Просмотр файла wap_counter_strike_online_game/WCS/pic.php

<?
include 'config.php';
head();

$xc = mysql_fetch_array(mysql_query("SELECT * FROM `users` WHERE `name` = '$_SESSION[name]'"));
///
online($_SESSION['name']);

$s=$_GET['s'];
$what=htmlspecialchars($GET['what']);

$pic = htmlspecialchars(glob("pic/*.jpg"));
if(isset($s) AND in_array($what, $pic)) {
	mysql_query("UPDATE users SET pic='$what' WHERE name='$name'");
echo "<div><b style=\"color: $config_shoot_color;\">Выбрано</b></div><br>";
} else {
echo '<div>';
foreach ($pic as $v=>$k) {
echo '<a href="'.$k.'">'.$v.'</a> > <a href="pic.php?'.$cs.'s&what='.$k.'">Взять</a><br> ';
}
echo '</div>';
}
echo '<div>';
echo '<a href="main.php?'.$cs.'">Назад</a><br>';
echo '</div>';

foot();
?>