View file mafia/inside.php

<?
$title='Мафия - Приват';
 require"../system/config.php";
 require"../system/func.php";
 require"../system/head.php";
 require"../system/error.php";
$ref=rand(10000,1000000);
$result = mysql_query ("Select * from mafusers where id_user='$user[id_user]'");
$row = mysql_fetch_array ($result);

$id=(int)$row['id'];

$nk=(int)$_GET['nk'];

$rm=(int)$_GET['rm'];

$select = mysql_query ("Select * from mafusers where id='$nk'");    

$us=mysql_real_escape_string($row["user"]);  

$inf = mysql_fetch_array ($select);

if ($nk==38601){$usid=38601;}

else {$usid=$inf["id"];}

$name = mysql_real_escape_string($inf["name"]);

$nick = mysql_real_escape_string($inf["user"]);

$posts = (int)$inf["posts"];

$status = mysql_real_escape_string($inf["status"]);



if (isset($_GET['mode']))

{

if ($_GET['mode']=='ign')

{

$ign = $row["ignor"];

if (strpos($ign,$name."|")===false){

$ign = $ign.$name."|";          

$gn="UPDATE mafusers SET ignor = '$ign' WHERE id = '$id'";

if (mysql_query($gn)) {msg("$name в игноре!!!");} else echo mysql_error();

}

}

/////////////////////////////////////////////////////////////////////////////////////////

if ($_GET['mode']=='pi')

{

$fignik = $inf["user"];

$figid = $inf["id"];

$inv = 2;          

$pi="UPDATE mafusers SET inv = '".$inv."' WHERE id = '".$figid."'";

if ($user['id']==1)

{

if (mysql_query($pi)) {msg("$fignik в игноре для всех!!!");} else echo mysql_error();

}

}



}








	echo "<div class=\"rekl\">\n"; 

	echo "<form method='post' action='maf.php?uid=$usid&amp;rm=$rm&amp;ref=$ref'>";

		if ($nk!=38601) 

			echo "<input name=\"msg\" value=\"$name, \" maxlength=\"200\"/><br/>\n"; 

				else 

					echo "<input name=\"msg\" maxlength=\"200\" /><br/>\n"; 

						if($row["say"]==="0")

							{

							echo "<select name=\"prvt\">";  

							echo "<option value=\"1\">Приватно</option>\n";

							echo "<option value=\"0\">Всем</option>\n";

							echo "</select><br/>\n"; 

							}

								else 

									{

									echo "<select name=\"prvt\">";  

									echo "<option value=\"0\">Всем</option>\n";

									echo "<option value=\"1\">Приватно</option>\n";

									echo "</select><br/>\n"; 

									}

	echo "<input type='submit' value = 'Сказать' />\n";

	echo "</form>";

	echo "Ник: <a href='/pages/about.php?id=$usid'>$nick</a><br/>\n";

	echo "Подпольная кличка: $name<br/>\n";

	echo "Фраз: $posts<br/>\n";

	echo "Положение в обществе: $status";

	echo "<br/>\n";

	echo "*******<br/>\n";

if($user['id_user']==1){echo "<a href=\"/adm_panel/ban.php?id=$inf[id_user]\">Забанить</a><br/>\n";} 

echo "<a href=\"maf.php?rm=$rm&amp;ref=$ref\">В игру</a>\n";

echo "</div>\n";

require"../system/foot.php";



?>