Просмотр файла adm/editopis.php

<?php
include_once "../config.php";
include_once "../inc/inc.php";
include_once "../inc/func.php";
include_once "../inc/user.php";
include_once "../inc/gzip.php";
include_once "../inc/online.php";
include_once"../inc/pclzip.php";

if ($dostup != '1') {
    echo "ПАШШШШШШШОЛНАХУЙ";
    include_once "../themes/$theme/foot.php";
    exit;
} else {
    $d = str_replace('/', '|', $d);
    $d = str_replace("../", "", $d);
    $d = str_replace(" ", "", $d);
    $d = str_replace("'", "", $d);
    $d = str_replace("\"", "", $d);
    $d = str_replace("%00", "", $d);
    $d = htmlspecialchars(stripslashes($d));
    $opis = htmlspecialchars(stripslashes($opis));

    $query = 'UPDATE ' . $pref . 'down_files SET opis = "' . $opis . '" WHERE name="' . $d . '"';
    mysql_query($query) or die('sdfsadfsadf');

    $b = $d;
    $b = explode('|', $b);
    $a = $b[0];
    for($i = 1; $i < (count($b)-1); $i++) {
        $a = $a . '|' . $b[$i];
    } 
    if ($d != '') {
        if ($a === $d) {
            header("Location: down.php?d=");
        } else {
            header("Location: down.php?d=" . $a);
        } 
    } 
    // header("Location: down.php?d=".$a);
} 

?>