Administrator / extrem

<?php





$_POST['order_phone'] = str_replace("-","",$_POST['order_phone']);
$_POST['order_phone'] = str_replace(")","",$_POST['order_phone']);
$_POST['order_phone'] = str_replace("(","",$_POST['order_phone']);
$_POST['order_phone'] = str_replace(" ","",$_POST['order_phone']);
$_POST['order_phone'] = "+38".$_POST['order_phone'];








if(isset($_GET['title_as'])) $_GET['title_as'] = base64_decode($_GET['title_as']);


if(trim(@$_REQUEST['dataFilter'])!=''){
$mass_a1 = explode(";",str_replace("/","",@$_REQUEST['dataFilter']));
$mass_a2 = array();
for($i=0;$i<count($mass_a1);$i++){
	$mas = explode("=",$mass_a1[$i]);
$_GET[trim($mas[0])] = str_replace(",",";",trim($mas[1]));
$_REQUEST[trim($mas[0])] = trim($mas[1]);
}
}



require("./redirect.php");
require("./libs/setup.php");
$setup = new setup();
$objStatics = $setup->setupClass("Statics");
$objCatalogs = $setup->setupClass("Catalogs");


////////////////////////////


if(trim($_GET['rubID'])!='') $_GET['rubID'] = str_replace("/","",$_GET['rubID']);
if(trim($_GET['productID'])!='') $_GET['productID'] = str_replace("/","",$_GET['productID']);

if(!@is_numeric(@$_GET['rubID']))
$_GET['rubID'] = $objCatalogs->db->getOne("SELECT id FROM catalogs_rubrics WHERE translit=?",array(trim($_GET['rubID'])));
elseif(trim(@$_GET['productID'])==''){
$rrrr = $objCatalogs->db->getOne("SELECT translit FROM catalogs_rubrics WHERE id=?",array(trim($_GET['rubID'])));
@header("HTTP/1.1 301 Moved Permanently");
@header("Location: /".$rrrr."-catalogs/");
exit;
}







if(!@is_numeric(@$_GET['productID'])){
//echo $_GET['productID2'];
$_GET['productID'] = $objCatalogs->db->getOne("SELECT id FROM catalogs_products WHERE translit=?",array(trim($_GET['productID'])));
$_GET['productID'] = str_replace("/","",$_GET['productID2']);
}else{
$rrrr = $objCatalogs->db->getOne("SELECT translit FROM catalogs_rubrics WHERE id=?",array(trim($_GET['rubID'])));
$rrrr2 = $objCatalogs->db->getOne("SELECT translit FROM catalogs_products WHERE id=?",array(trim($_GET['productID'])));
$_GET['productID'] = str_replace("/","",$_GET['productID2']);
@header("HTTP/1.1 301 Moved Permanently");
@header("Location: /".$rrrr."-catalogs/".$rrrr2."-".$_GET['productID']."/");
exit;
}









////////////////////////////////////////////// SAVE OPROS

//if(trim($_GET['test'])=="3") print_r($_SESSION);
//echo @$_SESSION['sec_code_session']."<-";

if(trim(@$_REQUEST['saveOpros'])!='' && trim($_POST['code'])=="opros"){

//$opros = $objCatalogs->db->getOne("SELECT ip FROM opros WHERE ip='".trim($_SERVER['REMOTE_ADDR'])."' LIMIT 1;",array());
//$times = $objCatalogs->db->getOne("SELECT time FROM opros WHERE ip='".trim($_SERVER['REMOTE_ADDR'])."' ORDER BY time DESC LIMIT 1;",array());

//echo (time()-$times);

if(trim($_POST['kachestvo'])=='' || trim($_POST['information'])=='' || trim($_POST['interest'])=='' || trim($_POST['glavnaya_storona'])=='' || trim($_POST['nravitsya'])=='' || trim($_POST['izmenit'])=='')
$objCatalogs->tpl->assign("error_opros",'1');
else if(trim(@$_COOKIE['opros'])=='1')
$objCatalogs->tpl->assign("error_golos",'1');
else
if((trim(@$_COOKIE['opros'])!='1') && trim(@$_REQUEST['saveOpros'])!='' && (trim($_POST['kachestvo'])!='' && trim($_POST['information'])!='' && trim($_POST['interest'])!='' && trim($_POST['glavnaya_storona'])!='' && trim($_POST['nravitsya'])!='' && trim($_POST['izmenit'])!='')){

@SetCookie("opros","1");

$objCatalogs->db->query("INSERT INTO `opros` (`ip`, `kachestvo`, `information`, `interest`, `glavnaya_storona`, `nravitsya`, `izmenit`, `time`) VALUES ('".trim($_SERVER['REMOTE_ADDR'])."','".trim($_POST['kachestvo'])."','".trim($_POST['information'])."','".trim($_POST['interest'])."','".trim($_POST['glavnaya_storona'])."','".trim($_POST['nravitsya'])."','".trim($_POST['izmenit'])."','".time()."');");
$objCatalogs->tpl->assign("spasibo",'1');
}elseif($opros=='' && trim(@$_REQUEST['saveOpros'])!='') $objCatalogs->tpl->assign("error_opros",'1');
}else if(trim(@$_REQUEST['saveOpros'])!='') $objCatalogs->tpl->assign("error_opros",'1');
//////////////////////////////////////////////


























if(@$_GET['productID']){
$rating = $objCatalogs->db->getOne("SELECT rating FROM catalogs_products WHERE id=?",array(trim($_GET['productID'])));
$vote_num = $objCatalogs->db->getOne("SELECT vote_num FROM catalogs_products WHERE id=?",array(trim($_GET['productID'])));
if($vote_num=='') $vote_num = 0;
if($rating=='') $rating = 0;



	if( $rating ) $rating = round( ($rating / $vote_num), 0 );
	else $rating = 0;
	$rating = $rating * 17;

$objCatalogs->tpl->assign("rating",$rating);
$objCatalogs->tpl->assign("voices",$vote_num);


if(@$_GET['t']) echo ShowRating(@$_GET['productID'],$_GET['rating'],$_GET['vote_num']);
}



if(@$_GET['rubID']){
$rating = $objCatalogs->db->getOne("SELECT rating FROM catalogs_rubrics WHERE id=?",array(trim($_GET['rubID'])));
$vote_num = $objCatalogs->db->getOne("SELECT vote_num FROM catalogs_rubrics WHERE id=?",array(trim($_GET['rubID'])));
if($vote_num=='') $vote_num = 0;
if($rating=='') $rating = 0;



	if( $rating ) $rating = round( ($rating / $vote_num), 0 );
	else $rating = 0;
	$rating = $rating * 17;

$objCatalogs->tpl->assign("rating2",$rating);
$objCatalogs->tpl->assign("voices2",$vote_num);
$objCatalogs->tpl->assign("rating3",round(($rating/$vote_num),2));

if(@$_GET['t']) echo ShowRating(@$_GET['productID'],$_GET['rating'],$_GET['vote_num']);
}
















////////////////////////////

if(trim(@$_SESSION['user']['id'])!="" && trim(@$_GET['productID'])!=''){
$sql = "INSERT INTO `catalogs_stat` (`uid`,`pid`,`cat_id`,`hits`) VALUES ('".$_SESSION['user']['id']."','".$_GET['productID']."','".$_GET['rubID']."','1');";
 $result0 = mysql_query($sql) or die(mysql_error());
}



$objForum = $setup->setupClass('Forum');
$objArticles = $setup->setupClass('Articles');
$objNews = $setup->setupClass('News');
$objAdvices = $setup->setupClass('Advices');
$objAdvices2 = $setup->setupClass('Advices2');
$objGallery = $setup->setupClass('Gallery');
$objOrders = $setup->setupClass('Orders');
$objRubrics = $setup->setupClass('Rubrics');
$objBanners = $setup->setupClass('Banners');
$objGalleryList = $setup->setupClass('GalleryList');
$objVideo = $setup->setupClass('Video');
$objAkcii = $setup->setupClass('Akcii');
$objSale = $setup->setupClass('Sale');
$objReviews = $setup->setupClass('Reviews');

         $action = isset($_REQUEST['action']) ? $_REQUEST['action'] : 'catalogs';

$banner_id = (isset($_GET['rubID']) && $_GET['rubID']>0)?$_GET['rubID']:(isset($_GET['akcii'])?'akcii':$action);

//if(!@is_numeric(@$_GET['rubID']))
//$_GET['rubI'] = $objCatalogs->db->getOne("SELECT id FROM catalogs_rubrics WHERE translit=?",array(trim($_GET['rubID'])));

//if(trim(@$_GET['rubID'])!='')
//$banner_id = trim($_GET['rubI']);

$objBanners->viewBannerBlock($banner_id,1,1);
$objBanners->viewBannerBlock($banner_id,1,2);
$objBanners->viewBannerBlock($banner_id,1,4);
$objBanners->viewBannerBlock($banner_id,1,5);
$objBanners->viewBannerBlock($banner_id,1,6);
$objBanners->viewBannerBlock($banner_id,1,7);
$objBanners->viewBannerBlock($banner_id,1,8);
$objBanners->viewBannerBlock($banner_id,1,9);
$objBanners->viewBannerBlock($banner_id,1,10);
$objBanners->viewBannerBlock($banner_id,1,11);
$objBanners->viewBannerBlock($banner_id,1,12);
$objBanners->viewBannerList($banner_id,1,13);
$objBanners->viewBannerBlock($banner_id,1,14);
/*
if(!isset($_SESSION['counter'])){$_SESSION['counter']=0;}
$_SESSION['counter']++;
  */
if(!isset($_SESSION['curs']))$_SESSION['curs'] = "uah";

if(isset($_GET['curs'])){
 $_SESSION['curs'] = $_GET['curs'];
}
$curs =  $_SESSION['curs'];

if(isset($_POST['exit'])){unset($_SESSION['catalog_user']);}
elseif(isset($_POST['login'],$_POST['psw']) && $objCatalogs->isUser($_POST['login'],$_POST['psw'])){$_SESSION['catalog_user'] = array('login'=>$_POST['login'],'psw'=>$_POST['psw']);}
if(isset($_SESSION['catalog_user']) && $userID=$objCatalogs->isUser($_SESSION['catalog_user']['login'],$_SESSION['catalog_user']['psw'])){}else{$userID = 0;}

         $rule = $setup->getRulesOne($action);
         if($rule['modul']!=null)include($_SERVER['DOCUMENT_ROOT'] . "/modules/{$rule['modul']}");

  $dir = "./includes/";
  $includes_dir = opendir($dir);
  while ( ($inc_file = readdir($includes_dir)) != false )
   if (strstr($inc_file,".php"))
   {
    include($dir . $inc_file);
   }
 





$setup->meta();
$setup->error();
$setup->display();

$path=explode("/",$_SERVER['REQUEST_URI']);
 
//echo $banner_id;





























function ShowRating($id, $rating, $vote_num, $allow = true) {
	global $lang;
	
	if( $rating ) $rating = round( ($rating / $vote_num), 0 );
	else $rating = 0;
	$rating = $rating * 17;

	
	$rated = '
<div id=\'ratig-layer\'><div class="rating" style="float:left;">
		<ul class="unit-rating">
		<li class="current-rating" style="width:'.$rating.'px;">'.$rating.'</li>
		<li><a href="#" title="Óæàñíî" class="r1-unit" onclick="doRate(\'1\', \''.$id.'\'); return false;">1</a></li>
		<li><a href="#" title="Ïëîõî" class="r2-unit" onclick="doRate(\'2\', \''.$id.'\'); return false;">2</a></li>
		<li><a href="#" title="Ñðåäíå" class="r3-unit" onclick="doRate(\'3\', \''.$id.'\'); return false;">3</a></li>
		<li><a href="#" title="Õîðîøî" class="r4-unit" onclick="doRate(\'4\', \''.$id.'\'); return false;">4</a></li>
		<li><a href="#" title="Îòëè÷íî" class="r5-unit" onclick="doRate(\'5\', \''.$id.'\'); return false;">5</a></li>
		</ul>
</div><div class="rating" style="float:left; padding-top:2px;">&nbsp;('.@$vote_num.')</div></div>
';
	
	return $rated;
}
























?>