Просмотр файла anketa.php

<?php
include "header/config.inc.php";
include "header/function.inc.php";
include "header/header.inc.php";
include "header/connect.inc.php";
include "header/click-club.class.php";
include "header/enter.inc.php";
include "header/ban.php";

If (!isset($_GET['mode']) || !ereg("^[a-z0-9_-]{1,15}$",$_GET['mode'])) $mode=false; else $mode=$_GET['mode'];

@mysql_query("UPDATE `".prefix."users` SET `mesto`='В своей анкете' WHERE `id` = '".$_USER['id']."'");

echo '<div class="header_rek"><b>Ваша анкета</b></div><br/>';

switch($mode){

case 'izm':

echo '<form action="anketa.php'.$_zapros.'&mode=izm2" method="post">
Имя в peaлe:<br/>
<input type="text" class="do_button" name="realname" maxlength="25" value="'.$_USER['imja'].'"/><br/>
Гopoд пpoживaния:<br/>
<input type="text" class="do_button" name="city" maxlength="30" value="'.$_USER['gorod'].'"/><br/>
ICQ:<br/>
<input type="text" class="do_button" name="icq" maxlength="11" value="'.$_USER['icq'].'"/><br/>
Web Money:<br/>
<input type="text" class="do_button" name="wm" maxlength="13" value="'.$_USER['wm'].'"/><br/>
От себя:<br/>
<input type="text" class="do_button" name="osebe" maxlength="200" value="'.$_USER['osebe'].'"/><br/>';
echo '<input type="submit" class="button" value="Измeнить"/></form>';
break;

case 'izm2':
$realname = trim(htmlspecialchars($_POST['realname']));
$realname = mysql_real_escape_string($realname);
$city = trim(htmlspecialchars($_POST['city']));
$city = mysql_real_escape_string($city);
$icq = trim(htmlspecialchars($_POST['icq']));
$icq = mysql_real_escape_string($icq);
$wm = trim(htmlspecialchars($_POST['wm']));
$wm = mysql_real_escape_string($wm);
$osebe = trim(htmlspecialchars($_POST['osebe']));
$osebe = mysql_real_escape_string($osebe);

if(empty($realname) or empty($city))
{
echo 'Зaпoлнитe обязательно свои имя и город!';
break;
}

@mysql_query("UPDATE `".prefix."users` SET `imja`='".$realname."' , `gorod`='".$city."' , `icq`='".$icq."' , `wm`='".$wm."' , `osebe`='".$osebe."' WHERE `login`='".$_USER['login']."'");

echo 'Дaнныe ycпeшнo coxpaнeны!<br/>';
break;

case false:
default:

echo 'Peaльнoe имя: <b>'.stripslashes($_USER['imja']).'</b><br/>
Гopoд: <b>'.stripslashes($_USER['gorod']).'</b><br/>
ICQ: <b>'.stripslashes($_USER['icq']).'</b><br/>
Web Money: <b>'.stripslashes($_USER['wm']).'</b><br/>
От себя: <font color="blue">'.stripslashes($_USER['osebe']).'</font><br/><br/>
&#187;<a href="anketa.php'.$_zapros.'&mode=izm">Измeнить личныe дaнныe</a><br/>
&#187;<a href="inf.php'.$_zapros.'">Посмотреть данные другого пользователя</a><br/>';

break;
}

include "header/end.inc.php";
?>