LoGoN, отредактировал

[code]$l=ereg_replace(\"\\.{2,}\",NULL,esc(urldecode($_GET[\'d\'])));
$l=ereg_replace(\"\\./|/\\.\",NULL,$l);
$l=ereg_replace(\"(/){1,}\",\"/\",$l);
$l=\'/\'.ereg_replace(\"(^(/){1,})|((/){1,}$)\",\"\",$l);
}
else
{
$l=\'/\';
}

if ($l==\'/\')
{
$dir_id[\'upload\']=0;
$id_dir=0;
$l=\'/\';
}

elseif (mysql_result(mysql_query(\"SELECT COUNT(*) FROM `obmennik_dir` WHERE `dir` = \'/$l\' OR `dir` = \'$l/\' OR `dir` = \'$l\' LIMIT 1\",0)!=0)
{
$dir_id=mysql_fetch_assoc(mysql_query(\"SELECT * FROM `obmennik_dir` WHERE `dir` = \'/$l\' OR `dir` = \'$l/\' OR `dir` = \'$l\' LIMIT 1\");
$id_dir=$dir_id[\'id\'];
}
else
{
$dir_id[\'upload\']=0;
$id_dir=0;
$l=\'/\';[/code]