<? //kontrola
session_start();
header('Content-Type: text/html; charset=windows-1250');
include "db.php"; $sid = session_id(); $ip = $_SERVER["REMOTE_ADDR"];
$result_user = mysql_query("SELECT * FROM user WHERE id=\"".$_SESSION["id"]."\"", $link) or die ("Chyba!");
$user = mysql_fetch_array($result_user);
$result_room = mysql_query("SELECT * FROM room WHERE id=\"".$_SESSION["miestnost"]."\"", $link) or die ("Chyba!");
$room = mysql_fetch_array($result_room);
if ($_SESSION["id"] == $user["id"] and $_SESSION["sid"] == $sid and $_SESSION["ip"] == $ip and $_SESSION["miestnost"] == $user["miestnost"])
{
if ($_REQUEST["akcia"] == "history") {mysql_query("UPDATE $room[tabulka] SET view=\"0\" WHERE view=\"1\"", $link);}
if ($_REQUEST["akcia"] == "odoslat" and $_REQUEST["text"] != "") {
$cas = time();
$ip = $_SERVER["REMOTE_ADDR"];
$od = $user["meno"];
$text = $_REQUEST["text"];
$text = nl2br($text);
$oprava = "INSERT INTO $room[tabulka] (od,ip,cas,text,view)VALUES ('$od','$ip','$cas','$text','1')";
$dooprava = mysql_query($oprava, $link) or die ("Chyba!");
$casformat = date("d.m.Y H:i:s", $cas);
$idmessage = mysql_insert_id();
}
if ($_REQUEST["akcia"] == "chat") {
$last_id = $_REQUEST["last_id"];
$dotaz = mysql_query("SELECT * FROM $room[tabulka] WHERE view = \"1\" ORDER BY id desc", $link);
while ($vytah = mysql_fetch_array($dotaz)):
$vysledok = $vysledok.'<DIV class=glass-item id='.$vytah["id"].'><TABLE><TR><TD width=140><B>'.$vytah["od"].'</B><BR>'.date("d.m.Y H:i:s", $vytah["cas"]).'</TD><TD>'.$vytah["text"].'</TD></TR></TABLE></DIV>';
endwhile;
echo $vysledok;
}
if ($_REQUEST["akcia"] == "user")
{
$i = 0;
$vytiahnutie = mysql_query("SELECT * FROM `user` WHERE miestnost=\"".$_SESSION["miestnost"]."\"", $link);
while ($vytah = mysql_fetch_array($vytiahnutie)):
$vysledok = $vysledok.'<DIV class=user><LI>'.$vytah["meno"].'</LI></DIV>';
$i++;
endwhile;
$vysledok = "<UL>".$vysledok."</UL>";
echo "{ \"vysledok\": \"$vysledok\", \"ludi\": \"$i\" }";
}
if ($_REQUEST["akcia"] == "aktivita")
{
$time = time();
$oprava = "UPDATE user SET aktivita=\"".$time."\" WHERE id=\"".$user["id"]."\"";
mysql_query($oprava, $link) or die ("Chyba!");
}
}
else {echo "Session ERROR - hodnoty sa nezhodujú!!!";}
?>
