Просмотр поста

case "give":
echo '<div class="menu">';
if (isset($_GET['yes'])) {
$user = isset($_GET['user']) ? abs(intval($_GET['user'])) : 0;
$count1 = mysql_result(mysql_query("select count(*) from `users` where `id` = '".$user."'"),0);
$count2 = mysql_result(mysql_query("select count(*) from `awards` where `id` = '".$id."'"),0);
$count3 = mysql_result(mysql_query("select count(*) from `award_users` where `id_award` = '".$id."' and `id_user` = '".$user."'"),0);
if ($count3 or !$count1 or !$count2) header("location: panel.php?id=$user");
else {
mysql_query("INSERT INTO `award_users` SET
`id_award`='" . $id . "',
`id_user`='" . $user . "',
`id_who`='" . $user_id . "',
`time`='" . time() . "'
");
echo 'Пользователь награжден!';
}
}
else {
 $user = isset($_GET['user']) ? abs(intval($_GET['user'])) : 0;
 if ($user and $id) {
 echo 'Вы действительно хотите наградить юзера?<br/>';
 echo '<a href="panel.php?act=give&amp;user='.$user.'&amp;id='.$id.'&amp;yes">Наградить</a> | <a href="panel.php?id='.$user.'">Отмена</a>';
}
else header("location: panel.php?id=$user");
}
echo '</div>';
echo '<div class="tmn"><a href="panel.php?id='.$user.'">Назад</a></div>';
break;