From 9bc2a99b94132a2e3228791fe18c1ee9d5e82070 Mon Sep 17 00:00:00 2001 From: "Igor Barkov [iwork]" Date: Wed, 31 Oct 2018 19:26:27 +0200 Subject: [PATCH] Common code errors --- forum.php | 27 ++++++++++++++------------- 1 file changed, 14 insertions(+), 13 deletions(-) diff --git a/forum.php b/forum.php index cf3e00b..eea7531 100644 --- a/forum.php +++ b/forum.php @@ -91,7 +91,7 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228 } ?>
- Конференции + Конференции
@@ -155,7 +155,7 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228

- + Невидимка: " . mysql_real_escape_string($_GET['cpr']) . "') WHERE `id` = '" . mysql_real_escape_string($_GET['com']) . "' LIMIT 1"); + $addText = "
Невидимка: " . $_GET['cpr']; } else { - mysql_query("UPDATE `forum` SET `text` = CONCAT(`text`,'
" . mysql_real_escape_string(nick::id($user['id'])->full(1)) . ": " . mysql_real_escape_string($_GET['cpr']) . "') WHERE `id` = '" . mysql_real_escape_string($_GET['com']) . "' LIMIT 1"); + $addText = nick::id($user['id'])->full(1). ": " . $_GET['cpr']; } + db::c()->query('UPDATE `forum` SET `text` = CONCAT(`text`,"?s") WHERE `id` = ?i',$addText,$_GET['com']); echo ""; exit(); } @@ -520,7 +521,7 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228 $pages_str = $FirstPage . $pages_str . $LastPage; echo $pages_str; - if ($dostupSovet == true) $edit = ""; + if ($dostupSovet == true) $edit = ""; ?>
@@ -553,17 +554,17 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228 } #$data = mysql_query("SELECT * FROM `forum` WHERE `parent` = '" . mysql_real_escape_string($_GET['topic']) . "' ORDER by `id` {$sort_type} LIMIT " . (int)($_GET['page'] * 20) . ",20"); - $data = db::c()->query('SELECT * FROM `forum` WHERE `parent` = "?s" ORDER BY "?s" LIMIT ?i,20', $_GET['topic'], $sort_type, ($_GET['page'] * 20); + $data = db::c()->query('SELECT * FROM `forum` WHERE `parent` = "?s" ORDER BY "?s" LIMIT ?i,20', $_GET['topic'], $sort_type, ($_GET['page'] * 20)); while ($row = $data->fetch_assoc()) { echo "
-
- " . $row['author'] . " (" . $row['date'] . ") + " . $row['author'] . " (" . $row['date'] . ") "; if ($dostupSovet == true) { - $edit = ""; + $edit = ""; } if ($dostupPal == true && $news_topic == false) { @@ -572,7 +573,7 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228 } echo " - + $edit @@ -667,7 +668,7 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228 if (is_numeric($_GET['conf']) && $row = db::c()->query('SELECT * FROM `forum` WHERE `id` = ?i', $_GET['conf'])->fetch_assoc()) { if (($row['min_align'] == 0 && $row['max_align'] == 0) || ($user['align'] >= $row['min_align'] && $user['align'] <= $row['max_align']) || $dostupSovet) { ?> - +
@@ -758,7 +759,7 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228 echo " "; } - echo "
" . $row['date'] . " " . strip_tags(substr($row['text'], 0, 250), "") . " + echo "
" . $row['date'] . " " . strip_tags(substr($row['text'], 0, 250), "") . "
Ответов: " . $count . " (" . $lasttime . ")

"; } @@ -841,13 +842,13 @@ if (isset($_GET['topic']) && is_numeric($_GET['topic']) && $_GET['topic'] == 228 } ?> -