inc/pm.php

   1 <?php
   2 /*
   3     This program is free software; you can redistribute it and/or modify
   4     it under the terms of the Revised BSD License.
   5
   6     This program is distributed in the hope that it will be useful,
   7     but WITHOUT ANY WARRANTY; without even the implied warranty of
   8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9     Revised BSD License for more details.
  10
  11     Copyright 2004-2008 Cool Dude 2k - http://idb.berlios.de/
  12     Copyright 2004-2008 Game Maker 2k - http://intdb.sourceforge.net/
  13
  14     $FileInfo: pm.php - Last Update: 11/29/2008 SVN 193 - Author: cooldude2k $
  15 */
  16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
  17 if ($File3Name=="pm.php"||$File3Name=="/pm.php") {
  18         require('index.php');
  19         exit(); }
  20 if(!is_numeric($_GET['id'])) { $_GET['id'] = null; }
  21 if(!is_numeric($_GET['page'])) { $_GET['page'] = null; }
  22 // Check if we can read/send PM
  23 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanPM']=="no") {
  24 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
  25 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
  26 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
  27 if($_GET['act']=="view"||$_GET['act']=="viewsent"||$_GET['act']=="read") {
  28 ?>
  29 <div class="NavLinks"><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $ThemeSet['NavLinkIcon']; ?>Board index</a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Mailbox</a></div>
  30 <div>&nbsp;</div>
  31 <table class="Table3">
  32 <tr style="width: 100%; vertical-align: top;">
  33         <td style="width: 15%; vertical-align: top;">
  34         <div class="Table1Border">
  35         <table id="MessengerLinks" class="Table1" style="width: 100%; text-align: left; vertical-align: top;">
  36 <tr class="TableRow1">
  37 <td class="TableColumn1"><?php echo $ThemeSet['TitleIcon']; ?>Messenger</td>
  38 </tr><tr class="TableRow2">
  39 <td class="TableColumn2">&nbsp;</td>
  40 </tr><tr class="TableRow3">
  41 <td class="TableColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">View MailBox</a></td>
  42 </tr><tr class="TableRow3">
  43 <td class="TableColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">View SentBox</a></td>
  44 </tr><tr class="TableRow3">
  45 <td class="TableColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Send Message</a></td>
  46 </tr><tr class="TableRow4">
  47 <td class="TableColumn4">&nbsp;</td>
  48 </tr></table></div>
  49 </td>
  50         <td style="width: 85%; vertical-align: top;">
  51 <?php
  52 if($_GET['act']=="view") {
  53 //Get SQL LIMIT Number
  54 $nums = $_GET['page'] * $Settings['max_pmlist'];
  55 $PageLimit = $nums - $Settings['max_pmlist'];
  56 $query = query("SELECT SQL_CALC_FOUND_ROWS * FROM `".$Settings['sqltable']."messenger` WHERE `PMSentID`=%i ORDER BY `DateSend` DESC LIMIT %i,%i", array($_SESSION['UserID'],$PageLimit,$Settings['max_pmlist']));
  57 $rnquery = query("SELECT FOUND_ROWS();", array(null));
  58 $result=mysql_query($query);
  59 $rnresult=mysql_query($rnquery);
  60 $NumberMessage = mysql_result($rnresult,0);
  61 @mysql_free_result($rnresult);
  62 if($NumberMessage==null) {
  63         $NumberMessage = 0; }
  64 $num = $NumberMessage;
  65 $num=mysql_num_rows($result);
  66 //Start MessengerList Page Code
  67 if(!isset($Settings['max_pmlist'])) { $Settings['max_pmlist'] = 10; }
  68 if($_GET['page']==null) { $_GET['page'] = 1; }
  69 if($_GET['page']<=0) { $_GET['page'] = 1; }
  70 $nums = $_GET['page'] * $Settings['max_pmlist'];
  71 if($nums>$num) { $nums = $num; }
  72 $numz = $nums - $Settings['max_pmlist'];
  73 if($numz<=0) { $numz = 0; }
  74 //$i=$numz;
  75 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
  76 if($nums>=$num) { $nextpage = $_GET['page']; }
  77 if($numz>=$Settings['max_pmlist']) { $backpage = $_GET['page'] - 1; }
  78 if($_GET['page']<=1) { $backpage = 1; }
  79 $pnum = $num; $l = 1; $Pages = null;
  80 while ($pnum>0) {
  81 if($pnum>=$Settings['max_pmlist']) {
  82         $pnum = $pnum - $Settings['max_pmlist'];
  83         $Pages[$l] = $l; ++$l; }
  84 if($pnum<$Settings['max_pmlist']&&$pnum>0) {
  85         $pnum = $pnum - $pnum;
  86         $Pages[$l] = $l; ++$l; } }
  87 //End MessengerList Page Code
  88 $num=mysql_num_rows($result);
  89 $i=0;
  90 //List Page Number Code Start
  91 $pagenum=count($Pages);
  92 if($_GET['page']>$pagenum) {
  93         $_GET['page'] = $pagenum; }
  94 $pagei=0; $pstring = "<div class=\"PageList\">Pages: ";
  95 if($_GET['page']<4) { $Pagez[0] = null; }
  96 if($_GET['page']>=4) { $Pagez[0] = "First"; }
  97 if($_GET['page']>=3) {
  98 $Pagez[1] = $_GET['page'] - 2; }
  99 if($_GET['page']<3) {
 100 $Pagez[1] = null; }
 101 if($_GET['page']>=2) {
 102 $Pagez[2] = $_GET['page'] - 1; }
 103 if($_GET['page']<2) {
 104 $Pagez[2] = null; }
 105 $Pagez[3] = $_GET['page'];
 106 if($_GET['page']<$pagenum) {
 107 $Pagez[4] = $_GET['page'] + 1; }
 108 if($_GET['page']>=$pagenum) {
 109 $Pagez[4] = null; }
 110 $pagenext = $_GET['page'] + 1;
 111 if($pagenext<$pagenum) {
 112 $Pagez[5] = $_GET['page'] + 2; }
 113 if($pagenext>=$pagenum) {
 114 $Pagez[5] = null; }
 115 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 116 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 117 $pagenumi=count($Pagez);
 118 if($num==0) {
 119 $pagenumi = 0;
 120 $pstring = $pstring."<a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">1</a> "; }
 121 while ($pagei < $pagenumi) {
 122 if($Pagez[$pagei]!=null&&
 123    $Pagez[$pagei]!="First"&&
 124    $Pagez[$pagei]!="Last") {
 125 $pstring = $pstring."<a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a> "; }
 126 if($Pagez[$pagei]=="First") {
 127 $pstring = $pstring."<a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&lt; First</a> ... "; }
 128 if($Pagez[$pagei]=="Last") {
 129 $pstring = $pstring."... <a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">Last &gt;</a> "; }
 130         ++$pagei; } $pstring = $pstring."</div>";
 131 //echo $pstring;
 132 //List Page Number Code end
 133 ?>
 134 <div class="Table1Border">
 135 <?php if($ThemeSet['TableStyle']=="div") { ?>
 136 <div class="TableRow1">
 137 <span style="float: left;">
 138 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 139 </span><span style="float: right;"><?php echo $pstring; ?></span>&nbsp;</div>
 140 <?php } ?>
 141 <table class="Table1" style="width: 100%;">
 142 <?php if($ThemeSet['TableStyle']=="table") { ?>
 143 <tr class="TableRow1">
 144 <td class="TableColumn1" colspan="4"><span style="float: left;">
 145 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 146 </span><span style="float: right;"><?php echo $pstring; ?></span>&nbsp;</td>
 147 </tr><?php } ?>
 148 <tr id="Messenger" class="TableRow2">
 149 <th class="TableColumn2" style="width: 4%;">State</th>
 150 <th class="TableColumn2" style="width: 46%;">Message Name</th>
 151 <th class="TableColumn2" style="width: 25%;">Sender</th>
 152 <th class="TableColumn2" style="width: 25%;">Time</th>
 153 </tr>
 154 <?php
 155 while ($i < $num) {
 156 $PMID=mysql_result($result,$i,"id");
 157 $SenderID=mysql_result($result,$i,"SenderID");
 158 $SenderName = GetUserName($SenderID,$Settings['sqltable']);
 159 $SentToID=mysql_result($result,$i,"PMSentID");
 160 $SentToName = GetUserName($SentToID,$Settings['sqltable']);
 161 $PMGuest=mysql_result($result,$i,"GuestName");
 162 $MessageName=mysql_result($result,$i,"MessageTitle");
 163 $MessageDesc=mysql_result($result,$i,"Description");
 164 $DateSend=mysql_result($result,$i,"DateSend");
 165 $DateSend=GMTimeChange("F j, Y, g:i a",$DateSend,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 166 $MessageStat=mysql_result($result,$i,"Read");
 167 if($SenderName=="Guest") { $SenderName=$PMGuest;
 168 if($SenderName==null) { $SenderName="Guest"; } }
 169 $PreMessage = $ThemeSet['MessageUnread'];
 170 if ($MessageStat==0) {
 171         $PreMessage=$ThemeSet['MessageUnread']; }
 172 if ($MessageStat==1) {
 173         $PreMessage=$ThemeSet['MessageRead']; }
 174 ?>
 175 <tr class="TableRow3" id="Message<?php echo $PMID; ?>">
 176 <td class="TableColumn3"><div class="messagestate">
 177 <?php echo $PreMessage; ?></div></td>
 178 <td class="TableColumn3"><div class="messagename">
 179 <a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a></div>
 180 <div class="messagedesc"><?php echo $MessageDesc; ?></div></td>
 181 <td class="TableColumn3" style="text-align: center;"><?php
 182 if($SenderID!="-1") {
 183 echo "<a href=\"";
 184 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$SenderID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 185 echo "\">".$SenderName."</a>"; }
 186 if($SenderID=="-1") {
 187 echo "<span>".$SenderName."</span>"; }
 188 ?></td>
 189 <td class="TableColumn3" style="text-align: center;"><?php echo $DateSend; ?></td>
 190 </tr>
 191 <?php ++$i; } @mysql_free_result($result); ?>
 192 <tr id="MessengerEnd" class="TableRow4">
 193 <td class="TableColumn4" colspan="4">&nbsp;</td>
 194 </tr>
 195 <?php }
 196 if($_GET['act']=="viewsent") {
 197 //Get SQL LIMIT Number
 198 $nums = $_GET['page'] * $Settings['max_pmlist'];
 199 $PageLimit = $nums - $Settings['max_pmlist'];
 200 $query = query("SELECT SQL_CALC_FOUND_ROWS * FROM `".$Settings['sqltable']."messenger` WHERE `SenderID`=%i ORDER BY `DateSend` DESC LIMIT %i,%i", array($_SESSION['UserID'],$PageLimit,$Settings['max_pmlist']));
 201 $rnquery = query("SELECT FOUND_ROWS();", array(null));
 202 $result=mysql_query($query);
 203 $rnresult=mysql_query($rnquery);
 204 $NumberTopics = mysql_result($rnresult,0);
 205 @mysql_free_result($rnresult);
 206 if($NumberTopics==null) {
 207         $NumberTopics = 0; }
 208 $num = $NumberTopics;
 209 //Start MessengerList Page Code
 210 if(!isset($Settings['max_pmlist'])) { $Settings['max_pmlist'] = 10; }
 211 if($_GET['page']==null) { $_GET['page'] = 1; }
 212 if($_GET['page']<=0) { $_GET['page'] = 1; }
 213 $nums = $_GET['page'] * $Settings['max_pmlist'];
 214 if($nums>$num) { $nums = $num; }
 215 $numz = $nums - $Settings['max_pmlist'];
 216 if($numz<=0) { $numz = 0; }
 217 //$i=$numz;
 218 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
 219 if($nums>=$num) { $nextpage = $_GET['page']; }
 220 if($numz>=$Settings['max_pmlist']) { $backpage = $_GET['page'] - 1; }
 221 if($_GET['page']<=1) { $backpage = 1; }
 222 $pnum = $num; $l = 1; $Pages = null;
 223 while ($pnum>0) {
 224 if($pnum>=$Settings['max_pmlist']) {
 225         $pnum = $pnum - $Settings['max_pmlist'];
 226         $Pages[$l] = $l; ++$l; }
 227 if($pnum<$Settings['max_pmlist']&&$pnum>0) {
 228         $pnum = $pnum - $pnum;
 229         $Pages[$l] = $l; ++$l; } }
 230 //End MessengerList Page Code
 231 $num=mysql_num_rows($result);
 232 $i=0;
 233 //List Page Number Code Start
 234 $pagenum=count($Pages);
 235 if($_GET['page']>$pagenum) {
 236         $_GET['page'] = $pagenum; }
 237 $pagei=0; $pstring = "<div class=\"PageList\">Pages: ";
 238 if($_GET['page']<4) { $Pagez[0] = null; }
 239 if($_GET['page']>=4) { $Pagez[0] = "First"; }
 240 if($_GET['page']>=3) {
 241 $Pagez[1] = $_GET['page'] - 2; }
 242 if($_GET['page']<3) {
 243 $Pagez[1] = null; }
 244 if($_GET['page']>=2) {
 245 $Pagez[2] = $_GET['page'] - 1; }
 246 if($_GET['page']<2) {
 247 $Pagez[2] = null; }
 248 $Pagez[3] = $_GET['page'];
 249 if($_GET['page']<$pagenum) {
 250 $Pagez[4] = $_GET['page'] + 1; }
 251 if($_GET['page']>=$pagenum) {
 252 $Pagez[4] = null; }
 253 $pagenext = $_GET['page'] + 1;
 254 if($pagenext<$pagenum) {
 255 $Pagez[5] = $_GET['page'] + 2; }
 256 if($pagenext>=$pagenum) {
 257 $Pagez[5] = null; }
 258 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 259 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 260 $pagenumi=count($Pagez);
 261 if($num==0) {
 262 $pagenumi = 0;
 263 $pstring = $pstring."<a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">1</a> "; }
 264 while ($pagei < $pagenumi) {
 265 if($Pagez[$pagei]!=null&&
 266    $Pagez[$pagei]!="First"&&
 267    $Pagez[$pagei]!="Last") {
 268 $pstring = $pstring."<a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a> "; }
 269 if($Pagez[$pagei]=="First") {
 270 $pstring = $pstring."<a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&lt; First</a> ... "; }
 271 if($Pagez[$pagei]=="Last") {
 272 $pstring = $pstring."... <a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">Last &gt;</a> "; }
 273         ++$pagei; } $pstring = $pstring."</div>";
 274 //echo $pstring;
 275 //List Page Number Code end
 276 ?>
 277 <div class="Table1Border">
 278 <?php if($ThemeSet['TableStyle']=="div") { ?>
 279 <div class="TableRow1">
 280 <span style="float: left;">
 281 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 282 </span><span style="float: right;"><?php echo $pstring; ?></span>&nbsp;</div>
 283 <?php } ?>
 284 <table class="Table1" style="width: 100%;">
 285 <?php if($ThemeSet['TableStyle']=="table") { ?>
 286 <tr class="TableRow1">
 287 <td class="TableColumn1" colspan="4"><span style="float: left;">
 288 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 289 </span><span style="float: right;"><?php echo $pstring; ?></span>&nbsp;</td>
 290 </tr><?php } ?>
 291 <tr id="Messenger" class="TableRow2">
 292 <th class="TableColumn2" style="width: 4%;">State</th>
 293 <th class="TableColumn2" style="width: 46%;">Message Name</th>
 294 <th class="TableColumn2" style="width: 25%;">Sent To</th>
 295 <th class="TableColumn2" style="width: 25%;">Time</th>
 296 </tr>
 297 <?php
 298 while ($i < $num) {
 299 $PMID=mysql_result($result,$i,"id");
 300 $SenderID=mysql_result($result,$i,"SenderID");
 301 $SenderName = GetUserName($SenderID,$Settings['sqltable']);
 302 $SentToID=mysql_result($result,$i,"PMSentID");
 303 $SentToName = GetUserName($SentToID,$Settings['sqltable']);
 304 $PMGuest=mysql_result($result,$i,"GuestName");
 305 $MessageName=mysql_result($result,$i,"MessageTitle");
 306 $MessageDesc=mysql_result($result,$i,"Description");
 307 $DateSend=mysql_result($result,$i,"DateSend");
 308 $DateSend=GMTimeChange("F j, Y, g:i a",$DateSend,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 309 $MessageStat=mysql_result($result,$i,"Read");
 310 if($SenderName=="Guest") { $SenderName=$PMGuest;
 311 if($SenderName==null) { $SenderName="Guest"; } }
 312 $PreMessage = $ThemeSet['MessageUnread'];
 313 if ($MessageStat==0) {
 314         $PreMessage=$ThemeSet['MessageUnread']; }
 315 if ($MessageStat==1) {
 316         $PreMessage=$ThemeSet['MessageRead']; }
 317 ?>
 318 <tr class="TableRow3" id="Message<?php echo $PMID; ?>">
 319 <td class="TableColumn3"><div class="messagestate">
 320 <?php echo $PreMessage; ?></div></td>
 321 <td class="TableColumn3"><div class="messagename">
 322 <a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a></div>
 323 <div class="messagedesc"><?php echo $MessageDesc; ?></div></td>
 324 <td class="TableColumn3" style="text-align: center;"><?php
 325 if($SentToID!="-1") {
 326 echo "<a href=\"";
 327 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$SentToID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 328 echo "\">".$SentToName."</a>"; }
 329 if($SentToID=="-1") {
 330 echo "<span>".$SentToName."</span>"; }
 331 ?></td>
 332 <td class="TableColumn3" style="text-align: center;"><?php echo $DateSend; ?></td>
 333 </tr>
 334 <?php ++$i; } ?>
 335 <tr id="MessengerEnd" class="TableRow4">
 336 <td class="TableColumn4" colspan="4">&nbsp;</td>
 337 </tr>
 338 <?php } @mysql_free_result($result);
 339 if($_GET['act']=="read") {
 340 $query = query("SELECT * FROM `".$Settings['sqltable']."messenger` WHERE `id`=%i", array($_GET['id']));
 341 $result=mysql_query($query);
 342 $num=mysql_num_rows($result);
 343 $is=0;
 344 if($num==0) { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 345 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
 346 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 347 while ($is < $num) {
 348 $PMID=mysql_result($result,$is,"id");
 349 $SenderID=mysql_result($result,$is,"SenderID");
 350 $SenderName = GetUserName($SenderID,$Settings['sqltable']);
 351 $SentToID=mysql_result($result,$is,"PMSentID");
 352 $SentToName = GetUserName($SentToID,$Settings['sqltable']);
 353 $PMGuest=mysql_result($result,$is,"GuestName");
 354 $MessageName=mysql_result($result,$is,"MessageTitle");
 355 $DateSend=mysql_result($result,$is,"DateSend");
 356 $DateSend=GMTimeChange("F j, Y, g:i a",$DateSend,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 357 $MessageText=mysql_result($result,$is,"MessageText");
 358 $MessageText = preg_replace("/\<br\>/", "<br />\n", nl2br($MessageText));
 359 $MessageDesc=mysql_result($result,$is,"Description");
 360 $requery = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `id`=%i", array($SenderID));
 361 $reresult=mysql_query($requery);
 362 $renum=mysql_num_rows($reresult);
 363 $rei=0;
 364 if($_SESSION['UserID']!=$SentToID&&
 365         $_SESSION['UserID']!=$SenderID) {
 366 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 367 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
 368 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 369 while ($rei < $renum) {
 370 $User1ID=$SenderID;
 371 $User1Name=mysql_result($reresult,$rei,"Name");
 372 $User1Email=mysql_result($reresult,$rei,"Email");
 373 $User1Title=mysql_result($reresult,$rei,"Title");
 374 $User1Joined=mysql_result($reresult,$rei,"Joined");
 375 $User1Joined=GMTimeChange("M j Y",$User1Joined,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 376 $User1GroupID=mysql_result($reresult,$rei,"GroupID");
 377 $gquery = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `id`=%i", array($User1GroupID));
 378 $gresult=mysql_query($gquery);
 379 $User1Group=mysql_result($gresult,0,"Name");
 380 @mysql_free_result($gresult);
 381 $User1Signature=mysql_result($reresult,$rei,"Signature");
 382 $User1Avatar=mysql_result($reresult,$rei,"Avatar");
 383 $User1AvatarSize=mysql_result($reresult,$rei,"AvatarSize");
 384 if ($User1Avatar=="http://"||$User1Avatar==null||
 385         strtolower($User1Avatar)=="noavatar") {
 386 $User1Avatar=$ThemeSet['NoAvatar'];
 387 $User1AvatarSize=$ThemeSet['NoAvatarSize']; }
 388 $AvatarSize1=explode("x", $User1AvatarSize);
 389 $AvatarSize1W=$AvatarSize1[0]; $AvatarSize1H=$AvatarSize1[1];
 390 $User1Website=mysql_result($reresult,$rei,"Website");
 391 $User1PostCount=mysql_result($reresult,$rei,"PostCount");
 392 $User1Karma=mysql_result($reresult,$rei,"Karma");
 393 $User1IP=mysql_result($reresult,$rei,"IP");
 394 ++$rei; } @mysql_free_result($reresult);
 395 ++$is; } @mysql_free_result($result);
 396 if($_SESSION['UserID']==$SentToID) {
 397 $queryup = query("UPDATE `".$Settings['sqltable']."messenger` SET `Read`=%i WHERE `id`=%i", array(1,$_GET['id']));
 398 mysql_query($queryup); }
 399 if($User1Name=="Guest") { $User1Name=$PMGuest;
 400 if($User1Name==null) { $User1Name="Guest"; } }
 401 $MessageText = text2icons($MessageText,$Settings['sqltable']);
 402 $User1Signature = preg_replace("/\<br\>/", "<br />\n", nl2br($User1Signature));
 403 $User1Signature = text2icons($User1Signature,$Settings['sqltable']);
 404 ?>
 405 <div class="Table1Border">
 406 <?php if($ThemeSet['TableStyle']=="div") { ?>
 407 <div class="TableRow1">
 408 <span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a> ( <?php echo $MessageDesc; ?> )</span>
 409 </div>
 410 <?php } ?>
 411 <table class="Table1" style="width: 100%;">
 412 <?php if($ThemeSet['TableStyle']=="table") { ?>
 413 <tr class="TableRow1">
 414 <td class="TableColumn1" colspan="2"><span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a> ( <?php echo $MessageDesc; ?> )</span>
 415 </td>
 416 </tr><?php } ?>
 417 <tr class="TableRow2">
 418 <td class="TableColumn2" style="vertical-align: middle; width: 160px;">
 419 &nbsp;<?php
 420 if($User1ID!="-1") {
 421 echo "<a href=\"";
 422 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 423 echo "\">".$User1Name."</a>"; }
 424 if($User1ID=="-1") {
 425 echo "<span>".$User1Name."</span>"; }
 426 ?></td>
 427 <td class="TableColumn2" style="vertical-align: middle;">
 428 <div style="text-align: left; text-align: left;">
 429 <span style="font-weight: bold;">Time Sent: </span><?php echo $DateSend; ?>
 430 </div>
 431 <div style="text-align: right;">&nbsp;</div>
 432 </td>
 433 </tr>
 434 <tr>
 435 <td class="TableColumn3" style="vertical-align: top; width: 180px;">
 436  <?php  /* Avatar Table Thanks For SeanJ's Help at http://seanj.jcink.com/ */  ?>
 437  <table class="AvatarTable" style="width: 100px; height: 100px; text-align: center;">
 438         <tr class="AvatarRow" style="width: 100%; height: 100%;">
 439                 <td class="AvatarRow" style="width: 100%; height: 100%; text-align: center; vertical-align: middle;">
 440                 <img src="<?php echo $User1Avatar; ?>" alt="<?php echo $User1Name; ?>'s Avatar" title="<?php echo $User1Name; ?>'s Avatar" style="border: 0px; width: <?php echo $AvatarSize1W; ?>px; height: <?php echo $AvatarSize1H; ?>px;" />
 441                 </td>
 442         </tr>
 443  </table><br />
 444 <?php echo $User1Title; ?><br />
 445 Group: <?php echo $User1Group; ?><br />
 446 Member: <?php
 447 if($User1ID!="-1") { echo $User1ID; }
 448 if($User1ID=="-1") { echo 0; }
 449 ?><br />
 450 Posts: <?php echo $User1PostCount; ?><br />
 451 Karma: <?php echo $User1Karma; ?><br />
 452 Joined: <?php echo $User1Joined; ?><br /><br />
 453 </td>
 454 <td class="TableColumn3" style="vertical-align: middle;">
 455 <div class="pmpost"><?php echo $MessageText; ?></div>
 456 <?php if(isset($User1Signature)) { ?> <br />--------------------
 457 <div class="signature"><?php echo $User1Signature; ?></div><?php } ?>
 458 </td>
 459 </tr>
 460 <tr class="TableRow4">
 461 <td class="TableColumn4" colspan="2">
 462 <span style="text-align: left;">&nbsp;<a href="<?php
 463 if($User1ID!="-1") {
 464 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); }
 465 if($User1ID=="-1") {
 466 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 467 ?>"><?php echo $ThemeSet['Profile']; ?></a><?php echo $ThemeSet['LineDividerTopic']; ?><a href="<?php echo $User1Website; ?>" onclick="window.open(this.href);return false;"><?php echo $ThemeSet['WWW']; ?></a><?php echo $ThemeSet['LineDividerTopic']; ?><a href="<?php
 468 if($User1ID!="-1") {
 469 echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); }
 470 if($User1ID=="-1") {
 471 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 472 ?>"><?php echo $ThemeSet['PM']; ?></a></span>
 473 </td></tr>
 474 <?php } ?>
 475 </table></div>
 476 </td></tr>
 477 </table>
 478 <?php } if($_GET['act']=="create") {
 479 $SendMessageTo = null;
 480 if($_GET['id']!=null&&$_GET['id']!="-1") {
 481 $requery = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `id`=%i", array($_GET['id']));
 482 $reresult=mysql_query($requery);
 483 $renum=mysql_num_rows($reresult);
 484 $rei=0;
 485 while ($rei < $renum) {
 486 $SendMessageTo = mysql_result($reresult,$rei,"Name");
 487 $SendMessageTo = htmlspecialchars($SendMessageTo, ENT_QUOTES, $Settings['charset']);
 488 $SendToGroupID = mysql_result($reresult,$rei,"GroupID");
 489 ++$rei; } } @mysql_free_result($reresult);
 490 if(!isset($renum)) { $renum = 0; }
 491 if($renum==0) { $SendMessageTo = null; }
 492 ?>
 493 <div class="Table1Border">
 494 <?php if($ThemeSet['TableStyle']=="div") { ?>
 495 <div class="TableRow1">
 496 <span style="text-align: left;">
 497 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Seanding a Message</a></span></div>
 498 <?php } ?>
 499 <table class="Table1" id="MakeMessage">
 500 <?php if($ThemeSet['TableStyle']=="table") { ?>
 501 <tr class="TableRow1" id="MessageStart">
 502 <td class="TableColumn1" colspan="2"><span style="text-align: left;">
 503 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Seanding a Message</a></span>
 504 </td>
 505 </tr><?php } ?>
 506 <tr id="MakeMessageRow" class="TableRow2">
 507 <td class="TableColumn2" colspan="2" style="width: 100%;">Making a Message</td>
 508 </tr>
 509 <tr class="TableRow3" id="MkMessage">
 510 <td class="TableColumn3" style="width: 15%; vertical-align: middle; text-align: center;">
 511 <div style="width: 100%; height: 160px; overflow: auto;">
 512 <table style="width: 100%; text-align: center;"><?php
 513 $renee_query=query("SELECT * FROM `".$Settings['sqltable']."smileys` WHERE `Show`='yes'", array(null));
 514 $renee_result=mysql_query($renee_query);
 515 $renee_num=mysql_num_rows($renee_result);
 516 $renee_s=0; $SmileRow=0; $SmileCRow=0;
 517 while ($renee_s < $renee_num) { ++$SmileRow;
 518 $FileName=mysql_result($renee_result,$renee_s,"FileName");
 519 $SmileName=mysql_result($renee_result,$renee_s,"SmileName");
 520 $SmileText=mysql_result($renee_result,$renee_s,"SmileText");
 521 $SmileDirectory=mysql_result($renee_result,$renee_s,"Directory");
 522 $ShowSmile=mysql_result($renee_result,$renee_s,"Show");
 523 $ReplaceType=mysql_result($renee_result,$renee_s,"ReplaceCI");
 524 if($SmileRow==1) { ?><tr>
 525         <?php } if($SmileRow<5) { ++$SmileCRow; ?>
 526         <td>&nbsp;<img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('ReplyPost','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" />&nbsp;</td>
 527         <?php } if($SmileRow==5) { ++$SmileCRow; ?>
 528         <td>&nbsp;<img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('ReplyPost','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" />&nbsp;</td></tr>
 529         <?php $SmileCRow=0; $SmileRow=0; }
 530 ++$renee_s; }
 531 if($SmileCRow<5&&$SmileCRow!=0) {
 532 $SmileCRowL = 5 - $SmileCRow;
 533 echo "<td colspan=\"".$SmileCRowL."\">&nbsp;</td></tr>"; }
 534 echo "</table>";
 535 @mysql_free_result($renee_result);
 536 ?></div></td>
 537 <td class="TableColumn3" style="width: 85%;">
 538 <form style="display: inline;" method="post" id="MkReplyForm" action="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">
 539 <table style="text-align: left;">
 540 <tr style="text-align: left;">
 541         <td style="width: 50%;"><label class="TextBoxLabel" for="SendMessageTo">Insert UserName:</label></td>
 542         <td style="width: 50%;"><input maxlength="25" type="text" name="SendMessageTo" class="TextBox" id="SendMessageTo" size="20" value="<?php echo $SendMessageTo; ?>" /></td>
 543 </tr><tr style="text-align: left;">
 544         <td style="width: 50%;"><label class="TextBoxLabel" for="MessageName">Insert Message Name:</label></td>
 545         <td style="width: 50%;"><input maxlength="30" type="text" name="MessageName" class="TextBox" id="MessageName" size="20" /></td>
 546 </tr><tr style="text-align: left;">
 547         <td style="width: 50%;"><label class="TextBoxLabel" for="MessageDesc">Insert Message Description:</label></td>
 548         <td style="width: 50%;"><input maxlength="45" type="text" name="MessageDesc" class="TextBox" id="MessageDesc" size="20" /></td>
 549 </tr><?php if($_SESSION['UserGroup']==$Settings['GuestGroup']) { ?><tr style="text-align: left;">
 550         <td style="width: 50%;"><label class="TextBoxLabel" for="GuestName">Insert Guest Name:</label></td>
 551         <?php if(!isset($_SESSION['GuestName'])) { ?>
 552         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" /></td>
 553         <?php } if(isset($_SESSION['GuestName'])) { ?>
 554         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" value="<?php echo $_SESSION['GuestName']; ?>" /></td>
 555 <?php } ?></tr><?php } ?>
 556 </table>
 557 <table style="text-align: left;">
 558 <tr style="text-align: left;">
 559 <td style="width: 100%;">
 560 <label class="TextBoxLabel" for="Message">Insert Your Message:</label><br />
 561 <textarea rows="10" name="Message" id="Message" cols="40" class="TextBox"></textarea><br />
 562 <?php if($_SESSION['UserGroup']==$Settings['GuestGroup']&&$Settings['captcha_guest']=="on") { ?>
 563 <label class="TextBoxLabel" for="signcode"><img src="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=MkCaptcha",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>" alt="CAPTCHA Code" title="CAPTCHA Code" /></label><br />
 564 <input maxlength="25" type="text" class="TextBox" name="signcode" size="20" id="signcode" value="Enter SignCode" /><br />
 565 <?php } ?>
 566 <input type="hidden" name="act" value="sendmessages" style="display: none;" />
 567 <?php if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { ?>
 568 <input type="hidden" name="GuestName" value="null" style="display: none;" />
 569 <?php } ?>
 570 <input type="submit" class="Button" value="Send Message" name="send_message" />
 571 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 572 </td></tr></table>
 573 </form></td></tr>
 574 <tr id="MkReplyEnd" class="TableRow4">
 575 <td class="TableColumn4" colspan="2">&nbsp;</td>
 576 </tr>
 577 </table></div>
 578 <?php } if($_GET['act']=="sendmessage"&&$_POST['act']=="sendmessages") {
 579 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
 580 $URL['REFERER'] = $REFERERurl['host'];
 581 $URL['HOST'] = $_SERVER["SERVER_NAME"];
 582 $REFERERurl = null;
 583 if(!isset($_POST['SendMessageTo'])) { $_POST['SendMessageTo'] = null; }
 584 if(!isset($_POST['MessageName'])) { $_POST['MessageName'] = null; }
 585 if(!isset($_POST['MessageDesc'])) { $_POST['MessageDesc'] = null; }
 586 if(!isset($_POST['Message'])) { $_POST['Message'] = null; }
 587 if(!isset($_POST['GuestName'])) { $_POST['GuestName'] = null; }
 588 if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 589         $Settings['captcha_guest']=="on") {
 590 require($SettDir['inc']."captcha.php"); }
 591 ?>
 592 <div class="Table1Border">
 593 <?php if($ThemeSet['TableStyle']=="div") { ?>
 594 <div class="TableRow1">
 595 <span style="text-align: left;">
 596 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Making a Message</a></span></div>
 597 <?php } ?>
 598 <table class="Table1">
 599 <?php if($ThemeSet['TableStyle']=="table") { ?>
 600 <tr class="TableRow1">
 601 <td class="TableColumn1"><span style="text-align: left;">
 602 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Making a Message</a></span>
 603 </td>
 604 </tr><?php } ?>
 605 <tr class="TableRow2">
 606 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Make Message: </th>
 607 </tr>
 608 <tr class="TableRow3">
 609 <td class="TableColumn3">
 610 <table style="width: 100%; height: 25%; text-align: center;">
 611 <?php if (pre_strlen($_POST['SendMessageTo'])>="25") { $Error="Yes";  ?>
 612 <tr>
 613         <td><span class="TableMessage">
 614         <br />Send to user name too big.<br />
 615         </span>&nbsp;</td>
 616 </tr>
 617 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 618         $Settings['captcha_guest']=="on") {
 619 if (PhpCaptcha::Validate($_POST['signcode'])) {
 620 //echo 'Valid code entered';
 621 } else { $Error="Yes"; ?>
 622 <tr>
 623         <td><span class="TableMessage">
 624         <br />Invalid code entered<br />
 625         </span>&nbsp;</td>
 626 </tr>
 627 <?php } } if ($_POST['SendMessageTo']==null) { $Error="Yes";  ?>
 628 <tr>
 629         <td><span class="TableMessage">
 630         <br />You need to enter a user name to send message to.<br />
 631         </span>&nbsp;</td>
 632 </tr>
 633 <?php } if (pre_strlen($_POST['MessageName'])>="30") { $Error="Yes";  ?>
 634 <tr>
 635         <td><span class="TableMessage">
 636         <br />Message Name is too big.<br />
 637         </span>&nbsp;</td>
 638 </tr>
 639 <?php } if (pre_strlen($_POST['MessageDesc'])>="45") { $Error="Yes";  ?>
 640 <tr>
 641         <td><span class="TableMessage">
 642         <br />Message Description is too big.<br />
 643         </span>&nbsp;</td>
 644 </tr>
 645 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 646         pre_strlen($_POST['GuestName'])>="25") { $Error="Yes"; ?>
 647 <tr>
 648         <td><span class="TableMessage">
 649         <br />You Guest Name is too big.<br />
 650         </span>&nbsp;</td>
 651 </tr>
 652 <?php } if ($Settings['TestReferer']===true) {
 653         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
 654 <tr>
 655         <td><span class="TableMessage">
 656         <br />Sorry the referering url dose not match our host name.<br />
 657         </span>&nbsp;</td>
 658 </tr>
 659 <?php } }
 660 $_POST['MessageName'] = stripcslashes(htmlspecialchars($_POST['MessageName'], ENT_QUOTES, $Settings['charset']));
 661 //$_POST['MessageName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['MessageName']);
 662 $_POST['MessageName'] = @remove_spaces($_POST['MessageName']);
 663 $_POST['MessageDesc'] = stripcslashes(htmlspecialchars($_POST['MessageDesc'], ENT_QUOTES, $Settings['charset']));
 664 //$_POST['MessageDesc'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['MessageDesc']);
 665 $_POST['MessageDesc'] = @remove_spaces($_POST['MessageDesc']);
 666 $_POST['SendMessageTo'] = stripcslashes(htmlspecialchars($_POST['SendMessageTo'], ENT_QUOTES, $Settings['charset']));
 667 //$_POST['SendMessageTo'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['SendMessageTo']);
 668 $_POST['SendMessageTo'] = @remove_spaces($_POST['SendMessageTo']);
 669 $_POST['GuestName'] = stripcslashes(htmlspecialchars($_POST['GuestName'], ENT_QUOTES, $Settings['charset']));
 670 //$_POST['GuestName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['GuestName']);
 671 $_POST['GuestName'] = @remove_spaces($_POST['GuestName']);
 672 $_POST['Message'] = stripcslashes(htmlspecialchars($_POST['Message'], ENT_QUOTES, $Settings['charset']));
 673 //$_POST['Message'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['Message']);
 674 //$_POST['Message'] = @remove_spaces($_POST['Message']);
 675 $_POST['Message'] = remove_bad_entities($_POST['Message']);
 676 if($_SESSION['UserGroup']==$Settings['GuestGroup']) {
 677 if(isset($_POST['GuestName'])&&$_POST['GuestName']!=null) {
 678 @setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir);
 679 $_SESSION['GuestName']=$_POST['GuestName']; } }
 680 /*    <_<  iWordFilter  >_>
 681    by Kazuki Przyborowski - Cool Dude 2k */
 682 $katarzynaqy=query("SELECT * FROM `".$Settings['sqltable']."wordfilter`", array(null));
 683 $katarzynart=mysql_query($katarzynaqy);
 684 $katarzynanm=mysql_num_rows($katarzynart);
 685 $katarzynas=0;
 686 while ($katarzynas < $katarzynanm) {
 687 $Filter=mysql_result($katarzynart,$katarzynas,"Filter");
 688 $Replace=mysql_result($katarzynart,$katarzynas,"Replace");
 689 $CaseInsensitive=mysql_result($katarzynart,$katarzynas,"CaseInsensitive");
 690 if($CaseInsensitive=="on") { $CaseInsensitive = "yes"; }
 691 if($CaseInsensitive=="off") { $CaseInsensitive = "no"; }
 692 if($CaseInsensitive!="yes"||$CaseInsensitive!="no") { $CaseInsensitive = "no"; }
 693 $WholeWord=mysql_result($katarzynart,$katarzynas,"WholeWord");
 694 if($WholeWord=="on") { $WholeWord = "yes"; }
 695 if($WholeWord=="off") { $WholeWord = "no"; }
 696 if($WholeWord!="yes"&&$WholeWord!="no") { $WholeWord = "no"; }
 697 $Filter = preg_quote($Filter, "/");
 698 if($CaseInsensitive!="yes"&&$WholeWord=="yes") {
 699 $_POST['Message'] = preg_replace("/\b(".$Filter.")\b/", $Replace, $_POST['Message']);
 700 $_POST['MessageDesc'] = preg_replace("/\b(".$Filter.")\b/", $Replace, $_POST['MessageDesc']); }
 701 if($CaseInsensitive=="yes"&&$WholeWord=="yes") {
 702 $_POST['Message'] = preg_replace("/\b(".$Filter.")\b/i", $Replace, $_POST['Message']);
 703 $_POST['MessageDesc'] = preg_replace("/\b(".$Filter.")\b/i", $Replace, $_POST['MessageDesc']); }
 704 if($CaseInsensitive!="yes"&&$WholeWord!="yes") {
 705 $_POST['Message'] = preg_replace("/".$Filter."/", $Replace, $_POST['Message']);
 706 $_POST['MessageDesc'] = preg_replace("/".$Filter."/", $Replace, $_POST['MessageDesc']); }
 707 if($CaseInsensitive=="yes"&&$WholeWord!="yes") {
 708 $_POST['Message'] = preg_replace("/".$Filter."/i", $Replace, $_POST['Message']);
 709 $_POST['MessageDesc'] = preg_replace("/".$Filter."/i", $Replace, $_POST['MessageDesc']); }
 710 ++$katarzynas; } @mysql_free_result($katarzynart);
 711 $lonewolfqy=query("SELECT * FROM `".$Settings['sqltable']."restrictedwords` WHERE `RestrictedMessageName`='yes' or `RestrictedUserName`='yes'", array(null));
 712 $lonewolfrt=mysql_query($lonewolfqy);
 713 $lonewolfnm=mysql_num_rows($lonewolfrt);
 714 $lonewolfs=0; $RMatches = null; $RGMatches = null;
 715 while ($lonewolfs < $lonewolfnm) {
 716 $RWord=mysql_result($lonewolfrt,$lonewolfs,"Word");
 717 $RCaseInsensitive=mysql_result($lonewolfrt,$lonewolfs,"CaseInsensitive");
 718 if($RCaseInsensitive=="on") { $RCaseInsensitive = "yes"; }
 719 if($RCaseInsensitive=="off") { $RCaseInsensitive = "no"; }
 720 if($RCaseInsensitive!="yes"||$RCaseInsensitive!="no") { $RCaseInsensitive = "no"; }
 721 $RWholeWord=mysql_result($lonewolfrt,$lonewolfs,"WholeWord");
 722 if($RWholeWord=="on") { $RWholeWord = "yes"; }
 723 if($RWholeWord=="off") { $RWholeWord = "no"; }
 724 if($RWholeWord!="yes"||$RWholeWord!="no") { $RWholeWord = "no"; }
 725 $RestrictedMessageName=mysql_result($lonewolfrt,$lonewolfs,"RestrictedMessageName");
 726 if($RestrictedMessageName=="on") { $RestrictedMessageName = "yes"; }
 727 if($RestrictedMessageName=="off") { $RestrictedMessageName = "no"; }
 728 if($RestrictedMessageName!="yes"||$RestrictedMessageName!="no") { $RestrictedMessageName = "no"; }
 729 $RestrictedUserName=mysql_result($lonewolfrt,$lonewolfs,"RestrictedUserName");
 730 if($RestrictedUserName=="on") { $RestrictedUserName = "yes"; }
 731 if($RestrictedUserName=="off") { $RestrictedUserName = "no"; }
 732 if($RestrictedUserName!="yes"||$RestrictedUserName!="no") { $RestrictedUserName = "no"; }
 733 $RWord = preg_quote($RWord, "/");
 734 if($RCaseInsensitive!="yes"&&$RWholeWord=="yes") {
 735 if($RestrictedMessageName=="yes") {
 736 $RMatches = preg_match("/\b(".$RWord.")\b/", $_POST['MessageName']);
 737         if($RMatches==true) { break 1; } }
 738 if($RestrictedUserName=="yes") {
 739 $RGMatches = preg_match("/\b(".$RWord.")\b/", $_POST['GuestName']);
 740         if($RGMatches==true) { break 1; } } }
 741 if($RCaseInsensitive=="yes"&&$RWholeWord=="yes") {
 742 if($RestrictedMessageName=="yes") {
 743 $RMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['MessageName']);
 744         if($RMatches==true) { break 1; } }
 745 if($RestrictedUserName=="yes") {
 746 $RGMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['GuestName']);
 747         if($RGMatches==true) { break 1; } } }
 748 if($RCaseInsensitive!="yes"&&$RWholeWord!="yes") {
 749 if($RestrictedMessageName=="yes") {
 750 $RMatches = preg_match("/".$RWord."/", $_POST['MessageName']);
 751         if($RMatches==true) { break 1; } }
 752 if($RestrictedUserName=="yes") {
 753 $RGMatches = preg_match("/".$RWord."/", $_POST['GuestName']);
 754         if($RGMatches==true) { break 1; } } }
 755 if($RCaseInsensitive=="yes"&&$RWholeWord!="yes") {
 756 if($RestrictedMessageName=="yes") {
 757 $RMatches = preg_match("/".$RWord."/i", $_POST['MessageName']);
 758         if($RMatches==true) { break 1; } }
 759 if($RestrictedUserName=="yes") {
 760 $RGMatches = preg_match("/".$RWord."/i", $_POST['GuestName']);
 761         if($RGMatches==true) { break 1; } } }
 762 ++$lonewolfs; } @mysql_free_result($lonewolfrt);
 763 $requery = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `Name`='%s'", array($_POST['SendMessageTo']));
 764 $reresult=mysql_query($requery);
 765 $renum=mysql_num_rows($reresult);
 766 $rei=0;
 767 while ($rei < $renum) {
 768 $SendMessageToID = mysql_result($reresult,$rei,"id");
 769 $SendToGroupID = mysql_result($reresult,$rei,"GroupID");
 770 $gquery = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `id`=%i", array($SendToGroupID));
 771 $gresult=mysql_query($gquery);
 772 $SendUserCanPM=mysql_result($gresult,0,"CanPM");
 773 $SendUserCanPM = strtolower($SendUserCanPM);
 774 if($SendUserCanPM!="yes"&&$SendUserCanPM!="no") {
 775         $SendUserCanPM = "no"; }
 776 @mysql_free_result($gresult);
 777 ++$rei; } @mysql_free_result($reresult);
 778 if($renum==0) { $Error="Yes"; ?>
 779 <tr>
 780         <td><span class="TableMessage">
 781         <br />Cound not find users name.<br />
 782         </span>&nbsp;</td>
 783 </tr>
 784 <?php } if ($_POST['MessageName']==null) { $Error="Yes";  ?>
 785 <tr>
 786         <td><span class="TableMessage">
 787         <br />You need to enter a Message Name.<br />
 788         </span>&nbsp;</td>
 789 </tr>
 790 <?php } if ($_POST['MessageDesc']==null) { $Error="Yes";  ?>
 791 <tr>
 792         <td><span class="TableMessage">
 793         <br />You need to enter a Message Description.<br />
 794         </span>&nbsp;</td>
 795 </tr>
 796 <?php } if ($SendUserCanPM=="no") { $Error="Yes";  ?>
 797 <tr>
 798         <td><span class="TableMessage">
 799         <br />User Name enter can not get messages.<br />
 800         </span>&nbsp;</td>
 801 </tr>
 802 <?php } if ($_POST['Message']==null) { $Error="Yes";  ?>
 803 <tr>
 804         <td><span class="TableMessage">
 805         <br />You need to enter a Message.<br />
 806         </span>&nbsp;</td>
 807 </tr>
 808 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 809         $_POST['GuestName']==null) { $Error="Yes"; ?>
 810 <tr>
 811         <td><span class="TableMessage">
 812         <br />You need to enter a Guest Name.<br />
 813         </span>&nbsp;</td>
 814 </tr>
 815 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 816         $RGMatches==true) { $Error="Yes"; ?>
 817 <tr>
 818         <td><span class="TableMessage">
 819         <br />This Guest Name is restricted to use.<br />
 820         </span>&nbsp;</td>
 821 </tr>
 822 <?php } if($RMatches==true) { $Error="Yes"; ?>
 823 <tr>
 824         <td><span class="TableMessage">
 825         <br />This Message Name is restricted to use.<br />
 826         </span>&nbsp;</td>
 827 </tr>
 828 <?php } if ($Error=="Yes") {
 829 @redirect("refresh",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false),"4"); ?>
 830 <tr>
 831         <td><span class="TableMessage">
 832         <br />Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to goto index page.<br />&nbsp;
 833         </span><br /></td>
 834 </tr>
 835 <?php } if ($Error!="Yes") { $LastActive = GMTimeStamp();
 836 $messageid = getnextid($Settings['sqltable'],"messenger");
 837 if($_SESSION['UserGroup']==$Settings['GuestGroup']) { $User1Name = $_POST['GuestName']; }
 838 if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { $User1Name = $_SESSION['MemberName']; }
 839 $query = query("INSERT INTO `".$Settings['sqltable']."messenger` VALUES (".$messageid.",%i,%i,'%s','%s','%s','%s',%i,%i)", array($_SESSION['UserID'],$SendMessageToID,$_SESSION['MemberName'],$_POST['MessageName'],$_POST['Message'],$_POST['MessageDesc'],$LastActive,0));
 840 mysql_query($query);
 841 ?><tr>
 842         <td><span class="TableMessage"><br />
 843         Message sent to user <?php echo $_POST['SendMessageTo']; ?>.<br />
 844         Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to go back to index.<br />&nbsp;
 845         </span><br /></td>
 846 </tr>
 847 <?php } ?>
 848 </table>
 849 </td></tr>
 850 <tr class="TableRow4">
 851 <td class="TableColumn4">&nbsp;</td>
 852 </tr>
 853 </table></div>
 854 <?php } ?>
 855 <div>&nbsp;</div>