View file plugins/notes/delete.php

<?php
require( '../../sys/inc/core.php' );
if ( isset( $_GET['id'] ) && db::count("SELECT COUNT(*) FROM `notes` WHERE `id` = '" . intval( $_GET['id'] ) . "'") == 1 ) {
    $post = db::fetch("SELECT * FROM `notes` WHERE `id` = '" . intval( $_GET['id'] ) . "' LIMIT 1", ARRAY_A);
    $ank  = db::fetch("SELECT * FROM `user` WHERE `id` = $post[id_user] LIMIT 1", ARRAY_A);
    if ( isset( $user ) && ( user_access( 'notes_delete' ) || $user['id'] == $ank['id'] ) ) {
        db::query("DELETE FROM `notes` WHERE `id` = '$post[id]'");
        db::query("DELETE FROM `notes_count` WHERE `id_notes` = '$post[id]'");
        db::query("DELETE FROM `notes_komm` WHERE `id_notes` = '$post[id]'");
        db::query("DELETE FROM `mark_notes` WHERE `id_list` = '$post[id]'");
        $_SESSION['message'] = 'Дневник успешно удален';
        header( "Location: index.php?" . SID );
        exit;
    }
} else {
    echo output_text( 'А как ты сюда попал? .дум.' );
}
if ( isset( $_GET['komm'] ) && db::count("SELECT COUNT(*) FROM `notes_komm` WHERE `id` = '" . intval( $_GET['komm'] ) . "'") == 1 ) {
    $post  = db::fetch("SELECT * FROM `notes_komm` WHERE `id` = '" . intval( $_GET['komm'] ) . "' LIMIT 1", ARRAY_A);
    $notes = db::fetch("SELECT * FROM `notes` WHERE `id` = '$post[id_notes]' LIMIT 1", ARRAY_A);
    $ank   = db::fetch("SELECT * FROM `user` WHERE `id` = $notes[id_user] LIMIT 1", ARRAY_A);
    if ( isset( $user ) && ( user_access( 'notes_delete' ) || $user['id'] == $ank['id'] ) ) {
        db::query("DELETE FROM `notes_komm` WHERE `id` = '$post[id]'");
        $_SESSION['message'] = 'Комментарий успешно удален';
        header( "Location: " . htmlspecialchars( $_SERVER['HTTP_REFERER'] ) );
        exit;
    } else {
        echo output_text( 'А как ты сюда попал? .дум.' );
    }
} else {
    echo output_text( 'А как ты сюда попал? .дум.' );
}
if ( isset( $_GET['dir'] ) && db::count("SELECT COUNT(*) FROM `notes_dir` WHERE `id` = '" . intval( $_GET['dir'] ) . "'") == 1 ) {
    if ( isset( $user ) && user_access( 'notes_delete' ) ) {
        $q = db::query("SELECT * FROM `notes_dir` WHERE `id` = '" . intval( $_GET['dir'] ) . "' LIMIT 1");
        while ( $post =  $q->fetch_assoc() ) {
            $notes = db::fetch("SELECT * FROM `notes` WHERE `id_dir` = '$post[id]'", ARRAY_A);
            db::query("DELETE FROM `notes_count` WHERE `id_notes` = '$notes[id]'");
            db::query("DELETE FROM `notes_komm` WHERE `id_notes` = '$notes[id]'");
            db::query("DELETE FROM `mark_notes` WHERE `id_list` = '$notes[id]'");
        }
        $post = db::fetch("SELECT * FROM `notes_dir` WHERE `id` = '" . intval( $_GET['dir'] ) . "' LIMIT 1", ARRAY_A);
        db::query("DELETE FROM `notes_count` WHERE `id_notes` = '$notes[id]'");
        db::query("DELETE FROM `notes_komm` WHERE `id_notes` = '$notes[id]'");
        db::query("DELETE FROM `mark_notes` WHERE `id_list` = '$notes[id]'");
        db::query("DELETE FROM `notes` WHERE `id_dir` = '$post[id]'");
        db::query("DELETE FROM `notes_dir` WHERE `id` = '$post[id]'");
        $_SESSION['message'] = 'Категория успешно удалена';
        header( "Location: " . htmlspecialchars( $_SERVER['HTTP_REFERER'] ) );
        exit;
    } else {
        echo output_text( 'А как ты сюда попал? .дум.' );
    }
} else {
    echo output_text( 'А как ты сюда попал? .дум.' );
}
?>