<?php
//попробуй так
session_name('SID');

session_start();

//FUNCTION

function dben($var){return base64_encode(urlencode($var));}

function dbde($var){return htmlspecialchars(urldecode(base64_decode($var)),ENT_QUOTES,'UTF-8');}



function cl($class){global $_SERVER; include_once $_SERVER['DOCUMENT_ROOT'].'/classes/class_'.$class.'.php';}





//Домен кукис

$domcookie='******"***';



//Accaunt Start

if(isset($_GET['accaunt_start'])){

$start=dben(htmlentities($_GET['accaunt_start']));

$pdo->exec("UPDATE`users`SET`mact`='1'WHERE`sess`='$start'" or die('ОШИБКА АКТИВАЦИИ АККАУНТА! ИЛИ ОН УЖЕ АКТИВИРОВАН');



header('location: /');



setcookie('auth',dbde($start),time()+60*60*72,'/',$domcookie);



exit();

}elseif(isset($_COOKIE['auth']) and $_COOKIE['auth']=='1'){include_once HOME.'/style/class_diz.php';diz::head('Подтверждения e-mail');die('<div class=title>Подтверждения e-mail</div><div class=link>Вaм на почту было отправлено письмо для подтверждения e-mail</div>');}

//-------//

$cnf=$pdo->query("SELECT * FROM `config` WHERE`id`='1'"->fetch();

$trPR=$pdo->prepare("SELECT * FROM `config` WHERE`id`=:idt";

$trPR->bindParam(':idt',$idt);

if(isset($_COOKIE['auth'])){

$user=$pdo->query("SELECT * FROM `users` WHERE`sess`='".dben($_COOKIE['auth'])."'"->fetch();

if($user['id']<=0){setcookie('auth','',time()-60*60*72,'/',$domcookie);

header('location: /guest.php');}

}else{if($_SERVER['SCRIPT_NAME']!='/auth.php' and $_SERVER['SCRIPT_NAME']!='/reg.php' and $_SERVER['SCRIPT_NAME']!='/tarif.php' and $_SERVER['SCRIPT_NAME']!='/admenu.php' and $_SERVER['SCRIPT_NAME']!='/worldkassa/result.php'){

header('location: /guest.php');

}}



$pdo->exec("UPDATE`users`SET`ip`='".dben($_SERVER['HTTP_X_REAL_IP'])."',`time_viz`='".time()."'WHERE`id`='$user[id]'";

function dostup($d){

global $user;



if($d=='guest' and isset($user)){header('location: /');}

if($d=='auth' and !isset($user)){header('location: /guest.php');}}





if($user['mact']=='2' and $_SERVER['SCRIPT_NAME']!='/index.php' and $_SERVER['SCRIPT_NAME']!='/' and $_SERVER['SCRIPT_NAME']!='/setting.php'){header('location: /setting.php');}



$tr=$pdo->query("SELECT `cena` FROM`tarif` WHERE`id`='$user[tarif]'"->fetch();

$trc=$tr['cena'];

if($user['money']>=$trc and $user['mact']=='1'){

$psswd=md5(time());

$prest=$pdo->query("SELECT `preset`,`mb` FROM`tarif` WHERE`id`='".$user['tarif']."'"->fetch();

if($cnf['save']=='1'){$root=dbde($cnf['srv1_l']);$srv_l=dbde($cnf['srv1_l']);$srv_p=dbde($cnf['srv1_p']);$srv=dbde($cnf['srv1']);}elseif($cnf['save']=='2'){$root=dbde($cnf['srv2_l']);$srv_l=dbde($cnf['srv2_l']);$srv_p=dbde($cnf['srv2_p']);$srv=dbde($cnf['srv2']);}elseif($cnf['save']=='3'){$root=dbde($cnf['srv3_l']);$srv_l=dbde($cnf['srv3_l']);$srv_p=dbde($cnf['srv3_p']);$srv=dbde($cnf['srv3']);}elseif($cnf['save']=='4'){$root=dbde($cnf['srv4_l']);$srv_l=dbde($cnf['srv4_l']);$srv_p=dbde($cnf['srv4_p']);$srv=dbde($cnf['srv4']);}

$preset=$prest['preset'];

$disk=$prest['mb'];

$domain=dbde($user['login']).'.'.dbde($cnf['domreg']);

file_get_contents("https://".$srv.":1500/manager/ispmgr?func=user.edit&authinfo=".$srv_l.":".$srv_p."&out=text&name=".dbde($user['login'])."&fullname=CLIENT&preset=".dbde($preset)."&sok=ok&passwd=".$psswd."&disklimit=".$disk."&phpmod=on&domain=".$domain."&ip=".$srv."&confirm=".$psswd."&owner=".$root."";





$pdo->exec("UPDATE`users`SET`mact`='2',`login_isp`='".dbde($user['login'])."',`pass_isp`='$psswd',`domreg`='".$cnf['domreg']."',`srv`='".dben($srv)."'WHERE`id`='".$user['id']."'";

header('location: /');

}elseif($user['money']<$trc and $user['mact']=='1'){



echo '<div class=title><b><font color="red"><div class=link><img src="/style/gruzon/img/err5.png" width="30" heigth="30"/><span>Ваш аккаунт не активирован!</span><br/>Для активации пополните баланс на '.$trc.'рублей</font></b></div></div>';

}



if($user['mact']==2){$domain=dbde($user['login']).'.'.dbde($user['domreg']);

file_get_contents("https://".dbde($user['srv']).":1500/manager/ispmgr?authinfo=".urlencode($user['login_isp']).":".urlencode($user['pass_isp'])."&func=wwwdomain.edit&elid=".$domain."&admin=".urlencode(dbde($user['mail']))."&charset=utf-8&ip=".urlencode(dbde($user['srv']))."&php=phpmod&sok=yes&domain=".urlencode($domain)."&alias=www.".$domain."&out=text";

$pdo->exec("UPDATE`users`SET`mact`='3'WHERE`id`='$user[id]'";

}



//---//

?>

Редактируй
if($user['mact']=='2' and $_SERVER['SCRIPT_NAME']!='/index.php' and $_SERVER['SCRIPT_NAME']!='/' and $_SERVER['SCRIPT_NAME']!='/setting.php'){header('location: /');}