Просмотр файла include/newt.php

Конкурс дизайнеров на 15000 рублей
СЕРВИС ИНТЕРНЕТ РЕКЛАМЫ
Размер файла: 14.59Kb 
  1. <?
  2. $f = intval($_GET['f']);
  3. @$back = mysql_fetch_assoc(mysql_query("SELECT name, id FROM `forums` WHERE id=".$f));
  4. $ip = empty($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['REMOTE_ADDR'] : $_SERVER['HTTP_X_FORWARDED_FOR'] ;
  5. $ip = htmlspecialchars(addslashes($ip));
  6. if($status == "admin") $user = "Admin"; else $user = htmlspecialchars(sql($_SERVER['HTTP_USER_AGENT']));
  7. 	if(!mysql_result(mysql_query("SELECT COUNT(*) FROM forums WHERE id=".$f), 0))
  8. 	{
  9. 		if($version == "wml")
  10. 			{
  11. 				header('Content-type: text/vnd.wap.wml; charset=utf-8');
  12. 				header("Cache-Control: no-cache");
  13. 				echo(doctype("Ошибка").$tag.'
  14. Ошибка! Подфорума не существует! <br />
  15.  
  16. <a href="./?p=0&amp;v=wml&amp;sid='.$sid.'">Форумы</a>
  17. '.$tagC.'</p></card></wml>');
  18. 			} elseif($version == "xhtml")
  19. 				{
  20. 					header("Content-type: text/html; charset=utf-8");
  21. 					header("Last-Modified:".gmdate("D, d M Y H:i:s")." GMT");
  22.    header("Cache-Control: no-cache, must-relative");
  23. 					echo('<html>
  24. <head>
  25. <title>Ошибка</title>
  26. </head>
  27. <body bgcolor="'.$style['background'].'" link="'.$style['link'].'" vlink="'.$style['link'].'" text="#000000">
  28. <table align="center" border="0" cellspacing="1" cellpadding="5" width="350">
  29. <tr><td align="center" bgcolor="'.$style['title'].'">
  30. <font color="#FFFFFF"><b>Ошибка</b></font>
  31. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Ошибка! Подфорума не существует! '.$tagC.' </td></tr>
  32. <tr bgcolor="'.$style['bottom'].'"><td>'.$tag.'
  33. <a href="./?p=0&amp;v=xhtml&amp;sid='.$sid.'">Форумы</a>
  34. '.$tagC.'</td></tr></table>
  35. </body></html>');
  36. 				}
  37. 	} elseif(ban($username, $user, $ip))
  38. 	{
  39. 			if($version == "wml")
  40. 			{
  41. 				header('Content-type: text/vnd.wap.wml; charset=utf-8');
  42. 				header("Cache-Control: no-cache");
  43. 				echo(doctype("Ошибка").$tag.'
  44. Ошибка! Вы заблокированы модератором '.$modername.'. <br />
  45. Причина: '.$banmess.'! <br />
  46. -
  47. <a href="'.$_SERVER['HTTP_REFERER'].'">Назад</a><br />
  48. <a href="./?p=0&amp;v=wml&amp;sid='.$sid.'">Форумы</a>
  49. '.$tagC.'</p></card></wml>');
  50. 			} elseif($version == "xhtml")
  51. 				{
  52. 					header("Content-type: text/html; charset=utf-8");
  53. 					header("Last-Modified:".gmdate("D, d M Y H:i:s")." GMT");
  54.    header("Cache-Control: no-cache, must-relative");
  55. 					echo('<html>
  56. <head>
  57. <title>Ошибка</title>
  58. </head>
  59. <body bgcolor="'.$style['background'].'" link="'.$style['link'].'" vlink="'.$style['link'].'" text="#000000">
  60. <table align="center" border="0" cellspacing="1" cellpadding="5" width="350">
  61. <tr align="center" bgcolor="'.$style['title'].'"><td colspan="2">
  62. <font color="#FFFFFF"><b>Ошибка</b></font>
  63. <tr bgcolor="'.$style['text'].'"><td colspan="2">'.$tag.'Вы заблокированы модератором '.$modername.'</td></tr>
  64. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Причина:'.$tagC.'</td><td>'.$tag.$banmess.$tagC.'</td></tr>
  65. <tr bgcolor="'.$style['bottom'].'"><td colspan="2">'.$tag.'
  66. <a href="./?p=0&amp;v=xhtml&amp;sid='.$sid.'">Форумы</a>
  67. '.$tagC.'</td></tr></table>
  68. </body></html>');
  69. 				}
  70. 	} elseif(!$authorize)
  71. 	{    if($version == "wml")
  72. 			{
  73. 				header('Content-type: text/vnd.wap.wml; charset=utf-8');
  74. 				header("Cache-Control: no-cache");
  75. 				echo(doctype("Ошибка").$tag.'
  76. Вы не авторизованы! <br />
  77. -
  78. <a href="./?p=0&amp;v=wml&amp;sid='.$sid.'">Форумы</a>
  79. '.$tagC.'</p></card></wml>');
  80. 			} elseif($version == "xhtml")
  81. 				{
  82. 					header("Content-type: text/html; charset=utf-8");
  83. 					header("Last-Modified:".gmdate("D, d M Y H:i:s")." GMT");
  84.    header("Cache-Control: no-cache, must-relative");
  85. 					echo('<html>
  86. <head>
  87. <title>Ошибка</title>
  88. </head>
  89. <body bgcolor="'.$style['background'].'" link="'.$style['link'].'" vlink="'.$style['link'].'" text="#000000">
  90. <table align="center" border="0" cellspacing="1" cellpadding="5" width="350">
  91. <tr align="center" bgcolor="'.$style['title'].'"><td>
  92. <font color="#FFFFFF"><b>Ошибка</b></font>
  93. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Вы не авторизованы!'.$tagC.'</td></tr>
  94. <tr bgcolor="'.$style['bottom'].'"><td> '.$tag.'
  95. <a href="./?p=0&amp;v=xhtml&amp;sid='.$sid.'">Форумы</a>
  96. '.$tagC.'</td></tr></table>
  97. </body></html>');
  98. 				}
  99.  	}  else
  100. 	{
  101. 		if(empty($_POST['nt']))
  102. 		{
  103. 			$r = "";
  104. 				 for($i=0; $i<strlen($username); $i++)
  105. 				{
  106. 					$r .= "_";
  107. 				}
  108. 			if($version == "wml")
  109. 			{
  110. 				header("Content-type: text/vnd.wap.wml; charset=utf-8");
  111. 				header("Cache-Control: no-cache");
  112. 				echo(doctype("Новая тема").$tag.'
  113. <b>Добавить тему в "'.$back['name'].'"</b><br /> <br />
  114. Имя: ['.$username.']<br />
  115. Тема: '.$tagC.'<br />
  116. <input type="text" name="topic'.$ref.'" /><br />
  117. '.$tag.'Сообщение:'.$tagC.' <br />
  118. <input type="text" name="mess'.$ref.'" maxlength="600" /><br />');
  119. 		if($status == "moder" or $status == "admin")
  120. 		{
  121. 			echo($tag.'Закрепить тему: '.$tagC.'<br />
  122. <select name="b'.$ref.'">
  123. <option value="0">Нет</option>
  124. <option value="1">Да</option>
  125. </select><br />');
  126. 		}
  127. echo('<anchor>[Добавить]
  128. <go href="./?p=9&amp;v=wml&amp;sid='.$sid.'&amp;f='.$f.'" method="post">
  129. <postfield name="mess" value="$(mess'.$ref.')" />');
  130. 	if($status == "moderator" or $status == "admin")
  131. 	{
  132. 		echo('<postfield name="b" value="$(b'.$ref.')" />');
  133. 	}
  134. 	
  135. echo('
  136. <postfield name="topic" value="$(topic'.$ref.')" />
  137. <postfield name="nt" value="1" />
  138. </go></anchor><br />
  139. '.$tag.'-
  140. <a href="./?p=14&amp;v=wml&amp;sid='.$sid.'&amp;f=4">Смайлы</a><br />
  141. <a href="./?p=2&amp;v=wml&amp;sid='.$sid.'&amp;f='.$f.'">Назад в  «'.$back['name'].'»</a><br />
  142. '.$tagC.'</p></card></wml>');
  143. 			} elseif($version == "xhtml")
  144. 			{
  145. 				header("Content-type: text/html; charset=utf-8");
  146. 				header("Last-Modified:".gmdate("D, d M Y H:i:s")." GMT");
  147.    header("Cache-Control: no-cache, must-relative");
  148. 				echo('<html>
  149. <head>
  150. <title>Новая тема</title>
  151. </head>
  152. <body bgcolor="'.$style['background'].'" link="'.$style['link'].'" vlink="'.$style['link'].'" text="#000000">
  153. <form action="./?p=9&amp;v=xhtml&amp;sid='.$sid.'&amp;f='.$f.'" method="post">
  154. <table align="center" border="0" cellspacing="1" cellpadding="5" width="350">
  155. <tr><td align="center" bgcolor="'.$style['title'].'" colspan="2">
  156. <font color="#FFFFFF"><b>Новая тема</b></font>
  157. </td></tr>
  158. <tr bgcolor="'.$style['bottom'].'"><td colspan="2"><b>'.$tag.'Добавить тему в "'.$back['name'].'"'.$tagC.'</b></td></tr>
  159. <tr bgcolor="#deebf1"><td colspan="2"></td></tr>
  160. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Имя:'.$tagC.'</td><td>'.$tag.'['.$username.']'.$tagC.'</td></tr>
  161. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Тема:'.$tagC.'</td><td><input type="text" name="topic"></td></tr>
  162. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Сообщение:'.$tagC.'</td><td><textarea name="mess" cols="30" rows="5"></textarea></td></tr>');
  163. 	if($status == "moderator" or $status == "admin")
  164. 	{
  165. 		echo('<tr bgcolor="'.$style['text'].'"><td nowrap>'.$tag.'Закрепить тему:'.$tagC.'</td>
  166. <td><select name="b">
  167. <option value="0">Нет</option>
  168. <option value="1">Да</option>
  169. </select></td></tr>');
  170. 	}
  171. echo('
  172. <tr bgcolor="'.$style['text'].'"><td align="center" colspan="2">
  173. <input type="hidden" name="nt" value="1">
  174. <input type="submit" value="Ответить" /></td></tr>
  175. <tr bgcolor="'.$style['bottom'].'"><td colspan="2"> '.$tag.'
  176. <a href="./?p=14&amp;v=xhtml&amp;sid='.$sid.'&amp;f=4">Смайлы</a><br />
  177. <a href="./?p=2&amp;v=xhtml&amp;sid='.$sid.'&amp;f='.$back['id'].'">Назад в «'.$back['name'].'»</a><br />
  178. '.$tagC.'</td></tr></table>
  179. </form>
  180. </body></html>');
  181. 				}
  182.     	} else
  183.     	{
  184.     		$error = "";
  185.     		$topic = $_POST['topic'];
  186.     		if($transl == "on")
  187.   			{
  188.   				$topic = translate($topic);
  189.   			}
  190.   			$topic = cutString($topic, 256);
  191.     		$topic = sql(trim(htmlspecialchars(chop($topic))));
  192.     		$topic = preg_replace("|[\r\n]+|", "\r\n", $topic);
  193.  			$topic = preg_replace("|[\n]+|", "\n", $topic);
  194.   			$message = $_POST['mess'];
  195.   			if($transl == "on")
  196.   			{
  197.                 $message = translate($message);
  198.   			}
  199. 			$message = preg_replace("|[\r\n]+|", " \r\n", $message);
  200.  			$message = preg_replace("|[\n]+|", "\n", $message);
  201.     		$message = sql(htmlspecialchars(trim(chop(cutString($message, 1024)))));
  202.             $message = preg_replace_callback("|&lt;(\d{1,20})&gt;|", "smile", $message);
  203.   			if($status == "admin" or $starus == "moderator")
  204. 				{
  205. 					$message= preg_replace("|\[b\](.*)\[/b\]|i", "<b>\\1</b>", $message);
  206. 					$message = preg_replace("|\[i\](.*)\[/i\]|i", "<i>\\1</i>", $message);
  207. 				}
  208. 				$sesss = mysql_query("SELECT * FROM `users` WHERE `username`='".$username."'");
  209. 				$sesRR = mysql_fetch_array($sesss);
  210. 			    $upd = $sesRR['upd'];
  211. 				$rz = time() - $upd;
  212. 				if(strpos($message, "http://") !== false)
  213. 				{
  214. 					$message = preg_replace("|(http://[^\s]+)|i", "<a href=\"go/?\\1\">\\1</a>", $message);
  215. 				}
  216. 				else if(strpos($message, "HTTP://") !== false)
  217. 				{
  218. 					$message = preg_replace("|(HTTP://[^\s]+)|i", "<a href=\"go/?\\1\">\\1</a>", $message);
  219. 				} 
  220. 				else
  221. 				{
  222. 					$message = preg_replace("|\[urltag=(.*)\](.*)\[/url\]|is", "<a href=\"go/?http://\\1\">\\2</a>", $message);
  223. 				}
  224.     			if(empty($message))
  225.     			{
  226.     				$error .= "Поле \"Сообщение\" не заполнено! <br />";
  227.     			}
  228.     			if(empty($topic))
  229.     			{
  230.     				$error .= "Поле \"Тема\" не заполнено! <br />";
  231.     			}
  232.     			if(!preg_match("|^[-a-z0-9а-яё_!?№#;:%^&*()+=~\|\\\/ @.,\[\]\{\}\"'<>\s]*$|iu", $message))
  233.     			{
  234.     				$error .= "Сообщение содержит плохие символы!<br />";
  235.     			}
  236.  
  237.     			if(!preg_match("|^[-a-z0-9а-яё_!?№#;:%^&*()+=~\|\\\/ @.,\[\]\{\}\"'<>]*$|iu", $topic))
  238.     			{
  239.     				$error .= "Тема содержит плохие символы!<br />";
  240.     			}
  241.     			
  242. if ( $rz <= 3600 && ($status != "admin" OR $status != "moder") ) {
  243. 					$error .= "Не стоит создавать столько тем! <br />";
  244.     			}
  245.  
  246.     		if(!empty($error))
  247.     		{
  248.     		$r = "";
  249. 				 for($i=0; $i<strlen($username); $i++)
  250. 				{
  251. 					$r .= "_";
  252. 				}
  253.     			if($version == "wml")
  254. 				{
  255. 					header("Content-type: text/vnd.wap.wml; charset=utf-8");
  256. 					header("Cache-Control: no-cache");
  257. 					echo(doctype("Новая тема").$tag.$error.'
  258. <b>Добавить тему в "'.$back['name'].'"</b><br /> <br />
  259. Имя: ['.$username.']<br />
  260. Тема:'.$tagC.' <br />
  261. <input type="text" name="topic'.$ref.'" /><br />
  262. '.$tag.'Сообщение:'.$tagC.' <br />
  263. <input type="text" name="mess'.$ref.'" maxlength="600" /><br />');
  264. 		if($status == "moderator" or $status == "admin")
  265. 		{
  266. 			echo($tag.'Закрепить тему: '.$tagC.'<br />
  267. <select name="b'.$ref.'">
  268. <option value="0">Нет</option>
  269. <option value="1">Да</option>
  270. </select><br />');
  271. 		}
  272. echo('
  273. <anchor>[Ответить]
  274. <go href="./?p=9&amp;v=wml&amp;sid='.$sid.'&amp;f='.$f.'" method="post">
  275. <postfield name="mess" value="$(mess'.$ref.')" /> ');
  276. 	if($status == "moder" or $status == "admin")
  277. 	{
  278. 		echo('<postfield name="b" value="$(b'.$ref.')" />');
  279. 	}
  280. echo('
  281. <postfield name="topic" value="$(topic'.$ref.')" />
  282. <postfield name="nt" value="1" />
  283. </go></anchor><br />
  284. '.$tag.'-
  285. <a href="./?p=14&amp;v=wml&amp;sid='.$sid.'&amp;f=4">Смайлы</a><br />
  286. <a href="./?p=2&amp;v=wml&amp;sid='.$sid.'&amp;f='.$f.'">Назад в '.$back['name'].'</a><br />
  287. '.$tagC.'</p></card></wml>');
  288. 				} elseif($version == "xhtml")
  289. 				{
  290. 					header("Content-type: text/html; charset=utf-8");
  291. 					header("Last-Modified:".gmdate("D, d M Y H:i:s")." GMT");
  292.    header("Cache-Control: no-cache, must-relative");
  293. 					echo('<html>
  294. <head>
  295. <title>Новая тема</title>
  296. </head>
  297. <body bgcolor="'.$style['background'].'" link="'.$style['link'].'" vlink="'.$style['link'].'" text="#000000">
  298. <form action="./?p=9&amp;v=xhtml&amp;sid='.$sid.'&amp;f='.$f.'" method="post">
  299. <table align="center" border="0" cellspacing="1" cellpadding="5" width="350">
  300. <tr><td align="center" bgcolor="'.$style['title'].'" colspan="2">
  301. <font color="#FFFFFF"><b>Новая тема</b></font>
  302. </td></tr>
  303. <tr bgcolor="'.$style['bottom'].'"><td colspan="2"><b>'.$tag.'Добавить тему в "'.$back['name'].'"'.$tagC.'</b></td></tr>
  304. <tr bgcolor="#deebf1"><td colspan="2">'.$tag.'<b>'.$error.'</b>'.$tagC.'</td></tr>
  305. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Имя:'.$tagC.'</td><td>'.$tag.'['.$username.']'.$tagC.'</td></tr>
  306. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Тема:'.$tagC.'</td><td><input type="text" name="topic"></td></tr>
  307. <tr bgcolor="'.$style['text'].'"><td>'.$tag.'Сообщение:'.$tagC.'</td><td><textarea name="mess" cols="30" rows="5"></textarea></td></tr>');
  308. 	if($status == "moderator" or $status == "admin")
  309. 	{
  310. 		echo('<tr bgcolor="'.$style['text'].'"><td nowrap>'.$tag.'Закрепить тему:'.$tagC.'</td>
  311. <td><select name="b">
  312. <option value="0">Нет</option>
  313. <option value="1">Да</option>
  314. </select></td></tr>');
  315. 	}
  316. echo('
  317. <tr bgcolor="'.$style['text'].'"><td align="center" colspan="2">
  318. <input type="hidden" name="nt" value="1">
  319. <input type="submit" value="Ответить" /></td></tr>
  320. <tr bgcolor="'.$style['bottom'].'"><td colspan="2">'.$tag.'
  321. <a href="./?p=14&amp;v=xhtml&amp;sid='.$sid.'&amp;f=4">Смайлы</a><br />
  322. <a href="./?p=2&amp;v=xhtml&amp;sid='.$sid.'&amp;f='.$back['id'].'">Назад в '.$back['name'].'</a><br />
  323. '.$tagC.'
  324. </td></tr>
  325. </table>
  326. </form>
  327. </body></html>');
  328. 				}
  329. 			} else
  330. 			{
  331. 				if(mysql_result(
  332. 				   mysql_query("SELECT COUNT(*)
  333. 				                FROM `themes`
  334. 				                WHERE `tname` = '".$topic."'
  335. 				                AND `name` = '".$username."'"), 0))
  336. 				{
  337. 				     header("Location: ".$forumdir."p=2&v=".$version."&f=".$f."&sid=".$sid);
  338. 				     exit();
  339. 				}
  340.  
  341. 				if(($status == "moderator" or $status == "admin") and $_POST['b'] == "1")
  342. 				{
  343. 					$SQL = "INSERT INTO `themes` VALUES(0, '".$topic."', '".$username."', 'off', ".$f.", ".time().", 0, 0, '')";
  344. 				} else
  345. 				{
  346. 					$SQL = "INSERT INTO `themes` VALUES(0, '".$topic."', '".$username."', 'off', ".$f.", ".time().", 1, 0, '')";
  347. 				}
  348. 				mysql_query($SQL);
  349. 				mysql_query("INSERT INTO `posts` VALUES (0, '".$username."', '".$message."', ".crc32($message).", '".mysql_insert_id()."', '".time()."', '".$user."', '".$ip."')");
  350.   				mysql_query("UPDATE `users` SET `upd`='".time()."' WHERE `username`='".$username."'");
  351.   				include_once("us.php");
  352. 				$id = $infoUserRows['id'];
  353. 				if($f == "1"){ mysql_query("UPDATE `wcab` SET `balans`=`balans`+'0.1' WHERE `id_user`='".$id."'"); }
  354. 				elseif($f != "20" && $f != "16" && $f != "18" && $f != "19")
  355. 				{
  356.   				mysql_query("UPDATE `wcab` SET `balans`=`balans`+'0.3' WHERE `id_user`='".$id."'");
  357.   				}
  358.   				header("Location: ".$forumdir."p=2&v=".$version."&f=".$f."&sid=".$sid);
  359.     }
  360.  
  361. 		}
  362. 	}
  363. ?>