include './system/common.php';
include './system/functions.php';
include './system/user.php';
if(!$user) {
header('location: /');
exit;}
$id = _string(_num($_GET['id']));
if($id) {
$ho = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id` = \''.$id.'\''));
if(!$ho OR $id == $user['id']) {
header('location: /mail/');
exit;}
if(isset($_GET['gift'])){//Если отправляем подарок
$title = 'Подарок для '.$ho['login'];
}else{
$title = 'Диалог с '.$ho['login'];
}
include './system/h.php';
$_s = 1;
$text = _string($_POST['text']);
if(isset($_REQUEST['text'])) {
$antiflood = mysql_fetch_array(mysql_query('SELECT * FROM `mail` WHERE `from` = \''.$user['id'].'\' ORDER BY `time` DESC LIMIT 1'));
if(!isset($_GET['gift'])){
if(empty($text) or mb_strlen($text,'UTF-8') < 1){
header('Location: /mail/'.$ho['id'].'');
$_SESSION['mes'] = mes('Пустое сообщение!');
exit;}
if(time() - $antiflood['time'] < 0){
header('Location: /mail/'.$ho['r'].'');
$_SESSION['mes'] = mes('Нельзя писать так часто!');
exit;}
}
$text = eregi_replace( "[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]", "*", $text);
$arrReplace = array('.ru',
'.net',
'.com',
'.рф',
'.tk',
'.su',
'.us',
'.keo', 'http', 'www', 'пробелов', 'ебал', 'чмо', 'пидар', 'сука',
'.mobi',
'.ua',
'хочешь себе такую игру', 'админ лох', 'заходи на сайт', 'ссылку без',
'.ru',
'http');
$size = count($arrReplace);
while($size--){
if(substr_count($text, $arrReplace[$size])){
mysql_query("INSERT INTO `mail` SET `from`='2',`to`='1',`text`=' Пользователь ".$user['login']." | ID: ".$user['id']." нарушает правила игры! Сообщение: ".$text."',`time`='".time()."'");
break;
}
}
$text = str_replace($arrReplace, '*', $text);
if(isset($_GET['gift'])){//Если отправляем подарок
$gifts=abs(intval($_GET['gift']));
$privacy = abs(intval($_POST['privacy']));
$gift = mysql_fetch_array(mysql_query('SELECT * FROM `gifts` WHERE `id` = "'.$gifts.'"'));
$text_msg='
[img=60]/images/gifts/'.$gift['img'].'.png[/img] '.$text.' ';
mysql_query('INSERT INTO `mail` (`from`, `to`, `text`,`time`) VALUES ("'.$user['id'].'", "'.$ho['id'].'", "'.$text_msg.'", "'.time().'")');
mysql_query('UPDATE `users` SET `g` = `g` - "10" WHERE `id` = "'.$user['id'].'" ');
mysql_query("INSERT INTO `gifts_user` SET `user` = '".$user['id']."', `komy` = '".$ho['id']."', `time` = '".time()."', `img` = '".$gift['img']."', `text` = '".$text."', `privacy` = '".$privacy."' ");
}else{//Простое сообщение
mysql_query('UPDATE `users` SET `s` = `s` - '.$_s.' WHERE `id` = "'.$user['id'].'" ');
mysql_query('INSERT INTO `mail` (`from`, `to`, `text`,`time`) VALUES ("'.$user['id'].'", "'.$ho['id'].'", "'.$text.'", "'.time().'")');
}
if(mysql_result(mysql_query('SELECT COUNT(*) FROM `contacts` WHERE `ho` = "'.$user['id'].'" AND `user` = "'.$ho['id'].'"'),0) == 0) {//Проверяем есть ли контакт
if(mysql_result(mysql_query('SELECT * FROM `contacts` WHERE `ho` = "'.$user['id'].'" AND `user` = "'.$ho['id'].'" '),0) == 0) {
mysql_query('INSERT INTO `contacts` (`ho`, `user`, `time`) VALUES ("'.$user['id'].'", "'.$ho['id'].'", "'.time().'")');
}
}
if(mysql_result(mysql_query('SELECT COUNT(*) FROM `contacts` WHERE `user` = \''.$user['id'].'\' AND `ho` = \''.$ho['id'].'\''),0) == 0) {//Проверяем есть ли контакт
if(mysql_result(mysql_query('SELECT * FROM `contacts` WHERE `ho` = "'.$ho['id'].'" AND `user` = "'.$user['id'].'" '),0) == 0) {
mysql_query('INSERT INTO `contacts` (`user`, `ho`, `time`) VALUES ("'.$user['id'].'", "'.$ho['id'].'", "'.time().'")');
}
}
mysql_query('UPDATE `contacts` SET `time` = \''.time().'\' WHERE `user` = \''.$user['id'].'\' AND `ho` = \''.$ho['id'].'\'');
mysql_query('UPDATE `contacts` SET `time` = \''.time().'\' WHERE `ho` = \''.$user['id'].'\' AND `user` = \''.$ho['id'].'\'');
header('location: /mail/'.$ho['id'].'/');
if(isset($_GET['gift'])){
$_SESSION['mes'] = mes('Подарок отправлен!');
}else{
$_SESSION['mes'] = mes('Сообщение отправленно!');
}
exit;
}
echo ''.$title.'
';
echo' '.$_SESSION['mes'].' ';
$_SESSION['mes']=NULL; //Удаляем сесию
if(isset($_GET['gift'])){//Если отправляем подарок
$gifts=abs(intval($_GET['gift']));
$gift = mysql_fetch_array(mysql_query('SELECT * FROM `gifts` WHERE `id` = "'.$gifts.'"'));
$a= "?text&gifta=".$gift['img'];
echo'
';
}else{//Простое сообщение
if($ho['id']!='2'){
echo '
';
}
}
$max = 10;
$count = mysql_result(mysql_query('SELECT COUNT(*) FROM `mail` WHERE `from` = "'.$user['id'].'" AND `to` = "'.$ho['id'].'" OR `to` = "'.$user['id'].'" AND `from` = "'.$ho['id'].'"'),0);
$pages = ceil($count/$max);
$page = _string(_num($_GET['page']));
if($page > $pages) $page = $pages;
if($page < 1) $page = 1;
$start = $page * $max - $max;
if($count > 0) {
$col = array('#ffffff', '#f09060', '#90c0c0');
$q = mysql_query('SELECT * FROM `mail` WHERE `from` = \''.$user['id'].'\' AND `to` = \''.$ho['id'].'\' OR `to` = \''.$user['id'].'\' AND `from` = \''.$ho['id'].'\' ORDER BY `time` DESC LIMIT '.$start.', '.$max.'');
while($row = mysql_fetch_array($q)) {
$from = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id` = \''.$row['from'].'\''));
echo '
';
if($row['to'] == $user['id'] && $row['read'] == 0) mysql_query('UPDATE `mail` SET `read` = \'1\' WHERE `id` = \''.$row['id'].'\'');
}
echo ''.pages('/mail/'.$id.'/?').'
';
}else{
echo '
Сообщений нет
';
}
echo '
';
include './system/f.php';
}else{
$title = 'Почта';
include './system/h.php';
echo ''.$title.'
';
$max = 10;
$count = mysql_result(mysql_query('SELECT COUNT(*) FROM `contacts` WHERE `user` = \''.$user['id'].'\''),0);
$pages = ceil($count/$max);
$page = _string(_num($_GET['page']));
if($page > $pages) $page = $pages;
if($page < 1) $page = 1;
$start = $page * $max - $max;
if($count > 0) {
$q = mysql_query('SELECT * FROM `contacts` WHERE `user` = \''.$user['id'].'\' ORDER BY `time` DESC LIMIT '.$start.', '.$max.'');
while($row = mysql_fetch_array($q)) {
$ho = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id` = \''.$row['ho'].'\''));
$lost = mysql_fetch_array(mysql_query('SELECT * FROM `mail` WHERE `from` = \''.$user['id'].'\' AND `to` = \''.$row['ho'].'\' OR `to` = \''.$user['id'].'\' AND `from` = \''.$row['ho'].'\' ORDER BY `time` DESC LIMIT 1'));
echo '
'.nick($row['ho']).'
'.vremja($row['time']).' ';
$new = mysql_result(mysql_query('SELECT COUNT(*) FROM `mail` WHERE `from` = "'.$row['ho'].'" AND `to` = "'.$user['id'].'" AND `read` = "0" '),0);
if($new != 0) echo ' +'.$new.' ';
if($lost){ echo '
'.(mb_strlen(bbcode(smile($lost['text'])),'UTF-8') >= 255 ? mb_substr(bbcode(smile($lost['text'])),0, 255, 'UTF-8').'...':bbcode(smile($lost['text']))).' ';
}
echo '
';
}
echo ''.pages('/mail/?').'
';
}else{
echo '
Почта пуста
';
}
include './system/f.php';
}
?>