Хак доски объявлений

 
{* ================================================================================ *}
{* =========================== ошибка ============================================= *}
{* ================================================================================ *}
 
<h1 class="con_heading">{$err_title}</h1>
{if $messages}
    <div class="sess_messages">
        {foreach key=id item=message from=$messages}
            {$message}
        {/foreach}
    </div>
  {/if}
<input type="button" name="back" value="{$LANG.BACK}"  style="font-size:18px" onClick="window.history.go(-1)" />

 
        if ($errors){ $inCore->redirect('/board/'.$id.'/add.html'); } 
 
 
        $filename = '';
        if (isset($_FILES['picture'])){
            $inCore->includeGraphics();
            //dirs
            $uploaddir      = PATH.'/images/board/';
            $realfile       = $_FILES['picture']['name'];
            //next id
            $filename       = md5($realfile . $user_id . time()).'.jpg';
            //filenames
            $uploadfile     = $uploaddir . $realfile;
            $uploadphoto    = $uploaddir . $filename;
            $uploadthumb    = $uploaddir . 'small/' . $filename;
            $uploadthumb2   = $uploaddir . 'medium/' . $filename;
            //uploading
            if (@move_uploaded_file($_FILES['picture']['tmp_name'], $uploadphoto)) {
                @img_resize($uploadphoto, $uploadthumb, $cat['thumb1'], $cat['thumb1'], $cat['thumbsqr']);
                @img_resize($uploadphoto, $uploadthumb2, $cat['thumb2'], $cat['thumb2'], false, $cfg['watermark']);
                if ($cfg['watermark']) { @img_add_watermark($uploadphoto);	}
                @unlink($uploadphoto);
            } else {
				cmsCore::addSessionMessage($_LANG['PHOTO_NOT_UPLOAD'], 'info');
            }
        }
 
        $item_id = $model->addRecord(array(
                                    'category_id'=>$id,
                                    'user_id'=>$user_id,
                                    'obtype'=>$obtype,
                                    'title'=>$title,
                                    'content'=>$content,
                                    'city'=>$city,
                                    'pubdays'=>$pubdays,
                                    'published'=>$published,
                                    'file'=>$filename
                                ));
		if ($published == 1) {
		//регистрируем событие
		cmsActions::log('add_board', array(
					'object' => $title,
					'object_url' => '/board/read'.$item_id.'.html',
					'object_id' => $item_id,
					'target' => $cat['title'],
					'target_url' => '/board/'.$cat['id'],
					'target_id' => $cat['id'],
					'description' => ''
		));
		}
 
        //finish
		if (!$published) { $prmoder = '<p>'.$_LANG['ADV_PREMODER_TEXT'].'</p>'; }
		cmsCore::addSessionMessage('<p><strong>'.$_LANG['ADV_IS_ADDED'].'</strong></p>'.$prmoder, 'info');
		$inCore->redirect('/board/'.$id);
 
    }
 
}
 

 
 if ($errors){
      		 $smarty = $inCore->initSmarty('components', 'error.tpl');
            $smarty->assign('err_title', 'Ошибка');
            $smarty->assign('messages', cmsCore::getSessionMessages());
            $smarty->display('error.tpl');
         // proverka na zapolnenie//
         }
         else {
        $filename = '';
        if (isset($_FILES['picture'])){
            $inCore->includeGraphics();
            //dirs
            $uploaddir      = PATH.'/images/board/';
            $realfile       = $_FILES['picture']['name'];
            //next id
            $filename       = md5($realfile . $user_id . time()).'.jpg';
            //filenames
            $uploadfile     = $uploaddir . $realfile;
            $uploadphoto    = $uploaddir . $filename;
            $uploadthumb    = $uploaddir . 'small/' . $filename;
            $uploadthumb2   = $uploaddir . 'medium/' . $filename;
            //uploading
            if (@move_uploaded_file($_FILES['picture']['tmp_name'], $uploadphoto)) {
                @img_resize($uploadphoto, $uploadthumb, $cat['thumb1'], $cat['thumb1'], $cat['thumbsqr']);
                @img_resize($uploadphoto, $uploadthumb2, $cat['thumb2'], $cat['thumb2'], false, $cfg['watermark']);
                if ($cfg['watermark']) { @img_add_watermark($uploadphoto);	}
                @unlink($uploadphoto);
            } else {
				cmsCore::addSessionMessage($_LANG['PHOTO_NOT_UPLOAD'], 'info');
            }
        }
 
        $item_id = $model->addRecord(array(
                                    'category_id'=>$id,
                                    'user_id'=>$user_id,
                                    'obtype'=>$obtype,
                                    'title'=>$title,
                                    'content'=>$content,
                                    'city'=>$city,
                                    'pubdays'=>$pubdays,
                                    'published'=>$published,
                                    'file'=>$filename
                                ));
		if ($published == 1) {
		//регистрируем событие
		cmsActions::log('add_board', array(
					'object' => $title,
					'object_url' => '/board/read'.$item_id.'.html',
					'object_id' => $item_id,
					'target' => $cat['title'],
					'target_url' => '/board/'.$cat['id'],
					'target_id' => $cat['id'],
					'description' => ''
		));
		}
 
        //finish
		if (!$published) { $prmoder = '<p>'.$_LANG['ADV_PREMODER_TEXT'].'</p>'; }
		cmsCore::addSessionMessage('<p><strong>'.$_LANG['ADV_IS_ADDED'].'</strong></p>'.$prmoder, 'info');
		$inCore->redirect('/board/'.$id);
 
    }
    }
}