View file ä󿪫¬/modules/support/show.php

<?
foreach (array('start', 'compress', 'sess', 'settings', 'db_connect', 'ipua', 'fnc', 'user') as $inc) {
    require_once "../../sys/inc/$inc.php";
}
$set['title']='Просмотр запроса';
include_once '../../sys/inc/thead.php';

if (isset($user) && $pdo->query(("SELECT COUNT(*) FROM `promotion_blacklist` WHERE `id_user` = '".$user['id']."' LIMIT 1"),0)->fetchColumn()){    
header('location: index.php'); 
}

#Навигация
echo "<div class='card-header'>";
echo "<a href='/' data-toggle='tooltip' data-placement='right' title='" . lang('На главную') . "'><i class='fa fa-home fa-lg'></i></a> <i class='fa fa-angle-right fa-fw'></i> ";
echo "<a href='/modules/support/'>" . lang('Тех.поддержка') . "</a> <i class='fa fa-angle-right fa-fw'></i> " . lang('Запрос') . "";
echo "</div>";


$post=$pdo->query(("select * from `promotion` where `id`='".intval($_GET['id'])."';"))->fetch(PDO::FETCH_BOTH);
$access = $pdo->query(("select * from `promotion_access` where `id_user`='".intval($user['id'])."';"))->fetchColumn();
$ank=get_user($post['id_user']);

if ($access || access('adm_mysql')){
$pdo->query("UPDATE `jurnal_adm` SET `status_id` = '".intval($user['id'])."', `time_status` = '$time' WHERE `id_post`='".intval($post['id'])."'");
}

if (isset($_GET['del_komm']) && $access || isset($_GET['del_komm']) &&  access('adm_mysql')){
$q1 = $pdo->query("SELECT * FROM `files_post` WHERE `id_post` = '" . intval($_GET['del_komm']) . "' AND `id_user` = '" .$user['id']. "' AND `type` = 'support'");
while ($d = $q1->fetch(PDO::FETCH_ASSOC)) {
unlink(htmlspecialchars($_SERVER['DOCUMENT_ROOT']).'/sys/files_post/'.$d['id'].'.jpg');
}    
$pdo->query("DELETE FROM `otvet_tiket` WHERE `id` = '".intval($_GET['del_komm'])."'");
$_SESSION['message'] = 'Комментарий успешно удален';
header("Location: ?id=$post[id]");    
}

if (isset($_GET['del_file'])){
$q1 = $pdo->query("SELECT * FROM `files_post` WHERE `id` = '" . intval($_GET['del_file']) . "' AND `id_user` = '" .$user['id']. "' AND `type` = 'support'");
while ($d = $q1->fetch(PDO::FETCH_ASSOC)) {
unlink(htmlspecialchars($_SERVER['DOCUMENT_ROOT']).'/sys/files_post/'.$d['id'].'.jpg');
}
$pdo->query("DELETE FROM `files_post` WHERE `id` = '" . intval($_GET['del_file']) . "' AND `id_user` = '" .$user['id']. "' AND `type` = 'support'");
$_SESSION['message'] = lang('Вложение успешно удалено');
header("Location: ?id=$post[id]");
}


if (isset($_GET['like_post']))
{if ($pdo->query(("SELECT COUNT(*) FROM `like_post` WHERE `id_user` = '".$user['id']."' AND `id_post` = '".intval($_GET['like_post'])."' AND `type` = 'support' LIMIT 1"),0)->fetchColumn()==0){
$pdo->query("INSERT INTO `like_post` (`id_post`, `id_user`, `like`, `time`, `type`) VALUES ('".intval($_GET['like_post'])."', '$user[id]', '1', '$time', 'support')");
$_SESSION['message'] = 'Ваш голос засчитан';
header("Location: ?id=$post[id]");
exit;
}}    

if (isset($_GET['off']) && $access || isset($_GET['off']) &&  access('adm_mysql')){
$pdo->query("UPDATE `promotion` SET `off` = '1', `time_off` = '$time' WHERE `id`='".intval($post['id'])."'");

$_SESSION['message'] = 'Запрос успешно закрыт';
header("Location: ?id=$post[id]");
}

if (isset($_GET['on']) && $access || isset($_GET['on']) &&  access('adm_mysql')){
$pdo->query("UPDATE `promotion` SET `off` = '0' WHERE `id`='".intval($post['id'])."'");

$_SESSION['message'] = 'Запрос успешно открыт';
header("Location: ?id=$post[id]");    
}

if (isset($_GET['no']) && $access || isset($_GET['no']) &&  access('adm_mysql')){
$pdo->query("UPDATE `promotion` SET `off` = '1', `time_off` = '$time', `all` = '0' WHERE `id`='".intval($post['id'])."'");

$_SESSION['message'] = 'Запрос успешно отклонен, закрыт и перенесен в архив отклоненных запросов';
header("Location: ?id=$post[id]");
}


if (isset($user) && $post['all'] > 0 || $access || access('adm_mysql')){
if (isset($user) && $user['id']==$post['id_user'] || $access || access('adm_mysql')){
if (isset($_GET['del']) && $pdo->query(("SELECT COUNT(*) FROM `promotion` WHERE `id` = '".intval($_GET['id'])."'"),0)->fetchColumn()==1) {
if($post['time']>time()-600 || access('adm_mysql') || $access){

$post=$pdo->query(("SELECT * FROM `promotion` WHERE `id` = '".intval($_GET['id'])."' LIMIT 1"))->fetch(PDO::FETCH_ASSOC);

$file = $pdo->query("SELECT * FROM `promotion_files` WHERE `id_post` = '".intval($_GET['id'])."' LIMIT 1");

while($delfi = $file->fetch(PDO::FETCH_ASSOC)){
@unlink(H.'files/foto_support/' . $delfi['id'] . '.jpg');
@unlink(H.'files/foto_support/' . $delfi['id'] . '.png');
@unlink(H.'files/foto_support/' . $delfi['id'] . '.gif');

$pdo->query("DELETE FROM `promotion_files` WHERE `id` = '".intval($delfi['id'])."'")->fetchColumn();
    
}
$pdo->query("DELETE FROM `promotion` WHERE `id` = '$post[id]'");

$_SESSION['message'] = 'Запрос успешно удален';
header("Location: index.php");

}else{
$_SESSION['err'] = 'Время на удаление запроса истекло';
header("Location: ?id=$post[id]");    
}    
    
}
}    
}else{
$_SESSION['err'] = 'Вы не можете удалить запрос, так как он закрыт администрацией';
header("Location: ?id=$post[id]");        
}    








echo"<div class='list-group-item'>";
echo user($ank['id']);

echo " : <font color=blue><b>".text($post['name'])."</b></font>";
if($post['off'] == 1){
echo " <font color=gray><i class='fa fa-lock fa-fw'></i></font>";
}

echo "<span style='float:right;'><font color=gray>".date::timek($post['time'])."</font></span><br>\n";

$files = $pdo->query("SELECT * FROM `promotion_files` WHERE `id_post` = '$post[id]' LIMIT 3");

while ($post1 = $files->fetch(PDO::FETCH_ASSOC))
{
    
if($post1['type']=='foto'){
$file_id = $pdo->query("SELECT * FROM `gallery_foto` WHERE `id_user` = '$post1[id_user]' AND `id` = '".intval($post1['id_file'])."'")->fetch(PDO::FETCH_BOTH);
if(isset($file_id['id'])){
echo "<br /><a href='/modules/foto/foto0/$file_id[id].$file_id[ras]'>";
echo'<img src="/modules/foto/foto640/'.$file_id['id'].'.'.$file_id['ras'].'" style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px; max-width: 70%;"/><br />';
echo"</a><br />";
}
		
}elseif($post1['type']=='files'){
if(is_file(H.'files/foto_support/'.$post1['id'].'.jpg')){
echo '<a href="/files/foto_support/'.$post1['id'].'.jpg">';
if (IS_WEB == 1) {
echo'<br /><img src="/files/foto_support/'.$post1['id'].'.jpg" style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px;max-width: 70%;"/><br />';
}else{
echo'<br /><img src="/files/foto_support/'.$post1['id'].'.jpg" style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px;max-width: 60%;"/><br />';
}
echo"</a>";				
}    
}
}
echo '<br>';
echo output_text($post['msg'])."\n";

echo "<br><br>";

if ($post['prioritet']==0){
$pr = '<font color=green><b>Низкая</b></font>';  
}
if ($post['prioritet']==1){
$pr = '<font color=orange><b>Средняя</b></font>';  
}
if ($post['prioritet']==2){
$pr = '<font color=red><b>Высокая</b></font>';  
}
echo "<i class='fa fa-star fa-fw'></i> <b>Важность:</b> $pr<br>";


if ($post['all']==0){
$all = '<a href="archive.php">Отклоненные запросы</a>';  
}

if ($post['all']==1){
$all = '<a href="help.php">Вопросы по сайту</a>';  
}

if ($post['all']==2){
$all = '<a href="staff.php">Технические проблемы</a>';  
}

if ($post['all']==3){
$all = '<a href="ban.php">Нарушения</a>';  
}

if ($post['all']==4){
$all = '<a href="money.php">Проблемы с оплатой</a>';  
}

if ($post['all']==5){
$all = '<a href="new.php">Предложения по развитию</a>';  
}

if ($post['all']==6){
$all = '<a href="pr.php">Прочие запросы</a>';  
}

if ($post['all']==7){
$all = '<a href="pass.php">Потеря доступа к аккаунту</a>';  
}


echo "<i class='fa fa-mail-forward fa-fw'></i> <b>Раздел:</b> $all";
?>
<style>
.adm {
background-color: #F8EDEA; 
padding: 5px;
color: #B99488;
border: 1px #E0BCB1 solid;
border-radius: 3px;
}   
</style>
<? 
if ($access || access('adm_mysql')){
if($post['off'] == 0){    
echo "<br><br><a href='?id=$post[id]&off'><button class='adm'>Закрыть</button></a> ";
}else{
echo "<br><br><a href='?id=$post[id]&on'><button class='adm'>Открыть</button></a> ";
}

if($post['all'] > 0){    
echo "<a href='?id=$post[id]&no'><button class='adm'>Отклонить запрос</button></a> ";
}
}

echo"</div>\n";
if($post['off'] == 1){
echo "<div class='list-group-item'><font color=gray><i class='fa fa-lock fa-fw'></i> Запрос закрыт администрацией ".date::timek($post['time_off'])."</font></div>";
}

if (isset($user) && $user['id']==$post['id_user'] || $access || access('adm_mysql')){
echo "<div class='list-group-item' style='background-color: #E8EBEE;'>";
echo '<table style="width:100%" cellspacing="0" cellpadding="0"><tr>';
echo "<td style='display: inline-block; border-radius: 10px 0px 0px 10px; background-color: white; padding: 9px;width: 50%;border-top: 1px #d0d0d0 solid;border-left: 1px #d0d0d0 solid; border-bottom: 1px #d0d0d0 solid;border-right: 1px #d0d0d0 solid;'><center><a href='edit.php?id=$post[id]'><font color='#1B767E'><i class='fa fa-edit fa-lg'></i> <b>Редактировать</b></font></a><center></td>";
echo "<td style='display: inline-block; border-radius: 0px 10px 10px 0px; background-color: white; padding: 9px;width: 50%;border-top: 1px #d0d0d0 solid; border-bottom: 1px #d0d0d0 solid;border-right: 1px #d0d0d0 solid;'><center><a class='collapsed' data-toggle='collapse' data-parent='#accordion' href='#del' aria-expanded='false' aria-controls='del'><font color='#E24135'><i class='fa fa-trash fa-lg'></i> <b>Удалить</b></font></a></center></td>";
echo "</table>";
echo "</div>";

echo '<div id="del" class="panel-collapse collapse" role="tabpanel" aria-labelledby="del">';
echo "<div class='list-group-item'>Вы уверены?<br><a class='btn btn-primary btn-sm' href='?id=$post[id]&del'><i class='fa fa-trash fa-fw'></i> Да, удалить</a> </div></div>";
    
}









if ($pdo->query(("SELECT COUNT(*) FROM `promotion` WHERE `id` = '".intval($_GET['id'])."' LIMIT 1"), 0)->fetchColumn()==0){header("Location: index.php?".SID);exit;}
$post=$pdo->query(("select * from `promotion` where `id`='".intval($_GET['id'])."';"))->fetch(PDO::FETCH_ASSOC);






if (isset($_POST['msg']) && isset($user))
{

$msg = htmlspecialchars($_POST['msg']);

if (utf8_strlen($msg)>1024){$err='Сообщение слишком длинное';}
elseif (utf8_strlen($msg)<2){$err='Короткое сообщение';}



else{
$ank=get_user($post['id_user']);

$file_p = $pdo->query(("SELECT COUNT(*) FROM `files_post` WHERE `type` = 'support' AND `id_user` = '$user[id]' AND `active` = '1' LIMIT 1"),0)->fetchColumn();
if ($file_p){
$id_file = 1;
}else{
$id_file = 0;    
}

$pdo->query("INSERT INTO `otvet_tiket` (`id_user`, `time`, `msg`, `id_tiket`, `id_file`) values('$user[id]', '$time', '".htmlspecialchars($msg)."', '".intval($_GET['id'])."', '$id_file')");
$sup_id = $pdo->lastInsertId();

$pdo->query("UPDATE `files_post` SET `id_post` = '$sup_id' WHERE `id_user` = '$user[id]' AND `type` = 'support' AND `active` = '1'");
$pdo->query("UPDATE `files_post` SET `active` = '0' WHERE `id_user` = '$user[id]' AND `type` = 'support' AND `active` = '1'");

if(access('adm_mysql') || $access){
$msg="Вы получили ответ на ваше обращение в технической поддержке. [url=/modules/support/show.php?id=$post[id]]посмотреть →[/url]";
$pdo->query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('2', '$ank[id]', '".htmlspecialchars($msg)."', '$time')");
$pdo->query("UPDATE `audio_count` SET `count` = '1' WHERE `id_user`='".intval($ank['id'])."'");
}else{
/////////////////////////журнал администрации///////////////
$name2="+1 комментарий к запросу";
$msg2="[url=/modules/support/show.php?id=".intval($_GET['id'])." ] ".text($post['name'])." [/url]";
$pdo->query("INSERT INTO `jurnal_adm` (`id_user`, `opis`, `name`, `time`, `id_post`) values('0', '".htmlspecialchars($msg2)."', '".htmlspecialchars($name2)."', '$time', '$post[id]')");
/////////////////////////////////////////////////    
}








}}







err();

aut(); // форма авторизации




$k_post=$pdo->query(("SELECT COUNT(*) FROM `otvet_tiket` WHERE `id_tiket` = '".intval($_GET['id'])."'"),0)->fetchColumn();
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);

echo '<div class="list-group-item-komm list-group-item-info" style="padding: 10px;">';
echo "<i class='fa fa-comments fa-fw'></i> Комментарии \n";
echo "<span class='badgei'>$k_post</span>\n";
echo '</div>';

if (isset($user)){
if ($user['sort'] == 1) {    
echo "<div class='list-group-item'>";
echo "<table style='width: 100%;'><tr>
<td class='g10' style='background-color: #BFC7CE;'><a style='padding: 5px' href='?id=$post[id]&amp;page=$page&amp;sort=1'><font color=white>Внизу</font></a></td>
<td class='g10'><a style='padding: 5px' href='?id=$post[id]&amp;page=$page&amp;sort=0' class='".($user['sort']==0?'activ':'')."'><font color=#72A5CE>Вверху</font></a></td></tr></table>";
echo "</div>";    
}
if ($user['sort'] == 0) {    
echo "<div class='list-group-item'>";
echo "<table style='width: 100%;'><tr>
<td class='g10'><a style='padding: 5px' href='?id=$post[id]&amp;page=$page&amp;sort=1'><font color=#72A5CE>Внизу</font></a></td>
<td class='g10' style='background-color: #BFC7CE;'><a style='padding: 5px' href='?id=$post[id]&amp;page=$page&amp;sort=0' class='".($user['sort']==0?'activ':'')."'><font color=white>Вверху</font></a></td></tr></table>";
echo "</div>";    
}    
}


$start=$set['p_str']*$page-$set['p_str'];
$q=$pdo->query("SELECT * FROM `otvet_tiket` WHERE `id_tiket` = '".intval($_GET['id'])."' ORDER BY `time` $sort LIMIT $start, $set[p_str]");

if ($k_post==0)
{
$doc->NoResult();
}
while ($post7 = $q->fetch(PDO::FETCH_ASSOC))
{
    
$ank=$pdo->query("SELECT * FROM `user` WHERE `id` = $post7[id_user] LIMIT 1")->fetch(PDO::FETCH_ASSOC);

if ($post7['otvet'] != 0 && $pdo->query(("SELECT COUNT(*) FROM `user` WHERE `id`='$post7[otvet]'"), 0)->fetchColumn() != 0) {
$otvet = $pdo->query(("SELECT * FROM `user` WHERE `id` = '$post7[otvet]'"))->fetch(PDO::FETCH_ASSOC);
}    

echo "<div class='list-group-item'>"; 
if ($user['mobile_themes']==1) {
avatarz($ank['id']);
echo "<span style='position: relative; bottom: 25px; left: 5px;'>"; }
echo user($ank['id']) . " ";
if ($user['mobile_themes']==1) {echo "</span>";}

echo "<span style = 'float:right;color: grey;'><small title='" . date::timek($post7['time']) . "'>" . date::timek($post7['time']) . "</small></span>";
echo "<br />\n";

if (isset($otvet)) {
echo '<a class="collapsed" data-toggle="collapse" data-parent="#accordion" href="#otv'.$post7['id'].'" aria-expanded="false" aria-controls="otv'.$post7['id'].'">';
echo "<small><font color=gray>ответил ";
echo "<u><b>$otvet[nick]</b></u></font></small></a>";
echo '<div id="otv'.$post7['id'].'" class="panel-collapse collapse" role="tabpanel" aria-labelledby="otv'.$post7['id'].'">';
echo "<div style = 'border: 1px #AFC3D3 solid; padding: 3px; border-radius: 3px; background-color: #D2DEE7;'>";
$otv = $pdo->query(("SELECT * FROM `otvet_tiket` WHERE `id` = '$post7[id_otvet]'"))->fetch(PDO::FETCH_ASSOC);

echo "".output_text($otv['msg'])."</div>";
echo "</div><br /><br />";
} 
if (isset($otvet)) {
unset($otvet);
}    
echo output_text($post7['msg'])."<br />\n";



$file_ok = $pdo->query(("SELECT COUNT(*) FROM `otvet_tiket` WHERE `id` = '$post7[id]' AND `id_user` = '$post7[id_user]' AND `id_file` = '1' LIMIT 1"),0)->fetchColumn();
if ($file_ok){    

$files = $pdo->query("SELECT * FROM `files_post` WHERE `id_post` = '$post7[id]' AND `type` = 'support' LIMIT 3");

while ($post1 = $files->fetch(PDO::FETCH_ASSOC))
{
if($post1['type_files']=='foto'){
$file_id = $pdo->query("SELECT * FROM `gallery_foto` WHERE `id_user` = '$post1[id_user]' AND `id` = '$post1[id_file]'")->fetch(PDO::FETCH_ASSOC);
if(isset($file_id['id'])){
$ras = htmlspecialchars(text($file_id['ras']));
echo "<a href='/modules/foto/foto0/$file_id[id].$file_id[ras]'>";
echo'<img src="/modules/foto/foto128/'.$file_id['id'].'.'.$file_id['ras'].'" style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px; width: 70px; height: 70px;"/>';
echo"</a>";
}
}
if($post1['type_files']=='foto_download'){
if(is_file(H.'sys/files_post/'.$post1['id'].'.jpg')){
echo '<a href="/sys/files_post/'.$post1['id'].'.jpg">';
echo'<img src="/sys/files_post/'.$post1['id'].'.jpg" style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px; width: 70px; height: 70px;"/>';
echo" </a>";				
}
}
if($post1['type_files']=='video'){
if (IS_WEB == 1) {
echo '<br /><br /><video style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px;" src="'.$df['name'].''.$video77.''.$post1['id_file'].'.mp4" width="100%" height="300px" poster="/site/files/video_f.png" controls /></video>';    
}else{
echo '<br /><br /><video style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px;" src="'.$df['name'].''.$video77.''.$post1['id_file'].'.mp4" width="93%" height="200px" poster="/site/files/video_f.png" controls /></video>';    
}
    
echo "<br /><small><a href='/user/video/file.php?id=".$post1['id_file']."'><i class='fa fa-film fa-fw'></i> " . stripcslashes(htmlspecialchars(substr($post1['name'],0,25))) . "</a></small><br>";
}
if ($post1['type_files'] == 'files') { 
echo "<br /><b>Файл:</b> <small><a href='/user/file/file.php?id=".$post1['id_file']."'><i class='fa fa-file fa-fw'></i> " . stripcslashes(htmlspecialchars(substr($post1['name'],0,25))) . "</a></small><br>";
}

if ($post1['type_files'] == 'music') { 
echo '<br /><br /><audio style="border: 1px solid #CCDDED; padding: 2px; border-radius: 5px;" src="'.$df['name'].''.$music77.''.$post1['id_file'].'.mp3" width="100%" height="300px" poster="/site/files/video_f.png" controls /></audio>';    
echo "<br /><small><a href='/user/music/file.php?id=".$post1['id_file']."'><i class='fa fa-music fa-fw'></i> " . stripcslashes(htmlspecialchars(substr($post1['name'],0,25))) . "</a></small><br>";
}

}
echo "<br>";
}    

echo "<br>";

  
if($user['id'] != $ank['id'] && $post['off'] == 0 || $user['id'] != $ank['id'] && access('adm_mysql') || $user['id'] != $ank['id'] && $access){
echo " <a class='comm-in' href='komm.php?id=$post7[id]'><i class='fa fa-comment fa-fw'></i> Ответ</a> ";              
}


if (isset($user))
{

    

    
$like = $pdo->query(("SELECT COUNT(*) FROM `like_post` WHERE `id_post` = '".$post7['id']."' AND `type` = 'support'"),0)->fetchColumn();    

if ($pdo->query(("SELECT COUNT(*) FROM `like_post` WHERE `id_user` = '".$user['id']."' AND `id_post` = '".$post7['id']."' AND `type` = 'support' LIMIT 1"),0)->fetchColumn()==0){    

echo " <span style='float: right; position: relative; left: 8px;'><a class='like-in-o' href='/user/like_post/?id=".$post['id']."&type=support&id_post=$post7[id]'> <b>$like</b> </a></span> ";            
echo " <span id='like' style='float: right; position: relative; left: 8px;'><a class='like-in' href='?id=".$post['id']."&type=support&like_post=$post7[id]'><i class='fa fa-heart-o fa-fw'></i></a></span> ";            
}else{    
echo " <span style='float: right; position: relative; left: 8px;'><a class='like-in-o-red' href='/user/like_post/?id=".$post['id']."&type=support&id_post=$post7[id]'> <b>$like</b> </a></span> ";            
echo " <span style='float: right; position: relative; left: 8px;'><a class='like-in-red' href='/user/like_post/?id=".$post['id']."&type=support&id_post=$post7[id]'><i class='fa fa-heart fa-fw'></i></a></span> ";            
    
}    


if (isset($user) && $post7['id_user']==$user['id'] && $post7['time']>time()-280 || access('adm_mysql') || $access){
echo " <span style='float: right; position: relative; left: 4px;'><a class='comm-in' href='edit_post.php?id=".$post['id']."&edit=$post7[id]'><i class='fa fa-pencil fa-fw'></i></a></span> ";            
}


if (isset($user) && access('adm_mysql') || $access){    
echo "<span style='float: right;'><a class='comm-in' href='?id=".$post['id']."&del_komm=".$post7['id']."'><i class='fa fa-trash fa-fw'></i></a></span>";   
}    
    
    
}
echo "</div>"; 
}


if ($k_page>1){
echo "<div class='list-group-item'>";     
str("?id=".intval($_GET['id']).'&amp;',$k_page,$page); // Вывод страниц
echo "</div>";
}









$post=$pdo->query(("select * from `promotion` where `id`='".intval($_GET['id'])."';"))->fetch(PDO::FETCH_BOTH);
$ank=get_user($post['id_user']);




if($post['id_user']==$user['id'] && $post['off'] == 0 || access('adm_mysql') || $access){

echo "<form method=\"post\" class='list-group-item' name='message' action=\"?id=".intval($_GET['id'])."&amp;page=$page\">\n";
            echo auto_bb("message", "msg");
            echo "<textarea placeholder='" . lang('Введите сообщение') . "...' name='msg' class='form-control'></textarea><br />";

            $doc->Button('knopka', null, '', 'Опубликовать');

echo "<span style='float: right;'>";
$doc->Link('btn btn-secondary btn-sm', "/user/files_post/foto.php?id=$post[id]&type=support", 'file'); 
echo "</span><br>"; 


$files = $pdo->query("SELECT * FROM `files_post` WHERE `id_user` = '$user[id]' AND `type` = 'support' AND `active` = '1' LIMIT 3");
while ($post8 = $files->fetch(PDO::FETCH_ASSOC))
{

if($post8['type_files']=='foto'){
$file_id = $pdo->query("SELECT * FROM `gallery_foto` WHERE `id_user` = '$user[id]' AND `id` = '".intval($post8['id_file'])."'")->fetch(PDO::FETCH_BOTH);
	if(isset($file_id['id'])){
echo "<br><span class='btn btn-secondary btn-sm' style='margin: 1px;'><i class='fa fa-camera fa-fw'></i> ";
echo toOutput(htmlspecialchars($file_id['name']));
}		
}

if($post8['type_files']=='foto_download'){
echo '<br><span class="btn btn-secondary btn-sm" style="margin: 1px;">';
echo"<i class='fa fa-camera fa-fw'></i> ";
echo htmlspecialchars($post8['name']);
}

if($post8['type_files']=='video'){
echo '<br><span class="btn btn-secondary btn-sm" style="margin: 1px;">';
echo"<i class='fa fa-film fa-fw'></i> ";
echo htmlspecialchars($post8['name']);
}

if($post8['type_files']=='music'){
echo '<br><span class="btn btn-secondary btn-sm" style="margin: 1px;">';
echo"<i class='fa fa-music fa-fw'></i> ";
echo htmlspecialchars($post8['name']);
}

if($post8['type_files']=='files'){
echo '<br><span class="btn btn-secondary btn-sm" style="margin: 1px;">';
echo"<i class='fa fa-file fa-fw'></i> ";
echo htmlspecialchars($post8['name']);
}
	
echo' <a href="?id='.$post['id'].'&del_file='.$post8['id'].'"><font color=#F56257><i class="fa fa-trash fa-lg"></i></font></a>';

echo '</span> ';
}



            echo '</form>';


}
else
{

echo"<div class=list-group-item><div class=err>Возможность комментирования ограничена</div></div>";
}




include_once '../../sys/inc/tfoot.php';
?>