<?php
define('_IN_JOHNCMS', 1);
$headmod = 'load';
require_once '../incfiles/core.php';
require_once 'functions.php';
$textl = $lng_dl['downloads'].' / '.$lng_dl['comments'];
require_once '../incfiles/head.php';
$id = intval($_GET['id']);
$komid = intval($_GET['komid']);
$act = isset($_GET['act']) ? $_GET['act'] : '';
if (empty($set['mod_down_comm'])){
echo functions::display_error($lng_dl['comments_disabled'], '<a href="/download/">'.$lng['back'].'</a>');
include_once '../incfiles/end.php';
exit;
}
$file_array = DownFile::getById($id);
if(!is_array($file_array)){
echo functions::display_error($lng_dl['file_not_found'], '<a href="/download/">'.$lng['back'].'</a>');
include_once '../incfiles/end.php';
exit;
}
switch ($act)
{
case 'yes':
echo'<div class="phdr">'.$lng_dl['result'].':</div>';
$plus = mysql_query("select * from `downkomm` where id = '" . $komid . "';");
$pluss = mysql_fetch_array($plus);
$idd = explode('|',$pluss['golos']);
if (!$user_id)
{
echo '<div class="rmenu">'.$lng_dl['register_only'].'</div>
<div class="menu"><a href="/download/">'.$lng['back'].'</a></div>';
include_once '../incfiles/end.php';
exit;
}
if(in_array($user_id, $idd))
{
echo'<div class="rmenu">'.$lng_dl['already_voted'].'</div>';
echo'<div class="menu"><a href="komm.php?id=' . $id . '">'.$lng['back'].'</a></div>';
include_once '../incfiles/end.php';
exit;
}
if($user_id == $pluss['userid'])
{
echo'<div class="rmenu">'.$lng_dl['cant_vote_for_your_comment'].'</div>';
echo'<div class="menu"><a href="komm.php?id=' . $id . '">'.$lng['back'].'</a></div>';
include_once '../incfiles/end.php';
exit;
}
$plusadin = $pluss['plus'];
$plusadin++;
if(!$pluss['golos'])
{
$goll = $user_id;
}
else
{
$goll = $pluss['golos'].'|'.$user_id;
}
mysql_query("update `downkomm` set `plus` = '" . $plusadin . "', `golos` = '".$goll."' where `id` = '" . $komid . "';");
echo'<div class="gmenu">'.$lng_dl['vote_accepted'].'</div>';
echo'<div class="menu"><a href="komm.php?id=' . $id . '">'.$lng['back'].'</a></div>';
break;
case 'no':
echo'<div class="phdr">'.$lng_dl['result'].':</div>';
$plus = mysql_query("select * from `downkomm` where id = '" . $komid . "';");
$pluss = mysql_fetch_array($plus);
$idd = explode('|',$pluss['golos']);
if (!$user_id)
{
echo '<div class="rmenu">'.$lng_dl['register_only'].'</div>
<div class="menu"><a href="/download/">'.$lng['back'].'</a></div>';
include_once '../incfiles/end.php';
exit;
}
if(in_array("$user_id", $idd))
{
echo'<div class="rmenu">'.$lng_dl['already_voted'].'</div>';
echo'<div class="menu"><a href="komm.php?id=' . $id . '">'.$lng['back'].'</a></div>';
include_once '../incfiles/end.php';
exit;
}
if($user_id == $pluss['userid'])
{
echo'<div class="rmenu">'.$lng_dl['cant_vote_for_your_comment'].'</div>';
echo'<div class="menu"><a href="komm.php?id=' . $id . '">'.$lng['back'].'</a></div>';
include_once '../incfiles/end.php';
exit;
}
$plusadin = $pluss['minus'];
$plusadin++;
if(!$pluss['golos'])
{
$goll = $user_id.'|';
}
else
{
$goll = $pluss['golos'].$user_id;
}
mysql_query("update `downkomm` set `minus` = '" . $plusadin . "', `golos` = '".$goll."' where `id` = '" . $komid . "';");
echo'<div class="gmenu">'.$lng_dl['vote_accepted'].'</div>';
echo'<div class="menu"><a href="komm.php?id=' . $id . '">'.$lng['back'].'</a><div/>';
break;
case 'who':
$plus = mysql_query("select * from `downkomm` where id = '" . $komid . "';");
$pluss = mysql_fetch_array($plus);
if($pluss['golos'] != "")
{
$idd = explode('|',$pluss['golos']);
$result = count($idd);
}
else
{
$idd = array();
$result = 0;
}
echo '<div class="phdr">'.$lng_dl['voted'].': '.$result.'</div><div class="menu">';
$voted = '';
foreach($idd as $user)
{
$req = mysql_query("SELECT * from `users` where id = '".$user."';");
$res = mysql_fetch_array($req);
if(!empty($voted))
{
$voted .= ',';
}
if (!empty($user_id) && ($user_id != $res['id']))
{
$voted .= '<a href="/users/profile.php?user=' . $res['id'] . '"><b>' . $res['name'] . '</b></a>';
}
else
{
$voted .= '<b>' . $res['name'] . '</b>';
}
}
echo empty($voted) ? $lng_dl['empty_list'] : $voted;
echo '</div><div class="menu"><a href="komm.php?id=' . $id . '">'.$lng['back'].'</a></div>';
break;
case 'add':
echo'<div class="phdr">'.$lng_dl['add_comment'].'</div>';
if (!$user_id)
{
echo functions::display_error($lng_dl['register_only'], '<a href="/download/">'.$lng['back'].'</a>');
include_once '../incfiles/end.php';
exit;
}
if (isset($_POST['submit']))
{
if(empty($_POST['txt']))
{
echo'<div class="rmenu">'.$lng_dl['comment_is_empty'].'</div>';
echo'<div class="menu"><a href="komm.php?id='.$id.'">'.$lng['back'].'</a></div>';
include_once '../incfiles/end.php';
exit;
}
mysql_query("INSERT INTO `downkomm` (`id`, `fileid`, `time`, `userid`, `text`, `plus`, `minus`, `golos`) VALUES (NULL, '".$id."', '".time()."', '".$user_id."', '".mysql_real_escape_string($_POST['txt'])."', '0', '0', '');");
$req = mysql_query("SELECT * from `users` where id = '".$user_id."';");
$res = mysql_fetch_array($req);
$fpst = $res['komm'] + 1;
mysql_query("UPDATE `users` SET `komm`='" . $fpst . "' WHERE `id`='" . $user_id . "';");
if($down_setting['priv'] > 0)
{
$text_mail = $lng_dl['added_comment'].' [url='.core::$system_set['homeurl'].'/download/komm.php?id='.$id.']'.$lng_dl['view'].'[/url]';
mysql_query("INSERT INTO `cms_mail` SET
`user_id` = '0',
`from_id` = '" . $down_setting['priv_user'] . "',
`text` = '" . mysql_real_escape_string($text_mail) . "',
`time` = '" . time() . "',
`sys` = '1'") or die(mysql_error());
}
echo'<div class="gmenu">'.$lng_dl['comment_add_success'].'</div>
<div class="menu"><a href="komm.php?id='.$id.'">'.$lng['back'].'</a></div>';
}
else
{
$set_download = unserialize($datauser['set_forum']);
echo '<form action="komm.php?act=add&id=' . $id . '" name="komm" method="post">
<div class="menu">'.$lng_dl['comment_text'].':<br/>';
if(!$is_mobile)
echo bbcode::auto_bb('komm', 'txt');
echo '<textarea cols="' . $set_user['field_w'] . '" rows="' . $set_user['field_h'] . '" name="txt"></textarea></div>
<div class="menu">
<input type="submit" name="submit" value="'.$lng_dl['save'].'"/></div>
</form>';
echo'<div class="menu"><a href="komm.php?id='.$id.'">'.$lng['back'].'</a></div>';
echo '<div class="menu"><a href="'.$file_array['FILE_PAGE_URL'].'">'.$lng_dl['back_to_file'].'</a></div>';
}
break;
case 'del':
if ($rights >= 1)
{
mysql_query("DELETE FROM `downkomm` WHERE `id` = '".$komid."' LIMIT 1");
echo '<div class="gmenu">'.$lng_dl['deleted'].'</div>';
echo '<div class="menu"><a href="'.$file_array['FILE_PAGE_URL'].'">'.$lng_dl['back_to_file'].'</a></div>';
}
else
{
echo '<div class="rmenu">'.$lng_dl['access_denied'].'</div>';
}
break;
default:
$set_download = unserialize($datauser['set_forum']);
echo'<div class="phdr">'.$lng_dl['comments'].' </div>';
$total = mysql_result(mysql_query("SELECT COUNT(*) FROM `downkomm` WHERE `fileid` = '" . $id . "';"), 0);
if ($total > 0) {
$query = mysql_query("select * from `downkomm` where fileid='" . $id . "' ORDER BY `time` ASC LIMIT " . $start . "," . $kmess);
while($arr = mysql_fetch_array($query)){
echo ($i % 2) ? '<div class="list1">' : '<div class="list2">';
$i++;
$res = mysql_fetch_array(mysql_query("SELECT * from `users` where id = '".$arr['userid']."';"));
$text = functions::checkout($arr['text'], 1, 1);
$text = functions::smileys($text);
$vrp = $arr['time'] + $sdvig * 3600;
$idd = explode('|',$arr['golos']);
$vr = date("d.m.y / H:i", $vrp);
$upr = '';
if($rights >= 1)
$upr .= '<a href="?act=del&komid='.$arr['id'].'&id='.$id.'">['.$lng_dl['delete'].']</a> ';
if(!in_array($user_id, $idd) && ($user_id != $arr['userid']))
$upr .= $lng_dl['approval'].': <a href="?act=yes&komid='.$arr['id'].'&id='.$id.'">'.$lng_dl['approval_yes'].' ['.$arr['plus'].']</a> | <a href="?act=no&komid='.$arr['id'].'&id='.$id.'">'.$lng_dl['approval_no'].' ['.$arr['minus'].']</a>';
else
$upr .= $lng_dl['approval'].': '.$lng_dl['approval_yes'].' ['.$arr['plus'].'] | '.$lng_dl['approval_no'].' ['.$arr['minus'].']';
$upr .= ' / <a href="?act=who&komid='.$arr['id'].'&id='.$id.'">'.$lng_dl['who_voted'].'</a>';
$arg = array ('stshide' => 1, 'header' => '('.$vr.')',
'body' => $text,
'sub' => $upr);
echo functions::display_user($res, $arg) . '</div>';
}
}else
echo'<div class="rmenu">'.$lng_dl['empty_list'].'</div>';
if($user_id)
echo '<div class="menu"><form action="komm.php?act=add&id='.$id.'" method="post"><input type="submit" name="add" value="'.$lng_dl['add_comment'].'"/></form></div>';
else
echo '<div class="rmenu">'.$lng_dl['comments_register_only'].'</div>';
echo'<div class="phdr">'.$lng_dl['all_comments'].': '.$total.'</div>';
if ($total > $kmess){
echo '<div class="menu">' . functions::display_pagination('komm.php?id='.$id.'&', $start, $total, $kmess) . '';
echo '<form action="komm.php" method="get"><input type="hidden" name="id" value="'.$id.'"/><input type="text" name="page" size="2"/><input type="submit" value="' . $lng_dl['to_page'] . ' >>"/></form></div>';
}
echo'<div class="gmenu"><a href="'.$file_array['FILE_PAGE_URL'].'">'.$lng_dl['back_to_file'].'</a></div>';
break;
}
require_once '../incfiles/end.php';