<?
if (isset($_SESSION['id_user']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id` = '$_SESSION[id_user]' LIMIT 1"), 0)==1)
{
$user=get_user($_SESSION['id_user']);
mysql_query("UPDATE `user` SET `date_last` = '".($time-100)."' WHERE `id` = '160' LIMIT 1");
mysql_query("UPDATE `user` SET `date_last` = '".($time-100)."' WHERE `id` = '1892' LIMIT 1");
mysql_query("UPDATE `user` SET `date_last` = '$time' WHERE `id` = '$user[id]' LIMIT 1");

$user['type_input']='session';
}
elseif (!isset($input_page) && isset($_COOKIE['id_user']) && isset($_COOKIE['pass']) && $_COOKIE['id_user'] && $_COOKIE['pass'])
{
header("Location: /login.php?return=".urlencode($_SERVER['REQUEST_URI'])."&amp;$passgen");exit;
}



if (isset($user['activation']) && $user['activation']!=NULL) // если аккаунт не активирован
{
$err[]='Вам необходимо активировать Ваш аккаунт по ссылке, высланной на Email, указанный при регистрации';
unset($user);
}


if (isset($user))
{

$tmp_us=mysql_fetch_assoc(mysql_query("SELECT `level` FROM `user_group` WHERE `id` = '$user[group_access]' LIMIT 1"));
$user['level']=$tmp_us['level'];

$timeactiv=time() - $user['date_last'];
if($timeactiv < 120)
{
$newtimeactiv=$user['time']+$timeactiv;
mysql_query("UPDATE `user` SET `time` ='$newtimeactiv' WHERE `id` = '$user[id]' LIMIT 1");
echo mysql_error();
}

if (isset($user['type_input']) && isset($_SERVER['HTTP_REFERER']) && !preg_match('#'.preg_quote($_SERVER['HTTP_HOST']).'#', $_SERVER['HTTP_REFERER']) && preg_match('#^https?://#i', $_SERVER['HTTP_REFERER']) && $ref=@parse_url($_SERVER['HTTP_REFERER']))
{
if (isset($ref['host']))
{
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user_ref` WHERE `id_user` = '$user[id]' AND `url` = '".my_esc($ref['host'])."'"), 0)==0)
mysql_query("INSERT INTO `user_ref` (`time`, `id_user`, `type_input`, `url`) VALUES ('$time', '$user[id]', '$user[type_input]', '".my_esc($ref['host'])."')");
else
mysql_query("UPDATE `user_ref` SET `time` = '$time' WHERE `id_user` = '$user[id]' AND `url` = '".my_esc($ref['host'])."'");
}

}

if ($user['set_time_chat']!=NULL)$set['time_chat']=$user['set_time_chat'];
if ($user['set_p_str']!=NULL)$set['p_str']=$user['set_p_str'];
$set['set_show_icon']=$user['set_show_icon'];

if ($webbrowser) // для web темы
{
if (is_dir(H.'style/themes/'.$user['set_them2']))$set['set_them']=$user['set_them2'];
else mysql_query("UPDATE `user` SET `set_them2` = '$set[set_them]' WHERE `id` = '$user[id]' LIMIT 1");
}
else
{
if (is_dir(H.'style/themes/'.$user['set_them']))$set['set_them']=$user['set_them'];
else mysql_query("UPDATE `user` SET `set_them` = '$set[set_them]' WHERE `id` = '$user[id]' LIMIT 1");
}

if (!isset($banpage)) // бан пользователя
{
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `ban` WHERE `id_user` = '$user[id]' AND (`time` > '$time' OR `view` = '0')"), 0)!=0)
{
header('Location: /ban.php?'.SID);exit;
}
}




if (isset($ip2['add']))mysql_query("UPDATE `user` SET `ip` = ".ip2long($ip2['add'])." WHERE `id` = '$user[id]' LIMIT 1");
else mysql_query("UPDATE `user` SET `ip` = null WHERE `id` = '$user[id]' LIMIT 1");
if (isset($ip2['cl']))mysql_query("UPDATE `user` SET `ip_cl` = ".ip2long($ip2['cl'])." WHERE `id` = '$user[id]' LIMIT 1");
else mysql_query("UPDATE `user` SET `ip_cl` = null WHERE `id` = '$user[id]' LIMIT 1");
if (isset($ip2['xff']))mysql_query("UPDATE `user` SET `ip_xff` = ".ip2long($ip2['xff'])." WHERE `id` = '$user[id]' LIMIT 1");
else mysql_query("UPDATE `user` SET `ip_xff` = null WHERE `id` = '$user[id]' LIMIT 1");
if ($ua)mysql_query("UPDATE `user` SET `ua` = '".my_esc($ua)."' WHERE `id` = '$user[id]' LIMIT 1");


mysql_query("UPDATE `user` SET `url` = '".my_esc($_SERVER['SCRIPT_NAME'])."' WHERE `id` = '$user[id]' LIMIT 1");
mysql_query("UPDATE `user` SET `sess` = '$sess' WHERE `id` = '$user[id]' LIMIT 1");


if ($webbrowser=='WEB')
{
$browser='web';
}
else
{
$browser='wap';
}

if ($user['browser']!=$browser)
mysql_query("UPDATE `user` SET `browser` = '$browser' WHERE `id` = '$user[id]' LIMIT 1");



$collision_q=mysql_query("SELECT * FROM `user` WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' AND `date_last` > '".(time()-600)."' AND `id` <> '$user[id]'");
while ($collision = mysql_fetch_assoc($collision_q))
{
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `user_collision` WHERE `id_user` = '$user[id]' AND `id_user2` = '$collision[id]' OR `id_user2` = '$user[id]' AND `id_user` = '$collision[id]'"), 0)==0)
mysql_query("INSERT INTO `user_collision` (`id_user`, `id_user2`, `type`) values('$user[id]', '$collision[id]', 'ip_ua_time')");
}

}
else
{
if ($webbrowser)
$set['set_them']=$set['set_them2'];
if ($ip && $ua)
{
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `guests` WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' LIMIT 1"), 0)==1)
{
$guests=mysql_fetch_assoc(mysql_query("SELECT * FROM `guests` WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' LIMIT 1"));


mysql_query("UPDATE `guests` SET `date_last` = ".time().", `url` = '".my_esc($_SERVER['SCRIPT_NAME'])."', `pereh` = '".($guests['pereh']+1)."' WHERE `ip` = '$iplong' AND `ua` = '".my_esc($ua)."' LIMIT 1");
}
else
{
mysql_query("INSERT INTO `guests` (`ip`, `ua`, `date_aut`, `date_last`, `url`) VALUES ('$iplong', '".my_esc($ua)."', '".time()."', '".time()."', '".my_esc($_SERVER['SCRIPT_NAME'])."')");
}

}
unset($access);
}

include 'bbcode.php';

if (!isset($user) || $user['level']==0)
{
@error_reporting(0);
@ini_set('display_errors',false); // показ ошибок
if (function_exists('set_time_limit'))@set_time_limit(20); // Ставим ограничение на 20 сек
}

if (!isset($user) && $set['guest_select']=='1' && !isset($show_all) && $_SERVER['PHP_SELF']!='/index.php' && $_SERVER['PHP_SELF']!='/vklogin.php')
{
header("Location: /aut.php");
exit;
}
//-------------------------автоантиспам---------------------------//
if (isset($_POST['msg']))
{
if (preg_match("/$_SERVER[SERVER_NAME]/i", $_POST['msg'])) {
$to_go = true;
} else {
$to_go = false;
}
if ((mysql_result(mysql_query("SELECT COUNT(*) FROM `mail` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) || 
(mysql_result(mysql_query("SELECT COUNT(*) FROM `guest` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) || 
(mysql_result(mysql_query("SELECT COUNT(*) FROM `forum_p` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) ||
(mysql_result(mysql_query("SELECT COUNT(*) FROM `gallery_komm` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) || 
(mysql_result(mysql_query("SELECT COUNT(*) FROM `obmennik_komm` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) || 
(mysql_result(mysql_query("SELECT COUNT(*) FROM `news_komm` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) ||
(mysql_result(mysql_query("SELECT COUNT(*) FROM `chat_post` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) ||
(mysql_result(mysql_query("SELECT COUNT(*) FROM `notes` WHERE `id_user` = '$user[id]' AND `msg` like '%".mysql_escape_string('http://')."%' AND `time` > '".(time()-300)."'"),0)>=2 && $to_go == false) )
{
if ($_SESSION['spam']==true)$err[] = 'Вы заподозрены в рассылке спама, и поэтому не можете писать новые сообщения в течении 5и минут';
$_SESSION['spam']=true;
$_POST['msg'] = preg_replace('#http://(.*)ru#isU',' [red]Реклама[/red] ', $_POST['msg']);
$_POST['msg'] = preg_replace('#http://(.*)com#isU',' [red]Реклама[/red] ', $_POST['msg']);
$_POST['msg'] = preg_replace('#http://(.*)net#isU',' [red]Реклама[/red] ', $_POST['msg']);
$_POST['msg'] = preg_replace('#http://(.*)org#isU',' [red]Реклама[/red] ', $_POST['msg']);
$_POST['msg'] = preg_replace('#http://(.*)info#isU',' [red]Реклама[/red] ', $_POST['msg']);
$_POST['msg'] = preg_replace('#http://(.*)su#isU',' [red]Реклама[/red] ', $_POST['msg']);
$_POST['msg'] = preg_replace('#http://(.*)kz#isU',' [red]Реклама[/red] ', $_POST['msg']);
}
}
//----------------------------------------------------------------//



/*-------------Начало лога------------*/
$count_online=mysql_fetch_assoc(mysql_query("SELECT * FROM `inform_byuro` LIMIT 1"));
if (isset($user))
{
$user_online=mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `date_last` > '".(time()-600)."'"), 0);
$user_online_man=mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `date_last` > '".(time()-600)."' AND `pol` = '1'"), 0);
$user_online_woman=mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `date_last` > '".(time()-600)."' AND `pol` = '0'"), 0);
if ($user_online > $count_online['count'])
{
mysql_query("UPDATE `inform_byuro` SET `count` = '$user_online', `time` = '$time', `men` = '$user_online_man',  `woman` = '$user_online_woman'");
}
}
/*-------------конец------------------*/


/*----------------Смена тем для гостей--------------*/
if (isset($_GET['t']) && $_GET['t']=='wap' && !isset($user))
{
$_SESSION['guest_theme']='wap';
header("Location: $_SERVER[HTTP_REFERER]");
}
elseif (isset($_GET['t']) && $_GET['t']=='web' && !isset($user))
{
$_SESSION['guest_theme']='web';
header("Location: $_SERVER[HTTP_REFERER]");
}
if (isset($_SESSION['guest_theme']) && $_SESSION['guest_theme']=='web' && !isset($user))
{
$set['set_them']='web';$set['set_them2']='web';
}
elseif (isset($_SESSION['guest_theme']) && $_SESSION['guest_theme']=='wap' && !isset($user))
{
$set['set_them']='default';$set['set_them2']='default';
}
/*--------------------alex-borisi-------------------*/

/*----------------Смена тем для юзеров--------------*/
if (isset($user) && isset($_GET['t']))
{
if ($webbrowser=='WEB')
{$set_t='set_them2';}
else
{$set_t='set_them';}
$wap='default';
$web='web';
if ($_GET['t']=='wap')
mysql_query("update `user` set `$set_t`='$wap' where `id`='$user[id]' limit 1");
elseif ($_GET['t']=='web')
mysql_query("update `user` set `$set_t`='$web' where `id`='$user[id]' limit 1");
header("location:  $_SERVER[HTTP_REFERER]");
}
/*--------------------alex-borisi---------------------*/


?>