View file ä󿪫¬/modules/obmen/inc/file_form.php

<?php
if (access('obmen_file_delete') || $user['id'] == $file_id['id_user']) {
if (isset($_GET['act']) && $_GET['act'] == 'edit') {
    echo '<div class="card">';
    echo "<div class = 'card-header'>" . lang('Параметры') . " <a style = 'float:right;color: grey;' href = '?showinfo'><small>" . lang('Закрыть') . "</small></a></div>";
    echo "<form method = 'post' class = 'card-block' action = '?showinfo&amp;act=edit&amp;ok'>";
    echo "<b>" . lang('Название') . "</b><br />";
    echo "<input class='form-control' type = 'text' name = 'name' value = '$file_id[name]' maxlength = '512' />";
    echo "<b>" . lang('Описание') . "</b><br />";
    echo "<textarea class='form-control' rows='3' name = 'opis'>$file_id[opis]</textarea>";
    echo "" . lang('Формат') . ": <font color = 'green'>$file_id[ras]</font><br />";

    $doc->Button('btn btn-primary btn-sm', 'save', 'save', 'Сохранить');

    echo "</form>";
    echo "</div>";
}
}
if (access('obmen_file_delete') || $user['id'] == $file_id['id_user']) {
if (isset($_GET['act']) && $_GET['act'] == 'delete') {
    echo '<div class="card">';
    echo "<div class = 'card-header'>" . lang('Удаление') . " <a style = 'float:right;color: grey;' href = '?showinfo'><small>" . lang('Закрыть') . "</small></a></div>";
    echo "<div class = 'card-block'>";
    echo lang('Удалить файл') . " " . toOutput($file_id['name']) . "?<br />";

    $doc->Link('btn btn-primary btn-sm', '?showinfo&amp;act=delete&amp;ok', null, 'Да');
    $doc->Link('btn btn-secondary btn-sm', '?showinfo', null, 'Нет');

    echo "</div>";
    echo "</div>";
}
}

if (access('obmen_file_delete') || $user['id'] == $file_id['id_user']) {
    $doc->Link('list-group-item list-group-item-warning', '?showinfo&amp;act=edit', 'cog', 'Параметры');
    $doc->Link('list-group-item list-group-item-warning', '?showinfo&amp;act=delete', 'trash-o', 'Удалить');
}




echo '<div class="list-group-item-komm list-group-item-info" style="padding: 10px;">';
echo "<i class='fa fa-comments fa-fw'></i> Комментарии 
<span class='badgei'>".$pdo->query(("SELECT COUNT(*) FROM `obmennik_komm` WHERE `id_file` = '$file_id[id]'"),0)->fetchColumn()."</span>";
echo'</div>';






$k_post = $pdo->query(("SELECT COUNT(*) FROM `obmennik_komm` WHERE `id_file` = '$file_id[id]'"), 0)->fetchColumn();
$k_page = k_page($k_post, 5);
$page = page($k_page);
$start = 5 * $page - 5;

if ($k_post == 0) {
    $doc->NoResult();
}

$q = $pdo->query("SELECT * FROM `obmennik_komm` WHERE `id_file` = '$file_id[id]' ORDER BY `id` DESC LIMIT $start, 5");
while ($post = $q->fetch(PDO::FETCH_ASSOC)) {
    $ank = get_user($post['id_user']);
    

echo "<div class='list-group-item'>"; 
echo '<table style="cellspacing="0" cellpadding="0" width="100%"><tr>';
if (IS_WEB == 1) {
echo '<td style="width: 8%;">';
    
}else{
echo '<td style="width: 15%;">';    
}

echo '<span style="position: absolute; top: 5%;">';
avatarz($ank['id']);
echo '</span>';
echo '</td>';
echo '<td style="width: 85%;">'; 
echo user($ank['id']) . " ";
echo "<span style = 'float:right;color: grey;'><small title='" . date::timek($file_id['time']) . "'>" . date::timek($post['time']) . "</small></span>";
echo "<br />\n";
echo toOutput(htmlspecialchars($post['msg']))."<br />\n";
if (isset($user) && $ank['id'] != $user['id'])echo "<a href='?showinfo&amp;mess&amp;page=$page&amp;idd=$post[id_user]'><i class='fa fa-comments fa-fw'></i> Ответить</a> \n";



if (isset($user))
{
	 if (access('obmen_komm_del') || $user['id'] == $ank['id']) {
		echo '<span style="float:right;"><a href="?showinfo&amp;mess&amp;page=$page&amp;del_post='.htmlspecialchars($post['id']).'"><i class="fa fa-trash fa-fw"></i> Удалить</a></span>';
}}
echo '</td>';
echo '</tr></table>'; 
echo "</div>";
}    
    
    
    
    
    
    
    





$avtor=get_user($file_id['id_user']);

$sql = $pdo->query("SELECT * FROM `user_blacklist` WHERE `id_user` = '" . htmlspecialchars($avtor['id']) . "' AND `id_ank` = '" . htmlspecialchars($user['id']) . "';")->fetch(PDO::FETCH_NUM);
if (($sql) != 0 AND $user['level'] < 3) {
echo "  <div class='list-group-item'>\n";
echo "  <div class='err'>\n";
echo "Вы не можете комментировать этот файл, так как находитесь в черном списке у автора\n";
echo "   </div>\n";
echo "   </div>\n";

}else{



if (isset($user)) {
    if (isset($_GET['idd']) && $user['id'] != @$_GET['id']) {
        $q_user = $pdo->query(("SELECT * FROM `user` WHERE `id`='" . htmlspecialchars($_GET['idd']) . "'"))->fetch(PDO::FETCH_BOTH);
        echo "<form class = 'list-group-item' method=\"post\" name='message' action=\"?showinfo&amp;mess&amp;uidd=$q_user[id]\">\n";
    } else {
        echo "<form class = 'list-group-item' method=\"post\" name='message' action=\"?showinfo&amp;mess\">\n";
    }

    if (isset($_GET['idd']) && isset($user) && $user['id'] != @$_GET['id']) {
        $q_user = $pdo->query(("SELECT * FROM `user` WHERE `id`='" . htmlspecialchars($_GET['idd']) . "'"))->fetch(PDO::FETCH_BOTH);
 echo auto_bb("message", "msg");
        echo "<textarea class='form-control' rows='3' name='msg'>$q_user[nick], </textarea><br />";
    } else {
  echo auto_bb("message", "msg");
        echo "<textarea class='form-control' rows='3' name='msg'></textarea><br />\n";
    }

    $doc->Button('knopka', null, 'plus', 'Добавить');

    echo "</form>\n";
}


}














if ($k_page > 1) {
    echo "<div class='list-group-item'>";
    str('?showinfo&amp;', $k_page, $page);
    echo "</div>";
} // Вывод страниц