- 01
 - 02
 - 03
 - 04
 - 05
 - 06
 - 07
 - 08
 - 09
 - 10
 - 11
 - 12
 - 13
 - 14
 - 15
 - 16
 - 17
 - 18
 - 19
 - 20
 - 21
 - 22
 - 23
 - 24
 - 25
 - 26
 - 27
 - 28
 - 29
 - 30
 - 31
 - 32
 - 33
 - 34
 - 35
 - 36
 - 37
 - 38
 - 39
 - 40
 - 41
 - 42
 - 43
 - 44
 - 45
 - 46
 - 47
 - 48
 - 49
 - 50
 - 51
 - 52
 - 53
 - 54
 - 55
 - 56
 - 57
 - 58
 - 59
 - 60
 - 61
 - 62
 - 63
 - 64
 - 65
 - 66
 - 67
 - 68
 - 69
 - 70
 - 71
 - 72
 - 73
 - 74
 - 75
 - 76
 - 77
 - 78
 - 79
 - 80
 
                        if (empty($_GET['mms']) and empty($_GET['mass']) and empty($_GET['showuser']) and empty($_GET['user']) and empty($_GET['rate'])) {
$db = mysql_connect ( "mysql.hostinger.ru", "u391920429_gala", "kirill1998" );
mysql_select_db ( "u391920429_gala", $db );
$pas = $_POST['pas'];
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
$lop = addcslashes($pass1, '?%');
$jjj = mysql_real_escape_string ($lop);
$pol = addcslashes($pass2, '?%');
$kkk = mysql_real_escape_string ($pol);
$i = $_GET['edit'];
$mail = $_POST['mail'];
$stat = $_POST['stat'];
$ava = $_POST['ava'];
$ie = addcslashes($i, '?%');
$ieq = mysql_real_escape_string ($ie);
$id = preg_replace('~[^a-z0-9 \x80-\xFF]~i', "",$ieq);
$lol = addcslashes($mail, '?%');
$ooo = mysql_real_escape_string ($lol);
$per = addcslashes($stat, '?%');
$adr = mysql_real_escape_string ($per);
$po = addcslashes($ava, '?%');
$popa = mysql_real_escape_string ($po);
$re=mysql_query("SELECT * FROM users WHERE id='$id'", $db);
$user = $_SESSION["id"];
if (mb_strlen($_POST['mail']) >= 4) {
$up=mysql_query("UPDATE users SET email='$ooo' WHERE id='$user'", $db);
}
if (mb_strlen($_POST['stat']) >= 5) {
$up=mysql_query("UPDATE users SET stat='$adr' WHERE id='$user'", $db);
}
if (mb_strlen($_POST['ava']) >= 4) {
$up=mysql_query("UPDATE users SET ava='$popa' WHERE id='$user'", $db);
}
$name = $_SESSION["name"];
$result=mysql_query("SELECT * FROM users WHERE name='$name'", $db);
$myrow=mysql_fetch_array($result);
$passs = md5($pas);
if ($passs == $myrow["pass"]) {
if ($jjj == $kkk) {
if (mb_strlen($jjj) >=5) {
$mdpass = md5($jjj);
$up=mysql_query("UPDATE users SET pass='$mdpass' WHERE id='$user'", $db);
}
}
}
$res=mysql_fetch_array($re);
if ($_SESSION["id"] == $id) {
	if ($res['ban'] == 1) {
		echo '<div class="user_prof">
		<div class="name_prof_block">Профиль</div>
				<form name="set" action="/prof.php?edit='.($res['id']).'" method="post">
				<div class="name_prof_b">Почта</div>
					<input class="form_mail" value="'.$res['email'].'" name="mail" type="text"/>
				<div class="name_prof_b">Аватар</div>
					<input class="form_ava" value="'.$res['ava'].'" name="ava" type="text"/>
				<div class="name_prof_b">Статус</div>
					<div class="bb_code_div">'.BB_PANEL('set','stat').'</div>
					<textarea class="form_status" name="stat" type="text">'.$res['stat'].'</textarea>
					<input class="add_news" value="Сохранить" type="submit"/>
				</form>
		</div>';
		echo '<div class="stat_prof">
		<div class="name_prof_block">Пароль</div>
				<form action="" method="post">
					<input class="form_mail" placeholder="Старый пароль" name="pas" type="text"/>
					<input class="form_mail" placeholder="Новый пароль" name="pass1" type="text"/>
					<input class="form_ava" placeholder="Повторите новый пароль" name="pass2" type="text"/>
					<input class="add_news" value="Сменить пароль" type="submit"/>
				</form>
		</div>';
	}
	if ($res['ban'] == 0) {
	echo '<div class="user_prof">Ваш аккаунт заблокирован<a class="logout_prof" href="/?step=exit">Выход</a></div>';
	}
}
else {
		echo 'Доступ запрещен';
}
}