\n
ProEngine\n \n
\n Данный модуль неотъемлемая часть системы ProEngine и не может использоваться отдельно!\n \n"); //Защита от хакеров и воров //----------------------------------------------------------------------- ?>user_name=$MAINUSER->fio; $facebook = new Facebook(array( 'appId' => '260401370726996', 'secret' => '91106cb26aef322f44aaa2cf6a410fa4', 'cookie' => true, )); $str = str_replace("{action_form}",$this->action_form,$str); $str = str_replace("{username}",$this->user_name,$str); $str = str_replace("{error}",($MAINUSER->error)?"":"",$str); $str = str_replace("{fio}","",$str); $str = str_replace("{login}",$MAINUSER->login,$str); $str = str_replace("{avatar}",($MAINUSER->avatar)?("/templates/userpic/".$MAINUSER->avatar):"http://vk.com/images/camera_c.gif",$str); $str = str_replace("{exit}",$this->exit,$str); $str = str_replace("{lc}",$this->user_profile,$str); $str = str_replace("{fblogin}",$facebook->getLoginUrl(array('redirect_uri'=>'http://cars199.ru/index.php?id='.$PAGE->id.'&mode=authfb')),$str); $str = str_replace("{add_post}",($MAINUSER->gid==3)?"Добавить материал":"Стать автором!",$str); return $str; } public function show_module() { global $MAINUSER, $global_vars; if($MAINUSER->logined) { return MODULE_LOGIN::template(pro_readfile($global_vars['mainpatch']."templates/module_login_entered.tmp")); } else { return MODULE_LOGIN::template(pro_readfile($global_vars['mainpatch']."templates/module_login.tmp")); } } } ?>id = $this->userid; $RESUMEUSER->init(); //$this->user_name=$MAINUSER->login; //------ выводим данные самого резюме ----------- $str = str_replace("{id}",$this->id,$str); $str = str_replace("{razdel}",$this->razdel,$str); $str = str_replace("{spec}",$this->spec,$str); $str = str_replace("{zarplata}",$this->zarplata,$str); $str = str_replace("{vozrast}",$this->vozrast,$str); $str = str_replace("{obrazovaniye}",$this->obrazovaniye,$str); $str = str_replace("{vuz}",$this->vuz,$str); $str = str_replace("{navikipk}",$this->navikipk,$str); $str = str_replace("{stash}",$this->stash,$str); $str = str_replace("{comment}",$this->comment,$str); $str = str_replace("{srok}",$this->srok,$str); $str = str_replace("{userid}",$this->userid,$str); $str = str_replace("{datec}",$this->datec,$str); $str = str_replace("{contactinf}",$this->contactinf,$str); //------------------------------------------------ //------ выводим данные пользователя разместившего резюме ----------- $str = str_replace("{surname}",$RESUMEUSER->surname,$str); $str = str_replace("{name}",$RESUMEUSER->name,$str); $str = str_replace("{middlename}",$RESUMEUSER->middlename,$str); $str = str_replace("{phone}",$RESUMEUSER->phone,$str); $str = str_replace("{email}",$RESUMEUSER->email,$str); //------------------------------------------------------------------- $str = str_replace("{color}",$this->color,$str); $str = str_replace("{saved}",$this->status,$str); if($MAINUSER->id==$this->userid OR $MAINUSER->ifadmin()) { $str = str_replace("{editmy}","id&mode=edit_my_resume&mod_resume_more=$this->id\">Редактировать |",$str); } else { $str = str_replace("{editmy}","",$str); } if($MAINUSER->ifadmin()) { $str = str_replace("{deletemy}","id.",".$this->id.");\">Удалить |",$str); } else { $str = str_replace("{deletemy}","",$str); } $selected=''; $select_razdel=' '; $select_stash=' '; $str = str_replace("{page_id}",$PAGE->id,$str); $str = str_replace("{select_razdel}",$select_razdel,$str); $str = str_replace("{select_stash}",$select_stash,$str); return $str; } public function show_module() { global $MAINUSER, $PAGE, $global_vars, $DB, $mode; $more = $_GET['mod_resume_more']; if($mode=="new_my_resume") { $vivod = MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_resume_new.tmp")); return $vivod; } if($more) { $DB->query="SELECT * FROM `resume` WHERE id='$more'"; // если подробнее выводим одну // $this->tpl = file_get_contents($global_vars['mainpatch']."templates/module_job_more.tmp"); } else if($mode=="my_resume") { $DB->query="SELECT * FROM `resume` WHERE userid='$MAINUSER->id'"; // выводим свои } else if($mode=="new_save_my_resume") { if(!$global_vars['global_count_resume']) { $DB->query="INSERT INTO `resume` (razdel,spec,userid,zarplata,vozrast,obrazovaniye,vuz,navikipk,stash,comment,srok,contactinf) VALUES ('".$_POST['razdel']."','".$_POST['spec']."','".$MAINUSER->id."','".$_POST['zarplata']."','".$_POST['vozrast']."','".$_POST['obrazovaniye']."','".$_POST['vuz']."','".$_POST['navikipk']."','".$_POST['stash']."','".$_POST['comment']."','".$_POST['srok']."','".$_POST['contactinf']."')"; //втыкаем новое резюме $DB->query(); } $DB->query="SELECT * FROM `resume` ORDER by id DESC LIMIT 1"; $more=1; $global_vars['global_count_resume']++; } else if($mode=="delete_my_resume") { $DB->query="DELETE FROM `resume` WHERE id=".$_GET['iddel']; //втыкаем новое резюме $DB->query(); //die();// "

lolo

"; //удаляем резюме // goto step1; //сори бля но 4 утра мозг больше не варит так что так... блять пхп 5.2 *( $DB->query="SELECT * FROM `resume` ORDER by id"; //$vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_resume_list.tmp")); } else { if($_GET['mode']=="find") { if($_GET['razdel']=="")$_GET['razdel']=1; if($_GET['stash_ot']=="")$_GET['stash_ot']=0; if($_GET['stash_do']=="")$_GET['stash_do']=35; if($_GET['zarplata_ot']=="")$_GET['zarplata_ot']=0; if($_GET['zarplata_do']=="")$_GET['zarplata_do']=100000; $DB->query="SELECT * FROM `resume` WHERE razdel='".$_GET['razdel']."' AND stash<='".$_GET['stash_do']."' AND stash>='".$_GET['stash_ot']."' AND zarplata<='".$_GET['zarplata_do']."' AND zarplata>='".$_GET['zarplata_ot']."' ORDER by id"; //иначе весь список // echo $DB->query; } else { $DB->query="SELECT * FROM `resume` ORDER by id"; //иначе весь список } } //step1: $DB->query(); $vivod=""; $tempary=$DB->lQueryResult; $i=0; while ($massResume=mysqli_fetch_array($tempary)) { $this->id = $massResume['id']; $this->razdel = $massResume['razdel']; $this->spec = $massResume['spec']; $this->userid = $massResume['userid']; $this->zarplata = $massResume['zarplata']; $this->vozrast = $massResume['vozrast']; $this->obrazovaniye = $massResume['obrazovaniye']; $this->vuz = $massResume['vuz']; $this->navikipk = $massResume['navikipk']; $this->stash = $massResume['stash']; $this->comment = $massResume['comment']; $this->srok = $massResume['srok']; $this->datec = $massResume['datec']; $this->contactinf = $massResume['contactinf']; if($i%2==0){$this->color="bg2";} else{$this->color="bg1";} $i++; if($more) { if($mode=="edit_my_resume") { // редактируем резюме $vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_resume_edit.tmp")); } else { if($mode=="save_my_resume") { $DB->query="UPDATE `resume` SET "; //иначе весь список if($_POST['spec']!=""){$DB->query.="spec='".$_POST['spec']."'";} if($_POST['userid']!=""){$DB->query.=", userid='".$_POST['userid']."'";} if($_POST['zarplata']!=""){$DB->query.=", zarplata='".$_POST['zarplata']."'";} if($_POST['vozrast']!=""){$DB->query.=", vozrast='".$_POST['vozrast']."'";} if($_POST['obrazovaniye']!=""){$DB->query.=", obrazovaniye='".$_POST['obrazovaniye']."'";} if($_POST['vuz']!=""){$DB->query.=", vuz='".$_POST['vuz']."'";} if($_POST['navikipk']!=""){$DB->query.=", navikipk='".$_POST['navikipk']."'";} if($_POST['stash']!=""){$DB->query.=", stash='".$_POST['stash']."'";} if($_POST['comment']!=""){$DB->query.=", comment='".$_POST['comment']."'";} if($_POST['srok']!=""){$DB->query.=", srok='".$_POST['srok']."'";} if($_POST['razdel']!=""){$DB->query.=",razdel='".$_POST['razdel']."'";} if($_POST['contactinf']!=""){$DB->query.=",contactinf='".$_POST['contactinf']."'";} $DB->query.=" WHERE id='".$_GET['mod_resume_more']."'"; $this->status="Изменения сохранены."; $DB->query(); } $vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_resume_more.tmp")); } } else { if(!$this->srok){$this->srok=30;} // Разбиение строки в 3 части - date, time and AM/PM $dt_elements = explode(' ',$this->datec); // Разбиение даты $date_elements = explode('-',$dt_elements[0]); // Вычесляем срок хранения резюме или вакансии $srok_hraneniya=mktime(0,0,0, $date_elements[1],$date_elements[2], $date_elements[0])+($this->srok*24*60*60); if($srok_hraneniya >= time()) { if($i==1)$vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_resume_find.tmp")); $vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_resume_list.tmp")); } } } if($i==0) { $vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_resume_find.tmp")); $vivod.="Нечего не найдено!"; } //$edit_panel="
id."&jobmode=edit\">\"Редактировать\"
"; // \"Удалить\" //$end_edit_panel="
"; //if($MAINUSER->ifadmin()){$vivod=$edit_panel.$vivod.$end_edit_panel;} return $vivod; /* if($MAINUSER->logined) { return } else { return MODULE_LOGIN::template(pro_readfile($global_vars['mainpatch']."templates/module_login.tmp")); } */ } } ?>id = $this->userid; $VAKANSYUSER->init(); //$this->user_name=$MAINUSER->login; //------ выводим данные самой вакансии ----------- $str = str_replace("{id}",$this->id,$str); $str = str_replace("{razdel}",$this->razdel,$str); $str = str_replace("{spec}",$this->spec,$str); $str = str_replace("{zarplata}",$this->zarplata,$str); $str = str_replace("{skill}",$this->skill,$str); $str = str_replace("{stash}",$this->stash,$str); $str = str_replace("{comment}",$this->comment,$str); $str = str_replace("{userid}",$this->userid,$str); $str = str_replace("{datec}",$this->datec,$str); $str = str_replace("{contactinf}",$this->contactinf,$str); //------------------------------------------------ //------ выводим данные пользователя разместившего вакансию ----------- $str = str_replace("{surname}",$VAKANSYUSER->surname,$str); $str = str_replace("{name}",$VAKANSYUSER->name,$str); $str = str_replace("{middlename}",$VAKANSYUSER->middlename,$str); $str = str_replace("{compani}",$VAKANSYUSER->compani,$str); $str = str_replace("{site}",$VAKANSYUSER->site,$str); $str = str_replace("{phone}",$VAKANSYUSER->phone,$str); $str = str_replace("{email}",$VAKANSYUSER->email,$str); //------------------------------------------------------------------- $str = str_replace("{color}",$this->color,$str); $str = str_replace("{saved}",$this->status,$str); if($MAINUSER->id==$this->userid OR $MAINUSER->ifadmin()) { $str = str_replace("{editmy}","id&mode=edit_my_vakansy&mod_vakansy_more=$this->id\">Редактировать |",$str); } else { $str = str_replace("{editmy}","",$str); } if($MAINUSER->ifadmin()) { $str = str_replace("{deletemy}","id.",".$this->id.");\">Удалить |",$str); } else { $str = str_replace("{deletemy}","",$str); } $selected=''; $select_razdel=' '; $select_stash=' '; $str = str_replace("{page_id}",$PAGE->id,$str); $str = str_replace("{error}",$PAGE->error,$str); $str = str_replace("{select_razdel}",$select_razdel,$str); $str = str_replace("{select_stash}",$select_stash,$str); return $str; } public function show_module() { global $MAINUSER, $global_vars, $DB, $mode; $more = $_GET['mod_vakansy_more']; if($mode=="new_my_vakansy") { $vivod = MODULE_JOB_VAKANSY::template(pro_readfile($global_vars['mainpatch']."templates/module_job_vakansy_new.tmp")); return $vivod; } if($more) { $DB->query="SELECT * FROM `vakansy` WHERE id='$more'"; // если подробнее выводим одну // $this->tpl = file_get_contents($global_vars['mainpatch']."templates/module_job_more.tmp"); } else if($mode=="my_vakansy") { $DB->query="SELECT * FROM `vakansy` WHERE userid='$MAINUSER->id'"; // выводим свои } else if($mode=="new_save_my_vakansy") { if(!$global_vars['global_count_vakansy']) { $DB->query="INSERT INTO `vakansy` (razdel,spec,userid,zarplata,skill,comment,stash,contactinf) VALUES ('".$_POST['razdel']."','".$_POST['spec']."','".$MAINUSER->id."','".$_POST['zarplata']."','".$_POST['skill']."','".$_POST['comment']."','".$_POST['stash']."','".$_POST['contactinf']."')"; //втыкаем новую вакансию $DB->query(); } $DB->query="SELECT * FROM `vakansy` ORDER by id DESC LIMIT 1"; $more=1; $global_vars['global_count_vakansy']++; } else if($mode=="delete_my_vakansy") { $DB->query="DELETE FROM `vakansy` WHERE id=".$_GET['iddel']; //удаляем вакансию $DB->query(); $DB->query="SELECT * FROM `vakansy` ORDER by id"; //после удаления выдаем весь список ваканий } else { if($_GET['mode']=="find") { if($_GET['razdel']=="")$_GET['razdel']=1; if($_GET['city']=="")$city = ""; else $city=" AND city LIKE '%".$_GET['city']."%' "; if($_GET['stash_ot']=="")$_GET['stash_ot']=0; if($_GET['stash_do']=="")$_GET['stash_do']=35; if($_GET['zarplata_ot']=="")$_GET['zarplata_ot']=0; if($_GET['zarplata_do']=="")$_GET['zarplata_do']=100000; $DB->query="SELECT * FROM `vakansy` WHERE razdel='".$_GET['razdel']."' AND stash<='".$_GET['stash_do']."' AND stash>='".$_GET['stash_ot']."' AND zarplata<='".$_GET['zarplata_do']."' AND zarplata>='".$_GET['zarplata_ot']."' $city ORDER by id"; //иначе весь список // echo $DB->query; } else { $DB->query="SELECT * FROM `vakansy` ORDER by id"; //иначе весь список } } $DB->query(); $vivod=""; $tempary=$DB->lQueryResult; $i=0; while ($massResume=mysqli_fetch_array($tempary)) { $this->id = $massResume['id']; $this->razdel = $massResume['razdel']; $this->spec = $massResume['spec']; $this->userid = $massResume['userid']; $this->zarplata = $massResume['zarplata']; $this->skill = $massResume['skill']; $this->stash = $massResume['stash']; $this->comment = $massResume['comment']; $this->datec = $massResume['datec']; $this->contactinf = $massResume['contactinf']; if($i%2==0){$this->color="bg2";} else{$this->color="bg1";} $i++; if($more) { if($mode=="edit_my_vakansy") { // редактируем резюме $vivod .= MODULE_JOB_VAKANSY::template(pro_readfile($global_vars['mainpatch']."templates/module_job_vakansy_edit.tmp")); } else { if($mode=="save_my_vakansy") { if($_POST['spec']!="" AND $_POST['razdel']!="" AND $_POST['contactinf']!="") { $DB->query="UPDATE `vakansy` SET "; //иначе весь список if($_POST['spec']!=""){$DB->query.="spec='".$_POST['spec']."'";} if($_POST['userid']!=""){$DB->query.=", userid='".$_POST['userid']."'";} if($_POST['zarplata']!=""){$DB->query.=", zarplata='".$_POST['zarplata']."'";} if($_POST['skill']!=""){$DB->query.=", skill='".$_POST['skill']."'";} if($_POST['stash']!=""){$DB->query.=", stash='".$_POST['stash']."'";} if($_POST['comment']!=""){$DB->query.=", comment='".$_POST['comment']."'";} if($_POST['razdel']!=""){$DB->query.=",razdel='".$_POST['razdel']."'";} if($_POST['contactinf']!=""){$DB->query.=",contactinf='".$_POST['contactinf']."'";} $DB->query.=" WHERE id='".$_GET['mod_vakansy_more']."'"; $this->status="Изменения сохранены."; $DB->query(); } else { $this->error="Не все обязательные поля заполнены!"; $vivod .= MODULE_JOB_VAKANSY::template(pro_readfile($global_vars['mainpatch']."templates/module_job_vakansy_edit.tmp")); } $this->razdel = $_POST['razdel']; $this->spec = $_POST['spec']; $this->zarplata = $_POST['zarplata']; $this->skill = $_POST['skill']; $this->stash = $_POST['stash']; $this->comment = $_POST['comment']; } if(!$this->error) $vivod .= MODULE_JOB_VAKANSY::template(pro_readfile($global_vars['mainpatch']."templates/module_job_vakansy_more.tmp")); } } else { if($i==1)$vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_vakansy_find.tmp")); $vivod .= MODULE_JOB_VAKANSY::template(pro_readfile($global_vars['mainpatch']."templates/module_job_vakansy_list.tmp")); } } if($i==0) { $vivod .= MODULE_JOB::template(pro_readfile($global_vars['mainpatch']."templates/module_job_vakansy_find.tmp")); $vivod.="Нечего не найдено!"; } return $vivod; /* if($MAINUSER->logined) { return } else { return MODULE_LOGIN::template(pro_readfile($global_vars['mainpatch']."templates/module_login.tmp")); } */ } } ?>array_params_vis as $keyu => $valueu) { $usl = array_key_exists($valueu,$MAINUSER); if($usl AND $MAINUSER->$valueu!="") { $str2=$str; $str2 = str_replace("{param}",$this->array_params_rus[$keyu],$str2); $str2 = str_replace("{value}",$MAINUSER->$valueu,$str2); $str_return.=$str2; } } return $str_return; // //$str = str_replace("{value}",$MAINUSER->id,$str); } public function give_options($date,$i,$count) { for($i;$i<=$count;$i++) { $ret.= ""; } return $ret; } public function template($str,$cars) { global $MAINUSER, $PAGE, $global_vars, $error, $DB; $date=array(); foreach($MAINUSER as $key => $val) { $tempgr=""; if($key=="id") { //echo $val; $DB->query="SELECT GR.* FROM groups_users as GU, groups as GR WHERE GU.uid='".$val."' AND GU.gid=GR.id"; //выводим список всех производителей $DB->query(); $gallu=$DB->lQueryResult; while ($gmassallu=mysqli_fetch_array($gallu)) { $gjpg=$gmassallu['jpg']; $gname=$gmassallu['name']; $gid=$gmassallu['id']; $tempgr.=""; } } $str = str_replace("{groups}",$tempgr,$str); if($key=="avatar") $val = ($val)?("/templates/userpic/".$val):"/templates/images/ava_def.png"; $str = str_replace("{".$key."}",$val,$str); if($key=="birthday") $date=strptime($val,"%d.%m.%Y"); } $str = str_replace("{all_params}",$this->all_params,$str); $str = str_replace("{page_id}",$PAGE->id,$str); $str = str_replace("{dd}",$this->give_options($date["tm_mday"],1,31),$str); $str = str_replace("{md}",$this->give_options(($date["tm_mon"]+1),1,12),$str); $str = str_replace("{yd}",$this->give_options(($date["tm_year"]+1900),1930,2010),$str); $str = str_replace("{error}",$this->error,$str); $NEWCAR = NEW CARS($MAINUSER->id); $NEWCAR->init(); $cars = str_replace("{copis}",$NEWCAR->opis,$cars); $cars = str_replace("{carname}",$NEWCAR->name,$cars); $cars = str_replace("{cfoto}",($NEWCAR->foto)?("/templates/userpic/".$NEWCAR->foto):"/templates/images/car_def.png",$cars); $cars = str_replace("{page_id}",$PAGE->id,$cars); return $str.$cars; } public function save_data() { global $MAINUSER, $PAGE, $global_vars, $DB; $first=1; $zapros="UPDATE users SET "; $day=0; $month=0; $year=0; $birthday=""; //var_dump($_POST); $pic_name="avatar"; if($_FILES[$pic_name]['tmp_name']!="") { $rand = rand(111111,999999); $stop=1; //----------------Загрузка картинок----------------- $imageinfo = getimagesize($_FILES[$pic_name]['tmp_name']); if($imageinfo['mime'] != 'image/gif' && $imageinfo['mime'] != 'image/jpeg') { $this->error.= "Можно загружать только картинки формата JPEG или GIF\n
"; $stop=0; } if($stop) { $uploadfile = "templates/userpic/".$rand.basename($_FILES[$pic_name]['name']); if (move_uploaded_file($_FILES[$pic_name]['tmp_name'], $uploadfile)) { $this->error.= "Картинка успешно загружена.\n
"; $_POST['avatar']= $rand.basename($_FILES[$pic_name]['name']); } else { $this->error.= "Загрузка картинки провалена.\n
"; $_POST['avatar']=''; } } //--------------------------------------------------- } if($_FILES['cfoto']['tmp_name']!="") { $rand = rand(111111,999999); $stop=1; //----------------Загрузка картинок----------------- $imageinfo = getimagesize($_FILES['cfoto']['tmp_name']); if($imageinfo['mime'] != 'image/gif' AND $imageinfo['mime'] != 'image/jpeg') { $this->error.= "Можно загружать только картинки формата JPEG или GIF\n
"; $stop=0; } if($stop) { $uploadfile = "templates/userpic/" .$rand. basename($_FILES['cfoto']['name']); if (move_uploaded_file($_FILES['cfoto']['tmp_name'], $uploadfile)) { $this->error.= "Картинка успешно загружена.\n
"; $_POST['cfoto']= $rand.basename($_FILES['cfoto']['name']); } else { $this->error.= "Загрузка картинки провалена.\n
"; $_POST['cfoto']='none'; } } //--------------------------------------------------- } foreach($_POST as $keyu => $valueu) { //echo "$keyu - $valueu
"; if($keyu!="button" AND $keyu!="carname" AND $keyu!="cfoto" AND $keyu!="copis" AND $keyu!="password" AND $keyu!="password2") { if($keyu=="day")$day=$valueu; else if($keyu=="month")$month=$valueu; else if($keyu=="year")$year=$valueu; else if($keyu=="avatar") {if($valueu)$zapros.=", $keyu='$valueu'";} else { if(!$first){$zapros.=", ";} $zapros.="$keyu='$valueu'"; $first=0; } } if($keyu=="password") { $zapros.=", password='". md5($valueu)."'"; } } $zapros.=", birthday='".$year."-".$month."-".$day."'"; $zapros.=" WHERE id='$MAINUSER->id'"; $DB->query=$zapros; $DB->query(); } public function show_module() { global $MAINUSER, $global_vars, $DB; if($MAINUSER->logined) { if($_GET['mode']=="edit_lc") { return MODULE_LC::template(pro_readfile($global_vars['mainpatch']."templates/module_lc_edit.tmp"), pro_readfile($global_vars['mainpatch']."templates/module_cars_edit.tmp")); } else if($_GET['mode']=="edit_comlite") { $this->save_data(); $MAINUSER->init(); //--------------cars --------------- $ACAR = NEW CARS($MAINUSER->id); $ACAR -> init(); $ACAR->name = $_POST['carname']; $ACAR->opis = $_POST['copis']; $ACAR->foto = $_POST['cfoto']; ($ACAR->id)?$ACAR->update():$ACAR->create(); //---------------------------------- //die($ACAR->name); $this->all_params = $this->get_all_params(); return MODULE_LC::template(pro_readfile($global_vars['mainpatch']."templates/module_lc.tmp"), pro_readfile($global_vars['mainpatch']."templates/module_cars.tmp")); } else if($_GET['mode']=="goavtor") { $DB->query="SELECT * FROM users WHERE id=".$MAINUSER->id; if($DB->read('gid')==3) { return MODULE_LC::template(pro_readfile($global_vars['mainpatch']."templates/module_lc_uze_autor.tmp")); } else { $DB->query="UPDATE users SET gid=3 WHERE id=".$MAINUSER->id; $DB->query(); return MODULE_LC::template(pro_readfile($global_vars['mainpatch']."templates/module_lc_go_autor.tmp")); } } else { $this->all_params = $this->get_all_params(); return MODULE_LC::template(pro_readfile($global_vars['mainpatch']."templates/module_lc.tmp"), pro_readfile($global_vars['mainpatch']."templates/module_cars.tmp")); } } } } ?>login=mysqli_real_escape_string($DB->link,$_POST['login']); $MAINUSER->password=mysqli_real_escape_string($DB->link,$_POST['password']); $MAINUSER->repass=mysqli_real_escape_string($DB->link,$_POST['password']); $MAINUSER->fio=mysqli_real_escape_string($DB->link,($_POST['fio'])?$_POST['fio']:$_GET['fio']); } public function save() { global $MAINUSER, $DB, $global_vars; $this->init(); $error=0; if($MAINUSER->login && $MAINUSER->password && $MAINUSER->repass) { if(preg_match("/^([a-z0-9_\.-]+)@([a-z0-9_\.-]+)\.([a-z\.]{2,6})$/",$MAINUSER->login)) { $DB->query="SELECT id FROM users WHERE login='".$MAINUSER->login."'"; if(!$DB->read('id')) { if($MAINUSER->password == $MAINUSER->repass) { $this->show_form=0; //echo("save user to db....".$MAINUSER->login); if(!$global_vars['global_count_reg']) { //$birthday=$_POST['year']."-".$_POST['month']."-".$_POST['day']; //$actcode=md5(rand()); //$npass=rand(111111,999999); //echo $npass; $mdpass=md5($MAINUSER->password); $DB->query="INSERT INTO users (gid,login,password,fio,active) VALUES (2,'$MAINUSER->login','$mdpass','$MAINUSER->fio',1)"; $DB->query(); $MAINUSER->password=$mdpass; $MAINUSER->login(); //setcookie ("proLogin", $MAINUSER->login,time()+$global_vars['time_life_cookie']); //setcookie ("proPassword", $mdpass,time()+$global_vars['time_life_cookie']); //$MAINUSER->logined=1; //$MAINUSER->init(); $subject="Новая регистрация на ".$global_vars['site_name']; $msg="Вы успешно зарегистрированы в системе ".$global_vars['site_name'].""; $msg=iconv("UTF-8", "cp1251", $msg); mail($global_vars['feedback_email'], $subject, $msg, "From: ".$global_vars['feedback_email']."\nContent-Type: text/plain; charset=Windows-1251\nContent-Transfer-Encoding: 8bit\nX-Mailer: ".$global_vars['site_name']); } } else { $this->error="Введеные пароли не совпадают!"; } } else { $this->error="Такой e-mail уже присутствует в системе!"; } } else { $this->error="Не корректный e-mail"; } } else { $this->error="Не все обязательные поля заполнены!"; } } public function template($str) { global $MAINUSER, $PAGE; $facebook = new Facebook(array( 'appId' => '260401370726996', 'secret' => '91106cb26aef322f44aaa2cf6a410fa4', 'cookie' => true, )); //$scr = ''; $str = str_replace("{login}",($MAINUSER->login)?$MAINUSER->login:"E-mail",$str); $str = str_replace("{pass}",($MAINUSER->password)?"":"Пароль",$str); $str = str_replace("{repass}",$MAINUSER->repass,$str); $str = str_replace("{email}",$MAINUSER->email,$str); $str = str_replace("{name}",$MAINUSER->name,$str); $str = str_replace("{surname}",$MAINUSER->surname,$str); $str = str_replace("{middlename}",$MAINUSER->middlename,$str); $str = str_replace("{phone}",$MAINUSER->phone,$str); $str = str_replace("{kod}",$MAINUSER->uchstep,$str); $str = str_replace("{city}",$MAINUSER->city,$str); $str = str_replace("{country}",$MAINUSER->country,$str); $str = str_replace("{adress}",$MAINUSER->adress,$str); $str = str_replace("{icq}",$MAINUSER->icq,$str); $str = str_replace("{aboutme}",$MAINUSER->aboutme,$str); $str = str_replace("{compani}",$MAINUSER->compani,$str); $str = str_replace("{site}",$MAINUSER->site,$str); //$str = str_replace("{script}",$scr,$str); $str = str_replace("{badress}",$MAINUSER->badress,$str); $str = str_replace("{pasport}",$MAINUSER->pasport,$str); $str = str_replace("{obrazov}",$MAINUSER->obrazov,$str); $str = str_replace("{rabota}",$MAINUSER->rabota,$str); $str = str_replace("{uchstep}",$MAINUSER->uchstep,$str); $str = str_replace("{public}",$MAINUSER->public,$str); $str = str_replace("{shou}",$MAINUSER->shou,$str); $str = str_replace("{fio}",($MAINUSER->fio)?$MAINUSER->fio:"Никнейм",$str); $str = str_replace("{fblogin}",$facebook->getLoginUrl(array('redirect_uri'=>'http://cars199.ru/index.php?id='.$PAGE->id.'&mode=authfb')),$str); $str = str_replace("{error}",($this->error)?"":"",$str); $str = str_replace("{page_id}",$PAGE->id,$str); $str = str_replace("{phone}",$_POST['phone'],$str); $str = str_replace("{kod}",$_POST['kod'],$str); $str = str_replace("{userid}",($_POST['userid'])?$_POST['userid']:$_GET['uid'],$str); $str = str_replace("{modereg}",($_POST['modereg'])?$_POST['modereg']:$_GET['modereg'],$str); $str = str_replace("{error}",$this->error,$str); $str = str_replace("{backup}",($_COOKIE["backup"]=="yes")?"index.php?id=194&mode=gozakaz":"/",$str); return $str; } function gen($number) { $arr = array('a','b','c','d','e','f', 'g','h','i','j','k','l', 'm','n','o','p','r','s', 't','u','v','x','y','z', '1','2','3','4','5','6', '7','8','9','0'); // Генерируем пароль $pass = ""; for($i = 0; $i < $number; $i++) { // Вычисляем случайный индекс массива $index = rand(0, count($arr) - 1); $pass .= $arr[$index]; } return $pass; } public function show_module() { global $global_vars,$MAINUSER, $DB; $this->init(); //if($sms->send("79096462134", "Тест")) echo "sms ok"; //else echo "false"; if($_POST['do']=="add") { //var_dump($_POST); if($_POST['modereg']=="vk" OR $_POST['modereg']=="fb") { if($MAINUSER->login) { $DB->query="SELECT id FROM users WHERE login='".$MAINUSER->login."'"; if(!$DB->read('id')) { //регистрация через контакт $this->show_form=0; $gpass = $this->gen(6); $mdpass = md5($gpass); $DB->query="INSERT INTO users (login, fio, password, active) VALUES ('".$MAINUSER->login."', '".$MAINUSER->fio."', '".$mdpass."', '1')"; $DB->query(); $DB->query="SELECT id FROM users WHERE login='".$MAINUSER->login."'"; $tmpuid = $DB->read('id'); if($_POST['modereg']=="vk"){ $DB->query="INSERT INTO vkontakte (idvk, userid) VALUES ('".$_POST['userid']."', '".$tmpuid."')"; } else if($_POST['modereg']=="fb"){ $DB->query="INSERT INTO facebook (idfb, userid) VALUES ('".$_POST['userid']."', '".$tmpuid."')"; } $DB->query(); $MAINUSER->password=$mdpass; $MAINUSER->login(); $DB->query="SELECT id FROM users ORDER by id DESC"; $NEWCARS = new CARS($DB->read('id')); $NEWCARS->create(); $subject="Новая регистрация на ".$global_vars['site_name']; $msg="Вы успешно зарегистрированы в системе ".$global_vars['site_name'].""; $msg=iconv("UTF-8", "cp1251", $msg); mail($MAINUSER->login, $subject, $msg, "From: ".$global_vars['feedback_email']."\nContent-Type: text/plain; charset=Windows-1251\nContent-Transfer-Encoding: 8bit\nX-Mailer: ".$global_vars['site_name']); } else { $this->error="Такой e-mail уже присутствует в системе!"; } } else { $this->error=$MAINUSER->login."Поле E-mail должно быть заполнено!"; } } else { $this->save(); } } if($this->show_form) { //$_GET['fio']=($_POST['fio'])$_POST['fio']:$_GET['fio']; if($_GET['modereg']=="vk" OR $_POST['modereg']=="vk" OR $_GET['modereg']=="fb" OR $_POST['modereg']=="fb") { $MAINUSER->fio=$_GET['fio']; return MODULE_REG::template(pro_readfile($global_vars['mainpatch']."templates/module_reg_email_only.tmp")); } else { return MODULE_REG::template(pro_readfile($global_vars['mainpatch']."templates/module_reg.tmp")); } } else { return MODULE_REG::template(pro_readfile($global_vars['mainpatch']."templates/module_reg_ok.tmp")); //setcookie("backup", "no", time()+10000); } } } ?> query="SELECT * FROM `users` WHERE activekey='$code'"; $DB->query(); $tempary=$DB->lQueryResult; while ($massResume=mysqli_fetch_array($tempary)) { $id = $massResume['id']; $DB->query="UPDATE `users` SET active='1' WHERE id='$id'"; $DB->query(); $status = "Аккаунт успешно активирован!"; } $str = str_replace("{status}",$status,$str); return $str; } public function show_module() { return MODULE_ACTIV::template(pro_readfile($global_vars['mainpatch']."templates/module_activ.tmp")); } } ?>user_name=$MAINUSER->login; $DB->query="SELECT * FROM `opros_otvet` WHERE vid='$this->id'"; // считываем ответы к данному вопросу с базы $DB->query(); $tempary=$DB->lQueryResult; while ($massResume=mysqli_fetch_array($tempary)) { $idotveta = $massResume['id']; $otvet= $massResume['otvet']; $this->block_answers.="
".$otvet."
"; $this->block_answers_edit.="
"; } $str = str_replace("{action_form}",$this->action_form,$str); $str = str_replace("{question}",$this->vopros,$str); $str = str_replace("{questionid}",$this->id,$str); $str = str_replace("{block_answers}",$this->block_answers,$str); if($MAINUSER->ifadmin()) { $str = str_replace("{editmy}","id&votemode=edit&voteid=$this->id\" style=\"color:red\">Редактировать |",$str); } else { $str = str_replace("{editmy}","",$str); } if($MAINUSER->ifadmin()) { $str = str_replace("{deletemy}","id.",".$this->id.");\" style=\"color:red\">Удалить |",$str); } else { $str = str_replace("{deletemy}","",$str); } if($MAINUSER->ifadmin()) { $str = str_replace("{new}","id&votemode=new\" style=\"color:red\">Новое голосование |",$str); } else { $str = str_replace("{new}","",$str); } // ---------считаем общее количество голосов (потом переделать)------- $DB->query="SELECT * FROM `opros_count` WHERE vid='$this->id'"; // считываем все голоса по вопросу $DB->query(); $tempary3=$DB->lQueryResult; $i=0; while ($massResume3=mysqli_fetch_array($tempary3)) { $i++; } $fullproc=$i; // ------------------------------------------------------------------- $DB->query="SELECT * FROM `opros_otvet` WHERE vid='$this->id'"; // считываем ответы к данному вопросу с базы $DB->query(); $tempary=$DB->lQueryResult; while ($massResume=mysqli_fetch_array($tempary)) { $idotveta = $massResume['id']; $otvet= $massResume['otvet']; $DB->query="SELECT * FROM `opros_count` WHERE oid='$idotveta'"; // считываем ответы к данному вопросу с базы $DB->query(); $tempary2=$DB->lQueryResult; $i=0; while ($massResume2=mysqli_fetch_array($tempary2)) { $i++; } $nowpercent=round(($i*100)/$fullproc); $nowwidth=round((($nowpercent/100)*$global_vars['width_vote'])+25); $this->block_answers_voted.="
".$otvet."
".$nowpercent."%

"; } $str = str_replace("{block_answers_voted}",$this->block_answers_voted,$str); $str = str_replace("{block_answers_edit}",$this->block_answers_edit,$str); $str = str_replace("{page_id}",$PAGE->id,$str); return $str; } public function show_module() { global $MAINUSER, $DB, $global_vars; $ip=$_SERVER['REMOTE_ADDR']; if($_POST['mode']=="vote") { $DB->query="SELECT * FROM `opros` WHERE status='1'"; // если подробнее выводим одну $tempid=$DB->read(id); $voteres=$_POST['vote']; if(!$global_vars['global_count_vote']) { $DB->query="INSERT INTO `opros_count` (vid, oid, ip) VALUES (\"$tempid\",\"$voteres\",\"$ip\")"; // если подробнее выводим одну $DB->query();//голосуем } $global_vars['global_count_vote']++; } $DB->query="SELECT * FROM `opros` WHERE status='1'"; // если подробнее выводим одну $DB->query(); $tempary=$DB->lQueryResult; while ($massResume=mysqli_fetch_array($tempary)) { $this->id = $massResume['id']; $this->vopros = $massResume['vopros']; $this->status = $massResume['status']; } $DB->query="SELECT * FROM `opros_count` WHERE vid='$this->id'"; // если подробнее выводим одну $DB->query(); $tempary=$DB->lQueryResult; $break=0; while ($massResume=mysqli_fetch_array($tempary)) { $this->ip = $massResume['ip']; if($ip=$_SERVER['REMOTE_ADDR']==$this->ip){$break=1;} } if($_GET['addword']) { $qid=$_GET['qid']; $addword=$_GET['addword']; if(!$global_vars['global_count_vote']) { $DB->query="INSERT INTO `opros_otvet` (vid,otvet) VALUES (\"$qid\",\"$addword\")"; $DB->query();//обновляем варианты ответа и название вопроса } $global_vars['global_count_vote']++; } if($_GET['votemode']=="edit") { return MODULE_VOTE::template(pro_readfile($global_vars['mainpatch']."templates/module_vote_edit.tmp")); // Вы редактируете голосование } else if($_POST['votemode']=="save") { if(!$global_vars['global_count_vote']) { //var_dump($_POST); $DB->query="SELECT * FROM `opros_otvet` WHERE vid='$this->id'"; // считываем ответы к данному вопросу с базы $DB->query(); $tempary=$DB->lQueryResult; while ($massResume=mysqli_fetch_array($tempary)) { $idotveta = $massResume['id']; $otvet= $massResume['otvet']; //echo "старый: $otvet - ".$_POST[$idotveta]."
"; $tempotvet=$_POST[$idotveta]; $DB->query="UPDATE `opros_otvet` SET otvet=\"$tempotvet\" WHERE id=\"$idotveta\""; $DB->query();//обновляем варианты ответа и название вопроса } $tempotvet=$_POST["quest"]; $DB->query="UPDATE `opros` SET vopros=\"$tempotvet\" WHERE id=\"$this->id\""; $DB->query();//обновляем варианты ответа и название вопроса return MODULE_VOTE::template(pro_readfile($global_vars['mainpatch']."templates/module_vote_voted.tmp")); // Вы уже проголосовали }$global_vars['global_count_vote']++; } else { if($break) { return MODULE_VOTE::template(pro_readfile($global_vars['mainpatch']."templates/module_vote_voted.tmp")); // Вы уже проголосовали } else { return MODULE_VOTE::template(pro_readfile($global_vars['mainpatch']."templates/module_vote.tmp")); // Вы можете голосовать } } } } ?>query="SELECT * FROM users WHERE email='".$mailr."'"; $RESUSER->id=$DB->read(id); $RESUSER->init(); // echo "$DB->query"; $RESUSER->restore_pass(); return pro_readfile($global_vars['mainpatch']."templates/module_restore_pass_restored.tmp"); } else { return pro_readfile($global_vars['mainpatch']."templates/module_restore_pass.tmp"); } } } ?>ifadmin())?"2030-12-31 00:00:00":$now->format( 'Y-m-d H:i:s' ); //echo $nowdate; $DB->query="SELECT PUB.img as img, PUB.idstr as idstr, PAGES.name as name FROM publications as PUB, pages as PAGES WHERE PUB.status=1 AND PAGES.id=PUB.idstr AND PUB.razdel!=5 AND PUB.razdel!=6 AND PUB.datetime>'".$global_vars['year_visible']."-".$global_vars['month_visible']."-01' AND datetime<'".$global_vars['year_visible']."-".($global_vars['month_visible']+1)."-01' AND PUB.datetime<'".$nowdate."' ORDER by PUB.datetime"; //Вытаскиваем из всех активных публикации по дате - название картинку и ид страницы $DB->query(); $fin_rep=""; while ($massbase=mysqli_fetch_array($DB->lQueryResult,MYSQLI_ASSOC)) { $str_clone2=$str; $str_clone2 = str_replace("{img}",$global_vars['img_path'].$massbase['img'],$str_clone2); $str_clone2 = str_replace("{url}",$PAGE->get_url($massbase['idstr']),$str_clone2); $str_clone2 = str_replace("{name}",$massbase['name'],$str_clone2); $fin_rep=$str_clone2.$fin_rep; } return $fin_rep; } public function show_module() { global $MAINUSER, $PAGE, $global_vars, $DB, $mode; $vivod .= MODULE_LEFT_MENU::template(pro_readfile($global_vars['mainpatch']."templates/module_menu_publications.tmp")); return $vivod; } } class MODULE_LEFT_MENU_MER { public $id; public function template($str,$type) { global $MAINUSER, $PAGE, $global_vars, $DB, $mode; if($type==1000) // архивы журналов { $DB->query="SELECT ARH.img as img, ARH.idstr as idstr, PAGES.name as name FROM `arhive` as ARH, pages as PAGES WHERE PAGES.id=ARH.idstr ORDER by ARH.datetime DESC limit ".(($MAINUSER->ifadmin())?"1000":"10"); //Вытаскиваем из всех активных публикации по дате - название картинку и ид страницы $DB->query(); $fin_rep=""; while ($massbase=mysqli_fetch_array($DB->lQueryResult,MYSQLI_ASSOC)) { $str_clone2=$str; $str_clone2 = str_replace("{img}",$global_vars['img_path'].$massbase['img'],$str_clone2); $str_clone2 = str_replace("{url}",$PAGE->get_url($massbase['idstr']),$str_clone2); $str_clone2 = str_replace("{name}",$massbase['name'],$str_clone2); $fin_rep=$fin_rep.$str_clone2; } } else { $DB->query="SELECT PUB.img as img, PUB.idstr as idstr, PAGES.name as name FROM publications as PUB, pages as PAGES WHERE PUB.status=1 AND PAGES.id=PUB.idstr AND PUB.razdel=".$type." ORDER by PUB.datetime"; //Вытаскиваем из всех активных публикации по дате - название картинку и ид страницы $DB->query(); $fin_rep=""; while ($massbase=mysqli_fetch_array($DB->lQueryResult,MYSQLI_ASSOC)) { $str_clone2=$str; $str_clone2 = str_replace("{img}",$global_vars['img_path'].$massbase['img'],$str_clone2); $str_clone2 = str_replace("{url}",$PAGE->get_url($massbase['idstr']),$str_clone2); $str_clone2 = str_replace("{name}",$massbase['name'],$str_clone2); $fin_rep=$str_clone2.$fin_rep; } } return $fin_rep; } public function show_module($type) { global $MAINUSER, $PAGE, $global_vars, $DB, $mode; $vivod .= $this->template(pro_readfile($global_vars['mainpatch']."templates/module_menu_".(($type==1000)?"arhive":"publications").".tmp"),$type); return $vivod; } } ?>level++; static $first=1; //$this->structure; if($first==1){$this->rightmenu.="