View file plugins/notes/edit.php

<?php
require( '../../sys/inc/core.php' );
if ( db::count("SELECT COUNT(*) FROM `ban` WHERE `razdel` = 'notes' AND `id_user` = '$user[id]' AND (`time` > '$time' OR `view` = '0' OR `navsegda` = '1')") != 0 ) {
    header( 'Location: /ban.php?' . SID );
    exit;
}
only_reg();
$set['title'] = 'Дневники';
include_once '../../sys/inc/thead.php';
title();
aut();
if ( db::count("SELECT COUNT(*) FROM `notes` WHERE `id` = '" . intval( $_GET['id'] ) . "' LIMIT 1") == 0 ) {
    header( "Location: index.php?" . SID );
    exit;
}
$notes = db::fetch("select * from `notes` where `id` = '" . intval( $_GET['id'] ) . "'", ARRAY_N);
if ( user_access( 'notes_edit' ) || $user['id'] == $notes['id_user'] ) {
    $avtor = get_user( $notes['id_user'] );
    if ( isset( $_GET['edit'] ) && isset( $_POST['name'] ) && $_POST['name'] != NULL && isset( $_POST['msg'] ) ) {
        $msg         = my_esc( $_POST['msg'] );
        $name        = my_esc( $_POST['name'] );
        $id_dir      = intval( $_POST['id_dir'] );
        $privat      = intval( $_POST['private'] );
        $privat_komm = intval( $_POST['private_komm'] );
        $type        = 0;
        if ( strlen2( $name ) < 3 )
            $err = 'Короткое название';
        if ( strlen2( $name ) > 50 )
            $err = 'Длина названия превышает предел в 50 символов';
        if ( strlen2( $msg ) < 3 )
            $err = 'Короткий Текст';
        if ( strlen2( $msg ) > 10000 )
            $err = 'Длина текста превышает предел в 10000 символа';
        if ( !isset( $err ) ) {
            db::query("UPDATE `notes` SET `name` = '$name', `type` = '$type', `id_dir` = '$id_dir', `msg` = '$msg', `private` = '$privat', `private_komm` = '$privat_komm' WHERE `id`='" . intval( $_GET['id'] ) . "'");
            $_SESSION['message'] = 'Изменения успешно приняты';
            header( "Location: list.php?id=" . intval( $_GET['id'] ) . "" . SID );
            exit;
        }
    }
    err();
    echo "<div class=\"foot\">\n";
    echo "<img src='/style/icons/str2.gif' alt='*'> <a href='index.php'>Дневники</a> | <a href='/info.php?id=$avtor[id]'>$avtor[nick]</a>\n";
    echo " | <a href='list.php?id=$notes[id]'>" . text( $notes['name'] ) . "</a> | <b>Редактирование</b>";
    echo "</div>\n";
    $notes = db::fetch("select * from `notes` where `id`='" . intval( $_GET['id'] ) . "';", ARRAY_N);
    echo "<form method='post' name='message' action='?id=" . intval( $_GET['id'] ) . "&amp;edit'>\n";
    echo "Название:<br />\n<input type=\"text\" name=\"name\" value=\"" . text( $notes['name'] ) . "\" /><br />\n";
    $msg2 = text( $notes['msg'] );
    if ( is_file( H . 'style/themes/' . $set['set_them'] . '/altername_post_form.php' ) ) {
        include_once H . 'style/themes/' . $set['set_them'] . '/altername_post_form.php';
    } else {
        echo "Сообщение:$tPanel<textarea name=\"msg\">" . text( $notes['msg'] ) . "</textarea><br />\n";
    }
    echo "Категория:<br />\n<select name='id_dir'>\n";
    $q = db::query("SELECT * FROM `notes_dir` ORDER BY `id` DESC");
    echo "<option value='0'" . ( !$notes['id_dir'] ? " selected='selected'" : null ) . "><b>Без категории</b></option>\n";
    while ( $post =  $q->fetch_assoc() ) {
        echo "<option value='$post[id]'" . ( $notes['id_dir'] == $post['id'] ? " selected='selected'" : null ) . ">" . text( $post['name'] ) . "</option>\n";
    }
    echo "</select><br />\n";
    echo "<div class='main'>Могут смотреть:<br /><input name='private' type='radio' " . ( $notes['private'] == 0 ? ' checked="checked"' : null ) . " value='0' />Все ";
    echo "<input name='private' type='radio' " . ( $notes['private'] == 1 ? ' checked="checked"' : null ) . " value='1' />Друзья ";
    echo "<input name='private' type='radio' " . ( $notes['private'] == 2 ? ' checked="checked"' : null ) . " value='2' />Только я</div>";
    echo "<div class='main'>Могут комментировать:<br /><input name='private_komm' type='radio' " . ( $notes['private_komm'] == 0 ? ' checked="checked"' : null ) . " value='0' />Все ";
    echo "<input name='private_komm' type='radio' " . ( $notes['private_komm'] == 1 ? ' checked="checked"' : null ) . " value='1' />Друзья ";
    echo "<input name='private_komm' type='radio' " . ( $notes['private_komm'] == 2 ? ' checked="checked"' : null ) . " value='2' />Только я</div>";
    echo "<input value=\"Применить\" type=\"submit\" />\n";
    echo "</form>\n";
    echo "<div class=\"foot\">\n";
    echo "<img src='/style/icons/str2.gif' alt='*'> <a href='index.php'>Дневники</a> | <a href='/info.php?id=$avtor[id]'>$avtor[nick]</a>\n";
    echo " | <a href='list.php?id=$notes[id]'>" . text( $notes['name'] ) . "</a> | <b>Редактирование</b>";
    echo "</div>\n";
}
include_once '../../sys/inc/tfoot.php';
?>