Просмотр файла panel/adminchat.php

<?php
// by Mike O. (mides), coolcms.org
require_once '../includes/sys.php';
require_once '../includes/auth_a.php';
require_once '../includes/header.php';

switch ($act) {
    default:
        echo '<div class="title"><a href="./">АДМ</a>&raquo; Админчат</div><div class="body">';
        $total = mysql_result(mysql_query("SELECT COUNT(`id`) FROM `adminchat`"), 0);
        if ($total > 0) {
            $pages = ceil($total / $config['onpage']);
            if ($page > $pages or $page == 0) {
                    $page = 1;
            }
            $begin = ($page - 1) * $config['onpage'];

            $book_r = mysql_query("SELECT * FROM `adminchat` ORDER BY `time` DESC LIMIT $begin, $config[onpage]");
            while ($book = mysql_fetch_assoc($book_r)) {
                echo '<a href="../other/profile.php?id='.$book['id_user'].'">'.username($book['id_user'], 2).'</a> ';
                echo ' '.ccdate($book['time'], $book['id_user']).' <a href="?act=reply&amp;id='.$book['id'].'">'.$lang['re'].'</a>';
                if ($u['access'] > 2 or $u['id'] == $book['id_user'] and time() - $book['time'] < $config['edit_time']) echo '|<a href="?act=edit&amp;id='.$book['id'].'">'.$lang['edit'].'</a>';
                if ($u['access'] > 2) echo '|<a href="?act=del&amp;id='.$book['id'].'">DEL</a>';
                echo '<br />'.bb($book['msg']);
                if ($book['edit_by']) echo '<br />_______<br /><span style="font-size: 10px;">'.$lang['edited_by'].': '.username($book['edit_by'], 0).' ('.date('d.m.y, H:i', $book['edit_time']).' )</span>';
                echo '<hr>';
            }
            navig($page, '?', $pages);
        } else {
            echo $lang['nothing_yet'];
        }
        echo '<form name="form" action="?act=add" method="post">
        <textarea name="msg" cols="" rows="3"></textarea>
        <input name="" type="submit" value="Ok">
        </form><br />
		<a href="./">В админку</a>
		</div>';
    break;
	
    case 'add':
        if ($_POST['msg']) {
            if (TIME > $_SESSION['antispam']) {
                $msg = check($_POST['msg']);
                mysql_query("INSERT INTO `adminchat` SET `id_user` = '$u[id]', `msg` = '$msg', `time` = '".TIME."'");
                $_SESSION['antispam'] = TIME + $config['antispam'];
                redirect('?');
            } else {
                error($lang['antispam'].' '.$config['antispam'].' sec');
                nav('?');
            }
        } else {
            redirect('?');
        }
    break;

    case 'reply':
        $msg_r = mysql_query("SELECT `id`, `id_user` FROM `adminchat` WHERE `id` = '$id'");
        $msg = mysql_fetch_assoc($msg_r);
        if ($msg['id']) {
            if ($ok) {
                if (TIME > $_SESSION['antispam']) {
                    if ($_POST['msg_text']) {
                        $msg_text = check($_POST['msg_text']);
                        mysql_query("INSERT INTO `adminchat` SET `id_user` = '$u[id]', `msg` = '$msg_text', `time` = '".time()."'");
                        $_SESSION['antispam'] = time() + $config['antispam'];
                        header('location: ?');
                        exit;
                    } else {
                        error('Вы не заполнили поле.');
                        nav('?act=reply&amp;id='.$id);
                    }
                } else {
                    error($lang['antispam'].' '.$config['antispam'].' sec.');
                    nav('?');
                }
            } else {
                tp('<a href="?">Админчат</a>&raquo; Ответить');
                echo '<div class="body"><form name="form" action="?act=reply&amp;id='.$id.'&amp;ok=1" method="post">
                '.$lang['text'].'(max250):<br /><textarea name="msg_text" cols="" rows="3">[b]'.username($msg['id_user'], 0).'[/b], </textarea><br />';
                echo '<input name="submit" type="submit" value="Ok" />
                </form>';
                nav('?');
            }
        } else {
            redirect('?');
        }
    break;

    case 'edit':
        $book_r = mysql_query("SELECT `id_user`, `msg`, `time` FROM `adminchat` WHERE `id` = '$id'");
        $book = mysql_fetch_assoc($book_r);
        if ($book['msg']) {
            if (access(3) or ($u['id'] == $book['id_user'] and TIME - $book['time'] < $config['edit_time']) ) {
                tp('<a href="?">Админчат</a>&raquo; Ред-е сообщения');
                if (empty($ok)) {
                    echo '<div class="body"><form name="form" action="?act=edit&amp;id='.$id.'&amp;ok=1" method="post">
                    '.$lang['text'].'(max250):<br /><textarea name="msg" cols="" rows="3">'.$book['msg'].'</textarea>
                    <input name="submit" type="submit" value="Ok" />
                    </form>';
                    nav('?');
                } else {
                    if ($_POST['msg']) {
                        $msg = check($_POST['msg']);
                        mysql_query("UPDATE `adminchat` SET `msg` = '$msg', `edit_by` = '$u[id]', `edit_time` = '".time()."' WHERE `id` = '$id'");
                        redirect('?');
                    } else {
                        redirect('?act=edit&amp;id='.$id);
                    }
                }
            } else {
                redirect('?');
            }
        } else {
            redirect('?');
        }
    break;

    case 'del':
        if (access(3)) {
            $msg_r = mysql_query("SELECT `id` FROM `adminchat` WHERE `id` = '$id'");
            if (mysql_num_rows($msg_r)) {
                mysql_query("DELETE FROM `adminchat` WHERE `id` = '$id'");
            }
        }
        redirect('?');
    break;	
}

require_once '../includes/tail.php';
?>