Просмотр файла adm/addopis.php

<?php
include_once "../config.php";
include_once "../inc/inc.php";
include_once "../inc/func.php";
include_once "../inc/user.php";
include_once "../inc/gzip.php";
include_once "../inc/online.php";
include_once"../inc/pclzip.php";

if ($dostup != '1') {
    echo "ПАШШШШШШШОЛНАХУЙ";
    include_once "../themes/$theme/foot.php";
    exit;
} else {
    $d = str_replace('/', '|', $d);
    $d = str_replace("../", "", $d);
    $d = str_replace(" ", "", $d);
    $d = str_replace("'", "", $d);
    $d = str_replace("\"", "", $d);
    $d = str_replace("%00", "", $d);
    $d = htmlspecialchars(stripslashes($d));
    $opis = htmlspecialchars(stripslashes($opis));

    $zapros2 = 'INSERT INTO ' . $pref . 'down_files (name, opis) VALUES ("' . $d . '", "' . $opis . '");';
    mysql_query($zapros2);

    $b = $d;
    $b = explode('|', $b);
    $a = $b[0];
    for($i = 1; $i < (count($b)-1); $i++) {
        $a = $a . '|' . $b[$i];
    } 
    if ($d != '') {
        if ($a === $d) {
            header("Location: down.php?d=");
        } else {
            header("Location: down.php?d=" . $a);
        } 
    } 
} 

?>