-
-
-
-
+
Ожидают модерации
diff --git a/views/pages/Admin/Settings.php b/views/pages/Admin/Settings.php
index 06502bf..b6d6d2d 100644
--- a/views/pages/Admin/Settings.php
+++ b/views/pages/Admin/Settings.php
@@ -130,7 +130,8 @@ function renderInputs($data, $prefix = '')
'.$nt['id'].'
@@ -139,6 +140,8 @@ function renderInputs($data, $prefix = '')
Запустить Остановить
';
+ }
+
}
diff --git a/views/pages/Admin/UserEdit.php b/views/pages/Admin/UserEdit.php
index 50b970b..3b957d6 100644
--- a/views/pages/Admin/UserEdit.php
+++ b/views/pages/Admin/UserEdit.php
@@ -1,12 +1,15 @@
i('id') === null) {
die('Пользователь не найден');
}
-function updateJson($data, $key, $value) {
+function updateJson($data, $key, $value)
+{
$data[$key] = $value;
return $data;
}
@@ -25,65 +28,75 @@ if (isset($_POST['subbtn'])) {
$updatedJson = updateJson($currentJson, 'premoderation', $premoderation);
$updatedJsonString = json_encode($updatedJson, JSON_PRETTY_PRINT);
- if (($admin === 1 && Auth::userid() === 1) || ($admin != 1 && Auth::userid() != 1)) {
- DB::query("UPDATE users SET status = ?, admin = ?, content = ? WHERE id = ?", [
- $accountstatus,
- $admin,
- $updatedJsonString,
- $userId
- ]);
- echo "Данные успешно обновлены.";
- } else {
- echo 'Не удалось обновить данные';
- }
-
+ DB::query("UPDATE users SET status = ?, admin = ?, content = ? WHERE id = ?", [
+ $accountstatus,
+ $admin,
+ $updatedJsonString,
+ $userId
+ ]);
-
+ $alert = [
+ 'type' => 'success',
+ 'code' => 'Данные успешно обновлены'
+ ];
} else {
echo "Ошибка: JSON данные не найдены.";
}
}
+if ($alert != null) {
+ echo '
-
+
@@ -110,7 +112,7 @@ if ($photo->i('id') !== null) {
i('id') !== null) {
.autocomplete {
position: absolute;
- background: white;
+ background: #fff;
border: 1px solid #ddd;
- max-height: 200px;
+ box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1);
+ min-width: 200px;
+ max-height: 300px;
overflow-y: auto;
- z-index: 1001;
- box-shadow: 0 2px 4px rgba(0, 0, 0, 0.2);
+ z-index: 10000;
+ transform: translateY(2px);/
}
.autocomplete-item {
@@ -861,67 +865,67 @@ if ($photo->i('id') !== null) {
+ $('#err').html(content);
+ $('#err .p20').slideDown(500);
+ }
+
' . $alert['code'] . '
';
+}
?>
-
\ No newline at end of file
diff --git a/views/pages/Main.php b/views/pages/Main.php
index 2c8480a..9c03ab0 100644
--- a/views/pages/Main.php
+++ b/views/pages/Main.php
@@ -214,7 +214,7 @@ LIMIT 10;');
$first_id = $photos[0]['id'];
$last_id = end($photos)['id'];
?>
-
+
diff --git a/views/pages/MapMedia.php b/views/pages/MapMedia.php
index b9f16ff..676db9b 100644
--- a/views/pages/MapMedia.php
+++ b/views/pages/MapMedia.php
@@ -108,7 +108,7 @@ use \App\Models\{Vehicle, User};
diff --git a/views/pages/Profile/Index.php b/views/pages/Profile/Index.php
index 8889a11..3a51c7d 100644
--- a/views/pages/Profile/Index.php
+++ b/views/pages/Profile/Index.php
@@ -30,259 +30,269 @@ $birthdate = json_decode($userprofile->i('content'), true)['aboutbirthday']['val
-
+
i('id') === (int)explode('/', $_SERVER['REQUEST_URI'])[2]) || $usercttc === True) { ?>
- i('username')) ?>i('admin') === 1) { echo '
-
- Профиль на transphoto.org
Пользователь не зарегистрирован на сервере '.NGALLERY['root']['title'].'. Информация может быть неполной.
Открыть на transphoto.org'; - } - if ($userprofile->i('admin') === 1) { - echo 'Администратор сервера'; - } else if ($userprofile->i('admin') === 2) { - echo 'Фотомодератор'; - } - - if ($userprofile->i('id') === Auth::userid()) { ?> - - -
+ $.get('/api/subscribe', {
+ action: 'subscribe',
+ id: i('id') ?>,
+ subj: 'a'
+ }, function(r) {
+ if (r != 0 && r != 1) {
+ toggle.toggleClass('on');
+ alert(r);
+ } else toggle.attr('class', (r == 1) ? 'toggle on' : 'toggle');
+ });
+ });
+ });
+
+ $userprofile->i('id'), ':followerid' => Auth::userid()))) {
+ $class = 'on';
+ }
+ ?>
+
+
-
-
+
+
diff --git a/views/pages/Profile/LK/Profile.php b/views/pages/Profile/LK/Profile.php
index 0d90242..89d0cba 100644
--- a/views/pages/Profile/LK/Profile.php
+++ b/views/pages/Profile/LK/Profile.php
@@ -24,7 +24,7 @@ $user = new User(Auth::userid());
-
+
-
-
-
- i('username')) ?>i('admin') === 1) { echo '
'; } ?>
-
- Профиль на transphoto.orgПользователь не зарегистрирован на сервере '.NGALLERY['root']['title'].'. Информация может быть неполной.
Открыть на transphoto.org'; - } - if ($userprofile->i('admin') === 1) { - echo 'Администратор сервера'; - } else if ($userprofile->i('admin') === 2) { - echo 'Фотомодератор'; - } - - if ($userprofile->i('id') === Auth::userid()) { ?> - - -
-
-
+
+
-
-
+
-
+
+
+
+
|
+
-
-
+ О себе
- -О себе
+ + + - - - i('id') != Auth::userid()) { ?> - - $userprofile->i('id'), ':followerid' => Auth::userid()))) { -$class = 'on'; - } - ?> -
+
+
+
+
+
+ Пользователей, подписанных на мои фотографии: $userprofile->i('id')))[0]['COUNT(*)']; ?>
+
- Пользователей, подписанных на мои фотографии: $userprofile->i('id')))[0]['COUNT(*)'];?>
-
-
- Пользователь не найден
Пользователь не найден
+
diff --git a/views/pages/Profile/LK/Profile/Personalization.php b/views/pages/Profile/LK/Profile/Personalization.php
index ad307c8..d684e62 100644
--- a/views/pages/Profile/LK/Profile/Personalization.php
+++ b/views/pages/Profile/LK/Profile/Personalization.php
@@ -8,11 +8,12 @@ $themeManager = new ThemeManager();
$themeManager->loadThemes();
$themesList = $themeManager->getAllThemes();
-var_dump($_SESSION);
+$selectedTheme = $_SESSION['selected_theme'];
+
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['theme_id'])) {
try {
$themeManager->saveThemeToProfile($_POST['theme_id']);
- header('Location: ' . $_SERVER['REQUEST_URI']);
+ die('');
exit;
} catch (Exception $e) {
error_log($e->getMessage());
diff --git a/views/pages/Rules.php b/views/pages/Rules.php
index b9a0c05..c170dd4 100644
--- a/views/pages/Rules.php
+++ b/views/pages/Rules.php
@@ -1,288 +1,44 @@
$value) {
- if (strpos($key, 'rsn__') === 0) {
- $id = substr($key, 5);
- $filteredIds[] = $id;
- }
- }
-
- if (!empty($filteredIds)) {
- foreach ($filteredIds as $id) {
- $val = ((int)$_POST['rsn__' . $id] === 0) ? 1 : 2;
- DB::query('UPDATE tasks SET checked=:c WHERE id=:id', [':id' => $id, ':c' => $val]);
- }
- }
-}
-
-if (isset($_POST['approve'])) {
- saveTasks();
- DB::query('UPDATE applications_details SET checked=:ch WHERE category_id=:id AND user_id=:uid',
- [':ch' => 1, ':id' => $_GET['id'], ':uid' => $_GET['uid']]);
-} elseif (isset($_POST['decline'])) {
- saveTasks();
- DB::query('UPDATE applications_details SET checked=:ch WHERE category_id=:id AND user_id=:uid',
- [':ch' => 2, ':id' => $_GET['id'], ':uid' => $_GET['uid']]);
-}
-
-$categoryTitle = htmlspecialchars(DB::query('SELECT title FROM categories_sub WHERE id=:id', [':id' => $_GET['id']])[0]['title']);
-$isAdmin = (int)($_GET['adm'] ?? 0) === 1;
-$userId = $isAdmin ? $_GET['uid'] : isLoggedIn();
-$subs = DB::query('SELECT * FROM tasks WHERE category_id=:id AND user_id=:uid', [':id' => $_GET['id'], ':uid' => $userId]);
-
-$appDetails = DB::query('SELECT * FROM applications_details WHERE user_id = :uid AND category_id = :cid',
- [':uid' => $userId, ':cid' => $_GET['id']]);
-$formData = $appDetails[0] ?? [
- 'experience' => '',
- 'work_days' => '[]',
- 'work_time_from' => '',
- 'work_time_to' => '',
- 'description' => '',
- 'myself' => 0
-];
-$workDays = json_decode($formData['work_days'], true);
?>
-
+
+
-
-
-
-
-
-
-
-
-
-
- Результаты поиска-Найдено изображений: $_GET['id']))[0]['COUNT(*)']?> · Новый поиск - $_GET['id'])); - foreach ($photos as $p) { - echo '
+
+
|
'; $pinc = 'Открепить'; } echo ' diff --git a/app/Services/Captcha.php b/app/Services/Captcha.php new file mode 100644 index 0000000..9c2cbae --- /dev/null +++ b/app/Services/Captcha.php @@ -0,0 +1,98 @@ +secretKey = $secretKey; + } + + public function setToken(string $token): void + { + $this->token = $token; + } + + public function setRemoteIp(string $ip): void + { + $this->remoteIp = $ip; + } + + public function setExpectedAction(string $action): void + { + $this->expectedAction = $action; + } + + public function setExpectedCdata(string $cdata): void + { + $this->expectedCdata = $cdata; + } + + public function verify(): array + { + if (empty($this->token)) { + throw new Exception('Turnstile token is missing'); + } + + if (empty($this->secretKey)) { + throw new Exception('Secret key is not configured'); + } + + $data = [ + 'secret' => $this->secretKey, + 'response' => $this->token + ]; + + if ($this->remoteIp) { + $data['remoteip'] = $this->remoteIp; + } + + $url = 'https://challenges.cloudflare.com/turnstile/v0/siteverify'; + $options = [ + 'http' => [ + 'header' => "Content-type: application/x-www-form-urlencoded\r\n", + 'method' => 'POST', + 'content' => http_build_query($data) + ] + ]; + + $context = stream_context_create($options); + $response = file_get_contents($url, false, $context); + + if ($response === false) { + throw new Exception('Failed to verify Turnstile token'); + } + + $result = json_decode($response, true); + + if (!is_array($result)) { + throw new Exception('Invalid response from Turnstile server'); + } + + if (!$result['success']) { + $errorCodes = $result['error-codes'] ?? ['unknown-error']; + throw new Exception('Turnstile verification failed: ' . implode(', ', $errorCodes)); + } + + $this->validateAdditionalParameters($result); + + return $result; + } + + private function validateAdditionalParameters(array $response): void + { + if ($this->expectedAction && ($response['action'] ?? '') !== $this->expectedAction) { + throw new Exception("Action mismatch. Expected: {$this->expectedAction}, Received: {$response['action']}"); + } + + if ($this->expectedCdata && ($response['cdata'] ?? '') !== $this->expectedCdata) { + throw new Exception("Cdata mismatch. Expected: {$this->expectedCdata}, Received: {$response['cdata']}"); + } + } +} \ No newline at end of file diff --git a/index.php b/index.php index 3c9b3a7..7a04f6f 100644 --- a/index.php +++ b/index.php @@ -11,7 +11,9 @@ class App { public static function start() { - error_reporting(E_ALL & ~E_WARNING); + ini_set('display_errors', 0); + ini_set('display_startup_errors', 0); + error_reporting(E_ALL); if (file_exists($_SERVER['DOCUMENT_ROOT'] . '/ngallery.yaml')) { define("NGALLERY", Yaml::parse(file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/ngallery.yaml'))['ngallery']); @@ -35,9 +37,8 @@ class App } } catch (PDOException $ex) { echo '
Произошла ошибка MySQL
'.nl2br($ex).'Произошла скриптовая ошибка PHP
'.nl2br($ex).'Отредактировать комментарий
+ height: 200px;" name="wtext" id="bodypost__commedit` + + id + + `">` + + value + + `
Удалить комментарий
Вы действительно хотите удалить комментарий? Действие необратимо.Модели
- Создать -+
+
'; + $num++; + } + echo '
+
' . $n['body'] . '