<?php

/*

////////////////////////////////////////////////////////////////////////////////

// JohnCMS                                                                    //

// Официальный сайт сайт проекта:      http://johncms.com                     //

// Дополнительный сайт поддержки:      http://gazenwagen.com                  //

////////////////////////////////////////////////////////////////////////////////

// JohnCMS core team:                                                         //

// Евгений Рябинин aka john77          john77@johncms.com                     //

// Олег Касьянов aka AlkatraZ          alkatraz@johncms.com                   //

//                                                                            //

// Информацию о версиях смотрите в прилагаемом файле version.txt              //

////////////////////////////////////////////////////////////////////////////////

*/

defined('_IN_JOHNCMS') or die('Error: restricted access');

if($id) {

$query = mysql_query("SELECT * FROM `cms_news` WHERE `id`='$id' LIMIT 1;");

if (mysql_num_rows($query)) {

$res1 = mysql_fetch_assoc($query);

if(empty($_SESSION['error']))

$_SESSION['error'] = '';

require_once('../incfiles/head.php');



$com = isset($_REQUEST) ? abs(intval($_REQUEST['com'])) : '';



switch($mod) {

case 'javob':

    $q = mysql_query("SELECT * FROM `cms_news_comments` WHERE `id`='$com' LIMIT 1;");

    if (mysql_num_rows($q)) {

        $r = mysql_fetch_assoc($q);

        $muallif = mysql_fetch_assoc(mysql_query("SELECT * FROM `users` WHERE `id` = '{$r['user_id']}'"));

        if(isset($_POST['submit'])) {

            $text = isset($_POST['text']) ? trim($_POST['text']) : '';

            $error = array();

            if(!$text)

                $eror[] = $lng_news['message_not_empty'] . '!';

            elseif (mb_strlen($text) < 4 || mb_strlen($text) > 5000)

                $eror[] = $lng_news['message_long_error'] . '!';

                $flood = functions::antiflood();

            if($flood)

            $eror[] = $lng['error_flood'] . ' ' . $flood . $lng['sec'];

$textl = $lng['news'] . ' | ' . $lng_news['comments_on_news'] . ' "' . htmlentities($res1['imname'], ENT_QUOTES, 'UTF-8') . '"';

 

            if(empty($eror)) {

$lo = ''.$muallif['imname'].', ';

                mysql_query("INSERT INTO `cms_news_comments` SET

                    `refid` = '$id',

                    `time` = '" . time() . "',

                    `user_id` = '" . $user_id . "',

                    `text` = '" . mysql_real_escape_string($lo.$text) . "';

                ");

 

$name = '[url=' . $home . '/users/profile.php?user=' . $user_id . ']' . $ism . '[/url]';

$qayer = '[url=' . $home . '/news/index.php?act=view&id=' . $id . ']bu yerda[/url]';





 

                mysql_query("UPDATE `users` SET

                `lastpost` = '" . time() . "'

                WHERE `id` = '$user_id'

                ");

            } else {

                $_SESSION['eror'] = '<div class="rmenu">' . implode('<br />', $eror) . '</div>';

            }

 

                Header('Location: index.php?act=view&id=' . $id. '#comm');



            exit;

        } // submit

        echo $_SESSION['error'] . '

        <div class="phdr"><b>Javob yozish</b></div>

        <div class="menu">

        <form action="../news/index.php?act=comments&mod=javob&id=' . $id . '&com=' . $com . '" method="post"  enctype="multipart/form-data"><div>

        Xabar matni (max 500):<br/>

        <textarea rows="3" name="text"> </textarea>

        <br />

        <input type="submit" name="submit" value="' . $lng['reply'] . '"/>

        </div></form>

        </div>';

 

            $link = 'index.php?act=view&id=' . $id. '#comm';



        echo '<div class="phdr"><a href="'.$link.'">Qaytish</a></div>';

    } else {

        echo functions::display_error($lng_news['message_does_not_exist'] . '!');

    } 

break;







case 'delete':

if($rights >= 7) {

$q = mysql_query("SELECT * FROM `cms_news_comments` WHERE `id`='$com' LIMIT 1;");

if (mysql_num_rows($q)) {

if(isset($_POST['submit'])) {

mysql_query("DELETE FROM `cms_news_comments` WHERE `id`='$com'");

$_SESSION['error'] = '<div class="gmenu">' . $lng_news['message_deleted'] . '</div>';

Header('Location: index.php?act=comments&id=' . $id);

exit;

}

echo $_SESSION['error'] . '<div class="rmenu">

<form action="index.php?act=comments&amp;mod=delete&amp;id=' . $id . '&amp;com=' . $com . '" method="post"  enctype="multipart/form-data"><div>

' . $lng_news['confirm_the_deletion'] . '<br />

<input type="submit" name="submit" value="' . $lng['delete'] . '"/>

</div></form>

</div>';

} else {

echo functions::display_error($lng_news['message_does_not_exist'] . '!');

}

} else {

Header('Location: ../?err');

exit;

}

break;



case 'yoqdi':

        $q = mysql_fetch_assoc(mysql_query("SELECT * FROM `cms_news_comments` WHERE `id`='$com' LIMIT 1;"));

        if ($q['ovoz_berdi_id'] != $user_id) {

            $_SESSION['id'] = $id;

            mysql_query('UPDATE `cms_news_comments` SET  `yoqdi`="' . ($q['yoqdi'] ? ++$q['yoqdi'] : 1) . '"  WHERE `id`=' . $com);

            mysql_query('UPDATE `cms_news_comments` SET  `ovoz_berdi_id`="' .$user_id. '"  WHERE `id`=' . $com);

echo '<div class="gmenu">Like bosdingiz. <a href="../news/index.php?act=view&id=' . $id. '#comments">Yangilikga qaytish</a></div>';

        } else {

echo '<div class="gmenu">Siz oldin <b>Like</b> bosgansiz.  <a href="../news/index.php?act=view&id=' . $id. '#comments">Yangilikga qaytish</a></div>';

        }

        //Header('Location: ../news/index.php?act=view&id=' . $id);

break;

case 'yoqmadi':

        $q = mysql_fetch_assoc(mysql_query("SELECT * FROM `cms_news_comments` WHERE `id`='$com' LIMIT 1;"));

        if ($q['ovoz_berdi_id'] != $user_id) {

        $_SESSION['id'] = $id;

        mysql_query('UPDATE `cms_news_comments` SET  `yoqmadi`="' . ($q['yoqmadi'] ? ++$q['yoqmadi'] : 1) . '"  WHERE `id`=' . $com);

        echo '<div class="gmenu"Izohga <b>Salbiy</b> ovoz berdingiz. <a href="../news/index.php?act=view&id=' . $id. '#comments">Yangilikga qaytish</a></div>';

        mysql_query('UPDATE `cms_news_comments` SET  `ovoz_berdi_id`="' .$user_id. '"  WHERE `id`=' . $com);

        } else {

            echo '<div class="gmenu">Siz bu postga  <b>Salbiy</b> ovoz bergansiz.  <a href="../news/index.php?act=view&id=' . $id. '#comments">Yangilikga qaytish</a></div>';

        }

        //Header('Location: ../news/index.php?act=view&id=' . $id);

break;



default:

if($user_id && empty($ban[1]) ) {

if(isset($_POST['submit'])) {

$text = isset($_POST['text']) ? trim($_POST['text']) : '';

$error = array();

if(!$text)

$error[] = $lng_news['message_not_empty'] . '!';

elseif (mb_strlen($text) < 4 || mb_strlen($text) > 5000)

$error[] = $lng_news['message_long_error'] . '!';

$flood = functions::antiflood();

if($flood)

$error[] = $lng['error_flood'] . ' ' . $flood . $lng['sec'];



if(empty($error)) {

mysql_query("INSERT INTO `cms_news_comments` SET

`refid` = '$id',

`time` = '" . time() . "',

`user_id` = '" . $user_id . "',

`text` = '" . mysql_real_escape_string($text) . "';");

mysql_query("UPDATE `users` SET

`lastpost` = '" . time() . "'

WHERE `id` = '$user_id'

");

$_SESSION['error'] = '<div class="gmenu">' . $lng_news['added_message'] . '</div>';

} else {

$_SESSION['error'] = '<div class="rmenu">' . implode('<br />', $error) . '</div>';

}

Header('Location: index.php?act=view&id=' . $id);



exit;

}

echo $_SESSION['error'] . '<div class="phdr"><b>Izoh qoldirish</b></div><div class="menu1">



<form action="index.php?act=comments&amp;id=' . $id . '" method="post"  enctype="multipart/form-data"><div>

<p>Matn:<font color="red"> *</font></p>

<p><textarea rows="3" name="text">' . (!empty($_POST['text']) ? htmlentities($_POST['text'], ENT_QUOTES, 'UTF-8') : '') . '</textarea></p>

<input type="submit" name="submit" value="' . $lng['sent'] . '"/> – <a href="/news/index.php?act=view&id=' . $id . '">Yangilash</a>

</div></form>

</div>';

echo '<div class="phdr"><b>Fikrlar</b></div>';

}

$total = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_news_comments` WHERE `refid`='$id';"), 0);

if($total) {

if ($total > $kmess)

echo '<div class="topmenu">' . functions::display_pagination('index.php?act=view&amp;id=' . $id . '&amp;', $start, $total, $kmess) . '</div>';

$i = 1;

$req = mysql_query("SELECT `cms_news_comments`.*, `cms_news_comments`.`time` as `mtime`, `cms_news_comments`.`id` as `mid`, `users`.* FROM `cms_news_comments` LEFT JOIN `users` ON `cms_news_comments`.`user_id`=`users`.`id` WHERE `cms_news_comments`.`refid`='$id' ORDER BY `cms_news_comments`.`time` DESC LIMIT "

. $start . "," . $kmess);

while (($row = mysql_fetch_assoc($req)) !== false) {

echo '<div class="menu1">';

$post = $row['text'];

$post = functions::checkout($post, 1, 1);

if ($set_user['smileys'])

$post = functions::smileys($post, $row['rights'] >= 1 ? 1 : 0);

if($row['reply'])

$post .= '<div class="reply">' . functions::checkout($row['reply'], 1, 1) . '</div>';



$text = '<br/><b>' . functions::display_date($row['mtime']) . '</b><br/>';





$arg = array(

'like',

'header' => $text,

'body' => $post,

'sub' => $subtext

);

echo functions::display_user($row, $arg);

if ($user_id) {               if ($user_id == $row['user_id']) {

    

}else { 

echo '<a href="index.php?act=comments&mod=javob&id=' .$id. '&com=' . $row['mid'] . '"><font color="#000066">Javob yozish</font></a>';

}} if ($rights >= 6) { echo ' | <a href="index.php?act=comments&amp;mod=delete&amp;id=' . $id . '&amp;com=' . $row['mid'] . '"><font color="#CC0000">' . $lng['delete']. '</font></a>'; } echo '</div>';

++$i;

}

echo '<div class="phdr">' . $lng['total'] . ': ' . $total . '</div>';

if ($total > $kmess) {

echo '<div class="topmenu">' . functions::display_pagination('index.php?act=view&id=' . $id . '&amp;', $start, $total, $kmess) . '</div>';

echo '<p><form action="index.php" method="get">

<input type="hidden" name="act" value="comments"/>

<input type="hidden" name="id" value="' . $id . '"/>

<input type="text" name="page" size="2"/>

<input type="submit" value="' . $lng['to_page'] . ' &gt;&gt;"/></form></p>';

}



} else {

echo '<div class="rmenu">Hozircha hech kim izoh qoldirmagan.</div>';

}

}

} else {

$textl = $lng['news'];

require_once('../incfiles/head.php');

echo functions::display_error($lng_news['news_does_not_exist']);

}

} else {

$textl = $lng['news'];

require_once('../incfiles/head.php');

}