View file code.php

<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';

$set['title']='Полезные куски кодов';

include_once '../sys/inc/thead.php';

title();
aut();

$cod=mysql_fetch_assoc(mysql_query("SELECT * FROM `codes` WHERE `id` = '".intval($_GET['id'])."' "));

if(empty($cod['name'])) {
header("Location: index.php?".SID); }

if (isset($_GET['id'])) {
 $id = intval($_GET['id']); }
 
 
 
if (isset($_GET['d'])) {
 $d = my_esc($_GET['d']); }
 else { $d =''; }

 

switch ($d) {
   
case 'del':  

if ($user['level'] > 4 or $cod['id_user'] == $user['id']){
echo '<div class="err">Вы уверены?!<br /><a href="code.php?id='.$id.'&d=del_ok">Да</a> | <a href="code.php?id='.$id.'">Нет</a></div>';}
else {echo 'Вы не имеете право удалить это';}

break;
/////////////////////////
case 'del_ok':  

if ($user['level'] > 4 or $cod['id_user'] == $user['id']){
mysql_query("DELETE FROM `codes` WHERE `id` = '" .$id. "'");
echo '<div class="mess">Код успешно удален <br /><a href="index.php">К категориям</a></div>'; }
break;
////////////////////////

case 'textarea':  


echo '<div class="main"><a href="?id='.$id.'">Вернуться к коду</a></div>';

echo '<div class="mess">Код:<br><textarea name="kod">'.$cod['kod'].'
</textarea></div>'; 
break;
////////////////////////

case 'protiv':  
$pokaz = mysql_result(mysql_query("SELECT * FROM `codes_like` WHERE `id_user` = '$user[id]' AND `id_codes` = '".$id."' "),0);


if ($pokaz != 0){
mysql_query("DELETE FROM `codes_like` WHERE `id_user` = '$user[id]' AND `id_codes` = '".$id."'");
}
 {header("Location: code.php?id=".$id."".SID);exit;}

break;

case 'za':  
$pokaz = mysql_result(mysql_query("SELECT * FROM `codes_like` WHERE `id_user` = '$user[id]' AND `id_codes` = '".$id."' "),0);
if ($pokaz == 0){
mysql_query("INSERT INTO `codes_like` (`id_codes`, `id_user`) values ('".$id."', '$user[id]')");
}

 {header("Location: code.php?id=".$id."".SID);exit;}
break;
default:
/// Вывод разделов



echo '<div class="main"><a href="/codes">Все категории</a> <font color="black">| '.$cod['name'].'</font>';
if ($user['level'] > 4 or $cod['id_user'] == $user['id']) {echo '<a href="code.php?id='.$cod['id'].'&d=del"> <font color="red">удалить</font></a> ';     
}
echo'</div>';
echo ' <div class="mess">Описание: '.$cod['opis'].'';


echo ' </div>';

echo ' <div class="mess">Код:<br> ';
echo highlight_string($cod['kod'])."</div>\n";


$ank=get_user($cod['id_user']);
echo'<div class="main"> Добавил: <a href="/info.php?id='.$ank['id'].'"><img src="img/user.png" alt=""/><b> '.$ank['nick'].'</b></a> ('.vremja($cod['time']).')</div>';

$like = mysql_result(mysql_query("SELECT COUNT(*) FROM `codes_like` WHERE `id_codes` = '".$id."'  LIMIT 1"),0);
echo "<div class='main'><a href='votes.php?id=".$id."'>Рейтинг</a>: <a href='code.php?id=".$id."&d=za'>+<b>1</b></a> 
| <a href='code.php?id=".$id."&d=protiv'><b>-1</b></a> <b>(".$like.")</b></div> ";



$pokz = mysql_result(mysql_query("SELECT COUNT(*) FROM `codes_views` WHERE `id_codes` = '".$id."'  LIMIT 1"),0);
echo '<div class="main"> <a href="views.php?id='.$id.'">Просмотров</a>: <b>('.$pokz.')</b></div>';

$pokaz = mysql_result(mysql_query("SELECT * FROM `codes_views` WHERE `id_user` = '$user[id]' AND `id_codes` = '".$id."' "),0);
if ($pokaz == 0){
mysql_query("INSERT INTO `codes_views` (`id_codes`, `id_user`) values ('".$id."', '$user[id]')");
 {header("Location: code.php?id=".$id."".SID);exit;}

}


$comm = mysql_result(mysql_query("SELECT COUNT(*) FROM `codes_komm` WHERE `id_codes` = '".$id."'  LIMIT 1"),0);
echo "<div class='main'> <a href='komm.php?id=".$id."'>Комментарии</a> <b>(".$comm.")</b></div> ";


echo "<hr><div class='main'>Скачать: <a href='code.php?id=".$id."&d=textarea'>TEXTAREA</a></div>";

$likez = mysql_result(mysql_query("SELECT COUNT(*) FROM `codes_like` WHERE `id_codes` = '".$id."'  LIMIT 1"),0);
$pokaz = mysql_result(mysql_query("SELECT COUNT(*) FROM `codes_views` WHERE `id_codes` = '".$id."'  LIMIT 1"),0);

mysql_query("UPDATE `codes` SET `rating` = '" . $likez . "' WHERE `id` = '".$id."' ");
mysql_query("UPDATE `codes` SET `views` = '" . $pokaz . "' WHERE `id` = '".$id."' ");



}

err();

include_once '../sys/inc/tfoot.php';
?>