View file user/info/who_rating.php

<?php
require( '../../sys/inc/core.php' );
if ( isset( $user ) )
    $ank['id'] = $user['id'];
if ( isset( $_GET['id'] ) )
    $ank['id'] = intval( $_GET['id'] );
$ank = get_user( $ank['id'] );
if ( !$ank ) {
    header( "Location: /index.php?" . SID );
    exit;
}
$user_id = $ank['id'];
if ( ( !isset( $_SESSION['refer'] ) || $_SESSION['refer'] == NULL ) && isset( $_SERVER['HTTP_REFERER'] ) && $_SERVER['HTTP_REFERER'] != NULL && !preg_match( '#info\.php#', $_SERVER['HTTP_REFERER'] ) )
    $_SESSION['refer'] = str_replace( '&', '&amp;', preg_replace( '#^http://[^/]*/#', '/', $_SERVER['HTTP_REFERER'] ) );
if ( isset( $_POST['rating'] ) && isset( $user ) && isset( $_POST['msg'] ) && $user['id'] != $ank['id'] && $user['rating'] >= 2 && db::count("SELECT SUM(`rating`) FROM `user_voice2` WHERE `id_kont` = '$user[id]'") >= 0 ) {
    $msg = db::real_escape_string( $_POST['msg']);
    if ( strlen( $msg ) < 3 )
        $err = 'Короткий Отзыв';
    if ( strlen( $msg ) > 1024 )
        $err = 'Длиный Отзыв';
    elseif ( db::count("SELECT COUNT(*) FROM `user_voice2` WHERE `id_user` = '$user[id]' AND `msg` = '" . my_esc( $msg ) . "' LIMIT 1") != 0 ) {
        $err = 'Ваш отзыв повторяется';
    }
    if ( !isset( $err ) ) {
        $new_r = min( max( @intval( $_POST['rating'] ), -2 ), 2 );
        db::query("DELETE FROM `user_voice2` WHERE `id_user` = '$user[id]' AND `id_kont` = '$ank[id]' LIMIT 1");
        if ( $new_r ) {
            if ( db::count("SELECT COUNT(*) FROM `user_voice2` WHERE `id_user` = '$user[id]' AND `id_kont` = '$ank[id]' LIMIT 1") == 0 ) {
                db::query("INSERT INTO `user_voice2` (`rating`, `id_user`, `id_kont`, `msg`, `time`) VALUES ('$new_r','$user[id]','$ank[id]', '$msg', '$time')");
                db::query("UPDATE `user` SET `rating` = '" . ( $ank['rating'] + $new_r ) . "' WHERE `id` = '$ank[id]' LIMIT 1");
            } else {
                db::query("UPDATE `user_voice2` SET `rating` = '" . $new_r . "', msg = $msg, time = $time WHERE `id_user` = '$user[id]' AND `id_kont` = '$ank[id]' LIMIT 1");
            }
        }
        if ( $new_r > 0 )
            db::query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$user[nick] оставил о Вас [url=/user/info/who_rating.php]положительный отзыв[/url]', '$time')");
        if ( $new_r < 0 )
            db::query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$user[nick] оставил о Вас [url=/user/info/who_rating.php]негативный отзыв[/url]', '$time')");
        if ( $new_r == 0 )
            db::query("INSERT INTO `mail` (`id_user`, `id_kont`, `msg`, `time`) values('0', '$ank[id]', '$user[nick] оставил о Вас [url=/user/info/who_rating.php]нейтральный отзыв[/url]', '$time')");
        db::query("UPDATE `user` SET `rating_tmp` = '" . ( $user['rating_tmp'] + 1 ) . "' WHERE `id` = '$user[id]' LIMIT 1");
        $_SESSION['message'] = 'Ваше мнение о пользователе успешно изменено';
    }
}
$set['title'] = $ank['nick'] . ' - отзывы ';
include_once '../../sys/inc/thead.php';
title();
aut();
err();
if ( isset( $user ) )
    $ank['id'] = $user['id'];
if ( isset( $_GET['id'] ) )
    $ank['id'] = intval( $_GET['id'] );
if ( isset( $user ) && $user['id'] != $ank['id'] && $user['rating'] >= 2 && db::count("SELECT SUM(`rating`) FROM `user_voice2` WHERE `id_kont` = '$user[id]'") >= 0 ) {
    echo "<b>Ваше отношение:</b><br />\n";
    $my_r = intval( @db::count("SELECT `rating` FROM `user_voice2` WHERE `id_user` = '$user[id]' AND `id_kont` = '$ank[id]'") );
    echo "<form method='post' action='?id=$ank[id]&amp;$passgen'>\n";
    echo "<select name='rating'>\n";
    echo "<option value='2' " . ( $my_r == 2 ? 'selected="selected"' : null ) . ">Замечательное</option>\n";
    echo "<option value='1' " . ( $my_r == 1 ? 'selected="selected"' : null ) . ">Положительное</option>\n";
    echo "<option value='0' " . ( $my_r == 0 ? 'selected="selected"' : null ) . ">Нейтральное</option>\n";
    echo "<option value='-1' " . ( $my_r == -1 ? 'selected="selected"' : null ) . ">Не очень...</option>\n";
    echo "<option value='-2' " . ( $my_r == -2 ? 'selected="selected"' : null ) . ">Негативное</option>\n";
    echo "</select><br />\n";
    echo "Текст: <br />";
    echo "<textarea name=\"msg\"></textarea><br />";
    echo "<input type='submit' value='GO' />\n";
    echo "</form>\n";
} elseif ( isset( $user ) && $user['id'] != $ank['id'] ) {
    echo "<div class='mess'>";
    echo 'Чтобы оставить отзыв, вам необходимо набрать 2 или более % рейтинга.';
    echo "</div>";
}
$k_post = db::count("SELECT COUNT(*) FROM `user_voice2` WHERE `id_kont` = '" . $ank['id'] . "'");
$k_page = k_page( $k_post, $set['p_str'] );
$page   = page( $k_page );
$start  = $set['p_str'] * $page - $set['p_str'];
?><table class="post"><?php
if ( $k_post == 0 ) {
?>
    <div class="mess">
	<?= __( 'Нет положительных отзывов' ) ?>
	</div>
    <?php
} else {
    $q     = db::query("SELECT * FROM `user_voice2` WHERE `id_kont` = '$ank[id]' ORDER BY `time` DESC LIMIT $start, $set[p_str]");
    $value = array(
         '-2' => __( 'Негативный' ),
        '-1' => __( 'Не очень..' ),
        '0' => __( 'Нейтральный' ),
        '1' => __( 'Положительный' ),
        '2' => __( 'Замечательный' ) 
    );
    while ( $post =  $q->fetch_assoc() ) {
?>
        <div class="nav<?= ( $num % 2 ? '2' : '1' ) ?>">
    	<?= user::avatar( $post['id_user'] ) . user::nick( $post['id_user'], 1, 1, 1 ) ?><br />
    	<?= __( 'Отзыв' ) ?>:<br />
        <?= $value[$post['rating']] ?><br />
    	<?= text( $post['msg'] ) ?>
    	</div>
        <?php
    }
?></table><?php
    if ( $k_page > 1 ) {
        str( 'who_rating.php?id=' . $user_id . '&amp;', $k_page, $page );
    }
}
include_once '../../sys/inc/tfoot.php';