Просмотр файла user/private/dialog.php

<?php

/*********************************************************************/
#---------------------------KokirCMS Соц сети-------------------------#
#---------------------Kiriyan и kokir Сайт kiriyan.org----------------#
#-------------------------------2012 г.-------------------------------#
#------------------Связь ICQ 455002004. [email protected]#
#----------------------------Пример ewwap.ru--------------------------#
/*********************************************************************/

$title = 'Диалог';
require('../../inc/head.php');

if(empty($_GET['u']) || !ctype_digit($_GET['u']))
  header("Location: index.php");

$uid = $_GET['u'];

if($uid == $user['id'])
  header("Location: index.php");

$u = mysql_fetch_array(mysql_query("SELECT `id`, `login` FROM `users` WHERE `id` = $uid;"));
if(!$u)
  header("Location: index.php");

mysql_query("UPDATE `mail` SET `readed` = '1' WHERE `from` = $uid AND `to` = " . $user['id'] . ";");

$isIgnor = mysql_num_rows(mysql_query("SELECT * FROM `lists` WHERE `user` = " . $uid . " AND `ref` = " . $user['id'] . " AND `list` = 'ignor';"));

if(isset($_POST['submit']) && !$isIgnor)
{
  $text = escstr($_POST['text']);
  if($text)
  {
    $fName = '';
    if($_FILES['file']['size'])
    {
        $format = fileFormat($_FILES['file']['name'], TRUE, $possibleFileFormats);

        if($format)
        {
            $dir = $documentRoot . '/files/mail';
            if(move_uploaded_file($_FILES['file']['tmp_name'], $dir . '/' . $time . '.' . $format) == TRUE)
            {
                @chmod($dir . '/' . $time . '.' . $format, 0777);
                $fName = $time . '.' . $format;
            }
        }
    }

    mysql_query("INSERT INTO `mail` VALUES(0, '" . $user['id'] . "', '" . $uid . "', '" . $text . "', '" . $time . "', '0', '" . $fName . "');");
  }
}

echo '<div class="caption"><a href="index.php">Диалоги</a> &raquo; ' . $u['login'] . '</div>';

if(!$isIgnor)
{
  echo '<div class="menu">';
  echo '<form action="" method="post" enctype="multipart/form-data">';
  echo '<label>Текст:<br/><textarea name="text"></textarea></label><br/>';
  echo '<label><img src="' . $home . '/images/upload.png" alt="*"/>Прикрепить файл: <input type="file" name="file"/></label><br/>';
  echo '<input type="submit" name="submit" value="Написать"/>';
  echo '</form>';
  echo '</div>';
}
else
  echo '<div class="menu adm">Пользователь игнорирует вас</div>';

$total = mysql_num_rows(mysql_query("SELECT * FROM `mail` WHERE `from` IN(" . $user['id'] . ", " . $uid . ") AND `to` IN(" . $user['id'] . ", " . $uid . ");"));
if($total)
{
  $query = mysql_query("SELECT * FROM `mail` WHERE `from` IN(" . $user['id'] . ", " . $uid . ") AND `to` IN(" . $user['id'] . ", " . $uid . ") ORDER BY `date` DESC LIMIT $page, $chms;");

  if($total > $chms)
    echo '<div class="nav">' . pagination('?u=' . $uid . '&amp;', $total) . '</div>';

  while($post = mysql_fetch_array($query))
  {
    echo '<div class="' . (!$post['readed'] ? 'post-n' : 'post') . '">';
    echo userInfo($post['from'], TRUE, '<small>' . fTime($post['date']) . '</small>');
    echo tags($post['text']);
    if($post['file'])
        echo '<div class="sub">Прикреплённый файл: <a href="' . $home . '/files/mail/' . $post['file'] . '">' . $post['file'] . '</a></div>';
    echo '<div class="sub"><a href="manage.php?mode=delete&amp;id=' . $post['id'] . '">Удалить</a></div>';
    echo '</div>';
  }

  if($total > $chms)
    echo '<div class="nav">' . pagination('?u=' . $uid . '&amp;', $total) . '</div>';

  echo '<div class="caption">Всего: ' . $total . '</div>';

  if($total > 1)
    echo '<div class="menu adm"><a href="manage.php?id=' . $uid . '">Очистить</a></div>';
}
else
  echo '<div class="menu big-block">Сообщений нету</div>';

require('../../inc/end.php');

?>