Просмотр файла katrinka.ru/forum_sign.php

Конкурс дизайнеров на 15000 рублей
Свежие Креативы и море позитива !!!
Размер файла: 9Kb 
  1. <?php
  2.   include 'config.php';
  3.   include 'guestbook/mylib.php';
  4.   $pflag=0;
  5.   if (!checkagent($_SERVER['HTTP_USER_AGENT'])) { noemul(); exit; }
  6.   list ($opname, $chatok) = check_op($_SERVER['REMOTE_ADDR']);
  7.   if (!$chatok) { unk_op(); exit; }
  8.   session_start();
  9.   $message=rmvbadch($_POST['message']);
  10.   $agent=$_SERVER['HTTP_USER_AGENT'];
  11.   $addr=$_SERVER['REMOTE_ADDR'];
  12.   $f=htmlspecialchars(trim($_POST['f']),ENT_QUOTES);
  13.   $t=htmlspecialchars(trim($_POST['t']),ENT_QUOTES);
  14.   if ((!$f)&&(!$t)) exit;
  15.   $tr=htmlspecialchars(trim($_POST['tr']),ENT_QUOTES);
  16.   if (!$t) $theme=rmvbadch($_POST['theme']);
  17.   $sie=0;
  18.   if ($tr) {
  19. 	$message=tr_conv($message);
  20. 	if ($f) $theme=tr_conv($theme);
  21.   }
  22.   $message=htmlspecialchars(trim($message),ENT_QUOTES);
  23.   if (!$t) $theme=htmlspecialchars(trim($theme),ENT_QUOTES);
  24.   if (ereg("^SIE-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  25.   if (ereg("^Alcatel-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  26.   if (ereg("^MOT-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  27.   if (ereg("^SEC-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  28.   if (ereg("^Panasonic-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  29.  
  30.   $uid=0;
  31.   $access=0;
  32.   $flag=0;
  33.   $lang=$_POST['lang'];
  34.   if ((trim($_COOKIE['Login'])!='')&&(trim($_COOKIE['Password'])!='')) {
  35. 	$login=htmlspecialchars(trim($_COOKIE['Login']),ENT_QUOTES);
  36. 	$pass=htmlspecialchars(trim($_COOKIE['Password']),ENT_QUOTES);
  37.   } else {
  38. 	$login=htmlspecialchars(trim($_POST['login']),ENT_QUOTES);
  39. 	$pass=htmlspecialchars(trim($_POST['pass']),ENT_QUOTES);
  40. #	$sie=1;
  41.   }
  42.     if (!($conn=pg_connect("host=$dbhost port=$dbport dbname=$dbname user=$dbuser password=$dbpass"))) exit;
  43. 	if (!$t) {
  44. 		$res=pg_query($conn,"select flag from forums where id='$f';");
  45. 		if (!pg_numrows($res)) { pg_close($conn); exit; }
  46. 		$flag=pg_result($res,0,0);
  47. 	} else {
  48. 		$res=pg_query($conn,"select forums.id,forums.flag,themes.closed from forums,themes where forums.id=themes.forum and themes.id='$t';");
  49. 		if (!pg_numrows($res)) { pg_close($conn); exit; }
  50. 		$f=pg_result($res,0,0);
  51. 		$flag=pg_result($res,0,1);
  52. 		$closed=pg_result($res,0,2);
  53. 		if ($closed) { pg_close($conn); exit; }
  54. 	}
  55. 	if (isset($_SESSION['id'])) {
  56. 		$uid=$_SESSION['id'];
  57. 		$res=pg_query($conn,"select moder,access,lastagent,temp_ban,lastforum from users where id='$uid';");
  58. 		if (pg_result($res,0,0)) $uid=0;
  59. 		$access=pg_result($res,0,1);
  60. 		$lastagent=pg_result($res,0,2);
  61. 		$temp_ban=pg_result($res,0,3);
  62. 		$lastforum=pg_result($res,0,4);
  63. 		$_SESSION['access']=$access;
  64. 	} else {
  65. 	$res=pg_query($conn,"select id,access,lastagent,temp_ban,lastforum from users where login='$login' and passwd='$pass' and moder=0;");
  66. 	if (pg_numrows($res)==1) {
  67. 		$uid=pg_result($res,0,0);
  68. 		$access=pg_result($res,0,1);
  69. 		$lastagent=pg_result($res,0,2);
  70. 		$temp_ban=pg_result($res,0,3);
  71. 		$lastforum=pg_result($res,0,4);
  72. 		$_SESSION['id']=$uid;
  73. 		$_SESSION['access']=$access;
  74. 	}
  75. 	}
  76. #	if ($uid) {
  77. #		setcookie("Login", $login, time()+864000, "/");
  78. #		setcookie("Password", $pass, time()+864000, "/"); 
  79. #	}
  80.  
  81.   if ($agent!=$lastagent) {
  82. 	session_unset();
  83. 	setcookie("Login", "", time()-3600, "/");
  84. 	setcookie("Password", "", time()-3600, "/");
  85. 	pg_close($conn);
  86. 	if ($_GET['lang']=='eng') header("Location: index.php?lang=eng"); 
  87. 	else header("Location: index.php");
  88. 	exit;
  89.   }
  90.  
  91.   if (($message=="")||((!$t)&&($theme=="")))
  92.   {
  93. 	  header("Content-type: text/vnd.wap.wml");
  94. ?>
  95. <?xml version="1.0" encoding="utf-8"?>
  96. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  97. <wml>
  98. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  99. <p align="center">
  100. &#x041D;&#x0435; &#x0432;&#x0441;&#x0435; &#x043F;&#x043E;&#x043B;&#x044F; &#x0437;&#x0430;&#x043F;&#x043E;&#x043B;&#x043D;&#x0435;&#x043D;&#x044B;<br/>
  101. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  102. </p>
  103. </card>
  104. </wml>
  105. <?php
  106. 	pg_close($conn);
  107. 	exit;
  108.     }
  109.   
  110.   if (($message==".")||($message=="..")||($message=="...")||($message=="....")||($message==",")||($message==",,")||($message==",,,")||($message==":")||($message==";"))
  111.   {
  112. 	  header("Content-type: text/vnd.wap.wml");
  113. ?>
  114. <?xml version="1.0" encoding="utf-8"?>
  115. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  116. <wml>
  117. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  118. <p align="center">
  119. &#x041D;&#x0435; &#x0432;&#x0441;&#x0435; &#x043F;&#x043E;&#x043B;&#x044F; &#x0437;&#x0430;&#x043F;&#x043E;&#x043B;&#x043D;&#x0435;&#x043D;&#x044B;<br/>
  120. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  121. </p>
  122. </card>
  123. </wml>
  124. <?php
  125. 	pg_close($conn);
  126. 	exit;
  127.     }
  128.   
  129.   if (!$uid)
  130.   {
  131. 	  header("Content-type: text/vnd.wap.wml");
  132. ?>
  133. <?xml version="1.0" encoding="utf-8"?>
  134. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  135. <wml>
  136. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  137. <p align="center">
  138. Bad login or password.
  139. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  140. </p>
  141. </card>
  142. </wml>
  143. <?php
  144. 	pg_close($conn);
  145. 	exit;
  146.     }
  147. 	
  148. 	if ($temp_ban > time())
  149. 	{
  150. 	  header("Content-type: text/vnd.wap.wml");
  151. ?>
  152. <?xml version="1.0" encoding="utf-8"?>
  153. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  154. <wml>
  155. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  156. <p align="center">
  157. <?php print "Banned till ".strftime("%d %b %G %T", $temp_ban)."<br/>\n"; ?>
  158. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  159. </p>
  160. </card>
  161. </wml>
  162. <?php
  163. 	pg_close($conn);
  164. 	exit;
  165. 	}
  166.   
  167.   if ((!$access)&&($flag==1))
  168.   {
  169. 	  header("Content-type: text/vnd.wap.wml");
  170. ?>
  171. <?xml version="1.0" encoding="utf-8"?>
  172. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  173. <wml>
  174. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  175. <p align="center">
  176. Access DENIED.<br/>
  177. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  178. </p>
  179. </card>
  180. </wml>
  181. <?php
  182. 	pg_close($conn);
  183. 	exit;
  184.     }
  185.  
  186. 	if ($access<4) {
  187. 		$message=substr($message, 0, 600);
  188. 		$theme=substr($theme, 0, 140);
  189. 	}
  190.   
  191. 	$dtime=time()-300;
  192.  
  193. 	$res=pg_query($conn,"select message from threads where uid='$uid' and time > '$dtime' order by id desc limit 1;");
  194.  
  195. 	if (pg_numrows($res)) {
  196. 		if ($message==pg_result($res,0,0)) {
  197. 	  header("Content-type: text/vnd.wap.wml");
  198. ?>
  199. <?xml version="1.0" encoding="utf-8"?>
  200. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  201. <wml>
  202. <?php
  203. 		print "<card id=\"SignDup\" title=\"Wait\" ontimer=\"http://wap.katrinka.ru/forum.php?lang=".$lang."&amp;t=".$t."&amp;f=".$f."&amp;".SID."\">\n";
  204. ?>
  205. <timer value="20"/>
  206. <p align="center">
  207. Please wait... We are taking you back to the forum...<br/>
  208. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  209. </p>
  210. </card>
  211. </wml>
  212. <?php
  213. 		pg_close($conn);
  214. 		exit;
  215. 		}
  216. 	}
  217. 	
  218. 	$mtime=time();
  219. 	pg_query($conn,"begin;");
  220. 	if (!$t) {
  221. 		pg_query($conn,"insert into themes (forum,uid,name,time,lastrepl) values ('$f','$uid','$theme','$mtime','$mtime');");
  222. 		$res=pg_query($conn,"select currval('public.themes_id_seq');");
  223. 		$t=pg_result($res,0,0);
  224. 		pg_query($conn,"update forums set nthemes=nthemes+1 where id='$f';");
  225. 		pg_query($conn,"insert into threads (theme,message,uid,agent,host,time) values ('$t','$message','$uid','$agent','$addr','$mtime');");
  226. 	} else {
  227. 		pg_query($conn,"insert into threads (theme,message,uid,agent,host,time) values ('$t','$message','$uid','$agent','$addr','$mtime');");
  228. 		pg_query($conn,"update forums set nrepl=nrepl+1 where id='$f';");
  229. 		pg_query($conn,"update themes set rplnum=rplnum+1,lastrepl='$mtime' where id='$t';");
  230. 		pg_query($conn,"delete from seen_by where theme='$t';");
  231. 	}
  232. 	pg_query($conn,"delete from fseen_by where forum='$f';");
  233. 	pg_query($conn,"update users set lastact='$mtime',fposts=fposts+1,lastagent='$agent',lastforum='$mtime' where id='$uid';");
  234. 	
  235. 	pg_query($conn,"end;");
  236. 	if (!$res) { pg_close($conn); exit; }
  237.     pg_close($conn);
  238. 	$link=sprintf("Location: forum.php?lang=%s&t=%s&f=%s&PHPSESSID=%s", $lang, $t, $f, session_id());
  239. 	if (!$sie) {
  240. 		header($link);
  241. 	} else {
  242. 		setcookie("Login", $login, time()+864000, "/");
  243. 		setcookie("Password", $pass, time()+864000, "/");
  244. 	  header("Content-type: text/vnd.wap.wml");
  245. ?>
  246. <?xml version="1.0" encoding="utf-8"?>
  247. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  248. <wml>
  249. <?php
  250. print "<card id=\"SignOk\" title=\"&#x0421;&#x043F;&#x0430;&#x0441;&#x0438;&#x0431;&#x043E;!\" ontimer=\"http://wap.katrinka.ru/forum.php?lang=".$lang."&amp;t=".$t."&amp;f=".$f."&amp;".SID."\" onenterbackward=\"http://wap.katrinka.ru/\">\n";
  251. ?>
  252. <timer value="10"/>
  253. <p align="center">
  254. &#x0412;&#x0430;&#x0448;&#x0430; &#x0437;&#x0430;&#x043F;&#x0438;&#x0441;&#x044C; &#x0434;&#x043E;&#x0431;&#x0430;&#x0432;&#x043B;&#x0435;&#x043D;&#x0430;<br/>
  255. <?php
  256. print "<a href=\"forum.php?lang=".$lang."&amp;t=".$t."&amp;f=".$f."\">&#x041F;&#x0440;&#x043E;&#x0441;&#x043C;&#x043E;&#x0442;&#x0440;</a>\n";
  257. ?>
  258. </p>
  259. </card>
  260. </wml>
  261. <?php
  262. 	}
  263. ?>