Просмотр файла sdark.mobi/clan_forum/post/topic/topic_red.php

<?
require_once '../../../core/system.php';
echo ban();
echo blok();
if (isset($_GET['id']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_topic_clan` WHERE `id` = '".intval($_GET['id'])."'"),0) == true){
$topic = mysql_fetch_array(mysql_query("SELECT * FROM `forum_topic_clan` WHERE `id`  = '".intval($_GET['id'])."'"));
}else{
$_SESSION['err'] = "Топик не найден";
header('Location: /');
exit();
}
$header = $topic['name'];
require_once '../../../core/head.php';
$razd = mysql_fetch_array(mysql_query("SELECT * FROM `forum_topic_clan` WHERE `id`  = ".intval($_GET['id'])." and `clan`  = ".intval($_GET['clan']).""));
if($topic['id']!=$razd['id']){
$_SESSION['err'] = "Ошибка"; header("Location: /"); exit();}

if(($user['id']==$topic['id_user'] or (($user['dolz']=='заместитель' or $user['dolz']=='основатель') and $user['clan']==$topic['clan']) or $user['prava'] > 4)){
echo'';}else{$_SESSION['err'] = "Ошибка";
header('Location: /');
exit();}
if(isset($_POST['name']) && isset($_POST['msg'])) {
$name = check($_POST['name']);
$msg = check($_POST['msg']);
if(strlen($name) < 3 or strlen($name) > 60) $err =  'Длина названия должна быть в пределах от 3 до 60 символов';
if(strlen($msg) < 10 or strlen($msg) >5000) $err =  'Длина сообщения должна быть в пределах от 10 до 5000 символов';
if(!isset($err)) {
mysql_query("UPDATE `forum_topic_clan` SET `name` = '$name', `msg` = '$msg' WHERE `id` = '$topic[id]' LIMIT 1");
header("Location: /clan_forum/post/topic/$topic[id]/?clan=".intval($_GET['clan'])."");
$_SESSION['message'] = 'Топик изменен';
exit();
}else{
header("Location: /clan_forum/post/topic/$topic[id]/");
$_SESSION['err'] = $err;
exit();
}
}
echo '<div class="head"><form  method="post" action="?id='.$topic['id'].'&clan='.intval($_GET['clan']).'">
Название топика: <font color="A19B9B">(от 3 до 60 символов)</font><br /><input class="text-area" value="'.$topic['name'].'" type="text" name="name" />
Сообщение:  <font color="A19B9B">(от 10 до 5000 символов)</font><br /><textarea name="msg" class = "chat-area" rows="4" cols="55">'.$topic['msg'].'</textarea>
<input class="inpc-ar form-submit" type="submit" value="Изменить">
</form></div>';
require_once '../../../core/foot.php';
?>