View file news/news.php

<?php
require( '../sys/inc/core.php' );
if ( !isset( $_GET['id'] ) && !is_numeric( $_GET['id'] ) ) {
    header( "Location: index.php?" . SID );
    exit;
}
if ( db::count("SELECT COUNT(*) FROM `news` WHERE `id` = '" . intval( $_GET['id'] ) . "' LIMIT 1") == 0 ) {
    header( "Location: index.php?" . SID );
    exit;
}
$news   = db::fetch("SELECT * FROM `news` WHERE `id` = '" . intval( $_GET['id'] ) . "' LIMIT 1", ARRAY_A);
$author = get_user( $news['id_user'] );
if ( isset( $user ) )
    db::query("UPDATE `notification` SET `read` = '1' WHERE `type` = 'news_komm' AND `id_user` = '$user[id]' AND `id_object` = '$news[id]'");
if ( isset( $user ) && isset( $_GET['like'] ) && ( $_GET['like'] == 1 || $_GET['like'] == 0 ) && db::count("SELECT COUNT(*) FROM `like_object` WHERE `id_object` = '$news[id]' AND `type` = 'news' AND `id_user` = '$user[id]'") == 0 ) {
    db::query("INSERT INTO `like_object` (`id_user`, `id_object`, `type`, `like`) VALUES ('$user[id]', '$news[id]', 'news', '" . abs( intval( $_GET['like'] ) ) . "')");
    $active_ank = $user;
    include_once H . 'sys/add/user.active.php';
}
if ( isset( $_POST['msg'] ) && isset( $user ) ) {
    $msg = $_POST['msg'];
    $mat = antimat( $msg );
    if ( $mat )
        $err[] = 'В тексте сообщения обнаружен мат: ' . $mat;
    if ( strlen2( $msg ) > 1024 ) {
        $err = 'Сообщение слишком длинное';
    } elseif ( strlen2( $msg ) < 2 ) {
        $err = 'Короткое сообщение';
    } elseif ( db::count("SELECT COUNT(*) FROM `news_komm` WHERE `id_news` = '" . intval( $_GET['id'] ) . "' AND `id_user` = '$user[id]' AND `msg` = '" . my_esc( $msg ) . "' LIMIT 1") != 0 ) {
        $err = 'Ваше сообщение повторяет предыдущее';
    } elseif ( !isset( $err ) ) {
        db::query("INSERT INTO `news_komm` (`id_user`, `time`, `msg`, `id_news`) values('$user[id]', '$time', '" . my_esc( $msg ) . "', '" . intval( $_GET['id'] ) . "')");
        $active_ank = $user;
        include_once H . 'sys/add/user.active.php';
        if ( isset( $ank_reply['id'] ) ) {
            $notifiacation = db::fetch("SELECT * FROM `notification_set` WHERE `id_user` = '" . $ank_reply['id'] . "' LIMIT 1", ARRAY_A);
            if ( $notifiacation['komm'] == 1 && $ank_reply['id'] != $user['id'] )
                db::query("INSERT INTO `notification` (`avtor`, `id_user`, `id_object`, `type`, `time`) VALUES ('$user[id]', '$ank_reply[id]', '$news[id]', 'news_komm', '$time')");
        }
        $_SESSION['message'] = 'Ваш комментарий успешно принят';
        header( 'Location: ?id=' . intval( $_GET['id'] ) . '&page=' . intval( $_GET['page'] ) );
        exit;
    }
}
$set['title'] = 'Новости - ' . text( $news['title'] );
include_once '../sys/inc/thead.php';
title();
aut();
err();
echo '<div class="nav1" id="news_title">';
echo '<img src="/style/icons/news.png" alt="*" /> ' . text( $news['title'] );
echo '</div>';
echo '<div class="nav2" id="news_content">';
echo output_text( $news['msg'] );
echo "</div>";
echo '<div class="nav2" id="like">';
if ( isset( $user ) && db::count("SELECT COUNT(*) FROM `like_object` WHERE `id_object` = '$news[id]' AND `type` = 'news' AND `id_user` = '$user[id]'") == 0 ) {
    echo '[<img src="/style/icons/like.gif" alt="*"> <a href="?id=' . $news['id'] . '&amp;like=1">Мне нравится</a>] ';
    echo '[<a href="?id=' . $news['id'] . '&amp;like=0"><img src="/style/icons/dlike.gif" alt="*"></a>]';
} else {
    echo '[<img src="/style/icons/like.gif" alt="*"> ' . db::count("SELECT COUNT(*) FROM `like_object` WHERE `id_object` = '$news[id]' AND `type` = 'news' AND `like` = '1'") . '] ';
    echo '[<img src="/style/icons/dlike.gif" alt="*"> ' . db::count("SELECT COUNT(*) FROM `like_object` WHERE `id_object` = '$news[id]' AND `type` = 'news' AND `like` = '0'") . ']';
}
echo '<br />';
echo 'Опубликовал' . ( $author['pol'] == 0 ? 'а' : null ) . ': ' . group( $author['id'] ) . user::nick( $author['id'] ) . medal( $author['id'] ) . online( $author['id'] );
echo '</div>';
echo '<div class="nav2" id="news_share">';
echo 'Поделится:<script type="text/javascript" src="//yandex.st/share/share.js" charset="utf-8"></script>
<span class="yashare-auto-init" data-yashareL10n="ru" data-yashareType="none" data-yashareQuickServices="vkontakte,twitter,odnoklassniki,moimir"></span>';
echo '</div>';
if ( user_access( 'adm_news' ) ) {
    echo '<div class="nav1" id="news_edit">';
    echo '[<img src="/style/icons/edit.gif" alt="*"> <a href="edit.php?id=' . $news['id'] . '">ред</a>] ';
    echo '[<img src="/style/icons/delete.gif" alt="*"> <a href="delete.php?news_id=' . $news['id'] . '">удл</a>] ';
    echo '</div>';
}
$listr = db::fetch("SELECT * FROM `news` WHERE `id` < '$news[id]' ORDER BY `id` DESC LIMIT 1", ARRAY_A);
$list  = db::fetch("SELECT * FROM `news` WHERE `id` > '$news[id]' ORDER BY `id`  ASC LIMIT 1", ARRAY_A);

echo '<div class="c2" style="text-align: center;">';
echo '<span class="page">' . ( isset($list['id']) ? '<a href="?id=' . $list['id'] . '">&laquo; Пред.</a> ' : '&laquo; Пред. ' ) . '</span>';
$k_1 = db::count("SELECT COUNT(*) FROM `news` WHERE `id` > '$news[id]'") + 1;
$k_2 = db::count("SELECT COUNT(*) FROM `news`");
echo ' (' . $k_1 . ' из ' . $k_2 . ') ';
echo '<span class="page">' . ( isset($listr['id']) ? '<a href="?id=' . $listr['id'] . '">След. &raquo;</a>' : ' След. &raquo;' ) . '</span>';
echo '</div>';
echo '<div class="foot" id="news_komm">';
echo 'Комментарии:';
echo '</div>';
$k_post = db::count("SELECT COUNT(*) FROM `news_komm` WHERE `id_news` = '" . intval( $_GET['id'] ) . "' ");
$k_page = k_page( $k_post, $set['p_str'] );
$page   = page( $k_page );
$start  = $set['p_str'] * $page - $set['p_str'];
$q      = db::query("SELECT * FROM `news_komm` WHERE `id_news` = '" . intval( $_GET['id'] ) . "' ORDER BY `id` $sort LIMIT $start, $set[p_str]");
echo '<table class="post">';
if ( $k_post == 0 ) {
    echo '<div class="mess" id="no_object">';
    echo 'Нет сообщений';
    echo '</div>';
} else {
    if ( isset( $user ) ) {
        echo '<div id="comments" class="menus">';
        echo '<div class="webmenu">';
        echo '<a href="?id=' . $news['id'] . '&amp;page=' . $page . '&amp;sort=1" class="' . ( $user['sort'] == 1 ? 'activ' : null ) . '">Внизу</a>';
        echo '</div>';
        echo '<div class="webmenu">';
        echo '<a href="?id=' . $news['id'] . '&amp;page=' . $page . '&amp;sort=0" class="' . ( $user['sort'] == 0 ? 'activ' : null ) . '">Вверху</a>';
        echo '</div>';
        echo '</div>';
    }
}
while ( $post =  $q->fetch_assoc() ) {
    $ank = db::fetch("SELECT * FROM `user` WHERE `id` = $post[id_user] LIMIT 1", ARRAY_A);
    echo '<div class="' . ( $num % 2 ? "nav1" : "nav2" ) . '">';
    $num++;
    echo group( $ank['id'] ) . user::nick( $ank['id'] );
    if ( isset( $user ) && $user['id'] != $ank['id'] )
        echo ' <a href="?id=' . $news['id'] . '&amp;page=' . $page . '&amp;response=' . $ank['id'] . '">[*]</a> ';
    echo medal( $ank['id'] ) . online( $ank['id'] ) . ' (' . vremja( $post['time'] ) . ')<br />';
    echo output_text( $post['msg'] ) . '<br />';
    if ( isset( $user ) ) {
        echo '<div class="right">';
        if ( isset( $user ) && ( $user['level'] > $ank['level'] || $user['level'] != 0 && $user['id'] == $ank['id'] ) )
            echo '<a href="delete.php?id=' . $post['id'] . '"><img src="/style/icons/delete.gif" alt="*"></a>';
        echo '</div>';
    }
    echo '</div>';
}
echo '</table>';
if ( $k_page > 1 )
    str( "news.php?id=" . intval( $_GET['id'] ) . '&amp;', $k_page, $page );
if ( isset( $user ) ) {
    echo '<form method="post" name="message" action="?id=' . intval( $_GET['id'] ) . '&amp;page=' . $page . REPLY . '">';
    if ( is_file( H . 'style/themes/' . $set['set_them'] . '/altername_post_form.php' ) )
        include_once H . 'style/themes/' . $set['set_them'] . '/altername_post_form.php';
    else
        echo $tPanel . '<textarea name="msg">' . $insert . '</textarea><br />';
    echo '<input value="Отправить" type="submit" />';
    echo '</form>';
}
echo '<div class="foot">';
echo '<img src="/style/icons/str2.gif" alt="*"> <a href="index.php">К новостям</a><br />';
echo '</div>';
include_once '../sys/inc/tfoot.php';
?>