echo "Нет сообщений\n";
    echo "</div>\n";
}

$q = dbquery("SELECT * FROM `chat_post` WHERE `room` = '$room[id]' AND (`privat`='0'" . (isset($user) ? " OR `privat` = '$user[id]'" : null) . ") ORDER BY id DESC LIMIT $start, $set[p_str]");

while ($post = dbassoc($q)) {
    echo '<div class="list-group-item">';
    if ($post['umnik_st'] == 0 && $post['shutnik'] == 0) {
        $ank = dbassoc(dbquery("SELECT * FROM `user` WHERE `id` = $post[id_user] LIMIT 1"));
    }

    if ($post['umnik_st'] == 0 && $post['shutnik'] == 0) {
        echo group($ank['id']);
    } elseif ($post['shutnik'] == 1) {
        echo "<i class='mdi mdi-account-cowboy-hat'></i>\n";
    } elseif ($post['umnik_st'] != 0) {
        echo "<i class='mdi mdi-account-school'></i>\n";
    }

    if ($post['privat'] == $user['id']) {
        $sPrivat = '<font color="darkred">[!п]</font>';
    } else {
        $sPrivat = NULL;
    }

    if ($post['umnik_st'] == 0 && $post['shutnik'] == 0) {
        echo "<a href='/chat/room/$room[id]/" . rand(1000, 9999) . "/$ank[id]/'>$ank[nick]</a>\n";
        echo "" . medal($ank['id']) . " $sPrivat " . online($ank['id']) . " <small style='color:grey'>" . vremja($post['time']) . "</small>";
    } elseif ($post['umnik_st'] != 0) {
        echo "<b>$set[chat_umnik]</b> <small style='color:grey'>" . vremja($post['time']) . "</small>\n";
    } elseif ($post['shutnik'] == 1) {
        echo "<b>$set[chat_shutnik]</b> <small style='color:grey'>" . vremja($post['time']) . "</small>\n";
    }

    echo "<br />".output_text($post['msg']) . '';

    echo "</div>\n";
}

echo "</div>\n";

if ($k_page > 1) {
    str("/chat/room/$room[id]/" . rand(1000, 9999) . "/?", $k_page, $page);
} // Вывод страниц