Просмотр файла love/add.php

<?
include_once '../sys/inc/start.php';
include_once '../sys/inc/compress.php';
include_once '../sys/inc/sess.php';
include_once '../sys/inc/home.php';
include_once '../sys/inc/settings.php';
include_once '../sys/inc/db_connect.php';
include_once '../sys/inc/ipua.php';
include_once '../sys/inc/fnc.php';
include_once '../sys/inc/user.php';
$set['title']='Новый вопрос'; // заголовок страницы
include_once '../sys/inc/thead.php';
title();
aut();
if ($user){
if (isset($_POST['name']) && $_POST['name']!=NULL && isset($_POST['text']) && $_POST['text']!=NULL)
{
$rid = intval($_GET['rid']);
$name = $_POST['name'];
$text = $_POST['text'];
$razd['id']=esc(stripcslashes(htmlspecialchars($_POST['razd'])));

$name = mysql_real_escape_string($name);
$text = mysql_real_escape_string($text);
$them['id']=rand(1,9999); 
mysql_query("INSERT INTO `otvety_t` (`id_razdel`, `id_user`, `name`, `time`, `id`) VALUES ('$razd[id]', '$user[id]', '$name', '$time', '$them[id]')");

mysql_query("INSERT INTO `otvety_p` (`id_them`, `id_user`, `time` ,`msg`, `tid`) VALUES ('$them[id]','$user[id]','$time','$text','$rid')");
mysql_query("UPDATE `user` SET `voprosy` = '".($user['voprosy']+1)."' WHERE `id` = '$user[id]' LIMIT 1");
msg('Тема успешно добавлена');
header("Location: index.php?&ok");
}



echo '<form method="post" action="add.php?rid='.intval($_GET['rid']).'&amp;them">';
echo "Раздел:<br />\n";
echo "<select class=\"form\" name=\"razd\">\n";
$q = mysql_query("SELECT * FROM `otvety_razd` ORDER BY `id` ASC;");
while ($razd = mysql_fetch_array($q)){
echo "<option value=\"$razd[id]\">$razd[name]</option>\n";}
echo "</select><br />\n";
echo 'Название:<br/><input type="text" name="name"/><br/>';
echo 'Вопрос:<br/><textarea name="text"></textarea><br/>';
echo '<input value="Добавить" type="submit"/><br/>';
echo '<hr color="DeepSkyBlue1" hr noshade size="1"></font>';
echo "&laquo;<a href='/love/index.php'>В знакомства</a><br/>\n";
echo '</form>';
}else{echo'Для того чтобы добавить вопрос';
echo "&nbsp;<a href='../aut.php'><u>войдите</u></a>\n";
echo "или</a>\n";
echo "<a href='../reg.php'><u>зарегистрируйтесь</u></br>\n";


}
include_once '../sys/inc/tfoot.php';
?>