' . $lang->get('privmsgs_err_need_login', array('login_link' => makeUrlNS('Special', 'Login/' . $paths->page))) . '
'); - } - $argv = Array(); - $argv[] = $paths->getParam(0); - $argv[] = $paths->getParam(1); - $argv[] = $paths->getParam(2); - if ( !$argv[0] ) - { - $argv[0] = 'InVaLiD'; - } - switch($argv[0]) - { - default: - header('Location: '.makeUrlNS('Special', 'PrivateMessages/Folder/Inbox')); - break; - case 'View': - $id = $argv[1]; - if ( !ctype_digit($id) ) - { - die_friendly('Message error', 'Invalid message ID
'); - } - $q = $db->sql_query('SELECT p.message_from, p.message_to, p.subject, p.message_text, p.date, p.folder_name, u.signature FROM '.table_prefix.'privmsgs AS p LEFT JOIN '.table_prefix.'users AS u ON (p.message_from=u.username) WHERE message_id='.$id.''); - if ( !$q ) - { - $db->_die('The message data could not be selected.'); - } - $r = $db->fetchrow(); - $db->free_result(); - if ( ($r['message_to'] != $session->username && $r['message_from'] != $session->username ) || $r['folder_name']=='drafts' ) - { - die_friendly($lang->get('etc_access_denied_short'), '' . $lang->get('privmsgs_err_not_authorized_read') . '
'); - } - if ( $r['message_to'] == $session->username ) - { - $q = $db->sql_query('UPDATE '.table_prefix.'privmsgs SET message_read=1 WHERE message_id='.$id.''); - $db->free_result(); - if ( !$q ) - { - $db->_die('Could not mark message as read'); - } - } - $template->header(); - userprefs_show_menu(); - ?> -| get('privmsgs_lbl_message_from', array('sender' => htmlspecialchars($r['message_from']))); ?> | |
|---|---|
| get('privmsgs_lbl_subject') ?> | |
| get('privmsgs_lbl_date') ?> | |
| get('privmsgs_lbl_message') ?> | '; - echo RenderMan::render($r['signature']); - } - ?> |
| get('privmsgs_btn_send_reply'); ?> | Delete message | get('privmsgs_btn_archive'); ?> | get('privmsgs_btn_return_to_inbox'); ?> | |
Invalid message ID
'); - } - $q = $db->sql_query('SELECT message_to FROM '.table_prefix.'privmsgs WHERE message_id='.$id.''); - if ( !$q ) - { - $db->_die('The message data could not be selected.'); - } - $r = $db->fetchrow(); - $db->free_result(); - if ( $r['message_to'] != $session->username ) - { - die_friendly($lang->get('etc_access_denied_short'), '' . $lang->get('privmsgs_err_not_authorized_edit') . '
'); - } - $fname = $argv[2]; - if ( !$fname || ( $fname != 'Inbox' && $fname != 'Outbox' && $fname != 'Sent' && $fname != 'Drafts' && $fname != 'Archive' ) ) - { - die_friendly('Invalid request', 'The folder name "'.$fname.'" is invalid.
'); - } - $q = $db->sql_query('UPDATE '.table_prefix.'privmsgs SET folder_name=\''.strtolower($fname).'\' WHERE message_id='.$id.';'); - $db->free_result(); - if ( !$q ) - { - $db->_die('The message was not successfully moved.'); - } - die_friendly($lang->get('privmsgs_msg_message_status'), '' . $lang->get('privmsgs_msg_message_moved', array('folder' => $fname)) . '
' . $lang->get('privmsgs_btn_return_to_inbox') . '
'); - break; - case 'Delete': - $id = $argv[1]; - if ( !ctype_digit($id) ) - { - die_friendly('Message error', 'Invalid message ID
'); - } - $q = $db->sql_query('SELECT message_to FROM '.table_prefix.'privmsgs WHERE message_id='.$id.''); - if ( !$q ) - { - $db->_die('The message data could not be selected.'); - } - $r = $db->fetchrow(); - if ( $r['message_to'] != $session->username ) - { - die_friendly($lang->get('etc_access_denied_short'), 'You are not authorized to delete this message.
'); - } - $q = $db->sql_query('DELETE FROM '.table_prefix.'privmsgs WHERE message_id='.$id.';'); - if ( !$q ) - { - $db->_die('The message was not successfully deleted.'); - } - $db->free_result(); - die_friendly($lang->get('privmsgs_msg_message_status'), '' . $lang->get('privmsgs_msg_message_deleted') . '
' . $lang->get('privmsgs_btn_return_to_inbox') . '
'); - break; - case 'Compose': - if ( $argv[1]=='Send' && isset($_POST['_send']) ) - { - // Check each POST DATA parameter... - $errors = array(); - if(!isset($_POST['to']) || ( isset($_POST['to']) && $_POST['to'] == '')) - { - $errors[] = $lang->get('privmsgs_err_need_username'); - } - if(!isset($_POST['subject']) || ( isset($_POST['subject']) && $_POST['subject'] == '')) - { - $errors[] = $lang->get('privmsgs_err_need_subject'); - } - if(!isset($_POST['message']) || ( isset($_POST['message']) && $_POST['message'] == '')) - { - $errors[] = $lang->get('privmsgs_err_need_message'); - } - if ( count($errors) < 1 ) - { - $namelist = $_POST['to']; - $namelist = str_replace(', ', ',', $namelist); - $namelist = explode(',', $namelist); - foreach($namelist as $n) { $n = $db->escape($n); } - $subject = RenderMan::preprocess_text($_POST['subject']); - $message = RenderMan::preprocess_text($_POST['message']); - $base_query = 'INSERT INTO '.table_prefix.'privmsgs(message_from,message_to,date,subject,message_text,folder_name,message_read) VALUES'; - foreach($namelist as $n) - { - $base_query .= '(\''.$session->username.'\', \''.$n.'\', '.time().', \''.$subject.'\', \''.$message.'\', \'inbox\', 0),'; - } - $base_query = substr($base_query, 0, strlen($base_query)-1) . ';'; - $result = $db->sql_query($base_query); - $db->free_result(); - if ( !$result ) - { - $db->_die('The message could not be sent.'); - } - else - { - die_friendly($lang->get('privmsgs_msg_message_status'), '' . $lang->get('privmsgs_msg_message_sent', array('inbox_link' => makeUrlNS('Special', 'PrivateMessages/Folder/Inbox'))) . '
'); - } - return; - } - } - else if ( $argv[1] == 'Send' && isset($_POST['_savedraft'] ) ) - { - $errors = array(); - if ( !isset($_POST['to']) || ( isset($_POST['to']) && $_POST['to'] == '') ) - { - $errors[] = $lang->get('privmsgs_err_need_username'); - } - if ( !isset($_POST['subject']) || ( isset($_POST['subject']) && $_POST['subject'] == '') ) - { - $errors[] = $lang->get('privmsgs_err_need_subject'); - } - if ( !isset($_POST['message']) || ( isset($_POST['message']) && $_POST['message'] == '') ) - { - $errors[] = $lang->get('privmsgs_err_need_message'); - } - if ( count($errors) < 1 ) - { - $namelist = $_POST['to']; - $namelist = str_replace(', ', ',', $namelist); - $namelist = explode(',', $namelist); - foreach($namelist as $n) - { - $n = $db->escape($n); - } - if ( count($namelist) > MAX_PMS_PER_BATCH && !$session->get_permssions('mod_misc') ) - { - die_friendly($lang->get('privmsgs_err_limit_exceeded_title'), '' . $lang->get('privmsgs_err_limit_exceeded_body', array('limit' => MAX_PMS_PER_BATCH)) . '
'); - } - $subject = $db->escape($_POST['subject']); - $message = RenderMan::preprocess_text($_POST['message']); - $base_query = 'INSERT INTO '.table_prefix.'privmsgs(message_from,message_to,date,subject,message_text,folder_name,message_read) VALUES'; - foreach($namelist as $n) - { - $base_query .= '(\''.$session->username.'\', \''.$n.'\', '.time().', \''.$subject.'\', \''.$message.'\', \'drafts\', 0),'; - } - $base_query = substr($base_query, 0, strlen($base_query) - 1) . ';'; - $result = $db->sql_query($base_query); - $db->free_result(); - if ( !$result ) - { - $db->_die('The message could not be saved.'); - } - } - } - else if(isset($_POST['_inbox'])) - { - redirect(makeUrlNS('Special', 'PrivateMessages/Folder/Inbox'), '', '', 0); - } - if($argv[1] == 'ReplyTo' && preg_match('#^([0-9]+)$#', $argv[2])) - { - $to = ''; - $text = ''; - $subj = ''; - $id = $argv[2]; - $q = $db->sql_query('SELECT p.message_from, p.message_to, p.subject, p.message_text, p.date, p.folder_name, u.signature FROM '.table_prefix.'privmsgs AS p LEFT JOIN '.table_prefix.'users AS u ON (p.message_from=u.username) WHERE message_id='.$id.';'); - if ( !$q ) - $db->_die('The message data could not be selected.'); - - $r = $db->fetchrow(); - $db->free_result(); - if ( ($r['message_to'] != $session->username && $r['message_from'] != $session->username ) || $r['folder_name'] == 'drafts' ) - { - die_friendly($lang->get('etc_access_denied_short'), 'You are not authorized to view the contents of this message.
'); - } - $subj = 'Re: ' . $r['subject']; - $text = "\n\n\nOn " . enano_date(ED_DATE | ED_TIME, $r['date']) . ", " . $r['message_from'] . " wrote:\n> " . str_replace("\n", "\n> ", $r['message_text']); // Way less complicated than using a regex ;-) - - $tbuf = $text; - while( preg_match("/\n([\> ]*?)\> \>/", $text) ) - { - $text = preg_replace("/\n([\> ]*?)\> \>/", '\\1>>', $text); - if ( $text == $tbuf ) - break; - $tbuf = $text; - } - - $to = $r['message_from']; - } - else - { - if ( ( $argv[1]=='to' || $argv[1]=='To' ) && $argv[2] ) - { - $to = htmlspecialchars($argv[2]); - } - else - { - $to = ''; - } - $text = ''; - $subj = ''; - } - $template->header(); - userprefs_show_menu(); - if ( isset($errors) && count($errors) > 0 ) - { - echo '