wannex.php

make project on java

<?php
include'include/begin.php';

$aid = (int)$_GET["aid"];
$free = '';
$result = mysql_query("select * from {$db_prefix}annex where id='$aid' && fix='1'", $myconn);
if ($annexs = mysql_fetch_array($result)) {

    $tid = $annexs['tid'];
    $code = $annexs['code'];
    if ($annexs['code'] != 'url' && $annexs['code'] != 'file') {
        echoerror(10);
    } 
    $annextype = explode('|', $annexs['type']);
    if ($annextype[0]) {
        $result = mysql_query("select * from {$db_prefix}title where cid='$tid' && wid>0", $myconn);
        if ($trow = mysql_fetch_array($result)) {
            $pauthor = $trow['author'];
            $wid = $trow['wid'];
            if (!isset($whype[$wid])) {
                echoerror(99);
            } 
           
            wstyle($t4[$wid]);
            include language();
            if ($t3[$wid]) {
                $free = 1;
            } 
        } 
    } else {
        $free = 1;
    } 
    $downuser = explode(',', $annexs['downuser']);
    if (!$free) {
        if (!$username) {
            echoerror(83);
        } 
        if (!@in_array($username, $downuser)) {
            if ($username != $pauthor) {
                $user[$annextype[0]] < $annextype[1]?echoerror(84): null;
                $annextype[0] == 'a' || $annextype[0] == 'b' || $annextype[0] == 'c'?$sql = $annextype[0]: echoerror(0);
                if (is_numeric($annextype[1]) && $annextype[1] != 0) {
                    @mysql_query("update {$db_prefix}members set $sql=$sql-'$annextype[1]' where id='$user[id]'" , $myconn);
                    @mysql_query("update {$db_prefix}members set $sql=$sql+'$annextype[1]' where username='$pauthor'" , $myconn);
                } 
            } 
            $downuser[] = $username;
            $downuser = @implode(',', $downuser);
            ka($downuser, 65500);
            ka($polllist, 65500);
            mysql_query("update {$db_prefix}annex set downuser='$downuser',downnum=downnum+'1' where id='$aid'" , $myconn);
        } else {
            mysql_query("update {$db_prefix}annex set downnum=downnum+'1' where id='$aid'", $myconn);
        } 
    } else {
        mysql_query("update {$db_prefix}annex set downnum=downnum+'1' where id='$aid'", $myconn);
    } 
    switch ($code) {
        case 'url':
            header("Location: " . $annexs["content"]);
            break;
        case 'file': header('Location: ' . $softdir . '/uploads/' . $annexs['content']);
            break;
        default:
            echoerror(0);
            break;
    } 
} else {
    echoerror(98);
} 

?>