PageRenderTime 76ms CodeModel.GetById 23ms RepoModel.GetById 0ms app.codeStats 1ms

/privmsg.php

https://github.com/MightyGorgon/icy_phoenix
PHP | 2330 lines | 1917 code | 290 blank | 123 comment | 384 complexity | 683998d027a85142824677bf2203ff51 MD5 | raw file
Possible License(s): AGPL-1.0 
    

  1. <?php
    2. 

  2. /**
    3. 

  3. *
    4. 

  4. * @package Icy Phoenix
    5. 

  5. * @version $Id$
    6. 

  6. * @copyright (c) 2008 Icy Phoenix
    7. 

  7. * @license http://opensource.org/licenses/gpl-license.php GNU Public License
    8. 

  8. *
    9. 

  9. */
    10. 

  10. 

  11. /**
    12. 

  12. *
    13. 

  13. * @Icy Phoenix is based on phpBB
    14. 

  14. * @copyright (c) 2008 phpBB Group
    15. 

  15. *
    16. 

  16. */
    17. 

  17. 

  18. define('IN_PM', true);
    19. 

  19. // MG Cash MOD For IP - BEGIN
    20. 

  20. define('IN_CASHMOD', true);
    21. 

  21. // MG Cash MOD For IP - END
    22. 

  22. // Added to optimize memory for attachments
    23. 

  23. define('ATTACH_DISPLAY', true);
    24. 

  24. define('ATTACH_PM', true);
    25. 

  25. define('IN_ICYPHOENIX', true);
    26. 

  26. if (!defined('IP_ROOT_PATH')) define('IP_ROOT_PATH', './');
    27. 

  27. if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));
    28. 

  28. include(IP_ROOT_PATH . 'common.' . PHP_EXT);
    29. 

  29. include_once(IP_ROOT_PATH . 'includes/bbcode.' . PHP_EXT);
    30. 

  30. include_once(IP_ROOT_PATH . 'includes/functions_post.' . PHP_EXT);
    31. 

  31. include_once(IP_ROOT_PATH . 'includes/functions_users.' . PHP_EXT);
    32. 

  32. include_once(IP_ROOT_PATH . 'includes/functions_zebra.' . PHP_EXT);
    33. 

  33. 

  34. // Adding CPL_NAV only if needed
    35. 

  35. define('PARSE_CPL_NAV', true);
    36. 

  36. 

  37. // Is PM disabled?
    38. 

  38. if (!empty($config['privmsg_disable']))
    39. 

  39. {
    40. 

  40. 	message_die(GENERAL_MESSAGE, 'PM_disabled');
    41. 

  41. }
    42. 

  42. 

  43. $html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#', '#"#');
    44. 

  44. $html_entities_replace = array('&amp;', '&lt;', '&gt;', '&quot;');
    45. 

  45. 

  46. // Parameters
    47. 

  47. $privmsg_id = request_var(POST_POST_URL, 0);
    48. 

  48. 

  49. $mode = request_var('mode', '');
    50. 

  50. 

  51. $start = request_var('start', 0);
    52. 

  52. $start = ($start < 0) ? 0 : $start;
    53. 

  53. 

  54. $sid = request_post_var('sid', '');
    55. 

  55. 

  56. $submit = (isset($_POST['post'])) ? true : false;
    57. 

  57. $submit_search = (isset($_POST['usersubmit'])) ? true : false;
    58. 

  58. $submit_msgdays = (isset($_POST['submit_msgdays'])) ? true : false;
    59. 

  59. $cancel = (isset($_POST['cancel'])) ? true : false;
    60. 

  60. $preview = (isset($_POST['preview'])) ? true : false;
    61. 

  61. $confirm = (isset($_POST['confirm'])) ? true : false;
    62. 

  62. $delete = (isset($_POST['delete'])) ? true : false;
    63. 

  63. $delete_all = (isset($_POST['deleteall'])) ? true : false;
    64. 

  64. $download = (isset($_POST['download'])) ? true : false;
    65. 

  65. $save = (isset($_POST['save'])) ? true : false;
    66. 

  66. 

  67. $draft = request_var('draft', '');
    68. 

  68. $draft_mode = request_var('draft_mode', '');
    69. 

  69. $draft_confirm = !empty($_POST['draft_confirm']) ? true : false;
    70. 

  70. $draft = (!empty($draft) || $draft_confirm) ? true : false;
    71. 

  71. $draft_id = request_var('d', 0);
    72. 

  72. 

  73. if (($config['allow_drafts'] == true) && ($draft_mode == 'draft_load') && ($draft_id > 0))
    74. 

  74. {
    75. 

  75. 	$sql = "SELECT d.*
    76. 

  76. 		FROM " . DRAFTS_TABLE . " d
    77. 

  77. 		WHERE d.draft_id = '" . $draft_id . "'
    78. 

  78. 		AND d.user_id = '" . $user->data['user_id'] . "'
    79. 

  79. 		LIMIT 1";
    80. 

  80. 	$result = $db->sql_query($sql);
    81. 

  81. 

  82. 	if ($draft_row = $db->sql_fetchrow($result))
    83. 

  83. 	{
    84. 

  84. 		$db->sql_freeresult($result);
    85. 

  85. 		$draft_subject = $draft_row['draft_subject'];
    86. 

  86. 		$draft_message = htmlspecialchars_decode($draft_row['draft_message'], ENT_COMPAT);
    87. 

  87. 		$preview = true;
    88. 

  88. 	}
    89. 

  89. }
    90. 

  90. 

  91. $search_type = request_var('searchvar', '');
    92. 

  92. $search_value = request_var('searchvalue', '');
    93. 

  93. $search_value_tmp = request_var('searchvalue2', '');
    94. 

  94. $search_value = (!empty($search_value) && !empty($search_value_tmp)) ? $search_value_tmp : $search_value;
    95. 

  95. 

  96. $refresh = $preview || $submit_search || ($draft && !$draft_confirm);
    97. 

  97. 

  98. $mark_list = request_var('mark', array(0));
    99. 

  99. 

  100. $folders_array = array('inbox', 'outbox', 'sentbox', 'savebox');
    101. 

  101. $folder = request_var('folder', 'inbox');
    102. 

  102. $folder = check_var_value($folder, $folders_array);
    103. 

  103. 

  104. // Start session management
    105. 

  105. $user->session_begin();
    106. 

  106. $auth->acl($user->data);
    107. 

  107. $user->setup();
    108. 

  108. // End session management
    109. 

  109. 

  110. // Cancel
    111. 

  111. if ($cancel)
    112. 

  112. {
    113. 

  113. 	redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder, true));
    114. 

  114. }
    115. 

  115. 

  116. // Check search fields
    117. 

  117. $search_list = array(
    118. 

  118. 	'author' => 'author is',
    119. 

  119. 	'subject' => 'subject contains',
    120. 

  120. 	);
    121. 

  121. if(empty($search_value) || empty($search_type) || intval($search_type) || !isset($search_list[$search_type]))
    122. 

  122. {
    123. 

  123. 	$search_type = '';
    124. 

  124. }
    125. 

  125. if(empty($search_type))
    126. 

  126. {
    127. 

  127. 	$search_value = '';
    128. 

  128. }
    129. 

  129. $template->vars['SEARCH_TYPES'] = '';
    130. 

  130. foreach($search_list as $var => $value)
    131. 

  131. {
    132. 

  132. 	$template->vars['SEARCH_TYPES'] .= '<option value="' . $var . '"' . ($search_type === $var ? ' selected="selected"' : '') . '>' . $value . '</option>';
    133. 

  133. }
    134. 

  134. $template->vars['SEARCH_VALUE'] = htmlspecialchars($search_value);
    135. 

  135. 

  136. 

  137. $error = false;
    138. 

  138. 

  139. // Define the box image links
    140. 

  140. $inbox_img = ($folder != 'inbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '"><img src="' . $images['pm_inbox'] . '" alt="' . $lang['Inbox'] . '" title="' . $lang['Inbox'] . '" /></a>' : '<img src="' . $images['pm_inbox'] . '" alt="' . $lang['Inbox'] . '" title="' . $lang['Inbox'] . '" />';
    141. 

  141. $inbox_url = ($folder != 'inbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">' . $lang['Inbox'] . '</a>' : $lang['Inbox'];
    142. 

  142. 

  143. $outbox_img = ($folder != 'outbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=outbox') . '"><img src="' . $images['pm_outbox'] . '" alt="' . $lang['Outbox'] . '" title="' . $lang['Outbox'] . '" /></a>' : '<img src="' . $images['pm_outbox'] . '" alt="' . $lang['Outbox'] . '" title="' . $lang['Outbox'] . '" />';
    144. 

  144. $outbox_url = ($folder != 'outbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=outbox') . '">' . $lang['Outbox'] . '</a>' : $lang['Outbox'];
    145. 

  145. 

  146. $sentbox_img = ($folder != 'sentbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=sentbox') . '"><img src="' . $images['pm_sentbox'] . '" alt="' . $lang['Sentbox'] . '" title="' . $lang['Sentbox'] . '" /></a>' : '<img src="' . $images['pm_sentbox'] . '" alt="' . $lang['Sentbox'] . '" title="' . $lang['Sentbox'] . '" />';
    147. 

  147. $sentbox_url = ($folder != 'sentbox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=sentbox') . '">' . $lang['Sentbox'] . '</a>' : $lang['Sentbox'];
    148. 

  148. 

  149. $savebox_img = ($folder != 'savebox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=savebox') . '"><img src="' . $images['pm_savebox'] . '" alt="' . $lang['Savebox'] . '" title="' . $lang['Savebox'] . '" /></a>' : '<img src="' . $images['pm_savebox'] . '" alt="' . $lang['Savebox'] . '" title="' . $lang['Savebox'] . '" />';
    150. 

  150. $savebox_url = ($folder != 'savebox' || $mode != '') ? '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=savebox') . '">' . $lang['Savebox'] . '</a>' : $lang['Savebox'];
    151. 

  151. execute_privmsgs_attachment_handling($mode);
    152. 

  152. 

  153. // Start main
    154. 

  154. if ($mode == 'newpm')
    155. 

  155. {
    156. 

  156. 	$link_name = '';
    157. 

  157. 	if ($mode == 'post')
    158. 

  158. 	{
    159. 

  159. 		$link_name = $lang['Send_a_new_message'];
    160. 

  160. 	}
    161. 

  161. 	elseif ($mode == 'reply')
    162. 

  162. 	{
    163. 

  163. 		$link_name = $lang['Send_a_reply'];
    164. 

  164. 	}
    165. 

  165. 	elseif ($mode == 'edit')
    166. 

  166. 	{
    167. 

  167. 		$link_name = $lang['Edit_message'];
    168. 

  168. 	}
    169. 

  169. 	$nav_server_url = create_server_url();
    170. 

  170. 	$breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '"' . (!empty($link_name) ? '' : ' class="nav-current"') . '>' . $lang['Private_Messaging'] . '</a>' . (!empty($link_name) ? ($lang['Nav_Separator'] . '<a class="nav-current" href="#">' . $link_name . '</a>') : '');
    171. 

  171. 	include_once(IP_ROOT_PATH . 'includes/users_zebra_block.' . PHP_EXT);
    172. 

  172. 

  173. 	if ($user->data['session_logged_in'])
    174. 

  174. 	{
    175. 

  175. 		if ($user->data['user_new_privmsg'])
    176. 

  176. 		{
    177. 

  177. 			$l_new_message = ($user->data['user_new_privmsg'] == 1) ? $lang['You_new_pm'] : $lang['You_new_pms'];
    178. 

  178. 		}
    179. 

  179. 		else
    180. 

  180. 		{
    181. 

  181. 			$l_new_message = $lang['You_no_new_pm'];
    182. 

  182. 		}
    183. 

  183. 

  184. 		$l_new_message .= '<br /><br />' . sprintf($lang['Click_view_privmsg'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '" onclick="jump_to_inbox();return false;" target="_new">', '</a>');
    185. 

  185. 	}
    186. 

  186. 	else
    187. 

  187. 	{
    188. 

  188. 		$l_new_message = $lang['Login_check_pm'];
    189. 

  189. 	}
    190. 

  190. 

  191. 	$template->assign_vars(array(
    192. 

  192. 		'L_CLOSE_WINDOW' => $lang['Close_window'],
    193. 

  193. 		'L_MESSAGE' => $l_new_message
    194. 

  194. 		)
    195. 

  195. 	);
    196. 

  196. 

  197. 	$gen_simple_header = true;
    198. 

  198. 	full_page_generation('privmsgs_popup.tpl', $lang['Private_Messaging'], '', '');
    199. 

  199. }
    200. 

  200. elseif ($mode == 'read')
    201. 

  201. {
    202. 

  202. 	if (!empty($_GET[POST_POST_URL]))
    203. 

  203. 	{
    204. 

  204. 		$privmsgs_id = intval($_GET[POST_POST_URL]);
    205. 

  205. 	}
    206. 

  206. 	else
    207. 

  207. 	{
    208. 

  208. 		message_die(GENERAL_ERROR, $lang['No_post_id']);
    209. 

  209. 	}
    210. 

  210. 

  211. 	if (!$user->data['session_logged_in'])
    212. 

  212. 	{
    213. 

  213. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=' . $folder . '&mode=' . $mode . '&' . POST_POST_URL . '=' . $privmsgs_id, true));
    214. 

  214. 	}
    215. 

  215. 

  216. 	$ranks_array = $cache->obtain_ranks(false);
    217. 

  217. 

  218. 	// SQL to pull appropriate message, prevents nosey people
    219. 

  219. 	// reading other peoples messages ... hopefully!
    220. 

  220. 	switch($folder)
    221. 

  221. 	{
    222. 

  222. 		case 'inbox':
    223. 

  223. 			$l_box_name = $lang['Inbox'];
    224. 

  224. 			$pm_sql_user = "AND pm.privmsgs_to_userid = " . $user->data['user_id'] . "
    225. 

  225. 				AND (pm.privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    226. 

  226. 					OR pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    227. 

  227. 					OR pm.privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    228. 

  228. 			break;
    229. 

  229. 		case 'outbox':
    230. 

  230. 			$l_box_name = $lang['Outbox'];
    231. 

  231. 			$pm_sql_user = "AND pm.privmsgs_from_userid =  " . $user->data['user_id'] . "
    232. 

  232. 				AND (pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    233. 

  233. 					OR pm.privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ") ";
    234. 

  234. 			break;
    235. 

  235. 		case 'sentbox':
    236. 

  236. 			$l_box_name = $lang['Sentbox'];
    237. 

  237. 			$pm_sql_user = "AND pm.privmsgs_from_userid =  " . $user->data['user_id'] . "
    238. 

  238. 				AND pm.privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    239. 

  239. 			break;
    240. 

  240. 		case 'savebox':
    241. 

  241. 			$l_box_name = $lang['Savebox'];
    242. 

  242. 			$pm_sql_user = "AND ((pm.privmsgs_to_userid = " . $user->data['user_id'] . "
    243. 

  243. 					AND pm.privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    244. 

  244. 				OR (pm.privmsgs_from_userid = " . $user->data['user_id'] . "
    245. 

  245. 					AND pm.privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ")
    246. 

  246. 				)";
    247. 

  247. 			break;
    248. 

  248. 		default:
    249. 

  249. 			message_die(GENERAL_ERROR, $lang['No_such_folder']);
    250. 

  250. 			break;
    251. 

  251. 	}
    252. 

  252. // BEGIN PM Navigation MOD
    253. 

  253. 	if(($_GET['view'] == 'next') || ($_GET['view'] == 'prev'))
    254. 

  254. 	{
    255. 

  255. 		$sql_condition = ($_GET['view'] == 'next') ? '>' : '<';
    256. 

  256. 		$sql_ordering = ($_GET['view'] == 'next') ? 'ASC' : 'DESC';
    257. 

  257. 

  258. 		$sql_nav = "SELECT pm.privmsgs_id FROM ". PRIVMSGS_TABLE ." pm, ". PRIVMSGS_TABLE ." p2
    259. 

  259. 			WHERE p2.privmsgs_id = $privmsgs_id
    260. 

  260. 			$pm_sql_user
    261. 

  261. 			AND pm.privmsgs_date $sql_condition p2.privmsgs_date
    262. 

  262. 			ORDER BY pm.privmsgs_date $sql_ordering LIMIT 1" ;
    263. 

  263. 		$result_nav = $db->sql_query($sql_nav);
    264. 

  264. 		if ($row = $db->sql_fetchrow($result_nav))
    265. 

  265. 		{
    266. 

  266. 			$privmsgs_id = intval($row['privmsgs_id']);
    267. 

  267. 		}
    268. 

  268. 		else
    269. 

  269. 		{
    270. 

  270. 			$output_message = (($_GET['view'] == 'next') ? $lang['No_newer_pm'] : $lang['No_older_pm']) . '<br /><br />' . sprintf($lang['Click_return_inbox'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    271. 

  271. 			message_die(GENERAL_MESSAGE, $output_message);
    272. 

  272. 		}
    273. 

  273. 	}
    274. 

  274. 	// END PM Navigation MOD
    275. 

  275. 

  276. 	// Major query obtains the message ...
    277. 

  277. 	$sql = "SELECT u.username AS username_1, u.user_id AS user_id_1, u.user_active AS user_active_1, u.user_color AS user_color_1, u2.username AS username_2, u2.user_id AS user_id_2, u2.user_active AS user_active_2, u2.user_color AS user_color_2, u.user_posts, u.user_from, u.user_website, u.user_email, u.user_icq, u.user_aim, u.user_yim, u.user_skype, u.user_regdate, u.user_msnm, u.user_allow_viewemail, u.user_rank, u.user_sig, u.user_avatar, u.user_avatar_type, u.user_allowavatar, u.user_allow_viewonline, u.user_session_time, u.user_from, u.user_gender, pm.*
    278. 

  278. 		FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " u, " . USERS_TABLE . " u2
    279. 

  279. 		WHERE pm.privmsgs_id = $privmsgs_id
    280. 

  280. 			$pm_sql_user
    281. 

  281. 			AND u.user_id = pm.privmsgs_from_userid
    282. 

  282. 			AND u2.user_id = pm.privmsgs_to_userid";
    283. 

  283. 	$result = $db->sql_query($sql);
    284. 

  284. 

  285. 	// Did the query return any data?
    286. 

  286. 	if (!($privmsg = $db->sql_fetchrow($result)))
    287. 

  287. 	{
    288. 

  288. 		redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder, true));
    289. 

  289. 	}
    290. 

  290. 

  291. 	$privmsg_id = $privmsg['privmsgs_id'];
    292. 

  292. 

  293. 	// Is this a new message in the inbox? If it is then save a copy in the posters sent box
    294. 

  294. 	if ((($privmsg['privmsgs_type'] == PRIVMSGS_NEW_MAIL) || ($privmsg['privmsgs_type'] == PRIVMSGS_UNREAD_MAIL)) && ($folder == 'inbox'))
    295. 

  295. 	{
    296. 

  296. 		// Update appropriate counter
    297. 

  297. 		switch ($privmsg['privmsgs_type'])
    298. 

  298. 		{
    299. 

  299. 			case PRIVMSGS_NEW_MAIL:
    300. 

  300. 				$sql = "user_new_privmsg = user_new_privmsg - 1";
    301. 

  301. 				break;
    302. 

  302. 			case PRIVMSGS_UNREAD_MAIL:
    303. 

  303. 				$sql = "user_unread_privmsg = user_unread_privmsg - 1";
    304. 

  304. 				break;
    305. 

  305. 		}
    306. 

  306. 

  307. 		$sql = "UPDATE " . USERS_TABLE . "
    308. 

  308. 			SET $sql
    309. 

  309. 			WHERE user_id = " . $user->data['user_id'];
    310. 

  310. 		$result = $db->sql_query($sql);
    311. 

  311. 

  312. 		$sql = "UPDATE " . PRIVMSGS_TABLE . "
    313. 

  313. 			SET privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    314. 

  314. 			WHERE privmsgs_id = " . $privmsg['privmsgs_id'];
    315. 

  315. 		$result = $db->sql_query($sql);
    316. 

  316. 

  317. 		// Check to see if the poster has a 'full' sent box
    318. 

  318. 		$sql = "SELECT COUNT(privmsgs_id) AS sent_items, MIN(privmsgs_date) AS oldest_post_time
    319. 

  319. 			FROM " . PRIVMSGS_TABLE . "
    320. 

  320. 			WHERE privmsgs_type = " . PRIVMSGS_SENT_MAIL . "
    321. 

  321. 				AND privmsgs_from_userid = " . $privmsg['privmsgs_from_userid'];
    322. 

  322. 		$result = $db->sql_query($sql);
    323. 

  323. 

  324. 		if ($sent_info = $db->sql_fetchrow($result))
    325. 

  325. 		{
    326. 

  326. 			if ($config['max_sentbox_privmsgs'] && ($sent_info['sent_items'] >= $config['max_sentbox_privmsgs']))
    327. 

  327. 			{
    328. 

  328. 				$sql = "SELECT privmsgs_id FROM " . PRIVMSGS_TABLE . "
    329. 

  329. 					WHERE privmsgs_type = " . PRIVMSGS_SENT_MAIL . "
    330. 

  330. 						AND privmsgs_date = " . $sent_info['oldest_post_time'] . "
    331. 

  331. 						AND privmsgs_from_userid = " . $privmsg['privmsgs_from_userid'];
    332. 

  332. 				$result = $db->sql_query($sql);
    333. 

  333. 				$old_privmsgs_id = $db->sql_fetchrow($result);
    334. 

  334. 				$old_privmsgs_id = $old_privmsgs_id['privmsgs_id'];
    335. 

  335. 

  336. 				if (!empty($old_privmsgs_id))
    337. 

  337. 				{
    338. 

  338. 					$sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    339. 

  339. 						WHERE privmsgs_id = " . $old_privmsgs_id;
    340. 

  340. 					$result = $db->sql_query($sql);
    341. 

  341. 				}
    342. 

  342. 			}
    343. 

  343. 		}
    344. 

  344. 

  345. 		//
    346. 

  346. 		// This makes a copy of the post and stores it as a SENT message from the sender. Perhaps
    347. 

  347. 		// not the most DB friendly way but a lot easier to manage, besides the admin will be able to
    348. 

  348. 		// set limits on numbers of storable posts for users... hopefully!
    349. 

  349. 		//
    350. 

  350. 		$sql = "INSERT INTO " . PRIVMSGS_TABLE . " (privmsgs_type, privmsgs_subject, privmsgs_text, privmsgs_from_userid, privmsgs_to_userid, privmsgs_date, privmsgs_ip, privmsgs_enable_html, privmsgs_enable_bbcode, privmsgs_enable_smilies, privmsgs_enable_autolinks_acronyms, privmsgs_attach_sig)
    351. 

  351. 			VALUES (" . PRIVMSGS_SENT_MAIL . ", '" . $db->sql_escape($privmsg['privmsgs_subject']) . "', '" . $db->sql_escape($privmsg['privmsgs_text']) . "', " . $privmsg['privmsgs_from_userid'] . ", " . $privmsg['privmsgs_to_userid'] . ", " . $privmsg['privmsgs_date'] . ", '" . $privmsg['privmsgs_ip'] . "', " . $privmsg['privmsgs_enable_html'] . ", " . $privmsg['privmsgs_enable_bbcode'] . ", " . $privmsg['privmsgs_enable_smilies'] . ", " . $privmsg['privmsgs_enable_autolinks_acronyms'] . ", " . $privmsg['privmsgs_attach_sig'] . ")";
    352. 

  352. 		$result = $db->sql_query($sql);
    353. 

  353. 		$privmsg_sent_id = $db->sql_nextid();
    354. 

  354. 	}
    355. 

  355. 	$attachment_mod['pm']->duplicate_attachment_pm($privmsg['privmsgs_attachment'], $privmsg['privmsgs_id'], $privmsg_sent_id);
    356. 

  356. 

  357. 	// Pick a folder, any folder, so long as it's one below ...
    358. 

  358. 	$post_urls = array(
    359. 

  359. 		'post' => append_sid(CMS_PAGE_PRIVMSG . '?mode=post'),
    360. 

  360. 		'reply' => append_sid(CMS_PAGE_PRIVMSG . '?mode=reply&amp;' . POST_POST_URL . '=' . $privmsg_id),
    361. 

  361. 		'quote' => append_sid(CMS_PAGE_PRIVMSG . '?mode=quote&amp;' . POST_POST_URL . '=' . $privmsg_id),
    362. 

  362. 		'edit' => append_sid(CMS_PAGE_PRIVMSG . '?mode=edit&amp;' . POST_POST_URL . '=' . $privmsg_id)
    363. 

  363. 	);
    364. 

  364. 	$post_icons = array(
    365. 

  365. 		'post_img' => '<a href="' . $post_urls['post'] . '"><img src="' . $images['pm_postmsg'] . '" alt="' . $lang['Post_new_pm'] . '" /></a>',
    366. 

  366. 		'post' => '<a href="' . $post_urls['post'] . '">' . $lang['Post_new_pm'] . '</a>',
    367. 

  367. 		'reply_img' => '<a href="' . $post_urls['reply'] . '"><img src="' . $images['pm_replymsg'] . '" alt="' . $lang['Post_reply_pm'] . '" /></a>',
    368. 

  368. 		'reply' => '<a href="' . $post_urls['reply'] . '">' . $lang['Post_reply_pm'] . '</a>',
    369. 

  369. 		'quote_img' => '<a href="' . $post_urls['quote'] . '"><img src="' . $images['pm_quotemsg'] . '" alt="' . $lang['Post_quote_pm'] . '" /></a>',
    370. 

  370. 		'quote' => '<a href="' . $post_urls['quote'] . '">' . $lang['Post_quote_pm'] . '</a>',
    371. 

  371. 		'edit_img' => '<a href="' . $post_urls['edit'] . '"><img src="' . $images['pm_editmsg'] . '" alt="' . $lang['Edit_pm'] . '" /></a>',
    372. 

  372. 		'edit' => '<a href="' . $post_urls['edit'] . '">' . $lang['Edit_pm'] . '</a>'
    373. 

  373. 	);
    374. 

  374. 

  375. 	if ($folder == 'inbox')
    376. 

  376. 	{
    377. 

  377. 		$post_img = $post_icons['post_img'];
    378. 

  378. 		$reply_img = $post_icons['reply_img'];
    379. 

  379. 		$quote_img = $post_icons['quote_img'];
    380. 

  380. 		$edit_img = '';
    381. 

  381. 		$post = $post_icons['post'];
    382. 

  382. 		$reply = $post_icons['reply'];
    383. 

  383. 		$quote = $post_icons['quote'];
    384. 

  384. 		$edit = '';
    385. 

  385. 		$post_url = $post_urls['post'];
    386. 

  386. 		$reply_url = $post_urls['reply'];
    387. 

  387. 		$quote_url = $post_urls['quote'];
    388. 

  388. 		$edit_url = '';
    389. 

  389. 		$l_box_name = $lang['Inbox'];
    390. 

  390. 	}
    391. 

  391. 	elseif ($folder == 'outbox')
    392. 

  392. 	{
    393. 

  393. 		$post_img = $post_icons['post_img'];
    394. 

  394. 		$reply_img = '';
    395. 

  395. 		$quote_img = '';
    396. 

  396. 		$edit_img = $post_icons['edit_img'];
    397. 

  397. 		$post = $post_icons['post'];
    398. 

  398. 		$reply = '';
    399. 

  399. 		$quote = '';
    400. 

  400. 		$edit = $post_icons['edit'];
    401. 

  401. 		$post_url = $post_urls['post'];
    402. 

  402. 		$reply_url = '';
    403. 

  403. 		$quote_url = '';
    404. 

  404. 		$edit_url = $post_urls['edit'];
    405. 

  405. 		$l_box_name = $lang['Outbox'];
    406. 

  406. 	}
    407. 

  407. 	elseif ($folder == 'savebox')
    408. 

  408. 	{
    409. 

  409. 		if ($privmsg['privmsgs_type'] == PRIVMSGS_SAVED_IN_MAIL)
    410. 

  410. 		{
    411. 

  411. 			$post_img = $post_icons['post_img'];
    412. 

  412. 			$reply_img = $post_icons['reply_img'];
    413. 

  413. 			$quote_img = $post_icons['quote_img'];
    414. 

  414. 			$edit_img = '';
    415. 

  415. 			$post = $post_icons['post'];
    416. 

  416. 			$reply = $post_icons['reply'];
    417. 

  417. 			$quote = $post_icons['quote'];
    418. 

  418. 			$edit = '';
    419. 

  419. 			$post_url = $post_urls['post'];
    420. 

  420. 			$reply_url = $post_urls['reply'];
    421. 

  421. 			$quote_url = $post_urls['quote'];
    422. 

  422. 			$edit_url = '';
    423. 

  423. 		}
    424. 

  424. 		else
    425. 

  425. 		{
    426. 

  426. 			$post_img = $post_icons['post_img'];
    427. 

  427. 			$reply_img = '';
    428. 

  428. 			$quote_img = '';
    429. 

  429. 			$edit_img = '';
    430. 

  430. 			$post = $post_icons['post'];
    431. 

  431. 			$reply = '';
    432. 

  432. 			$quote = '';
    433. 

  433. 			$edit = '';
    434. 

  434. 			$post_url = $post_urls['post'];
    435. 

  435. 			$reply_url = '';
    436. 

  436. 			$quote_url = '';
    437. 

  437. 			$edit_url = '';
    438. 

  438. 		}
    439. 

  439. 		$l_box_name = $lang['Saved'];
    440. 

  440. 	}
    441. 

  441. 	elseif ($folder == 'sentbox')
    442. 

  442. 	{
    443. 

  443. 		$post_img = $post_icons['post_img'];
    444. 

  444. 		$reply_img = '';
    445. 

  445. 		$quote_img = '';
    446. 

  446. 		$edit_img = '';
    447. 

  447. 		$post = $post_icons['post'];
    448. 

  448. 		$reply = '';
    449. 

  449. 		$quote = '';
    450. 

  450. 		$edit = '';
    451. 

  451. 		$post_url = $post_urls['post'];
    452. 

  452. 		$reply_url = '';
    453. 

  453. 		$quote_url = '';
    454. 

  454. 		$edit_url = '';
    455. 

  455. 		$l_box_name = '';
    456. 

  456. 	}
    457. 

  457. 

  458. 	$s_hidden_fields = '<input type="hidden" name="mark[]" value="' . $privmsgs_id . '" />';
    459. 

  459. 

  460. 	$nav_server_url = create_server_url();
    461. 

  461. 	$breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">' . $lang['Private_Messaging'] . '</a>' . $lang['Nav_Separator'] . '<a class="nav-current" href="#">' . $privmsg['privmsgs_subject'] . '</a>';
    462. 

  462. 	$breadcrumbs['bottom_right_links'] = '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=prev', true) . '">' . $lang['Previous_privmsg'] . '</a> &bull; <a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=next', true) . '">' . $lang['Next_privmsg'] . '</a>';
    463. 

  463. 	$skip_nav_cat = true;
    464. 

  464. 	include_once(IP_ROOT_PATH . 'includes/users_zebra_block.' . PHP_EXT);
    465. 

  465. 

  466. 	make_jumpbox(CMS_PAGE_VIEWFORUM);
    467. 

  467. 

  468. 	$template->assign_vars(array(
    469. 

  469. 		'INBOX_IMG' => $inbox_img,
    470. 

  470. 		'SENTBOX_IMG' => $sentbox_img,
    471. 

  471. 		'OUTBOX_IMG' => $outbox_img,
    472. 

  472. 		'SAVEBOX_IMG' => $savebox_img,
    473. 

  473. 		'INBOX' => $inbox_url,
    474. 

  474. 		'SENTBOX' => $sentbox_url,
    475. 

  475. 		'OUTBOX' => $outbox_url,
    476. 

  476. 		'SAVEBOX' => $savebox_url,
    477. 

  477. 		'BOX_NAME' => $l_box_name,
    478. 

  478. 

  479. 		'L_QUICK_REPLY' => $lang['Quick_Reply'],
    480. 

  480. 		'L_EDIT_PM' => $lang['Edit_pm'],
    481. 

  481. 		'L_QUOTE_PM' => $lang['Post_quote_pm'],
    482. 

  482. 		'L_POST_PM' => $lang['Post_new_pm'],
    483. 

  483. 		'L_REPLY_PM' => $lang['Post_reply_pm'],
    484. 

  484. 		'EDIT_PM_URL' => $edit_url,
    485. 

  485. 		'POST_PM_URL' => $post_url,
    486. 

  486. 		'QUOTE_PM_URL' => $quote_url,
    487. 

  487. 		'REPLY_PM_URL' => $reply_url,
    488. 

  488. 

  489. 		'POST_PM_IMG' => $post_img,
    490. 

  490. 		'REPLY_PM_IMG' => $reply_img,
    491. 

  491. 		'EDIT_PM_IMG' => $edit_img,
    492. 

  492. 		'QUOTE_PM_IMG' => $quote_img,
    493. 

  493. 		'POST_PM' => $post,
    494. 

  494. 		'REPLY_PM' => $reply,
    495. 

  495. 		'EDIT_PM' => $edit,
    496. 

  496. 		'QUOTE_PM' => $quote,
    497. 

  497. 		'IMG_QUICK_QUOTE' => $images['icon_quick_quote'],
    498. 

  498. 		'IMG_OFFTOPIC' => $images['icon_offtopic'],
    499. 

  499. 

  500. 		'L_MESSAGE' => $lang['Message'],
    501. 

  501. 		'L_INBOX' => $lang['Inbox'],
    502. 

  502. 		'L_OUTBOX' => $lang['Outbox'],
    503. 

  503. 		'L_SENTBOX' => $lang['Sent'],
    504. 

  504. 		'L_SAVEBOX' => $lang['Saved'],
    505. 

  505. 		'L_FLAG' => $lang['Flag'],
    506. 

  506. 		'L_SUBJECT' => $lang['Subject'],
    507. 

  507. 		'L_QUICK_QUOTE' => $lang['QuickQuote'],
    508. 

  508. 		'L_OFFTOPIC' => $lang['OffTopic'],
    509. 

  509. 		'L_POSTED' => $lang['Posted'],
    510. 

  510. 		'L_DATE' => $lang['Date'],
    511. 

  511. 		'L_FROM' => $lang['From'],
    512. 

  512. 		'L_TO' => $lang['To'],
    513. 

  513. 		'L_SAVE_MSG' => $lang['Save_message'],
    514. 

  514. 		'L_DELETE_MSG' => $lang['Delete_message'],
    515. 

  515. 		'L_PM' => $lang['Private_Message'],
    516. 

  516. 		'L_EMAIL' => $lang['Email'],
    517. 

  517. 		'L_POSTS' => $lang['Posts'],
    518. 

  518. 		'L_CONTACTS' => $lang['User_Contacts'],
    519. 

  519. 		'L_WEBSITE' => $lang['Website'],
    520. 

  520. 		'L_FROM' => $lang['Location'],
    521. 

  521. 		'L_ONLINE_STATUS' => $lang['Online_status'],
    522. 

  522. 		'L_USER_WWW' => $lang['Website'],
    523. 

  523. 		'L_USER_EMAIL' => $lang['Send_Email'],
    524. 

  524. 		'L_USER_PROFILE' => $lang['Profile'],
    525. 

  525. 

  526. 		// BEGIN PM Navigation MOD
    527. 

  527. 		'L_PRIVMSG_NEXT' => $lang['Next_privmsg'],
    528. 

  528. 		'L_PRIVMSG_PREVIOUS' => $lang['Previous_privmsg'],
    529. 

  529. 		'U_PRIVMSG_NEXT' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=next', true),
    530. 

  530. 		'U_PRIVMSG_PREVIOUS' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=' . $mode . '&amp;' . POST_POST_URL . '=' . $privmsgs_id . '&amp;view=prev', true),
    531. 

  531. 		// END PM Navigation MOD
    532. 

  532. 

  533. 		'S_PRIVMSGS_ACTION' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder),
    534. 

  534. 		'S_HIDDEN_FIELDS' => $s_hidden_fields
    535. 

  535. 		)
    536. 

  536. 	);
    537. 

  537. 

  538. 	$username_from = colorize_username($privmsg['user_id_1'], $privmsg['username_1'], $privmsg['user_color_1'], $privmsg['user_active_1']);
    539. 

  539. 	$user_id_from = $privmsg['user_id_1'];
    540. 

  540. 	$username_to = colorize_username($privmsg['user_id_2'], $privmsg['username_2'], $privmsg['user_color_2'], $privmsg['user_active_2']);
    541. 

  541. 	$user_id_to = $privmsg['user_id_2'];
    542. 

  542. 

  543. 	// Needed for attachments... do not remove!
    544. 

  544. 	$template_to_parse = 'privmsgs_read_body.tpl';
    545. 

  545. 	$template->set_filenames(array('body' => $template_to_parse));
    546. 

  546. 	init_display_pm_attachments($privmsg['privmsgs_attachment']);
    547. 

  547. 

  548. 	$post_date = create_date_ip($config['default_dateformat'], $privmsg['privmsgs_date'], $config['board_timezone']);
    549. 

  549. 

  550. 	$privmsg['user_id'] = $privmsg['user_id_1'];
    551. 

  551. 	$privmsg['username'] = $privmsg['username_1'];
    552. 

  552. 	$privmsg['user_color'] = $privmsg['user_color_1'];
    553. 

  553. 	$privmsg['user_active'] = $privmsg['user_active_1'];
    554. 

  554. 	$user_info = array();
    555. 

  555. 	$user_info = generate_user_info($privmsg);
    556. 

  556. 	foreach ($user_info as $k => $v)
    557. 

  557. 	{
    558. 

  558. 		${$k} = $v;
    559. 

  559. 	}
    560. 

  560. 

  561. 	$poster_avatar = $user_info['avatar'];
    562. 

  562. 	$poster_posts = ($privmsg['user_id'] != ANONYMOUS) ? $lang['Posts'] . ': ' . $privmsg['user_posts'] : '';
    563. 

  563. 	$poster_from = ($privmsg['user_from']) ? $lang['Location'] . ': ' . $privmsg['user_from'] : '';
    564. 

  564. 	$poster_joined = ($privmsg['user_id'] != ANONYMOUS) ? $lang['Joined'] . ': ' . create_date($lang['JOINED_DATE_FORMAT'], $privmsg['user_regdate'], $config['board_timezone']) : '';
    565. 

  565. 

  566. 	// Mighty Gorgon - Quick Quote - BEGIN
    567. 

  567. 	$look_up_array = array(
    568. 

  568. 		'\"',
    569. 

  569. 		'"',
    570. 

  570. 		"<",
    571. 

  571. 		">",
    572. 

  572. 		"\n",
    573. 

  573. 		chr(13),
    574. 

  574. 	);
    575. 

  575. 

  576. 	$replacement_array = array(
    577. 

  577. 		'&q_mg;',
    578. 

  578. 		'\"',
    579. 

  579. 		"&lt_mg;",
    580. 

  580. 		"&gt_mg;",
    581. 

  581. 		"\\n",
    582. 

  582. 		"",
    583. 

  583. 	);
    584. 

  584. 

  585. 	$plain_message = $privmsg['privmsgs_text'];
    586. 

  586. 	$plain_message = strtr($plain_message, array_flip(get_html_translation_table(HTML_ENTITIES)));
    587. 

  587. 	$plain_message = censor_text($plain_message);
    588. 

  588. 	$plain_message = str_replace($look_up_array, $replacement_array, $plain_message);
    589. 

  589. 	// Mighty Gorgon - Quick Quote - END
    590. 

  590. 

  591. 	// Processing of post
    592. 

  592. 	$post_subject = $privmsg['privmsgs_subject'];
    593. 

  593. 	$private_message = $privmsg['privmsgs_text'];
    594. 

  594. 

  595. 	if ($config['allow_sig'])
    596. 

  596. 	{
    597. 

  597. 		$user_sig = ($privmsg['privmsgs_from_userid'] == $user->data['user_id']) ? $user->data['user_sig'] : $privmsg['user_sig'];
    598. 

  598. 	}
    599. 

  599. 	else
    600. 

  600. 	{
    601. 

  601. 		$user_sig = '';
    602. 

  602. 	}
    603. 

  603. 

  604. 	// If the board has HTML off but the post has HTML on then we process it, else leave it alone
    605. 

  605. 	if (!$config['allow_html'])
    606. 

  606. 	{
    607. 

  607. 		if ($user_sig != '' && $privmsg['privmsgs_enable_sig'] && $user->data['user_allowhtml'])
    608. 

  608. 		{
    609. 

  609. 			$user_sig = preg_replace('#(<)([\/]?.*?)(>)#is', "&lt;\\2&gt;", $user_sig);
    610. 

  610. 		}
    611. 

  611. 

  612. 		if ($privmsg['privmsgs_enable_html'])
    613. 

  613. 		{
    614. 

  614. 			$private_message = preg_replace('#(<)([\/]?.*?)(>)#is', "&lt;\\2&gt;", $private_message);
    615. 

  615. 		}
    616. 

  616. 	}
    617. 

  617. 

  618. 	if (($user_sig != '') && $privmsg['privmsgs_attach_sig'])
    619. 

  619. 	{
    620. 

  620. 		$bbcode->allow_html = $config['allow_html'];
    621. 

  621. 		$bbcode->allow_bbcode = $config['allow_bbcode'] ? true : false;
    622. 

  622. 		$bbcode->allow_smilies = $config['allow_smilies'];
    623. 

  623. 		$bbcode->is_sig = true;
    624. 

  624. 		$user_sig = $bbcode->parse($user_sig);
    625. 

  625. 		$bbcode->is_sig = false;
    626. 

  626. 	}
    627. 

  627. 

  628. 	$bbcode->allow_html = (($config['allow_html'] && $user->data['user_allowhtml']) || $config['allow_html_only_for_admins']) && $privmsg['privmsgs_enable_html'];
    629. 

  629. 	$bbcode->allow_bbcode = $config['allow_bbcode'] ? true : false;
    630. 

  630. 	$bbcode->allow_smilies = $config['allow_smilies'] && $privmsg['privmsgs_enable_smilies'];
    631. 

  631. 	$private_message = $bbcode->parse($private_message);
    632. 

  632. 

  633. 	if ($privmsg['privmsgs_attach_sig'] && $user_sig != '')
    634. 

  634. 	{
    635. 

  635. 		$signature = '<br />' . $config['sig_line'] . '<br />' . $user_sig;
    636. 

  636. 	}
    637. 

  637. 

  638. 	$post_subject = censor_text($post_subject);
    639. 

  639. 	$private_message = censor_text($private_message);
    640. 

  640. 

  641. 	//Acronyms, AutoLinks - BEGIN
    642. 

  642. 	if ($privmsg['privmsgs_enable_autolinks_acronyms'])
    643. 

  643. 	{
    644. 

  644. 		$private_message = $bbcode->acronym_pass($private_message);
    645. 

  645. 		$private_message = $bbcode->autolink_text($private_message, '999999');
    646. 

  646. 	}
    647. 

  647. 	//Acronyms, AutoLinks -END
    648. 

  648. 

  649. 	// Mighty Gorgon - Multiple Ranks - BEGIN
    650. 

  650. 	$user_ranks = generate_ranks($privmsg, $ranks_array);
    651. 

  651. 	if (($user_ranks['rank_01_html'] == '') && ($user_ranks['rank_01_img_html'] == '') && ($user_ranks['rank_02_html'] == '') && ($user_ranks['rank_02_img_html'] == '') && ($user_ranks['rank_03_html'] == '') && ($user_ranks['rank_03_img_html'] == '') && ($user_ranks['rank_04_html'] == '') && ($user_ranks['rank_04_img_html'] == '') && ($user_ranks['rank_05_html'] == '') && ($user_ranks['rank_05_img_html'] == ''))
    652. 

  652. 	{
    653. 

  653. 		$user_ranks['rank_01_html'] = '&nbsp;';
    654. 

  654. 	}
    655. 

  655. 	// Mighty Gorgon - Multiple Ranks - END
    656. 

  656. 

  657. 	$poster_rank = $user_ranks['rank_01_html'];
    658. 

  658. 	$rank_image = $user_ranks['rank_01_img_html'];
    659. 

  659. 

  660. 	// Dump it to the templating engine
    661. 

  661. 	$template->assign_vars(array(
    662. 

  662. 		'MESSAGE_TO' => $username_to,
    663. 

  663. 		'RECIPIENT_QQ' => $privmsg['username_1'],
    664. 

  664. 		'PM_ID' => $privmsgs_id,
    665. 

  665. 		'MESSAGE_FROM' => $username_from,
    666. 

  666. 		'RANK_IMAGE' => $rank_image,
    667. 

  667. 		'POSTER_JOINED' => $poster_joined,
    668. 

  668. 		'POSTER_POSTS' => $poster_posts,
    669. 

  669. 		'POSTER_FROM' => $poster_from,
    670. 

  670. 		'POSTER_AVATAR' => $poster_avatar,
    671. 

  671. 		'POST_SUBJECT' => $post_subject,
    672. 

  672. 		'POST_DATE' => $post_date,
    673. 

  673. 		'MESSAGE' => $private_message,
    674. 

  674. 		'PLAIN_MESSAGE' => $plain_message,
    675. 

  675. 		'SIGNATURE' => $signature,
    676. 

  676. 		'POSTER_RANK' => $poster_rank,
    677. 

  677. 		'RANK_IMAGE' => $rank_image,
    678. 

  678. 		'POSTER_GENDER' => $user_info['gender'],
    679. 

  679. 

  680. 		'PROFILE_URL' => $user_info['profile_url'],
    681. 

  681. 		'PROFILE_IMG' => $user_info['profile_img'],
    682. 

  682. 		'PROFILE' => $user_info['profile'],
    683. 

  683. 		'PM_URL' => $user_info['pm_url'],
    684. 

  684. 		'PM_IMG' => $user_info['pm_img'],
    685. 

  685. 		'PM' => $user_info['pm'],
    686. 

  686. 		'SEARCH_URL' => $user_info['search_url'],
    687. 

  687. 		'SEARCH_IMG' => $user_info['search_img'],
    688. 

  688. 		'SEARCH' => $user_info['search'],
    689. 

  689. 		'IP_URL' => $user_info['ip_url'],
    690. 

  690. 		'IP_IMG' => $user_info['ip_img'],
    691. 

  691. 		'IP' => $user_info['ip'],
    692. 

  692. 		'EMAIL_URL' => $user_info['email_url'],
    693. 

  693. 		'EMAIL_IMG' => $user_info['email_img'],
    694. 

  694. 		'EMAIL' => $user_info['email'],
    695. 

  695. 		'WWW_URL' => $user_info['www_url'],
    696. 

  696. 		'WWW_IMG' => $user_info['www_img'],
    697. 

  697. 		'WWW' => $user_info['www'],
    698. 

  698. 		'AIM_URL' => $user_info['aim_url'],
    699. 

  699. 		'AIM_IMG' => $user_info['aim_img'],
    700. 

  700. 		'AIM' => $user_info['aim'],
    701. 

  701. 		'ICQ_STATUS_IMG' => $user_info['icq_status_img'],
    702. 

  702. 		'ICQ_URL' => $user_info['icq_url'],
    703. 

  703. 		'ICQ_IMG' => $user_info['icq_img'],
    704. 

  704. 		'ICQ' => $user_info['icq'],
    705. 

  705. 		'MSN_URL' => $user_info['msn_url'],
    706. 

  706. 		'MSN_IMG' => $user_info['msn_img'],
    707. 

  707. 		'MSN' => $user_info['msn'],
    708. 

  708. 		'SKYPE_URL' => $user_info['skype_url'],
    709. 

  709. 		'SKYPE_IMG' => $user_info['skype_img'],
    710. 

  710. 		'SKYPE' => $user_info['skype'],
    711. 

  711. 		'YIM_URL' => $user_info['yahoo_url'],
    712. 

  712. 		'YIM_IMG' => $user_info['yahoo_img'],
    713. 

  713. 		'YIM' => $user_info['yahoo'],
    714. 

  714. 		'ONLINE_STATUS_URL' => $user_info['online_status_url'],
    715. 

  715. 		'ONLINE_STATUS_CLASS' => $user_info['online_status_class'],
    716. 

  716. 		'ONLINE_STATUS_IMG' => $user_info['online_status_img'],
    717. 

  717. 		'ONLINE_STATUS' => $user_info['online_status'],
    718. 

  718. 		'L_ONLINE_STATUS' => $user_info['online_status_lang'],
    719. 

  719. 		'L_READ_MESSAGE' => $lang['Read_pm'],
    720. 

  720. 		)
    721. 

  721. 	);
    722. 

  722. 

  723. 	if (!function_exists('generate_smilies_row'))
    724. 

  724. 	{
    725. 

  725. 		include_once(IP_ROOT_PATH . 'includes/functions_bbcode.' . PHP_EXT);
    726. 

  726. 	}
    727. 

  727. 	generate_smilies_row();
    728. 

  728. 	$template->assign_vars(array(
    729. 

  729. 		'L_SMILEYS_MORE' => $lang['More_emoticons'],
    730. 

  730. 		'U_SMILEYS_MORE' => append_sid('posting.' . PHP_EXT . '?mode=smilies'),
    731. 

  731. 		)
    732. 

  732. 	);
    733. 

  733. 

  734. 	full_page_generation($template_to_parse, $lang['Read_pm'], '', '');
    735. 

  735. }
    736. 

  736. elseif (($delete && $mark_list) || $delete_all)
    737. 

  737. {
    738. 

  738. 	if (!$user->data['session_logged_in'])
    739. 

  739. 	{
    740. 

  740. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=inbox', true));
    741. 

  741. 	}
    742. 

  742. 

  743. 	if (isset($mark_list) && !is_array($mark_list))
    744. 

  744. 	{
    745. 

  745. 		// Set to empty array instead of '0' if nothing is selected.
    746. 

  746. 		$mark_list = array();
    747. 

  747. 	}
    748. 

  748. 

  749. 	if (!$confirm)
    750. 

  750. 	{
    751. 

  751. 		$s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
    752. 

  752. 		$s_hidden_fields .= (isset($_POST['delete'])) ? '<input type="hidden" name="delete" value="true" />' : '<input type="hidden" name="deleteall" value="true" />';
    753. 

  753. 		$s_hidden_fields .= '<input type="hidden" name="sid" value="' . $user->data['session_id'] . '" />';
    754. 

  754. 

  755. 		for($i = 0; $i < sizeof($mark_list); $i++)
    756. 

  756. 		{
    757. 

  757. 			$s_hidden_fields .= '<input type="hidden" name="mark[]" value="' . intval($mark_list[$i]) . '" />';
    758. 

  758. 		}
    759. 

  759. 

  760. 		// Output confirmation page
    761. 

  761. 		$nav_server_url = create_server_url();
    762. 

  762. 		$breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '" class="nav-current">' . $lang['Private_Messaging'] . '</a>';
    763. 

  763. 		$template->assign_vars(array(
    764. 

  764. 			'MESSAGE_TITLE' => $lang['Information'],
    765. 

  765. 			'MESSAGE_TEXT' => (sizeof($mark_list) == 1) ? $lang['Confirm_delete_pm'] : $lang['Confirm_delete_pms'],
    766. 

  766. 

  767. 			'L_YES' => $lang['Yes'],
    768. 

  768. 			'L_NO' => $lang['No'],
    769. 

  769. 

  770. 			'S_CONFIRM_ACTION' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder),
    771. 

  771. 			'S_HIDDEN_FIELDS' => $s_hidden_fields
    772. 

  772. 			)
    773. 

  773. 		);
    774. 

  774. 		full_page_generation('confirm_body.tpl', $lang['Confirm'], '', '');
    775. 

  775. 	}
    776. 

  776. 	elseif ($confirm && $sid === $user->data['session_id'])
    777. 

  777. 	{
    778. 

  778. 		if ($delete_all)
    779. 

  779. 		{
    780. 

  780. 			switch($folder)
    781. 

  781. 			{
    782. 

  782. 				case 'inbox':
    783. 

  783. 					$delete_type = "privmsgs_to_userid = " . $user->data['user_id'] . " AND (
    784. 

  784. 					privmsgs_type = " . PRIVMSGS_READ_MAIL . " OR privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    785. 

  785. 					break;
    786. 

  786. 

  787. 				case 'outbox':
    788. 

  788. 					$delete_type = "privmsgs_from_userid = " . $user->data['user_id'] . " AND (privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    789. 

  789. 					break;
    790. 

  790. 

  791. 				case 'sentbox':
    792. 

  792. 					$delete_type = "privmsgs_from_userid = " . $user->data['user_id'] . " AND privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    793. 

  793. 					break;
    794. 

  794. 

  795. 				case 'savebox':
    796. 

  796. 					$delete_type = "((privmsgs_from_userid = " . $user->data['user_id'] . "
    797. 

  797. 						AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ")
    798. 

  798. 					OR (privmsgs_to_userid = " . $user->data['user_id'] . "
    799. 

  799. 						AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . "))";
    800. 

  800. 					break;
    801. 

  801. 			}
    802. 

  802. 

  803. 			$sql = "SELECT privmsgs_id
    804. 

  804. 				FROM " . PRIVMSGS_TABLE . "
    805. 

  805. 				WHERE $delete_type";
    806. 

  806. 			$result = $db->sql_query($sql);
    807. 

  807. 

  808. 			while ($row = $db->sql_fetchrow($result))
    809. 

  809. 			{
    810. 

  810. 				$mark_list[] = $row['privmsgs_id'];
    811. 

  811. 			}
    812. 

  812. 

  813. 			unset($delete_type);
    814. 

  814. 		}
    815. 

  815. 		$attachment_mod['pm']->delete_all_pm_attachments($mark_list);
    816. 

  816. 		if (sizeof($mark_list))
    817. 

  817. 		{
    818. 

  818. 			$delete_sql_id = '';
    819. 

  819. 			for ($i = 0; $i < sizeof($mark_list); $i++)
    820. 

  820. 			{
    821. 

  821. 				$delete_sql_id .= (($delete_sql_id != '') ? ', ' : '') . intval($mark_list[$i]);
    822. 

  822. 			}
    823. 

  823. 

  824. 			if ($folder == 'inbox' || $folder == 'outbox')
    825. 

  825. 			{
    826. 

  826. 				switch ($folder)
    827. 

  827. 				{
    828. 

  828. 					case 'inbox':
    829. 

  829. 						$sql = "privmsgs_to_userid = " . $user->data['user_id'];
    830. 

  830. 						break;
    831. 

  831. 					case 'outbox':
    832. 

  832. 						$sql = "privmsgs_from_userid = " . $user->data['user_id'];
    833. 

  833. 						break;
    834. 

  834. 				}
    835. 

  835. 

  836. 				// Get information relevant to new or unread mail
    837. 

  837. 				// so we can adjust users counters appropriately
    838. 

  838. 				$sql = "SELECT privmsgs_to_userid, privmsgs_type
    839. 

  839. 					FROM " . PRIVMSGS_TABLE . "
    840. 

  840. 					WHERE privmsgs_id IN ($delete_sql_id)
    841. 

  841. 						AND $sql
    842. 

  842. 						AND privmsgs_type IN (" . PRIVMSGS_NEW_MAIL . ", " . PRIVMSGS_UNREAD_MAIL . ")";
    843. 

  843. 				$result = $db->sql_query($sql);
    844. 

  844. 

  845. 				if ($row = $db->sql_fetchrow($result))
    846. 

  846. 				{
    847. 

  847. 					$update_users = $update_list = array();
    848. 

  848. 

  849. 					do
    850. 

  850. 					{
    851. 

  851. 						switch ($row['privmsgs_type'])
    852. 

  852. 						{
    853. 

  853. 							case PRIVMSGS_NEW_MAIL:
    854. 

  854. 								$update_users['new'][$row['privmsgs_to_userid']]++;
    855. 

  855. 								break;
    856. 

  856. 

  857. 							case PRIVMSGS_UNREAD_MAIL:
    858. 

  858. 								$update_users['unread'][$row['privmsgs_to_userid']]++;
    859. 

  859. 								break;
    860. 

  860. 						}
    861. 

  861. 					}
    862. 

  862. 					while ($row = $db->sql_fetchrow($result));
    863. 

  863. 

  864. 					if (sizeof($update_users))
    865. 

  865. 					{
    866. 

  866. 						while (list($type, $users) = each($update_users))
    867. 

  867. 						{
    868. 

  868. 							while (list($user_id, $dec) = each($users))
    869. 

  869. 							{
    870. 

  870. 								$update_list[$type][$dec][] = $user_id;
    871. 

  871. 							}
    872. 

  872. 						}
    873. 

  873. 						unset($update_users);
    874. 

  874. 

  875. 						while (list($type, $dec_ary) = each($update_list))
    876. 

  876. 						{
    877. 

  877. 							switch ($type)
    878. 

  878. 							{
    879. 

  879. 								case 'new':
    880. 

  880. 									$type = "user_new_privmsg";
    881. 

  881. 									break;
    882. 

  882. 

  883. 								case 'unread':
    884. 

  884. 									$type = "user_unread_privmsg";
    885. 

  885. 									break;
    886. 

  886. 							}
    887. 

  887. 

  888. 							while (list($dec, $user_ary) = each($dec_ary))
    889. 

  889. 							{
    890. 

  890. 								$user_ids = implode(', ', $user_ary);
    891. 

  891. 

  892. 								$sql = "UPDATE " . USERS_TABLE . "
    893. 

  893. 									SET $type = $type - $dec
    894. 

  894. 									WHERE user_id IN ($user_ids)";
    895. 

  895. 								$db->sql_query($sql);
    896. 

  896. 							}
    897. 

  897. 						}
    898. 

  898. 						unset($update_list);
    899. 

  899. 					}
    900. 

  900. 				}
    901. 

  901. 				$db->sql_freeresult($result);
    902. 

  902. 			}
    903. 

  903. 

  904. 			// Delete the messages
    905. 

  905. 			$delete_sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    906. 

  906. 				WHERE privmsgs_id IN ($delete_sql_id)
    907. 

  907. 					AND ";
    908. 

    909. 

  909. 			switch($folder)
    910. 

  910. 			{
    911. 

  911. 				case 'inbox':
    912. 

  912. 					$delete_sql .= "privmsgs_to_userid = " . $user->data['user_id'] . " AND (
    913. 

  913. 						privmsgs_type = " . PRIVMSGS_READ_MAIL . " OR privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    914. 

  914. 					break;
    915. 

  915. 

  916. 				case 'outbox':
    917. 

  917. 					$delete_sql .= "privmsgs_from_userid = " . $user->data['user_id'] . " AND (
    918. 

  918. 						privmsgs_type = " . PRIVMSGS_NEW_MAIL . " OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    919. 

  919. 					break;
    920. 

  920. 

  921. 				case 'sentbox':
    922. 

  922. 					$delete_sql .= "privmsgs_from_userid = " . $user->data['user_id'] . " AND privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    923. 

  923. 					break;
    924. 

  924. 

  925. 				case 'savebox':
    926. 

  926. 					$delete_sql .= "((privmsgs_from_userid = " . $user->data['user_id'] . "
    927. 

  927. 						AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ")
    928. 

  928. 					OR (privmsgs_to_userid = " . $user->data['user_id'] . "
    929. 

  929. 						AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . "))";
    930. 

  930. 					break;
    931. 

  931. 			}
    932. 

  932. 			$db->sql_query($delete_sql);
    933. 

  933. 		}
    934. 

  934. 	}
    935. 

  935. }
    936. 

  936. elseif ($download && $mark_list)
    937. 

  937. {
    938. 

  938. 	if (!$user->data['session_logged_in'])
    939. 

  939. 	{
    940. 

  940. 		$header_location = (@preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE'))) ? 'Refresh: 0; URL=' : 'Location: ';
    941. 

  941. 		header($header_location . append_sid(CMS_PAGE_LOGIN .'?redirect=privmsg.' . PHP_EXT . '&folder=inbox', true));
    942. 

  942. 		exit;
    943. 

  943. 	}
    944. 

  944. 

  945. 	switch($folder)
    946. 

  946. 	{
    947. 

  947. 		case 'inbox':
    948. 

  948. 			$disp_folder = $lang['Inbox'];
    949. 

  949. 		break;
    950. 

  950. 

  951. 		case 'outbox':
    952. 

  952. 			$disp_folder = $lang['Outbox'];
    953. 

  953. 		break;
    954. 

  954. 

  955. 		case 'sentbox':
    956. 

  956. 			$disp_folder = $lang['Sentbox'];
    957. 

  957. 		break;
    958. 

  958. 

  959. 		case 'savebox':
    960. 

  960. 			$disp_folder = $lang['Savebox'];
    961. 

  961. 		break;
    962. 

  962. 	}
    963. 

  963. 

  964. 	if (sizeof($mark_list))
    965. 

  965. 	{
    966. 

  966. 		$i = 0;
    967. 

  967. 		$crlf = "\r\n";
    968. 

  968. 		$pmtext = $lang['Private_Messaging'] . ' (' . $config['sitename'] . ')' . $crlf;
    969. 

  969. 		$user_dateformat = ($user->data['user_dateformat']) ? $user->data['user_dateformat'] : $config['default_dateformat'];
    970. 

  970. 		$pmtext .= $disp_folder . ' (' . gmdate($user_dateformat) . ')' . $crlf;
    971. 

  971. 		while($mark_list[$i] != '')
    972. 

  972. 		{
    973. 

  973. 			$sql = "SELECT pm.privmsgs_date, pm.privmsgs_subject, pm.privmsgs_text, us.username, us.user_id
    974. 

  974. 				FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " us
    975. 

  975. 				WHERE pm.privmsgs_id = " . $mark_list[$i] . "
    976. 

  976. 				AND us.user_id = pm.privmsgs_from_userid";
    977. 

  977. 			$db->sql_return_on_error(true);
    978. 

  978. 			$result = $db->sql_query($sql);
    979. 

  979. 			$db->sql_return_on_error(false);
    980. 

  980. 			if ($result)
    981. 

  981. 			{
    982. 

  982. 				$db_row = $db->sql_fetchrow($result);
    983. 

  983. 				$tmpmsg = wordwrap(htmlspecialchars_decode($db_row['privmsgs_text'], ENT_COMPAT), 78, $crlf);
    984. 

  984. 				$from = (($folder == 'inbox') || ($folder == 'savebox')) ? $lang['From'] : $lang['To'];
    985. 

  985. 				$pmtext .= '------------------------------------------------------------------------------' . $crlf;
    986. 

  986. 				$pmtext .= $lang['Mailbox'] . ': ' . $user->data['username'] . $crlf;
    987. 

  987. 				$pmtext .= $from . ': ' . $db_row['username'] . $crlf;
    988. 

  988. 				$pmtext .= $lang['Posted'] . ': ' . gmdate($user_dateformat, $db_row['privmsgs_date']) . $crlf;
    989. 

  989. 				$pmtext .= $lang['Subject'] . ': ' . htmlspecialchars_decode($db_row['privmsgs_subject'], ENT_COMPAT) . $crlf . $crlf;
    990. 

  990. 				$pmtext .= $tmpmsg . $crlf;
    991. 

  991. 			}
    992. 

  992. 			else
    993. 

  993. 			{
    994. 

  994. 				print $sql . '<p>';
    995. 

  995. 				message_die(GENERAL_ERROR, 'Could not read private message info', '', __LINE__, __FILE__, $sql);
    996. 

  996. 			}
    997. 

  997. 			$i++;
    998. 

  998. 		}
    999. 

  999. 		$filename = $config['sitename'] . '_' . $disp_folder . '_' . gmdate('Ymd');
    1000. 

  1000. 		$filename = preg_replace('/[^A-Za-z0-9]+/', '_', strtolower($filename)) . '.txt';
    1001. 

  1001. 		header('Content-Type: text/x-delimtext; name="' . $filename . '"');
    1002. 

  1002. 		header('Content-Disposition: attachment;filename=' . $filename);
    1003. 

  1003. 		header('Content-Transfer-Encoding: plain/text');
    1004. 

  1004. 		header('Content-Length: ' . strlen($pmtext));
    1005. 

  1005. 		print $pmtext;
    1006. 

  1006. 		exit;
    1007. 

  1007. 	}
    1008. 

  1008. }
    1009. 

  1009. elseif ($save && $mark_list && ($folder != 'savebox') && ($folder != 'outbox'))
    1010. 

  1010. {
    1011. 

  1011. 	if (!$user->data['session_logged_in'])
    1012. 

  1012. 	{
    1013. 

  1013. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=inbox', true));
    1014. 

  1014. 	}
    1015. 

  1015. 

  1016. 	if (sizeof($mark_list))
    1017. 

  1017. 	{
    1018. 

  1018. 		// See if recipient is at their savebox limit
    1019. 

  1019. 		$sql = "SELECT COUNT(privmsgs_id) AS savebox_items, MIN(privmsgs_date) AS oldest_post_time
    1020. 

  1020. 			FROM " . PRIVMSGS_TABLE . "
    1021. 

  1021. 			WHERE ((privmsgs_to_userid = " . $user->data['user_id'] . "
    1022. 

  1022. 					AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    1023. 

  1023. 				OR (privmsgs_from_userid = " . $user->data['user_id'] . "
    1024. 

  1024. 					AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "))";
    1025. 

  1025. 		$result = $db->sql_query($sql);
    1026. 

  1026. 

  1027. 		if ($saved_info = $db->sql_fetchrow($result))
    1028. 

  1028. 		{
    1029. 

  1029. 			if ($config['max_savebox_privmsgs'] && $saved_info['savebox_items'] >= $config['max_savebox_privmsgs'])
    1030. 

  1030. 			{
    1031. 

  1031. 				$sql = "SELECT privmsgs_id FROM " . PRIVMSGS_TABLE . "
    1032. 

  1032. 					WHERE ((privmsgs_to_userid = " . $user->data['user_id'] . "
    1033. 

  1033. 								AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    1034. 

  1034. 							OR (privmsgs_from_userid = " . $user->data['user_id'] . "
    1035. 

  1035. 								AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "))
    1036. 

  1036. 						AND privmsgs_date = " . $saved_info['oldest_post_time'];
    1037. 

  1037. 				$result = $db->sql_query($sql);
    1038. 

  1038. 				$old_privmsgs_id = $db->sql_fetchrow($result);
    1039. 

  1039. 				$old_privmsgs_id = $old_privmsgs_id['privmsgs_id'];
    1040. 

  1040. 

  1041. 				$sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    1042. 

  1042. 					WHERE privmsgs_id = $old_privmsgs_id";
    1043. 

  1043. 				$result = $db->sql_query($sql);
    1044. 

  1044. 			}
    1045. 

  1045. 		}
    1046. 

  1046. 

  1047. 		$saved_sql_id = '';
    1048. 

  1048. 		for ($i = 0; $i < sizeof($mark_list); $i++)
    1049. 

  1049. 		{
    1050. 

  1050. 			$saved_sql_id .= (($saved_sql_id != '') ? ', ' : '') . intval($mark_list[$i]);
    1051. 

  1051. 		}
    1052. 

  1052. 

  1053. 		// Process request
    1054. 

  1054. 		$saved_sql = "UPDATE " . PRIVMSGS_TABLE;
    1055. 

  1055. 

  1056. 		// Decrement read/new counters if appropriate
    1057. 

  1057. 		if ($folder == 'inbox' || $folder == 'outbox')
    1058. 

  1058. 		{
    1059. 

  1059. 			switch ($folder)
    1060. 

  1060. 			{
    1061. 

  1061. 				case 'inbox':
    1062. 

  1062. 					$sql = "privmsgs_to_userid = " . $user->data['user_id'];
    1063. 

  1063. 					break;
    1064. 

  1064. 				case 'outbox':
    1065. 

  1065. 					$sql = "privmsgs_from_userid = " . $user->data['user_id'];
    1066. 

  1066. 					break;
    1067. 

  1067. 			}
    1068. 

  1068. 

  1069. 			// Get information relevant to new or unread mail
    1070. 

  1070. 			// so we can adjust users counters appropriately
    1071. 

  1071. 			$sql = "SELECT privmsgs_to_userid, privmsgs_type
    1072. 

  1072. 				FROM " . PRIVMSGS_TABLE . "
    1073. 

  1073. 				WHERE privmsgs_id IN ($saved_sql_id)
    1074. 

  1074. 					AND $sql
    1075. 

  1075. 					AND privmsgs_type IN (" . PRIVMSGS_NEW_MAIL . ", " . PRIVMSGS_UNREAD_MAIL . ")";
    1076. 

  1076. 			$result = $db->sql_query($sql);
    1077. 

  1077. 

  1078. 			if ($row = $db->sql_fetchrow($result))
    1079. 

  1079. 			{
    1080. 

  1080. 				$update_users = $update_list = array();
    1081. 

  1081. 

  1082. 				do
    1083. 

  1083. 				{
    1084. 

  1084. 					switch ($row['privmsgs_type'])
    1085. 

  1085. 					{
    1086. 

  1086. 						case PRIVMSGS_NEW_MAIL:
    1087. 

  1087. 							$update_users['new'][$row['privmsgs_to_userid']]++;
    1088. 

  1088. 							break;
    1089. 

  1089. 

  1090. 						case PRIVMSGS_UNREAD_MAIL:
    1091. 

  1091. 							$update_users['unread'][$row['privmsgs_to_userid']]++;
    1092. 

  1092. 							break;
    1093. 

  1093. 					}
    1094. 

  1094. 				}
    1095. 

  1095. 				while ($row = $db->sql_fetchrow($result));
    1096. 

  1096. 

  1097. 				if (sizeof($update_users))
    1098. 

  1098. 				{
    1099. 

  1099. 					while (list($type, $users) = each($update_users))
    1100. 

  1100. 					{
    1101. 

  1101. 						while (list($user_id, $dec) = each($users))
    1102. 

  1102. 						{
    1103. 

  1103. 							$update_list[$type][$dec][] = $user_id;
    1104. 

  1104. 						}
    1105. 

  1105. 					}
    1106. 

  1106. 					unset($update_users);
    1107. 

  1107. 

  1108. 					while (list($type, $dec_ary) = each($update_list))
    1109. 

  1109. 					{
    1110. 

  1110. 						switch ($type)
    1111. 

  1111. 						{
    1112. 

  1112. 							case 'new':
    1113. 

  1113. 								$type = "user_new_privmsg";
    1114. 

  1114. 								break;
    1115. 

  1115. 

  1116. 							case 'unread':
    1117. 

  1117. 								$type = "user_unread_privmsg";
    1118. 

  1118. 								break;
    1119. 

  1119. 						}
    1120. 

  1120. 

  1121. 						while (list($dec, $user_ary) = each($dec_ary))
    1122. 

  1122. 						{
    1123. 

  1123. 							$user_ids = implode(', ', $user_ary);
    1124. 

  1124. 

  1125. 							$sql = "UPDATE " . USERS_TABLE . "
    1126. 

  1126. 								SET $type = $type - $dec
    1127. 

  1127. 								WHERE user_id IN ($user_ids)";
    1128. 

  1128. 							$result_tmp = $db->sql_query($sql);
    1129. 

  1129. 						}
    1130. 

  1130. 					}
    1131. 

  1131. 					unset($update_list);
    1132. 

  1132. 				}
    1133. 

  1133. 			}
    1134. 

  1134. 			$db->sql_freeresult($result);
    1135. 

  1135. 		}
    1136. 

  1136. 

  1137. 		switch ($folder)
    1138. 

  1138. 		{
    1139. 

  1139. 			case 'inbox':
    1140. 

  1140. 				$saved_sql .= " SET privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . "
    1141. 

  1141. 					WHERE privmsgs_to_userid = " . $user->data['user_id'] . "
    1142. 

  1142. 						AND (privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    1143. 

  1143. 							OR privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1144. 

  1144. 							OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    1145. 

  1145. 				break;
    1146. 

  1146. 

  1147. 			case 'outbox':
    1148. 

  1148. 				$saved_sql .= " SET privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "
    1149. 

  1149. 					WHERE privmsgs_from_userid = " . $user->data['user_id'] . "
    1150. 

  1150. 						AND (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1151. 

  1151. 							OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ") ";
    1152. 

  1152. 				break;
    1153. 

  1153. 

  1154. 			case 'sentbox':
    1155. 

  1155. 				$saved_sql .= " SET privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "
    1156. 

  1156. 					WHERE privmsgs_from_userid = " . $user->data['user_id'] . "
    1157. 

  1157. 						AND privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    1158. 

  1158. 				break;
    1159. 

  1159. 		}
    1160. 

  1160. 

  1161. 		$saved_sql .= " AND privmsgs_id IN ($saved_sql_id)";
    1162. 

  1162. 

  1163. 		$result_saved = $db->sql_query($saved_sql);
    1164. 

  1164. 

  1165. 		redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=savebox', true));
    1166. 

  1166. 	}
    1167. 

  1167. }
    1168. 

  1168. elseif ($submit || $refresh || ($mode != ''))
    1169. 

  1169. {
    1170. 

  1170. 	if (!$user->data['session_logged_in'])
    1171. 

  1171. 	{
    1172. 

  1172. 		$user_id = (isset($_GET[POST_USERS_URL])) ? '&' . POST_USERS_URL . '=' . intval($_GET[POST_USERS_URL]) : '';
    1173. 

  1173. 		redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=' . $folder . '&mode=' . $mode . $user_id, true));
    1174. 

  1174. 	}
    1175. 

  1175. 

  1176. 	// Toggles
    1177. 

  1177. 	if (!$config['allow_html'])
    1178. 

  1178. 	{
    1179. 

  1179. 		$html_on = 0;
    1180. 

  1180. 	}
    1181. 

  1181. 	else
    1182. 

  1182. 	{
    1183. 

  1183. 		$html_on = ($submit || $refresh) ? ((!empty($_POST['disable_html'])) ? 0 : 1) : $user->data['user_allowhtml'];
    1184. 

  1184. 	}
    1185. 

  1185. 

  1186. 	$acro_auto_on = ($submit || $refresh) ? ((!empty($_POST['disable_acro_auto'])) ? 0 : 1) : 1;
    1187. 

  1187. 

  1188. 	if (!$config['allow_bbcode'])
    1189. 

  1189. 	{
    1190. 

  1190. 		$bbcode_on = 0;
    1191. 

  1191. 	}
    1192. 

  1192. 	else
    1193. 

  1193. 	{
    1194. 

  1194. 		$bbcode_on = ($submit || $refresh) ? ((!empty($_POST['disable_bbcode'])) ? 0 : 1) : $user->data['user_allowbbcode'];
    1195. 

  1195. 	}
    1196. 

  1196. 

  1197. 	if (!$config['allow_smilies'])
    1198. 

  1198. 	{
    1199. 

  1199. 		$smilies_on = 0;
    1200. 

  1200. 	}
    1201. 

  1201. 	else
    1202. 

  1202. 	{
    1203. 

  1203. 		$smilies_on = ($submit || $refresh) ? ((!empty($_POST['disable_smilies'])) ? 0 : 1) : $user->data['user_allowsmile'];
    1204. 

  1204. 	}
    1205. 

  1205. 

  1206. 	$attach_sig = ($submit || $refresh) ? ((!empty($_POST['attach_sig'])) ? 1 : 0) : $user->data['user_attachsig'];
    1207. 

  1207. 	$user_sig = ($user->data['user_sig'] != '' && $config['allow_sig']) ? $user->data['user_sig'] : '';
    1208. 

  1208. 

  1209. 	if (($submit) && ($mode != 'edit') && ($user->data['user_level'] != ADMIN))
    1210. 

  1210. 	{
    1211. 

  1211. 		// Flood control
    1212. 

  1212. 		$sql = "SELECT MAX(privmsgs_date) AS last_post_time
    1213. 

  1213. 			FROM " . PRIVMSGS_TABLE . "
    1214. 

  1214. 			WHERE privmsgs_from_userid = " . $user->data['user_id'];
    1215. 

  1215. 		$db->sql_return_on_error(true);
    1216. 

  1216. 		$result = $db->sql_query($sql);
    1217. 

  1217. 		$db->sql_return_on_error(false);
    1218. 

  1218. 		if ($result)
    1219. 

  1219. 		{
    1220. 

  1220. 			$db_row = $db->sql_fetchrow($result);
    1221. 

  1221. 

  1222. 			$last_post_time = $db_row['last_post_time'];
    1223. 

  1223. 			$current_time = time();
    1224. 

  1224. 

  1225. 			if (($current_time - $last_post_time) < $config['flood_interval'])
    1226. 

  1226. 			{
    1227. 

  1227. 				message_die(GENERAL_MESSAGE, $lang['Flood_Error']);
    1228. 

  1228. 			}
    1229. 

  1229. 		}
    1230. 

  1230. 		// End Flood control
    1231. 

  1231. 	}
    1232. 

  1232. 

  1233. 	if ($submit && ($mode == 'edit'))
    1234. 

  1234. 	{
    1235. 

  1235. 		$sql = 'SELECT privmsgs_from_userid
    1236. 

  1236. 			FROM ' . PRIVMSGS_TABLE . '
    1237. 

  1237. 			WHERE privmsgs_id = ' . (int) $privmsg_id . '
    1238. 

  1238. 				AND privmsgs_from_userid = ' . $user->data['user_id'];
    1239. 

  1239. 		$result = $db->sql_query($sql);
    1240. 

  1240. 

  1241. 		if (!($row = $db->sql_fetchrow($result)))
    1242. 

  1242. 		{
    1243. 

  1243. 			message_die(GENERAL_MESSAGE, $lang['No_such_post']);
    1244. 

  1244. 		}
    1245. 

  1245. 		$db->sql_freeresult($result);
    1246. 

  1246. 

  1247. 		unset($row);
    1248. 

  1248. 	}
    1249. 

  1249. 

  1250. 	if ($submit || ($draft && $draft_confirm))
    1251. 

  1251. 	{
    1252. 

  1252. 		$username = request_var('username', '', true);
    1253. 

  1253. 		$username = htmlspecialchars_decode($username, ENT_COMPAT);
    1254. 

  1254. 		$subject = !empty($draft_subject) ? $draft_subject : request_post_var('subject', '', true);
    1255. 

  1255. 		$message = !empty($draft_message) ? $draft_message : htmlspecialchars_decode(request_post_var('message', '', true), ENT_COMPAT);
    1256. 

  1256. 

  1257. 		// session id check
    1258. 

  1258. 		if (($sid == '') || ($sid != $user->data['session_id']))
    1259. 

  1259. 		{
    1260. 

  1260. 			$error = true;
    1261. 

  1261. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['Session_invalid'];
    1262. 

  1262. 		}
    1263. 

  1263. 

  1264. 		if (!empty($username))
    1265. 

  1265. 		{
    1266. 

  1266. 			$to_username = phpbb_clean_username($username);
    1267. 

  1267. 			$sql = "SELECT user_id, user_notify_pm, user_email, user_lang, user_active
    1268. 

  1268. 				FROM " . USERS_TABLE . "
    1269. 

  1269. 				WHERE username_clean = '" . $db->sql_escape(utf8_clean_string($to_username)) . "'
    1270. 

  1270. 					AND user_id <> " . ANONYMOUS;
    1271. 

  1271. 			$db->sql_return_on_error(true);
    1272. 

  1272. 			$result = $db->sql_query($sql);
    1273. 

  1273. 			$db->sql_return_on_error(false);
    1274. 

  1274. 			if (!$result)
    1275. 

  1275. 			{
    1276. 

  1276. 				$error = true;
    1277. 

  1277. 				$error_msg = $lang['NO_USER'];
    1278. 

  1278. 			}
    1279. 

  1279. 

  1280. 			if (!($to_userdata = $db->sql_fetchrow($result)))
    1281. 

  1281. 			{
    1282. 

  1282. 				$error = true;
    1283. 

  1283. 				$error_msg = $lang['NO_USER'];
    1284. 

  1284. 			}
    1285. 

  1285. 		}
    1286. 

  1286. 		else
    1287. 

  1287. 		{
    1288. 

  1288. 			$error = true;
    1289. 

  1289. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['No_to_user'];
    1290. 

  1290. 		}
    1291. 

  1291. 

  1292. 		$privmsg_subject = $subject;
    1293. 

  1293. 		if (empty($privmsg_subject))
    1294. 

  1294. 		{
    1295. 

  1295. 			$error = true;
    1296. 

  1296. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['Empty_subject'];
    1297. 

  1297. 		}
    1298. 

  1298. 

  1299. 		if (!empty($message) && !$error)
    1300. 

  1300. 		{
    1301. 

  1301. 			$privmsg_message = prepare_message($message, $html_on, $bbcode_on, $smilies_on, '');
    1302. 

  1302. 		}
    1303. 

  1303. 		else
    1304. 

  1304. 		{
    1305. 

  1305. 			$error = true;
    1306. 

  1306. 			$error_msg .= ((!empty($error_msg)) ? '<br />' : '') . $lang['Empty_message'];
    1307. 

  1307. 		}
    1308. 

  1308. 	}
    1309. 

  1309. 

  1310. 	if (($submit || ($draft && $draft_confirm)) && !$error)
    1311. 

  1311. 	{
    1312. 

  1312. 		// Has admin prevented user from sending PM's?
    1313. 

  1313. 		if (!$user->data['user_allow_pm'])
    1314. 

  1314. 		{
    1315. 

  1315. 			$error_message = $lang['Cannot_send_privmsg'];
    1316. 

  1316. 			message_die(GENERAL_MESSAGE, $error_message);
    1317. 

  1317. 		}
    1318. 

  1318. 

  1319. 		// MG Drafts - BEGIN
    1320. 

  1320. 		if (($config['allow_drafts'] == true) && $draft && $draft_confirm && $user->data['session_logged_in'])
    1321. 

  1321. 		{
    1322. 

  1322. 			save_draft($draft_id, $user->data['user_id'], 0, 0, $privmsg_subject, $message);
    1323. 

  1323. 			$output_message = $lang['Drafts_Saved'];
    1324. 

  1324. 			$output_message .= '<br /><br />' . sprintf($lang['Click_return_drafts'], '<a href="' . append_sid(CMS_PAGE_DRAFTS) . '">', '</a>');
    1325. 

  1325. 			$output_message .= '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    1326. 

  1326. 

  1327. 			$redirect_url = append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox');
    1328. 

  1328. 			meta_refresh(3, $redirect_url);
    1329. 

  1329. 

  1330. 			message_die(GENERAL_MESSAGE, $output_message);
    1331. 

  1331. 		}
    1332. 

  1332. 		// MG Drafts - END
    1333. 

  1333. 

  1334. 		$msg_time = time();
    1335. 

  1335. 

  1336. 		if ($mode != 'edit')
    1337. 

  1337. 		{
    1338. 

  1338. 			// See if recipient is at their inbox limit
    1339. 

  1339. 			$sql = "SELECT COUNT(privmsgs_id) AS inbox_items, MIN(privmsgs_date) AS oldest_post_time
    1340. 

  1340. 				FROM " . PRIVMSGS_TABLE . "
    1341. 

  1341. 				WHERE (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1342. 

  1342. 						OR privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    1343. 

  1343. 						OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")
    1344. 

  1344. 					AND privmsgs_to_userid = " . $to_userdata['user_id'];
    1345. 

  1345. 			$result = $db->sql_query($sql);
    1346. 

  1346. 

  1347. 			if ($inbox_info = $db->sql_fetchrow($result))
    1348. 

  1348. 			{
    1349. 

  1349. 				if ($config['max_inbox_privmsgs'] && ($inbox_info['inbox_items'] >= $config['max_inbox_privmsgs']))
    1350. 

  1350. 				{
    1351. 

  1351. 					$sql = "SELECT privmsgs_id FROM " . PRIVMSGS_TABLE . "
    1352. 

  1352. 						WHERE (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1353. 

  1353. 								OR privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    1354. 

  1354. 								OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . " )
    1355. 

  1355. 							AND privmsgs_date = " . $inbox_info['oldest_post_time'] . "
    1356. 

  1356. 							AND privmsgs_to_userid = " . $to_userdata['user_id'];
    1357. 

  1357. 					$result = $db->sql_query($sql);
    1358. 

  1358. 					$old_privmsgs_id = $db->sql_fetchrow($result);
    1359. 

  1359. 					$old_privmsgs_id = $old_privmsgs_id['privmsgs_id'];
    1360. 

  1360. 

  1361. 					$sql = "DELETE FROM " . PRIVMSGS_TABLE . "
    1362. 

  1362. 						WHERE privmsgs_id = $old_privmsgs_id";
    1363. 

  1363. 					$db->sql_query($sql);
    1364. 

  1364. 				}
    1365. 

  1365. 			}
    1366. 

  1366. 

  1367. 			if ($user->data['user_level'] > 0)
    1368. 

  1368. 			{
    1369. 

  1369. 				$pm_send = true;
    1370. 

  1370. 			}
    1371. 

  1371. 			else
    1372. 

  1372. 			{
    1373. 

  1373. 				$u_pm_in = user_check_pm_in_allowed($to_userdata['user_id']);
    1374. 

  1374. 				if ($u_pm_in == true)
    1375. 

  1375. 				{
    1376. 

  1376. 					$pm_send = true;
    1377. 

  1377. 				}
    1378. 

  1378. 				else
    1379. 

  1379. 				{
    1380. 

  1380. 					$u_pm_friend = user_check_friend_foe($to_userdata['user_id'], true);
    1381. 

  1381. 					if ($u_pm_friend == true)
    1382. 

  1382. 					{
    1383. 

  1383. 						$pm_send = true;
    1384. 

  1384. 					}
    1385. 

  1385. 					else
    1386. 

  1386. 					{
    1387. 

  1387. 						$msg = $lang['Allow_PM_IN_SEND_ERROR'] . '<br /><br />' . sprintf($lang['Click_return_inbox'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    1388. 

  1388. 						message_die(GENERAL_MESSAGE, $msg);
    1389. 

  1389. 					}
    1390. 

  1390. 				}
    1391. 

  1391. 			}
    1392. 

  1392. 			$sql_info = "INSERT INTO " . PRIVMSGS_TABLE . " (privmsgs_type, privmsgs_subject, privmsgs_text, privmsgs_from_userid, privmsgs_to_userid, privmsgs_date, privmsgs_ip, privmsgs_enable_html, privmsgs_enable_bbcode, privmsgs_enable_smilies, privmsgs_enable_autolinks_acronyms, privmsgs_attach_sig)
    1393. 

  1393. 				VALUES (" . PRIVMSGS_NEW_MAIL . ", '" . $db->sql_escape($privmsg_subject) . "', '" . $db->sql_escape($privmsg_message) . "', " . $user->data['user_id'] . ", " . $to_userdata['user_id'] . ", $msg_time, '$user_ip', $html_on, $bbcode_on, $smilies_on, $acro_auto_on, $attach_sig)";
    1394. 

  1394. 		}
    1395. 

  1395. 		else
    1396. 

  1396. 		{
    1397. 

  1397. 			if ($user->data['user_level'] > 0)
    1398. 

  1398. 			{
    1399. 

  1399. 				$pm_send = true;
    1400. 

  1400. 			}
    1401. 

  1401. 			else
    1402. 

  1402. 			{
    1403. 

  1403. 				$u_pm_in = user_check_pm_in_allowed($to_userdata['user_id']);
    1404. 

  1404. 				if ($u_pm_in == true)
    1405. 

  1405. 				{
    1406. 

  1406. 					$pm_send = true;
    1407. 

  1407. 				}
    1408. 

  1408. 				else
    1409. 

  1409. 				{
    1410. 

  1410. 					$u_pm_friend = user_check_friend_foe($to_userdata['user_id'], true);
    1411. 

  1411. 					if ($u_pm_friend == true)
    1412. 

  1412. 					{
    1413. 

  1413. 						$pm_send = true;
    1414. 

  1414. 					}
    1415. 

  1415. 					else
    1416. 

  1416. 					{
    1417. 

  1417. 						$msg = $lang['Allow_PM_IN_SEND_ERROR'] . '<br /><br />' . sprintf($lang['Click_return_inbox'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    1418. 

  1418. 						message_die(GENERAL_MESSAGE, $msg);
    1419. 

  1419. 					}
    1420. 

  1420. 				}
    1421. 

  1421. 			}
    1422. 

  1422. 			$sql_info = "UPDATE " . PRIVMSGS_TABLE . "
    1423. 

  1423. 				SET privmsgs_type = " . PRIVMSGS_NEW_MAIL . ", privmsgs_subject = '" . $db->sql_escape($privmsg_subject) . "', privmsgs_text = '" . $db->sql_escape($privmsg_message) . "', privmsgs_from_userid = " . $user->data['user_id'] . ", privmsgs_to_userid = " . $to_userdata['user_id'] . ", privmsgs_date = $msg_time, privmsgs_ip = '$user_ip', privmsgs_enable_html = $html_on, privmsgs_enable_bbcode = $bbcode_on, privmsgs_enable_smilies = $smilies_on, privmsgs_enable_autolinks_acronyms = $acro_auto_on, privmsgs_attach_sig = $attach_sig
    1424. 

  1424. 				WHERE privmsgs_id = $privmsg_id";
    1425. 

  1425. 		}
    1426. 

  1426. 		$result = $db->sql_query($sql_info);
    1427. 

  1427. 

  1428. 		if ($mode != 'edit')
    1429. 

  1429. 		{
    1430. 

  1430. 			$privmsg_sent_id = $db->sql_nextid();
    1431. 

  1431. 		}
    1432. 

  1432. 

  1433. 		$attachment_mod['pm']->insert_attachment_pm($privmsg_id);
    1434. 

  1434. 		if ($mode != 'edit')
    1435. 

  1435. 		{
    1436. 

  1436. 			// Add to the users new pm counter
    1437. 

  1437. 			$sql = "UPDATE " . USERS_TABLE . "
    1438. 

  1438. 				SET user_new_privmsg = user_new_privmsg + 1, user_last_privmsg = " . time() . "
    1439. 

  1439. 				WHERE user_id = " . $to_userdata['user_id'];
    1440. 

  1440. 			$status = $db->sql_query($sql);
    1441. 

  1441. 

  1442. 			if ($to_userdata['user_notify_pm'] && !empty($to_userdata['user_email']) && $to_userdata['user_active'])
    1443. 

  1443. 			{
    1444. 

  1444. 				$server_url = create_server_url();
    1445. 

  1445. 				$privmsg_url = $server_url . CMS_PAGE_PRIVMSG;
    1446. 

  1446. 

  1447. 				include(IP_ROOT_PATH . 'includes/emailer.' . PHP_EXT);
    1448. 

  1448. 				$emailer = new emailer();
    1449. 

  1449. 				$emailer->use_template('privmsg_notify', $to_userdata['user_lang']);
    1450. 

  1450. 				$emailer->to($to_userdata['user_email']);
    1451. 

  1451. 				$emailer->set_subject($lang['Notification_subject']);
    1452. 

  1452. 

  1453. 				if (!empty($config['html_email']))
    1454. 

  1454. 				{
    1455. 

  1455. 					//HTML Message
    1456. 

  1456. 					$bbcode->allow_html = ($html_on ? true : false);
    1457. 

  1457. 					$bbcode->allow_bbcode = ($bbcode_on ? true : false);
    1458. 

  1458. 					$bbcode->allow_smilies = ($smilies_on ? true : false);
    1459. 

  1459. 					$message = $bbcode->parse($privmsg_message);
    1460. 

  1460. 					$message = $message;
    1461. 

  1461. 					//HTML Message
    1462. 

  1462. 				}
    1463. 

  1463. 				else
    1464. 

  1464. 				{
    1465. 

  1465. 					$message = $bbcode->bbcode_killer($privmsg_message, '');
    1466. 

  1466. 				}
    1467. 

  1467. 				$email_sig = create_signature($config['board_email_sig']);
    1468. 

  1468. 				$emailer->assign_vars(array(
    1469. 

  1469. 					'USERNAME' => stripslashes($to_username),
    1470. 

  1470. 					'SITENAME' => $config['sitename'],
    1471. 

  1471. 					'EMAIL_SIG' => $email_sig,
    1472. 

  1472. 					// Mighty Gorgon - Begin
    1473. 

  1473. 					'FROM' => $user->data['username'],
    1474. 

  1474. 					'DATE' => create_date($config['default_dateformat'], time(), $config['board_timezone']),
    1475. 

  1475. 					'SUBJECT' => $privmsg_subject,
    1476. 

  1476. 					'PRIV_MSG_TEXT' => $message,
    1477. 

  1477. 					// Mighty Gorgon - End
    1478. 

  1478. 					'FROM_USERNAME' => $user->data['username'],
    1479. 

  1479. 					'U_INBOX' => $privmsg_url . '?folder=inbox'
    1480. 

  1480. 					)
    1481. 

  1481. 				);
    1482. 

  1482. 

  1483. 				$emailer->send();
    1484. 

  1484. 				$emailer->reset();
    1485. 

  1485. 			}
    1486. 

  1486. 			// MG Cash MOD For IP - BEGIN
    1487. 

  1487. 			if (!empty($config['plugins']['cash']['enabled']))
    1488. 

  1488. 			{
    1489. 

  1489. 				$pmer = new cash_user($user->data['user_id'], $user->data);
    1490. 

  1490. 				$pmer->give_pm_amount();
    1491. 

  1491. 				while (false) {}
    1492. 

  1492. 			}
    1493. 

  1493. 			// MG Cash MOD For IP - END
    1494. 

  1494. 		}
    1495. 

  1495. 

  1496. 		$redirect_url = append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox');
    1497. 

  1497. 		meta_refresh(3, $redirect_url);
    1498. 

  1498. 

  1499. 		$msg = $lang['Message_sent'] . '<br /><br />' . sprintf($lang['Click_return_inbox'], '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid(CMS_PAGE_FORUM) . '">', '</a>');
    1500. 

  1500. 

  1501. 		message_die(GENERAL_MESSAGE, $msg);
    1502. 

  1502. 	}
    1503. 

  1503. 	elseif ($preview || $refresh || $error)
    1504. 

  1504. 	{
    1505. 

  1505. 		// If we're previewing or refreshing then obtain the data passed to the script, process it a little, do some checks where neccessary, etc.
    1506. 

  1506. 		$to_username = request_var('username', '', true);
    1507. 

  1507. 		$to_username = htmlspecialchars_decode($to_username, ENT_COMPAT);
    1508. 

  1508. 		$privmsg_subject = request_var('subject', '', true);
    1509. 

  1509. 		$privmsg_message = request_var('message', '', true);
    1510. 

  1510. 		$privmsg_message = htmlspecialchars_decode($privmsg_message, ENT_COMPAT);
    1511. 

  1511. 

  1512. 		// Do mode specific things
    1513. 

  1513. 		$meta_content['description'] = '';
    1514. 

  1514. 		$meta_content['keywords'] = '';
    1515. 

  1515. 		if ($mode == 'post')
    1516. 

  1516. 		{
    1517. 

  1517. 			$meta_content['page_title'] = $lang['Post_new_pm'];
    1518. 

  1518. 			$user_sig = ($user->data['user_sig'] != '' && $config['allow_sig']) ? $user->data['user_sig'] : '';
    1519. 

  1519. 		}
    1520. 

  1520. 		elseif ($mode == 'reply')
    1521. 

  1521. 		{
    1522. 

  1522. 			$meta_content['page_title'] = $lang['Post_reply_pm'];
    1523. 

  1523. 			$user_sig = ($user->data['user_sig'] != '' && $config['allow_sig']) ? $user->data['user_sig'] : '';
    1524. 

  1524. 		}
    1525. 

  1525. 		elseif ($mode == 'edit')
    1526. 

  1526. 		{
    1527. 

  1527. 			$meta_content['page_title'] = $lang['Edit_pm'];
    1528. 

  1528. 

  1529. 			$sql = "SELECT u.user_id, u.user_sig
    1530. 

  1530. 				FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " u
    1531. 

  1531. 				WHERE pm.privmsgs_id = $privmsg_id
    1532. 

  1532. 					AND u.user_id = pm.privmsgs_from_userid";
    1533. 

  1533. 			$result = $db->sql_query($sql);
    1534. 

  1534. 

  1535. 			if ($postrow = $db->sql_fetchrow($result))
    1536. 

  1536. 			{
    1537. 

  1537. 				if ($user->data['user_id'] != $postrow['user_id'])
    1538. 

  1538. 				{
    1539. 

  1539. 					message_die(GENERAL_MESSAGE, $lang['Edit_own_posts']);
    1540. 

  1540. 				}
    1541. 

  1541. 

  1542. 				$user_sig = ($postrow['user_sig'] != '' && $config['allow_sig']) ? $postrow['user_sig'] : '';
    1543. 

  1543. 			}
    1544. 

  1544. 		}
    1545. 

  1545. 	}
    1546. 

  1546. 	else
    1547. 

  1547. 	{
    1548. 

  1548. 		if (!$privmsg_id && (($mode == 'reply') || ($mode == 'edit') || ($mode == 'quote')))
    1549. 

  1549. 		{
    1550. 

  1550. 			message_die(GENERAL_ERROR, $lang['No_post_id']);
    1551. 

  1551. 		}
    1552. 

  1552. 

  1553. 		if (!empty($_GET[POST_USERS_URL]))
    1554. 

  1554. 		{
    1555. 

  1555. 			$user_id = intval($_GET[POST_USERS_URL]);
    1556. 

  1556. 

  1557. 			$sql = "SELECT username
    1558. 

  1558. 				FROM " . USERS_TABLE . "
    1559. 

  1559. 				WHERE user_id = $user_id
    1560. 

  1560. 					AND user_id <> " . ANONYMOUS;
    1561. 

  1561. 			$db->sql_return_on_error(true);
    1562. 

  1562. 			$result = $db->sql_query($sql);
    1563. 

  1563. 			$db->sql_return_on_error(false);
    1564. 

  1564. 			if (!$result)
    1565. 

  1565. 			{
    1566. 

  1566. 				$error = true;
    1567. 

  1567. 				$error_msg = $lang['NO_USER'];
    1568. 

  1568. 			}
    1569. 

  1569. 

  1570. 			if ($row = $db->sql_fetchrow($result))
    1571. 

  1571. 			{
    1572. 

  1572. 				$to_username = $row['username'];
    1573. 

  1573. 			}
    1574. 

  1574. 		}
    1575. 

  1575. 		elseif ($mode == 'edit')
    1576. 

  1576. 		{
    1577. 

  1577. 			$sql = "SELECT pm.*, u.username, u.user_id, u.user_sig
    1578. 

  1578. 				FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " u
    1579. 

  1579. 				WHERE pm.privmsgs_id = $privmsg_id
    1580. 

  1580. 					AND pm.privmsgs_from_userid = " . $user->data['user_id'] . "
    1581. 

  1581. 					AND (pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1582. 

  1582. 						OR pm.privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")
    1583. 

  1583. 					AND u.user_id = pm.privmsgs_to_userid";
    1584. 

  1584. 			$result = $db->sql_query($sql);
    1585. 

  1585. 

  1586. 			if (!($privmsg = $db->sql_fetchrow($result)))
    1587. 

  1587. 			{
    1588. 

  1588. 				redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder, true));
    1589. 

  1589. 			}
    1590. 

  1590. 

  1591. 			$privmsg_subject = $privmsg['privmsgs_subject'];
    1592. 

  1592. 			$privmsg_message = $privmsg['privmsgs_text'];
    1593. 

  1593. 			$privmsg_bbcode_enabled = ($privmsg['privmsgs_enable_bbcode'] == 1);
    1594. 

  1594. 			$privmsg_message = str_replace('<br />', "\n", $privmsg_message);
    1595. 

  1595. 			//$privmsg_message = preg_replace('#</textarea>#si', '&lt;/textarea&gt;', $privmsg_message);
    1596. 

  1596. 

  1597. 			$user_sig = ($config['allow_sig']) ? (($privmsg['privmsgs_type'] == PRIVMSGS_NEW_MAIL) ? $user_sig : $privmsg['user_sig']) : '';
    1598. 

  1598. 

  1599. 			$to_username = $privmsg['username'];
    1600. 

  1600. 			$to_userid = $privmsg['user_id'];
    1601. 

  1601. 

  1602. 		}
    1603. 

  1603. 		elseif (($mode == 'reply') || ($mode == 'quote'))
    1604. 

  1604. 		{
    1605. 

  1605. 

  1606. 			$sql = "SELECT pm.privmsgs_subject, pm.privmsgs_date, pm.privmsgs_text, u.username, u.user_id
    1607. 

  1607. 				FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " u
    1608. 

  1608. 				WHERE pm.privmsgs_id = $privmsg_id
    1609. 

  1609. 					AND pm.privmsgs_to_userid = " . $user->data['user_id'] . "
    1610. 

  1610. 					AND u.user_id = pm.privmsgs_from_userid";
    1611. 

  1611. 			$result = $db->sql_query($sql);
    1612. 

  1612. 

  1613. 			if (!($privmsg = $db->sql_fetchrow($result)))
    1614. 

  1614. 			{
    1615. 

  1615. 				redirect(append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder, true));
    1616. 

  1616. 			}
    1617. 

  1617. 

  1618. 			$privmsg_subject = (((strlen($privmsg['privmsgs_subject']) > 0) && ((substr($privmsg['privmsgs_subject'], 0, strlen($lang['REPLY_PREFIX'])) == $lang['REPLY_PREFIX']) || (substr($privmsg['privmsgs_subject'], 0, strlen($lang['REPLY_PREFIX']))) == $lang['REPLY_PREFIX_OLD'])) ? '' : $lang['REPLY_PREFIX']) . $privmsg['privmsgs_subject'];
    1619. 

  1619. 

  1620. 			$to_username = $privmsg['username'];
    1621. 

  1621. 			$to_userid = $privmsg['user_id'];
    1622. 

  1622. 

  1623. 			if (($mode == 'quote') || ($mode == 'reply'))
    1624. 

  1624. 			{
    1625. 

  1625. 				$privmsg_message = $privmsg['privmsgs_text'];
    1626. 

  1626. 				$privmsg_message = str_replace('<br />', "\n", $privmsg_message);
    1627. 

  1627. 				//$privmsg_message = preg_replace('#</textarea>#si', '&lt;/textarea&gt;', $privmsg_message);
    1628. 

  1628. 

  1629. 				$msg_date = create_date_ip($config['default_dateformat'], $privmsg['privmsgs_date'], $config['board_timezone']);
    1630. 

  1630. 

  1631. 				$privmsg_message = '[quote user="' . $to_username . '"]' . $privmsg_message . '[/quote]';
    1632. 

  1632. 

  1633. 				$mode = 'reply';
    1634. 

  1634. 			}
    1635. 

  1635. 		}
    1636. 

  1636. 		else
    1637. 

  1637. 		{
    1638. 

  1638. 			$privmsg_subject = $privmsg_message = $to_username = '';
    1639. 

  1639. 		}
    1640. 

  1640. 	}
    1641. 

  1641. 

  1642. 	// Has admin prevented user from sending PM's?
    1643. 

  1643. 	if (!$user->data['user_allow_pm'] && ($mode != 'edit'))
    1644. 

  1644. 	{
    1645. 

  1645. 		$error_message = $lang['Cannot_send_privmsg'];
    1646. 

  1646. 		message_die(GENERAL_MESSAGE, $error_message);
    1647. 

  1647. 	}
    1648. 

  1648. 

  1649. 	// Start output, first preview, then errors then post form
    1650. 

  1650. 	$link_name = '';
    1651. 

  1651. 	if ($mode == 'post')
    1652. 

  1652. 	{
    1653. 

  1653. 		$link_name = $lang['Send_a_new_message'];
    1654. 

  1654. 	}
    1655. 

  1655. 	elseif ($mode == 'reply')
    1656. 

  1656. 	{
    1657. 

  1657. 		$link_name = $lang['Send_a_reply'];
    1658. 

  1658. 	}
    1659. 

  1659. 	elseif ($mode == 'edit')
    1660. 

  1660. 	{
    1661. 

  1661. 		$link_name = $lang['Edit_message'];
    1662. 

  1662. 	}
    1663. 

  1663. 	$nav_server_url = create_server_url();
    1664. 

  1664. 	$breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '"' . (!empty($link_name) ? '' : ' class="nav-current"') . '>' . $lang['Private_Messaging'] . '</a>' . (!empty($link_name) ? ($lang['Nav_Separator'] . '<a class="nav-current" href="#">' . $link_name . '</a>') : '');
    1665. 

  1665. 	$skip_nav_cat = true;
    1666. 

  1666. 	include_once(IP_ROOT_PATH . 'includes/users_zebra_block.' . PHP_EXT);
    1667. 

  1667. 

  1668. 	if ($preview && !$error)
    1669. 

  1669. 	{
    1670. 

  1670. 		$privmsg_message = !empty($draft_message) ? $draft_message : $privmsg_message;
    1671. 

  1671. 		$privmsg_subject = !empty($draft_subject) ? $draft_subject : $privmsg_subject;
    1672. 

  1672. 

  1673. 		$preview_message = prepare_message($privmsg_message, $html_on, $bbcode_on, $smilies_on);
    1674. 

  1674. 		$privmsg_message = preg_replace($html_entities_match, $html_entities_replace, $privmsg_message);
    1675. 

  1675. 

  1676. 		// Finalise processing as per viewtopic
    1677. 

  1677. 		if (!$html_on)
    1678. 

  1678. 		{
    1679. 

  1679. 			if ($user_sig != '' || !$user->data['user_allowhtml'])
    1680. 

  1680. 			{
    1681. 

  1681. 				$user_sig = preg_replace('#(<)([\/]?.*?)(>)#is', "&lt;\\2&gt;", $user_sig);
    1682. 

  1682. 			}
    1683. 

  1683. 		}
    1684. 

  1684. 

  1685. 		$preview_subject = censor_text($privmsg_subject);
    1686. 

  1686. 		$preview_message = censor_text($preview_message);
    1687. 

  1687. 

  1688. 		if ($attach_sig && ($user_sig != ''))
    1689. 

  1689. 		{
    1690. 

  1690. 			$bbcode->allow_html = ($html_on ? true : false);
    1691. 

  1691. 			$bbcode->allow_bbcode = ($bbcode_on ? true : false);
    1692. 

  1692. 			$bbcode->allow_smilies = ($smilies_on ? true : false);
    1693. 

  1693. 			$bbcode->is_sig = true;
    1694. 

  1694. 			$user_sig = $bbcode->parse($user_sig);
    1695. 

  1695. 			$bbcode->is_sig = false;
    1696. 

  1696. 		}
    1697. 

  1697. 

  1698. 		$bbcode->allow_html = ($html_on ? true : false);
    1699. 

  1699. 		$bbcode->allow_bbcode = ($bbcode_on ? true : false);
    1700. 

  1700. 		$bbcode->allow_smilies = ($smilies_on ? true : false);
    1701. 

  1701. 		$preview_message = $bbcode->parse($preview_message);
    1702. 

  1702. 

  1703. 		$signature = '';
    1704. 

  1704. 		if ($attach_sig && $user_sig != '')
    1705. 

  1705. 		{
    1706. 

  1706. 			$signature = '<br />' . $config['sig_line'] . '<br />' . $user_sig;
    1707. 

  1707. 		}
    1708. 

  1708. 

  1709. 		if($acro_auto_on)
    1710. 

  1710. 		{
    1711. 

  1711. 			$preview_message = $bbcode->acronym_pass($preview_message);
    1712. 

  1712. 			$preview_message = $bbcode->autolink_text($preview_message, '999999');
    1713. 

  1713. 		}
    1714. 

  1714. 		//$preview_message = kb_word_wrap_pass($preview_message);
    1715. 

  1715. 		$s_hidden_fields = '<input type="hidden" name="folder" value="' . $folder . '" />';
    1716. 

  1716. 		$s_hidden_fields .= '<input type="hidden" name="mode" value="' . $mode . '" />';
    1717. 

  1717. 

  1718. 		if (isset($privmsg_id))
    1719. 

  1719. 		{
    1720. 

  1720. 			$s_hidden_fields .= '<input type="hidden" name="' . POST_POST_URL . '" value="' . $privmsg_id . '" />';
    1721. 

  1721. 		}
    1722. 

  1722. 

  1723. 		$template->set_filenames(array('preview' => 'privmsgs_preview.tpl'));
    1724. 

  1724. 		$attachment_mod['pm']->preview_attachments();
    1725. 

  1725. 		$template->assign_vars(array(
    1726. 

  1726. 			'TOPIC_TITLE' => $preview_subject,
    1727. 

  1727. 			'POST_SUBJECT' => $preview_subject,
    1728. 

  1728. 			'MESSAGE_TO' => $to_username,
    1729. 

  1729. 			'MESSAGE_FROM' => $user->data['username'],
    1730. 

  1730. 			'POST_DATE' => create_date_ip($config['default_dateformat'], time(), $config['board_timezone']),
    1731. 

  1731. 			'MESSAGE' => $preview_message,
    1732. 

  1732. 			'SIGNATURE' => $signature,
    1733. 

  1733. 			'PLAIN_MESSAGE' => $plain_message,
    1734. 

  1734. 

  1735. 			'S_HIDDEN_FIELDS' => $s_hidden_fields,
    1736. 

  1736. 

  1737. 			'L_SUBJECT' => $lang['Subject'],
    1738. 

  1738. 			'L_DATE' => $lang['Date'],
    1739. 

  1739. 			'L_FROM' => $lang['From'],
    1740. 

  1740. 			'L_TO' => $lang['To'],
    1741. 

  1741. 			'L_PREVIEW' => $lang['Preview'],
    1742. 

  1742. 			'L_POSTED' => $lang['Posted'])
    1743. 

  1743. 		);
    1744. 

  1744. 

  1745. 		$template->assign_var_from_handle('POST_PREVIEW_BOX', 'preview');
    1746. 

  1746. 	}
    1747. 

  1747. 

  1748. 	// Start error handling
    1749. 

  1749. 	if ($error)
    1750. 

  1750. 	{
    1751. 

  1751. 		$privmsg_message = htmlspecialchars($privmsg_message);
    1752. 

  1752. 		$template->set_filenames(array('reg_header' => 'error_body.tpl'));
    1753. 

  1753. 		$template->assign_vars(array(
    1754. 

  1754. 			'ERROR_MESSAGE' => $error_msg)
    1755. 

  1755. 		);
    1756. 

  1756. 		$template->assign_var_from_handle('ERROR_BOX', 'reg_header');
    1757. 

  1757. 	}
    1758. 

  1758. 

  1759. 	make_jumpbox(CMS_PAGE_VIEWFORUM);
    1760. 

  1760. 

  1761. 	// Enable extensions in posting_body
    1762. 

  1762. 	$template->assign_block_vars('switch_privmsg', array());
    1763. 

  1763. 	$template->assign_var('S_POSTING_PM', true);
    1764. 

  1764. 

  1765. 	// HTML toggle selection
    1766. 

  1766. 	if ($config['allow_html'] || (($user->data['user_level'] == ADMIN) && $config['allow_html_only_for_admins']))
    1767. 

  1767. 	{
    1768. 

  1768. 		$html_status = $lang['HTML_is_ON'];
    1769. 

  1769. 		$template->assign_block_vars('switch_html_checkbox', array());
    1770. 

  1770. 	}
    1771. 

  1771. 	else
    1772. 

  1772. 	{
    1773. 

  1773. 		$html_status = $lang['HTML_is_OFF'];
    1774. 

  1774. 	}
    1775. 

  1775. 

  1776. 	// BBCode toggle selection
    1777. 

  1777. 	if ($config['allow_bbcode'])
    1778. 

  1778. 	{
    1779. 

  1779. 		$bbcode_status = $lang['BBCode_is_ON'];
    1780. 

  1780. 		$template->assign_block_vars('switch_bbcode_checkbox', array());
    1781. 

  1781. 	}
    1782. 

  1782. 	else
    1783. 

  1783. 	{
    1784. 

  1784. 		$bbcode_status = $lang['BBCode_is_OFF'];
    1785. 

  1785. 	}
    1786. 

  1786. 

  1787. 	// Smilies toggle selection
    1788. 

  1788. 	if ($config['allow_smilies'])
    1789. 

  1789. 	{
    1790. 

  1790. 		$smilies_status = $lang['Smilies_are_ON'];
    1791. 

  1791. 		$template->assign_block_vars('switch_smilies_checkbox', array());
    1792. 

  1792. 	}
    1793. 

  1793. 	else
    1794. 

  1794. 	{
    1795. 

  1795. 		$smilies_status = $lang['Smilies_are_OFF'];
    1796. 

  1796. 	}
    1797. 

  1797. 

  1798. 	// Signature toggle selection - only show if the user has a signature
    1799. 

  1799. 	if ($user_sig != '')
    1800. 

  1800. 	{
    1801. 

  1801. 		$template->assign_block_vars('switch_signature_checkbox', array());
    1802. 

  1802. 	}
    1803. 

  1803. 

  1804. 	if ($mode == 'post')
    1805. 

  1805. 	{
    1806. 

  1806. 		$post_a = $lang['Send_a_new_message'];
    1807. 

  1807. 	}
    1808. 

  1808. 	elseif ($mode == 'reply')
    1809. 

  1809. 	{
    1810. 

  1810. 		$post_a = $lang['Send_a_reply'];
    1811. 

  1811. 		$mode = 'post';
    1812. 

  1812. 	}
    1813. 

  1813. 	elseif ($mode == 'edit')
    1814. 

  1814. 	{
    1815. 

  1815. 		$post_a = $lang['Edit_message'];
    1816. 

  1816. 	}
    1817. 

  1817. 

  1818. 	$s_hidden_fields = '<input type="hidden" name="folder" value="' . $folder . '" />';
    1819. 

  1819. 	$s_hidden_fields .= '<input type="hidden" name="mode" value="' . $mode . '" />';
    1820. 

  1820. 	$s_hidden_fields .= '<input type="hidden" name="sid" value="' . $user->data['session_id'] . '" />';
    1821. 

  1821. 	if ($mode == 'edit')
    1822. 

  1822. 	{
    1823. 

  1823. 		$s_hidden_fields .= '<input type="hidden" name="' . POST_POST_URL . '" value="' . $privmsg_id . '" />';
    1824. 

  1824. 	}
    1825. 

  1825. 

  1826. 	/* Start Private Message Review By aUsTiN */
    1827. 

  1827. 	//$post_to_review = $_GET['p'];
    1828. 

  1828. 	$post_to_review = request_var(POST_POST_URL, 0);
    1829. 

  1829. 	$review_mode = request_var('mode', '');
    1830. 

  1830. 	if (($post_to_review > 0) && ($review_mode == 'reply'))
    1831. 

  1831. 	{
    1832. 

  1832. 		$q = "SELECT *
    1833. 

  1833. 				FROM " . PRIVMSGS_TABLE . "
    1834. 

  1834. 				WHERE privmsgs_id = '" . $post_to_review . "'";
    1835. 

  1835. 		$r = $db->sql_query($q);
    1836. 

  1836. 		$row = $db->sql_fetchrow($r);
    1837. 

  1837. 

  1838. 		$prv_msg_review = $row['privmsgs_text'];
    1839. 

  1839. 		$bbcode->allow_html = (($config['allow_html'] && $user->data['user_allowhtml']) || $config['allow_html_only_for_admins']) && $row['privmsgs_enable_html'];
    1840. 

  1840. 		$bbcode->allow_bbcode = ($config['allow_bbcode'] ? true : false);
    1841. 

  1841. 		$bbcode->allow_smilies = ($config['allow_smilies'] ? true : false);
    1842. 

  1842. 		$prv_msg_review = $bbcode->parse($prv_msg_review);
    1843. 

  1843. 		if ($row['privmsgs_enable_autolinks_acronyms'])
    1844. 

  1844. 		{
    1845. 

  1845. 			$prv_msg_review = $bbcode->acronym_pass($prv_msg_review);
    1846. 

  1846. 			$prv_msg_review = $bbcode->autolink_text($prv_msg_review, '999999');
    1847. 

  1847. 		}
    1848. 

  1848. 

  1849. 		$prv_msg_review = censor_text($prv_msg_review);
    1850. 

  1850. 

  1851. 		if(!$prv_msg_review)
    1852. 

  1852. 		{
    1853. 

  1853. 			$prv_msg_review = $lang['private_msg_review_error'];
    1854. 

  1854. 		}
    1855. 

  1855. 

  1856. 		$template->assign_block_vars('switch_prv_msg_review', array(
    1857. 

  1857. 			'PRIVATE_MSG_REVIEW' => $prv_msg_review,
    1858. 

  1858. 			'PRIVATE_MSG_TITLE' => $lang['private_msg_review_title']
    1859. 

  1859. 			)
    1860. 

  1860. 		);
    1861. 

  1861. 	}
    1862. 

  1862. 	/* End Private Message Review By aUsTiN */
    1863. 

  1863. 

  1864. 	// Send smilies to template
    1865. 

  1865. 	//generate_smilies('inline');
    1866. 

  1866. 

  1867. 	/*
    1868. 

  1868. 	$privmsg_subject = preg_replace($html_entities_match, $html_entities_replace, $privmsg_subject);
    1869. 

  1869. 	$privmsg_subject = str_replace('"', '&quot;', $privmsg_subject);
    1870. 

  1870. 	*/
    1871. 

  1871. 

  1872. 	if (!empty($config['ajax_features']))
    1873. 

  1873. 	{
    1874. 

  1874. 		$ajax_blur = ($mode == 'newtopic') ? 'onblur="AJAXSearch(this.value);"' : '';
    1875. 

  1875. 		$ajax_pm_user_check = 'onkeyup="AJAXCheckPMUsername(this.value);"';
    1876. 

  1876. 	}
    1877. 

  1877. 	else
    1878. 

  1878. 	{
    1879. 

  1879. 		$ajax_blur = '';
    1880. 

  1880. 		$ajax_pm_user_check = '';
    1881. 

  1881. 	}
    1882. 

  1882. 

  1883. 	// MG Drafts - BEGIN
    1884. 

  1884. 	if ($config['allow_drafts'] == true)
    1885. 

  1885. 	{
    1886. 

  1886. 		$template->assign_block_vars('allow_drafts', array());
    1887. 

  1887. 		$s_hidden_fields .= '<input type="hidden" name="d" value="' . $draft_id . '" />';
    1888. 

  1888. 		if (($draft == true) && ($draft_confirm == false))
    1889. 

  1889. 		{
    1890. 

  1890. 			$template->assign_block_vars('save_draft_confirm', array());
    1891. 

  1891. 		}
    1892. 

  1892. 	}
    1893. 

  1893. 	// MG Drafts - END
    1894. 

  1894. 

  1895. 	$template->assign_vars(array(
    1896. 

  1896. 		'SUBJECT' => $privmsg_subject,
    1897. 

  1897. 		'USERNAME' => $to_username,
    1898. 

  1898. 		'MESSAGE' => $privmsg_message,
    1899. 

  1899. 		'HTML_STATUS' => $html_status,
    1900. 

  1900. 		'SMILIES_STATUS' => $smilies_status,
    1901. 

  1901. 		'BBCODE_STATUS' => sprintf($bbcode_status, '<a href="' . append_sid('faq.' . PHP_EXT . '?mode=bbcode') . '" target="_blank">', '</a>'),
    1902. 

  1902. 		'FORUM_NAME' => $lang['Private_Message'],
    1903. 

  1903. 		'BOX_NAME' => $l_box_name,
    1904. 

  1904. 		'INBOX_IMG' => $inbox_img,
    1905. 

  1905. 		'SENTBOX_IMG' => $sentbox_img,
    1906. 

  1906. 		'OUTBOX_IMG' => $outbox_img,
    1907. 

  1907. 		'SAVEBOX_IMG' => $savebox_img,
    1908. 

  1908. 		'INBOX' => $inbox_url,
    1909. 

  1909. 		'SENTBOX' => $sentbox_url,
    1910. 

  1910. 		'OUTBOX' => $outbox_url,
    1911. 

  1911. 		'SAVEBOX' => $savebox_url,
    1912. 

  1912. 

  1913. 		'S_IS_PM' => 1,
    1914. 

  1914. 

  1915. 		// AJAX Features - BEGIN
    1916. 

  1916. 		'S_AJAX_BLUR' => $ajax_blur,
    1917. 

  1917. 		'S_AJAX_PM_USER_CHECK' => $ajax_pm_user_check,
    1918. 

  1918. 		'S_DISPLAY_PREVIEW' => ($preview) ? '' : 'style="display: none;"',
    1919. 

  1919. 		'S_EDIT_POST_ID' => ($mode == 'edit') ? $privmsg_id : 0,
    1920. 

  1920. 		'L_EMPTY_SUBJECT' => $lang['Empty_subject'],
    1921. 

  1921. 		'L_MORE_MATCHES' => $lang['More_matches_username'],
    1922. 

  1922. 		// AJAX Features - END
    1923. 

  1923. 

  1924. 		'L_SUBJECT' => $lang['Subject'],
    1925. 

  1925. 		'L_MESSAGE_BODY' => $lang['Message_body'],
    1926. 

  1926. 		'L_OPTIONS' => $lang['Options'],
    1927. 

  1927. 		'L_SPELLCHECK' => $lang['Spellcheck'],
    1928. 

  1928. 		'L_PREVIEW' => $lang['Preview'],
    1929. 

  1929. 		'L_DRAFTS' => $lang['Drafts'],
    1930. 

  1930. 		'L_DRAFT_SAVE' => $lang['Drafts_Save'],
    1931. 

  1931. 		'L_DRAFT_CONFIRM' => $lang['Drafts_Save_Question'],
    1932. 

  1932. 		'L_SUBMIT' => $lang['Submit'],
    1933. 

  1933. 		'L_CANCEL' => $lang['Cancel'],
    1934. 

  1934. 		'L_POST_A' => $post_a,
    1935. 

  1935. 		'L_FIND' => $lang['Find'],
    1936. 

  1936. 		'L_DISABLE_HTML' => $lang['Disable_HTML_pm'],
    1937. 

  1937. 		'L_DISABLE_ACRO_AUTO' => $lang['Disable_ACRO_AUTO_pm'],
    1938. 

  1938. 		'L_DISABLE_BBCODE' => $lang['Disable_BBCode_pm'],
    1939. 

  1939. 		'L_DISABLE_SMILIES' => $lang['Disable_Smilies_pm'],
    1940. 

  1940. 		'L_ATTACH_SIGNATURE' => $lang['Attach_signature'],
    1941. 

  1941. 

  1942. 		'L_POST_HIGHLIGHT' => $lang['PostHighlight'],
    1943. 

  1943. 

  1944. 		'S_HTML_CHECKED' => (!$html_on) ? ' checked="checked"' : '',
    1945. 

  1945. 		'S_ACRO_AUTO_CHECKED' => (!$acro_auto_on) ? ' checked="checked"' : '' ,
    1946. 

  1946. 		'S_BBCODE_CHECKED' => (!$bbcode_on) ? ' checked="checked"' : '',
    1947. 

  1947. 		'S_SMILIES_CHECKED' => (!$smilies_on) ? ' checked="checked"' : '',
    1948. 

  1948. 		'S_SIGNATURE_CHECKED' => ($attach_sig) ? ' checked="checked"' : '',
    1949. 

  1949. 		'S_NAMES_SELECT' => $user_names_select,
    1950. 

  1950. 		'S_HIDDEN_FORM_FIELDS' => $s_hidden_fields,
    1951. 

  1951. 		'S_POST_ACTION' => append_sid(CMS_PAGE_PRIVMSG),
    1952. 

  1952. 

  1953. 		'U_SEARCH_USER' => append_sid(CMS_PAGE_SEARCH . '?mode=searchuser'),
    1954. 

  1954. 		'U_VIEW_FORUM' => append_sid(CMS_PAGE_PRIVMSG)
    1955. 

  1955. 		)
    1956. 

  1956. 	);
    1957. 

  1957. 

  1958. 	// BBCBMG - BEGIN
    1959. 

  1959. 	include(IP_ROOT_PATH . 'includes/bbcb_mg.' . PHP_EXT);
    1960. 

  1960. 	$template->assign_var_from_handle('BBCB_MG', 'bbcb_mg');
    1961. 

  1961. 	// BBCBMG - END
    1962. 

  1962. 	// BBCBMG SMILEYS - BEGIN
    1963. 

  1963. 	generate_smilies('inline');
    1964. 

  1964. 	include(IP_ROOT_PATH . 'includes/bbcb_smileys_mg.' . PHP_EXT);
    1965. 

  1965. 	$template->assign_var_from_handle('BBCB_SMILEYS_MG', 'bbcb_smileys_mg');
    1966. 

  1966. 	// BBCBMG SMILEYS - END
    1967. 

  1967. 

  1968. 	full_page_generation('posting_body.tpl', $lang['Send_private_message'], '', '');
    1969. 

  1969. }
    1970. 

  1970. 

  1971. // Default page
    1972. 

  1972. if (!$user->data['session_logged_in'])
    1973. 

  1973. {
    1974. 

  1974. 	redirect(append_sid(CMS_PAGE_LOGIN . '?redirect=privmsg.' . PHP_EXT . '&folder=inbox', true));
    1975. 

  1975. }
    1976. 

  1976. 

  1977. // Update unread status
    1978. 

  1978. $sql = "UPDATE " . USERS_TABLE . "
    1979. 

  1979. 	SET user_unread_privmsg = user_unread_privmsg + user_new_privmsg, user_new_privmsg = 0, user_last_privmsg = " . $user->data['session_start'] . "
    1980. 

  1980. 	WHERE user_id = " . $user->data['user_id'];
    1981. 

  1981. $db->sql_query($sql);
    1982. 

  1982. 

  1983. $sql = "UPDATE " . PRIVMSGS_TABLE . "
    1984. 

  1984. 	SET privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . "
    1985. 

  1985. 	WHERE privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    1986. 

  1986. 		AND privmsgs_to_userid = " . $user->data['user_id'];
    1987. 

  1987. $db->sql_query($sql);
    1988. 

  1988. 

  1989. // Reset PM counters
    1990. 

  1990. $user->data['user_new_privmsg'] = 0;
    1991. 

  1991. $user->data['user_unread_privmsg'] = ($user->data['user_new_privmsg'] + $user->data['user_unread_privmsg']);
    1992. 

  1992. 

  1993. // Generate page
    1994. 

  1994. $nav_server_url = create_server_url();
    1995. 

  1995. $breadcrumbs['address'] = $lang['Nav_Separator'] . '<a href="' . $nav_server_url . append_sid(CMS_PAGE_PRIVMSG . '?folder=inbox') . '" class="nav-current">' . $lang['Private_Messaging'] . '</a>';
    1996. 

  1996. $breadcrumbs['bottom_right_links'] = '<a href="#" onclick="setCheckboxes(\'privmsg_list\', \'mark[]\', true); return false;" class="gensmall">' . $lang['MARK_ALL'] . '</a>&nbsp;&bull;&nbsp;<a href="#" onclick="setCheckboxes(\'privmsg_list\', \'mark[]\', false); return false;" class="gensmall">' . $lang['UNMARK_ALL'] . '</a>';
    1997. 

  1997. 

  1998. include_once(IP_ROOT_PATH . 'includes/users_zebra_block.' . PHP_EXT);
    1999. 

  1999. 

  2000. make_jumpbox(CMS_PAGE_VIEWFORUM);
    2001. 

  2001. 

  2002. // New message
    2003. 

  2003. $post_new_mesg_url = '<a href="' . append_sid(CMS_PAGE_PRIVMSG . '?mode=post') . '"><img src="' . $images['post_new'] . '" alt="' . $lang['Send_a_new_message'] . '" /></a>';
    2004. 

  2004. 

  2005. // Search messages
    2006. 

  2006. $search_sql = '';
    2007. 

  2007. $search_userid = 0;
    2008. 

  2008. $search_subject = '';
    2009. 

  2009. $search_text = '';
    2010. 

  2010. if($search_type === 'author')
    2011. 

  2011. {
    2012. 

  2012. 	$sql = get_users_sql($search_value, true, false, true, false);
    2013. 

  2013. 	$result = $db->sql_query($sql);
    2014. 

  2014. 	if($result)
    2015. 

  2015. 	{
    2016. 

  2016. 		$row = $db->sql_fetchrow($result);
    2017. 

  2017. 		$db->sql_freeresult($result);
    2018. 

  2018. 		if($row !== false)
    2019. 

  2019. 		{
    2020. 

  2020. 			$search_userid = $row['user_id'];
    2021. 

  2021. 			$search_sql = ' AND privmsgs_' . ((($folder === 'inbox') || ($folder === 'savebox')) ? 'from' : 'to') . '_userid = ' . $search_userid . ' ';
    2022. 

  2022. 		}
    2023. 

  2023. 	}
    2024. 

  2024. }
    2025. 

  2025. elseif($search_type === 'subject')
    2026. 

  2026. {
    2027. 

  2027. 	$search_sql = ' AND privmsgs_subject LIKE \'%' . $db->sql_escape($search_value) . '%\' ';
    2028. 

  2028. }
    2029. 

  2029. 

  2030. // General SQL to obtain messages
    2031. 

  2031. $sql_tot = "SELECT COUNT(privmsgs_id) AS total
    2032. 

  2032. 	FROM " . PRIVMSGS_TABLE . " ";
    2033. 

  2033. $sql = "SELECT pm.privmsgs_type, pm.privmsgs_id, pm.privmsgs_date, pm.privmsgs_subject, u.user_id, u.username, u.user_active, u.user_color
    2034. 

  2034. 	FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " u ";
    2035. 

  2035. switch($folder)
    2036. 

  2036. {
    2037. 

  2037.  case 'inbox':
    2038. 

  2038. 		$sql_tot .= "WHERE privmsgs_to_userid = " . $user->data['user_id'] . " $search_sql
    2039. 

  2039. 			AND (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    2040. 

  2040. 				OR privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    2041. 

  2041. 				OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    2042. 

    2043. 

  2043. 		$sql .= "WHERE pm.privmsgs_to_userid = " . $user->data['user_id'] . " $search_sql
    2044. 

  2044. 			AND u.user_id = pm.privmsgs_from_userid
    2045. 

  2045. 			AND (pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    2046. 

  2046. 				OR pm.privmsgs_type = " . PRIVMSGS_READ_MAIL . "
    2047. 

  2047. 				OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    2048. 

  2048. 		break;
    2049. 

  2049. 

  2050. 	case 'outbox':
    2051. 

  2051. 		$sql_tot .= "WHERE privmsgs_from_userid = " . $user->data['user_id'] . " $search_sql
    2052. 

  2052. 			AND (privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    2053. 

  2053. 				OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    2054. 

    2055. 

  2055. 		$sql .= "WHERE pm.privmsgs_from_userid = " . $user->data['user_id'] . " $search_sql
    2056. 

  2056. 			AND u.user_id = pm.privmsgs_to_userid
    2057. 

  2057. 			AND (pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "
    2058. 

  2058. 				OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . ")";
    2059. 

  2059. 		break;
    2060. 

  2060. 

  2061. 	case 'sentbox':
    2062. 

  2062. 		$sql_tot .= "WHERE privmsgs_from_userid = " . $user->data['user_id'] . " $search_sql
    2063. 

  2063. 			AND privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    2064. 

    2065. 

  2065. 		$sql .= "WHERE pm.privmsgs_from_userid = " . $user->data['user_id'] . " $search_sql
    2066. 

  2066. 			AND u.user_id = pm.privmsgs_to_userid
    2067. 

  2067. 			AND pm.privmsgs_type = " . PRIVMSGS_SENT_MAIL;
    2068. 

  2068. 		break;
    2069. 

  2069. 

  2070. 	case 'savebox':
    2071. 

  2071. 		$sql_tot .= "WHERE ((privmsgs_to_userid = " . $user->data['user_id'] . "
    2072. 

  2072. 				AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    2073. 

  2073. 			OR (privmsgs_from_userid = " . $user->data['user_id'] . "
    2074. 

  2074. 				AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "))";
    2075. 

    2076. 

  2076. 		$sql .= "WHERE u.user_id = pm.privmsgs_from_userid
    2077. 

  2077. 			AND ((pm.privmsgs_to_userid = " . $user->data['user_id'] . "
    2078. 

  2078. 				AND pm.privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . ")
    2079. 

  2079. 			OR (pm.privmsgs_from_userid = " . $user->data['user_id'] . "
    2080. 

  2080. 				AND pm.privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . "))";
    2081. 

  2081. 		break;
    2082. 

  2082. 

  2083. 	default:
    2084. 

  2084. 		message_die(GENERAL_MESSAGE, $lang['No_such_folder']);
    2085. 

  2085. 		break;
    2086. 

  2086. }
    2087. 

  2087. 

  2088. // Show messages over previous x days/months
    2089. 

  2089. $msg_days = request_var('msgdays', 0);
    2090. 

  2090. if ($submit_msgdays && !empty($msg_days))
    2091. 

  2091. {
    2092. 

  2092. 	$min_msg_time = time() - ($msg_days * 86400);
    2093. 

  2093. 

  2094. 	$limit_msg_time_total = " AND privmsgs_date > $min_msg_time";
    2095. 

  2095. 	$limit_msg_time = " AND pm.privmsgs_date > $min_msg_time ";
    2096. 

  2096. 

  2097. 	if (!empty($_POST['msgdays']))
    2098. 

  2098. 	{
    2099. 

  2099. 		$start = 0;
    2100. 

  2100. 	}
    2101. 

  2101. }
    2102. 

  2102. else
    2103. 

  2103. {
    2104. 

  2104. 	$limit_msg_time = $limit_msg_time_total = '';
    2105. 

  2105. 	$msg_days = 0;
    2106. 

  2106. }
    2107. 

  2107. 

  2108. $sql .= $limit_msg_time . " ORDER BY pm.privmsgs_date DESC LIMIT $start, " . $config['topics_per_page'];
    2109. 

  2109. $sql_all_tot = $sql_tot;
    2110. 

  2110. $sql_tot .= $limit_msg_time_total;
    2111. 

  2111. 

  2112. // Get messages
    2113. 

  2113. $result = $db->sql_query($sql_tot);
    2114. 

  2114. $pm_total = ($row = $db->sql_fetchrow($result)) ? $row['total'] : 0;
    2115. 

  2115. $result = $db->sql_query($sql_all_tot);
    2116. 

  2116. $pm_all_total = ($row = $db->sql_fetchrow($result)) ? $row['total'] : 0;
    2117. 

  2117. 

  2118. // Build select box
    2119. 

  2119. $previous_days = array(0, 1, 7, 14, 30, 90, 180, 364);
    2120. 

  2120. $previous_days_text = array($lang['ALL_POSTS'], $lang['1_DAY'], $lang['7_DAYS'], $lang['2_WEEKS'], $lang['1_MONTH'], $lang['3_MONTHS'], $lang['6_MONTHS'], $lang['1_YEAR']);
    2121. 

  2121. 

  2122. $select_msg_days = '';
    2123. 

  2123. for($i = 0; $i < sizeof($previous_days); $i++)
    2124. 

  2124. {
    2125. 

  2125. 	$selected = ($msg_days == $previous_days[$i]) ? ' selected="selected"' : '';
    2126. 

  2126. 	$select_msg_days .= '<option value="' . $previous_days[$i] . '"' . $selected . '>' . $previous_days_text[$i] . '</option>';
    2127. 

  2127. }
    2128. 

  2128. 

  2129. // Define correct icons
    2130. 

  2130. switch ($folder)
    2131. 

  2131. {
    2132. 

  2132. 	case 'inbox':
    2133. 

  2133. 		$l_box_name = $lang['Inbox'];
    2134. 

  2134. 		break;
    2135. 

  2135. 	case 'outbox':
    2136. 

  2136. 		$l_box_name = $lang['Outbox'];
    2137. 

  2137. 		break;
    2138. 

  2138. 	case 'savebox':
    2139. 

  2139. 		$l_box_name = $lang['Savebox'];
    2140. 

  2140. 		break;
    2141. 

  2141. 	case 'sentbox':
    2142. 

  2142. 		$l_box_name = $lang['Sentbox'];
    2143. 

  2143. 		break;
    2144. 

  2144. }
    2145. 

  2145. $post_pm_url = append_sid(CMS_PAGE_PRIVMSG . '?mode=post');
    2146. 

  2146. $post_pm_img = '<a href="' . $post_pm_url . '"><img src="' . $images['pm_postmsg'] . '" alt="' . $lang['Post_new_pm'] . '" /></a>';
    2147. 

  2147. $post_pm = '<a href="' . $post_pm_url . '">' . $lang['Post_new_pm'] . '</a>';
    2148. 

  2148. 

  2149. // Output data for inbox status
    2150. 

  2150. if ($folder != 'outbox')
    2151. 

  2151. {
    2152. 

  2152. 	$inbox_limit_pct = ($config['max_' . $folder . '_privmsgs'] > 0) ? round(($pm_all_total / $config['max_' . $folder . '_privmsgs']) * 100) : 100;
    2153. 

  2153. 	$inbox_limit_img_length = ($config['max_' . $folder . '_privmsgs'] > 0) ? round(($pm_all_total / $config['max_' . $folder . '_privmsgs']) * $config['privmsg_graphic_length']) : $config['privmsg_graphic_length'];
    2154. 

  2154. 	$inbox_limit_remain = ($config['max_' . $folder . '_privmsgs'] > 0) ? $config['max_' . $folder . '_privmsgs'] - $pm_all_total : 0;
    2155. 

  2155. 

  2156. 	if ($inbox_limit_pct <= 30)
    2157. 

  2157. 	{
    2158. 

  2158. 		$bar_color = 'green';
    2159. 

  2159. 	}
    2160. 

  2160. 	elseif (($inbox_limit_pct > 30) && ($inbox_limit_pct <= 70))
    2161. 

  2161. 	{
    2162. 

  2162. 		$bar_color = 'blue';
    2163. 

  2163. 	}
    2164. 

  2164. 	elseif ($inbox_limit_pct > 70)
    2165. 

  2165. 	{
    2166. 

  2166. 		$bar_color = 'red';
    2167. 

  2167. 	}
    2168. 

  2168. 

  2169. 	$vote_color = $bar_color;
    2170. 

  2170. 	$voting_bar = 'voting_graphic_' . $vote_color;
    2171. 

  2171. 	$voting_bar_body = 'voting_graphic_' . $vote_color . '_body';
    2172. 

  2172. 	$voting_bar_left = 'voting_graphic_' . $vote_color . '_left';
    2173. 

  2173. 	$voting_bar_right = 'voting_graphic_' . $vote_color . '_right';
    2174. 

  2174. 

  2175. 	$voting_bar_img = $images[$voting_bar];
    2176. 

  2176. 	$voting_bar_body_img = $images[$voting_bar_body];
    2177. 

  2177. 	$voting_bar_left_img = $images[$voting_bar_left];
    2178. 

  2178. 	$voting_bar_right_img = $images[$voting_bar_right];
    2179. 

  2179. 

  2180. 	$vote_graphic_img = $images['voting_graphic'][$vote_graphic];
    2181. 

  2181. 

  2182. 	$template->assign_block_vars('switch_box_size_notice', array());
    2183. 

  2183. 

  2184. 	switch($folder)
    2185. 

  2185. 	{
    2186. 

  2186. 		case 'inbox':
    2187. 

  2187. 			$l_box_size_status = sprintf($lang['Inbox_size'], $inbox_limit_pct);
    2188. 

  2188. 			break;
    2189. 

  2189. 		case 'sentbox':
    2190. 

  2190. 			$l_box_size_status = sprintf($lang['Sentbox_size'], $inbox_limit_pct);
    2191. 

  2191. 			break;
    2192. 

  2192. 		case 'savebox':
    2193. 

  2193. 			$l_box_size_status = sprintf($lang['Savebox_size'], $inbox_limit_pct);
    2194. 

  2194. 			break;
    2195. 

  2195. 		default:
    2196. 

  2196. 			$l_box_size_status = '';
    2197. 

  2197. 			break;
    2198. 

  2198. 	}
    2199. 

  2199. }
    2200. 

  2200. 

  2201. // Dump vars to template
    2202. 

  2202. $template->assign_vars(array(
    2203. 

  2203. 	'BOX_NAME' => $l_box_name,
    2204. 

  2204. 	'INBOX_IMG' => $inbox_img,
    2205. 

  2205. 	'SENTBOX_IMG' => $sentbox_img,
    2206. 

  2206. 	'OUTBOX_IMG' => $outbox_img,
    2207. 

  2207. 	'SAVEBOX_IMG' => $savebox_img,
    2208. 

  2208. 	'INBOX' => $inbox_url,
    2209. 

  2209. 	'SENTBOX' => $sentbox_url,
    2210. 

  2210. 	'OUTBOX' => $outbox_url,
    2211. 

  2211. 	'SAVEBOX' => $savebox_url,
    2212. 

  2212. 

  2213. 	'L_POST_PM' => $lang['Post_new_pm'],
    2214. 

  2214. 	'POST_PM_URL' => $post_pm_url,
    2215. 

  2215. 

  2216. 	'POST_PM_IMG' => $post_pm_img,
    2217. 

  2217. 	'POST_PM' => $post_pm,
    2218. 

  2218. 

  2219. 	'INBOX_LIMIT_IMG_WIDTH' => $inbox_limit_img_length,
    2220. 

  2220. 	'INBOX_LIMIT_PERCENT' => $inbox_limit_pct,
    2221. 

  2221. 	'BAR_GRAPHIC' => $voting_bar_img,
    2222. 

  2222. 	'BAR_GRAPHIC_BODY' => $voting_bar_body_img,
    2223. 

  2223. 	'BAR_GRAPHIC_LEFT' => $voting_bar_left_img,
    2224. 

  2224. 	'BAR_GRAPHIC_RIGHT' => $voting_bar_right_img,
    2225. 

  2225. 	'BAR_COLOR' => $bar_color,
    2226. 

  2226. 	'BOX_SIZE_STATUS' => $l_box_size_status,
    2227. 

  2227. 

  2228. 	'L_INBOX' => $lang['Inbox'],
    2229. 

  2229. 	'L_OUTBOX' => $lang['Outbox'],
    2230. 

  2230. 	'L_SENTBOX' => $lang['Sent'],
    2231. 

  2231. 	'L_SAVEBOX' => $lang['Saved'],
    2232. 

  2232. 	'L_MARK' => $lang['Mark'],
    2233. 

  2233. 	'L_FLAG' => $lang['Flag'],
    2234. 

  2234. 	'L_SUBJECT' => $lang['Subject'],
    2235. 

  2235. 	'L_DATE' => $lang['Date'],
    2236. 

  2236. 	'L_DISPLAY_MESSAGES' => $lang['Display_messages'],
    2237. 

  2237. 	'L_FROM_OR_TO' => ($folder == 'inbox' || $folder == 'savebox') ? $lang['From'] : $lang['To'],
    2238. 

  2238. 	'L_DELETE_MARKED' => $lang['Delete_marked'],
    2239. 

  2239. 	'L_DELETE_ALL' => $lang['Delete_all'],
    2240. 

  2240. 	'L_SAVE_MARKED' => $lang['Save_marked'],
    2241. 

  2241. 	'L_DOWNLOAD_MARKED' => $lang['Download_marked'],
    2242. 

  2242. 

  2243. 	'S_PRIVMSGS_ACTION' => append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder),
    2244. 

  2244. 	'S_HIDDEN_FIELDS' => '',
    2245. 

  2245. 	'S_POST_NEW_MSG' => $post_new_mesg_url,
    2246. 

  2246. 	'S_SELECT_MSG_DAYS' => $select_msg_days,
    2247. 

  2247. 

  2248. 	'U_POST_NEW_TOPIC' => append_sid(CMS_PAGE_PRIVMSG . '?mode=post')
    2249. 

  2249. 	)
    2250. 

  2250. );
    2251. 

  2251. 

  2252. // Okay, let's build the correct folder
    2253. 

  2253. $result = $db->sql_query($sql);
    2254. 

  2254. 

  2255. if ($row = $db->sql_fetchrow($result))
    2256. 

  2256. {
    2257. 

  2257. 	$i = 0;
    2258. 

  2258. 	do
    2259. 

  2259. 	{
    2260. 

  2260. 		$privmsg_id = $row['privmsgs_id'];
    2261. 

  2261. 

  2262. 		$flag = $row['privmsgs_type'];
    2263. 

  2263. 

  2264. 		$icon_flag = ($flag == PRIVMSGS_NEW_MAIL || $flag == PRIVMSGS_UNREAD_MAIL) ? $images['pm_unreadmsg'] : $images['pm_readmsg'];
    2265. 

  2265. 		$icon_flag_alt = ($flag == PRIVMSGS_NEW_MAIL || $flag == PRIVMSGS_UNREAD_MAIL) ? $lang['Unread_message'] : $lang['Read_message'];
    2266. 

  2266. 

  2267. 		$msg_userid = $row['user_id'];
    2268. 

  2268. 		$msg_username = colorize_username($row['user_id'], $row['username'], $row['user_color'], $row['user_active']);
    2269. 

  2269. 

  2270. 		$u_from_user_profile = append_sid(CMS_PAGE_PROFILE . '?mode=viewprofile&amp;' . POST_USERS_URL . '=' . $msg_userid);
    2271. 

  2271. 

  2272. 		$msg_subject = $row['privmsgs_subject'];
    2273. 

  2273. 		$msg_subject = censor_text($msg_subject);
    2274. 

  2274. 		$u_subject = append_sid(CMS_PAGE_PRIVMSG . '?folder=' . $folder . '&amp;mode=read&amp;' . POST_POST_URL . '=' . $privmsg_id);
    2275. 

  2275. 

  2276. 		$msg_date = create_date_ip($config['default_dateformat'], $row['privmsgs_date'], $config['board_timezone']);
    2277. 

  2277. 

  2278. 		if (($flag == PRIVMSGS_NEW_MAIL) && ($folder == 'inbox'))
    2279. 

  2279. 		{
    2280. 

  2280. 			$msg_subject = '<b>' . $msg_subject . '</b>';
    2281. 

  2281. 			$msg_date = '<b>' . $msg_date . '</b>';
    2282. 

  2282. 			$msg_username = '<b>' . $msg_username . '</b>';
    2283. 

  2283. 		}
    2284. 

  2284. 

  2285. 		$row_class = (!($i % 2)) ? $theme['td_class1'] : $theme['td_class2'];
    2286. 

  2286. 		$i++;
    2287. 

  2287. 

  2288. 		$template->assign_block_vars('listrow', array(
    2289. 

  2289. 			'ROW_CLASS' => $row_class,
    2290. 

  2290. 			'FROM' => $msg_username,
    2291. 

  2291. 			'SUBJECT' => $msg_subject,
    2292. 

  2292. 			'DATE' => $msg_date,
    2293. 

  2293. 			'PRIVMSG_ATTACHMENTS_IMG' => privmsgs_attachment_image($privmsg_id),
    2294. 

  2294. 

  2295. 			'PRIVMSG_FOLDER_IMG' => $icon_flag,
    2296. 

  2296. 

  2297. 			'L_PRIVMSG_FOLDER_ALT' => $icon_flag_alt,
    2298. 

  2298. 

  2299. 			'S_MARK_ID' => $privmsg_id,
    2300. 

  2300. 

  2301. 			'U_READ' => $u_subject,
    2302. 

  2302. 			'U_FROM_USER_PROFILE' => $u_from_user_profile
    2303. 

  2303. 			)
    2304. 

  2304. 		);
    2305. 

  2305. 	}
    2306. 

  2306. 	while($row = $db->sql_fetchrow($result));
    2307. 

  2307. 

  2308. 	$search_pagination = $search_type ? ('&searchvar=' . $search_type . '&searchvalue=' . urlencode($search_value)) : '';
    2309. 

  2309. 	$template->assign_vars(array(
    2310. 

  2310. 		'PAGINATION' => generate_pagination(CMS_PAGE_PRIVMSG . '?folder=' . $folder . $search_pagination, $pm_total, $config['topics_per_page'], $start),
    2311. 

  2311. 		'PAGE_NUMBER' => sprintf($lang['Page_of'], (floor($start / $config['topics_per_page']) + 1), ceil($pm_total / $config['topics_per_page'])),
    2312. 

  2312. 

  2313. 		'L_GOTO_PAGE' => $lang['Goto_page']
    2314. 

  2314. 		)
    2315. 

  2315. 	);
    2316. 

  2316. 

  2317. }
    2318. 

  2318. else
    2319. 

  2319. {
    2320. 

  2320. 	$template->assign_vars(array(
    2321. 

  2321. 		'L_NO_MESSAGES' => $lang['No_messages_folder']
    2322. 

  2322. 		)
    2323. 

  2323. 	);
    2324. 

  2324. 

  2325. 	$template->assign_block_vars('switch_no_messages', array());
    2326. 

  2326. }
    2327. 

  2327. 

  2328. full_page_generation('privmsgs_body.tpl', $lang['Private_Messaging'], '', '');
    2329. 

  2329. 

  2330. ?>
    2331.