<center>
<?php
include "conreal.php";
$id = stripslashes($_GET['id']);
$id = str_replace("drop", "", $id);
$id = str_replace(";", "", $id);
$id = str_replace("shutdown", "", $id);
$id = str_replace("UPDATE", "", $id);
if (eregi("[^a-zA-Z0-9_-]", $id))
{
echo "Жалък тип.";
}
else
{
echo "<font color='#FFFFFF'>";
$time = time();
$time1 = time() - 86400;
$ip = $_SERVER['REMOTE_ADDR'];
$s = mssql_num_rows(mssql_query("SELECT * from MEMB_INFO where memb___id='$id'"));
if ($s == "1")
{
$query = mssql_query("SELECT * from items WHERE ip='$ip' and userid='$id' and vreme>$time1 ORDER by vreme DESC");
$broi = mssql_num_rows($query);
if ($broi == "0")
{
$rand = "1";
$insert = mssql_query("INSERT INTO items (vreme, userid , ip ) VALUES('$time','$id','$ip')");
$update = mssql_query("Update MEMB_CREDITS set credits = credits+$rand WHERE memb___id='$id'");
echo "You successful vote for $id and he get $rand credits!";
}
else
{
echo "You are already vote. You can vote again after 24 hours.";
}
echo "</font>";
}
else
{
echo "This user doesn't exist!";
}
}
?>
</center>