<?

include './system/common.php';

include './system/functions.php';

include './system/user.php';

if($user['save'] == 0) {

header('location: /save.php/');
}

if(!$user) {

header('location: /');

exit;

}

$id = _string(_num($_GET['id']));

if($id) {

$ho = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id` = \''.$id.'\''));

if(!$id OR !$ho OR $id == $user['id']) {

header('location: /mail/');

exit;

}

$title = 'Диалог с '.$ho['login'];

include './system/h.php';


if($ho['mail_closed'] == '1'){

echo 'Почта собеседника закрыта';

include './system/f.php';

exit();

}


if(mysql_result(mysql_query('SELECT COUNT(*) FROM `contacts` WHERE `user` = \''.$user['id'].'\' AND `ho` = \''.$ho['id'].'\''),0) == 0) {

mysql_query('INSERT INTO `contacts` (`user`,

`ho`,

`time`) VALUES (\''.$user['id'].'\',

\''.$ho['id'].'\',

\''.time().'\')');


}

if(mysql_result(mysql_query('SELECT COUNT(*) FROM `contacts` WHERE `ho` = "'.$user['id'].'" AND `user` = "'.$ho['id'].'"'),0) == 0) {

mysql_query('INSERT INTO `contacts` (`ho`,

`user`,

`time`) VALUES (\''.$user['id'].'\',

\''.$ho['id'].'\',

\''.time().'\')');

}


if($ho['r'] != $user['r']) $_s = 100; else $_s = 1;


$text = _string($_POST['text']);

if($text) {

$antiflood = mysql_fetch_array(mysql_query('SELECT * FROM `mail` WHERE `from` = \''.$user['id'].'\' ORDER BY `time` DESC LIMIT 1'));

if(time() - $antiflood['time'] < 50) $errors[] = 'Ошибка, писать можно 1 раз в 50 секунд';

if($ho['mail_closed'] == '1') $errors[] = 'Ошибка, у собеседника закрыта почта';



if($user['s'] < $_s) $errors[] = 'Ошибка, не хватает <img src=\'/images/icon/silver.png\' alt=\'*\'/> '.($_s - $user['s']).' серебра<div class=\'separator\'></div><a href=\'/worldkassa/buy.php\' class=\'button\'>Купить</a>';

if($errors) {

echo '<div class=\'content\' align=\'center\'>';

foreach($errors as $error) {

echo $error.'<br/>';

}

echo '</div>
<div class=\'line\'></div>';

}
else
{


$text = eregi_replace( "[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]", "Реклама", $text);

$text = str_replace(array(
'r u',
'ru',
'net',
'com',
'рф',
'tk',
'esy.es',
'su',
'us',
'mobi',
'ua',
'n et',
't k',
't',
'n e t',
'keo.su',
'keo',
'worldbyte.net',
'www',
'http'), 'uhero.ru', $text);

mysql_query('UPDATE `users` SET `s` = `s` - '.$_s.' WHERE `id` = \''.$user['id'].'\'');

mysql_query('INSERT INTO `mail` (`from`,

`to`,

`text`,

`time`) VALUES (\''.$user['id'].'\',

\''.$ho['id'].'\',

\''.$text.'\',

\''.time().'\')');

mysql_query('UPDATE `contacts` SET `time` = \''.time().'\' WHERE `user` = \''.$user['id'].'\' AND `ho` = \''.$ho['id'].'\'');

mysql_query('UPDATE `contacts` SET `time` = \''.time().'\' WHERE `ho` = \''.$user['id'].'\' AND `user` = \''.$ho['id'].'\'');

header('location: /mail/'.$ho['id'].'/');

}

}

echo '<div class=\'title\'>'.$title.'</div>
<div class=\'line\'></div>
<div class=\'content\'>
<form action=\'/mail/'.$ho['id'].'/\' method=\'post\'>
Сообщение:<br/><textarea name=\'text\' style=\'width: 100%;\'></textarea><br/>
<input type=\'submit\' value=\'Отправить\'/> <a href=\'/mail/'.$ho['id'].'/\'>Обновить</a>
</form>
<center><font color=\'#909090\'><small><small>Стоимость сообщения '.($user['r'] == $ho['r'] ? 'своей':'чужой').' фракции <img src=\'/images/icon/silver.png\' alt=\'*\'/> '.$_s.'</font></small></small></font></center>
</div>
<div class=\'line\'></div>
<div class=\'menu\'>';

$max = 10;
$count = mysql_result(mysql_query('SELECT COUNT(*) FROM `mail` WHERE `from` = "'.$user['id'].'" AND `to` = "'.$ho['id'].'" OR `to` = "'.$user['id'].'" AND `from` = "'.$ho['id'].'"'),0);
$pages = ceil($count/$max);
$page

что надо поменять чтоб писать можно было 1 раз в 10 секунд

через сессии не судьба сделать ?

и может еще где менять надо?

array, ?

Andreukaaa,

if(time() - $antiflood['time'] < 50) $
errors[] = 'Ошибка, писать можно 1
раз в 50 секунд';

заменить на это

if(time() - $antiflood['time'] < 10) $
errors[] = 'Ошибка, писать можно 1
раз в 10 секунд';

<?
include './system/common.php';
include './system/functions.php';
include './system/user.php';
if($user['save'] == 0) {
header('location: /save.php/');
}
if(!$user) {
header('location: /');
exit;
}
$id = _string(_num($_GET['id']));
if($id) {
$ho = mysql_fetch_array(mysql_query
('SELECT * FROM `users` WHERE `id`
= \''.$id.'\''));
if(!$id OR !$ho OR $id == $user['id']) {
header('location: /mail/');
exit;
}
$title = 'Диалог с '.$ho['login'];
include './system/h.php';
if($ho['mail_closed'] == '1'){
echo 'Почта собеседника закрыта';
include './system/f.php';
exit();
}
if(mysql_result(mysql_query('SELECT
COUNT(*) FROM `contacts` WHERE
`user` = \''.$user['id'].'\' AND `ho` = \''.
$ho['id'].'\''),0) == 0) {
mysql_query('INSERT INTO `contacts`
(`user`,
`ho`,
`time`) VALUES (\''.$user['id'].'\',
\''.$ho['id'].'\',
\''.time().'\')');
}
if(mysql_result(mysql_query('SELECT
COUNT(*) FROM `contacts` WHERE
`ho` = "'.$user['id'].'" AND `user` = "'.
$ho['id'].'"'),0) == 0) {
mysql_query('INSERT INTO `contacts`
(`ho`,
`user`,
`time`) VALUES (\''.$user['id'].'\',
\''.$ho['id'].'\',
\''.time().'\')');
}
if($ho['r'] != $user['r']) $_s = 100; else
$_s = 1;
$text = _string($_POST['text']);
if($text) {
$antiflood = mysql_fetch_array
(mysql_query('SELECT * FROM `mail`
WHERE `from` = \''.$user['id'].'\'
ORDER BY `time` DESC LIMIT 1'));
if(time() - $antiflood['time'] < 10)
$errors[] = 'Ошибка, писать можно 1
раз в 10 секунд';
if($ho['mail_closed'] == '1') $errors[] =
'Ошибка, у собеседника закрыта
почта';
if($user['s'] < $_s) $errors[] =
'Ошибка, не хватает <img src=\'/
images/icon/silver.png\' alt=\'*\'/> '.
($_s - $user['s']).' серебра<div class=
\'separator\'></div><a href=\'/
worldkassa/buy.php\' class=\'button
\'>Купить</a>';
if($errors) {
echo '<div class=\'content\' align=
\'center\'>';
foreach($errors as $error) {
echo $error.'<br/>';
}
echo '</div>
<div class=\'line\'></div>';
}
else
{
$text = eregi_replace( "[[:alpha:]]+://
[^<>[:space:]]+[[:alnum:]/]",
"Реклама", $text);
$text = str_replace(array(
'r u',
'ru',
'net',
'com',
'рф',
'tk',
'esy.es',
'su',
'us',
'mobi',
'ua',
'n et',
't k',
't',
'n e t',
'keo.su',
'keo',
'worldbyte.net',
'www',
'http'), 'uhero.ru', $text);
mysql_query('UPDATE `users` SET `s`
= `s` - '.$_s.' WHERE `id` = \''.$user
['id'].'\'');
mysql_query('INSERT INTO `mail`
(`from`,
`to`,
`text`,
`time`) VALUES (\''.$user['id'].'\',
\''.$ho['id'].'\',
\''.$text.'\',
\''.time().'\')');
mysql_query('UPDATE `contacts` SET
`time` = \''.time().'\' WHERE `user` =
\''.$user['id'].'\' AND `ho` = \''.$ho
['id'].'\'');
mysql_query('UPDATE `contacts` SET
`time` = \''.time().'\' WHERE `ho` = \''.
$user['id'].'\' AND `user` = \''.$ho
['id'].'\'');
header('location: /mail/'.$ho['id'].'/');
}
}
echo '<div class=\'title\'>'.$title.'</div>
<div class=\'line\'></div>
<div class=\'content\'>
<form action=\'/mail/'.$ho['id'].'/\'
method=\'post\'>
Сообщение:<br/><textarea name=
\'text\' style=\'width: 100%;\'></
textarea><br/>
<input type=\'submit\' value=
\'Отправить\'/> <a href=\'/mail/'.$ho
['id'].'/\'>Обновить</a>
</form>
<center><font color=
\'#909090\'><small><small>Стоимость
сообщения '.($user['r'] == $ho['r'] ?
'своей':'чужой').' фракции <img src=
\'/images/icon/silver.png\' alt=\'*\'/> '.
$_s.'</font></small></small></font></
center>
</div>
<div class=\'line\'></div>
<div class=\'menu\'>';
$max = 10;
$count = mysql_result(mysql_query
('SELECT COUNT(*) FROM `mail`
WHERE `from` = "'.$user['id'].'" AND
`to` = "'.$ho['id'].'" OR `to` = "'.$user
['id'].'" AND `from` = "'.$ho['id'].'"'),0);
$pages = ceil($count/$max);
$page

1.
2.Хоть бы код посмотрел
3.А потом бы бред про сессии плел