29 lines
1.4 KiB
PHP
29 lines
1.4 KiB
PHP
<?php
|
|
header('Content-Type: text/html; charset=windows-1251');
|
|
if ($_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest') {
|
|
define('GAME', true);
|
|
include_once('../_incl_data/__config.php');
|
|
include_once('../_incl_data/class/__db_connect.php');
|
|
|
|
|
|
$u = mysql_fetch_array(mysql_query('SELECT `id` FROM `users` WHERE `login`="' . mysql_real_escape_string($_COOKIE['login']) . '" AND `pass`="' . mysql_real_escape_string($_COOKIE['pass']) . '" LIMIT 1'));
|
|
if (!isset($u['id']) || ($u['joinIP'] == 1 && $u['ip'] != $_SERVER['HTTP_X_REAL_IP'])) {
|
|
die('<script>top.location = \'https://' . $c['host'] . '/\';</script>');
|
|
} else {
|
|
if (isset($_POST['act'])) {
|
|
$post = Telegram::start();
|
|
if ($_POST['act'] == 'read') {
|
|
$post->readMsg(mysql_real_escape_string($_POST['msg']), $u['id']);
|
|
} elseif ($_POST['act'] == 'lock') {
|
|
$post->lockMsg(mysql_real_escape_string($_POST['msg']), $u['id']);
|
|
} elseif ($_POST['act'] == 'delete') {
|
|
$post->deleteMsg(mysql_real_escape_string($_POST['msg']), $u['id'], $_POST['pageGo']);
|
|
} elseif ($_POST['act'] == 'deleteAll') {
|
|
$post->deleteMsgAll($u['id'], $_POST['pageGo']);
|
|
} elseif ($_POST['act'] == 'page') {
|
|
$post->seeMsg($u['id'], $_POST['msg'], 5);
|
|
}
|
|
}
|
|
}
|
|
}
|