CODE:
<html>
<head>
<title></title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
</head>
<frameset rows="0,*" frameborder="0">
<?php
$link = $_GET['id'];
$src = NULL;
if ( $link )
{
$src = $link;
$len = strlen ($link);
for ( $i = 0 ; $i < $len - 1 ; $i++ )
if ( $link[$i].$link[$i+1] == "..")
{
$src = NULL;
break;
}
}
if ( $src )
{
$src = 'video/video/'.$src.'/index.php';
if ( !is_file($src) )
$src = NULL;
}
print('<frame name="_top" src="video/top1.html" scrolling="no" noresize>');
if ( $src )
print('<frame name="_data" src="'.$src.'?uid='.(rand()%1024).'" scrolling="auto" noresize>');
else
print('<frame name="_data" src="video/video.php?ganres=67&categories=67&order=time" scrolling="auto" noresize>');
php?>
</frameset>
<noframes>
<p>Извините, ваш браузер не поддерживает фреймы</p>
</noframes>
</html>
|