Просмотр файла katrinka.ru/msgsend.php

Конкурс дизайнеров на 15000 рублей
Милый пушистый сайт !!!!
Размер файла: 10.62Kb 
  1. <?php
  2.   include 'config.php';
  3.   include 'guestbook/mylib.php';
  4.   $msglimit=20;
  5.   $postlimit=100;
  6.   if (!checkagent($_SERVER['HTTP_USER_AGENT'])) { noemul(); exit; }
  7.   list ($opname, $chatok) = check_op($_SERVER['REMOTE_ADDR']);
  8.   if (!$chatok) { unk_op(); exit; }
  9.   session_start();
  10.   $message=$_POST['message'];
  11.   $agent=$_SERVER['HTTP_USER_AGENT'];
  12.   $addr=$_SERVER['REMOTE_ADDR'];
  13. #  $r=htmlspecialchars(trim($_POST['r']),ENT_QUOTES);
  14.   $to=htmlspecialchars(trim($_POST['to_id']),ENT_QUOTES);
  15.   $tr=htmlspecialchars(trim($_POST['tr']),ENT_QUOTES);
  16.   $sie=0;
  17.   if ($tr) $message=tr_conv($message);
  18.   $message=htmlspecialchars(trim($message),ENT_QUOTES);
  19.   $tto=htmlspecialchars(trim($_POST['login']),ENT_QUOTES);
  20.   if (ereg("^SIE-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  21.   if (ereg("^Alcatel-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  22.   if (ereg("^MOT-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  23.   if (ereg("^SEC-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  24.   if (ereg("^Panasonic-.*",$_SERVER['HTTP_USER_AGENT'])) $sie=1;
  25.  
  26.   $uid=0;
  27.   $access=0;
  28.   $lang=$_POST['lang'];
  29.   if ((trim($_COOKIE['Login'])!='')&&(trim($_COOKIE['Password'])!='')) {
  30. 	$login=htmlspecialchars(trim($_COOKIE['Login']),ENT_QUOTES);
  31. 	$pass=htmlspecialchars(trim($_COOKIE['Password']),ENT_QUOTES);
  32.   } else {
  33. 	$login=htmlspecialchars(trim($_POST['login']),ENT_QUOTES);
  34. 	$pass=htmlspecialchars(trim($_POST['pass']),ENT_QUOTES);
  35. #	$sie=1;
  36.   }
  37.     if (!($conn=pg_connect("host=$dbhost port=$dbport dbname=$dbname user=$dbuser password=$dbpass"))) exit;
  38. 	if (isset($_SESSION['id'])) {
  39. 		$uid=$_SESSION['id'];
  40. 		$res=pg_query($conn,"select moder,access,lastagent,temp_ban,posts from users where id='$uid';");
  41. 		if (pg_result($res,0,0)) $uid=0;
  42. 		$access=pg_result($res,0,1);
  43. 		$lastagent=pg_result($res,0,2);
  44. 		$temp_ban=pg_result($res,0,3);
  45. 		$posts=pg_result($res,0,4);
  46. 		$_SESSION['access']=$access;
  47. 	} else {
  48. 	$res=pg_query($conn,"select id,access,lastagent,temp_ban from users where login='$login' and passwd='$pass' and moder=0;");
  49. 	if (pg_numrows($res)==1) {
  50. 		$uid=pg_result($res,0,0);
  51. 		$access=pg_result($res,0,1);
  52. 		$lastagent=pg_result($res,0,2);
  53. 		$temp_ban=pg_result($res,0,3);
  54. 		$_SESSION['id']=$uid;
  55. 		$_SESSION['access']=$access;
  56. 	}
  57. 	}
  58. #	if ($uid) {
  59. #		setcookie("Login", $login, time()+864000, "/");
  60. #		setcookie("Password", $pass, time()+864000, "/"); 
  61. #	}
  62.  
  63.   if ($agent!=$lastagent) {
  64. 	session_unset();
  65. 	setcookie("Login", "", time()-3600, "/");
  66. 	setcookie("Password", "", time()-3600, "/");
  67. 	pg_close($conn);
  68. 	if ($_GET['lang']=='eng') header("Location: index.php?lang=eng"); 
  69. 	else header("Location: index.php");
  70. 	exit;
  71.   }
  72.  
  73.   if (($tto!='')&&(!$to)) {
  74. 	$res=pg_query($conn,"select id from users where login='$tto';");
  75. 	if (pg_numrows($res)==1) $to=pg_result($res,0,0);
  76.   }
  77.  
  78.   if ($to) {
  79. 	$res=pg_query($conn,"select moder,posts,access from users where id='$to';");
  80. 	$rows=pg_numrows($res);
  81. 	if ($rows==1) { 
  82. 		$to_mod=pg_result($res,0,0);
  83. 		$to_p=pg_result($res,0,1);
  84. 		$to_acc=pg_result($res,0,2);
  85. 	}
  86. 	else $to=0;
  87.   }
  88.  
  89.   if ((!$to)||($to_mod))
  90.   {
  91. 	  header("Content-type: text/vnd.wap.wml");
  92. ?>
  93. <?xml version="1.0" encoding="utf-8"?>
  94. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  95. <wml>
  96. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  97. <p align="center">
  98. Recipient is unknown.<br/>
  99. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  100. </p>
  101. </card>
  102. </wml>
  103. <?php
  104. 	pg_close($conn);
  105. 	exit;
  106.     }
  107.  
  108.   $res=pg_query($conn,"select count(*) from messages where to_u='$to';");
  109.   $tomsg=pg_result($res,0,0);
  110.   $res=pg_query($conn,"select count(*) from messages where to_u='$uid';");
  111.   $mymsg=pg_result($res,0,0);
  112.   
  113.   if (($tomsg > $msglimit)&&($to_acc!=4))
  114.   {
  115. 	  header("Content-type: text/vnd.wap.wml");
  116. ?>
  117. <?xml version="1.0" encoding="utf-8"?>
  118. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  119. <wml>
  120. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  121. <p align="center">
  122. Recipient's mailbox is full...<br/>
  123. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  124. </p>
  125. </card>
  126. </wml>
  127. <?php
  128. 	pg_close($conn);
  129. 	exit;
  130.     }
  131.  
  132.   if (($mymsg > $msglimit)&&($access!=4))
  133.   {
  134. 	  header("Content-type: text/vnd.wap.wml");
  135. ?>
  136. <?xml version="1.0" encoding="utf-8"?>
  137. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  138. <wml>
  139. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  140. <p align="center">
  141. Your mailbox is full... Please, delete some messages.<br/>
  142. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  143. </p>
  144. </card>
  145. </wml>
  146. <?php
  147. 	pg_close($conn);
  148. 	exit;
  149.     }
  150.  
  151.   if ($posts < $postlimit)
  152.   {
  153. 	  header("Content-type: text/vnd.wap.wml");
  154. ?>
  155. <?xml version="1.0" encoding="utf-8"?>
  156. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  157. <wml>
  158. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  159. <p align="center">
  160. You need at least 100 posts to send private messages...<br/>
  161. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  162. </p>
  163. </card>
  164. </wml>
  165. <?php
  166. 	pg_close($conn);
  167. 	exit;
  168.     }
  169.  
  170.   if ($to_p < $postlimit)
  171.   {
  172. 	  header("Content-type: text/vnd.wap.wml");
  173. ?>
  174. <?xml version="1.0" encoding="utf-8"?>
  175. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  176. <wml>
  177. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  178. <p align="center">
  179. Recipient needs at least 100 posts to recieve private messages...<br/>
  180. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  181. </p>
  182. </card>
  183. </wml>
  184. <?php
  185. 	pg_close($conn);
  186. 	exit;
  187.     }
  188.  
  189.   if ($message=="")
  190.   {
  191. 	  header("Content-type: text/vnd.wap.wml");
  192. ?>
  193. <?xml version="1.0" encoding="utf-8"?>
  194. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  195. <wml>
  196. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  197. <p align="center">
  198. &#x041D;&#x0435; &#x0432;&#x0441;&#x0435; &#x043F;&#x043E;&#x043B;&#x044F; &#x0437;&#x0430;&#x043F;&#x043E;&#x043B;&#x043D;&#x0435;&#x043D;&#x044B;<br/>
  199. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  200. </p>
  201. </card>
  202. </wml>
  203. <?php
  204. 	pg_close($conn);
  205. 	exit;
  206.     }
  207.   
  208.   if (($message==".")||($message=="..")||($message=="...")||($message=="....")||($message==",")||($message==",,")||($message==",,,")||($message==":")||($message==";"))
  209.   {
  210. 	  header("Content-type: text/vnd.wap.wml");
  211. ?>
  212. <?xml version="1.0" encoding="utf-8"?>
  213. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  214. <wml>
  215. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  216. <p align="center">
  217. &#x041D;&#x0435; &#x0432;&#x0441;&#x0435; &#x043F;&#x043E;&#x043B;&#x044F; &#x0437;&#x0430;&#x043F;&#x043E;&#x043B;&#x043D;&#x0435;&#x043D;&#x044B;<br/>
  218. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  219. </p>
  220. </card>
  221. </wml>
  222. <?php
  223. 	pg_close($conn);
  224. 	exit;
  225.     }
  226.   
  227.   if (!$uid)
  228.   {
  229. 	  header("Content-type: text/vnd.wap.wml");
  230. ?>
  231. <?xml version="1.0" encoding="utf-8"?>
  232. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  233. <wml>
  234. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  235. <p align="center">
  236. Bad login or password.
  237. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  238. </p>
  239. </card>
  240. </wml>
  241. <?php
  242. 	pg_close($conn);
  243. 	exit;
  244.     }
  245. 	
  246. 	if ($temp_ban > time())
  247. 	{
  248. 	  header("Content-type: text/vnd.wap.wml");
  249. ?>
  250. <?xml version="1.0" encoding="utf-8"?>
  251. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  252. <wml>
  253. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  254. <p align="center">
  255. <?php print "Banned till ".strftime("%d %b %G %T", $temp_ban)."<br/>\n"; ?>
  256. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  257. </p>
  258. </card>
  259. </wml>
  260. <?php
  261. 	pg_close($conn);
  262. 	exit;
  263. 	}
  264.  
  265.   if ($uid==$to)
  266.   {
  267. 	  header("Content-type: text/vnd.wap.wml");
  268. ?>
  269. <?xml version="1.0" encoding="utf-8"?>
  270. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  271. <wml>
  272. <card id="SignErr" title="&#x041E;&#x0448;&#x0438;&#x0431;&#x043A;&#x0430;">
  273. <p align="center">
  274. Access DENIED.<br/>
  275. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  276. </p>
  277. </card>
  278. </wml>
  279. <?php
  280. 	pg_close($conn);
  281. 	exit;
  282.     }
  283.  
  284. 	$message=substr($message, 0, 1600);
  285.  
  286.   
  287. 	$dtime=time()-300;
  288. 	$res=pg_query($conn,"select message from messages where fr_u='$uid' and time > '$dtime' order by id desc limit 1;");
  289.  
  290. 	if (pg_numrows($res)) {
  291. 		if ($message==pg_result($res,0,0)) {
  292. 	  header("Content-type: text/vnd.wap.wml");
  293. ?>
  294. <?xml version="1.0" encoding="utf-8"?>
  295. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  296. <wml>
  297. <?php
  298. 		print "<card id=\"SignDup\" title=\"Wait\" ontimer=\"http://wap.katrinka.ru/messages.php?lang=".$lang."&amp;".SID."\">\n";
  299. ?>
  300. <timer value="20"/>
  301. <p align="center">
  302. Please wait... We are taking you back to the messages...<br/>
  303. <a href="/">&#x041D;&#x0430; &#x0433;&#x043B;&#x0430;&#x0432;&#x043D;&#x0443;&#x044E;</a>
  304. </p>
  305. </card>
  306. </wml>
  307. <?php
  308. 		pg_close($conn);
  309. 		exit;
  310. 		}
  311. 	}
  312. 	
  313. 	$mtime=time();
  314. 	$res=pg_query($conn,"select id from users_ignore where who='$uid' and uid='$to';");
  315. 	if (pg_numrows($res)==0) {
  316. 		pg_query($conn,"begin;");
  317.    		$res=pg_query($conn,"insert into messages (fr_u,to_u,message,time,host,agent) values ('$uid','$to','$message','$mtime','$addr','$agent');");
  318. 		pg_query($conn,"end;");
  319. 	}
  320. 	if (!$res) { pg_close($conn); exit; }
  321.     pg_close($conn);
  322. 	$link=sprintf("Location: messages.php?lang=%s&PHPSESSID=%s", $lang, session_id());
  323. 	if (!$sie) {
  324. 		header($link);
  325. 	} else {
  326. 		setcookie("Login", $login, time()+864000, "/");
  327. 		setcookie("Password", $pass, time()+864000, "/");
  328. 	  header("Content-type: text/vnd.wap.wml");
  329. ?>
  330. <?xml version="1.0" encoding="utf-8"?>
  331. <!DOCTYPE wml PUBLIC "-//WAPFORUM//DTD WML 1.2//EN" "http://www.wapforum.org/DTD/wml_1.2.dtd">
  332. <wml>
  333. <?php
  334. print "<card id=\"SignOk\" title=\"&#x0421;&#x043F;&#x0430;&#x0441;&#x0438;&#x0431;&#x043E;!\" ontimer=\"http://wap.katrinka.ru/messages.php?lang=".$lang."&amp;".SID."\" onenterbackward=\"http://wap.katrinka.ru/\">\n";
  335. ?>
  336. <timer value="10"/>
  337. <p align="center">
  338. &#x0412;&#x0430;&#x0448;&#x0430; &#x0437;&#x0430;&#x043F;&#x0438;&#x0441;&#x044C; &#x0434;&#x043E;&#x0431;&#x0430;&#x0432;&#x043B;&#x0435;&#x043D;&#x0430;<br/>
  339. <?php
  340. print "<a href=\"messages.php?lang=".$lang."\">&#x041F;&#x0440;&#x043E;&#x0441;&#x043C;&#x043E;&#x0442;&#x0440;</a>\n";
  341. ?>
  342. </p>
  343. </card>
  344. </wml>
  345. <?php
  346. 	}
  347. ?>