PageRenderTime 36ms CodeModel.GetById 15ms RepoModel.GetById 1ms app.codeStats 0ms

/Control/NewMessage.php

https://bitbucket.org/onlinechessportal/onlinechessgameportal
PHP | 115 lines | 104 code | 10 blank | 1 comment | 31 complexity | eca8ad05df49bdf6bf4a5c246c70263e MD5 | raw file
Possible License(s): LGPL-2.1
  1. <?php
  2. require 'RegisterLogic.php';
  3. require 'SendNotification.php';
  4. require '../Model/Connect.php';
  5. ob_start();
  6. $To = 0;
  7. $Club = 0;
  8. if(LoggedIn()) {
  9. $Notify = new Notification();
  10. $MsgTo1 = $_POST['to'];
  11. $MsgTo = substr($MsgTo1,8);
  12. $Message = $_POST['message'];
  13. $User = $_SESSION['username'];
  14. $time = time();
  15. if(isset($_POST['club'])) {
  16. $Club = $_POST['club'];
  17. }
  18. $GetUsernameTo = "SELECT mp_username FROM memberprofile WHERE mp_fullname = '".$MsgTo."' ";
  19. $ResultUsernameTo = mysql_query($GetUsernameTo);
  20. if ($ResultUsernameTo) {
  21. $rows = mysql_num_rows($ResultUsernameTo);
  22. while($info = mysql_fetch_assoc( $ResultUsernameTo)) {
  23. $To = $info['mp_username'];
  24. }
  25. }
  26. $GetNameFrom = "SELECT mp_fullname FROM memberprofile WHERE mp_username = '".$User."' ";
  27. $ResultNameFrom = mysql_query($GetNameFrom);
  28. if ($ResultNameFrom) {
  29. $rows = mysql_num_rows($ResultNameFrom);
  30. while($info = mysql_fetch_assoc( $ResultNameFrom)) {
  31. $From = $info['mp_fullname'];
  32. }
  33. }
  34. $sql = "SELECT max(no_ID)+1 AS x FROM notify ";
  35. $ResultSql = mysql_query($sql);
  36. if ($ResultSql) {
  37. $rows = mysql_num_rows($ResultSql);
  38. while($info = mysql_fetch_assoc( $ResultSql)) {
  39. $MsgID = $info['x'];
  40. }
  41. }
  42. if(!$To || !$Message ) {
  43. echo 'Please enter the required details';
  44. } else if(!$Club) {
  45. $Result = $Notify->SendMessage($To,$From,$Message,$MsgID,$time);
  46. if($Result) {
  47. echo '<script language="javascript">alert("Message sent successfully")</script>';
  48. if($_SESSION['role'] == 'member' || $_SESSION['role'] == 'clubAdmin' ) {
  49. echo '<script type="text/javascript"> window.location = "../View/MemberProfile.php"</script>';
  50. } else {
  51. echo '<script type="text/javascript"> window.location = "../View/SiteAdminProfile.php"</script>';
  52. }
  53. } else {
  54. echo '<script language="javascript">alert("Message sending error. Try again later")</script>';
  55. if($_SESSION['role'] == 'member') {
  56. echo '<script type="text/javascript"> window.location = "../View/MemberProfile.php"</script>';
  57. } else {
  58. echo '<script type="text/javascript"> window.location = "../View/SiteAdminProfile.php"</script>';
  59. }
  60. }
  61. } else {
  62. //send message to the club members
  63. $ClubId = GetClubId($Club);
  64. $sql = "SELECT cm_member FROM clubmember WHERE cm_clubid = '".$ClubId."'";
  65. if ($result = mysql_query($sql)) {
  66. $rows = mysql_num_rows($result);
  67. $storeArray = Array();
  68. while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
  69. $storeArray[] = $row['cm_member'];
  70. }
  71. for ( $i=0 ; $i<$rows ; $i++ )
  72. {
  73. $To = $storeArray[$i];
  74. $send = $notify->SendMessage($To,$From,$Message);
  75. if ($send) {
  76. $done = 1;
  77. }
  78. }
  79. } else {
  80. echo 'OOOPPPSSS';
  81. }
  82. if ($done == 1) {
  83. return true;
  84. } else {
  85. return false;
  86. }
  87. }
  88. } else {
  89. echo 'error';
  90. }
  91. function GetClubId($ClubName)
  92. {
  93. $sql = "SELECT cl_id FROM Club WHERE cl_name = '".$ClubName."'";
  94. $Result = mysql_query($sql);
  95. if ($Result) {
  96. $rows = mysql_num_rows($Result);
  97. while($info = mysql_fetch_assoc( $Result )) {
  98. $ID = $info['cm_clubid'];
  99. }
  100. return $ID;
  101. } else {
  102. return false;
  103. }
  104. }
  105. ?>