някои навитак да го опраи ?

phpMaster

Registered
Код:
<title>By: TanecA - ������</title>
<form method="POST">
URL �� vbox7.com: <br><input type="text" name="vid">
<br><input type="submit" class="btn" name="clips" value="������">
</form>
<?php
include"conf.php";
if($_POST['clips']){
$fail = explode(':',$_POST['vid']);
$dir = substr($fail[2],0,2);
$source = file_get_contents($_POST['vid']);
$title = explode("<title>", $source);
$title = explode("</title>", $title[1]);
$title=str_replace(" / Vbox7","",$title[0]);
$title=iconv('utf-8','windows-1251',urldecode($title));
$ime = "$title";
$clip="http://media.vbox7.com/s/$dir/$fail[2].flv";
$pic="http://i47.vbox7.com/p/$fail[2]3.jpg";
$number = explode(":", $_POST['vid']);
$i = substr($number[2],0 ,2);
$vid1 = "http://media.vbox7.com/s/$i/$number[2].flv";
if(@fopen($vid1, "r"))
{
$vid="$vid1";
{
$vid = "$number[2]";
}
}
$checkurl = mysql_query("SELECT vid FROM clips WHERE vid='$_POST[vid]'");
if ($ime>0) {
echo "���� ���� ���� � ��� �������";
}
if(eregi('vbox7.com',$_POST['vid']) && isset($_POST['clips'])){
$query = mysql_query("INSERT INTO `clips` (ime, vid, pic, id) VALUES('$title','$vid','$pic','NULL')");
echo "������� ������ ���� ot vbox!<br><a href=\"index.php\">����� �� � ��������� ��������</a>";?><?
}
}
?>
нещо не иска да сеифа в url и vid ?
 
само да кайа че тоя кадет го опраи няма да помогне само на мен ами и на мн др хора :)
 
При положение, че към този код има и SQL и трябва conf.php ние как да го оправим? Като самият скрипт не работи ?

п.п Нали си phpMaster, не можеш ли да го оправиш?
 
добре де не ми се караи направих си ника така поради това че само ми трият профила ... btw ето ги всички работи :) index.php
Код:
<title>By: TanecA - ������</title>
<a href="add.php">������ ����</a>
<?php
include"conf.php";
$pp = "5";
//�������� �� ��������
$table = "clips";

$total = mysql_result(mysql_query("SELECT COUNT(id) FROM $table "),0);
$numofpages = $total / $pp;
if (!isset($_GET['page'])) {
$page = 1;
}
else {
$page = $_GET['page'];
}
$limitvalue = $page * $pp - ($pp);


echo"<table align=\"center\" border=\"1\">";

$i="0";
$nared="4";
$query="SELECT * FROM $table ORDER BY id";
$result=mysql_query($query);
while ( $r = mysql_fetch_array( $result )){
$i++;
$width=ceil(100/$nared);
$ime=$r[ime];
$pic=$r[pic];
$klik=$r[klik];
if (strlen($ime)>16)
{$t='...';}
$ime = substr($ime,0,16);
echo"<td width=\"130\" align=\"center\" border=\"1\" background=\"images/b.gif\">
<a href=\"view.php?id=$r[id]\" onmouseover=\"return overlib('$r[ime]')\" onmouseout=\"return nd();\"><img src=\"$pic\" border=\"0\" width=\"120\" height=\"90\"></div><br><b>$ime$t</a>";
if ($i==$nared)
{
echo "</tr>
<tr>";
$i=0;
}
}
echo"</table>"; ?>
add.php
Код:
 <title>By: TanecA - ������</title>
<form method="POST">
URL �� vbox7.com: <br><input type="text" name="vid">
<br><input type="submit" class="btn" name="clips" value="������">
</form>
<?php
include"conf.php";
if($_POST['clips']){
$fail = explode(':',$_POST['vid']);
$dir = substr($fail[2],0,2);
$source = file_get_contents($_POST['vid']);
$title = explode("<title>", $source);
$title = explode("</title>", $title[1]);
$title=str_replace(" / Vbox7","",$title[0]);
$title=iconv('utf-8','windows-1251',urldecode($title));
$ime = "$title";
$clip="http://media.vbox7.com/s/$dir/$fail[2].flv";
$pic="http://i47.vbox7.com/p/$fail[2]3.jpg";
$number = explode(":", $_POST['vid']);
$i = substr($number[2],0 ,2);
$vid1 = "http://media.vbox7.com/s/$i/$number[2].flv";
if(@fopen($vid1, "r"))
{
$vid="$vid1";
{
$vid = "$number[2]";
}
}
$checkurl = mysql_query("SELECT vid FROM clips WHERE vid='$_POST[vid]'");
if ($ime>0) {
echo "���� ���� ���� � ��� �������";
}
if(eregi('vbox7.com',$_POST['vid']) && isset($_POST['clips'])){
$query = mysql_query("INSERT INTO `clips` (ime, vid, pic, id) VALUES('$title','$vid','$pic','NULL')");
echo "������� ������ ���� ot vbox!<br><a href=\"index.php\">����� �� � ��������� ��������</a>";?><?
}
}
?>
conf.php
Код:
<?php
$user = "root";
$pass = "";
$db = "video";
$host = "localhost";
$connection = mysql_connect($host, $user, $pass) or die("������ �� ���� �� �� ������ ��� ������ �����1");
$db = mysql_select_db($db,$connection)or die("������ �� ���� �� �� ������ ��� ������ �����2");
$chars="set character set latin1";
mysql_query($chars);
?>
view.php
Код:
<title>By: TanecA - �������</title>
<?php
include"conf.php";
$chars="set character set latin1";
mysql_query($chars);
$id = (int) $_GET['id'];
$query = mysql_query("SELECT * FROM `clips` WHERE id='$id'")
	or die (mysql_error());
$num = mysql_num_rows($query);
	if ($num < 1)
	{ die ('���� ������ �����!'); }
$row = mysql_fetch_assoc($query);
?>
<?php echo "$row[ime]"; ?>
<br><br>
<embed type="application/x-shockwave-flash" src="http://i48.vbox7.com/player/vBoxPlayerSV35.swf?v=2" id="VBOXplayer" name="VBOXplayer" bgcolor="#000000" quality="high" allowscriptaccess="always" allowfullscreen="true" flashvars="vid=<?php echo "$row[vid]"; ?>&autoplay=1&karaokeMode=true&karaokeEnabled=false&nstat=true&voteEnabled=false&relatedEnabled=false&subsData=%5B%7B%22s%22%3A%22www.Fun-Zone.bg2.info%22%2C%22t%22%3A195%2C%22f%22%3A0%7D%5D" width="520" height="450">
<br><br>
<?php
// update views
mysql_query("UPDATE clips SET klik=klik +1 WHERE id='$id'")
	or die (mysql_error());

?>
<?php echo "��������: <b>$row[klik]</b>"; ?>
sql.sql
Код:
CREATE TABLE `clips` (
`ime` varchar(255) NOT NULL default '',
`url` varchar(255) NOT NULL default '',
`pic` text NOT NULL,
`vid` text NOT NULL,
`id` int(11) NOT NULL auto_increment,
`klik` varchar(50) NOT NULL default '0',
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;
 

Back
Горе