pm.php | searchcode

/v1.4/puslapiai/pm.php

http://mightmedia.googlecode.com/
PHP | 269 lines | 237 code | 13 blank | 19 comment | 91 complexity | 1f4e9c8be2191a1df948facc1177fb15 MD5 | raw file
Possible License(s): AGPL-1.0, LGPL-2.0, GPL-2.0

<?php



/**

 * @Projektas: MightMedia TVS

 * @Puslapis: www.coders.lt

 * @$Author: P.Dambrauskas $

 * @copyright CodeRS Š2008

 * @license GNU General Public License v2

 * @$Revision: 1174 $

 * @$Date: 2009-03-22 14:14:45 +0100 (Sun, 22 Mar 2009) $

 **/



if (!isset($_SESSION['username'])) {

	header("Location: /");

}

unset($text);

if (isset($url['u']) && !empty($url['u'])) {

	$user = input(base64_decode($url['u']));

} else {

	$user = '';

}

if (isset($url['i']) && isnum($url['i']) && $url['i'] > 0) {

	$pid = (int)$url['i'];

} else {

	$pid = 0;

} //kam atsakom

if (isset($url['d']) && isnum($url['d']) && $url['d'] > 0) {

	$did = (int)$url['d'];

} else {

	$did = 0;

} //ka trinam

if (isset($url['p']) && isnum($url['p']) && $url['p'] > 0) {

	$p = (int)$url['p'];

} else {

	$p = 0;

} //puslapiavimas

if (isset($url['a']) && isnum($url['a']) && $url['a'] >= 0) {

	$a = (int)$url['a'];

} else {

	$a = 0;

} //inbox arba outbox

if (isset($url['o']) && !empty($url['o']) && $url['o'] != null) {

	$order = input($url['o']);

} else {

	$order = 'date';

} //lygiavimas

if (isset($url['s']) && !empty($url['s']) && $url['s'] != null) {

	$s = input($url['s']);

}



//paieska

switch ($order) {

	case "{$lang['user']['pm_time']}:":

		{

			$order = "date";

			break;

		}

	case "{$lang['user']['pm_from']}:":

		{

			$order = "from";

			break;

		}

	case "{$lang['user']['pm_subject']}:":

		{

			$order = "title";

			break;

		}

	default:

		{

			$order = "date";

			break;

		}

}

$limit = 30;

$uzeris = mysql_fetch_assoc(mysql_query1("SELECT `pm_viso`,`nick` FROM " . LENTELES_PRIESAGA . "users WHERE nick='" . $_SESSION['username'] . "'"));

$pm_sk = kiek("private_msg", "WHERE `to`=" . escape($uzeris['nick']));

$date['m'] = 'Viso';

$date['d'] = $pm_sk;

// ################# Trinam zinute ###########################

if (isset($url['d']) && isnum($url['d']) && $url['d'] >= 0 && isset($_SESSION['username'])) {

	if ($url['d'] == 0) {

		mysql_query1("DELETE FROM `" . LENTELES_PRIESAGA . "private_msg` WHERE `to`=" . escape($_SESSION['username']));

		header("Location: ?id," . $url['id'] . ";p," . $url['p'] . "");

	} elseif ((int)$url['d'] > 0) {

		mysql_query1("DELETE FROM `" . LENTELES_PRIESAGA . "private_msg` WHERE `to`=" . escape($_SESSION['username']) . " AND `id`=" . escape((int)$url['d']));

		header("Location: ?id," . $url['id'] . ";p," . $url['p'] . "");

	}

}



// ################# Siunciam zinute ##########################

if (isset($_POST['action']) && $_POST['action'] == 'pm_send' && isset($_SESSION['username'])) {

	$from = $_SESSION['username'];

	$to = input($_POST['to']);

	if ($to == $_SESSION['username']) {

		$error = "{$lang['user']['pm_error']}<br />";

	}

	$title = (isset($_POST['title']) && !empty($_POST['title']) ? input($_POST['title']) : "{$lang['user']['pm_nosubject']}");

	if (!isset($title)) {

		$title = "{$lang['user']['pm_nosubject']}";

	}

	$msg = $_POST['msg'];

	$date = time();

	$sql = mysql_query1("SELECT nick,email FROM " . LENTELES_PRIESAGA . "users WHERE nick=" . escape($to) . " LIMIT 1");

	if (mysql_num_rows($sql) == 0) {

		$error = "{$lang['user']['pm_noreceiver']}";

	}

	if (!isset($error)) {

		if (kiek("private_msg", "WHERE `to`=" . escape($to) . "") < 51) {

			$result = mysql_query1("INSERT INTO `" . LENTELES_PRIESAGA . "private_msg` (`from`, `to`, `title`, `msg`, `read`, `date`) VALUES (" . escape($from) . ", " . escape($to) . ", " . escape($title) . ", " . escape($msg) . ", 'NO', '" . $date . "')");

			if (!$result) {

				$error = "{$lang['user']['pm_error']}";

			}

			if ($result) {

				$error = "{$lang['user']['pm_sent']}";

				msg("{$lang['user']['pm_sent']}", $error);

				unset($result, $error, $sql, $_POST);

				redirect("?id," . $url['id'] . "", "meta");

			}

		} else {

			//kas cia? $sql = mysql_fetch_assoc($sql); //$result = mysql_query1("INSERT INTO `private_msg` (`from`, `to`, `title`, `msg`, `read`, `date`) VALUES (" . escape($conf['Pavadinimas']) .", " . escape($to) .", " . escape("J?s? pato d?ut? pilna") .", " . escape("J?s? pato d?ut? usipild?. Kiti svetain?s lankytojai jums nebegali si?sti inu??i?.") .", 'NO', '" . $date ."')");

			klaida("{$lang['system']['error']}", "{$lang['user']['pm_users'] } <b>" . $to . "</b> {$lang['user']['pm_full']}.");

			redirect("?id," . $url['id'] . "", "meta");

		}

	}

}

// ######### Paneles rodymas ir zinuciu isvedimas ######################

$text = "

<fieldset>

<legend>{$lang['user']['pm_freespace']}</legend>

<table border=0>

	<tr>

		<td>

		{$lang['user']['pm_left']}: <b>" . ($uzeris['pm_viso'] - $pm_sk) . " {$lang['user']['pm_of']} <b>" . $uzeris['pm_viso'] . "</b></b><br />

		";

$pm_img = substr($pm_sk, 0, -1);

$pm_img = "<img src='images/pm/" . (empty($pm_img) ? '0' : $pm_img) . ".gif'/>";

$text .= $pm_img . "

		</td>

	</tr>

	<tr>

		<td></td>

	</tr>

</table>

</fieldset>



<fieldset>

<legend>{$lang['user']['pm_actions']}</legend>

	<table width='100%'>

		<tr>

			<td>

				<div class=\"blokas\"><center><a href='?id," . $url['id'] . ";n,1'><img src=\"images/pm/new.png\" alt=\"{$lang['user']['pm_new']}\" />{$lang['user']['pm_new']}</a></center></div>

				<div class=\"blokas\"><center><a href='?id," . $url['id'] . ";a,1'><img src=\"images/pm/inbox.png\" alt=\"{$lang['user']['pm_inbox']}\" />{$lang['user']['pm_inbox']}</a></center></div>

				<div class=\"blokas\"><center><a href='?id," . $url['id'] . ";a,2'><img src=\"images/pm/outbox.png\" alt=\"{$lang['user']['pm_outbox']}\" />{$lang['user']['pm_outbox']}</a></center></div>

				<div class=\"blokas\"><center><a href='?id," . $url['id'] . ";d,0' ><img src=\"images/pm/delete_all.png\" alt=\"{$lang['user']['pm_delete_all']}\" />{$lang['user']['pm_delete_all']}</a></center></div>

			</td>

		</tr>

	</table>

 </fieldset>";





// ################### Siusti nauja zinute arba atsakyti i esancia ######################################

if (isset($url['n'])) {

	if (!empty($url['n']) && (int)$url['n']) {

		// ############### Jei nera paspaustas atsakyti mygtukas sukuriam paprasta forma #################

		//if (isset($error) && !empty($error)) { msg("D?mesio!",$error); }

		if (isset($user) && (int)$pid > 0) {

			$sql = mysql_fetch_assoc(mysql_query1("SELECT * FROM `" . LENTELES_PRIESAGA . "private_msg` WHERE `from`=" . escape($user) . " AND `id`=" . escape($pid) . ""));

			if ($sql['read'] == "NO") {

				mysql_query1("UPDATE `" . LENTELES_PRIESAGA . "private_msg` SET `read`='YES' WHERE `id`=" . escape($pid));

			}

		}

		$text .= "

				<fieldset>

				<legend>" . ((isset($user) && (int)$pid > 0) ? "{$lang['user']['pm_reply']}" : "{$lang['user']['pm_send']}") . " </legend>

				<form name=\"msg\" action=\"?id," . $url['id'] . ";\" method=\"post\">

					<table border=0 width=\"100%\">

					<tr>

						<td width=\"15%\" class=\"sarasas\">{$lang['user']['pm_to']}:</td>

						<td>

							<input type=\"text\" name=\"to\" value=\"" . (isset($user) && $_SESSION['username'] != $user ? strtolower($user) : '') . "\" />

						</td>

					</tr>

					<tr>

						<td class=\"sarasas\">{$lang['user']['pm_subject']}:</td>

						<td><input name=\"title\" type=\"text\" size=\"50\" value=\"" . ((isset($user) && (int)$pid > 0) ? "Re: " . trimlink($sql['title'], 40) : "") . "\" style=\"width:95%\"></td>

					</tr>

					<tr>

						<td valign='top' align='left' class=\"sarasas\">{$lang['user']['pm_message']}:</td>

						<td><textarea name=\"msg\" rows=\"10\" cols=\"50\" wrap=\"on\" style=\"width:95%\">" . ((isset($user) && (int)$pid > 0) ? "[quote=" . $user . "]" . input(trim(preg_replace(array("#\[quote=(http://)?(.*?)\](.*?)\[/quote]#si", "[/quote]"), "", $sql['msg']))) . "[/quote]\n\n" : "") . "</textarea>

						<br />

						" . bbk("msg") . "

						<br />

						<input type=\"submit\" value=\"" . ((isset($user) && (int)$pid > 0) ? "{$lang['user']['pm_reply']}" : "{$lang['user']['pm_send']}") . "\">

						<input type=\"hidden\" name=\"action\" value=\"pm_send\" />

					</td>

					</tr>

					</table>

				</form>

			</fieldset><script>addText('msg', '', '');</script>

			";

		//}

	} else {

		header("Location: ?");

	}

}



lentele("{$lang['user']['pm_panel']}", $text);

unset($text);



// ##################### Perziureti zinute ######################

if (isset($url['v'])) {

	if (!empty($url['v']) && (int)$url['v'] > 0 && isnum($url['v'])) {



		$sql = mysql_fetch_assoc(mysql_query1("SELECT `msg`, `from`,`to`, `title`,(SELECT `id` AS `nick_id` FROM `" . LENTELES_PRIESAGA . "users` WHERE `nick`= `" . LENTELES_PRIESAGA . "private_msg`.`from`) AS `from_id` FROM `" . LENTELES_PRIESAGA . "private_msg` WHERE (`to`=" . escape($_SESSION['username']) . " OR `from`=" . escape($_SESSION['username']) . ") AND `id`=" . escape($url['v'])));

		if ($sql) {

			$laiskas = "

				<div style=\"background:#FFFFD4 url('images/pm/underline.gif'); font-size:14px; padding-left:10px; padding-right:5px; line-height: 16px;\"><b>{$lang['user']['pm_from']}:</b>  " . $sql['from'] . "<br><b>{$lang['user']['pm_to']}:</b> " . $sql['to'] . "<br> <b>{$lang['user']['pm_subject']}:</b> " . (isset($sql['title']) && !empty($sql['title']) ? input(trimlink($sql['title'], 40)) : "{$lang['user']['pm_nosubject']}") . "<br><br><b>{$lang['user']['pm_message']}:</b><br>" . bbcode(wrap($sql['msg'], 40)) . "<br><br></div>

				" . (strtolower($sql['to']) == strtolower($_SESSION['username']) ? "<form name=\"replay_pm\" action='?id," . $conf['puslapiai']['pm.php']['id'] . ";n,1;u," . str_replace("=", "", base64_encode($sql['from'])) . ";i," . $url['v'] . "' method=\"post\">

					<input type=\"submit\" value=\"{$lang['user']['pm_reply']}\"/> <input type=\"button\" value=\"{$lang['user']['pm_delete']}\" onclick=\"location.href='" . url("d," . $url['v'] . ";v,0") . "'\"/>

				</form>" : "") . "

				";



			lentele("{$lang['user']['pm_message']}", $laiskas);



			mysql_query1("UPDATE `" . LENTELES_PRIESAGA . "private_msg` SET `read`='YES' WHERE `id`=" . escape($url['v']) . " AND `to`=" . escape($_SESSION['username']) . "");

		}

	}

}

if (defined("LEVEL") && LEVEL > 0 && $a == 1 && !isset($s)) {

	include_once ("priedai/class.php");

	$sql = mysql_query1("SELECT `id`, `read`,`from`, IF(`from` = '', 'Sve??ias',`from`) AS `Nuo`,(SELECT `id` AS `nick_id` FROM `" . LENTELES_PRIESAGA . "users` WHERE `nick`= `" . LENTELES_PRIESAGA . "private_msg`.`from`) AS `from_id`, INSERT(LEFT(`msg`,80),80,3,'...') AS `inut?`, IF(`title` = '', 'Be pavadinimo',INSERT(LEFT(`title`,80),80,3,'...')) AS `Pavadinimas`, `date` AS `Data` FROM `" . LENTELES_PRIESAGA . "private_msg` WHERE `to`=" . escape($_SESSION['username']) . " ORDER BY `" . LENTELES_PRIESAGA . "private_msg`.`$order` DESC LIMIT $p,$limit") or die(mysql_error());

	if (mysql_num_rows($sql) > 0) {

		$bla = new Table();

		$info = array();

		while ($row = mysql_fetch_assoc($sql)) {

			if ($row['read'] == "NO") {

				$extra = "<img src='images/pm/pm_new.png' />";

			} else {

				$extra = "<img src='images/pm/pm_read.png' />";

			}

			$info[] = array("" => $extra, "{$lang['user']['pm_subject']}:" => "<a href='?id," . $url['id'] . ";v," . $row['id'] . "' style=\"display: block\">" . (isset($row['Pavadinimas']) && !empty($row['Pavadinimas']) ? input(trimlink($row['Pavadinimas'], 40)) : "{$lang['user']['pm_nosubject']}") . "</a></div>", "{$lang['user']['pm_from']}:" => user($row['Nuo'], $row['from_id']), "{$lang['user']['pm_time']}:" => kada(date('Y-m-d H:i:s ', $row['Data'])), " " => "<a href='?id," . $url['id'] . ";n,1;u," . str_replace("=", "", base64_encode($row['from'])) . ";i," . $row['id'] . "'><img src='images/pm/replay.png' border=0 alt=\"{$lang['user']['pm_reply']}\" title=\"{$lang['user']['pm_reply']}\"/></a><a href='" . url('d,' . $row['id'] . '') . "'><img src='images/pm/delete.png' border=0 alt=\"{$lang['user']['pm_delete']}\" title=\"{$lang['user']['pm_delete']}\"/></a>");

		}

		lentele("{$lang['user']['pm_inbox']}", puslapiai($p, $limit, $pm_sk, 10) . "<br/>" . $bla->render($info) . "<br/>" . puslapiai($p, $limit, $pm_sk, 10));

	} else {

		lentele("{$lang['user']['pm_inbox']}", "{$lang['user']['pm_empty_msg']}");

	}

}

if (defined("LEVEL") && LEVEL > 0 && $a == 2 && !isset($s)) {

	include_once ("priedai/class.php");

	$sql = mysql_query1("SELECT `id`, `read`, IF(`to` = '', 'Sve??ias',`to`) AS `to`, INSERT(LEFT(`msg`,80),80,3,'...') AS `inut?`, IF(`title` = '', 'Be pavadinimo',INSERT(LEFT(`title`,80),80,3,'...')) AS `Pavadinimas`,(SELECT `id` AS `nick_id` FROM `" . LENTELES_PRIESAGA . "users` WHERE `nick`= `" . LENTELES_PRIESAGA . "private_msg`.`to`) AS `to_id`, `date` AS `Data` FROM `" . LENTELES_PRIESAGA . "private_msg` WHERE `from`=" . escape($_SESSION['username']) . " ORDER BY `" . LENTELES_PRIESAGA . "private_msg`.`$order` DESC LIMIT $p,$limit") or die(mysql_error());

	if (mysql_num_rows($sql) > 0) {

		$bla = new Table();

		$info = array();

		while ($row = mysql_fetch_assoc($sql)) {

			if ($row['read'] == "NO") {

				$extra = "<img src='images/pm/pm_new.png' />";

			} else {

				$extra = "<img src='images/pm/pm_read.png' />";

			}

			$info[] = array("" => $extra, "{$lang['user']['pm_subject']}:" => "<a href='?id," . $url['id'] . ";v," . $row['id'] . "' title=\"{$lang['user']['pm_time']}: <b>" . date('Y-m-d H:i:s', $row['Data']) . "</b><br/>{$lang['user']['pm_message']}: <i>" . nl2br(strip_tags(input(str_replace(array("[", "]"), "", $row['inut?'])))) . "</i><br/>\" style=\"display: block\">" . input(trimlink($row['Pavadinimas'], 40)) . "</a>", "{$lang['user']['pm_to']}:" => user($row['to'], $row['to_id']), "{$lang['user']['pm_time']}:" => kada(date('Y-m-d H:i:s ', $row['Data'])));

		}

		asort($info);

		lentele("{$lang['user']['pm_outbox']}", puslapiai($p, $limit, $pm_sk, 10) . "<br/>" . $bla->render($info) . "<br/>" . puslapiai($p, $limit, $pm_sk, 10), "");

	} else {

		lentele("{$lang['user']['pm_outbox']}", "{$lang['user']['pm_empty_msg']}");

	}

}



?>