View file guest/index.php

<?php
require( '../sys/inc/core.php' );
if ( isset( $user ) && db::count("SELECT COUNT(*) FROM `ban` WHERE `razdel` = 'guest' AND `id_user` = '$user[id]' AND (`time` > '$time' OR `view` = '0')") != 0 ) {
    header( 'Location: /ban.php?' . SID );
    exit;
}
if ( isset( $user ) )
    db::query("UPDATE `notification` SET `read` = '1' WHERE `type` = 'guest' AND `id_user` = '$user[id]'");
include 'inc/admin_act.php';
if ( isset( $_POST['msg'] ) && isset( $user ) ) {
    $msg = $_POST['msg'];
    $mat = antimat( $msg );
    if ( $mat )
        $err[] = 'В тексте сообщения обнаружен мат: ' . $mat;
    if ( strlen2( $msg ) > 1000024 ) {
        $err[] = 'Сообщение слишком длинное';
    } elseif ( strlen2( $msg ) < 2 ) {
        $err[] = 'Короткое сообщение';
    } elseif ( db::count("SELECT COUNT(*) FROM `guest` WHERE `id_user` = '$user[id]' AND `msg` = '" . my_esc( $msg ) . "' LIMIT 1") != 0 ) {
        $err = 'Ваше сообщение повторяет предыдущее';
    } elseif ( !isset( $err ) ) {
        include_once H . 'sys/add/user.active.php';

        db::query("INSERT INTO `guest` (id_user, time, msg) values('$user[id]', '$time', '" . my_esc( $msg ) . "')");

        if (isset($ank_reply['id'])) {
            $notifiacation = db::fetch("SELECT * FROM `notification_set` WHERE `id_user` = '" . $ank_reply['id'] . "' LIMIT 1", ARRAY_A);
            if ($notifiacation['komm'] == 1 && $ank_reply['id'] != $user['id'])
                db::query("INSERT INTO `notification` (`avtor`, `id_user`, `type`, `time`) VALUES ('$user[id]', '$ank_reply[id]', 'guest', '$time')");
        }

        $_SESSION['message'] = 'Сообщение успешно добавлено';
        header( "Location: index.php" . SID );
        exit;
    }
} elseif ( !isset( $user ) && isset( $set['write_guest'] ) && $set['write_guest'] == 1 && isset( $_SESSION['captcha'] ) && isset( $_POST['chislo'] ) ) {
    $msg = $_POST['msg'];
    $mat = antimat( $msg );
    if ( $mat ) {
        $err[] = 'В тексте сообщения обнаружен мат: ' . $mat;
    }
    if ( strlen2( $msg ) > 1024 ) {
        $err = 'Сообщение слишком длинное';
    } elseif ( $_SESSION['captcha'] != $_POST['chislo'] ) {
        $err = 'Неверное проверочное число';
    } elseif ( isset( $_SESSION['antiflood'] ) && $_SESSION['antiflood'] > $time - 300 ) {
        $err = 'Для того чтобы чаще писать нужно авторизоваться';
    } elseif ( strlen2( $msg ) < 2 ) {
        $err = 'Короткое сообщение';
    } elseif ( db::count("SELECT COUNT(*) FROM `guest` WHERE `id_user` = '0' AND `msg` = '" . my_esc( $msg ) . "' LIMIT 1") != 0 ) {
        $err = 'Ваше сообщение повторяет предыдущее';
    } elseif ( !isset( $err ) ) {
        $_SESSION['antiflood'] = $time;

        db::query("INSERT INTO `guest` (id_user, time, msg) values('0', '$time', '" . my_esc( $msg ) . "')");

        $_SESSION['message'] = 'Сообщение успешно добавлено';
        header( "Location: index.php" . SID );
        exit;
    }
}
$set['title'] = 'Гостевая книга';
include_once '../sys/inc/thead.php';
title();
aut();
err();

$k_post = db::count("SELECT COUNT(id) FROM `guest`");
$k_page = k_page( $k_post, $set['p_str'] );
$page   = page( $k_page );
$start  = $set['p_str'] * $page - $set['p_str'];
if ( isset( $user ) || ( isset( $set['write_guest'] ) && $set['write_guest'] == 1 && ( !isset( $_SESSION['antiflood'] ) || $_SESSION['antiflood'] < $time - 300 ) ) ) {
    echo '<form method="post" name="message" action="?page=' . $page . REPLY . '">';
    ds_editor('msg', $insert); 

    if ( !isset( $user ) && isset( $set['write_guest'] ) && $set['write_guest'] == 1 ) {
?>
        <img src="/captcha.php?SESS=<?= $sess ?>" width="100" height="30" alt="Captcha"/> <input name="chislo" size="7"
                                                                                                 maxlength="5" value=""
                                                                                                 type="text"
                                                                                                 placeholder="Цифры.."/>
        <br/>
        <?php
    }
    echo '<input value="Отправить" type="submit" />';
    echo '</form>';
} elseif ( !isset( $user ) && isset( $set['write_guest'] ) && $set['write_guest'] == 1 ) {
?>
    <div class="mess">Вы сможете писать через <span
            class="on"><?= abs( $time - $_SESSION['antiflood'] - 300 ) ?> сек.</span></div><?php
}
echo '<table class="post">';
if ( $k_post == 0 ) {
    echo '<div class="mess" id="no_object">';
    echo 'Нет сообщений';
    echo '</div>';
}
$q = db::query("SELECT * FROM `guest` ORDER BY id DESC LIMIT $start, $set[p_str]");
while ( $post =  $q->fetch_assoc() ) {
    $ank = db::fetch("SELECT * FROM `user` WHERE `id` = $post[id_user] LIMIT 1", ARRAY_A);
    echo '<div class="' . ( $num % 2 ? "nav1" : "nav2" ) . '">';
    $num++;
    echo ( $post['id_user'] != '0' ? user::avatar( $ank['id'], 0 ) . user::nick( $ank['id'], 1, 1, 1 ) : user::avatar( 0, 0 ) . ' <b>' . __( 'Гость' ) . '</b> ' );
    if ( isset( $user ) && $user['id'] != $ank['id'] )
        echo ' <a href="?page=' . $page . '&amp;response=' . $ank['id'] . '">[*]</a> ';
    echo ' (' . vremja( $post['time'] ) . ') <br />';
    echo output_text( $post['msg'] ) . '<br />';
    if ( isset( $user ) && ( $user['level'] > $ank['level'] || $user['level'] != 0 && $user['id'] == $ank['id'] ) && user_access( 'guest_delete' ) ) {
        echo '<div class="right">';
        echo '<a href="delete.php?id=' . $post['id'] . '"><img src="/style/icons/delete.gif" alt="*"></a>';
        echo '</div>';
    }
    echo '</div>';
}
echo '</table>';
if ( $k_page > 1 )
    str( 'index.php?', $k_page, $page );
echo '<div class="foot">';
echo '<img src="/style/icons/str.gif" alt="*"> <a href="who.php">В гостевой (' . db::count("SELECT COUNT(id) FROM `user` WHERE `date_last` > '" . ( time() - 100 ) . "' AND `url` like '/guest/%'") . ' чел.)</a><br />';
echo '</div>';
include 'inc/admin_form.php';
include_once '../sys/inc/tfoot.php';
?>