game/jx/post.php
2022-06-07 00:30:34 +03:00

37 lines
1.2 KiB
PHP

<?php
header('Content-Type: text/html; charset=windows-1251');
if($_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest')
{
define('GAME',true);
include_once('../_incl_data/__config.php');
include_once('../_incl_data/class/__db_connect.php');
include('../_incl_data/class/__telegram.php');
$u = mysql_fetch_array(mysql_query('SELECT `id` FROM `users` WHERE `login`="'.mysql_real_escape_string($_COOKIE['login']).'" AND `pass`="'.mysql_real_escape_string($_COOKIE['pass']).'" LIMIT 1'));
if(!isset($u['id']) || ($u['joinIP']==1 && $u['ip']!=$_SERVER['HTTP_X_REAL_IP']))
{
die('<script>top.location = \'https://'.$c['host'].'/\';</script>');
}else{
if(isset($_POST['act']))
{
$post = telegram::start();
if($_POST['act']=='read')
{
$post->readMsg(mysql_real_escape_string($_POST['msg']),$u['id']);
}elseif($_POST['act']=='lock')
{
$post->lockMsg(mysql_real_escape_string($_POST['msg']),$u['id']);
}elseif($_POST['act']=='delete')
{
$post->deleteMsg(mysql_real_escape_string($_POST['msg']),$u['id'],$_POST['pageGo']);
}elseif($_POST['act']=='deleteAll')
{
$post->deleteMsgAll($u['id'],$_POST['pageGo']);
}elseif($_POST['act']=='page')
{
$post->seeMsg($u['id'],$_POST['msg'],5);
}
}
}
}
?>