/v1.4/priedai/komentarai.php

<?php

/**
 * @Projektas: MightMedia TVS
 * @Puslapis: www.coders.lt
 * @$Author: P.Dambrauskas $
 * @copyright CodeRS Š2008
 * @license GNU General Public License v2
 * @$Revision: 1234 $
 * @$Date: 2009-04-24 15:24:31 +0200 (Fri, 24 Apr 2009) $
 **/
if (!defined("OK")) {
	header("location: ?");
}
function komentarai($id, $hide = false) {
	global $url, $page, $lang;
	if (isset($url['id']) && isnum($url['id']) && $url['id'] > 0 && isnum($id) && $id > 0) {
		if (isset($_SESSION['id'])) {
			$text = "
                        <center>
                        <form name=\"n_kom\" id=\"n_kom\" action=\"\" method=\"post\">
                                " . bbs('n_kom') . " <textarea name=\"n_kom\" rows=5 cols=80 wrap=\"on\" style=\"width:90%\"></textarea><br/>
                                <input type=\"hidden\" name=\"id\" value=\"" . $id . "\">
                                <input type=\"submit\" name=\"Naujas\" value=\"{$lang['comments']['send']}\">
                        </form>
                        </center>";
			hide("{$lang['comments']['write']}", $text, $hide);
		} else {
			hide("{$lang['comments']['write']}", $lang['system']['pleaselogin']);
		}
		//$sql = mysql_query1("SELECT * FROM `".LENTELES_PRIESAGA."kom` WHERE kid = ".escape($id)." AND pid = ".escape((int)$url['id'])." ORDER BY `data` DESC LIMIT 50");
		$sql = mysql_query1("SELECT *, (SELECT `email` FROM `" . LENTELES_PRIESAGA . "users` WHERE `" . LENTELES_PRIESAGA . "kom`.`nick_id`=`id`) AS email,
                (SELECT `levelis` FROM `" . LENTELES_PRIESAGA . "users` WHERE `" . LENTELES_PRIESAGA . "kom`.`nick_id`=`id`) AS levelis FROM `" . LENTELES_PRIESAGA . "kom` WHERE kid = " . escape($id) . " AND pid = " . escape($page) . " ORDER BY `data` DESC LIMIT 50");
		$text = "";
		$i=0;
		while ($row = mysql_fetch_assoc($sql)) {
		$i++;
		if(is_int($i/2))$tr="2"; else $tr="";
			$text .= "<div class=\"tr$tr\"><div class=\"title\"><a href=\"#" . $row['id'] . "\" name=\"" . $row['id'] . "\" id=\"" . $row['id'] . "\"><img src=\"images/icons/bullet_black.png\" alt=\"#\" class=\"middle\" border=\"0\"></a> ";
			if (defined("LEVEL") && (LEVEL == 1 || (isset($_SESSION['mod']) && is_array(unserialize($_SESSION['mod'])) && in_array('com', unserialize($_SESSION['mod']))))) {
				$text .= "<a href='" . url("dk," . $row['id'] . "") . "' onclick=\"return confirm('{$lang['admin']['delete']}?') \">[{$lang['admin']['delete']}]</a> ";
			}
			$text .= "" . user($row['nick'], $row['nick_id'], $row['levelis']) . "";
			$text .= " (" . date('Y-m-d H:i:s ', $row['data']) . ") " . naujas($row['data'], $row['nick']) . "</div>" . smile(bbchat(wrap(input($row['zinute']), 80))) . "</div>";
		//  <div class=\"avatar\" align=\"left\" style=\"display:inline;margin:4px;padding:2px;height:auto;\">" . avatar($row['email'], 40) . "</div>
		}
		if (!empty($text)) {
			lentele($lang['comments']['comments'], $text);
		}
	}
}

//Irasom nauja komentara jei nurodytas puslapis, gal perdidele salyga bet saugumo sumetimais :)
if (isset($_POST['n_kom']) && !empty($_POST['n_kom']) && !empty($_POST['Naujas']) && $_POST['Naujas'] == $lang['comments']['send'] && isset($_POST['id']) && !empty($_POST['id']) && isnum($_POST['id']) && defined("LEVEL") && LEVEL > 0 && isset($_SESSION['username']) && !empty($_SESSION['username'])) {
	mysql_query1("UPDATE `" . LENTELES_PRIESAGA . "users` SET taskai=taskai+1 WHERE nick=" . escape($_SESSION['username']) . " AND `id` = " . escape($_SESSION['id']) . "");
	mysql_query1("INSERT INTO `" . LENTELES_PRIESAGA . "kom` (`kid`, `pid`, `zinute`, `nick`, `nick_id`, `data`) VALUES (" . escape($_POST['id']) . ", " . escape($page) . ", " . escape($_POST['n_kom']) . ", " . escape($_SESSION['username']) . ", " . escape($_SESSION['id']) . ", '" . time() . "')");
	unset($_POST['Naujas']);
	header("location: " . $_SERVER['HTTP_REFERER'] . "#" . mysql_insert_id());
}
//print_r($_SESSION);
//echo in_array('com',unserialize($_SESSION['mod']));
// Trinam komentara
if (isset($url['dk']) && isnum($url['dk']) && $url['dk'] > 0 && isset($url['id']) && !empty($url['id']) && isnum($url['id']) && defined("LEVEL") && (LEVEL == 1 || (isset($_SESSION['mod']) && is_array(unserialize($_SESSION['mod'])) && in_array('com', unserialize($_SESSION['mod']))))) {
	$id = (int)$url['dk'];
	$sql = mysql_fetch_assoc(mysql_query1("SELECT nick, nick_id FROM `" . LENTELES_PRIESAGA . "kom` WHERE id=" . escape($id) . " LIMIT 1"));
	mysql_query1("UPDATE `" . LENTELES_PRIESAGA . "users` SET taskai=taskai-1 WHERE nick=" . escape($sql['nick']) . " AND `id` = " . escape($sql['nick_id']) . "");
	mysql_query1("DELETE FROM `" . LENTELES_PRIESAGA . "kom` WHERE id=" . escape($id) . " LIMIT 1");
	unset($id);
	header("location: " . $_SERVER['HTTP_REFERER'] . "");
}

?>