Просмотр файла includes/control.php

<?php

if(isset($_SESSION['login']) and isset($_SESSION['pass']))
{
$res = mysql_query("SELECT * FROM `users` WHERE `login`='$_SESSION[login]' LIMIT 1");

if(mysql_num_rows($res)!=0)
{
$user = mysql_fetch_array($res);
if($_SESSION['login']==$user['login'] and md5($_SESSION['pass'])==$user['pass'])
{
$active_user = 1;
}
else
{
session_destroy();
unset($user);
}}
else
{
session_destroy();
}}

$ip_s = $_SERVER['REMOTE_ADDR'];
$ua_s = $_SERVER['HTTP_USER_AGENT'];

mysql_query("DELETE FROM online WHERE `time`+300 < ".time()." OR `ip` = '$ip_s'") ;

mysql_query("INSERT INTO online SET `ua`='$ua_s',`ip` = '$ip_s',`time`=".time().",`id_user`='$user[id]'") or mysql_error();

mysql_query("DELETE FROM `ban` WHERE `date`<".time()."");

if($active_user==1)
{
if(mysql_num_rows(mysql_query('SELECT who FROM `ban` WHERE `who`='.$user['id'].' '))!=0)
{
$res = mysql_fetch_array(mysql_query('SELECT * FROM `ban` WHERE `who`='.$user['id'].' LIMIT 1'));
include "header.php";
echo "<div class='contur'><div class='header'>Bнимaниe! Baш aккayнт зaбaнeн!<br/>Пpичинa бaнa: ".$res['reason']."<br/>Koнeц бaнa: ".date('G:i:s d.m.Y',$res['date'])."</div></div>";
include "footer.php";
exit;
}}

?>