View file ä󿪫¬/modules/groups/news/delete.php

<?
foreach (array('start', 'compress', 'sess', 'settings', 'db_connect', 'ipua', 'fnc', 'user') as $inc) {
    require_once "../../../sys/inc/$inc.php";
}

only_reg('/reg.php');

if(isset($_GET['id']) && $pdo->query(("SELECT COUNT(*) FROM `soo` WHERE `id` = '".intval($_GET['id'])."' LIMIT 1"),0)->fetchColumn()==1)
{
$s=intval($_GET['id']);
$soo = $pdo->query(("SELECT * FROM `soo` WHERE `id` = '$s' LIMIT 1"))->fetch(PDO::FETCH_ASSOC);

if(isset($_GET['id_news']) && $pdo->query(("SELECT COUNT(*) FROM `soo_news` WHERE `id` = '".intval($_GET['id_news'])."' AND `id_soo`='$soo[id]' LIMIT 1"),0)->fetchColumn()==1)
{
$id = intval($_GET['id_news']);    
}

$news = $pdo->query("SELECT * FROM `soo_news` WHERE `id_soo`='$soo[id]' AND `id`='$id'")->fetch(PDO::FETCH_ASSOC);



$ank = $pdo->query("SELECT * FROM `user` WHERE `id`='$news[avtor]'")->fetch(PDO::FETCH_ASSOC);



$mod = $pdo->query(("SELECT COUNT(*) FROM `soo_users` WHERE `id_soo` = '$soo[id]' AND `id_user`='$user[id]' AND `mod` = '1' LIMIT 1"),0)->fetchColumn();
if(isset($user) && $user['id']==$soo['admid'] || $user['id']==$news['avtor'] || $mod)
{
$pdo->query("DELETE FROM `soo_news` WHERE `id`='".$news['id']."' LIMIT 1");
$pdo->query("DELETE FROM `notes` WHERE `id_news`='".$news['id']."' LIMIT 1");


$pdo->query("UPDATE `user` SET `activity` = '" . ($ank['activity'] - 25) . "' WHERE `id` = '" . $ank['id'] . "' LIMIT 1");

$pdo->query("INSERT INTO `jurnal_balls` (`time`, `msg`, `id_user`, `balls`, `id_post`, `type`, `type_post`, `id_soo`) values('$time', 'Удаление записи в блоге группы', '" . $ank['id'] . "', '25', '".$news['id']."', 'minus', 'soo_news', '$soo[id]')");


$_SESSION['message'] = 'Запись успешно удалена';
header('Location: /modules/groups/news/news.php?id='.$soo['id'].'');
}















}
?>