View file shouts/index.php

<?
/*
=============================================
Движок: SHCMS Engine
=============================================
Название файла: Мини-чат
=============================================
Official website: http://shcms.ru
=============================================
*/
define('SHCMS', true);
include_once'../system/inc/basic_settings.php';
$shcmsengine['title'] = 'Мини-Чат';
include_once'../template/head.php';
$user4 = mysql_fetch_array(mysql_query("SELECT * FROM users WHERE id=$user_id"));

$gue_cap =mysql_query("SELECT captcha_guest FROM settings_shcms");
$gue_cap2 = mysql_fetch_array($gue_cap);
if($user_id)
{
if($brodilka == "web")
{
$text_list->text_lister();
}

if(isset($_GET['otv']))
{if(isset($_GET['id']))
{$mess_id = $_GET['id'];}
$or3 = mysql_query("SELECT * FROM shouts WHERE id=$mess_id");
$or = mysql_fetch_array($or3);
$mess_ots = '[b]'.$or['login'].'[/b],';}

echo '<form action="?'.$conservation.'" method="post" name="form">';
echo '<input type="hidden" name="login">';
echo 'Введите текст<br/><textarea name="text">'.$mess_ots.'</textarea>';
if($gue_cap2['captcha_guest'] == 1)
{
  ?>
<script type="text/javascript">
src="/shcms/antibot.php?r=rand(1000,9999)"; 
function reload(){
        document.captcha.src="/shcms/antibot.php?r=rand(1000,9999)";
        document.captcha.src=src+"?rand="+Math.random();
}
</script>

  <?
  
  echo '<img  name="captcha" class="midside" alt="Включите эту картинку для отображения кода безопасности" src="'.DIR_SHCMS.'antibot.php?r=' . rand(1000, 9999) . ' "/><br />';
		?><a href="javascript:void(0)" onclick="reload()">обновить, если не виден код</a><br/><?
    echo '<input type="text" style="width:115px"  size="5" maxlength="5"  name="kod"/><br/>';

}

	echo '<input type="submit" name="submit" value="Отправить"> ';
echo '<input type="submit" name="refresh" value="Обновить">';
echo '</form>';


}


if(isset($_POST['submit'])){$submit = $_POST['submit'];}
if(isset($submit))
{
if(isset($_POST['login'])){$submit = $_POST['submit'];}
if(isset($_POST['text'])){$text = $_POST['text'];}

if(empty($text))
{
echo '<div class="errors">Введите текст</div>';
header('Refresh: 1; url=?' . $conservation . '&' );
include_once'../template/foot.php';
exit();
}
if(strlen($text)<0 or strlen($text)>1200)
{
echo '<div class="errors">Ваш текст не должен превышать 1200символов</div>';
header('Refresh: 1; url=?' . $conservation . '&' );
include_once'../template/foot.php';
exit();
}
if($gue_cap2['captcha_guest'] == 1)
{
 $antibot = isset($_POST['kod']) ? trim($_POST['kod']) : '';
    if (empty($antibot) || strlen($antibot) < 3)
	{
	echo  '<div class="errors">Код безопастности не введен!</div>';
	header('Refresh: 1; url=?' . $conservation . '&' );
include_once'../template/foot.php';
	exit(); }
	elseif ($antibot != $_SESSION['code'])
	{ echo  '<div class="errors">Код безопасности не соответствует отображённому</div>';
	header('Refresh: 1; url=?' . $conservation . '&' );
include_once'../template/foot.php';
exit();
		}	
    unset($_SESSION['code']);
	   }

$text = stripslashes($text);
$text = htmlspecialchars($text);
if($login or $text)
{
$yel = mysql_query("INSERT INTO shouts (login,text,time,user_id) VALUES ('$login','$text','$time_date','$user_id')");
$balls = $user4['ball'] +1;
mysql_query("UPDATE users SET ball=".$balls." WHERE id=".$user_id."");

if($yel == true)
{
echo '<div class="actshcms">Сообщение успешно добавлено</div>';
header('Refresh: 1; url=?' . $conservation . '&' );
include_once'../template/foot.php';
exit();
}
else
{
echo '<div class="errors">Сообщение не добавлено</div>'; 
header('Refresh: 1; url=?' . $conservation . '&' );
include_once'../template/foot.php';
exit();
}

}
}
  $allfield = mysql_result(mysql_query("SELECT COUNT(*) FROM shouts"),0);
  $newlist = new Navigation($allfield, // кол-во полей для вывода
                            10,         // выводить 5 записей на страницу
                          true);     // выводить "Стр." возле ссылок навигации

$shouts = mysql_query("SELECT * FROM shouts ORDER BY id DESC ". $newlist->limit()." ");
$shouts2 = mysql_fetch_array($shouts);
if($shouts2 == null)
{
echo '<div class="posts">Сообщений в мини-чате нет</div>';
}
else{
do
{
echo '<div class="posts">';
$user_ico = mysql_fetch_array(mysql_query("SELECT * FROM users WHERE id=$shouts2[user_id]"));
if($user_ico['pol'] == 1)
	 {echo '<img src="../template/icon/users/1.png"/>';}else{echo '<img src="../template/icon/users/2.png"/>';}
echo '<a href="'.DIR_SHCMS.'change_view.php?id='.$shouts2['user_id'].'">'.$shouts2['login'].'</a>';
echo' ('.$timedate->when($shouts2['time']) . ')<br/>';
echo "". handling_smileys($shouts2['text']) ."";

if($user4['team'] == 6){
echo '<span style="float:right"><a href="?otv&id='.$shouts2['id'].'"> Ответить</a> | <a href="delete.php?id='.$shouts2['id'].'">Удалить</a></span></div>';}
else{
if($user_id){echo '<span style="float:right"><a href="?otv&id='.$shouts2['id'].'"> Ответить</a></span></div>';}echo '</div>';}

}
while($shouts2 = mysql_fetch_array($shouts));
echo '<div class="pages">';
echo $newlist->pagination();
echo '</div>';
}
if(isset($_POST['refresh'])){$refresh = $_POST['refresh'];}
if(isset($refresh))
{
header('Refresh: 1; url=?'.$conservation.'&');
}
if($user4['team'] == 6)
{
echo '<div class="lower"><a href="del.php">Удалить сообщение.</a></div>';
}


include_once'../template/foot.php';
?>