View file 4at2/ch/profile.php

<?
header("Cache-Control: no-cache");
header("Content-type:text/vnd.wap.wml");  
$ref=rand(10000,1000000);
require("inc.php"); 


$link = @mysql_pconnect ($MySQL_Hostname, $MySQL_Username, $MySQL_Password)
or die ("<wml><card id=\"error\" title=\"error\">
<do type=\"prev\" label=\"Back\"><prev/></do><p align=\"center\"><small>Can not connect to MySQL</small></p>
</card></wml>");

@mysql_select_db($MySQLDatabasename) or die ("<wml><card id=\"error\" title=\"error\">
<do type=\"prev\" label=\"Back\"><prev/></do><p align=\"center\"><small>error select the database...</small></p>
</card></wml>");

		
		$result = @mysql_query ("Select * from users where id='".$id."'");
         
         if (mysql_affected_rows() == 0) {
          echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n";
echo "<!DOCTYPE wml PUBLIC \"-//WAPFORUM//DTD WML 1.2//EN\" \"http://www.wapforum.org/DTD/wml12.dtd\">\n";
echo "<wml>\n";
echo "<card id=\"error\" title=\"&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;\" ontimer=\"index.php?ref=$ref\"><timer value=\"15\"/>\n";
echo "<p align=\"center\">\n";
echo "User was not found\n";
echo "</p>\n";
echo "</card>\n";
echo "</wml>\n";
mysql_close($link);
exit;
}
                
$row = mysql_fetch_array ($result);
if ($ps !== $row["pass"]){
echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n";
echo "<!DOCTYPE wml PUBLIC \"-//WAPFORUM//DTD WML 1.2//EN\" \"http://www.wapforum.org/DTD/wml12.dtd\">\n";
echo "<wml>\n";
echo "<card id=\"error\" title=\"&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;\" ontimer=\"index.php?ref=$ref\"><timer value=\"15\"/>\n";
echo "<p align=\"center\">\n";
echo "Your login failed\n";
echo "</p>\n";
echo "</card>\n";
echo "</wml>\n";
mysql_close($link);   
exit;
}           
$us=$row["user"];  
if(!isset($err)) $err="";


if($row['fsize'] == "small") { $fsize1 = "<small>"; $fsize2 = "</small>"; }
elseif($row['fsize'] == "big") { $fsize1 = "<big>"; $fsize2 = "</big>"; }
        else { $fsize1 = ""; $fsize2 = ""; }


if(!@$go)
{
echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n";
echo "<!DOCTYPE wml PUBLIC \"-//WAPFORUM//DTD WML 1.2//EN\" \"http://www.wapforum.org/DTD/wml12.dtd\">\n";
echo "<wml>\n";
echo "<card id=\"profile\" title=\"Анкета\">\n";
echo "<p>\n";
//echo $fsize1;
echo "<b>$us</b><br/>\n";
echo "*Ваш пароль::<br/>\n";     
echo "<input name=\"pass\" maxlength=\"20\" value=\"$row[pass]\" title=\"pass\" emptyok=\"false\"/><br/>\n";
echo "*Ваше имя:<br/>\n";     
echo "<input name=\"name\" maxlength=\"15\" value=\"$row[name]\" title=\"name\" emptyok=\"false\"/><br/>\n";
if($row["sex"] === "М")
{
echo "Пол:<br/>\n";
echo "<select name=\"sex\">\n";
echo "<option value=\"М\">&#x041C;</option>\n";
echo "<option value=\"Ж\">&#x0416;</option>\n";
echo "</select><br/>\n";
} else {
echo "Пол:<br/>\n";
echo "<select name=\"sex\">\n";
echo "<option value=\"Ж\">&#x0416;</option>\n";
echo "<option value=\"М\">&#x041C;</option>\n";
echo "</select><br/>\n"; 
 }
@list( $day, $month, $year ) = split( '-', $row["birth"] );
echo "*Дата рождения:<br/>\n";     
echo "<input size=\"2\" name=\"days\" value=\"$day\" maxlength=\"2\" format=\"*N\" emptyok=\"false\"/>-<input size=\"2\" name=\"months\" value=\"$month\" maxlength=\"2\" format=\"*N\" emptyok=\"false\"/>-<input size=\"4\" name=\"years\" value=\"$year\" maxlength=\"4\" format=\"*N\" emptyok=\"false\"/><br/>\n"; 
echo "*Город:<br/>\n";     
echo "<input name=\"city\" maxlength=\"40\" value=\"$row[city]\" title=\"city\" emptyok=\"false\"/><br/>\n";
echo "Сотовый оператор:<br/>\n";     
echo "<input name=\"op\" maxlength=\"20\" value=\"$row[op]\" title=\"op\" emptyok=\"true\"/><br/>\n";
echo "Модель телефона:<br/>\n";     
echo "<input name=\"mob\" maxlength=\"40\" value=\"$row[mob]\" title=\"mob\" emptyok=\"true\"/><br/>\n";

echo "&#x041D;&#x043E;&#x043C;&#x0435;&#x0440; &#x0442;&#x0435;&#x043B;&#x0435;&#x0444;&#x043E;&#x043D;&#x0430;:<br/>\n";     
echo "+<input name=\"number\" maxlength=\"11\" value=\"$row[number]\" format=\"*N\" title=\"number\" emptyok=\"true\"/><br/>\n";  
    
echo "E-mail:<br/>\n";     
echo "<input name=\"mail\" maxlength=\"70\" value=\"$row[mail]\" title=\"mail\" emptyok=\"true\"/><br/>\n";
echo "ICQ:<br/>\n";     
echo "<input name=\"icq\" maxlength=\"70\" value=\"$row[icq]\" title=\"icq\" emptyok=\"true\"/><br/>\n";
echo "Wap-сайт:<br/>\n";     
$yoursite=$row["site"];
if($yoursite=="")$yoursite="http://";
echo "<input name=\"site\" maxlength=\"70\" value=\"$yoursite\" title=\"site\" emptyok=\"true\"/><br/>\n";
echo "*О себе:<br/>\n";     
echo "<input name=\"infa\" maxlength=\"220\" value=\"$row[infa]\" title=\"infa\" emptyok=\"false\"/><br/>\n";  
////
echo "Текст автоответчика(записки):<br/>\n";     
echo "<input name=\"avtootvet\" maxlength=\"200\" value=\"$row[avtootvet]\" title=\"avtootvet\" emptyok=\"true\"/><br/>\n";  
//////
echo "<anchor title=\"go\">Изменить<go href=\"profile.php?id=$id&amp;ps=$ps&amp;go=rew&amp;ref=$ref\" method=\"post\">\n";
echo "<postfield name=\"pass\" value=\"$(pass)\"/>\n";
echo "<postfield name=\"name\" value=\"$(name)\"/>\n";
echo "<postfield name=\"sex\" value=\"$(sex)\"/>\n";
echo "<postfield name=\"day\" value=\"$(days)\"/>\n";
echo "<postfield name=\"month\" value=\"$(months)\"/>\n";
echo "<postfield name=\"year\" value=\"$(years)\"/>\n";
echo "<postfield name=\"city\" value=\"$(city)\"/>\n";
echo "<postfield name=\"op\" value=\"$(op)\"/>\n";
echo "<postfield name=\"mob\" value=\"$(mob)\"/>\n";
echo "<postfield name=\"number\" value=\"$(number)\"/>\n";
echo "<postfield name=\"mail\" value=\"$(mail)\"/>\n";
echo "<postfield name=\"site\" value=\"$(site)\"/>\n";
echo "<postfield name=\"icq\" value=\"$(icq)\"/>\n";
echo "<postfield name=\"infa\" value=\"$(infa)\"/>\n";
echo "<postfield name=\"avtootvet\" value=\"$(avtootvet)\"/>\n";
echo "</go></anchor><br/>\n";
echo "<a href=\"enter.php?id=$id&amp;ps=$ps&amp;ref=$ref\">&#x41F;&#x440;&#x438;&#x445;&#x43E;&#x436;&#x430;&#x44F;</a>\n";
//echo $fsize2;
echo "</p>\n";
echo "</card>\n";
echo "</wml>\n";
mysql_close ($link);
 }
 else
 {

    $error = true;
$pass = trim(" $pass ");
$pass = ereg_replace(" +"," ",$pass);         
$name = trim(" $name ");
$name = ereg_replace(" +"," ",$name);        
$day = trim(" $day ");
$day = ereg_replace(" +"," ",$day);           
$month = trim(" $month ");
$month = ereg_replace(" +"," ",$month);         
$year = trim(" $year ");
$year = ereg_replace(" +"," ",$year);                   
$city  = trim(" $city  ");
$city  = ereg_replace(" +"," ",$city);  
$mail  = trim(" $mail  ");
$mail  = ereg_replace(" +"," ",$mail);  
$site  = trim(" $site  ");
$site  = ereg_replace(" +"," ",$site );  
$icq  = trim(" $icq  ");
$icq  = ereg_replace(" +"," ",$icq ); 
$infa  = trim(" $infa  ");
$infa  = ereg_replace(" +"," ",$infa);         
$infa=substr($infa,0,400);        
$avtootvet  = trim(" $avtootvet  ");
$avtootvet  = ereg_replace(" +"," ",$avtootvet);         
$avtootvet=substr($avtootvet,0,400);      
$op  = trim(" $op  ");
$op  = ereg_replace(" +"," ",$op);  
$mob  = trim(" $mob  ");
$mob  = ereg_replace(" +"," ",$mob); 
$number  = trim(" $number  ");
$number  = ereg_replace(" +"," ",$number);       

$emp = "&#x041D;&#x0435; &#x0437;&#x0430;&#x043F;&#x043E;&#x043B;&#x043D;&#x0435;&#x043D;&#x044B; &#x043E;&#x0431;&#x044F;&#x0437;&#x0430;&#x0442;&#x0435;&#x043B;&#x044C;&#x043D;&#x044B;&#x0435; &#x043F;&#x043E;&#x043B;&#x044F;!";              


    if ($pass === "") {
        $msg = "$emp";
    } elseif(!preg_match("!^[a-z0-9]+$!i",$pass))  {
        $msg = "&#x0412; &#x043F;&#x0430;&#x0440;&#x043E;&#x043B;&#x0435; &#x043E;&#x0431;&#x043D;&#x0430;&#x0440;&#x0443;&#x0436;&#x0435;&#x043D;&#x044B; &#x0437;&#x0430;&#x043F;&#x0440;&#x0435;&#x0448;&#x0435;&#x043D;&#x043D;&#x044B;&#x0435; &#x0437;&#x043D;&#x0430;&#x043A;&#x0438;!";    
    } elseif ($name == "") {            
        $msg = "$emp";   
    } elseif ($day == "") {          
        $msg = "$emp";      
    } elseif ($month == "") {          
        $msg = "$emp";      
    } elseif ($year == "") {
        $msg = "$emp";             
    } elseif ($city == "") {
        $msg = "$emp";    
    } elseif ($infa == "") {
        $msg = "$emp";       

    } else {
    
  function check($message){
                $message = str_replace("\\n", " ", $message);
                $message = str_replace("\n", " ", $message);
                $message = str_replace("$", "$$", $message);     
$message=strtr($message,array(chr("0")=>"",chr("1")=>"",chr("2")=>"",chr("3")=>"",chr("4")=>"",chr("5")=>"",chr("6")=>"",chr("7")=>"",chr("8")=>"",chr("9")=>"",chr("10")=>"",chr("11")=>"",chr("12")=>"",chr("13")=>"",chr("14")=>"",chr("15")=>"",chr("16")=>"",chr("17")=>"",chr("18")=>"",chr("19")=>"",chr("20")=>"",chr("21")=>"",chr("22")=>"",chr("23")=>"",chr("24")=>"",chr("25")=>"",chr("26")=>"",chr("27")=>"",chr("28")=>"",chr("29")=>"",chr("30")=>"",chr("31")=>""));
                $message = HtmlSpecialChars($message); 
                $message=addslashes($message);
                return $message;
                }       
         $pass = check($pass);     
         $name = check($name);     
         $day = check($day);     
         $month = check($month);     
         $year = check($year);     
         $city = check($city);     
         $mail = check($mail);               
         $site = check($site);     
         $infa = check($infa);     
         $avtootvet = check($avtootvet); 
		 $icq = check($icq); 
		 $op = check($op);     
         $mob = check($mob);  
         $number=check($number);            
if (!eregi("^[a-z0-9\._-]+@[a-z0-9\._-]+\.[a-z]{2,4}\$", $mail))$mail="";            
if(!eregi("^((http://))((([a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z;]{2,3}))|(([0-9]{1,3}\.){3}([0-9]{1,3})))((/|\?)[a-z0-9~#%&'_\+=:;\?\.-]*)*)\$", $site))$site="";
      
        if (mysql_select_db ($MySQLDatabasename)) {
            $result = mysql_query ("Select * users where id = '".$id."'");
            if (mysql_affected_rows() == 0) {
                $msg = "database error...";
            } else {
   
                $birth = "$day-$month-$year";
   $ins_str = "Update users set pass='".$pass."', name='".$name."', sex='".$sex."', birth='".$birth."', city='".$city."', mail='".$mail."', site='".$site."', icq='".$icq."', infa='".$infa."', op='".$op."', mob='".$mob."', number='".$number."', avtootvet='".$avtootvet."' where id ='".$id."'";
    if (mysql_query ($ins_str)) {
     $msg = "&#x0412;&#x0430;&#x0448; &#x043F;&#x0440;&#x043E;&#x0444;&#x0430;&#x0439;&#x043B; &#x0438;&#x0437;&#x043C;&#x0435;&#x043D;&#x0451;&#x043D;";
     $error = False;
                } else {
                    $msg = "database error...";
                }
            }
        } else {
            $msg = "error select the database...";
        }
        mysql_close($link);

    }
 if ($error) {
echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n";
echo "<!DOCTYPE wml PUBLIC \"-//WAPFORUM//DTD WML 1.2//EN\" \"http://www.wapforum.org/DTD/wml12.dtd\">\n";
echo "<wml>\n";
echo "<card id=\"error\" title=\"error\" ontimer=\"profile.php?id=$id&amp;ps=$ps\"><timer value=\"15\"/>\n";
echo "<do type=\"prev\" label=\"Back\"><prev/></do>\n";
echo "<p>\n";
//echo $fsize1;
echo "<b>$msg</b>\n";
//echo $fsize2;
echo "</p>\n";
echo "</card>\n";
echo "</wml>\n";

    } else {

echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n";
echo "<!DOCTYPE wml PUBLIC \"-//WAPFORUM//DTD WML 1.2//EN\" \"http://www.wapforum.org/DTD/wml12.dtd\">\n";
echo "<wml>\n";
echo "<card id=\"ok\" title=\"OK\" ontimer=\"enter.php?id=$id&amp;ps=$pass&amp;ref=$ref\"><timer value=\"10\"/>\n";
echo "<p>\n";
//echo $fsize1;
echo "<b>$msg</b><br/>\n";
//echo $fsize2;
echo "</p>\n";
echo "</card>\n";
echo "</wml>\n";
}
}
?>