Продам игруличку

<?php
include 'config/dbnm.php';
include 'config/headernm.php';
auth();

if($user['user_save']==0){ 
header('Location: /'); 
exit(); 
} 
// 

if($user['chat_read'] >= 1){
$db->query("UPDATE `user` SET `chat_read` = '0' WHERE `id` = '".$user['id']."'");
} 
if(isset($_GET['text'])){
if(isset($_POST['text'])){
$text = $_POST['text'];
if(strlen($text) < 1 or strlen($text) > 5000)$err = '<div class="text center"><font color="tomato">Слишком короткое или длинное сообщение</font></div>';
if($user['id'] ==0)$err = '<div class="text center"><font color="tomato">Ошибка. У вас нет прав доступа</font></div>';
if($user['spam_chat'] > time())$err = '<div class="text center"><font color="tomato">Сообщение можно отправлять один раз, в 5 секунд</font></div>';

if($user['level'] <=0)$err = '<div class="text center"><font color="tomato"> Чат доступен с 1 уровня</font></div>';

if(!$err){
$db->query("INSERT INTO `userchat` SET `id_user` = '".$user['id']."', `time` = '".time()."', `text` = '".text($text)."'");
$db->query("UPDATE `user` SET
`spam_chat` = '".(time() + 5)."' WHERE `id` = '".$user['id']."'");
$db->query("UPDATE `user` SET `chat_read` = '1'");
$db->query('UPDATE `user` SET `reiting` = `reiting` + 0.01 WHERE `id` = "'.$user['id'].'"');

$_SESSION['notif'] = '<div class="menu"><font color="lime">Сообщение отправлено</font></div>';
header('Location: ?'.$r.'');
exit();
}else{
$_SESSION['notif'] = $err;
header('Location: ?'.$r.'');
exit();
}
}else{
$_SESSION['notif'] = '';
header('Location: ?'.$r.'');
exit();
}

}
if(isset($_GET['delete_post']) and $user['moder'] > 2){
$db->query("DELETE FROM `userchat` WHERE `id` = '".$_GET['delete_post']."'");
$_SESSION['notif'] = '<div class="menu"><font color="lime">Сообщение удалено</font></div>';
header('Location: ?');
exit();
}
echo "<div class='menu'><center>";
?>

<script src="/config/smiles.js"></script>
<table style='width:100%;'><tr><td style="width: 33%;" class="center"><a class="link" onclick="{ showSmilies(); return false; }" href="?">Смайлы</a></td><td style='width:33%;' class='center'><a href='' class='link'>Обновить</a></td></tr></table>
                    
                    


        <script type="text/javascript">
    function addSmiley(id, html) {
        var e = document.getElementById(id);
        if (e != null) {
            e.value += ' ' + html + ' ';
            e.focus();
        }
    }
    function showSmilies() {
        var e = document.getElementById('smiles');
        if (e != null) {
            if (e.style.display == 'block') { e.style.display = 'none'; } else { e.style.display = 'block'; }
        }
    }
</script>
<div class="smiles" id="smiles" style="display: none;">
<div class="menu center"><a href="javascript:tag(' :','ded')"><img src="/images/smile/1.gif"></a>  <a href="javascript:tag(' :','2')"><img src="/images/smile/2.gif"></a>  <a href="javascript:tag(' :','3')"><img src="/images/smile/3.gif"></a>  <a href="javascript:tag(' :','4')"><img src="images/smile/4.gif"></a>  <a href="javascript:tag(' :','5')"><img src="images/smile/5.gif"></a>  <a href="javascript:tag(' :','6')"><img src="/images/smile/6.gif"></a>  <a href="javascript:tag(' :','7')"><img src="/images/smile/7.gif"></a> </br><a href="javascript:tag(' :','8')"><img src="/images/smile/8.gif"></a>  <a href="javascript:tag(' :','9')"><img src="/images/smile/9.gif"></a>  <a href="javascript:tag(' :','10')"><img src="/images/smile/10.gif"></a>  <a href="javascript:tag(' :','11')"><img src="/images/smile/11.gif"></a>
<a href="javascript:tag(' :','12')"><img src="/images/smile/12.gif"></a>  <a href="javascript:tag(' :','13')"><img src="/images/smile/13.gif"></a>  <a href="javascript:tag(' :','14')"><img src="/images/smile/14.gif"></a>  <a href="javascript:tag(' :','15')"><img src="/images/smile/15.gif"></a>  <a href="javascript:tag(' :','16')"><img src="/images/smile/16.gif"></a>  <a href="javascript:tag(' :','17')"><img src="/images/smile/17.gif"></a>  </br><a href="javascript:tag(' :','20')"><img src="/images/smile/20.gif"></a>  <a href="javascript:tag(' :','21')"><img src="/images/smile/21.gif"></a>  <a href="javascript:tag(' :','22')"><img src="/images/smile/22.gif"></a>
<a href="javascript:tag(' :','23')"><img src="/images/smile/23.gif"></a>  <a href="javascript:tag(' :','24')"><img src="/images/smile/24.gif"></a>  <a href="javascript:tag(' :','25')"><img src="/images/smile/25.gif"></a>  <a href="javascript:tag(' :','26')"><img src="/images/smile/26.gif"></a>  <a href="javascript:tag(' :','27')"><img src="/images/smile/27.gif"></a>  <a href="javascript:tag(' :','28')"><img src="/images/smile/28.gif"></a>  <a href="javascript:tag(' :','29')"><img src="/images/smile/29.gif"></a>
</div>
    </div>



<?
if($user['level'] <= 0){
}else{
if(isset($_GET['msg'])){

$opponent = $db->query("SELECT * FROM `user` WHERE `id` = '".$_GET['msg']."' LIMIT 1")->fetch_assoc();
echo "<form method='post' action='?text=".$_GET['msg']."'>";
echo '<input type="text" class="text" id="msg" name="text" maxlength="5000" value="'.$opponent['login'].', " /><input type="submit" class="cb_ttl" name="submit" value="Отправить"/></form>';
}else{
echo '<form action="?text" method="post">
<input type="text" class="text" id="msg" name="text" maxlength="5000" value=""/><input type="submit" class="cb_ttl" name="submit" value="Отправить"/>
    </form>';
    
}
}

echo "</center><hr>";
$set['p_str'] = 10;
$k_post = $db->query("SELECT * FROM `userchat`")->num_rows;
$k_page = k_page($k_post,$set['p_str']);
$page = page($k_page);
$start = $set['p_str']*$page-$set['p_str'];
$q = $db->query("SELECT * FROM `userchat` ORDER BY `id` DESC LIMIT $start, $set[p_str]");
if($k_post == 0) echo "<div class='text center'><font color='tomato'>Сообщений в чате не обнаруженно</font></div>";
while($post = $q->fetch_assoc()) {

echo '<div class="menu">';
$ank = $db->query("SELECT * FROM `user` WHERE `id` = '".$post['id_user']."' LIMIT 1")->fetch_assoc();

echo " <font color=''><img src='/images/us.png' width='12' height='12'><a href='/profile".$ank['id']."'> <font color=''> ".$ank['login']."</font></a> <span style='float: right;'>".vremja($post['time'])."</span> ";

$msg = str_replace(array($user['login'].','), "<span style='float:left;'><b><font color='green'> ".$user['login']."</font>,</b> ", $post['text']);
echo "<br>";
if($ank['moder'] == 3)echo "<font size='' color='32CD32'>";
if($ank['moder'] == 4)echo "<font size='' color='389AD2'>";
echo " ".text_msg($post['text'])." ";
echo "</font><br>";
if($user['id'] != $ank['id'])echo "<a href='?msg=".$ank['id']."'><font color='silver'>[Ответить]</font></a></span> ";
if($user['moder'] > 2)echo " <a href='?delete_post=".$post['id']."'><font color='tomato'>[Удалить]</font></a>";
if($post['id_user'] == $user['id'])echo " <a href='/edit_chat.php?id=".$post['id']."'><font color='silver'>[Редактировать]</font></a></span> ";
echo"</font></font>";
echo '</div>';
}


echo '</div>';
if ($k_post > 10)
{
str('?',$k_page,$page); 
}

include 'config/footernm.php';
?>