| Server IP : 103.82.32.14 / Your IP : 216.73.217.140 Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : lonmakmf ( 524) PHP Version : 5.6.30 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /home/forumhet/public_html/users/ |
Upload File : |
<?php
define('_IN_JOHNCMS', 1);
echo '<div class="phdr"><b>Tường nhà.</b></div>';
if ($user_id) {
$user_wall = $user['id'];
if(isset($_POST['submit'])) {
$noidung = functions::checkin(trim($_POST['text']));
if(strlen($noidung) > 45) {
$vbcat = mb_substr($noidung, 0, 45).'....';
} else {
$vbcat = $noidung;
}
$trungt = mysql_result(mysql_query("SELECT COUNT(*) FROM `status` WHERE `text`='{$noidung}'"), 0);
$timep = mysql_fetch_array(mysql_query("SELECT `lastpost` FROM `users` WHERE `id`='{$user_id}'"));
if(!empty($ban)) {
echo '<div class="rmenu">Tài khoản của bạn đang bị khoá nên không thể viết status!</div>';
} else if(($timep['lastpost'] + 7) > time()) {
echo '<div class="rmenu">Bạn có thể viết status tiếp theo sau <b>'.(($timep['lastpost'] + 7) - time()).'s</b> nữa!</div>';
} else if(empty($_POST['text'])) {
echo '<div class="rmenu">Bạn chưa nhập nội dung!</div>';
} else if($trungt > 0) {
echo '<div class="rmenu">Nội dung status này đã tồn tại!</div>';
} else if(strlen($_POST['text']) < 4) {
echo '<div class="rmenu">Nội dung Status quá ngắn!</div>';
} else if(strlen($_POST['text']) > 5000) {
echo '<div class="rmenu">Nội dung Status của bạn đã quá 5000 kí tự!</div>';
} else {
mysql_query("UPDATE `users` SET `poststatus`=`poststatus`+'1' WHERE `id` = '$user_id' ");
mysql_query("INSERT INTO `status` SET `user_id`='".$user_id."', `text`='" . mysql_real_escape_string($noidung) . "', `time`='".time()."', `wall`='$user_wall'");
$rid = mysql_insert_id();
if($user_wall != $user_id && !empty($user_wall)) {
mysql_query("INSERT INTO `cms_mail` SET `user_id` = '$user_id', `from_id`='$user_wall', `them`='25', `text` = '[url=".$home."/users/profile.php?user=".$user_id."][cnick]".$user_id."[/cnick][/url] đã đăng một [url=".$home."/users/profile.php?act=status&user=".$user['id']."&binhluan&id=".$rid."]trạng thái[/url] lên tường nhà bạn: ".addslashes($vbcat)."', `sys`='1', `time`='".time()."'");
}
$exists = array();
if(preg_match('#@([a-zA-Z0-9\-\@\*\(\)\?\!\~\_\=\[\]]+)#si', $noidung)) {
preg_match_all('#@([a-zA-Z0-9\-\@\*\(\)\?\!\~\_\=\[\]]+)#si', $noidung, $text);
$dem = count($text[1]);
for($i=0; $i<=$dem; $i++) {
$ktu = mysql_result(mysql_query("SELECT COUNT(*) FROM `users` WHERE `name`='{$text[1][$i]}'"), 0);
$resq = mysql_fetch_array(mysql_query("SELECT `id` FROM `users` WHERE `name`='{$text[1][$i]}'"));
$demtag = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_bl` WHERE `user_id`='".$resq['id']."' AND `user_fr`='".$user_id."' AND `type`='t'"), 0);
if($ktu == 1 && $demtag == 0 && $resq['id'] != $user_id && $user_wall != $resq['id'] && isset($exists[intval($resq['id'])]) == false) {
$exists[intval($resq['id'])] = true;
mysql_query("UPDATE `users` SET `bl`= `bl` + '1' WHERE `id`='".$resq['id']."'");
mysql_query("INSERT INTO `cms_mail` SET `user_id` = '$user_id', `from_id`='".$resq['id']."', `them`='24', `text` = '[url=".$home."/users/profile.php?user=".$user_id."][cnick]".$user_id."[/cnick][/url] đã nhắc đến bạn trong [url=".$home."/users/profile.php?act=status&user=".$user['id']."&binhluan&id=".$rid."]tâm trạng ".functions::sex($user_id)."[/url]: ".addslashes($vbcat)."', `sys`='1', `time`='".time()."'");
}
}
}
mysql_query("UPDATE `users` SET `lastpost`='".time()."' WHERE `id`='".$user_id."'");
$trave = isset($_POST['trave']) ? base64_decode($_POST['trave']) : 'index.php';
header("Location: $trave");
exit();
}
}
//nhap lieu
$trave = base64_encode($_SERVER['REQUEST_URI']);
echo '<div class="list1">';
echo '<form method="post"><textarea rows="2" name="text" placeholder="Hãy viết gì đó..."></textarea><input type="hidden" name="trave" value="'.$trave.'"/><br /><input type="submit" name="submit" value="  Đăng  "/></form>';
echo '</div>';
} else {
echo '<div class="rmenu">Bạn cần <a href="/login.php">Đăng nhập</a> hoặc <a href="/registration.php">Đăng ký</a> để sử dụng hết chức năng của diễn đàn</div>';
}
//phan bai dang
$tong = mysql_result(mysql_query("SELECT COUNT(*) FROM `status` WHERE `wall`='$user[id]' OR `user_id`='$user[id]'"), 0);
if ($tong > $kmess){
echo '<div class="topmenu" style="margin-top: 5px;">' . functions::display_pagination('profile.php?user='.$user['id'].'&', $start, $tong, $kmess) . '</div>';
}
if($tong) {
$req = mysql_query("SELECT * FROM `status` WHERE `wall`='$user[id]' OR `user_id`='$user[id]' ORDER BY `time` DESC LIMIT $start,$kmess");
$i = 0;
while ($res = mysql_fetch_array($req)) {
echo '<div style="background-color: #ffffff; border-color: #D5D5D5; border-style: solid; border-width: 1px 1px 1px 1px; margin: 5px 0 3px 0;"><div style="padding: 3px 4px 0 4px;">';
if ($set_user['avatar']) {
echo '<table cellpadding="0" cellspacing="0"><tr><td>';
if(file_exists(($rootpath . 'files/users/avatar/' . $res['user_id'] . '.png'))) {
echo '<img src="' . $home . '/avatar/'.$res['user_id'].'-20-40.png" width="40" height="40" alt="" /> ';
} else {
echo '<img src="' . $home . '/avatar/default-20-40.png" /> ';
}
echo '</td><td>';
}
$name = mysql_fetch_array(mysql_query("SELECT * FROM `users` WHERE `id`='{$res['user_id']}'"));
echo (time()> $name['lastdate']+300 ? ''.functions::image('user/off.png', array('class' => 'icon-inline')).'' : ''.functions::image('user/on.png', array('class' => 'icon-inline')).'');
echo ''.($user_id && $user_id != $res['user_id'] ? '<a href="/users/profile.php?user='.$res['user_id'].'"><b>'.functions::nickcolor($res['user_id']).'</b></a>' : '<b>'.functions::nickcolor($res['user_id']).'</b>').''.(!empty($res['wall']) && $res['user_id'] != $res['wall'] ? ' > <a href="/users/profile.php?user='.$res['wall'].'"><b>'.functions::nickcolor($res['wall']).'</b></a>':'').'';
if(!empty($res['wall']) && $res['user_id'] != $res['wall']){
}else{
echo ' '.functions::rights($res['user_id']);
}
echo '<br />'.functions::image('clock.png', array('class' => 'icon-inline')).'<span class="gray" style="font-size: x-small;">'.functions::display_date($res['time']).'</span>';
if ($set_user['avatar']) {
echo '</td></tr></table>';
}
echo '</div><div style="margin-top: 5px; padding: 0 4px 4px 4px;">';
//kt hinh anh
$ten = mysql_fetch_array(mysql_query("SELECT `name` FROM `users` WHERE `id`='{$res['user_id']}'"));
$ltext = mysql_fetch_array(mysql_query("SELECT * FROM `status` WHERE `id`='{$res['share']}'"));
$ten2 = mysql_fetch_array(mysql_query("SELECT `name` FROM `users` WHERE `id`='{$ltext['user_id']}'"));
if($res['share'] != 0) {
if($ltext['img'] == 1) {
echo '<span class="gray">'.($res['user_id'] == $user_id ? 'Bạn' : ''.$ten['name'].'').' đã chia sẻ một hình ảnh của '.($ltext['user_id'] == $user_id ? 'bạn' : ''.$ten2['name'].'').':</span><br />';
} else {
echo '<span class="gray">'.($res['user_id'] == $user_id ? 'Bạn' : ''.$ten['name'].'').' đã chia sẻ một tâm trạng của '.($ltext['user_id'] == $user_id ? 'bạn' : ''.$ten2['name'].'').':</span><br />';
}
}
if($res['img'] == 1 && $res['share'] == 0) {
echo '<span class="gray">'.($res['user_id'] == $user_id ? 'Bạn' : ''.$ten['name'].'').' đã đăng một hình ảnh:</span><br />';
}
//het hinh anh
$cut = 500;
if(strlen($res['text']) > $cut) {
$text = mb_substr($res['text'], 0, $cut);
$text = html_entity_decode($text, ENT_QUOTES, 'UTF-8');
$text = functions::checkout($text, 1, 1);
echo functions::smileys($text);
echo '.... <a href="/users/profile.php?act=status&user='.$user['id'].'&stt&id='.$res['id'].'">Đọc tiếp...>></a><br />';
} else {
$text = functions::checkout($res['text'], 1, 1);
echo functions::smileys($text);
echo '<br />';
}
if($res['share'] != 0) {
if($ltext['img'] == 1) {
echo '<div class="menu" style="margin: 3px 6px 3px 6px"><a href="/users/profile.php?user='.$ltext['user_id'].'">'.functions::nickcolor($ltext['user_id']).'</a> ('.functions::display_date($ltext['time']).')<br /><span class="gray">Đã đăng một <a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'" style="color:gray">hình ảnh</a>:</span><br />';
if(strlen($ltext['text']) > $cut) {
$text = mb_substr($ltext['text'], 0, $cut);
$text = html_entity_decode($text, ENT_QUOTES, 'UTF-8');
$text = functions::checkout($text, 1, 1);
echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
echo '....<br /><a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'">Đọc tiếp.</a>';
} else {
$text = functions::checkout($ltext['text'], 1, 1);
echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
}
$GetImageSize = GetImageSize('../files/status/'.$res['share'].'.png');
if($GetImageSize){
echo '<div align="center"><a href="/files/status/'.$res['share'].'.png"><img src="/files/status/'.$res['share'].'.png" alt="image" style="max-width: 120px; height: auto;" /></a></div>';
}else{
echo '<div align="center">Link ảnh không tồn tại..!</div>';
}
echo '</div>';
} else {
echo '<div class="menu" style="margin: 3px 6px 3px 6px"><a href="/users/profile.php?user='.$ltext['user_id'].'">'.functions::nickcolor($ltext['user_id']).'</a> ('.functions::display_date($ltext['time']).')<br /><span class="gray">Trong một <a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'" style="color:gray">tâm trạng</a>:</span><br />';
if(strlen($ltext['text']) > $cut) {
$text = mb_substr($ltext['text'], 0, $cut);
$text = html_entity_decode($text, ENT_QUOTES, 'UTF-8');
$text = functions::checkout($text, 1, 1);
echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
echo '....<br /><a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['share'].'">Khác</a>';
} else {
$text = functions::checkout($ltext['text'], 1, 1);
echo functions::smileys($text, $ltext['rights'] ? 1 : 0);
}
echo '</div>';
}
}
if($res['img'] == 1 && $res['share'] == 0) {
$GetImageSize = GetImageSize('../files/status/'.$res['id'].'.png');
if($GetImageSize){
echo '<div align="center"><a href="/files/status/'.$res['id'].'.png"><img src="/files/status/'.$res['id'].'.png" alt="image" style="max-width: 120px; height: auto;" /></a></div>';
}else{
echo '<div align="center">Link ảnh không tồn tại..!</div>';
}
}
$kt = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_like` WHERE `id`='".$res['id']."'AND `user_id`='".$user_id."'"), 0);
$like = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_like` WHERE `id`='".$res['id']."'"), 0);
$dembv = mysql_result(mysql_query("SELECT COUNT(*) FROM `status_cmt` WHERE `id`='".$res['id']."'"), 0);
echo '</div>';
if ($user_id) {
echo '<div style="background-color: #f8f8f8; padding: 3px 4px 4px 4px; border-color: #D5D5D5; border-style: solid; border-width: 1px 0 0 0; font-size: x-small;">'.($res['user_id'] == $user_id || $res['user_id'] != $user_id ? ''.($like == 0 ? '' : '<a href="/users/profile.php?act=status&user='.$user['id'].'&showlike&id='.$res['id'].'">'.functions::image('like.png', array('class' => 'icon-inline')).$like.'</a> · ').' '.($kt == 0 ? ''.($user_id ? '<a href="/users/profile.php?act=status&user='.$user['id'].'&thich&id='.$res['id'].'">Thích</a>' : '').'' : '<a href="/users/profile.php?act=status&user='.$user['id'].'&bothich&id='.$res['id'].'">Bỏ thích</a>').'' : '<a href="/users/profile.php?act=status&user='.$user['id'].'&showlike&id='.$res['id'].'">'.functions::image('like.png', array('class' => 'icon-inline')).$like.'</a>').''.(!$user_id ? ''.functions::image('like.png', array('class' => 'icon-inline')).$like.'' : '').' · <a href="/users/profile.php?act=status&user='.$user['id'].'&binhluan&id='.$res['id'].'">Bình luận('.$dembv.')</a> · <a href="/users/profile.php?act=status&user='.$user['id'].'&chiase&id='.$res['id'].'">Chia sẻ</a>'.($res['user_id'] == $user_id && ($res['time'] + 600) > $time ? ' · <a href="/users/profile.php?act=status&user='.$user['id'].'&edit&id='.$res['id'].'"><font color="red">Edit</font></a>' : '').''.($datauser['rights'] >= 8 || $res['user_id'] == $user_id || $res['wall'] == $user_id ? ' · <a href="/users/profile.php?act=status&user='.$user['id'].'&xoa&id='.$res['id'].'"><font color="red">Xóa</font></a>' : '').'</div>';
}
echo '</div>';
$i++;
}
} else {
echo '<div class="rmenu">Không có status nào!</div>';
}
if ($tong > $kmess){
echo '<div class="topmenu">' . functions::display_pagination('profile.php?user='.$user['id'].'&', $start, $tong, $kmess) . '</div>';
}
?>