| Server IP : 103.82.32.14 / Your IP : 216.73.217.121 Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : lonmakmf ( 524) PHP Version : 5.6.30 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /home/forumhet/public_html/incfiles/ |
Upload File : |
<?php
/**
* @package JohnCMS
* @link http://johncms.com
* @copyright Copyright (C) 2008-2011 JohnCMS Community
* @license LICENSE.txt (see attached file)
* @version VERSION.txt (see attached file)
* @author http://johncms.com/about
*/
defined('_IN_JOHNCMS') or die('Error: restricted access');
$headmod = isset($headmod) ? mysql_real_escape_string($headmod) : '';
$textl = isset($textl) ? $textl : $set['copyright'];
$seokw = (isset($seow) ? $seow : $set['copyright']);
$seodesc = isset($seod) ? $seod : $set['meta_desc'];
$time = time();
echo '<!DOCTYPE html>' .
"\n" . '<html lang="en">' .
"\n" . '<head>' .
"\n" . '<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">' .
"\n" . '<meta http-equiv="Content-Language" content="vi" />' .
"\n" . '<meta http-equiv="imagetoolbar" content="no" />' .
"\n" . '<meta http-equiv="X-UA-Compatible" content="IE=edge">' .
"\n" . '<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=2.0, user-scalable=yes">' .
"\n" . '<meta name="HandheldFriendly" content="true">' .
"\n" . '<meta name="MobileOptimized" content="width">' .
"\n" . '<meta content="yes" name="apple-mobile-web-app-capable">' .
"\n" . '<meta name="Generator" content="Forum Việt, ForumViet.Mobi">' .
"\n" . '<meta name="robots" content="'.(isset($noRobots) ? 'noindex, nofollow' : 'index, follow, noodp, noydir').'" />' .
(!empty($set['meta_key']) ? "\n" . '<meta name="keywords" content="' . $seokw . '">' : '') .
(!empty($set['meta_desc']) ? "\n" . '<meta name="description" content="' . $seodesc . '">' : '') .
"\n" . '<link rel="stylesheet" href="' . $set['homeurl'] . '/theme/' . $set_user['skin'] . '/style.css">' .
"\n" . '<link rel="shortcut icon" href="' . $set['homeurl'] . '/favicon.ico">' .
"\n" . '<link rel="alternate" type="application/rss+xml" title="RSS | ' . $lng['site_news'] . '" href="' . $set['homeurl'] . '/rss/rss.php">' .
"\n" . '<title>' . $textl . '</title>' .
($user_id ? "\n" . '<script language="javascript" src="/auto/auto.js" type="text/javascript"></script>' : '') .
"\n" . '<script type="text/javascript">function ImgError(source){source.src = "/images/image-not-found.png";source.onerror = "";return true;}</script>' .
"\n" . '<style type="text/css">#YouTube1{width: 100%; height: 100%;}</style>' .
"\n" . '<script type="text/javascript" src="/play/jwplayer/swfobject.js"></script>' .
"\n" . '<script type="text/javascript" src="/play/jwplayer/jwplayer.js"></script>' .
"\n" . '<script type="text/javascript" src="'.$home.'/cdn/jquery.js"></script>' .
"\n" . '<script type="text/javascript" src="http://ajax.microsoft.com/ajax/jquery.validate/1.7/jquery.validate.min.js"></script>'.
"\n" . '</head><body><div id="main">' . core::display_core_errors();
if ($user_id) {
$xemnotification = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` WHERE `from_id`='$user_id' AND `read`='0' AND `sys`='1' AND `delete`!='$user_id';"), 0);
$xemmessage = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` LEFT JOIN `cms_contact` ON `cms_mail`.`user_id`=`cms_contact`.`from_id` AND `cms_contact`.`user_id`='$user_id' WHERE `cms_mail`.`from_id`='$user_id' AND `cms_mail`.`sys`='0' AND `cms_mail`.`read`='0' AND `cms_mail`.`delete`!='$user_id' AND `cms_contact`.`ban`!='1' AND `cms_mail`.`spam`='0'"), 0);
$xemfriend = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_contact` WHERE `from_id`='$user_id' AND `type`='2' AND `friends`='0';"), 0);
$xemalbum = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_album_files` WHERE `user_id` = '" . core::$user_id . "' AND `unread_comments` = 1"), 0);
$tongthongbao = ($xemnotification + $xemfriend + $xemalbum + $xemmessage);
$xemthongbao = ($xemnotification + $xemfriend + $xemalbum);
echo "<script>
loged=1,step=0,title=document.title;
$(document).ready(function(){
var refreshTitle = setInterval(function() {
$(\"#loadtitle\").load('/auto/autotitle.php');
$(\"#loadtitle\").slideDown(\"slow\");
}, 100000);
});
</script>";
echo '<div id="loadtitle">';
echo "<script type=\"text/javascript\">
function flash_title() {
if($tongthongbao > 0){
step++;
if(step==3){step=1};
if(step==1){document.title=title};
if(step==2){document.title='Bạn có ".($xemthongbao > 0 && $xemmessage > 0 ? $xemmessage.' tin nhắn và '.$xemthongbao.' thông báo' : ($xemthongbao > 0 ? $xemthongbao.' thông báo' : ($xemmessage > 0 ? $xemmessage.' tin nhắn' : '')))." mới .!!'};
setTimeout(\"flash_title()\",100000);
};
};
flash_title();
</script>";
echo '</div>';
}
/*
-----------------------------------------------------------------
Рекламный модуль
-----------------------------------------------------------------
*/
$cms_ads = array();
if (!isset($_GET['err']) && $act != '404' && $headmod != 'admin') {
$view = $user_id ? 2 : 1;
$layout = ($headmod == 'mainpage' && !$act) ? 1 : 2;
$req = mysql_query("SELECT * FROM `cms_ads` WHERE `to` = '0' AND (`layout` = '$layout' or `layout` = '0') AND (`view` = '$view' or `view` = '0') ORDER BY `mesto` ASC");
if (mysql_num_rows($req)) {
while (($res = mysql_fetch_assoc($req)) !== FALSE) {
$name = explode("|", $res['name']);
$name = htmlentities($name[mt_rand(0, (count($name) - 1))], ENT_QUOTES, 'UTF-8');
if (!empty($res['color'])) $name = '<span style="color:#' . $res['color'] . '">' . $name . '</span>';
// Если было задано начертание шрифта, то применяем
$font = $res['bold'] ? 'font-weight: bold;' : FALSE;
$font .= $res['italic'] ? ' font-style:italic;' : FALSE;
$font .= $res['underline'] ? ' text-decoration:underline;' : FALSE;
if ($font) $name = '<span style="' . $font . '">' . $name . '</span>';
@$cms_ads[$res['type']] .= '<a href="' . ($res['show'] ? functions::checkout($res['link']) : $set['homeurl'] . '/go.php?id=' . $res['id']) . '">' . $name . '</a><br/>';
if (($res['day'] != 0 && time() >= ($res['time'] + $res['day'] * 3600 * 24)) || ($res['count_link'] != 0 && $res['count'] >= $res['count_link']))
mysql_query("UPDATE `cms_ads` SET `to` = '1' WHERE `id` = '" . $res['id'] . "'");
}
}
}
/*
-----------------------------------------------------------------
Рекламный блок сайта
-----------------------------------------------------------------
*/
if (isset($cms_ads[0])) echo $cms_ads[0];
/*
-----------------------------------------------------------------
Выводим логотип и переключатель языков
-----------------------------------------------------------------
*/
$thoiganhientai = gmdate("H:i - d/m/Y", time() + 7*3600);
if($user_id){
$new_mail = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` LEFT JOIN `cms_contact` ON `cms_mail`.`user_id`=`cms_contact`.`from_id` AND `cms_contact`.`user_id`='$user_id' WHERE `cms_mail`.`from_id`='$user_id' AND `cms_mail`.`sys`='0' AND `cms_mail`.`read`='0' AND `cms_mail`.`delete`!='$user_id' AND `cms_contact`.`ban`!='1' AND `cms_mail`.`spam`='0'"), 0);
$new_sys_mail = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_mail` WHERE `from_id`='$user_id' AND `read`='0' AND `sys`='1' AND `delete`!='$user_id';"), 0);
$banmoi = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_contact` WHERE `from_id`='$user_id' AND `type`='2' AND `friends`='0';"), 0);
}
/*
-----------------------------------------------------------------
Выводим верхний блок с приветствием
-----------------------------------------------------------------
*/
echo '<script type="text/javascript"> function toggle(){var ele=document.getElementById("dropdown-toggleg");if(ele.style.display=="block"){ele.style.display = "none";}else{ele.style.display = "block";}} </script>';
if($user_id){
echo '<div id="trick" class="header" style="border-bottom: 1px solid #ffffff;"><a href="/" style="padding: 5px; color: #FFFFFF; font-size: 20px;"><span class="uppercase">Forum Việt</span></a></div>';
echo '<div id="header">
<ul>
<li><a href="'.$home.'/mail/index.php" id="message_href" style="padding: 6px;"><img src="/images/user/mail.png" /><div class="vhnew" id="message">'.$new_mail.'</div></a></li>
<li><a href="' . $home . '/users/profile.php?act=friends" id="friend_href" style="padding: 6px;"><img src="/images/user/banbe.png" /><div class="vhnew" id="friend">'.$banmoi.'</div></a></li>
<li><a href="' . $home . '/mail/index.php?act=systems" style="padding: 6px;"><img src="/images/user/new.png" /><div class="vhnew" id="notification">'.$new_sys_mail.'</div></a></li>
<div style="display: inline;float: right;"><a style="color: #eee;margin-right: 6px;" href="javascript:toggle();"><strong id="vh4">'.$datauser['name'].' <img src="/images/user/arrow.png" alt="" /> </strong>'.(file_exists((ROOTPATH . '/files/users/avatar/' . $user_id . '.png')) ? '<img src="' . $home . '/avatar/'.$user_id.'-15-30.png" />' : '<img src="' . $home . '/avatar/default-15-30.png" />').'</a></div>
</ul>
</div>';
echo '<div id="relative"><div class="dropdown-toggleg" id="dropdown-toggleg">
<a href="' . $home . '/users/profile.php"><li><table style="padding: 0; border-spacing: 0;"><tr><td style="vertical-align: baseline; padding: 0 5px 0 5px"><img src="/images/user/info.png" /></td><td>Trang cá nhân</td></tr></table></li></a>
<a href="' . $home . '/group"><li><table style="padding: 0; border-spacing: 0;"><tr><td style="vertical-align: baseline; padding: 0 5px 0 5px"><img src="/images/user/partner.png" /></td><td>Hội nhóm</td></tr></table></li></a>
<li><center><table cellpadding="0" cellspacing="0"><tr><td valign="baseline" style="padding: 0 5px 0 5px"><a href="/pages/faq.php"><img src="/images/user/helpdesk.png" /></a></td><td valign="baseline" style="padding: 0 5px 0 5px"><a href="/users/profile.php?act=office"><img src="/images/user/settings.png" /></a></td><td valign="baseline" style="padding: 0 5px 0 5px"><a href="/exit.php"><img src="/images/user/exit.png" /></a></td></tr></table></center></li>
<li style="text-align:center" class="lobster">
'.$thoiganhientai.'
</li>
</div></div>';
}else{
echo '<div class="header"><a href="/" style="padding: 5px; color: #FFFFFF; font-size: 20px;"><span class="uppercase">Forum Việt</span></a></div>';
echo '<div class="header" style="border-top: 1px solid #ffffff; text-align: center;"><a href="/login.php" style="padding: 5px; color: #FFFFFF;" class="page_item">Đăng nhập</a> <a href="/registration.php" style="padding: 5px; color: #FFFFFF;" class="page_item">Đăng ký</a></div>';
}
if (!empty($ban)) echo '<div class="alarm" style="text-align:center"><a href="' . $set['homeurl'] . '/users/profile.php?act=ban">Tài khoản bị cấm!!!</a></div>';
echo '<div class="maintxt">';
/*
-----------------------------------------------------------------
Рекламный блок сайта
-----------------------------------------------------------------
*/
if (!empty($cms_ads[1])) echo '<div class="gmenu">' . $cms_ads[1] . '</div>';
/*
-----------------------------------------------------------------
Фиксация местоположений посетителей
-----------------------------------------------------------------
*/
$sql = '';
$set_karma = unserialize($set['karma']);
if ($user_id) {
// Фиксируем местоположение авторизованных
if (!$datauser['karma_off'] && $set_karma['on'] && $datauser['karma_time'] <= (time() - 86400)) {
$sql .= " `karma_time` = '" . time() . "', ";
}
$movings = $datauser['movings'];
if ($datauser['lastdate'] < (time() - 300)) {
$movings = 0;
$sql .= " `sestime` = '" . time() . "', ";
}
if ($datauser['place'] != $headmod) {
++$movings;
$sql .= " `place` = '" . mysql_real_escape_string($headmod) . "', ";
}
if ($datauser['browser'] != $agn)
$sql .= " `browser` = '" . mysql_real_escape_string($agn) . "', ";
$totalonsite = $datauser['total_on_site'];
if ($datauser['lastdate'] > (time() - 300))
$totalonsite = $totalonsite + time() - $datauser['lastdate'];
mysql_query("UPDATE `users` SET $sql
`movings` = '$movings',
`total_on_site` = '$totalonsite',
`lastdate` = '" . time() . "'
WHERE `id` = '$user_id'
");
include('game_head.php');
} else {
// Фиксируем местоположение гостей
$movings = 0;
$session = md5(core::$ip . core::$ip_via_proxy . core::$user_agent);
$req = mysql_query("SELECT * FROM `cms_sessions` WHERE `session_id` = '$session' LIMIT 1");
if (mysql_num_rows($req)) {
// Если есть в базе, то обновляем данные
$res = mysql_fetch_assoc($req);
$movings = ++$res['movings'];
if ($res['sestime'] < (time() - 300)) {
$movings = 1;
$sql .= " `sestime` = '" . time() . "', ";
}
if ($res['place'] != $headmod) {
$sql .= " `place` = '" . mysql_real_escape_string($headmod) . "', ";
}
mysql_query("UPDATE `cms_sessions` SET $sql
`movings` = '$movings',
`lastdate` = '" . time() . "'
WHERE `session_id` = '$session'
");
} else {
// Если еще небыло в базе, то добавляем запись
mysql_query("INSERT INTO `cms_sessions` SET
`session_id` = '" . $session . "',
`ip` = '" . core::$ip . "',
`ip_via_proxy` = '" . core::$ip_via_proxy . "',
`browser` = '" . mysql_real_escape_string($agn) . "',
`lastdate` = '" . time() . "',
`sestime` = '" . time() . "',
`place` = '" . mysql_real_escape_string($headmod) . "'
");
}
}