View file sys/inc/fnc.php

<?php 

function my_esc($str)
{
	  return mysql_real_escape_string($str);
}

/**
* Резервная функция мультиязычности
* @return string
*/
function __($str)
{
	  return $str;
}


// Защита от частых запросов с одного IP
if ($set['antidos']) {
    $antidos[] = array('time' => $time);
    $k_loads = 0;
    
    if (is_file(H.'sys/tmp/antidos_'.$iplong.'.dat')) {
        $antidos_dat = unserialize(file_get_contents(H.'sys/tmp/antidos_'.$iplong.'.dat'));
        
        for ($i = 0; $i < 150 && $i < sizeof($antidos_dat); $i++) {
            if($antidos_dat[$i]['time'] > $time - 5) {
                $k_loads++;
                $antidos[] = $antidos_dat[$i];
            }
        }
    }
    
    if ($k_loads>100)
    {
        if (mysql_result(mysql_query("SELECT COUNT(*) FROM `ban_ip` WHERE `min` <= '$iplong' AND `max` >= '$iplong'"), 0) == 0)
            mysql_query("INSERT INTO `ban_ip` (`min`, `max`, `prich`) values('$iplong', '$iplong', 'AntiDos')");
    }
    @file_put_contents(H.'sys/tmp/antidos_'.$iplong.'.dat', serialize($antidos));
    @chmod(H.'sys/tmp/antidos_'.$iplong.'.dat', 0777);
}

// антимат сделает автоматическое предупреждение, а затем бан
function antimat($str)
{
    global $user, $time, $set;
    if ($set['antimat']) {
        $antimat = $_SESSION['antimat'];
        
        include_once H.'sys/inc/censure.php';
        
        $censure = censure($str);
        
        if ($censure) {
            $antimat[$censure] = $time;
            
            if (count($antimat) > 3 && isset($user) && $user['level']) {
                $prich = "Обнаружен мат: $censure";
                $timeban = $time + 60 * 60; 
                mysql_query("INSERT INTO `ban` (`id_user`, `id_ban`, `prich`, `time`) VALUES ('$user[id]', '0', '$prich', '$timeban')");
                admin_log('Пользователи', 'Бан', "Бан пользователя '[url=/amd_panel/ban.php?id=$user[id]]$user[nick][/url]' (id#$user[id]) до ".vremja($timeban)." по причине '$prich'");
                header('Location: /ban.php?'.SID);
                exit;
            }
            return $censure;
        }
        else return false;
    }
    else return false;
}

// рекурсивное удаление папки
function delete_dir($dir) 
{
    if (is_dir($dir)){
        $od = opendir($dir);
        while ($rd = readdir($od))
        {
            if ($rd == '.' || $rd == '..') 
                continue;
            if (is_dir("$dir/$rd")) {
                @chmod("$dir/$rd", 0777);
                delete_dir("$dir/$rd");
            } else {
                @chmod("$dir/$rd", 0777);
                @unlink("$dir/$rd");
            }
        }
        closedir($od);
        @chmod($dir, 0777);
        return @rmdir($dir);
    } else {
        @chmod($dir, 0777);
        @unlink($dir);
    }
}


// очистка временной папки
if (!isset($hard_process)) {
    $q = mysql_query("SELECT * FROM `cron` WHERE `id` = 'clear_tmp_dir'");
    if (mysql_num_rows($q) == 0)
        mysql_query("INSERT INTO `cron` (`id`, `time`) VALUES ('clear_tmp_dir', '$time')");
    
    $clear_dir = mysql_fetch_assoc($q);
    if (!$clear_dir['time'] || $clear_dir['time'] < $time - 60 * 60 * 24){
        $hard_process = true;
        mysql_query("UPDATE `cron` SET `time` = '$time' WHERE `id` = 'clear_tmp_dir'");


        $od = opendir(H.'sys/tmp/');
        while ($rd=readdir($od)) 
        {
            if (!preg_match('#^\.#',$rd) && filectime(H.'sys/tmp/'.$rd) < $time - 60 * 60 * 24){
                @delete_dir(H.'sys/tmp/'.$rd);
            }
        }
        closedir($od);
    }
}

// Подведение итогов статистики
if (!isset($hard_process)) {
    $q = mysql_query("SELECT * FROM `cron` WHERE `id` = 'visit' LIMIT 1");
    if (mysql_num_rows($q) == 0)
        mysql_query("INSERT INTO `cron` (`id`, `time`) VALUES ('visit', '$time')");
    
    $visit = mysql_fetch_assoc($q);
    if ($visit['time'] == NULL || $visit['time'] < time() - 60 * 60 * 24){
        if (function_exists('set_time_limit'))
            @set_time_limit(600); 
            
        $last_day = mktime(0, 0, 0, date('m'), date('d') - 1); 
        $today_time = mktime(0, 0, 0);
        
        if (mysql_result(mysql_query("SELECT COUNT(*) FROM `visit_everyday` WHERE `time` = '$last_day'"),0) == 0) {
            $hard_process = true;
            
            mysql_query("INSERT INTO `visit_everyday` (`host` , `host_ip_ua`, `hit`, `time`) 
                          VALUES ((SELECT COUNT(DISTINCT `ip`) FROM `visit_today` WHERE `time` < '$today_time'),
                                (SELECT COUNT(DISTINCT `ip`, `ua`) FROM `visit_today` WHERE `time` < '$today_time'),
                                (SELECT COUNT(*) FROM `visit_today` WHERE `time` < '$today_time'),'$last_day')");
            
            mysql_query('DELETE FROM `visit_today` WHERE `time` < '.$today_time);
        }
    }
}

// запись о переходах на сайт
if (isset($_SERVER['HTTP_REFERER']) && !preg_match('#'.preg_quote($_SERVER['HTTP_HOST']).'#', $_SERVER['HTTP_REFERER']) && 
        $ref = @parse_url($_SERVER['HTTP_REFERER'])) {
    if (isset($ref['host']))
        $_SESSION['http_referer'] = $ref['host'];
}

function br($msg,$br='<br />')
{
      return preg_replace("#((<br( ?/?)>)|\n|\r)+#i",$br, $msg);
}

function esc($text,$br=NULL) {
    if ($br!=NULL)
    for ($i = 0; $i <= 31; $i++)
        $text=str_replace(chr($i), NULL, $text);
    else {
        for ($i=0;$i<10;$i++)$text=str_replace(chr($i), NULL, $text);
        for ($i=11;$i<20;$i++)$text=str_replace(chr($i), NULL, $text);
        for ($i=21;$i<=31;$i++)$text=str_replace(chr($i), NULL, $text);
    }
    return $text;
}

// получаем данные пользователя и уровень прав (+ кеширование)
function get_user($user_id = 0)
{
    if ($user_id == 0) {
        $ank2['id'] = 0;
        $ank2['nick'] = 'Система';
        $ank2['level'] = 999;
        $ank2['pol'] = 1;
        $ank2['group_name'] = 'Системный робот';
        $ank2['ank_o_sebe'] = 'Создан для уведомлений';
        return $ank2;
    } 
    
    else {
        static $users; 
        $user_id = intval($user_id);
        $users[0] = false;
        if (!isset($users[$user_id])) {
            if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id` = '$user_id'"),0)==1)
            {
                $users[$user_id] = mysql_fetch_assoc(mysql_query("SELECT * FROM `user` WHERE `id` = '$user_id' LIMIT 1"));
                $tmp_us = mysql_fetch_assoc(mysql_query("SELECT `level`,`name` AS `group_name` 
                                                         FROM `user_group` 
                                                         WHERE `id` = '".$users[$user_id]['group_access']."' LIMIT 1"));

                if ($tmp_us['group_name']==null) {
                    $users[$user_id]['level'] = 0;
                    $users[$user_id]['group_name']='Пользователь';
                } else {
                    $users[$user_id]['level']=$tmp_us['level'];
                    $users[$user_id]['group_name']=$tmp_us['group_name'];
                }
            }
            else $users[$user_id] = false;
        }
        return $users[$user_id];
    }
}

// определение оператора
function opsos($ips = NULL)
{
    global $ip;
    if ($ips == NULL)
        $ips = $ip;
    $ipl = ip2long($ips);
    
    if (mysql_result(mysql_query("SELECT COUNT(*) FROM `opsos` WHERE `min` <= '$ipl' AND `max` >= '$ipl'"), 0) != 0) {
        $opsos = mysql_fetch_assoc(mysql_query("SELECT opsos FROM `opsos` WHERE `min` <= '$ipl' AND `max` >= '$ipl' LIMIT 1"));
        return stripcslashes(htmlspecialchars($opsos['opsos']));
    }
    else return false;
}

// вывод времени
function vremja($time=NULL)
{
    global $user;
    
    if ($time == NULL)
        $time=time();
        
    if (isset($user))
        $time=$time+$user['set_timesdvig']*60*60;
    
    $timep = date("j M Y в H:i", $time);
    $time_p[0] = date("j n Y", $time);
    $time_p[1] = date("H:i", $time);
    
    if ($time_p[0]==date("j n Y"))
        $timep=date("H:i:s", $time);
        
    if (isset($user)) {
        if ($time_p[0] == date("j n Y", time()+$user['set_timesdvig']*60*60))
            $timep = date("H:i:s", $time);
        if ($time_p[0] == date("j n Y", time()-60*60*(24-$user['set_timesdvig'])))
            $timep = "Вчера в $time_p[1]";
    } else {
    if ($time_p[0] == date("j n Y"))
        $timep=date("H:i:s", $time);
    if ($time_p[0] == date("j n Y", time()-60*60*24))
        $timep = "Вчера в $time_p[1]";
    }
    
    $timep = str_replace("Jan","Янв", $timep);
    $timep = str_replace("Feb","Фев", $timep);
    $timep = str_replace("Mar","Марта", $timep);
    $timep = str_replace("May","Мая", $timep);
    $timep = str_replace("Apr","Апр", $timep);
    $timep = str_replace("Jun","Июня", $timep);
    $timep = str_replace("Jul","Июля", $timep);
    $timep = str_replace("Aug","Авг", $timep);
    $timep = str_replace("Sep","Сент", $timep);
    $timep = str_replace("Oct","Окт", $timep);
    $timep = str_replace("Nov","Ноября", $timep);
    $timep = str_replace("Dec","Дек", $timep);
    return $timep;
}

// только для зарегистрированых
function only_reg($link = NULL) 
{
    global $user;
    
    if (!isset($user)) {
        if ($link == NULL)
            $link = '/index.php?'.SID;
        
        header("Location: $link");
        exit;
    }
}


// только для незарегистрированых
function only_unreg($link = NULL) 
{
    global $user;
    
    if (isset($user)){
        if ($link == NULL)
            $link = '/index.php?'.SID;
        
        header("Location: $link");
        exit;
    }
}


// только для тех, у кого уровень доступа больше или равен $level
function only_level($level=0,$link = NULL) 
{
    global $user;
    
    if (!isset($user) || $user['level'] < $level) {
        if ($link==NULL)
            $link='/index.php?'.SID;
        
        header("Location: $link");
        exit;
    }
}

if (!isset($hard_process)) {
    $q = mysql_query("SELECT * FROM `cron` WHERE `id` = 'everyday'");

    if (mysql_num_rows($q)==0)
        mysql_query("INSERT INTO `cron` (`id`, `time`) VALUES ('everyday', '".time()."')");

    $everyday = mysql_fetch_assoc($q);
    if ($everyday['time'] == NULL || $everyday['time']<time()-60*60*24) {
        $hard_process = true;
        
        if (function_exists('set_time_limit'))@set_time_limit(600); // Ставим ограничение на 10 минут
        mysql_query("UPDATE `cron` SET `time` = '".time()."' WHERE `id` = 'everyday'");
        mysql_query("DELETE FROM `guests` WHERE `date_last` < '".(time()-600)."'");
        mysql_query("DELETE FROM `chat_post` WHERE `time` < '".(time()-60*60*24)."'"); // удаление старых постов в чате
        mysql_query("DELETE FROM `user` WHERE `activation` != null AND `time_reg` < '".(time()-60*60*24)."'"); // удаление неактивированных аккаунтов

        // удаляем все контакты, помеченные на удаление более месяца назад
        $qd = mysql_query("SELECT * FROM `users_konts` WHERE `type` = 'deleted' AND `time` < ".($time-60*60*24*30));
        
        while ($deleted=mysql_fetch_array($qd)) 
        {
            mysql_query("DELETE FROM `users_konts` WHERE `id_user` = '$deleted[id_user]' AND `id_kont` = '$deleted[id_kont]'");

            if (mysql_result(mysql_query("SELECT COUNT(*) FROM `users_konts` WHERE `id_kont` = '$deleted[id_user]' AND `id_user` = '$deleted[id_kont]'"),0)==0)
            {
                // если юзер не находится в контакте у другого, то удаляем и все сообщения
                mysql_query("DELETE FROM `mail` WHERE `id_user` = '$deleted[id_user]' AND `id_kont` = '$deleted[id_kont]' OR `id_kont` = '$deleted[id_user]' AND `id_user` = '$deleted[id_kont]'");
            }
        }
        
        $tab = mysql_query('SHOW TABLES FROM '.$set['mysql_db_name']);
        for($i = 0; $i < mysql_num_rows($tab); $i++)
        {
            mysql_query("OPTIMIZE TABLE `".mysql_tablename($tab,$i)."`"); // оптимизация таблиц
        }
    }
}


// вывод ошибок
function err()
{
    global $err;
    
    if (isset($err)) {
        if (is_array($err)) {
            foreach ($err as $key => $value) 
            {
                echo "<div class='err'>$value</div>\n";
            }
        }
        else echo "<div class='err'>$err</div>\n";
    }
}

function msg($msg)
{
    echo "<div class='msg'>$msg</div>\n";
}

// отправка запланированных писем
$q = mysql_query("SELECT * FROM `mail_to_send` LIMIT 1");

if (mysql_num_rows($q) != 0) {
    $mail = mysql_fetch_assoc($q);
    $adds="From: \"admin@$_SERVER[HTTP_HOST]\" <admin@$_SERVER[HTTP_HOST]>\n";
    $adds .= "Content-Type: text/html; charset=utf-8\n";
    mail($mail['mail'], '=?utf-8?B?'.base64_encode($mail['them']).'?=', $mail['msg'], $adds);
    mysql_query("DELETE FROM `mail_to_send` WHERE `id` = '$mail[id]'");
}

// сохранение настроек системы
function save_settings($set)
{
    unset($set['web']);
    if ($fopen = @fopen(H.'sys/dat/settings_6.2.dat', 'w')) {
        @fputs($fopen, serialize($set));
        @fclose($fopen);
        @chmod(H.'sys/dat/settings_6.2.dat', 0777);
        return true;
    } 
    
    else return false;
}

// запись действий администрации
function admin_log($mod,$act,$opis)
{
    global $user;

    $q = mysql_query("SELECT * FROM `admin_log_mod` WHERE `name` = '".my_esc($mod)."' LIMIT 1");
    
    if (mysql_num_rows($q)==0)
    {
        mysql_query("INSERT INTO `admin_log_mod` (`name`) VALUES ('".my_esc($mod)."')");
        $id_mod = mysql_insert_id();
    }
    else $id_mod = mysql_result($q, 0);

    $q2 = mysql_query("SELECT * FROM `admin_log_act` WHERE `name` = '".my_esc($act)."' AND `id_mod` = '$id_mod' LIMIT 1");
    if (mysql_num_rows($q2) == 0)
    {
        mysql_query("INSERT INTO `admin_log_act` (`name`, `id_mod`) VALUES ('".my_esc($act)."', '$id_mod')");
        $id_act = mysql_insert_id();
    }
    else $id_act = mysql_result($q2, 0);
    
    mysql_query("INSERT INTO `admin_log` (`time`, `id_user`, `mod`, `act`, `opis`) 
                  VALUES ('".time()."','$user[id]', '$id_mod', '$id_act', '".my_esc($opis)."')");
}

// Загрузка остальных функций из папки "sys/fnc"
$opdirbase = opendir(H.'sys/fnc');

while ($filebase = readdir($opdirbase))
{
  	if (preg_match('#\.php$#i', $filebase)) {
  		  include_once(H.'sys/fnc/'.$filebase);
  	}
}

// запись о посещении
mysql_query("INSERT INTO `visit_today` (`ip` , `ua`, `time`) VALUES ('$iplong', '".@my_esc($_SERVER['HTTP_USER_AGENT'])."', '$time')");