<?
$new=mysql_fetch_array(mysql_query("SELECT * FROM `news` WHERE `id` = '".intval($_GET['new'])."' LIMIT 1"));
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `news` WHERE `id` = '$new[id]' LIMIT 1",$db), 0)==0){header("Location: ?".SID);exit;}
$set['title']='Новости "'.htmlspecialchars($new['title']).'"';
include_once '../../sys/inc/thead.php';

if(isset($_GET['rating']) && isset($user))
{
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `news_rating` WHERE `id_news` = '$new[id]' AND `id_user` = '$user[id]'"),0)==0)
{
if($_GET['rating']=='plus')
{
mysql_query("INSERT INTO `news_rating` SET `id_news` = '$new[id]', `id_user` = '$user[id]', `rating` = '1'");
mysql_query("UPDATE `news` SET `rating` = '".($new['rating']+1)."' WHERE `id` = '$new[id]'");
$new['rating']=$new['rating']+1;
msg("Ваш отзыв принят");
}
elseif($_GET['rating']=='minus')
{
mysql_query("INSERT INTO `news_rating` SET `id_news` = '$new[id]', `id_user` = '$user[id]', `rating` = '-1'");
mysql_query("UPDATE `news` SET `rating` = '".($new['rating']-1)."' WHERE `id` = '$new[id]'");
$new['rating']=$new['rating']-1;
msg("Ваш отзыв принят");
}
else $err[]='Неверная оценка';
}
else $err[]='Вы уже отдали свой голос';
}
if (isset($_POST['msg']) && isset($user) && $new['close']==0)
{
$msg=$_POST['msg'];
if (isset($_POST['translit']) && $_POST['translit']==1)$msg=translit($msg);

$mat=antimat($msg);
if ($mat)$err[]='В тексте сообщения обнаружен мат: '.$mat;

if (strlen2($msg)>1024){$err='Сообщение слишком длинное';}
if (strlen2($msg)<2){$err='Короткое сообщение';}
if (mysql_result(mysql_query("SELECT COUNT(*) FROM `news_komm` WHERE `id_news` = '$new[id]' AND `id_user` = '$user[id]' AND `msg` = '".my_esc($msg)."' LIMIT 1"),0)!=0){$err='Ваше сообщение повторяет предыдущее';}
if(!isset($err))
{
mysql_query("INSERT INTO `news_komm` (`id_user`, `time`, `msg`, `id_news`) values('$user[id]', '$time', '".my_esc($msg)."', '$new[id]')");
msg('Ваш комментарий успешно принят');
}
}
if (isset($_GET['del']) && mysql_result(mysql_query("SELECT COUNT(*) FROM `news_komm` WHERE `id` = '".intval($_GET['del'])."'"),0) && isset($user) && $user['level']>2)
{
mysql_query("DELETE FROM `news_komm` WHERE `id` = '".intval($_GET['del'])."'");
msg('Комментарий успешно удален');
}
title();
aut(); // форма авторизации
err();
echo "<div class='main'>\n";
echo"<font color='darkblue'><b>\n";
echo "<img src='img/rss_big.png'/> ".htmlspecialchars($new['title'])."";
echo"</b></font>\n";
echo "<font color='green'>(".vremja($new['time']).")</font>\n";
if(isset($user) && $user['level']>2)echo "<span style='float: right; font-size: small; color: grey'><a href='?edit=$new[id]'><img src='img/edit.png'/></a> <a href='?delete=$new[id]'><img src='img/delete.png'/></a></span>";
echo"</div>\n";
echo"<div class='nav1'>\n";
if(is_file(H.'news/images/'.$new['id'].'.png'))echo "<img src='images/$new[id].png' height='100' weight='60'/><br/>";
echo output_text($new['msg'])."<br />\n";
echo"</div>\n";
if($new['close']==1)echo "<div class='err'>Новость закрыта для обсуждения</div>";
echo "<div style='padding:2px;background-color:#fff9d7;border-top:1px solid #e2c822;border-bottom:1px solid #e2c822'>\n";
$rating=$new['rating'];
echo "<img src='img/text.png'/> Комментариев: 
".mysql_result(mysql_query("SELECT COUNT(*) FROM `news_komm` WHERE `id_news` = '$new[id]'"),0)."".(isset($user)?" | 
".(mysql_result(mysql_query("SELECT COUNT(*) FROM `news_rating` WHERE `id_news` = '$new[id]' AND `id_user` = '$user[id]'"),0)!=0?"Общая оценка: 
<img src='img/rating".($rating<0?"_minus":null)."".($rating>0?"_plus":null).".png'/> $rating":"  [<a href='?new=$new[id]&rating=plus'><img src='/style/icons/like.gif'/> Мне нравится</a>] [<a href='?new=$new[id]&rating=minus'>
<img src='/style/icons/dlike.gif'/></a>]")."":null)."\n";
echo"</div>\n";
echo "</div>\n";
$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `news_komm` WHERE `id_news` = '".intval($_GET['new'])."'"),0);
$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
$q=mysql_query("SELECT * FROM `news_komm` WHERE `id_news` = '".intval($_GET['new'])."' ORDER BY `id` DESC LIMIT $start, $set[p_str]");
if ($k_post==0)
{
echo "   <tr>\n";
echo "  <td class='p_t'>\n";
echo "Нет комментариев\n";
echo "  </td>\n";
echo "   </tr>\n";
}
while ($post = mysql_fetch_assoc($q))
{
$ank=get_user($post['id_user']);

if($num==1){
echo "<div class='nav1'>";
$num=0;
}else{
echo "<div class='nav2'>";
$num=1;}
echo "  ".group($ank['id'])." <a href='/info.php?id=$ank[id]'>" . GradientText("$ank[nick]", "$ank[ncolor]", "$ank[ncolor2]") . "</a>";
if(isset($user) && $new['close']==0)echo " <a href='?new_komm=$post[id]'>[*]</a>";
echo " ".medal($ank['id'])." ".online($ank['id'])." ";
echo "<font color='green'>(".vremja($post['time']).")</font><br/>\n";
if ($post['otvet']!=0 && mysql_result(mysql_query("SELECT COUNT(*) FROM `user` WHERE `id`='$post[otvet]'"),0)!=0)$otvet=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id`='$post[otvet]'"));

if (isset($otvet))echo"$otvet[nick], ";
echo output_text($post['msg'])."\n";
echo "<div style='text-align:right;'>";
if(isset($user) && $user['level']>2 || $user['id']==$post['id_user'] && $post['time']>time()-600)echo "<a href='?edit_komm=$post[id]' style='color:green'>[<img src='/style/icons/edit.gif' />]</a>";
if(isset($user) && $user['level']>2)echo " <a href='?new=$new[id]&del=$post[id]'>[<img src='/style/icons/delete.gif' />]</a>";

echo "</div>";
echo "</div>";
if(isset($otvet))unset($otvet);
}
if ($k_page>1)str("?new=$new[id]&",$k_page,$page); // Вывод страниц
if (isset($user) && $new['close']==0)
{
echo "<form method=\"post\" name='message' action=\"?new=".intval($_GET['new'])."&amp;page=$page\">\n";
if ($set['web'] && is_file(H.'style/themes/'.$set['set_them'].'/altername_post_form.php'))
include_once H.'style/themes/'.$set['set_them'].'/altername_post_form.php';
else
echo "Сообщение:<br />\n<textarea name=\"msg\"></textarea><br />\n";
if ($user['set_translit']==1)echo "<label><input type=\"checkbox\" name=\"translit\" value=\"1\" /> Транслит</label><br />\n";
echo "<input value=\"Отправить\" type=\"submit\" />\n";
echo "</form>\n";
}
echo "<div class='foot'><img src='img/back.png' /> <a href='?'>К новостям</a></div>\n";
include_once '../../sys/inc/tfoot.php';
?>