View file go.php

<?php
define('_IN_JOHNCMS', 1);
require('incfiles/core.php');

$referer = isset($_SERVER['HTTP_REFERER']) ? htmlspecialchars($_SERVER['HTTP_REFERER']) : core::$system_set['homeurl'];
$url = isset($_REQUEST['url']) ? strip_tags(rawurldecode(trim($_REQUEST['url']))) : false;

if (isset($_GET['lng'])) {
    /*
    -----------------------------------------------------------------
    Переключатель языков
    -----------------------------------------------------------------
    */
    require('incfiles/head.php');
    echo '<div class="menu"><form action="' . $referer . '" method="post"><p>';
    if (count(core::$lng_list) > 1) {
        echo '<p><h3>' . $lng['language_select'] . '</h3>';
        foreach (core::$lng_list as $key => $val) {
            echo '<div><input type="radio" value="' . $key . '" name="setlng" ' . ($key == core::$lng_iso ? 'checked="checked"' : '') . '/>&#160;' .
                 (file_exists('images/flags/' . $key . '.gif') ? '<img src="images/flags/' . $key . '.gif" alt=""/>&#160;' : '') .
                 $val .
                 ($key == core::$system_set['lng'] ? ' <small class="red">[' . $lng['default'] . ']</small>' : '') .
                 '</div>';
        }
        echo '</p>';
    }
    echo '</p><p><input type="submit" name="submit" value="' . $lng['apply'] . '" /></p>' .
         '<p><a href="' . $referer . '">' . $lng['back'] . '</a></p></form></div>';
    require('incfiles/end.php');
} elseif ($url) {
    /*
    -----------------------------------------------------------------
    Редирект по ссылкам в текстах, обработанным функцией tags()
    -----------------------------------------------------------------
    */
    if (isset($_POST['submit'])) {
        header('Location: ' . $url);
    } else {
        require('incfiles/head.php');
        echo '<div class="phdr"><b>' . $lng['external_link'] . '</b></div>' .
             '<div class="rmenu">' .
             '<form action="go.php?url=' . rawurlencode($url) . '" method="post">' .
             '<p>' . $lng['redirect_1'] . ':<br /><span class="red">' . htmlspecialchars($url) . '</span></p>' .
             '<p>' . $lng['redirect_2'] . '.<br />' .
             $lng['redirect_3'] . ' <span class="green">' . $set['homeurl'] . '</span> ' . $lng['redirect_4'] . '.</p>' .
             '<p><input type="submit" name="submit" value="' . $lng['redirect_5'] . '" /></p>' .
             '</form></div>' .
             '<div class="phdr"><a href="' . $referer . '">' . $lng['back'] . '</a></div>';
        require('incfiles/end.php');
    }
} elseif ($id) {
    /*
    -----------------------------------------------------------------
    Редирект по рекламной ссылке
    -----------------------------------------------------------------
    */
    $req = mysql_query("SELECT * FROM `cms_ads` WHERE `id` = '$id'");
    if (mysql_num_rows($req)) {
        $res = mysql_fetch_assoc($req);
        $count_link = $res['count'] + 1;
        mysql_query("UPDATE `cms_ads` SET `count` = '$count_link'  WHERE `id` = '$id'");
        header('Location: ' . $res['link']);
    } else {
        header("Location: /?err");
    }
}