PageRenderTime 226ms CodeModel.GetById 28ms RepoModel.GetById 2ms app.codeStats 0ms

/privmsg.php

http://github.com/MightyGorgon/icy_phoenix
PHP | 2330 lines | 1917 code | 290 blank | 123 comment | 384 complexity | 683998d027a85142824677bf2203ff51 MD5 | raw file
Possible License(s): AGPL-1.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3. *
    4. 

  4. * @package Icy Phoenix
    5. 

  5. * @version $Id$
    6. 

  6. * @copyright (c) 2008 Icy Phoenix
    7. 

  7. * @license http://opensource.org/licenses/gpl-license.php GNU Public License
    8. 

  8. *
    9. 

  9. */
    10. 

  10. 

  11. /**
    12. 

  12. *
    13. 

  13. * @Icy Phoenix is based on phpBB
    14. 

  14. * @copyright (c) 2008 phpBB Group
    15. 

  15. *
    16. 

  16. */
    17. 

  17. 

  18. define('IN_PM', true);
    19. 

  19. // MG Cash MOD For IP - BEGIN
    20. 

  20. define('IN_CASHMOD', true);
    21. 

  21. // MG Cash MOD For IP - END
    22. 

  22. // Added to optimize memory for attachments
    23. 

  23. define('ATTACH_DISPLAY', true);
    24. 

  24. define('ATTACH_PM', true);
    25. 

  25. define('IN_ICYPHOENIX', true);
    26. 

  26. if (!defined('IP_ROOT_PATH')) define('IP_ROOT_PATH', './');
    27. 

  27. if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));
    28. 

  28. include(IP_ROOT_PATH . 'common.' . PHP_EXT);
    29. 

  29. include_once(IP_ROOT_PATH . 'includes/bbcode.' . PHP_EXT);
    30. 

  30. include_once(IP_ROOT_PATH . 'includes/functions_post.' . PHP_EXT);
    31. 

  31. include_once(IP_ROOT_PATH . 'includes/functions_users.' . PHP_EXT);
    32. 

  32. include_once(IP_ROOT_PATH . 'includes/functions_zebra.' . PHP_EXT);
    33. 

  33. 

  34. // Adding CPL_NAV only if needed
    35. 

  35. define('PARSE_CPL_NAV', true);
    36. 

  36. 

  37. // Is PM disabled?
    38. 

  38. if (!empty($config['privmsg_disable']))
    39. 

  39. {
    40. 

  40. 	message_die(GENERAL_MESSAGE, 'PM_disabled');
    41. 

  41. }
    42. 

  42. 

  43. $html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#', '#"#');
    44. 

  44. $html_entities_replace = array('&amp;', '&lt;', '&gt;', '&quot;');
    45. 

  45. 

  46. // Parameters
    47. 

  47. $privmsg_id = request_var(POST_POST_URL, 0);
    48. 

  48. 

  49. $mode = request_var('mode', '');
    50. 

  50. 

  51. $start = request_var('start', 0);
    52. 

  52. $start = ($start < 0) ? 0 : $start;
    53. 

  53. 

  54. $sid = request_post_var('sid', '');
    55. 

  55. 

  56. $submit = (isset($_POST['post'])) ? true : false;
    57. 

  57. $submit_search = (isset($_POST['usersubmit'])) ? true : false;
    58. 

  58. $submit_msgdays = (isset($_POST['submit_msgdays'])) ? true : false;
    59. 

  59. $cancel = (isset($_POST['cancel'])) ? true : false;
    60. 

  60. $preview = (isset($_POST['preview'])) ? true : false;
    61. 

  61. $confirm = (isset($_POST['confirm'])) ? true : false;
    62. 

  62. $delete = (isset($_POST['delete'])) ? true : false;
    63. 

  63. $delete_all = (isset($_POST['deleteall'])) ? true : false;
    64. 

  64. $download = (isset($_POST['download'])) ? true : false;
    65. 

  65. $save = (isset($_POST['save'])) ? true : false;
    66. 

  66. 

  67. $draft = request_var('draft', '');
    68. 

  68. $draft_mode = request_var('draft_mode', '');
    69. 

  69. $draft_confirm = !empty($_POST['draft_confirm']) ? true : false;
    70. 

  70. $draft = (!empty($draft) || $draft_confirm) ? true : false;
    71. 

  71. $draft_id = request_var('d', 0);
    72. 

  72. 

  73. if (($config['allow_drafts'] == true) && ($draft_mode == 'draft_load') && ($draft_id > 0))
    74. 

  74. {
    75. 

  75. 	$sql = "SELECT d.*
    76. 

  76. 		FROM " . DRAFTS_TABLE . " d
    77. 

  77. 		WHERE d.draft_id = '" . $draft_id . "'
    78. 

  78. 		AND d.user_id = '" . $user->data['user_id'] . "'
    79. 

  79. 		LIMIT 1";
    80. 

  80. 	$result = $db->sql_query($sql);
    81. 

  81. 

  82. 	if ($draft_row = $db->sql_fetchrow($result))
    83. 

  83. 	{
    84. 

  84. 		$db->sql_freeresult($result);
    85. 

  85. 		$draft_subject = $draft_row['draft_subject'];
    86. 

  86. 		$draft_message = htmlspecialchars_decode($draft_row['draft_message'], ENT_COMPAT);
    87. 

  87. 		$preview = true;
    88. 

  88. 	}
    89. 

  89. }
    90. 

  90. 

  91. $search_type = request_var('searchvar', '');
    92. 

  92. $search_value = request_var('searchvalue', '');
    93. 

  93. $search_value_tmp = request_var('searchvalue2', '');
    94. 

  94. $search_value = (!empty($search_value) && !empty($search_value_tmp)) ? $search_value_tmp : $search_value;
    95. 

  95. 

  96. $refresh = $preview || $submit_search || ($draft && !$draft_confirm);
    97. 

  97. 

  98. $mark_list = request_var('mark', array(0));
    99. 

  99. 

  100. $folders_array = array('inbox', 'outbox', 'sentbox', 'savebox');
    101. 

  101. $folder = request_var('folder', 'inbox');
    102. 

  102. $folder = check_var_value($folder, $folders_array);
    103. 

  103. 

  104. // Start session management
    105. 

  105. $user->session_begin();
    106. 

  106. $auth->acl($user->data);
    107. 

  107. $user->setup();
    108. 

  108. // End session management
    109. 

  109. 

  110. // Cancel
    111. 

  111. if ($cancel)
    112. 

  112. {
    113. 

  113. 	redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder, true));
    114. 

  114. }
    115. 

  115. 

  116. // Check search fields
    117. 

  117. $search_list = array(
    118. 

  118. 	'author' => 'author is',
    119. 

  119. 	'subject' => 'subject contains',
    120. 

  120. 	);
    121. 

  121. if(empty($search_value) || empty($search_type) || intval($search_type) || !isset($search_list[$search_type]))
    122. 

  122. {
    123. 

  123. 	$search_type = '';
    124. 

  124. }
    125. 

  125. if(empty($search_type))
    126. 

  126. {
    127. 

  127. 	$search_value = '';
    128. 

  128. }
    129. 

  129. $template->vars['SEARCH_TYPES'] = '';
    130. 

  130. foreach($search_list as $var => $value)
    131. 

  131. {
    132. 

  132. 	$template->vars['SEARCH_TYPES'] .= '<option value="' . $var . '"' . ($search_type === $var ? ' selected="selected"' : '') . '>' . $value . '</option>';
    133. 

  133. }
    134. 

  134. $template->vars['SEARCH_VALUE'] = htmlspecialchars($search_value);
    135. 

  135. 

  136. 

  137. $error = false;
    138. 

  138. 

  139. // Define the box image links
    140. 

  140. $inbox_img = ($folder != 'inbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '"><img src="' . $images['pm_inbox'] . '" alt="' . $lang['Inbox'] . '" title="' . $lang['Inbox'] . '" /></a>' : '<img src="' . $images['pm_inbox'] . '" alt="' . $lang['Inbox'] . '" title="' . $lang['Inbox'] . '" />';
    141. 

  141. $inbox_url = ($folder != 'inbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">' . $lang['Inbox'] . '</a>' : $lang['Inbox'];
    142. 

  142. 

  143. $outbox_img = ($folder != 'outbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=outbox') . '"><img src="' . $images['pm_outbox'] . '" alt="' . $lang['Outbox'] . '" title="' . $lang['Outbox'] . '" /></a>' : '<img src="' . $images['pm_outbox'] . '" alt="' . $lang['Outbox'] . '" title="' . $lang['Outbox'] . '" />';
    144. 

  144. $outbox_url = ($folder != 'outbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=outbox') . '">' . $lang['Outbox'] . '</a>' : $lang['Outbox'];
    145. 

  145. 

  146. $sentbox_img = ($folder != 'sentbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=sentbox') . '"><img src="' . $images['pm_sentbox'] . '" alt="' . $lang['Sentbox'] . '" title="' . $lang['Sentbox'] . '" /></a>' : '<img src="' . $images['pm_sentbox'] . '" alt="' . $lang['Sentbox'] . '" title="' . $lang['Sentbox'] . '" />';
    147. 

  147. $sentbox_url = ($folder != 'sentbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=sentbox') . '">' . $lang['Sentbox'] . '</a>' : $lang['Sentbox'];
    148. 

  148. 

  149. $savebox_img = ($folder != 'savebox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=savebox') . '"><img src="' . $images['pm_savebox'] . '" alt="' . $lang['Savebox'] . '" title="' . $lang['Savebox'] . '" /></a>' : '<img src="' . $images['pm_savebox'] . '" alt="' . $lang['Savebox'] . '" title="' . $lang['Savebox'] . '" />';
    150. 

  150. $savebox_url = ($folder != 'savebox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=savebox') . '">' . $lang['Savebox'] . '</a>' : $lang['Savebox'];
    151. 

  151. execute_privmsgs_attachment_handling($mode);
    152. 

  152. 

  153. // Start main
    154. 

  154. if ($mode == 'newpm')
    155. 

  155. {
    156. 

  156. 	$link_name = '';
    157. 

  157. 	if ($mode == 'post')
    158. 

  158. 	{
    159. 

  159. 		$link_name = $lang['Send_a_new_message'];
    160. 

  160. 	}
    161. 

  161. 	elseif ($mode == 'reply')
    162. 

  162. 	{
    163. 

  163. 		$link_name = $lang['Send_a_reply'];
    164. 

  164. 	}
    165. 

  165. 	elseif ($mode == 'edit')
    166. 

  166. 	{
    167. 

  167. 		$link_name = $lang['Edit_message'];
    168. 

  168. 	}
    169. 

  169. 	$nav_server_url = create_server_url();
    170. 

  170. 	$breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '"' . (!empty($link_name) ? '' : ' class="nav-current"') . '>' . $lang['Private_Messaging'] . '</a>' . (!empty($link_name) ? ($lang['Nav_Separator'] . '<a class="nav-current" href="#">' . $link_name . '</a>') : '');
    171. 

  171. 	include_once(IP_ROOT_PATH . 'includes/users_zebra_block.' . PHP_EXT);
    172. 

  172. 

  173. 	if ($user->data['session_logged_in'])
    174. 

  174. 	{
    175. 

  175. 		if ($user->data['user_new_privmsg'])
    176. 

  176. 		{
    177. 

  177. 			$l_new_message = ($user->data['user_new_privmsg'] == 1) ? $lang['You_new_pm'] : $lang['You_new_pms'];
    178. 

  178. 		}
    179. 

  179. 		else
    180. 

  180. 		{
    181. 

  181. 			$l_new_message = $lang['You_no_new_pm'];
    182. 

  182. 		}
    183. 

  183. 

  184. 		$l_new_message .= '<br /><br />' . sprintf($lang['Click_view_privmsg'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '" onclick="jump_to_inbox();return false;" target="_new">', '</a>');
    185. 

  185. 	}
    186. 

  186. 	else
    187. 

  187. 	{
    188. 

  188. 		$l_new_message = $lang['Login_check_pm'];
    189. 

  189. 	}
    190. 

  190. 

  191. 	$template->assign_vars(array(
    192. 

  192. 		'L_CLOSE_WINDOW' => $lang['Close_window'],
    193. 

  193. 		'L_MESSAGE' => $l_new_message
    194. 

  194. 		)
    195. 

  195. 	);
    196. 

  196. 

  197. 	$gen_simple_header = true;
    198. 

  198. 	full_page_generation('privmsgs_popup.tpl', $lang['Private_Messaging'], '', '');
    199. 

  199. }
    200. 

  200. elseif ($mode == 'read')
    201. 

  201. {
    202. 

  202. 	if (!empty($_GET[POST_POST_URL]))
    203. 

  203. 	{
    204. 

  204. 		$privmsgs_id = intval($_GET[POST_POST_URL]);
    205. 

  205. 	}
    206. 

  206. 	else
    207. 

  207. 	{
    208. 

  208. 		message_die(GENERAL_ERROR, $lang['No_post_id']);
    209. 

  209. 	}
    210. 

  210. 

  211. 	if (!$user->data['session_logged_in'])
    212. 

  212. 	{
    213. 

  213. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=' . $folder . '&mode=' . $mode . '&' . POST_POST_URL . '=' . $privmsgs_id, true));
    214. 

  214. 	}
    215. 

  215. 

  216. 	$ranks_array = $cache->obtain_ranks(false);
    217. 

  217. 

  218. 	// SQL to pull appropriate message, prevents nosey people
    219. 

  219. 	// reading other peoples messages ... hopefully!
    220. 

  220. 	switch($folder)
    221. 

  221. 	{
    222. 

  222. 		case 'inbox':
    223. 

  223. 			$l_box_name = $lang['Inbox'];
    224. 

  224. 			$pm_sql_user = "AND pm.privmsgs_to_userid = " . $user->data['user_id'] . "
    225. 

  225. 				AND (pm.privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    226. 

  226. 					OR pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    227. 

  227. 					OR pm.privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    228. 

  228. 			break;
    229. 

  229. 		case 'outbox':
    230. 

  230. 			$l_box_name = $lang['Outbox'];
    231. 

  231. 			$pm_sql_user = "AND pm.privmsgs_from_userid =  " . $user->data['user_id'] . "
    232. 

  232. 				AND (pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    233. 

  233. 					OR pm.privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ") ";
    234. 

  234. 			break;
    235. 

  235. 		case 'sentbox':
    236. 

  236. 			$l_box_name = $lang['Sentbox'];
    237. 

  237. 			$pm_sql_user = "AND pm.privmsgs_from_userid =  " . $user->data['user_id'] . "
    238. 

  238. 				AND pm.privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    239. 

  239. 			break;
    240. 

  240. 		case 'savebox':
    241. 

  241. 			$l_box_name = $lang['Savebox'];
    242. 

  242. 			$pm_sql_user = "AND ((pm.privmsgs_to_userid = " . $user->data['user_id'] . "
    243. 

  243. 					AND pm.privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    244. 

  244. 				OR (pm.privmsgs_from_userid = " . $user->data['user_id'] . "
    245. 

  245. 					AND pm.privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ")
    246. 

  246. 				)";
    247. 

  247. 			break;
    248. 

  248. 		default:
    249. 

  249. 			message_die(GENERAL_ERROR, $lang['No_such_folder']);
    250. 

  250. 			break;
    251. 

  251. 	}
    252. 

  252. // BEGIN PM Navigation MOD
    253. 

  253. 	if(($_GET['view'] == 'next') || ($_GET['view'] == 'prev'))
    254. 

  254. 	{
    255. 

  255. 		$sql_condition = ($_GET['view'] == 'next') ? '>' : '<';
    256. 

  256. 		$sql_ordering = ($_GET['view'] == 'next') ? 'ASC' : 'DESC';
    257. 

  257. 

  258. 		$sql_nav = "SELECT pm.privmsgs_id FROM ". PRIVMSGS_TABLE ." pm, ". PRIVMSGS_TABLE ." p2
    259. 

  259. 			WHERE p2.privmsgs_id = $privmsgs_id
    260. 

  260. 			$pm_sql_user
    261. 

  261. 			AND pm.privmsgs_date $sql_condition p2.privmsgs_date
    262. 

  262. 			ORDER BY pm.privmsgs_date $sql_ordering LIMIT 1" ;
    263. 

  263. 		$result_nav = $db->sql_query($sql_nav);
    264. 

  264. 		if ($row = $db->sql_fetchrow($result_nav))
    265. 

  265. 		{
    266. 

  266. 			$privmsgs_id = intval($row['privmsgs_id']);
    267. 

  267. 		}
    268. 

  268. 		else
    269. 

  269. 		{
    270. 

  270. 			$output_message = (($_GET['view'] == 'next') ? $lang['No_newer_pm'] : $lang['No_older_pm']) . '<br /><br />' . sprintf($lang['Click_return_inbox'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    271. 

  271. 			message_die(GENERAL_MESSAGE, $output_message);
    272. 

  272. 		}
    273. 

  273. 	}
    274. 

  274. 	// END PM Navigation MOD
    275. 

  275. 

  276. 	// Major query obtains the message ...
    277. 

  277. 	$sql = "SELECT u.username AS username_1, u.user_id AS user_id_1, u.user_active AS user_active_1, u.user_color AS user_color_1, u2.username AS username_2, u2.user_id AS user_id_2, u2.user_active AS user_active_2, u2.user_color AS user_color_2, u.user_posts, u.user_from, u.user_website, u.user_email, u.user_icq, u.user_aim, u.user_yim, u.user_skype, u.user_regdate, u.user_msnm, u.user_allow_viewemail, u.user_rank, u.user_sig, u.user_avatar, u.user_avatar_type, u.user_allowavatar, u.user_allow_viewonline, u.user_session_time, u.user_from, u.user_gender, pm.*
    278. 

  278. 		FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " u, " . USERS_TABLE . " u2
    279. 

  279. 		WHERE pm.privmsgs_id = $privmsgs_id
    280. 

  280. 			$pm_sql_user
    281. 

  281. 			AND u.user_id = pm.privmsgs_from_userid
    282. 

  282. 			AND u2.user_id = pm.privmsgs_to_userid";
    283. 

  283. 	$result = $db->sql_query($sql);
    284. 

  284. 

  285. 	// Did the query return any data?
    286. 

  286. 	if (!($privmsg = $db->sql_fetchrow($result)))
    287. 

  287. 	{
    288. 

  288. 		redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder, true));
    289. 

  289. 	}
    290. 

  290. 

  291. 	$privmsg_id = $privmsg['privmsgs_id'];
    292. 

  292. 

  293. 	// Is this a new message in the inbox? If it is then save a copy in the posters sent box
    294. 

  294. 	if ((($privmsg['privmsgs_type'] == PRIVMSGS_NEW_MAIL) || ($privmsg['privmsgs_type'] == PRIVMSGS_UNREAD_MAIL)) && ($folder == 'inbox'))
    295. 

  295. 	{
    296. 

  296. 		// Update appropriate counter
    297. 

  297. 		switch ($privmsg['privmsgs_type'])
    298. 

  298. 		{
    299. 

  299. 			case PRIVMSGS_NEW_MAIL:
    300. 

  300. 				$sql = "user_new_privmsg = user_new_privmsg - 1";
    301. 

  301. 				break;
    302. 

  302. 			case PRIVMSGS_UNREAD_MAIL:
    303. 

  303. 				$sql = "user_unread_privmsg = user_unread_privmsg - 1";
    304. 

  304. 				break;
    305. 

  305. 		}
    306. 

  306. 

  307. 		$sql = "UPDATE " . USERS_TABLE . "
    308. 

  308. 			SET $sql
    309. 

  309. 			WHERE user_id = " . $user->data['user_id'];
    310. 

  310. 		$result = $db->sql_query($sql);
    311. 

  311. 

  312. 		$sql = "UPDATE " . PRIVMSGS_TABLE . "
    313. 

  313. 			SET privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    314. 

  314. 			WHERE privmsgs_id = " . $privmsg['privmsgs_id'];
    315. 

  315. 		$result = $db->sql_query($sql);
    316. 

  316. 

  317. 		// Check to see if the poster has a 'full' sent box
    318. 

  318. 		$sql = "SELECT COUNT(privmsgs_id) AS sent_items, MIN(privmsgs_date) AS oldest_post_time
    319. 

  319. 			FROM " . PRIVMSGS_TABLE . "
    320. 

  320. 			WHERE privmsgs_type = " . PRIVMSGS_SENT_MAIL . "
    321. 

  321. 				AND privmsgs_from_userid = " . $privmsg['privmsgs_from_userid'];
    322. 

  322. 		$result = $db->sql_query($sql);
    323. 

  323. 

  324. 		if ($sent_info = $db->sql_fetchrow($result))
    325. 

  325. 		{
    326. 

  326. 			if ($config['max_sentbox_privmsgs'] && ($sent_info['sent_items'] >= $config['max_sentbox_privmsgs']))
    327. 

  327. 			{
    328. 

  328. 				$sql = "SELECT privmsgs_id FROM " . PRIVMSGS_TABLE . "
    329. 

  329. 					WHERE privmsgs_type = " . PRIVMSGS_SENT_MAIL . "
    330. 

  330. 						AND privmsgs_date = " . $sent_info['oldest_post_time'] . "
    331. 

  331. 						AND privmsgs_from_userid = " . $privmsg['privmsgs_from_userid'];
    332. 

  332. 				$result = $db->sql_query($sql);
    333. 

  333. 				$old_privmsgs_id = $db->sql_fetchrow($result);
    334. 

  334. 				$old_privmsgs_id = $old_privmsgs_id['privmsgs_id'];
    335. 

  335. 

  336. 				if (!empty($old_privmsgs_id))
    337. 

  337. 				{
    338. 

  338. 					$sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    339. 

  339. 						WHERE privmsgs_id = " . $old_privmsgs_id;
    340. 

  340. 					$result = $db->sql_query($sql);
    341. 

  341. 				}
    342. 

  342. 			}
    343. 

  343. 		}
    344. 

  344. 

  345. 		//
    346. 

  346. 		// This makes a copy of the post and stores it as a SENT message from the sender. Perhaps
    347. 

  347. 		// not the most DB friendly way but a lot easier to manage, besides the admin will be able to
    348. 

  348. 		// set limits on numbers of storable posts for users... hopefully!
    349. 

  349. 		//
    350. 

  350. 		$sql = "INSERT INTO " . PRIVMSGS_TABLE . " (privmsgs_type, privmsgs_subject, privmsgs_text, privmsgs_from_userid, privmsgs_to_userid, privmsgs_date, privmsgs_ip, privmsgs_enable_html, privmsgs_enable_bbcode, privmsgs_enable_smilies, privmsgs_enable_autolinks_acronyms, privmsgs_attach_sig)
    351. 

  351. 			VALUES (" . PRIVMSGS_SENT_MAIL . ", '" . $db->sql_escape($privmsg['privmsgs_subject']) . "', '" . $db->sql_escape($privmsg['privmsgs_text']) . "', " . $privmsg['privmsgs_from_userid'] . ", " . $privmsg['privmsgs_to_userid'] . ", " . $privmsg['privmsgs_date'] . ", '" . $privmsg['privmsgs_ip'] . "', " . $privmsg['privmsgs_enable_html'] . ", " . $privmsg['privmsgs_enable_bbcode'] . ", " . $privmsg['privmsgs_enable_smilies'] . ", " . $privmsg['privmsgs_enable_autolinks_acronyms'] . ", " . $privmsg['privmsgs_attach_sig'] . ")";
    352. 

  352. 		$result = $db->sql_query($sql);
    353. 

  353. 		$privmsg_sent_id = $db->sql_nextid();
    354. 

  354. 	}
    355. 

  355. 	$attachment_mod['pm']->duplicate_attachment_pm($privmsg['privmsgs_attachment'], $privmsg['privmsgs_id'], $privmsg_sent_id);
    356. 

  356. 

  357. 	// Pick a folder, any folder, so long as it's one below ...
    358. 

  358. 	$post_urls = array(
    359. 

  359. 		'post' => append_sid(CMS_PAGE_PRIVMSG . '?mode=post'),
    360. 

  360. 		'reply' => append_sid(CMS_PAGE_PRIVMSG . '?mode=reply&amp;' . POST_POST_URL . '=' . $privmsg_id),
    361. 

  361. 		'quote' => append_sid(CMS_PAGE_PRIVMSG . '?mode=quote&amp;' . POST_POST_URL . '=' . $privmsg_id),
    362. 

  362. 		'edit' => append_sid(CMS_PAGE_PRIVMSG . '?mode=edit&amp;' . POST_POST_URL . '=' . $privmsg_id)
    363. 

  363. 	);
    364. 

  364. 	$post_icons = array(
    365. 

  365. 		'post_img' => '<a href="' . $post_urls['post'] . '"><img src="' . $images['pm_postmsg'] . '" alt="' . $lang['Post_new_pm'] . '" /></a>',
    366. 

  366. 		'post' => '<a href="' . $post_urls['post'] . '">' . $lang['Post_new_pm'] . '</a>',
    367. 

  367. 		'reply_img' => '<a href="' . $post_urls['reply'] . '"><img src="' . $images['pm_replymsg'] . '" alt="' . $lang['Post_reply_pm'] . '" /></a>',
    368. 

  368. 		'reply' => '<a href="' . $post_urls['reply'] . '">' . $lang['Post_reply_pm'] . '</a>',
    369. 

  369. 		'quote_img' => '<a href="' . $post_urls['quote'] . '"><img src="' . $images['pm_quotemsg'] . '" alt="' . $lang['Post_quote_pm'] . '" /></a>',
    370. 

  370. 		'quote' => '<a href="' . $post_urls['quote'] . '">' . $lang['Post_quote_pm'] . '</a>',
    371. 

  371. 		'edit_img' => '<a href="' . $post_urls['edit'] . '"><img src="' . $images['pm_editmsg'] . '" alt="' . $lang['Edit_pm'] . '" /></a>',
    372. 

  372. 		'edit' => '<a href="' . $post_urls['edit'] . '">' . $lang['Edit_pm'] . '</a>'
    373. 

  373. 	);
    374. 

  374. 

  375. 	if ($folder == 'inbox')
    376. 

  376. 	{
    377. 

  377. 		$post_img = $post_icons['post_img'];
    378. 

  378. 		$reply_img = $post_icons['reply_img'];
    379. 

  379. 		$quote_img = $post_icons['quote_img'];
    380. 

  380. 		$edit_img = '';
    381. 

  381. 		$post = $post_icons['post'];
    382. 

  382. 		$reply = $post_icons['reply'];
    383. 

  383. 		$quote = $post_icons['quote'];
    384. 

  384. 		$edit = '';
    385. 

  385. 		$post_url = $post_urls['post'];
    386. 

  386. 		$reply_url = $post_urls['reply'];
    387. 

  387. 		$quote_url = $post_urls['quote'];
    388. 

  388. 		$edit_url = '';
    389. 

  389. 		$l_box_name = $lang['Inbox'];
    390. 

  390. 	}
    391. 

  391. 	elseif ($folder == 'outbox')
    392. 

  392. 	{
    393. 

  393. 		$post_img = $post_icons['post_img'];
    394. 

  394. 		$reply_img = '';
    395. 

  395. 		$quote_img = '';
    396. 

  396. 		$edit_img = $post_icons['edit_img'];
    397. 

  397. 		$post = $post_icons['post'];
    398. 

  398. 		$reply = '';
    399. 

  399. 		$quote = '';
    400. 

  400. 		$edit = $post_icons['edit'];
    401. 

  401. 		$post_url = $post_urls['post'];
    402. 

  402. 		$reply_url = '';
    403. 

  403. 		$quote_url = '';
    404. 

  404. 		$edit_url = $post_urls['edit'];
    405. 

  405. 		$l_box_name = $lang['Outbox'];
    406. 

  406. 	}
    407. 

  407. 	elseif ($folder == 'savebox')
    408. 

  408. 	{
    409. 

  409. 		if ($privmsg['privmsgs_type'] == PRIVMSGS_SAVED_IN_MAIL)
    410. 

  410. 		{
    411. 

  411. 			$post_img = $post_icons['post_img'];
    412. 

  412. 			$reply_img = $post_icons['reply_img'];
    413. 

  413. 			$quote_img = $post_icons['quote_img'];
    414. 

  414. 			$edit_img = '';
    415. 

  415. 			$post = $post_icons['post'];
    416. 

  416. 			$reply = $post_icons['reply'];
    417. 

  417. 			$quote = $post_icons['quote'];
    418. 

  418. 			$edit = '';
    419. 

  419. 			$post_url = $post_urls['post'];
    420. 

  420. 			$reply_url = $post_urls['reply'];
    421. 

  421. 			$quote_url = $post_urls['quote'];
    422. 

  422. 			$edit_url = '';
    423. 

  423. 		}
    424. 

  424. 		else
    425. 

  425. 		{
    426. 

  426. 			$post_img = $post_icons['post_img'];
    427. 

  427. 			$reply_img = '';
    428. 

  428. 			$quote_img = '';
    429. 

  429. 			$edit_img = '';
    430. 

  430. 			$post = $post_icons['post'];
    431. 

  431. 			$reply = '';
    432. 

  432. 			$quote = '';
    433. 

  433. 			$edit = '';
    434. 

  434. 			$post_url = $post_urls['post'];
    435. 

  435. 			$reply_url = '';
    436. 

  436. 			$quote_url = '';
    437. 

  437. 			$edit_url = '';
    438. 

  438. 		}
    439. 

  439. 		$l_box_name = $lang['Saved'];
    440. 

  440. 	}
    441. 

  441. 	elseif ($folder == 'sentbox')
    442. 

  442. 	{
    443. 

  443. 		$post_img = $post_icons['post_img'];
    444. 

  444. 		$reply_img = '';
    445. 

  445. 		$quote_img = '';
    446. 

  446. 		$edit_img = '';
    447. 

  447. 		$post = $post_icons['post'];
    448. 

  448. 		$reply = '';
    449. 

  449. 		$quote = '';
    450. 

  450. 		$edit = '';
    451. 

  451. 		$post_url = $post_urls['post'];
    452. 

  452. 		$reply_url = '';
    453. 

  453. 		$quote_url = '';
    454. 

  454. 		$edit_url = '';
    455. 

  455. 		$l_box_name = '';
    456. 

  456. 	}
    457. 

  457. 

  458. 	$s_hidden_fields = '<input type="hidden" name="mark[]" value="' . $privmsgs_id . '" />';
    459. 

  459. 

  460. 	$nav_server_url = create_server_url();
    461. 

  461. 	$breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">' . $lang['Private_Messaging'] . '</a>' . $lang['Nav_Separator'] . '<a class="nav-current" href="#">' . $privmsg['privmsgs_subject'] . '</a>';
    462. 

  462. 	$breadcrumbs['bottom_right_links'] = '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=prev', true) . '">' . $lang['Previous_privmsg'] . '</a> &bull; <a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=next', true) . '">' . $lang['Next_privmsg'] . '</a>';
    463. 

  463. 	$skip_nav_cat = true;
    464. 

  464. 	include_once(IP_ROOT_PATH . 'includes/users_zebra_block.' . PHP_EXT);
    465. 

  465. 

  466. 	make_jumpbox(CMS_PAGE_VIEWFORUM);
    467. 

  467. 

  468. 	$template->assign_vars(array(
    469. 

  469. 		'INBOX_IMG' => $inbox_img,
    470. 

  470. 		'SENTBOX_IMG' => $sentbox_img,
    471. 

  471. 		'OUTBOX_IMG' => $outbox_img,
    472. 

  472. 		'SAVEBOX_IMG' => $savebox_img,
    473. 

  473. 		'INBOX' => $inbox_url,
    474. 

  474. 		'SENTBOX' => $sentbox_url,
    475. 

  475. 		'OUTBOX' => $outbox_url,
    476. 

  476. 		'SAVEBOX' => $savebox_url,
    477. 

  477. 		'BOX_NAME' => $l_box_name,
    478. 

  478. 

  479. 		'L_QUICK_REPLY' => $lang['Quick_Reply'],
    480. 

  480. 		'L_EDIT_PM' => $lang['Edit_pm'],
    481. 

  481. 		'L_QUOTE_PM' => $lang['Post_quote_pm'],
    482. 

  482. 		'L_POST_PM' => $lang['Post_new_pm'],
    483. 

  483. 		'L_REPLY_PM' => $lang['Post_reply_pm'],
    484. 

  484. 		'EDIT_PM_URL' => $edit_url,
    485. 

  485. 		'POST_PM_URL' => $post_url,
    486. 

  486. 		'QUOTE_PM_URL' => $quote_url,
    487. 

  487. 		'REPLY_PM_URL' => $reply_url,
    488. 

  488. 

  489. 		'POST_PM_IMG' => $post_img,
    490. 

  490. 		'REPLY_PM_IMG' => $reply_img,
    491. 

  491. 		'EDIT_PM_IMG' => $edit_img,
    492. 

  492. 		'QUOTE_PM_IMG' => $quote_img,
    493. 

  493. 		'POST_PM' => $post,
    494. 

  494. 		'REPLY_PM' => $reply,
    495. 

  495. 		'EDIT_PM' => $edit,
    496. 

  496. 		'QUOTE_PM' => $quote,
    497. 

  497. 		'IMG_QUICK_QUOTE' => $images['icon_quick_quote'],
    498. 

  498. 		'IMG_OFFTOPIC' => $images['icon_offtopic'],
    499. 

  499. 

  500. 		'L_MESSAGE' => $lang['Message'],
    501. 

  501. 		'L_INBOX' => $lang['Inbox'],
    502. 

  502. 		'L_OUTBOX' => $lang['Outbox'],
    503. 

  503. 		'L_SENTBOX' => $lang['Sent'],
    504. 

  504. 		'L_SAVEBOX' => $lang['Saved'],
    505. 

  505. 		'L_FLAG' => $lang['Flag'],
    506. 

  506. 		'L_SUBJECT' => $lang['Subject'],
    507. 

  507. 		'L_QUICK_QUOTE' => $lang['QuickQuote'],
    508. 

  508. 		'L_OFFTOPIC' => $lang['OffTopic'],
    509. 

  509. 		'L_POSTED' => $lang['Posted'],
    510. 

  510. 		'L_DATE' => $lang['Date'],
    511. 

  511. 		'L_FROM' => $lang['From'],
    512. 

  512. 		'L_TO' => $lang['To'],
    513. 

  513. 		'L_SAVE_MSG' => $lang['Save_message'],
    514. 

  514. 		'L_DELETE_MSG' => $lang['Delete_message'],
    515. 

  515. 		'L_PM' => $lang['Private_Message'],
    516. 

  516. 		'L_EMAIL' => $lang['Email'],
    517. 

  517. 		'L_POSTS' => $lang['Posts'],
    518. 

  518. 		'L_CONTACTS' => $lang['User_Contacts'],
    519. 

  519. 		'L_WEBSITE' => $lang['Website'],
    520. 

  520. 		'L_FROM' => $lang['Location'],
    521. 

  521. 		'L_ONLINE_STATUS' => $lang['Online_status'],
    522. 

  522. 		'L_USER_WWW' => $lang['Website'],
    523. 

  523. 		'L_USER_EMAIL' => $lang['Send_Email'],
    524. 

  524. 		'L_USER_PROFILE' => $lang['Profile'],
    525. 

  525. 

  526. 		// BEGIN PM Navigation MOD
    527. 

  527. 		'L_PRIVMSG_NEXT' => $lang['Next_privmsg'],
    528. 

  528. 		'L_PRIVMSG_PREVIOUS' => $lang['Previous_privmsg'],
    529. 

  529. 		'U_PRIVMSG_NEXT' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=next', true),
    530. 

  530. 		'U_PRIVMSG_PREVIOUS' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=prev', true),
    531. 

  531. 		// END PM Navigation MOD
    532. 

  532. 

  533. 		'S_PRIVMSGS_ACTION' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder),
    534. 

  534. 		'S_HIDDEN_FIELDS' => $s_hidden_fields
    535. 

  535. 		)
    536. 

  536. 	);
    537. 

  537. 

  538. 	$username_from = colorize_username($privmsg['user_id_1'], $privmsg['username_1'], $privmsg['user_color_1'], $privmsg['user_active_1']);
    539. 

  539. 	$user_id_from = $privmsg['user_id_1'];
    540. 

  540. 	$username_to = colorize_username($privmsg['user_id_2'], $privmsg['username_2'], $privmsg['user_color_2'], $privmsg['user_active_2']);
    541. 

  541. 	$user_id_to = $privmsg['user_id_2'];
    542. 

  542. 

  543. 	// Needed for attachments... do not remove!
    544. 

  544. 	$template_to_parse = 'privmsgs_read_body.tpl';
    545. 

  545. 	$template->set_filenames(array('body' => $template_to_parse));
    546. 

  546. 	init_display_pm_attachments($privmsg['privmsgs_attachment']);
    547. 

  547. 

  548. 	$post_date = create_date_ip($config['default_dateformat'], $privmsg['privmsgs_date'], $config['board_timezone']);
    549. 

  549. 

  550. 	$privmsg['user_id'] = $privmsg['user_id_1'];
    551. 

  551. 	$privmsg['username'] = $privmsg['username_1'];
    552. 

  552. 	$privmsg['user_color'] = $privmsg['user_color_1'];
    553. 

  553. 	$privmsg['user_active'] = $privmsg['user_active_1'];
    554. 

  554. 	$user_info = array();
    555. 

  555. 	$user_info = generate_user_info($privmsg);
    556. 

  556. 	foreach ($user_info as $k => $v)
    557. 

  557. 	{
    558. 

  558. 		${$k} = $v;
    559. 

  559. 	}
    560. 

  560. 

  561. 	$poster_avatar = $user_info['avatar'];
    562. 

  562. 	$poster_posts = ($privmsg['user_id'] != ANONYMOUS) ? $lang['Posts'] . ': ' . $privmsg['user_posts'] : '';
    563. 

  563. 	$poster_from = ($privmsg['user_from']) ? $lang['Location'] . ': ' . $privmsg['user_from'] : '';
    564. 

  564. 	$poster_joined = ($privmsg['user_id'] != ANONYMOUS) ? $lang['Joined'] . ': ' . create_date($lang['JOINED_DATE_FORMAT'], $privmsg['user_regdate'], $config['board_timezone']) : '';
    565. 

  565. 

  566. 	// Mighty Gorgon - Quick Quote - BEGIN
    567. 

  567. 	$look_up_array = array(
    568. 

  568. 		'\"',
    569. 

  569. 		'"',
    570. 

  570. 		"<",
    571. 

  571. 		">",
    572. 

  572. 		"\n",
    573. 

  573. 		chr(13),
    574. 

  574. 	);
    575. 

  575. 

  576. 	$replacement_array = array(
    577. 

  577. 		'&q_mg;',
    578. 

  578. 		'\"',
    579. 

  579. 		"&lt_mg;",
    580. 

  580. 		"&gt_mg;",
    581. 

  581. 		"\\n",
    582. 

  582. 		"",
    583. 

  583. 	);
    584. 

  584. 

  585. 	$plain_message = $privmsg['privmsgs_text'];
    586. 

  586. 	$plain_message = strtr($plain_message, array_flip(get_html_translation_table(HTML_ENTITIES)));
    587. 

  587. 	$plain_message = censor_text($plain_message);
    588. 

  588. 	$plain_message = str_replace($look_up_array, $replacement_array, $plain_message);
    589. 

  589. 	// Mighty Gorgon - Quick Quote - END
    590. 

  590. 

  591. 	// Processing of post
    592. 

  592. 	$post_subject = $privmsg['privmsgs_subject'];
    593. 

  593. 	$private_message = $privmsg['privmsgs_text'];
    594. 

  594. 

  595. 	if ($config['allow_sig'])
    596. 

  596. 	{
    597. 

  597. 		$user_sig = ($privmsg['privmsgs_from_userid'] == $user->data['user_id']) ? $user->data['user_sig'] : $privmsg['user_sig'];
    598. 

  598. 	}
    599. 

  599. 	else
    600. 

  600. 	{
    601. 

  601. 		$user_sig = '';
    602. 

  602. 	}
    603. 

  603. 

  604. 	// If the board has HTML off but the post has HTML on then we process it, else leave it alone
    605. 

  605. 	if (!$config['allow_html'])
    606. 

  606. 	{
    607. 

  607. 		if ($user_sig != '' && $privmsg['privmsgs_enable_sig'] && $user->data['user_allowhtml'])
    608. 

  608. 		{
    609. 

  609. 			$user_sig = preg_replace('#(<)([\/]?.*?)(>)#is', "&lt;\\2&gt;", $user_sig);
    610. 

  610. 		}
    611. 

  611. 

  612. 		if ($privmsg['privmsgs_enable_html'])
    613. 

  613. 		{
    614. 

  614. 			$private_message = preg_replace('#(<)([\/]?.*?)(>)#is', "&lt;\\2&gt;", $private_message);
    615. 

  615. 		}
    616. 

  616. 	}
    617. 

  617. 

  618. 	if (($user_sig != '') && $privmsg['privmsgs_attach_sig'])
    619. 

  619. 	{
    620. 

  620. 		$bbcode->allow_html = $config['allow_html'];
    621. 

  621. 		$bbcode->allow_bbcode = $config['allow_bbcode'] ? true : false;
    622. 

  622. 		$bbcode->allow_smilies = $config['allow_smilies'];
    623. 

  623. 		$bbcode->is_sig = true;
    624. 

  624. 		$user_sig = $bbcode->parse($user_sig);
    625. 

  625. 		$bbcode->is_sig = false;
    626. 

  626. 	}
    627. 

  627. 

  628. 	$bbcode->allow_html = (($config['allow_html'] && $user->data['user_allowhtml']) || $config['allow_html_only_for_admins']) && $privmsg['privmsgs_enable_html'];
    629. 

  629. 	$bbcode->allow_bbcode = $config['allow_bbcode'] ? true : false;
    630. 

  630. 	$bbcode->allow_smilies = $config['allow_smilies'] && $privmsg['privmsgs_enable_smilies'];
    631. 

  631. 	$private_message = $bbcode->parse($private_message);
    632. 

  632. 

  633. 	if ($privmsg['privmsgs_attach_sig'] && $user_sig != '')
    634. 

  634. 	{
    635. 

  635. 		$signature = '<br />' . $config['sig_line'] . '<br />' . $user_sig;
    636. 

  636. 	}
    637. 

  637. 

  638. 	$post_subject = censor_text($post_subject);
    639. 

  639. 	$private_message = censor_text($private_message);
    640. 

  640. 

  641. 	//Acronyms, AutoLinks - BEGIN
    642. 

  642. 	if ($privmsg['privmsgs_enable_autolinks_acronyms'])
    643. 

  643. 	{
    644. 

  644. 		$private_message = $bbcode->acronym_pass($private_message);
    645. 

  645. 		$private_message = $bbcode->autolink_text($private_message, '999999');
    646. 

  646. 	}
    647. 

  647. 	//Acronyms, AutoLinks -END
    648. 

  648. 

  649. 	// Mighty Gorgon - Multiple Ranks - BEGIN
    650. 

  650. 	$user_ranks = generate_ranks($privmsg, $ranks_array);
    651. 

  651. 	if (($user_ranks['rank_01_html'] == '') && ($user_ranks['rank_01_img_html'] == '') && ($user_ranks['rank_02_html'] == '') && ($user_ranks['rank_02_img_html'] == '') && ($user_ranks['rank_03_html'] == '') && ($user_ranks['rank_03_img_html'] == '') && ($user_ranks['rank_04_html'] == '') && ($user_ranks['rank_04_img_html'] == '') && ($user_ranks['rank_05_html'] == '') && ($user_ranks['rank_05_img_html'] == ''))
    652. 

  652. 	{
    653. 

  653. 		$user_ranks['rank_01_html'] = '&nbsp;';
    654. 

  654. 	}
    655. 

  655. 	// Mighty Gorgon - Multiple Ranks - END
    656. 

  656. 

  657. 	$poster_rank = $user_ranks['rank_01_html'];
    658. 

  658. 	$rank_image = $user_ranks['rank_01_img_html'];
    659. 

  659. 

  660. 	// Dump it to the templating engine
    661. 

  661. 	$template->assign_vars(array(
    662. 

  662. 		'MESSAGE_TO' => $username_to,
    663. 

  663. 		'RECIPIENT_QQ' => $privmsg['username_1'],
    664. 

  664. 		'PM_ID' => $privmsgs_id,
    665. 

  665. 		'MESSAGE_FROM' => $username_from,
    666. 

  666. 		'RANK_IMAGE' => $rank_image,
    667. 

  667. 		'POSTER_JOINED' => $poster_joined,
    668. 

  668. 		'POSTER_POSTS' => $poster_posts,
    669. 

  669. 		'POSTER_FROM' => $poster_from,
    670. 

  670. 		'POSTER_AVATAR' => $poster_avatar,
    671. 

  671. 		'POST_SUBJECT' => $post_subject,
    672. 

  672. 		'POST_DATE' => $post_date,
    673. 

  673. 		'MESSAGE' => $private_message,
    674. 

  674. 		'PLAIN_MESSAGE' => $plain_message,
    675. 

  675. 		'SIGNATURE' => $signature,
    676. 

  676. 		'POSTER_RANK' => $poster_rank,
    677. 

  677. 		'RANK_IMAGE' => $rank_image,
    678. 

  678. 		'POSTER_GENDER' => $user_info['gender'],
    679. 

  679. 

  680. 		'PROFILE_URL' => $user_info['profile_url'],
    681. 

  681. 		'PROFILE_IMG' => $user_info['profile_img'],
    682. 

  682. 		'PROFILE' => $user_info['profile'],
    683. 

  683. 		'PM_URL' => $user_info['pm_url'],
    684. 

  684. 		'PM_IMG' => $user_info['pm_img'],
    685. 

  685. 		'PM' => $user_info['pm'],
    686. 

  686. 		'SEARCH_URL' => $user_info['search_url'],
    687. 

  687. 		'SEARCH_IMG' => $user_info['search_img'],
    688. 

  688. 		'SEARCH' => $user_info['search'],
    689. 

  689. 		'IP_URL' => $user_info['ip_url'],
    690. 

  690. 		'IP_IMG' => $user_info['ip_img'],
    691. 

  691. 		'IP' => $user_info['ip'],
    692. 

  692. 		'EMAIL_URL' => $user_info['email_url'],
    693. 

  693. 		'EMAIL_IMG' => $user_info['email_img'],
    694. 

  694. 		'EMAIL' => $user_info['email'],
    695. 

  695. 		'WWW_URL' => $user_info['www_url'],
    696. 

  696. 		'WWW_IMG' => $user_info['www_img'],
    697. 

  697. 		'WWW' => $user_info['www'],
    698. 

  698. 		'AIM_URL' => $user_info['aim_url'],
    699. 

  699. 		'AIM_IMG' => $user_info['aim_img'],
    700. 

  700. 		'AIM' => $user_info['aim'],
    701. 

  701. 		'ICQ_STATUS_IMG' => $user_info['icq_status_img'],
    702. 

  702. 		'ICQ_URL' => $user_info['icq_url'],
    703. 

  703. 		'ICQ_IMG' => $user_info['icq_img'],
    704. 

  704. 		'ICQ' => $user_info['icq'],
    705. 

  705. 		'MSN_URL' => $user_info['msn_url'],
    706. 

  706. 		'MSN_IMG' => $user_info['msn_img'],
    707. 

  707. 		'MSN' => $user_info['msn'],
    708. 

  708. 		'SKYPE_URL' => $user_info['skype_url'],
    709. 

  709. 		'SKYPE_IMG' => $user_info['skype_img'],
    710. 

  710. 		'SKYPE' => $user_info['skype'],
    711. 

  711. 		'YIM_URL' => $user_info['yahoo_url'],
    712. 

  712. 		'YIM_IMG' => $user_info['yahoo_img'],
    713. 

  713. 		'YIM' => $user_info['yahoo'],
    714. 

  714. 		'ONLINE_STATUS_URL' => $user_info['online_status_url'],
    715. 

  715. 		'ONLINE_STATUS_CLASS' => $user_info['online_status_class'],
    716. 

  716. 		'ONLINE_STATUS_IMG' => $user_info['online_status_img'],
    717. 

  717. 		'ONLINE_STATUS' => $user_info['online_status'],
    718. 

  718. 		'L_ONLINE_STATUS' => $user_info['online_status_lang'],
    719. 

  719. 		'L_READ_MESSAGE' => $lang['Read_pm'],
    720. 

  720. 		)
    721. 

  721. 	);
    722. 

  722. 

  723. 	if (!function_exists('generate_smilies_row'))
    724. 

  724. 	{
    725. 

  725. 		include_once(IP_ROOT_PATH . 'includes/functions_bbcode.' . PHP_EXT);
    726. 

  726. 	}
    727. 

  727. 	generate_smilies_row();
    728. 

  728. 	$template->assign_vars(array(
    729. 

  729. 		'L_SMILEYS_MORE' => $lang['More_emoticons'],
    730. 

  730. 		'U_SMILEYS_MORE' => append_sid('posting.' . PHP_EXT . '?mode=smilies'),
    731. 

  731. 		)
    732. 

  732. 	);
    733. 

  733. 

  734. 	full_page_generation($template_to_parse, $lang['Read_pm'], '', '');
    735. 

  735. }
    736. 

  736. elseif (($delete && $mark_list) || $delete_all)
    737. 

  737. {
    738. 

  738. 	if (!$user->data['session_logged_in'])
    739. 

  739. 	{
    740. 

  740. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=inbox', true));
    741. 

  741. 	}
    742. 

  742. 

  743. 	if (isset($mark_list) && !is_array($mark_list))
    744. 

  744. 	{
    745. 

  745. 		// Set to empty array instead of '0' if nothing is selected.
    746. 

  746. 		$mark_list = array();
    747. 

  747. 	}
    748. 

  748. 

  749. 	if (!$confirm)
    750. 

  750. 	{
    751. 

  751. 		$s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
    752. 

  752. 		$s_hidden_fields .= (isset($_POST['delete'])) ? '<input type="hidden" name="delete" value="true" />' : '<input type="hidden" name="deleteall" value="true" />';
    753. 

  753. 		$s_hidden_fields .= '<input type="hidden" name="sid" value="' . $user->data['session_id'] . '" />';
    754. 

  754. 

  755. 		for($i = 0; $i < sizeof($mark_list); $i++)
    756. 

  756. 		{
    757. 

  757. 			$s_hidden_fields .= '<input type="hidden" name="mark[]" value="' . intval($mark_list[$i]) . '" />';
    758. 

  758. 		}
    759. 

  759. 

  760. 		// Output confirmation page
    761. 

  761. 		$nav_server_url = create_server_url();
    762. 

  762. 		$breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '" class="nav-current">' . $lang['Private_Messaging'] . '</a>';
    763. 

  763. 		$template->assign_vars(array(
    764. 

  764. 			'MESSAGE_TITLE' => $lang['Information'],
    765. 

  765. 			'MESSAGE_TEXT' => (sizeof($mark_list) == 1) ? $lang['Confirm_delete_pm'] : $lang['Confirm_delete_pms'],
    766. 

  766. 

  767. 			'L_YES' => $lang['Yes'],
    768. 

  768. 			'L_NO' => $lang['No'],
    769. 

  769. 

  770. 			'S_CONFIRM_ACTION' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder),
    771. 

  771. 			'S_HIDDEN_FIELDS' => $s_hidden_fields
    772. 

  772. 			)
    773. 

  773. 		);
    774. 

  774. 		full_page_generation('confirm_body.tpl', $lang['Confirm'], '', '');
    775. 

  775. 	}
    776. 

  776. 	elseif ($confirm && $sid === $user->data['session_id'])
    777. 

  777. 	{
    778. 

  778. 		if ($delete_all)
    779. 

  779. 		{
    780. 

  780. 			switch($folder)
    781. 

  781. 			{
    782. 

  782. 				case 'inbox':
    783. 

  783. 					$delete_type = "privmsgs_to_userid = " . $user->data['user_id'] . " AND (
    784. 

  784. 					privmsgs_type = " . PRIVMSGS_READ_MAIL . " OR privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    785. 

  785. 					break;
    786. 

  786. 

  787. 				case 'outbox':
    788. 

  788. 					$delete_type = "privmsgs_from_userid = " . $user->data['user_id'] . " AND (privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    789. 

  789. 					break;
    790. 

  790. 

  791. 				case 'sentbox':
    792. 

  792. 					$delete_type = "privmsgs_from_userid = " . $user->data['user_id'] . " AND privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    793. 

  793. 					break;
    794. 

  794. 

  795. 				case 'savebox':
    796. 

  796. 					$delete_type = "((privmsgs_from_userid = " . $user->data['user_id'] . "
    797. 

  797. 						AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ")
    798. 

  798. 					OR (privmsgs_to_userid = " . $user->data['user_id'] . "
    799. 

  799. 						AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . "))";
    800. 

  800. 					break;
    801. 

  801. 			}
    802. 

  802. 

  803. 			$sql = "SELECT privmsgs_id
    804. 

  804. 				FROM " . PRIVMSGS_TABLE . "
    805. 

  805. 				WHERE $delete_type";
    806. 

  806. 			$result = $db->sql_query($sql);
    807. 

  807. 

  808. 			while ($row = $db->sql_fetchrow($result))
    809. 

  809. 			{
    810. 

  810. 				$mark_list[] = $row['privmsgs_id'];
    811. 

  811. 			}
    812. 

  812. 

  813. 			unset($delete_type);
    814. 

  814. 		}
    815. 

  815. 		$attachment_mod['pm']->delete_all_pm_attachments($mark_list);
    816. 

  816. 		if (sizeof($mark_list))
    817. 

  817. 		{
    818. 

  818. 			$delete_sql_id = '';
    819. 

  819. 			for ($i = 0; $i < sizeof($mark_list); $i++)
    820. 

  820. 			{
    821. 

  821. 				$delete_sql_id .= (($delete_sql_id != '') ? ', ' : '') . intval($mark_list[$i]);
    822. 

  822. 			}
    823. 

  823. 

  824. 			if ($folder == 'inbox' || $folder == 'outbox')
    825. 

  825. 			{
    826. 

  826. 				switch ($folder)
    827. 

  827. 				{
    828. 

  828. 					case 'inbox':
    829. 

  829. 						$sql = "privmsgs_to_userid = " . $user->data['user_id'];
    830. 

  830. 						break;
    831. 

  831. 					case 'outbox':
    832. 

  832. 						$sql = "privmsgs_from_userid = " . $user->data['user_id'];
    833. 

  833. 						break;
    834. 

  834. 				}
    835. 

  835. 

  836. 				// Get information relevant to new or unread mail
    837. 

  837. 				// so we can adjust users counters appropriately
    838. 

  838. 				$sql = "SELECT privmsgs_to_userid, privmsgs_type
    839. 

  839. 					FROM " . PRIVMSGS_TABLE . "
    840. 

  840. 					WHERE privmsgs_id IN ($delete_sql_id)
    841. 

  841. 						AND $sql
    842. 

  842. 						AND privmsgs_type IN (" . PRIVMSGS_NEW_MAIL . ", " . PRIVMSGS_UNREAD_MAIL . ")";
    843. 

  843. 				$result = $db->sql_query($sql);
    844. 

  844. 

  845. 				if ($row = $db->sql_fetchrow($result))
    846. 

  846. 				{
    847. 

  847. 					$update_users = $update_list = array();
    848. 

  848. 

  849. 					do
    850. 

  850. 					{
    851. 

  851. 						switch ($row['privmsgs_type'])
    852. 

  852. 						{
    853. 

  853. 							case PRIVMSGS_NEW_MAIL:
    854. 

  854. 								$update_users['new'][$row['privmsgs_to_userid']]++;
    855. 

  855. 								break;
    856. 

  856. 

  857. 							case PRIVMSGS_UNREAD_MAIL:
    858. 

  858. 								$update_users['unread'][$row['privmsgs_to_userid']]++;
    859. 

  859. 								break;
    860. 

  860. 						}
    861. 

  861. 					}
    862. 

  862. 					while ($row = $db->sql_fetchrow($result));
    863. 

  863. 

  864. 					if (sizeof($update_users))
    865. 

  865. 					{
    866. 

  866. 						while (list($type, $users) = each($update_users))
    867. 

  867. 						{
    868. 

  868. 							while (list($user_id, $dec) = each($users))
    869. 

  869. 							{
    870. 

  870. 								$update_list[$type][$dec][] = $user_id;
    871. 

  871. 							}
    872. 

  872. 						}
    873. 

  873. 						unset($update_users);
    874. 

  874. 

  875. 						while (list($type, $dec_ary) = each($update_list))
    876. 

  876. 						{
    877. 

  877. 							switch ($type)
    878. 

  878. 							{
    879. 

  879. 								case 'new':
    880. 

  880. 									$type = "user_new_privmsg";
    881. 

  881. 									break;
    882. 

  882. 

  883. 								case 'unread':
    884. 

  884. 									$type = "user_unread_privmsg";
    885. 

  885. 									break;
    886. 

  886. 							}
    887. 

  887. 

  888. 							while (list($dec, $user_ary) = each($dec_ary))
    889. 

  889. 							{
    890. 

  890. 								$user_ids = implode(', ', $user_ary);
    891. 

  891. 

  892. 								$sql = "UPDATE " . USERS_TABLE . "
    893. 

  893. 									SET $type = $type - $dec
    894. 

  894. 									WHERE user_id IN ($user_ids)";
    895. 

  895. 								$db->sql_query($sql);
    896. 

  896. 							}
    897. 

  897. 						}
    898. 

  898. 						unset($update_list);
    899. 

  899. 					}
    900. 

  900. 				}
    901. 

  901. 				$db->sql_freeresult($result);
    902. 

  902. 			}
    903. 

  903. 

  904. 			// Delete the messages
    905. 

  905. 			$delete_sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    906. 

  906. 				WHERE privmsgs_id IN ($delete_sql_id)
    907. 

  907. 					AND ";
    908. 

    909. 

  909. 			switch($folder)
    910. 

  910. 			{
    911. 

  911. 				case 'inbox':
    912. 

  912. 					$delete_sql .= "privmsgs_to_userid = " . $user->data['user_id'] . " AND (
    913. 

  913. 						privmsgs_type = " . PRIVMSGS_READ_MAIL . " OR privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    914. 

  914. 					break;
    915. 

  915. 

  916. 				case 'outbox':
    917. 

  917. 					$delete_sql .= "privmsgs_from_userid = " . $user->data['user_id'] . " AND (
    918. 

  918. 						privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    919. 

  919. 					break;
    920. 

  920. 

  921. 				case 'sentbox':
    922. 

  922. 					$delete_sql .= "privmsgs_from_userid = " . $user->data['user_id'] . " AND privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    923. 

  923. 					break;
    924. 

  924. 

  925. 				case 'savebox':
    926. 

  926. 					$delete_sql .= "((privmsgs_from_userid = " . $user->data['user_id'] . "
    927. 

  927. 						AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ")
    928. 

  928. 					OR (privmsgs_to_userid = " . $user->data['user_id'] . "
    929. 

  929. 						AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . "))";
    930. 

  930. 					break;
    931. 

  931. 			}
    932. 

  932. 			$db->sql_query($delete_sql);
    933. 

  933. 		}
    934. 

  934. 	}
    935. 

  935. }
    936. 

  936. elseif ($download && $mark_list)
    937. 

  937. {
    938. 

  938. 	if (!$user->data['session_logged_in'])
    939. 

  939. 	{
    940. 

  940. 		$header_location = (@preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE'))) ? 'Refresh: 0; URL=' : 'Location: ';
    941. 

  941. 		header($header_location . append_sid(CMS_PAGE_LOGIN .'?redirect=privmsg.' . PHP_EXT . '&folder=inbox', true));
    942. 

  942. 		exit;
    943. 

  943. 	}
    944. 

  944. 

  945. 	switch($folder)
    946. 

  946. 	{
    947. 

  947. 		case 'inbox':
    948. 

  948. 			$disp_folder = $lang['Inbox'];
    949. 

  949. 		break;
    950. 

  950. 

  951. 		case 'outbox':
    952. 

  952. 			$disp_folder = $lang['Outbox'];
    953. 

  953. 		break;
    954. 

  954. 

  955. 		case 'sentbox':
    956. 

  956. 			$disp_folder = $lang['Sentbox'];
    957. 

  957. 		break;
    958. 

  958. 

  959. 		case 'savebox':
    960. 

  960. 			$disp_folder = $lang['Savebox'];
    961. 

  961. 		break;
    962. 

  962. 	}
    963. 

  963. 

  964. 	if (sizeof($mark_list))
    965. 

  965. 	{
    966. 

  966. 		$i = 0;
    967. 

  967. 		$crlf = "\r\n";
    968. 

  968. 		$pmtext = $lang['Private_Messaging'] . ' (' . $config['sitename'] . ')' . $crlf;
    969. 

  969. 		$user_dateformat = ($user->data['user_dateformat']) ? $user->data['user_dateformat'] : $config['default_dateformat'];
    970. 

  970. 		$pmtext .= $disp_folder . ' (' . gmdate($user_dateformat) . ')' . $crlf;
    971. 

  971. 		while($mark_list[$i] != '')
    972. 

  972. 		{
    973. 

  973. 			$sql = "SELECT pm.privmsgs_date, pm.privmsgs_subject, pm.privmsgs_text, us.username, us.user_id
    974. 

  974. 				FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " us
    975. 

  975. 				WHERE pm.privmsgs_id = " . $mark_list[$i] . "
    976. 

  976. 				AND us.user_id = pm.privmsgs_from_userid";
    977. 

  977. 			$db->sql_return_on_error(true);
    978. 

  978. 			$result = $db->sql_query($sql);
    979. 

  979. 			$db->sql_return_on_error(false);
    980. 

  980. 			if ($result)
    981. 

  981. 			{
    982. 

  982. 				$db_row = $db->sql_fetchrow($result);
    983. 

  983. 				$tmpmsg = wordwrap(htmlspecialchars_decode($db_row['privmsgs_text'], ENT_COMPAT), 78, $crlf);
    984. 

  984. 				$from = (($folder == 'inbox') || ($folder == 'savebox')) ? $lang['From'] : $lang['To'];
    985. 

  985. 				$pmtext .= '------------------------------------------------------------------------------' . $crlf;
    986. 

  986. 				$pmtext .= $lang['Mailbox'] . ': ' . $user->data['username'] . $crlf;
    987. 

  987. 				$pmtext .= $from . ': ' . $db_row['username'] . $crlf;
    988. 

  988. 				$pmtext .= $lang['Posted'] . ': ' . gmdate($user_dateformat, $db_row['privmsgs_date']) . $crlf;
    989. 

  989. 				$pmtext .= $lang['Subject'] . ': ' . htmlspecialchars_decode($db_row['privmsgs_subject'], ENT_COMPAT) . $crlf . $crlf;
    990. 

  990. 				$pmtext .= $tmpmsg . $crlf;
    991. 

  991. 			}
    992. 

  992. 			else
    993. 

  993. 			{
    994. 

  994. 				print $sql . '<p>';
    995. 

  995. 				message_die(GENERAL_ERROR, 'Could not read private message info', '', __LINE__, __FILE__, $sql);
    996. 

  996. 			}
    997. 

  997. 			$i++;
    998. 

  998. 		}
    999. 

  999. 		$filename = $config['sitename'] . '_' . $disp_folder . '_' . gmdate('Ymd');
    1000. 

  1000. 		$filename = preg_replace('/[^A-Za-z0-9]+/', '_', strtolower($filename)) . '.txt';
    1001. 

  1001. 		header('Content-Type: text/x-delimtext; name="' . $filename . '"');
    1002. 

  1002. 		header('Content-Disposition: attachment;filename=' . $filename);
    1003. 

  1003. 		header('Content-Transfer-Encoding: plain/text');
    1004. 

  1004. 		header('Content-Length: ' . strlen($pmtext));
    1005. 

  1005. 		print $pmtext;
    1006. 

  1006. 		exit;
    1007. 

  1007. 	}
    1008. 

  1008. }
    1009. 

  1009. elseif ($save && $mark_list && ($folder != 'savebox') && ($folder != 'outbox'))
    1010. 

  1010. {
    1011. 

  1011. 	if (!$user->data['session_logged_in'])
    1012. 

  1012. 	{
    1013. 

  1013. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=inbox', true));
    1014. 

  1014. 	}
    1015. 

  1015. 

  1016. 	if (sizeof($mark_list))
    1017. 

  1017. 	{
    1018. 

  1018. 		// See if recipient is at their savebox limit
    1019. 

  1019. 		$sql = "SELECT COUNT(privmsgs_id) AS savebox_items, MIN(privmsgs_date) AS oldest_post_time
    1020. 

  1020. 			FROM " . PRIVMSGS_TABLE . "
    1021. 

  1021. 			WHERE ((privmsgs_to_userid = " . $user->data['user_id'] . "
    1022. 

  1022. 					AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    1023. 

  1023. 				OR (privmsgs_from_userid = " . $user->data['user_id'] . "
    1024. 

  1024. 					AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "))";
    1025. 

  1025. 		$result = $db->sql_query($sql);
    1026. 

  1026. 

  1027. 		if ($saved_info = $db->sql_fetchrow($result))
    1028. 

  1028. 		{
    1029. 

  1029. 			if ($config['max_savebox_privmsgs'] && $saved_info['savebox_items'] >= $config['max_savebox_privmsgs'])
    1030. 

  1030. 			{
    1031. 

  1031. 				$sql = "SELECT privmsgs_id FROM " . PRIVMSGS_TABLE . "
    1032. 

  1032. 					WHERE ((privmsgs_to_userid = " . $user->data['user_id'] . "
    1033. 

  1033. 								AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    1034. 

  1034. 							OR (privmsgs_from_userid = " . $user->data['user_id'] . "
    1035. 

  1035. 								AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "))
    1036. 

  1036. 						AND privmsgs_date = " . $saved_info['oldest_post_time'];
    1037. 

  1037. 				$result = $db->sql_query($sql);
    1038. 

  1038. 				$old_privmsgs_id = $db->sql_fetchrow($result);
    1039. 

  1039. 				$old_privmsgs_id = $old_privmsgs_id['privmsgs_id'];
    1040. 

  1040. 

  1041. 				$sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    1042. 

  1042. 					WHERE privmsgs_id = $old_privmsgs_id";
    1043. 

  1043. 				$result = $db->sql_query($sql);
    1044. 

  1044. 			}
    1045. 

  1045. 		}
    1046. 

  1046. 

  1047. 		$saved_sql_id = '';
    1048. 

  1048. 		for ($i = 0; $i < sizeof($mark_list); $i++)
    1049. 

  1049. 		{
    1050. 

  1050. 			$saved_sql_id .= (($saved_sql_id != '') ? ', ' : '') . intval($mark_list[$i]);
    1051. 

  1051. 		}
    1052. 

  1052. 

  1053. 		// Process request
    1054. 

  1054. 		$saved_sql = "UPDATE " . PRIVMSGS_TABLE;
    1055. 

  1055. 

  1056. 		// Decrement read/new counters if appropriate
    1057. 

  1057. 		if ($folder == 'inbox' || $folder == 'outbox')
    1058. 

  1058. 		{
    1059. 

  1059. 			switch ($folder)
    1060. 

  1060. 			{
    1061. 

  1061. 				case 'inbox':
    1062. 

  1062. 					$sql = "privmsgs_to_userid = " . $user->data['user_id'];
    1063. 

  1063. 					break;
    1064. 

  1064. 				case 'outbox':
    1065. 

  1065. 					$sql = "privmsgs_from_userid = " . $user->data['user_id'];
    1066. 

  1066. 					break;
    1067. 

  1067. 			}
    1068. 

  1068. 

  1069. 			// Get information relevant to new or unread mail
    1070. 

  1070. 			// so we can adjust users counters appropriately
    1071. 

  1071. 			$sql = "SELECT privmsgs_to_userid, privmsgs_type
    1072. 

  1072. 				FROM " . PRIVMSGS_TABLE . "
    1073. 

  1073. 				WHERE privmsgs_id IN ($saved_sql_id)
    1074. 

  1074. 					AND $sql
    1075. 

  1075. 					AND privmsgs_type IN (" . PRIVMSGS_NEW_MAIL . ", " . PRIVMSGS_UNREAD_MAIL . ")";
    1076. 

  1076. 			$result = $db->sql_query($sql);
    1077. 

  1077. 

  1078. 			if ($row = $db->sql_fetchrow($result))
    1079. 

  1079. 			{
    1080. 

  1080. 				$update_users = $update_list = array();
    1081. 

  1081. 

  1082. 				do
    1083. 

  1083. 				{
    1084. 

  1084. 					switch ($row['privmsgs_type'])
    1085. 

  1085. 					{
    1086. 

  1086. 						case PRIVMSGS_NEW_MAIL:
    1087. 

  1087. 							$update_users['new'][$row['privmsgs_to_userid']]++;
    1088. 

  1088. 							break;
    1089. 

  1089. 

  1090. 						case PRIVMSGS_UNREAD_MAIL:
    1091. 

  1091. 							$update_users['unread'][$row['privmsgs_to_userid']]++;
    1092. 

  1092. 							break;
    1093. 

  1093. 					}
    1094. 

  1094. 				}
    1095. 

  1095. 				while ($row = $db->sql_fetchrow($result));
    1096. 

  1096. 

  1097. 				if (sizeof($update_users))
    1098. 

  1098. 				{
    1099. 

  1099. 					while (list($type, $users) = each($update_users))
    1100. 

  1100. 					{
    1101. 

  1101. 						while (list($user_id, $dec) = each($users))
    1102. 

  1102. 						{
    1103. 

  1103. 							$update_list[$type][$dec][] = $user_id;
    1104. 

  1104. 						}
    1105. 

  1105. 					}
    1106. 

  1106. 					unset($update_users);
    1107. 

  1107. 

  1108. 					while (list($type, $dec_ary) = each($update_list))
    1109. 

  1109. 					{
    1110. 

  1110. 						switch ($type)
    1111. 

  1111. 						{
    1112. 

  1112. 							case 'new':
    1113. 

  1113. 								$type = "user_new_privmsg";
    1114. 

  1114. 								break;
    1115. 

  1115. 

  1116. 							case 'unread':
    1117. 

  1117. 								$type = "user_unread_privmsg";
    1118. 

  1118. 								break;
    1119. 

  1119. 						}
    1120. 

  1120. 

  1121. 						while (list($dec, $user_ary) = each($dec_ary))
    1122. 

  1122. 						{
    1123. 

  1123. 							$user_ids = implode(', ', $user_ary);
    1124. 

  1124. 

  1125. 							$sql = "UPDATE " . USERS_TABLE . "
    1126. 

  1126. 								SET $type = $type - $dec
    1127. 

  1127. 								WHERE user_id IN ($user_ids)";
    1128. 

  1128. 							$result_tmp = $db->sql_query($sql);
    1129. 

  1129. 						}
    1130. 

  1130. 					}
    1131. 

  1131. 					unset($update_list);
    1132. 

  1132. 				}
    1133. 

  1133. 			}
    1134. 

  1134. 			$db->sql_freeresult($result);
    1135. 

  1135. 		}
    1136. 

  1136. 

  1137. 		switch ($folder)
    1138. 

  1138. 		{
    1139. 

  1139. 			case 'inbox':
    1140. 

  1140. 				$saved_sql .= " SET privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . "
    1141. 

  1141. 					WHERE privmsgs_to_userid = " . $user->data['user_id'] . "
    1142. 

  1142. 						AND (privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    1143. 

  1143. 							OR privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1144. 

  1144. 							OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    1145. 

  1145. 				break;
    1146. 

  1146. 

  1147. 			case 'outbox':
    1148. 

  1148. 				$saved_sql .= " SET privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "
    1149. 

  1149. 					WHERE privmsgs_from_userid = " . $user->data['user_id'] . "
    1150. 

  1150. 						AND (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1151. 

  1151. 							OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ") ";
    1152. 

  1152. 				break;
    1153. 

  1153. 

  1154. 			case 'sentbox':
    1155. 

  1155. 				$saved_sql .= " SET privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "
    1156. 

  1156. 					WHERE privmsgs_from_userid = " . $user->data['user_id'] . "
    1157. 

  1157. 						AND privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    1158. 

  1158. 				break;
    1159. 

  1159. 		}
    1160. 

  1160. 

  1161. 		$saved_sql .= " AND privmsgs_id IN ($saved_sql_id)";
    1162. 

  1162. 

  1163. 		$result_saved = $db->sql_query($saved_sql);
    1164. 

  1164. 

  1165. 		redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=savebox', true));
    1166. 

  1166. 	}
    1167. 

  1167. }
    1168. 

  1168. elseif ($submit || $refresh || ($mode != ''))
    1169. 

  1169. {
    1170. 

  1170. 	if (!$user->data['session_logged_in'])
    1171. 

  1171. 	{
    1172. 

  1172. 		$user_id = (isset($_GET[POST_USERS_URL])) ? '&' . POST_USERS_URL . '=' . intval($_GET[POST_USERS_URL]) : '';
    1173. 

  1173. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=' . $folder . '&mode=' . $mode . $user_id, true));
    1174. 

  1174. 	}
    1175. 

  1175. 

  1176. 	// Toggles
    1177. 

  1177. 	if (!$config['allow_html'])
    1178. 

  1178. 	{
    1179. 

  1179. 		$html_on = 0;
    1180. 

  1180. 	}
    1181. 

  1181. 	else
    1182. 

  1182. 	{
    1183. 

  1183. 		$html_on = ($submit || $refresh) ? ((!empty($_POST['disable_html'])) ? 0 : 1) : $user->data['user_allowhtml'];
    1184. 

  1184. 	}
    1185. 

  1185. 

  1186. 	$acro_auto_on = ($submit || $refresh) ? ((!empty($_POST['disable_acro_auto'])) ? 0 : 1) : 1;
    1187. 

  1187. 

  1188. 	if (!$config['allow_bbcode'])
    1189. 

  1189. 	{
    1190. 

  1190. 		$bbcode_on = 0;
    1191. 

  1191. 	}
    1192. 

  1192. 	else
    1193. 

  1193. 	{
    1194. 

  1194. 		$bbcode_on = ($submit || $refresh) ? ((!empty($_POST['disable_bbcode'])) ? 0 : 1) : $user->data['user_allowbbcode'];
    1195. 

  1195. 	}
    1196. 

  1196. 

  1197. 	if (!$config['allow_smilies'])
    1198. 

  1198. 	{
    1199. 

  1199. 		$smilies_on = 0;
    1200. 

  1200. 	}
    1201. 

  1201. 	else
    1202. 

  1202. 	{
    1203. 

  1203. 		$smilies_on = ($submit || $refresh) ? ((!empty($_POST['disable_smilies'])) ? 0 : 1) : $user->data['user_allowsmile'];
    1204. 

  1204. 	}
    1205. 

  1205. 

  1206. 	$attach_sig = ($submit || $refresh) ? ((!empty($_POST['attach_sig'])) ? 1 : 0) : $user->data['user_attachsig'];
    1207. 

  1207. 	$user_sig = ($user->data['user_sig'] != '' && $config['allow_sig']) ? $user->data['user_sig'] : '';
    1208. 

  1208. 

  1209. 	if (($submit) && ($mode != 'edit') && ($user->data['user_level'] != ADMIN))
    1210. 

  1210. 	{
    1211. 

  1211. 		// Flood control
    1212. 

  1212. 		$sql = "SELECT MAX(privmsgs_date) AS last_post_time
    1213. 

  1213. 			FROM " . PRIVMSGS_TABLE . "
    1214. 

  1214. 			WHERE privmsgs_from_userid = " . $user->data['user_id'];
    1215. 

  1215. 		$db->sql_return_on_error(true);
    1216. 

  1216. 		$result = $db->sql_query($sql);
    1217. 

  1217. 		$db->sql_return_on_error(false);
    1218. 

  1218. 		if ($result)
    1219. 

  1219. 		{
    1220. 

  1220. 			$db_row = $db->sql_fetchrow($result);
    1221. 

  1221. 

  1222. 			$last_post_time = $db_row['last_post_time'];
    1223. 

  1223. 			$current_time = time();
    1224. 

  1224. 

  1225. 			if (($current_time - $last_post_time) < $config['flood_interval'])
    1226. 

  1226. 			{
    1227. 

  1227. 				message_die(GENERAL_MESSAGE, $lang['Flood_Error']);
    1228. 

  1228. 			}
    1229. 

  1229. 		}
    1230. 

  1230. 		// End Flood control
    1231. 

  1231. 	}
    1232. 

  1232. 

  1233. 	if ($submit && ($mode == 'edit'))
    1234. 

  1234. 	{
    1235. 

  1235. 		$sql = 'SELECT privmsgs_from_userid
    1236. 

  1236. 			FROM ' . PRIVMSGS_TABLE . '
    1237. 

  1237. 			WHERE privmsgs_id = ' . (int) $privmsg_id . '
    1238. 

  1238. 				AND privmsgs_from_userid = ' . $user->data['user_id'];
    1239. 

  1239. 		$result = $db->sql_query($sql);
    1240. 

  1240. 

  1241. 		if (!($row = $db->sql_fetchrow($result)))
    1242. 

  1242. 		{
    1243. 

  1243. 			message_die(GENERAL_MESSAGE, $lang['No_such_post']);
    1244. 

  1244. 		}
    1245. 

  1245. 		$db->sql_freeresult($result);
    1246. 

  1246. 

  1247. 		unset($row);
    1248. 

  1248. 	}
    1249. 

  1249. 

  1250. 	if ($submit || ($draft && $draft_confirm))
    1251. 

  1251. 	{
    1252. 

  1252. 		$username = request_var('username', '', true);
    1253. 

  1253. 		$username = htmlspecialchars_decode($username, ENT_COMPAT);
    1254. 

  1254. 		$subject = !empty($draft_subject) ? $draft_subject : request_post_var('subject', '', true);
    1255. 

  1255. 		$message = !empty($draft_message) ? $draft_message : htmlspecialchars_decode(request_post_var('message', '', true), ENT_COMPAT);
    1256. 

  1256. 

  1257. 		// session id check
    1258. 

  1258. 		if (($sid == '') || ($sid != $user->data['session_id']))
    1259. 

  1259. 		{
    1260. 

  1260. 			$error = true;
    1261. 

  1261. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['Session_invalid'];
    1262. 

  1262. 		}
    1263. 

  1263. 

  1264. 		if (!empty($username))
    1265. 

  1265. 		{
    1266. 

  1266. 			$to_username = phpbb_clean_username($username);
    1267. 

  1267. 			$sql = "SELECT user_id, user_notify_pm, user_email, user_lang, user_active
    1268. 

  1268. 				FROM " . USERS_TABLE . "
    1269. 

  1269. 				WHERE username_clean = '" . $db->sql_escape(utf8_clean_string($to_username)) . "'
    1270. 

  1270. 					AND user_id <> " . ANONYMOUS;
    1271. 

  1271. 			$db->sql_return_on_error(true);
    1272. 

  1272. 			$result = $db->sql_query($sql);
    1273. 

  1273. 			$db->sql_return_on_error(false);
    1274. 

  1274. 			if (!$result)
    1275. 

  1275. 			{
    1276. 

  1276. 				$error = true;
    1277. 

  1277. 				$error_msg = $lang['NO_USER'];
    1278. 

  1278. 			}
    1279. 

  1279. 

  1280. 			if (!($to_userdata = $db->sql_fetchrow($result)))
    1281. 

  1281. 			{
    1282. 

  1282. 				$error = true;
    1283. 

  1283. 				$error_msg = $lang['NO_USER'];
    1284. 

  1284. 			}
    1285. 

  1285. 		}
    1286. 

  1286. 		else
    1287. 

  1287. 		{
    1288. 

  1288. 			$error = true;
    1289. 

  1289. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['No_to_user'];
    1290. 

  1290. 		}
    1291. 

  1291. 

  1292. 		$privmsg_subject = $subject;
    1293. 

  1293. 		if (empty($privmsg_subject))
    1294. 

  1294. 		{
    1295. 

  1295. 			$error = true;
    1296. 

  1296. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['Empty_subject'];
    1297. 

  1297. 		}
    1298. 

  1298. 

  1299. 		if (!empty($message) && !$error)
    1300. 

  1300. 		{
    1301. 

  1301. 			$privmsg_message = prepare_message($message, $html_on, $bbcode_on, $smilies_on, '');
    1302. 

  1302. 		}
    1303. 

  1303. 		else
    1304. 

  1304. 		{
    1305. 

  1305. 			$error = true;
    1306. 

  1306. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['Empty_message'];
    1307. 

  1307. 		}
    1308. 

  1308. 	}
    1309. 

  1309. 

  1310. 	if (($submit || ($draft && $draft_confirm)) && !$error)
    1311. 

  1311. 	{
    1312. 

  1312. 		// Has admin prevented user from sending PM's?
    1313. 

  1313. 		if (!$user->data['user_allow_pm'])
    1314. 

  1314. 		{
    1315. 

  1315. 			$error_message = $lang['Cannot_send_privmsg'];
    1316. 

  1316. 			message_die(GENERAL_MESSAGE, $error_message);
    1317. 

  1317. 		}
    1318. 

  1318. 

  1319. 		// MG Drafts - BEGIN
    1320. 

  1320. 		if (($config['allow_drafts'] == true) && $draft && $draft_confirm && $user->data['session_logged_in'])
    1321. 

  1321. 		{
    1322. 

  1322. 			save_draft($draft_id, $user->data['user_id'], 0, 0, $privmsg_subject, $message);
    1323. 

  1323. 			$output_message = $lang['Drafts_Saved'];
    1324. 

  1324. 			$output_message .= '<br /><br />' . sprintf($lang['Click_return_drafts'], '<a href="' . append_sid(CMS_PAGE_DRAFTS) . '">', '</a>');
    1325. 

  1325. 			$output_message .= '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    1326. 

  1326. 

  1327. 			$redirect_url = append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox');
    1328. 

  1328. 			meta_refresh(3, $redirect_url);
    1329. 

  1329. 

  1330. 			message_die(GENERAL_MESSAGE, $output_message);
    1331. 

  1331. 		}
    1332. 

  1332. 		// MG Drafts - END
    1333. 

  1333. 

  1334. 		$msg_time = time();
    1335. 

  1335. 

  1336. 		if ($mode != 'edit')
    1337. 

  1337. 		{
    1338. 

  1338. 			// See if recipient is at their inbox limit
    1339. 

  1339. 			$sql = "SELECT COUNT(privmsgs_id) AS inbox_items, MIN(privmsgs_date) AS oldest_post_time
    1340. 

  1340. 				FROM " . PRIVMSGS_TABLE . "
    1341. 

  1341. 				WHERE (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1342. 

  1342. 						OR privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    1343. 

  1343. 						OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")
    1344. 

  1344. 					AND privmsgs_to_userid = " . $to_userdata['user_id'];
    1345. 

  1345. 			$result = $db->sql_query($sql);
    1346. 

  1346. 

  1347. 			if ($inbox_info = $db->sql_fetchrow($result))
    1348. 

  1348. 			{
    1349. 

  1349. 				if ($config['max_inbox_privmsgs'] && ($inbox_info['inbox_items'] >= $config['max_inbox_privmsgs']))
    1350. 

  1350. 				{
    1351. 

  1351. 					$sql = "SELECT privmsgs_id FROM " . PRIVMSGS_TABLE . "
    1352. 

  1352. 						WHERE (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1353. 

  1353. 								OR privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    1354. 

  1354. 								OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . " )
    1355. 

  1355. 							AND privmsgs_date = " . $inbox_info['oldest_post_time'] . "
    1356. 

  1356. 							AND privmsgs_to_userid = " . $to_userdata['user_id'];
    1357. 

  1357. 					$result = $db->sql_query($sql);
    1358. 

  1358. 					$old_privmsgs_id = $db->sql_fetchrow($result);
    1359. 

  1359. 					$old_privmsgs_id = $old_privmsgs_id['privmsgs_id'];
    1360. 

  1360. 

  1361. 					$sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    1362. 

  1362. 						WHERE privmsgs_id = $old_privmsgs_id";
    1363. 

  1363. 					$db->sql_query($sql);
    1364. 

  1364. 				}
    1365. 

  1365. 			}
    1366. 

  1366. 

  1367. 			if ($user->data['user_level'] > 0)
    1368. 

  1368. 			{
    1369. 

  1369. 				$pm_send = true;
    1370. 

  1370. 			}
    1371. 

  1371. 			else
    1372. 

  1372. 			{
    1373. 

  1373. 				$u_pm_in = user_check_pm_in_allowed($to_userdata['user_id']);
    1374. 

  1374. 				if ($u_pm_in == true)
    1375. 

  1375. 				{
    1376. 

  1376. 					$pm_send = true;
    1377. 

  1377. 				}
    1378. 

  1378. 				else
    1379. 

  1379. 				{
    1380. 

  1380. 					$u_pm_friend = user_check_friend_foe($to_userdata['user_id'], true);
    1381. 

  1381. 					if ($u_pm_friend == true)
    1382. 

  1382. 					{
    1383. 

  1383. 						$pm_send = true;
    1384. 

  1384. 					}
    1385. 

  1385. 					else
    1386. 

  1386. 					{
    1387. 

  1387. 						$msg = $lang['Allow_PM_IN_SEND_ERROR'] . '<br /><br />' . sprintf($lang['Click_return_inbox'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    1388. 

  1388. 						message_die(GENERAL_MESSAGE, $msg);
    1389. 

  1389. 					}
    1390. 

  1390. 				}
    1391. 

  1391. 			}
    1392. 

  1392. 			$sql_info = "INSERT INTO " . PRIVMSGS_TABLE . " (privmsgs_type, privmsgs_subject, privmsgs_text, privmsgs_from_userid, privmsgs_to_userid, privmsgs_date, privmsgs_ip, privmsgs_enable_html, privmsgs_enable_bbcode, privmsgs_enable_smilies, privmsgs_enable_autolinks_acronyms, privmsgs_attach_sig)
    1393. 

  1393. 				VALUES (" . PRIVMSGS_NEW_MAIL . ", '" . $db->sql_escape($privmsg_subject) . "', '" . $db->sql_escape($privmsg_message) . "', " . $user->data['user_id'] . ", " . $to_userdata['user_id'] . ", $msg_time, '$user_ip', $html_on, $bbcode_on, $smilies_on, $acro_auto_on, $attach_sig)";
    1394. 

  1394. 		}
    1395. 

  1395. 		else
    1396. 

  1396. 		{
    1397. 

  1397. 			if ($user->data['user_level'] > 0)
    1398. 

  1398. 			{
    1399. 

  1399. 				$pm_send = true;
    1400. 

  1400. 			}
    1401. 

  1401. 			else
    1402. 

  1402. 			{
    1403. 

  1403. 				$u_pm_in = user_check_pm_in_al…
    1404.

Large files files are truncated, but you can click here to view the full file