View file info.php

<?
include_once 'sys/inc/start.php';
include_once 'sys/inc/compress.php';
include_once 'sys/inc/sess.php';
include_once 'sys/inc/home.php';
include_once 'sys/inc/settings.php';
include_once 'sys/inc/db_connect.php';
include_once 'sys/inc/ipua.php';
include_once 'sys/inc/fnc.php';
include_once 'sys/inc/user.php';

if (!isset($user) && !isset($_GET['id'])){header("Location: /index.php?".SID);exit;}
if (isset($user))$ank['id']=$user['id'];
if (isset($_GET['id']))$ank['id']=intval($_GET['id']);
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id` = '$ank[id]' LIMIT 1"),0)==0){header("Location: /index.php?".SID);exit;}
$ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));
$set['title']=$ank['nick'].''; // заголовок страницы
include_once 'sys/inc/thead.php';
title();


if ((!isset($_SESSION['refer']) || $_SESSION['refer']==NULL)
&& isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER']!=NULL &&
!ereg('info\.php',$_SERVER['HTTP_REFERER']))
$_SESSION['refer']=str_replace('&','&amp;',ereg_replace('^http://[^/]*/','/', $_SERVER['HTTP_REFERER']));



if (isset($_POST['rating']) && isset($user)  && $user['id']!=$ank['id'] && $user['balls']>=50 && mysql_result(mysql_query("SELECT SUM(`rating`) FROM `user_voice2` WHERE `id_kont` = '$user[id]'"),0)>=0)
{
$new_r=min(max(@intval($_POST['rating']),-2),2);
mysql_query("DELETE FROM `user_voice2` WHERE `id_user` = '$user[id]' AND `id_kont` = '$ank[id]' LIMIT 1");
mysql_query("INSERT INTO `user_voice2` (`rating`, `id_user`, `id_kont`) VALUES ('$new_r','$user[id]','$ank[id]')");
$ank['rating']=intval(mysql_result(mysql_query("SELECT SUM(`rating`) FROM `user_voice2` WHERE `id_kont` = '$ank[id]'"),0));
mysql_query("UPDATE `user` SET `rating` = '$ank[rating]' WHERE `id` = '$ank[id]' LIMIT 1");
msg('Ваше мнение о пользователе успешно изменено');
}


if (isset($access['user_voice']) && $user['id']!=$ank['id'] && $user['balls']>=50 && $user['rating']>=0 && mysql_result(mysql_query("SELECT COUNT(*) FROM `user_voice` WHERE `id_user` = '$user[id]' AND `id_kont` = '$ank[id]'"), 0)==0)  {  if (isset($_GET['rating']) && $_GET['rating']=='-1'){    $msgrat1="[b]$user[nick][/b] Проголосовал за вашу страничку! Оценка на -1";  mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$msgrat1', '$time')");    mysql_query("UPDATE `user` SET `rating` = '".($ank['rating']-1)."' WHERE `id` = '$ank[id]' LIMIT 1",$db);  mysql_query("INSERT INTO `user_voice` (`id_user`, `id_kont`) values('$user[id]', '$ank[id]')",$db);  msg ('Ваш отзыв принят');  $ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));}      if (isset($_GET['rating']) && $_GET['rating']=='-2'){  $msgrat2="[b]$user[nick][/b] Проголосовал за вашу страничку! Оценка на -2";  mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$msgrat2', '$time')");    mysql_query("UPDATE `user` SET `rating` = '".($ank['rating']-2)."' WHERE `id` = '$ank[id]' LIMIT 1",$db);  mysql_query("INSERT INTO `user_voice` (`id_user`, `id_kont`) values('$user[id]', '$ank[id]')",$db);  msg ('Ваш отзыв принят');  $ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));}    if (isset($_GET['rating']) && $_GET['rating']=='-3'){  $msgrat3="[b]$user[nick][/b] Проголосовал за вашу страничку! Оценка на -3";  mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$msgrat3', '$time')");    mysql_query("UPDATE `user` SET `rating` = '".($ank['rating']-3)."' WHERE `id` = '$ank[id]' LIMIT 1",$db);  mysql_query("INSERT INTO `user_voice` (`id_user`, `id_kont`) values('$user[id]', '$ank[id]')",$db);  msg ('Ваш отзыв принят');  $ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));}        if (isset($_GET['rating']) && $_GET['rating']=='-4'){  $msgrat4="[b]$user[nick][/b] Проголосовал за вашу страничку! Оценка на -4";  mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$msgrat4', '$time')");    mysql_query("UPDATE `user` SET `rating` = '".($ank['rating']-4)."' WHERE `id` = '$ank[id]' LIMIT 1",$db);  mysql_query("INSERT INTO `user_voice` (`id_user`, `id_kont`) values('$user[id]', '$ank[id]')",$db);  msg ('Ваш отзыв принят');  $ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));}      if (isset($_GET['rating']) && $_GET['rating']=='-5'){  $msgrat5="[b]$user[nick][/b] Проголосовал за вашу страничку! Оценка на -5";  mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$msgrat5', '$time')");    mysql_query("UPDATE `user` SET `rating` = '".($ank['rating']-5)."' WHERE `id` = '$ank[id]' LIMIT 1",$db);  mysql_query("INSERT INTO `user_voice` (`id_user`, `id_kont`) values('$user[id]', '$ank[id]')",$db);  msg ('Ваш отзыв принят');  $ank=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = $ank[id] LIMIT 1"));}  }


if (isset($_GET['info']) && $_GET['info']=='balls'){
msg ('Баллы, это валюта нашего сайт.<br/>
Каждое ваше сообщение, или иное действие во всех разделах сайта принесут вам баллы');
}

aut();

if ($ank['ban']>$time){echo "<span class=\"status\">Обитатель $ank[nick]</span>\n";
echo "Этот аккаунт был заблокирован за нарушение</span> <a href='/rules.php'>условий использования сервиса<a><div/>\n";
}
else
{
if (isset($user) && $user['id']==$ank['id']){
}else{
}

echo " <span style=\"color:$ank[ncolor]\"><b>$ank[nick]</b></span>".online($ank['id'])."</a>\n";echo "<br/>\n";

if ($ank['hello']!=NULL)
{echo "<b>$ank[hello]</b>";}

avatar($ank['id']);

echo "<br/>\n";
echo "<img src=\"/sys/img/info.gif\" alt=\"\"/> <a href='/ank.php?id=$ank[id]'>Анкета</a>\n";
echo "<br/>\n";
echo "<img src=\"/sys/img/guest.gif\" alt=\"\"/> <a href=\"us_guest/?id=$ank[id]\">Гостевая</a>";   echo ' (';@include H.'us_guest/count.php';echo ')<br />';
echo "<img src='sys/img/blog.gif' alt='' > <a href=\"blog/user.php?id=$ank[id]\">Дневник</a> \n";  echo "(".mysql_result(mysql_query("SELECT COUNT(*) FROM `blog_list` WHERE `id_user` = '$ank[id]'"),0).")<br/>";

echo "<img src='/sys/img/obmen.gif' alt='' /> <a href='/files.php?id=$ank[id]'>Файлы</a> \n";  echo "(".mysql_result(mysql_query("SELECT COUNT(*) FROM `obmennik_files` WHERE `id_user` = '$ank[id]'"),0).")<br/>"; $comm = mysql_num_rows(mysql_query("SELECT `id` FROM `community_user_incomm` WHERE `uid` = '$ank[id]'")); echo '<img src="sys/img/soo.gif" alt=""> <a href="comm/user.php?id='.$ank['id'].'">Сообщества</a> ('.$comm.')<br/>'; echo "<img src='/sys/img/photo.gif' alt='' /> <a href='foto/index.php?id=$ank[id]'>Фотографии</a> \n";  echo "(".mysql_result(mysql_query("SELECT COUNT(*) FROM `gallery` WHERE `id_user` = '$ank[id]'"),0).")<br/>"; echo "<small><img src='/sys/img/blogs.gif' alt=''/> <a href=\"gifts.php?id=$ank[id]\" title=\"Подарки\">Подарки</a></small>\n"; $k_p=mysql_result(mysql_query("SELECT COUNT(*) FROM `gifts` WHERE `id_user` = $ank[id] ",$db), 0); echo " ($k_p)<br/>";

if (isset($user) && $user['id']==$ank['id'])
{
$jn=mysql_result(mysql_query("SELECT COUNT(*) FROM `jurnal` WHERE `id_kont` = '$user[id]' AND `read` = '0'"), 0);

}

$k_fr = mysql_result(mysql_query("SELECT COUNT(*) FROM `frends` WHERE `user` = '$ank[id]' AND `i` = '1'"), 0);
 echo '<img src="sys/img/friends.gif" alt=""/> <a href="frend.php?id='.$ank['id'].'">Друзья</a> ('.$k_fr.')<br/>';
if (isset($user) && $user['id']==$ank['id'])
{
echo "<img src='sys/img/jurnal.gif' alt='' class='icon'/> <a href=\"/jurnal.php\" title=\"Журнал\">Журнал</a>\n";   if ($jn>0) echo "(+$jn)\n";   echo "<br/>\n";
}
if (isset($user) && $user['id']==$ank['id'])echo "<img src=\"/sys/img/settings.gif\" alt=\"\"/> <a href='/settings.php'>Настройки</a><br/>\n";


if (isset($user) && $user['id']!=$ank['id']){
$d1sql = mysql_query("SELECT COUNT(*) FROM `frends_new` WHERE (`user` = '$user[id]' AND `to` = '$ank[id]') OR (`user` = '$ank[id]' AND `to` = '$user[id]') LIMIT 1");
$d2sql = mysql_query("SELECT COUNT(*) FROM `frends` WHERE (`user` = '$ank[id]' AND `frend` = '$user[id]') OR (`user` = '$user[id]' AND `frend` = '$ank[id]') LIMIT 1");
if (isset($user) && $user['id']!=$ank['id'] && mysql_result($d1sql, 0)==0 && mysql_result($d2sql, 0)==0)
{
echo '<img src="sys/img/friendship.gif" alt=""/> <a href="frend_add.php?id='.$ank['id'].'">Подружиться</a><br>';
}

if (isset($user) && $user['id']!=$ank['id']) { echo "<img src='/sys/img/blogs.gif' alt=''/> <a href=\"podarki/gifts.php?id=$ank[id]&pod=1\">Подарок</a><br />"; }
if (isset($user) && $user['id']!=$ank['id']){echo "<img src=\"/sys/img/privat.gif\" alt=\"\"/> <a href=\"/mail.php?id=$ank[id]\">Сообщение</a><br />\n";}

}
$user_id = $ank['id'];

if(!isset($_GET['wall'])){
echo '<div class="menu">Стена <a href="/info.php?id='.$user_id.'&amp;wall">[Открыть]</a></div>';
}else{
echo '<div class="menu">Стена <a href="/info.php?id='.$user_id.'">[Закрыт]</a></div>';

if(isset($_GET['delete']) AND !empty($_GET['delete'])){
$delete = intval($_GET['delete']);

if($user['level']>3 OR $ank['id']==$user['id']){
$query = @mysql_query("SELECT `id` FROM `wall` WHERE `user_id` = '".$user_id."' AND `id` = '".$delete."';");

if(@mysql_affected_rows()>0){
@mysql_query("DELETE FROM `wall` WHERE `user_id` = '".$user_id."' AND `id` = '".$delete."' LIMIT 1;");
mysql_query("OPTIMIZE TABLE `wall`");
echo '<div class="news">Сообщение успешно удалено!</div>';
}else
echo '<div class="news">Сообщение не найдено!</div>';
}else
echo '<div class="news">У Вас нет прав для удаления этого сообщения!</div>';
}

if(isset($_POST['message']) AND isset($user)){
$message = htmlspecialchars($_POST['message']);

if(isset($_POST['translit']) AND $_POST['translit']){
$message = translit($message);
}

$err = '';

if(strlen2($message)>512){
$err .= '&nbsp;&nbsp;сообщение слишком длинное;<br/>';
}

if(strlen2($message)<2){
$err .= '&nbsp;&nbsp;короткое сообщение;<br/>';
}

if(@mysql_result(@mysql_query("SELECT COUNT(*) FROM `wall` WHERE `user_id` = '".$user_id."' AND `message` = '".@mysql_escape_string($message)."' AND `time` > '".($time - 300)."' LIMIT 1"), 0)!= 0){
$err .= '&nbsp;&nbsp;ваше сообщение повторяет предыдущее;<br/>';
}

if(time() - @mysql_result(@mysql_query("SELECT `time` FROM `wall` WHERE `user_id` = '$user_id' ORDER BY `id` DESC LIMIT 1;"),0)<30){
$err .= '&nbsp;&nbsp;не стоит писать сообщения так часто..<br/>';
}

if($err!=''){
echo '<div class="news">При добавление сообщения произошли следующие ошибки:<br/>'.$err.'</div>';
}else{
$message = @mysql_escape_string($message);
@mysql_query("INSERT INTO `wall` (`user_id`, `who`, `time`, `message`) values('".$user_id."', '".$user['id']."', '".$time."', '".$message."')");
@mysql_query("UPDATE `user` SET `msg_on_wall` = `msg_on_wall` + 1 WHERE `id` = '".$user['id']."' LIMIT 1");

if($user['id']!=$user_id){
$msg = 'на Вашей стене появилась новая запись';
mysql_query("INSERT INTO `jurnal` (`id_user`, `id_kont`, `msg`, `time`) values('0', '".$user_id."', '".$msg."', '".$time."')");
}

mysql_query("OPTIMIZE TABLE `wall`, `user`, `jurnal`");
echo '<div class="news">Сообщение успешно добавлено!</div>';
}
}

$k_post = @mysql_result(@mysql_query("SELECT COUNT(*) FROM `wall` WHERE `user_id` = '".$user_id."'"),0);
$k_page = k_page($k_post, $set['p_str']);
$page = page($k_page);
$start = $set['p_str'] * $page - $set['p_str'];

echo '<table class="post">';

if(!$k_post){
echo '<tr><td class="p_t">Нет сообщений...</td></tr>';
}

$query = @mysql_query("SELECT * FROM `wall` WHERE `user_id` = '".$user_id."' ORDER BY `time` DESC LIMIT $start, $set[p_str];");
while ($array = mysql_fetch_array($query)){
$user_nick = @mysql_fetch_array(@mysql_query("SELECT * FROM `user` WHERE `id` = '".$array['who']."'"));

echo '<tr><td class="icon48" rowspan="2">';
echo avatar($array['who']);
echo '</td><td class="p_t">&nbsp;'.online($array['who']).'&nbsp;<a href="info.php?id='.$array['who'].'"><span style="color:'.$user_nick['ncolor'].'">'.$user_nick['nick'].'</span></a> ('.vremja($array['time']).')</td></tr><tr>';
echo '<td class="p_m">'.output_text($array['message']).'<br/>';

if($user['level']>3 OR $ank['id']==$user['id']){
echo '[<a href="info.php?id='.$user_id.'&amp;wall&amp;delete='.$array['id'].'">удалить</a>]';
}

echo '</td></tr>';}

echo '</table>';

if($k_page>1){
str('info.php?id='.$user_id.'&amp;wall&amp;', $k_page, $page);
}
echo '<a href="/smiles.php">Смайлы</a><br/>';
echo '<form method="post" action="info.php?id='.$user_id.'&amp;wall">';
echo '<b>Сообщение</b>:<br/><textarea name="message"></textarea><br/>';
if($user['set_translit']){
echo '<label><input type="checkbox" name="translit" value="1"/>Транслит</label><br/>';
}
echo '<input type="submit" value="Написать на стене"/></form>';
}


if (isset($user)  && $user['id']!=$ank['id'] && $user['balls']>=50 && mysql_result(mysql_query("SELECT SUM(`rating`) FROM `user_voice2` WHERE `id_kont` = '$user[id]'"),0)>=0)
{
echo "<div class='title'>Ваше отношение</div>\n";
// мое отношение к пользователю
$my_r=intval(@mysql_result(mysql_query("SELECT `rating` FROM `user_voice2` WHERE `id_user` = '$user[id]' AND `id_kont` = '$ank[id]'"),0));
echo "<form method='post' action='?id=$ank[id]&amp;$passgen'>\n";
echo "<select name='rating'>\n";
echo "<option value='2' ".($my_r==2?'selected="selected"':null).">+</option>\n";


echo "<option value='-2' ".($my_r==-2?'selected="selected"':null).">-</option>\n";
echo "</select>\n";
echo "<input type='submit' value='Ok' />\n";
echo "</form>\n";
//echo "<br />\n";
}


if (isset($user) && $user['id']==$ank['id'])
{
echo "<div class='niz_menu'>\n";
echo "Мои баллы: $ank[balls] <a href='?info=balls'>[?]</a><br />\n";
echo "</div>\n";
}
else
{

}}

include_once 'sys/inc/tfoot.php';
?>