if(isset($_GET['add_file'])){
        if(isset($_POST['save'])){

            $ext = mb_strtolower(pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION));

            if(empty($_POST['name'])){
                header('Location: ?add_file&err_name_file');
                include 'inc/foot.php'; exit;
            }
            if(empty($_FILES['file']['name'])){
                header('Location: ?add_file&err_file_file');
                include 'inc/foot.php'; exit;
            }
            if(empty($_POST['kat'])){
                header('Location: ?add_file&err_kat_file');
                include 'inc/foot.php'; exit;
            }

            if($ext != 'apk'){
                header('Location: ?add_file&err_ext_file');
                include 'inc/foot.php'; exit;
            }
             if($_POST['yandex'] == 0){
                 copy($_FILES['file']['tmp_name'], 'files/apk/'.transen($_POST['name']).'.'.$ext);
             }else{
                include 'inc/yandex.disk.php';

                $yandex_pass = mysql_fetch_array(mysql_query("SELECT * FROM `yandex_disk` WHERE `id` = '".intval($_POST['yandex'])."'"));
                $disk = new yandex_disk($yandex_pass['login'] , $yandex_pass['pass']);

                $disk->put($_FILES['file']['tmp_name'],'/'.transen($_POST['name']).'.'.$ext);

                $yandex_url = get_url('/'.transen($_POST['name']).'.'.$ext, $yandex_pass['login'] , $yandex_pass['pass']);
             }

                $kat = mysql_real_escape_string(implode ( "|", $_POST['kat']));

                if($_POST['posting'] > 0){
                    $posting = time()+(intval($_POST['posting'])*3600);
                }else{
                    $posting = 0;
                }

                mysql_query("INSERT INTO `files` SET
                `name` = '".mysql_real_escape_string($_POST['name'])."',
                `text` = '".mysql_real_escape_string($_POST['text'])."',
                `ver` = '".mysql_real_escape_string($_POST['ver'])."',
                `kat` = '$kat',
                `file` = '".transen(mysql_real_escape_string($_POST['name'])).".$ext',
                `screen` = '".transen(mysql_real_escape_string($_POST['name'])).".png',
                `size` = '".$_FILES["file"]["size"]."',
                `posting` = $posting,
                `yandex_url` = '".$yandex_url."',
                `date` = '".time()."'");
                $insert_id = mysql_insert_id();


                resize('files/screen/'.$insert_id.'/'.transen($_POST['name']).'.png', 'files/screen/'.$insert_id.'/'.transen($_POST['name']).'.png', 348, 145, $percent = false);

$br = '<url>
<loc>http://'.$_SERVER['HTTP_HOST'].'/view/'.$insert_id.'/</loc>
    <lastmod>'.date('Y-m-d', time()).'</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
</url>
</urlset>';

                $filename = 'sitemap.xml';
                $file = file_get_contents($filename);
                $file = str_replace('</urlset>', $br, $file);
                file_put_contents($filename, $file);

                header('Location: ?add_file&ok_load_file');


            include 'inc/foot.php'; exit;
        }
        echo '<div class="news">';
                echo '<div class="title">Загрузка файла</div>';
                echo '<div class="menu">';
        echo '<form action="?add_file" method="POST" enctype="multipart/form-data">';
        echo 'Названия<br /><input class="form-control" type="text" name="name"><br />';
        echo 'Описание<br /><textarea class="form-control" name="text"></textarea><br />';
        echo 'Версия Android<br /><textarea class="form-control" name="god"></textarea><br />';







        echo 'Категории<br /><select class="form-control-select" size="7" multiple name="kat[]">';
            $req = mysql_query("SELECT * FROM `kategories`");
            while($kat = mysql_fetch_array($req)){

                echo '<option value="'.$kat['id'].'">'.$kat['name'].'</option>';

            }
            echo '</select><br />';

        echo 'Загрузить на Яндекс.Диск<br /><select class="form-control-select"  name="yandex">';
            echo '<option value="0">Не загружать на диск</option>';
            $req = mysql_query("SELECT * FROM `yandex_disk`");
            while($yandex = mysql_fetch_array($req)){

                echo '<option value="'.$yandex['id'].'">'.$yandex['login'].'</option>';

            }
            echo '</select><br />';
        echo 'Отложить добавление (в часах)<br /><input class="form-control" type="text" name="posting" value="0"><br />';
        echo '<input class="form-control" type="file" name="file"><br />';
        echo '<input type="hidden" name="save">';
        echo '<input class="form-control-btn" type="submit" value="Загрузить"></form></div></div>';




    echo '<a href="/admin.php"><div class="menu">
        <span style="position: relative;top: 29%;margin-left: 30px">В админку</span>
        <span style="position: relative;top: 29%;margin-right: 30px;float:right;"><img src="/style/img/arrow.png" alt="В админку"></span>
    </div></a>';

    include 'inc/foot.php'; exit;
    }