View file ask/reply.php

<?php
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';

$ask = mysql_fetch_assoc(mysql_query("SELECT * FROM `ask` WHERE `id` = '".intval($_GET['id'])."' LIMIT 1"));
$ank=get_user($ask['id_ank']);
if(!$ask || $ank['id']!=$user['id']){header("Location: /index.php?".SID);exit;}

$set['title']='Ответ на вопрос';

include_once '../sys/inc/thead.php';
title();

if (isset($_POST['reply']) && isset($user) && $user['id']==$ank['id']) {
$msg=my_esc($_POST['reply']);
if (isset($_POST['translit']) && $_POST['translit']==1)$msg=translit($msg);
if (strlen2($msg)>1024){$err='Сообщение слишком длинное';}
elseif (strlen2($msg)<2){$err='Короткое сообщение';}
elseif(!isset($err)){

if($ask['id_user']!=0 && $ask['anonim']!=0){
$msg2="Вам ответил на вопрос. [url=/ask/ask.php?id=$ank[id]]Посмотреть![/url]";
mysql_query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ask[id_user]', '$msg2', '$time')");
}

mysql_query("UPDATE `ask` SET `reply` = '".$msg."' WHERE `id` = '$ask[id]' ");
header("location: ask.php?id=$ank[id]");
exit;
}
}
err();
aut();

echo '<form method="post" action="?id='.$ask['id'].'">';
echo "$tPanel\n";
echo "<textarea name=\"reply\"/>".htmlspecialchars($ask['reply'])."</textarea></br>\n";
echo "<input value=\"Ответить\" type=\"submit\" />\n";
echo "</form>\n";

echo "<div class='foot'><a href='ask.php?id=$ank[id]'>Вернуться назад</a></div>";

include_once H.'sys/inc/tfoot.php';
?>