case 'comment':
/* Делаем запрос для вывода */
$id = abs(intval($_GET['id']));
$comm = mysql_fetch_assoc(mysql_query("SELECT * FROM `load_file` WHERE `id` = '".$id."'"));
if($comm == 0) {
echo '
';
require_once ('../system/footer.php');
exit();
}
echo '';
/* Если нажали кнопку */
if(isset($_REQUEST['add'])) {
$msg = strong($_POST['msg']);
if(empty($msg)) {
echo '';
require_once ('../system/footer.php');
exit();
}
if(mb_strlen($msg) < 3) {
echo '';
require_once ('../system/footer.php');
exit();
}
$ttte = mysql_fetch_array(mysql_query('select * from `load_com` where `avtor` = "'.$user['id'].'" and `msg` = "'.$msg.'"'));
if($ttte != 0) {
echo '';
require_once ('../system/footer.php');
exit();
}
/* Антиспам */
$tim = mysql_query("SELECT * FROM `load_com` WHERE `avtor`='".$user['id']."' ORDER BY `time` DESC");
while($ncm2 = mysql_fetch_assoc($tim)) {
$down_antispam = mysql_fetch_assoc(mysql_query("SELECT * FROM `antispam` WHERE `down` "));
$ncm_timeout = $ncm2['time'];
if((time()-$ncm_timeout) < $down_antispam['down']) {
echo '';
require_once ('../system/footer.php');
exit();
}
}
/* Делаем запрос*/
mysql_query("INSERT INTO `load_com` SET `msg` = '".$msg."', `avtorlogin` = '".$user['login']."', `avtor` = '".$user['id']."', `time` = '".time()."', `file` = '".$id."'");
if($user['id'] != $comm['avtor']) {
mysql_query("INSERT INTO `lenta` SET `readlen` = '0', `time` = '".time()."', `komy` = '".$comm['avtor']."', `kto` = '".$user['id']."', `text` = 'оставил комментарий к вашему [url=".$HOME."/down/comment".$id."]файлу[/url]'");
}
header('Location: '.$HOME.'/down/comment'.$id.'');
exit();
}
echo '';
if (empty($user['max'])) $user['max']=10;
$max = $user['max'];
$k_post = mysql_result(mysql_query("SELECT COUNT(*) FROM `load_com` WHERE `file` = '".$id."'"),0);
$k_page = k_page($k_post,$max);
$page = page($k_page);
$start = $max*$page-$max;
$com = mysql_query("SELECT * FROM `load_com` WHERE `file` = '".$id."' ORDER BY `id` DESC LIMIT $start, $max");
while($c = mysql_fetch_assoc($com))
{
if($user['level'] >= 1) $ddel = '[уд]';
echo ''.nick($c['avtor']).' ('.vremja($c['time']).') '.$ddel.'';
if($user['id'] != $c['avtor']) echo '[
отв]';
echo '
';
}
/* Если сообщений еще нету*/
if($k_post < 1) echo '';
if($k_page>1) echo str('comment'.$id.'?',$k_page,$page); // Вывод страниц
echo '';
break;
case 'delcom':
/* Делаем запрос для удаления */
$id = abs(intval($_GET['id']));
$comm = mysql_fetch_assoc(mysql_query("SELECT * FROM `load_com` WHERE `id` = '".$id."'"));
if($comm == 0 or $user['level'] < 1) {
header('Location: '.$HOME.'');
exit();
}
/* Удаляем */
if(isset($_REQUEST['ok'])) {
mysql_query("DELETE FROM `load_com` WHERE `id` = '".$id."'");
header('Location: '.$HOME.'/down/comment'.$comm['file'].'');
exit();
}
echo '
';
break;
case 'otvet':
/* Делаем запрос для вывода */
$id = abs(intval($_GET['id']));
$comm = mysql_fetch_assoc(mysql_query("SELECT * FROM `load_com` WHERE `id` = '".$id."'"));
if($comm == 0) {
echo '
';
require_once ('../system/footer.php');
exit();
}
if($user['id'] == $comm['avtor']) {
header('Location: /down/comment'.$comm['file'].'');
exit();
}
echo '';
/* Если нажали кнопку */
if(isset($_REQUEST['submit'])) {
/* Фильтрация и вывод ошибки */
$msg = strong($_POST['msg']);
if(empty($msg)) {
echo '';
require_once ('../system/footer.php');
exit();
}
/* Вывод ошибки */
if(mb_strlen($msg) < 3) {
echo '';
require_once ('../system/footer.php');
exit();
}
/* Антиспам */
$tim = mysql_query("SELECT * FROM `load_com` WHERE `avtor`='".$user['id']."' ORDER BY `time` DESC");
while($ncm2 = mysql_fetch_assoc($tim)) {
$down_antispam = mysql_fetch_assoc(mysql_query("SELECT * FROM `antispam` WHERE `down` "));
$ncm_timeout = $ncm2['time'];
if((time()-$ncm_timeout) < $down_antispam['down']) {
echo '';
require_once ('../system/footer.php');
exit();
}
}
/* Делаем запрос */
mysql_query("INSERT INTO `load_com` SET `msg` = '[b]".$comm['avtorlogin'].",[/b]".$msg."', `avtorlogin` = '".$users['login']."', `avtor` = '".$user['id']."', `time` = '".time()."', `file` = '".$comm['file']."'");
/* Уведомляем */
mysql_query("INSERT INTO `lenta` SET `readlen` = '0', `time` = '".time()."', `komy` = '".$comm['avtor']."', `kto` = '".$user['id']."', `text` = 'ответил на Ваш комментарий к [url=".$HOME."/down/comment".$comm['file']."]файлу[/url]'");
header('Location: /down/comment'.$comm['file'].'');
exit();
}
echo '
';
break;