View file forum/inc/them.php

<?php
if (isset($_GET['act']) && $_GET['act'] == 'txt') {
    ob_clean();
    ob_implicit_flush();

    header('Content-Type: text/plain; charset=utf-8', true);
    header('Content-Disposition: attachment; filename="' . retranslit($them['name']) . '.txt";');

    echo "Тема: $them[name] ($forum[name]/$razdel[name])\r\n";

    $q = dbquery("SELECT * FROM `forum_p` WHERE `id_them` = '$them[id]' AND `id_forum` = '$forum[id]' AND `id_razdel` = '$razdel[id]' ORDER BY `time` ASC");

    while ($post = dbassoc($q)) {
        echo "\r\n";

        $ank = get_user($post['id_user']);

        echo "$ank[nick] (" . date("j M Y в H:i", $post['time']) . ")\r\n";

        if ($post['cit'] != NULL && dbresult(dbquery("SELECT COUNT(*) FROM `forum_p` WHERE `id` = '$post[cit]'"), 0) == 1) {
            $cit = dbassoc(dbquery("SELECT * FROM `forum_p` WHERE `id` = '$post[cit]' LIMIT 1"));
            $ank_c = get_user($cit['id_user']);

            echo "--Цитата--\r\n";
            echo "$ank_c[nick] (" . date("j M Y в H:i", $cit['time']) . "):\r\n";
            echo trim(br($cit['msg'], "\r\n")) . "\r\n";
            echo "----------\r\n";
        }

        echo trim(br($post['msg'], "\r\n")) . "\r\n";
    }

    echo "\r\nИсточник: http://$_SERVER[SERVER_NAME]/forum/$forum[id]/$razdel[id]/$them[id]/\r\n";
    exit;
}

if (isset($user) && isset($_GET['f_del']) && is_numeric($_GET['f_del']) && isset($_SESSION['file'][$_GET['f_del']])) {
    @unlink($_SESSION['file'][$_GET['f_del']]['tmp_name']);
}

if (isset($user) && isset($_GET['zakl']) && $_GET['zakl'] == 1) {
    if (dbresult(dbquery("SELECT COUNT(*) FROM `bookmarks` WHERE `id_user` = $user[id] AND `type`='forum' AND `id_object` = '$them[id]'"), 0) != 0) {
        $err[] = "Тема уже есть в ваших закладках";
    } else {
        dbquery("INSERT INTO `bookmarks` (`id_user`, `time`,  `id_object`, `type`) values('$user[id]', '$time', '$them[id]', 'forum')");

        msg('Тема добавлена в закладки');
    }
} elseif (isset($user) && isset($_GET['zakl']) && $_GET['zakl'] == 0) {
    dbquery("DELETE FROM `bookmarks` WHERE `id_user` = '$user[id]' AND `type`='forum' AND `id_object` = '$them[id]'");

    msg('Тема удалена из закладок');
}

if (isset($user) && isset($_GET['act']) && $_GET['act'] == 'new' && isset($_FILES['file_f']) && preg_match('#\.#', $_FILES['file_f']['name']) && isset($_POST['file_s'])) {
    copy($_FILES['file_f']['tmp_name'], H . 'sys/tmp/' . $user['id'] . '_' . md5_file($_FILES['file_f']['tmp_name']) . '.forum.tmp');
    chmod(H . 'sys/tmp/' . $user['id'] . '_' . md5_file($_FILES['file_f']['tmp_name']) . '.forum.tmp', 0777);

    if (isset($_SESSION['file'])) {
        $next_f = count($_SESSION['file']);
    } else {
        $next_f = 0;
    }

    $file = esc(stripcslashes(htmlspecialchars($_FILES['file_f']['name'])));

    $_SESSION['file'][$next_f]['name'] = preg_replace('#\.[^\.]*$#i', NULL, $file); // имя файла без расширения
    $_SESSION['file'][$next_f]['ras'] = strtolower(preg_replace('#^.*\.#i', NULL, $file));
    $_SESSION['file'][$next_f]['tmp_name'] = H . 'sys/tmp/' . $user['id'] . '_' . md5_file($_FILES['file_f']['tmp_name']) . '.forum.tmp';
    $_SESSION['file'][$next_f]['size'] = filesize(H . 'sys/tmp/' . $user['id'] . '_' . md5_file($_FILES['file_f']['tmp_name']) . '.forum.tmp');
    $_SESSION['file'][$next_f]['type'] = $_FILES['file_f']['type'];
}

if (isset($user) && ($them['close'] == 0 || $them['close'] == 1 && user_access('forum_post_close')) && isset($_GET['act']) && $_GET['act'] == 'new' && isset($_POST['msg']) && !isset($_POST['file_s'])) {
    $msg = $_POST['msg'];

    if (strlen2($msg) < 2) {
        $err = 'Короткое сообщение';
    }

    if (strlen2($msg) > 1024) {
        $err = 'Длина сообщения превышает предел в 1024 символа';
    }

    $mat = antimat($msg);

    if ($mat) {
        $err[] = 'В тексте сообщения обнаружен мат: ' . $mat;
    }

    if (dbresult(dbquery("SELECT COUNT(*) FROM `forum_p` WHERE `id_them` = '$them[id]' AND `id_forum` = '$forum[id]' AND `id_razdel` = '$razdel[id]' AND `id_user` = '$user[id]' AND `msg` = '" . my_esc($msg) . "' LIMIT 1"), 0) != 0) {
        $err = 'Ваше сообщение повторяет предыдущее';
    }

    if (!isset($err)) {
        if (isset($_POST['cit']) && is_numeric($_POST['cit']) && dbresult(dbquery("SELECT COUNT(*) FROM `forum_p` WHERE `id` = '" . intval($_POST['cit']) . "' AND `id_them` = '" . intval($_GET['id_them']) . "' AND `id_razdel` = '" . intval($_GET['id_razdel']) . "' AND `id_forum` = '" . intval($_GET['id_forum']) . "'"), 0) == 1) {
            $cit = intval($_POST['cit']);
        } else {
            $cit = 'null';
        }

        dbquery("UPDATE `user` SET `balls` = '" . ($user['balls'] + 1) . "' WHERE `id` = '$user[id]' LIMIT 1");
        dbquery("UPDATE `user` SET `forum_them_comm` = '" . ($user['forum_them_comm'] + 1) . "' WHERE `id` = '" . $user['id'] . "' LIMIT 1");
        dbquery("UPDATE `forum_zakl` SET `time_obn` = '$time' WHERE `id_them` = '$them[id]'");
        dbquery("INSERT INTO `forum_p` (`id_forum`, `id_razdel`, `id_them`, `id_user`, `msg`, `time`, `cit`) values('$forum[id]', '$razdel[id]', '$them[id]', '$user[id]', '" . my_esc($msg) . "', '$time', $cit)");

        $post_id = mysql_insert_id();

        if (isset($_SESSION['file']) && isset($user)) {
            for ($i = 0; $i < count($_SESSION['file']); $i++) {
                if (isset($_SESSION['file'][$i]) && test_file($_SESSION['file'][$i]['tmp_name'])) {
                    dbquery("INSERT INTO `forum_files` (`id_post`, `name`, `ras`, `size`, `type`) values('$post_id', '" . $_SESSION['file'][$i]['name'] . "', '" . $_SESSION['file'][$i]['ras'] . "', '" . $_SESSION['file'][$i]['size'] . "', '" . $_SESSION['file'][$i]['type'] . "')");

                    $file_id = mysql_insert_id();

                    copy($_SESSION['file'][$i]['tmp_name'], H . 'sys/forum/files/' . $file_id . '.frf');
                    unlink($_SESSION['file'][$i]['tmp_name']);
                }
            }

            unset($_SESSION['file']);
        }

        unset($_SESSION['msg']);

        $ank = get_user($them['id_user']); // Определяем автора

        dbquery("UPDATE `user` SET `rating_tmp` = '" . ($user['rating_tmp'] + 1) . "' WHERE `id` = '$user[id]' LIMIT 1");
        dbquery("UPDATE `forum_r` SET `time` = '$time' WHERE `id` = '$razdel[id]' LIMIT 1");

        /* Обсуждения */

        $q = dbquery("SELECT * FROM `frends` WHERE `user` = '" . $them['id_user'] . "' AND `i` = '1'");

        while ($f = dbarray($q)) {
            $a = get_user($f['frend']);
            $discSet = dbarray(dbquery("SELECT * FROM `discussions_set` WHERE `id_user` = '" . $a['id'] . "' LIMIT 1")); // Общая настройка обсуждений

            if ($f['disc_forum'] == 1 && $discSet['disc_forum'] == 1) /* Фильтр рассылки */ {
                // друзьям автора

                if (dbresult(dbquery("SELECT COUNT(*) FROM `discussions` WHERE `id_user` = '$a[id]' AND `type` = 'them' AND `id_sim` = '$them[id]' LIMIT 1"), 0) == 0) {
                    if ($them['id_user'] != $a['id'] || $a['id'] != $user['id']) {
                        dbquery("INSERT INTO `discussions` (`id_user`, `avtor`, `type`, `time`, `id_sim`, `count`) values('$a[id]', '$them[id_user]', 'them', '$time', '$them[id]', '1')");
                    }
                } else {
                    $disc = dbarray(dbquery("SELECT * FROM `discussions` WHERE `id_user` = '$a[id_user]' AND `type` = 'them' AND `id_sim` = '$them[id]' LIMIT 1"));

                    if ($them['id_user'] != $a['id'] || $a['id'] != $user['id']) {
                        dbquery("UPDATE `discussions` SET `count` = '" . ($disc['count'] + 1) . "', `time` = '$time' WHERE `id_user` = '$a[id]' AND `type` = 'them' AND `id_sim` = '$them[id]' LIMIT 1");
                    }
                }
            }
        }

        // отправляем автору
        if (dbresult(dbquery("SELECT COUNT(*) FROM `discussions` WHERE `id_user` = '$them[id_user]' AND `type` = 'them' AND `id_sim` = '$them[id]' LIMIT 1"), 0) == 0) {
            if ($them['id_user'] != $user['id'] && $them['id_user'] != $ank_otv['id']) {
                dbquery("INSERT INTO `discussions` (`id_user`, `avtor`, `type`, `time`, `id_sim`, `count`) values('$them[id_user]', '$them[id_user]', 'them', '$time', '$them[id]', '1')");
            }
        } else {
            $disc = dbarray(dbquery("SELECT * FROM `discussions` WHERE `id_user` = '$them[id_user]' AND `type` = 'them' AND `id_sim` = '$them[id]' LIMIT 1"));

            if ($them['id_user'] != $user['id'] && $them['id_user'] != $ank_otv['id']) {
                dbquery("UPDATE `discussions` SET `count` = '" . ($disc['count'] + 1) . "', `time` = '$time' WHERE `id_user` = '$them[id_user]' AND `type` = 'them' AND `id_sim` = '$them[id]' LIMIT 1");
            }
        }

        /* Уведомления об ответах */
        if (isset($user) && ($respons == TRUE || isset($_POST['cit']))) {

            //Уведомление при цитате
            if (isset($_POST['cit'])) {
                $cit2 = dbassoc(dbquery("SELECT * FROM `forum_p` WHERE `id` = '$cit' LIMIT 1"));
                $ank_otv['id'] = $cit2['id_user'];
            }

            $notifiacation = dbassoc(dbquery("SELECT * FROM `notification_set` WHERE `id_user` = '" . $ank_otv['id'] . "' LIMIT 1"));

            if ($notifiacation['komm'] == 1) {
                dbquery("INSERT INTO `notification` (`avtor`, `id_user`, `id_object`, `type`, `time`) VALUES ('$user[id]', '$ank_otv[id]', '$them[id]', 'them_komm', '$time')");
            }
        }

        $_SESSION['message'] = 'Сообщение успешно добавлено';

        header("Location: ?page=" . intval($_GET['page']) . "");
        exit;
    }
}

/* Модуль жалобы на пользователя
  и его сообщение либо контент
  в зависимости от раздела
 */

if (isset($_GET['spam']) && isset($user)) {
    $mess = dbassoc(dbquery("SELECT * FROM `forum_p` WHERE `id` = '" . intval($_GET['spam']) . "' limit 1"));
    $spamer = get_user($mess['id_user']);

    if (dbresult(dbquery("SELECT COUNT(*) FROM `spamus` WHERE `id_user` = '$user[id]' AND `id_spam` = '$spamer[id]' AND `razdel` = 'forum' AND `spam` = '" . $mess['msg'] . "'"), 0) == 0) {
        if (isset($_POST['spamus'])) {
            if ($mess['id_user'] != $user['id']) {
                $msg = mysql_real_escape_string($_POST['spamus']);

                if (strlen2($msg) < 3) {
                    $err = 'Укажите подробнее причину жалобы';
                }

                if (strlen2($msg) > 1512) {
                    $err = 'Длина текста превышает предел в 1512 символов';
                }

                if (isset($_POST['types'])) {
                    $types = intval($_POST['types']);
                } else {
                    $types = '0';
                }

                if (!isset($err)) {
                    dbquery("INSERT INTO `spamus` (`id_object`, `id_user`, `msg`, `id_spam`, `time`, `types`, `razdel`, `spam`) values('$them[id]', '$user[id]', '$msg', '$spamer[id]', '$time', '$types', 'forum', '" . my_esc($mess['msg']) . "')");

                    $_SESSION['message'] = 'Заявка на рассмотрение отправлена';

                    header("Location: /forum/$forum[id]/$razdel[id]/$them[id]/?spam=$mess[id]&page=$pageEnd");
                    exit;
                }
            }
        }
    }

    aut();
    err();

    echo "<div class='list-group'>\n";
    if (dbresult(dbquery("SELECT COUNT(*) FROM `spamus` WHERE `id_user` = '$user[id]' AND `id_spam` = '$spamer[id]' AND `razdel` = 'forum'"), 0) == 0) {
        echo "<div class='list-group-item list-group-item-warning'>Ложная информация может привести к блокировке аккаунта. Если вас постоянно достает один человек - пишет всякие гадости, вы можете добавить его в черный список.</div>";
        echo "<form class='list-group-item' method='post' action='/forum/$forum[id]/$razdel[id]/$them[id]/?spam=$mess[id]&amp;page=" . intval($_GET['page']) . "'>\n";
        echo "<b>Вы хотите подать жалобу на пользователя:</b> ";
        echo "" . group($spamer['id']) . " <a href=\"/info.php?id=$spamer[id]\">$spamer[nick]</a>\n";
        echo "" . medal($spamer['id']) . " " . online($spamer['id']) . " (" . vremja($mess['time']) . ")<br />";
        echo "<b>Нарушение:</b> <font color='green'>" . output_text($mess['msg']) . "</font><br />";
        echo "<b>Причина нарушения:</b><br />\n<select class='form-control' name='types'>\n";
        echo "<option value='1' selected='selected'>Спам/Реклама</option>\n";
        echo "<option value='2' selected='selected'>Мошенничество</option>\n";
        echo "<option value='3' selected='selected'>Оскорбление</option>\n";
        echo "<option value='0' selected='selected'>Другое</option>\n";
        echo "</select><br />\n";
        echo "<b>Что вы об этом думаете?</b>:";
        echo $tPanel . "<textarea class='form-control' name=\"spamus\"></textarea><br />";
        echo "<button type='submit' class='btn btn-success'><i class='mdi mdi-check'></i> Отправить</button>\n";
        echo "</form>\n";
    } else {
        echo "<div class='list-group-item'>Жалоба на <font color='green'>$spamer[nick]</font> будет рассмотрена в ближайшее время.</div>";
    }

    echo "<div class='list-group-item'>\n";
    echo "<a href='?page=" . intval($_GET['page']) . "'><i class='mdi mdi-arrow-left'></i> Назад</a><br />\n";
    echo "</div>\n";
    echo "</div>\n";

    include_once TFOOT;
    exit;
}


if (isset($user) && $user['balls'] >= 50 && $user['rating'] >= 0 && isset($_GET['id_file']) && dbresult(dbquery("SELECT COUNT(*) FROM `forum_files` WHERE `id` = '" . intval($_GET['id_file']) . "'"), 0) == 1 && dbresult(dbquery("SELECT COUNT(*) FROM `forum_files_rating` WHERE `id_user` = '$user[id]' AND `id_file` = '" . intval($_GET['id_file']) . "'"), 0) == 0) {
    if (isset($_GET['rating']) && $_GET['rating'] == 'down') {
        dbquery("INSERT INTO `forum_files_rating` (`id_user`, `id_file`, `rating`) values('$user[id]', '" . intval($_GET['id_file']) . "', '-1')");
        msg('Ваш отрицательный отзыв принят');
    } elseif (isset($_GET['rating']) && $_GET['rating'] == 'up') {
        dbquery("INSERT INTO `forum_files_rating` (`id_user`, `id_file`, `rating`) values('$user[id]', '" . intval($_GET['id_file']) . "', '1')");
        msg('Ваш положительный отзыв принят');
    }
}

$k_post = dbresult(dbquery("SELECT COUNT(*) FROM `forum_p` WHERE `id_them` = '$them[id]' AND `id_forum` = '$forum[id]' AND `id_razdel` = '$razdel[id]'"), 0);
$k_page = k_page($k_post, $set['p_str']);
$page = page($k_page);
$start = $set['p_str'] * $page - $set['p_str'];
$avtor = get_user($them['id_user']);

err();
aut();

echo "<div class='list-group'>";

if ($them['close'] == 1) {
    echo "<div class='list-group-item list-group-item-danger'>";
    echo '<i class="mdi mdi-lock"></i> Тема закрыта для обсуждения';
    echo "</div>\n";
}
echo "<div class='list-group-item list-group-item-secondary'>";
echo '<b>' . output_text($them['name']) . '</b>';
echo "</div>\n";

/* Время и содержание темы */

echo "<div class='list-group-item'>";
echo "" . output_text($them['text']) . " ";
echo "</div>";

echo "<small class='list-group-item' style='color:grey'>";
echo "<i class='mdi mdi-account'></i> " . user::nick($them['id_user'], 1, 1, 1) . " &bull; \n";
echo "Тема создана: " . vremja($them['time']) . " <br/>";
echo "</small>";

if (!empty($them['id_edit'])) {
    echo "<div class='list-group-item list-group-item-light'>";
    echo "<small style='color: grey;'><i class='mdi mdi-pencil'></i> Посл. изменения " . user::nick($them['id_edit']) . " " . vremja($them['time_edit']) . "</small>";
    echo "</div>";
}

/* Перемещение темы */

if (isset($_GET['act']) && $_GET['act'] == 'mesto' && (user_access('forum_them_edit') || $ank2['id'] == $user['id'])) {
    echo "<form method=\"post\" action=\"/forum/$forum[id]/$razdel[id]/$them[id]/?act=mesto&amp;ok\">\n";
    echo "<div class='list-group-item list-group-item-secondary'>";
    echo "Перемещение темы <b>" . output_text($them['name']) . "</b>\n";
    echo "</div>";
    echo "<div class='list-group-item'>";
    echo "Раздел:<br />\n";
    echo "<select name=\"razdel\" class='form-control'>\n";

    if (user_access('forum_them_edit')) {
        $q = dbquery("SELECT * FROM `forum_f` ORDER BY `pos` ASC");

        while ($forums = dbassoc($q)) {
            echo "<optgroup label='$forums[name]'>\n";

            $q2 = dbquery("SELECT * FROM `forum_r` WHERE `id_forum` = '$forums[id]' ORDER BY `time` DESC");

            while ($razdels = dbassoc($q2)) {
                echo "<option" . ($razdel['id'] == $razdels['id'] ? ' selected="selected"' : null) . " value=\"$razdels[id]\">" . text($razdels['name']) . "</option>\n";
            }

            echo "</optgroup>\n";
        }
    } else {
        $q2 = dbquery("SELECT * FROM `forum_r` WHERE `id_forum` = '$forum[id]' ORDER BY `time` DESC");

        while ($razdels = dbassoc($q2)) {
            echo "<option" . ($razdel['id'] == $razdels['id'] ? ' selected="selected"' : null) . " value='$razdels[id]'>" . text($razdels['name']) . "</option>\n";
        }
    }

    echo "</select><br />\n";
    echo "<button type='submit' class='btn btn-success'><i class='mdi mdi-folder-arrow-right-outline'></i> Переместить</button>\n";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/' class='btn btn-light'>Отмена</a>\n";
    echo "</form>\n";
    echo "</div>";

    echo "<div class='list-group-item'>";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?'><i class='mdi mdi-arrow-left'></i> В тему</a>\n";
    echo "</div>";

    include_once TFOOT;
    exit;
}

/* Редактирование темы */
if (isset($_GET['act']) && $_GET['act'] == 'set' && (user_access('forum_them_edit') || $ank2['id'] == $user['id'])) {
    echo "<form method='post' action='/forum/$forum[id]/$razdel[id]/$them[id]/?act=set&amp;ok'>\n";
    echo "<div class='list-group-item list-group-item-secondary'>";
    echo "Редактирование темы <b>" . output_text($them['name']) . "</b>\n";
    echo "</div>";

    echo "<div class=\"list-group-item\">\n";
    echo "<div class='mb-3'>";
    echo "<label class='form-label'>Название:</label>\n";
    echo "<input name='name' class='form-control' type='text' maxlength='32' value='" . text($them['name']) . "' />\n";
    echo "</div>";
    echo "Сообщение:$tPanel<textarea class='form-control' name=\"msg\">" . text($them['text']) . "</textarea><br />\n";

    if ($user['level'] > 0) {
        if ($them['up'] == 1) {
            $check = ' checked="checked"';
        } else {
            $check = NULL;
        }

        echo "<label><input type=\"checkbox\"$check name=\"up\" class='form-check-input' value=\"1\" /> Всегда наверху</label><br />\n";
    }

    if ($them['close'] == 1) {
        $check = ' checked="checked"';
    } else {
        $check = NULL;
    }

    echo "<label><input type=\"checkbox\"$check name=\"close\" class='form-check-input' value=\"1\" /> Закрыть</label><br />\n";

    if ($ank2['id'] != $user['id']) {

        echo "<label><input type=\"checkbox\" name=\"autor\" value=\"1\" /> Забрать у автора права</label><br />\n";
    }

    echo "<button type='submit' class='btn btn-success'><i class='mdi mdi-content-save-outline'></i> Сохранить изменения</button>\n";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/' class='btn btn-light'>Отмена</a><br />\n";
    echo "</form>\n";
    echo "</div>";

    echo "<div class='list-group-item'>";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?'><i class='mdi mdi-arrow-left'></i> В тему</a>\n";
    echo "</div>";

    include_once TFOOT;
    exit;
}

if (user_access('forum_post_ed') && isset($_GET['del'])) { // удаление поста
    dbquery("DELETE FROM `forum_p` WHERE `id` = '" . intval($_GET['del']) . "' LIMIT 1");

    $_SESSION['message'] = 'Сообщение успешно удалено';

    header("Location: /forum/$forum[id]/$razdel[id]/$them[id]/?page=" . intval($_GET['page']) . "");
    exit;
}

/* Удаление темы */

if (isset($_GET['act']) && $_GET['act'] == 'del' && user_access('forum_them_del') && ($ank2['level'] <= $user['level'] || $ank2['id'] == $user['id'])) {
    echo "<div class=\"list-group-item\">\n";
    echo "Подтвердите удаление темы <b>" . output_text($them['name']) . "</b>\n";
    echo "</div>\n";

    echo "<div class=\"list-group-item\">\n";
    echo "<a href=\"/forum/$forum[id]/$razdel[id]/$them[id]/?act=delete&amp;ok\" class='btn btn-outline-danger'>Да</a> <a href=\"/forum/$forum[id]/$razdel[id]/$them[id]/\" class='btn btn-light'>Нет</a>\n";
    echo "</div>\n";

    echo "<div class='list-group-item'>";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?'><i class='mdi mdi-arrow-left'></i> В тему</a>\n";
    echo "</div>";

    include_once TFOOT;
    exit;
}

/* Опрос */
if (isset($_GET['act']) && $_GET['act'] == 'vote' && (user_access('forum_them_edit') || $ank2['id'] == $user['id'])) {
    if (dbresult(dbquery("SELECT COUNT(`id`) FROM `votes_forum` WHERE `them` = '" . abs(intval($them['id'])) . "' LIMIT 1"), 0) != 0) {
        if (isset($_POST['del']) && isset($user)) {
            dbquery("UPDATE `forum_t` SET `vote`='',`vote_time`='',`vote_close` ='0' WHERE `id` = '$them[id]' LIMIT 1");
            dbquery("DELETE FROM `votes_forum` WHERE `them` = '$them[id]'  ");
            dbquery("DELETE FROM `votes_user` WHERE `them` = '$them[id]'  ");

            $_SESSION['message'] = 'Опрос удалён!';
            header("Location:/forum/$forum[id]/$razdel[id]/$them[id]/");
        }

        if (isset($_POST['send']) && isset($user)) {
            $close = (isset($_POST['close']) ? 1 : 0);
            $text = my_esc($_POST['text']);

            if (strlen2($text) < 3) {
                $err[] = 'Короткая тема опроса';
            }
            if (strlen2($text) > 42) {
                $err[] = 'Тема опроса должна быть короче 40 символов';
            }

            $mat = antimat($text);

            if ($mat) {
                $err[] = 'В теме опроса  обнаружен мат: ' . $mat;
            }

            if (!isset($err)) {
                dbquery("UPDATE `forum_t` SET `vote`='$text',`vote_close` ='$close' WHERE `id` = '$them[id]' LIMIT 1");
            }

            for ($x = 1; $x < 7; $x++) {
                $add = my_esc($_POST['vote_' . $x . '']);

                if (strlen2($add) > 23) {
                    $err = 'Вариант опроса № ' . $x . ' слишком длинный';
                }

                if ($_POST['vote_1'] == NULL || $_POST['vote_2'] == NULL) {
                    $err = 'Два первых варианта должны быть заполнены';
                }

                $mat = antimat($add);

                if ($mat) {
                    $err = 'В варианте опроса № ' . $x . '  обнаружен мат: ' . $mat;
                }

                if (!isset($err)) {
                    dbquery("UPDATE `votes_forum` SET `var`='$add' WHERE `num` = '$x' LIMIT 1");

                    $_SESSION['message'] = 'Опрос изменён!';

                    header("Location:/forum/$forum[id]/$razdel[id]/$them[id]/");
                }
            }
        }

        err();

        function sub($str, $ch) {

            if ($ch < strlen($str)) {
                $str = iconv('UTF-8', 'windows-1251', $str);
                $str = substr($str, 0, $ch);
                $str = iconv('windows-1251', 'UTF-8', $str);
                $str .= '...';
            }
            return $str;
        }

        echo "<form method='post' action='/forum/$forum[id]/$razdel[id]/$them[id]/?act=vote'>";

        echo "<div class='list-group-item'>";
        echo "Опрос: <b>" . (mb_strlen($them['vote']) <= 15 ? output_text($them['vote']) : output_text(sub($them['vote'], 15))) . "</b><br/>";
        echo "</div>";

        echo "<div class='list-group-item'>";
        echo "<b>Тема опроса</b>: " . $tPanel . "<textarea class='form-control' name='text'>" . output_text($them['vote']) . "</textarea><br/>";

        $q = dbquery("SELECT * FROM `votes_forum` WHERE `them` = '" . abs(intval($them['id'])) . "' ORDER BY `id` ASC  LIMIT 6");

        while ($row = dbassoc($q)) {
            echo "Вариант № $row[num] <input name='vote_$row[num]' class='form-control' type='text' value='" . (isset($row['var']) ? output_text($row['var']) : NULL) . "' maxlength='24' placeholder='Не заполнено'  />";
        }
        echo "<label><input type='checkbox' name='close' " . ($them['vote_close'] == '1' ? "checked='checked' value='1' /> Открыть опроc" : "value='1'/> Закрыть опрос") . " </label><br />";
        echo "<button type='submit' name='send' class='btn btn-success'><i class='mdi mdi-content-save-outline'></i> Сохранить изменения</button>\n";
        echo "<button type='submit' name='del' class='btn btn-danger'><i class='mdi mdi-delete'></i> Удалить опрос</button>\n";
        echo '</form>';
    } else {

        if (isset($_POST['send']) && isset($user)) {
            $text = my_esc($_POST['text']);

            if (strlen2($text) < 3) {
                $err[] = 'Короткая тема опроса';
            }

            if (strlen2($text) > 42) {
                $err[] = 'Тема опроса должна быть короче 40 символов';
            }

            $mat = antimat($text);

            if ($mat) {
                $err[] = 'В теме опроса  обнаружен мат: ' . $mat;
            }

            if (!isset($err)) {
                dbquery("UPDATE `forum_t` SET `vote`='$text',`vote_close` ='0' WHERE `id` = '$them[id]' LIMIT 1");
            }

            for ($x = 1; $x < 7; $x++) {
                $add = my_esc($_POST['add_' . $x . '']);
                if (strlen2($add) > 23) {
                    $err = 'Вариант опроса № ' . $x . ' слишком длинный';
                }

                if ($_POST['add_1'] == NULL || $_POST['add_2'] == NULL) {
                    $err = 'Два первых варианта должны быть заполнены';
                }

                $mat = antimat($add);

                if ($mat) {
                    $err = 'В варианте опроса № ' . $x . '  обнаружен мат: ' . $mat;
                }

                if (!isset($err)) {
                    dbquery("INSERT INTO `votes_forum` (`them`,`var`,`num`) values('$them[id]','$add','$x')");

                    $_SESSION['message'] = 'Опрос добавлен!';

                    header("Location:/forum/$forum[id]/$razdel[id]/$them[id]/");
                }
            }
        }

        err();

        echo "<form method='post' action='/forum/$forum[id]/$razdel[id]/$them[id]/?act=vote'>";

        echo "<div class='list-group-item'>";
        echo 'Тема опроса:' . $tPanel . '<textarea class="form-control" required name="text"></textarea><br/> ';

        for ($x = 1; $x < 7; $x++) {
            echo "Вариант № $x <input name='add_$x' type='text' class='form-control' maxlength='15' placeholder='Не заполнено' />";
        }

        echo "<br/>";
        echo "<button type='submit' class='btn btn-success' name='send'><i class='mdi mdi-check'></i> Добавить</button>\n";
        echo '</form>';
    }
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/' class='btn btn-light'>Отмена</a>";
    echo "</form>";
    echo "</div>";

    echo "<div class='list-group-item'>";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?'><i class='mdi mdi-arrow-left'></i> В тему</a>";
    echo "</div>";

    include_once TFOOT;
    exit;
}

if (isset($_GET['vote_user']) && dbresult(dbquery("SELECT * FROM `votes_user` WHERE `var` = '" . intval($_GET['vote_user']) . "' AND `them` = '$them[id]' "), 0) != 0) {
    $us = intval($_GET['vote_user']);
    $k_post = dbresult(dbquery("SELECT * FROM `votes_user` WHERE  `var` = '$us' AND `them`='$them[id]'"), 0);
    $k_page = k_page($k_post, $set['p_str']);
    $page = page($k_page);
    $start = $set['p_str'] * $page - $set['p_str'];

    $q = dbquery("SELECT `id_user`,`time` FROM `votes_user` WHERE  `var` = '$us' AND `them`='$them[id]' ORDER BY `time`  LIMIT $start, $set[p_str] ");
    while ($row = dbassoc($q)) {
        $ank = get_user($row['id_user']);
        echo '<div class="list-group-item">';
        echo avatar($ank['id']) . group($ank['id']) . ' ';
        echo user::nick($ank['id'], 1, 1, 1) . ' ' . vremja($row['time']);
        echo '</div>';
    }

    if ($k_page > 1) {
        str("/forum/$forum[id]/$razdel[id]/$them[id]/?vote_user=$us&", $k_page, $page);
    }
    ?>
    <div class="list-group-item">
        <a href="/forum/<?= $forum['id']; ?>/<?= $razdel['id']; ?>/<?= $them['id']; ?>/?"><i class='mdi mdi-arrow-left'></i> В тему</a>
    </div>
    <?php
    include_once TFOOT;
    exit;
}

/* Голосование в опросе */
if (isset($_POST['go']) && isset($_POST['vote']) && isset($user)) {
    $vote = abs(intval($_POST['vote']));

    if (dbresult(dbquery("SELECT * FROM `votes_user` WHERE `them` = '" . abs(intval($them['id'])) . "'  AND `id_user`='$user[id]' LIMIT 1"), 0) == 0 && $them['vote_close'] != '1' && $them['close'] == '0') {
        dbquery("INSERT INTO `votes_user` (`them`,`id_user`,`var`,`time`) values('$them[id]','$user[id]','$vote','" . time() . "')");
        $_SESSION['message'] = 'Ваш голос принят!';
        header("Location:/forum/$forum[id]/$razdel[id]/$them[id]/");
    } else {
        $_SESSION['message'] = 'Ошибка !';
        header("Location:/forum/$forum[id]/$razdel[id]/$them[id]/");
    }
}

/* Опрос */

$vote_c = dbresult(dbquery("SELECT COUNT(*) FROM `votes_forum` WHERE `them` = '" . abs(intval($them['id'])) . "' LIMIT 1"), 0);

if ($vote_c != 0) {
    ?>
    <div class="list-group-item">
        <div class="round_corners poll_block stnd_padd">
            <div style="font-size:14px;">
                Опрос: <b><?= output_text($them['vote']); ?></b>
            </div>
            <?php
            $q = dbquery("SELECT * FROM `votes_forum` WHERE `them` = '" . abs(intval($them['id'])) . "' AND `var` != '' LIMIT 6");
            ?>
            <form action="" method="post">
                <?php
                while ($row = dbassoc($q)) {
                    $sum = dbresult(dbquery("SELECT COUNT(*) FROM `votes_user` WHERE `them` = '$row[them]'"), 0);
                    $var = dbresult(dbquery("SELECT COUNT(*) FROM `votes_user` WHERE `them` = '$row[them]' AND `var` = '$row[num]'"), 0);

                    if ($sum == 0) {
                        $poll = 0;
                    } elseif ($var == 0) {
                        $poll = 0;
                    } else {
                        $poll = ($var / $sum) * 100;
                    }

                    $us = dbresult(dbquery("SELECT COUNT(*) FROM `votes_user` WHERE `them` = '" . abs(intval($them['id'])) . "'  AND `id_user`='$user[id]' LIMIT 1"), 0);
                    if ($us == '0' && isset($user)) {
                        ?>
                        <input type="radio" value="<?= $row['num']; ?>" name="vote"/>
                        &nbsp;<?= output_text($row['var']); ?>
                        </a>
                        <?php
                        if ($var > 0) {
                            echo " - <a href='?vote_user=$row[num]'>$var чел.</a>";
                        }
                        echo "<br />";
                    } else {
                        echo output_text($row['var']);

                        if ($var > 0) {
                            echo " - <a href='?vote_user=$row[num]'>$var</a>";
                        }
                        echo "<br />";
                        ?>
                        <div class="progress" role="progressbar" aria-label="Basic example" aria-valuenow="<?= $poll; ?>" aria-valuemin="0" aria-valuemax="100">
                            <div class="progress-bar bg-success" style="width: <?= $poll; ?>%"><?= $poll; ?>%</div>
                        </div>
                        <?php
                    }
                }
                if (isset($user) && $us == 0 && $them['vote_close'] != '1' && $them['close'] == 0) {
                    echo "<button type='submit' class='btn btn-success' name='go'><i class='mdi mdi-check'></i> Голосовать</button>\n";
                }
                ?>
            </form>
        </div>
    </div>
    <?php
}

/* В закладки и поделиться */

if (isset($user)) {
    echo "<div class='list-group-item'>";
    echo "<div class='list-group list-group-horizontal'>";
    $share = dbresult(dbquery("SELECT COUNT(`id`)FROM `notes` WHERE `share_id`='" . $them['id'] . "' AND `share_type`='forum'"), 0);

    if (dbresult(dbquery("SELECT COUNT(`id`)FROM `notes` WHERE `id_user`='" . $user['id'] . "' AND `share_type`='forum' AND `share_id`='" . $them['id'] . "' LIMIT 1"), 0) == 0 && isset($user)) {
        echo "<div class='list-group-item'>";
        echo " <a href='/forum/share.php?id=" . $them['id'] . "'><i class='mdi mdi-share'></i> Поделиться: " . $share . "</a>";
        echo "</div>";
    } else {
        echo "<div class='list-group-item list-group-item-secondary'>";
        echo "Вы поделились данной темой (" . $share . ")";
        echo "</div>";
    }

    $markinfo = dbresult(dbquery("SELECT COUNT(`id`) FROM `bookmarks` WHERE `id_object` = '" . $them['id'] . "' AND `type`='forum'"), 0);

    if (dbresult(dbquery("SELECT COUNT(`id`) FROM `bookmarks` WHERE `id_object` = '$them[id]' AND `id_user` = '$user[id]' AND `type`='forum'"), 0) == 0) {
        echo "<div class='list-group-item'>";
        echo " <a href=\"?page=$page&amp;zakl=1\" title='Добавить в закладки'><i class='mdi mdi-star-outline'></i> Добавить в закладки</a>\n";
        echo "</div>";
    } else {
        echo "<div class='list-group-item list-group-item-secondary'>";
        echo " <a href=\"?page=$page&amp;zakl=0\" title='Удалить из закладок'><i class='mdi mdi-star-remove'></i> Удалить из закладок</a>\n";
        echo "</div>";
    }
    echo "</div>";
    echo "</div>"; //list-group
}


/* Кнопки действия с темой */

if (isset($user) && (((!isset($_GET['act']) || $_GET['act'] != 'post_delete') && (user_access('forum_post_ed') || $ank2['id'] == $user['id'])) || ((user_access('forum_them_edit') || $ank2['id'] == $user['id'])) || (user_access('forum_them_del') || $ank2['id'] == $user['id']))) {
    echo "<div class=\"list-group-item\">\n";
    echo "<div class='list-group list-group-horizontal'>";
    if (user_access('forum_them_edit') || $them['id_user'] == $user['id']) {
        echo "<div class=\"list-group-item\">\n";
        echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?act=set'><i class='mdi mdi-cog-outline'></i> Ред.</a>\n";
        echo "</div>\n";
        echo "<div class=\"list-group-item\">\n";
        echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?act=mesto'><i class='mdi mdi-folder-arrow-left-right-outline'></i> Переместить</a>\n";
        echo "</div>\n";

        if ($vote_c == 0) {
            ?>
            <div class="list-group-item">
                <a href="/forum/<?= $forum['id']; ?>/<?= $razdel['id']; ?>/<?= $them['id']; ?>/?act=vote"><i class='mdi mdi-chart-box-plus-outline'></i> Опрос</a> 
            </div>
            <?php
        } else {
            echo "<div class=\"list-group-item\">\n";
            echo '<a href="?act=vote"><i class="mdi mdi-cog"></i> Редактировать опрос</a>';
            echo "</div>\n";
        }
    }

    if (user_access('forum_them_del') || $ank2['id'] == $user['id']) {
        echo "<div class=\"list-group-item\">\n";
        echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?act=del'><i class='mdi mdi-delete-outline'></i> Удалить</a>\n";
        echo "</div>\n";
    }

    echo "</div>\n";
    echo "</div>\n";
}

echo "<div class='list-group-item list-group-item-primary'><i class='mdi mdi-comment-multiple-outline'></i> Комментарии: " . dbresult(dbquery("SELECT COUNT(*) FROM `forum_p` WHERE `id_forum` = '$forum[id]' AND `id_razdel` = '$razdel[id]' AND `id_them` = '$them[id]'"), 0) . "</div>";

/* сортировка по времени */

if (isset($user)) {
    echo "<div class=\"list-group-item\">\n";
    echo "<div id='comments' class='nav nav-tabs' style='margin-bottom:-9px'>";
    echo "<div class='nav-item'>";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?page=$page&amp;sort=1' class='" . ($user['sort'] == 1 ? 'nav-link active' : 'nav-link') . "'>Внизу</a>";
    echo "</div>";

    echo "<div class='nav-item'>";
    echo "<a href='/forum/$forum[id]/$razdel[id]/$them[id]/?page=$page&amp;sort=0' class='" . ($user['sort'] == 0 ? 'nav-link active' : 'nav-link') . "'>Вверху</a>";
    echo "</div>";
    echo "</div>";
    echo "</div>";
}

if ((user_access('forum_post_ed') || isset($user) && $ank2['id'] == $user['id']) && isset($_GET['act']) && $_GET['act'] == 'post_delete') {
    $lim = NULL;
} else {
    $lim = " LIMIT $start, $set[p_str]";
}

$q = dbquery("SELECT * FROM `forum_p` WHERE `id_them` = '$them[id]' AND `id_forum` = '$forum[id]' AND `id_razdel` = '$razdel[id]' ORDER BY `time` $sort$lim");

if (dbrows($q) == 0) {
    echo "<div class='list-group-item'>";
    echo "Нет результатов\n";
    echo "</div>";
}

while ($post = dbassoc($q)) {
    $ank = get_user($post['id_user']);

    echo '<div class="list-group-item">';

    if ((user_access('forum_post_ed') || isset($user) && $ank2['id'] == $user['id']) && isset($_GET['act']) && $_GET['act'] == 'post_delete') {
        echo "<span style='float:right'>";
        echo '<input type="checkbox" class="form-check-input" name="post_' . $post['id'] . '" value="1" />';
        echo "</span>";
    }

    echo user::avatar($post['id_user']);
    echo user::nick($ank['id'], 1, 1, 1);
    echo "<small style='color:grey'>";
    echo vremja($post['time']) . '';
    if ($them['id_user'] == $post['id_user']) { // Отмечаем автора темы
        echo ' &bull; Автор темы';
    }
    echo "</small><br />";
    $postBan = dbresult(dbquery("SELECT COUNT(*) FROM `ban` WHERE (`razdel` = 'all' OR `razdel` = 'forum') AND `post` = '1' AND `id_user` = '$ank[id]' AND (`time` > '$time' OR `navsegda` = '1')"), 0);

    if ($postBan == 0) { // Блок сообщения

        /* Вывод статуса */
        /*

          $status = dbassoc(dbquery("SELECT * FROM `status` WHERE `pokaz` = '1' AND `id_user` = '$ank[id]' LIMIT 1"));

          if (isset($status['id']) && $set['st'] == 1) {
          echo "<div class='st_1'></div>";
          echo "<div class='st_2'>";
          echo "" . output_text($status['msg']) . "";
          echo "</div>\n";
          }
         * 
         */

        # Цитирование поста

        if ($post['cit'] != NULL && dbresult(dbquery("SELECT COUNT(*) FROM `forum_p` WHERE `id` = '$post[cit]'"), 0) == 1) {
            $cit = dbassoc(dbquery("SELECT * FROM `forum_p` WHERE `id` = '$post[cit]' LIMIT 1"));
            $ank_c = get_user($cit['id_user']);

            echo '<div class="alert alert-light">';
            echo '<b>' . $ank_c['nick'] . ' (' . vremja($cit['time']) . '):</b><br />';
            echo output_text($cit['msg']) . '<br />';
            echo '</div>';
        }

        echo output_text($post['msg']) . '<br />'; // Посты темы

        echo '<table>';
        include H . '/forum/inc/file.php'; // Прекрепленные файлы
        echo '</table>';
    } else {
        echo output_text($banMess) . '<br />';
    }

    if (isset($user)) {
        echo '<small style="color:grey;">';
        if ($them['close'] == 0) {
            if (isset($user) && $user['id'] != $ank['id'] && $ank['id'] != 0) {
                echo '<a href="/forum/' . $forum['id'] . '/' . $razdel['id'] . '/' . $them['id'] . '/?response=' . $ank['id'] . '&amp;page=' . $page . '""><i class="mdi mdi-comment-account-outline"></i> Ответить </a>';
                echo ' &bull; <a href="/forum/' . $forum['id'] . '/' . $razdel['id'] . '/' . $them['id'] . '/' . $post['id'] . '/cit"><i class="mdi mdi-comma-box-outline"></i> Цитировать </a>';
            }
        }


        if ($them['close'] == 0) { // если тема закрыта, то скрываем кнопки
            if (user_access('forum_post_ed') && ($ank['level'] <= $user['level'] || $ank['level'] == $user['level'] && $post['id_user'] == $user['id'])) {
                echo " &bull; <a href=\"/forum/$forum[id]/$razdel[id]/$them[id]/$post[id]/edit\" title='Изменить пост $ank[nick]'><i class='mdi mdi-comment-edit-outline'></i> Редактировать </a> \n";
            } elseif ($user['id'] == $post['id_user'] && $post['time'] > time() - 600) {
                echo " &bull; <a href=\"/forum/$forum[id]/$razdel[id]/$them[id]/$post[id]/edit\" title='Изменить мой пост'><i class='mdi mdi-comment-edit-outline'></i> Редактировать (" . ($post['time'] + 600 - time()) . " сек)</a> \n";
            }


            if ($user['id'] != $ank['id'] && $ank['id'] != 0) { // Кроме автора поста и системы 
                echo " &bull; <a href=\"/forum/$forum[id]/$razdel[id]/$them[id]/?spam=$post[id]&amp;page=$page\" title='Это спам'><i class='mdi mdi-comment-off-outline'></i> Спам </a>\n";
            }
        }
        if (user_access('forum_post_ed')) { // удаление поста
            echo " &bull; <a href=\"/forum/$forum[id]/$razdel[id]/$them[id]/?del=$post[id]&amp;page=$page\" title='Удалить'><i class='mdi mdi-comment-remove-outline'></i> Удалить </a>\n";
        }
        echo "&nbsp;\n";

        echo '</small><br/>';
    }
    echo ' ' . ($webbrowser ? null : '<br/>') . ' </div>';
}

if ((user_access('forum_post_ed') || isset($user) && $ank2['id'] == $user['id']) && isset($_GET['act']) && $_GET['act'] == 'post_delete') {
    
} elseif ($k_page > 1) {
    str("/forum/$forum[id]/$razdel[id]/$them[id]/?", $k_page, $page);
} // Вывод страниц

if ((user_access('forum_post_ed') || isset($user) && $ank2['id'] == $user['id']) && isset($_GET['act']) && $_GET['act'] == 'post_delete') {
    
} elseif (isset($user) && ($them['close'] == 0 || $them['close'] == 1 && user_access('forum_post_close'))) {
    if (isset($user)) {
        echo "<div class='list-group-item list-group-item-secondary'>";
        echo 'Новое сообщение:';
        echo "</div>";
    }


    if ($user['set_files'] == 1) {
        echo "<form class='list-group-item' method='post' name='message' enctype='multipart/form-data' action='/forum/$forum[id]/$razdel[id]/$them[id]/new?page=$page&amp;$passgen&amp;" . $go_otv . "'>\n";
    } else {
        echo "<form class='list-group-item' method='post' name='message' action='/forum/$forum[id]/$razdel[id]/$them[id]/new?page=$page&amp;$passgen&amp;" . $go_otv . "'>\n";
    }

    if (isset($_POST['msg']) && isset($_POST['file_s'])) {
        $msg2 = output_text($_POST['msg'], false, true, false, false, false);
    } else {
        $msg2 = NULL;
    }
    echo "$tPanel<textarea class='form-control' name=\"msg\">$otvet$msg2</textarea>\n";

    echo "<small style='color:grey'>Вы опубликовали " . sklon_text($user['forum_them_comm'], array(__('сообщение'), __('сообщения'), __('сообщений'))) . " в форуме</small>";
    echo "<br />";

    if ($user['set_files'] == 1) {
        if (isset($_SESSION['file'])) {
            echo "Прикрепленные файлы:<br />\n";

            for ($i = 0; $i < count($_SESSION['file']); $i++) {

                if (isset($_SESSION['file'][$i]) && test_file($_SESSION['file'][$i]['tmp_name'])) {
                    echo "<i class='mdi mdi-file'></i> \n";
                    echo $_SESSION['file'][$i]['name'] . '.' . $_SESSION['file'][$i]['ras'] . ' (';
                    echo size_file($_SESSION['file'][$i]['size']);
                    echo ") <a href='/forum/$forum[id]/$razdel[id]/$them[id]/d_file$i' title='Удалить из списка'><i class='mdi mdi-delete'></i></a>\n";
                    echo "<br />\n";
                }
            }
        }

        echo "<input name='file_f' class='form-control' type='file' />\n";
    echo "<button type='submit' name='file_s' class='btn btn-secondary btn-sm'><i class='mdi mdi-check'></i> Прикрепить файл</button><br /><br />\n";
    }

    echo "<button type='submit' name='post' class='btn btn-success'><i class='mdi mdi-check'></i> Опубликовать</button>\n";
    echo '</form>';
}
?>