inc/messages.php

   1 <?php
   2 /*
   3     This program is free software; you can redistribute it and/or modify
   4     it under the terms of the Revised BSD License.
   5
   6     This program is distributed in the hope that it will be useful,
   7     but WITHOUT ANY WARRANTY; without even the implied warranty of
   8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9     Revised BSD License for more details.
  10
  11     Copyright 2004-2019 iDB Support - https://idb.osdn.jp/support/category.php?act=view&id=1
  12     Copyright 2004-2019 Game Maker 2k - https://idb.osdn.jp/support/category.php?act=view&id=2
  13
  14     $FileInfo: messages.php - Last Update: 08/02/2019 SVN 905 - Author: cooldude2k $
  15 */
  16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
  17 if ($File3Name=="messages.php"||$File3Name=="/messages.php") {
  18         require('index.php');
  19         exit(); }
  20 if(!is_numeric($_GET['id'])) { $_GET['id'] = null; }
  21 if(!is_numeric($_GET['post'])) { $_GET['post'] = null; }
  22 if(!is_numeric($_GET['page'])) { $_GET['page'] = 1; }
  23 // Check if we can read/send PM
  24 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanPM']=="no") {
  25 redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
  26 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
  27 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
  28 if(isset($_SESSION['OldViewingPage'])) { $_SESSION['AncientViewingPage'] = $_SESSION['OldViewingPage']; } else { $_SESSION['AncientViewingPage'] = url_maker(null,"no+ext","act=view","&","=",$prexqstr['index'],$exqstr['index']); }
  29 if(isset($_SESSION['OldViewingFile'])) { $_SESSION['AncientViewingFile'] = $_SESSION['OldViewingFile']; } else {
  30          if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
  31             $_SESSION['AncientViewingFile'] = $exfile['index'].$Settings['file_ext']; }
  32          if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
  33             $_SESSION['AncientViewingFile'] = $exfile['index']; } }
  34 if(isset($_SESSION['OldPreViewingTitle'])) { $_SESSION['AncientPreViewingTitle'] = $_SESSION['OldPreViewingTitle']; } else { $_SESSION['AncientPreViewingTitle'] = "Viewing"; }
  35 if(isset($_SESSION['OldViewingTitle'])) { $_SESSION['AncientViewingTitle'] = $_SESSION['OldViewingTitle']; } else { $_SESSION['AncientViewingTitle'] = "Board index"; }
  36 if(isset($_SESSION['OldExtraData'])) { $_SESSION['AncientExtraData'] = $_SESSION['OldExtraData']; } else { $_SESSION['AncientExtraData'] = "currentact:view; currentcategoryid:0; currentforumid:0; currenttopicid:0; currentmessageid:0; currenteventid:0; currentmemberid:0;"; }
  37 if(isset($_SESSION['ViewingPage'])) { $_SESSION['OldViewingPage'] = $_SESSION['ViewingPage']; } else { $_SESSION['OldViewingPage'] = url_maker(null,"no+ext","act=view","&","=",$prexqstr['index'],$exqstr['index']); }
  38 if(isset($_SESSION['ViewingFile'])) { $_SESSION['OldViewingFile'] = $_SESSION['ViewingFile']; } else {
  39          if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
  40             $_SESSION['OldViewingFile'] = $exfile['index'].$Settings['file_ext']; }
  41          if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
  42             $_SESSION['OldViewingFile'] = $exfile['index']; } }
  43 if(isset($_SESSION['PreViewingTitle'])) { $_SESSION['OldPreViewingTitle'] = $_SESSION['PreViewingTitle']; } else { $_SESSION['OldPreViewingTitle'] = "Viewing"; }
  44 if(isset($_SESSION['ViewingTitle'])) { $_SESSION['OldViewingTitle'] = $_SESSION['ViewingTitle']; } else { $_SESSION['OldViewingTitle'] = "Board index"; }
  45 if(isset($_SESSION['ExtraData'])) { $_SESSION['OldExtraData'] = $_SESSION['ExtraData']; } else { $_SESSION['OldExtraData'] = "currentact:view; currentcategoryid:0; currentforumid:0; currenttopicid:0; currentmessageid:0; currenteventid:0; currentmemberid:0;"; }
  46 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=view","&","=",$prexqstr['index'],$exqstr['index']);
  47 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
  48 $_SESSION['ViewingFile'] = $exfile['index'].$Settings['file_ext']; }
  49 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
  50 $_SESSION['ViewingFile'] = $exfile['index']; }
  51 $_SESSION['PreViewingTitle'] = "Viewing";
  52 $_SESSION['ViewingTitle'] = "Messages";
  53 $_SESSION['ExtraData'] = "currentact:".$_GET['act']."; currentcategoryid:0; currentforumid:0; currenttopicid:0; currentmessageid:0; currenteventid:0; currentmemberid:0;";
  54 if($_GET['act']=="view"||$_GET['act']=="viewsent"||$_GET['act']=="read") {
  55 ?>
  56 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Mailbox</a></div>
  57 <div class="DivNavLinks">&nbsp;</div>
  58 <table class="Table3">
  59 <tr style="width: 100%; vertical-align: top;">
  60         <td style="width: 15%; vertical-align: top;">
  61         <div class="TableSMenuBorder">
  62 <?php if($ThemeSet['TableStyle']=="div") { ?>
  63 <div class="TableSMenuRow1">
  64 <?php echo $ThemeSet['TitleIcon']; ?>Messenger</div>
  65 <?php } ?>
  66 <table id="ProfileLinks" class="TableSMenu" style="width: 100%; text-align: left; vertical-align: top;">
  67 <?php if($ThemeSet['TableStyle']=="table") { ?>
  68 <tr class="TableSMenuRow1">
  69 <td class="TableSMenuColumn1"><?php echo $ThemeSet['TitleIcon']; ?>Messenger</td>
  70 </tr><?php } ?>
  71 <tr class="TableSMenuRow2">
  72 <td class="TableSMenuColumn2">&nbsp;</td>
  73 </tr><tr class="TableSMenuRow3">
  74 <td class="TableSMenuColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">View MailBox</a></td>
  75 </tr><tr class="TableSMenuRow3">
  76 <td class="TableSMenuColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">View SentBox</a></td>
  77 </tr><tr class="TableSMenuRow3">
  78 <td class="TableSMenuColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Send Message</a></td>
  79 </tr><tr class="TableSMenuRow4">
  80 <td class="TableSMenuColumn4">&nbsp;</td>
  81 </tr></table></div>
  82 </td>
  83         <td style="width: 85%; vertical-align: top;">
  84 <?php
  85 if($_GET['act']=="view") {
  86 //Get SQL LIMIT Number
  87 $nums = $_GET['page'] * $Settings['max_pmlist'];
  88 $PageLimit = $nums - $Settings['max_pmlist'];
  89 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"ReciverID\"=%i ORDER BY \"DateSend\" DESC ".$SQLimit, array($_SESSION['UserID'],$PageLimit,$Settings['max_pmlist']));
  90 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."messenger\" WHERE \"ReciverID\"=%i", array($_SESSION['UserID']));
  91 $result=sql_query($query,$SQLStat);
  92 $rnresult=sql_query($rnquery,$SQLStat);
  93 $NumberMessage = sql_result($rnresult,0);
  94 sql_free_result($rnresult);
  95 if($NumberMessage==null) {
  96         $NumberMessage = 0; }
  97 $num = $NumberMessage;
  98 $num=sql_num_rows($result);
  99 //Start MessengerList Page Code
 100 if(!isset($Settings['max_pmlist'])) { $Settings['max_pmlist'] = 10; }
 101 if($_GET['page']==null) { $_GET['page'] = 1; }
 102 if($_GET['page']<=0) { $_GET['page'] = 1; }
 103 $nums = $_GET['page'] * $Settings['max_pmlist'];
 104 if($nums>$num) { $nums = $num; }
 105 $numz = $nums - $Settings['max_pmlist'];
 106 if($numz<=0) { $numz = 0; }
 107 //$i=$numz;
 108 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
 109 if($nums>=$num) { $nextpage = $_GET['page']; }
 110 if($numz>=$Settings['max_pmlist']) { $backpage = $_GET['page'] - 1; }
 111 if($_GET['page']<=1) { $backpage = 1; }
 112 $pnum = $num; $l = 1; $Pages = null;
 113 while ($pnum>0) {
 114 if($pnum>=$Settings['max_pmlist']) {
 115         $pnum = $pnum - $Settings['max_pmlist'];
 116         $Pages[$l] = $l; ++$l; }
 117 if($pnum<$Settings['max_pmlist']&&$pnum>0) {
 118         $pnum = $pnum - $pnum;
 119         $Pages[$l] = $l; ++$l; } }
 120 //End MessengerList Page Code
 121 $num=sql_num_rows($result);
 122 $i=0;
 123 //List Page Number Code Start
 124 $pagenum=count($Pages);
 125 if($_GET['page']>$pagenum) {
 126         $_GET['page'] = $pagenum; }
 127 $pagei=0; $pstring = null;
 128 if($pagenum>1) {
 129 $pstring = "<div class=\"PageList\"><span class=\"pagelink\">".$pagenum." Pages:</span> "; }
 130 if($_GET['page']<4) { $Pagez[0] = null; }
 131 if($_GET['page']>=4) { $Pagez[0] = "First"; }
 132 if($_GET['page']>=3) {
 133 $Pagez[1] = $_GET['page'] - 2; }
 134 if($_GET['page']<3) {
 135 $Pagez[1] = null; }
 136 if($_GET['page']>=2) {
 137 $Pagez[2] = $_GET['page'] - 1; }
 138 if($_GET['page']<2) {
 139 $Pagez[2] = null; }
 140 $Pagez[3] = $_GET['page'];
 141 if($_GET['page']<$pagenum) {
 142 $Pagez[4] = $_GET['page'] + 1; }
 143 if($_GET['page']>=$pagenum) {
 144 $Pagez[4] = null; }
 145 $pagenext = $_GET['page'] + 1;
 146 if($pagenext<$pagenum) {
 147 $Pagez[5] = $_GET['page'] + 2; }
 148 if($pagenext>=$pagenum) {
 149 $Pagez[5] = null; }
 150 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 151 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 152 $pagenumi=count($Pagez);
 153 if($num==0) {
 154 $pagenumi = 0;
 155 $pstring = null; }
 156 if($pagenum>1) {
 157 while ($pagei < $pagenumi) {
 158 if($_GET['page']!=1&&$pagei==1) {
 159 $Pback = $_GET['page'] - 1;
 160 $pstring = $pstring."<span class=\"pagelink\">a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pback,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&lt;</a></span> "; }
 161 if($Pagez[$pagei]!=null&&
 162    $Pagez[$pagei]!="First"&&
 163    $Pagez[$pagei]!="Last") {
 164 if($pagei!=3) {
 165 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; }
 166 if($pagei==3) {
 167 $pstring = $pstring."<span class=\"pagecurrent\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; } }
 168 if($Pagez[$pagei]=="First") {
 169 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&laquo;</a></span> "; }
 170 if($Pagez[$pagei]=="Last") {
 171 $ptestnext = $pagenext + 1;
 172 $paget = $pagei - 1;
 173 $Pnext = $_GET['page'] + 1;
 174 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pnext,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&gt;</a></span> ";
 175 if($ptestnext<$pagenum) {
 176 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&raquo;</a></span> "; } }
 177         ++$pagei; } $pstring = $pstring."</div>"; }
 178 //echo $pstring;
 179 //List Page Number Code end
 180 echo $pstring;
 181 if($pagenum>1) {
 182 ?>
 183 <div class="DivPageLinks">&nbsp;</div>
 184 <?php } ?>
 185 <div class="TableMenuBorder">
 186 <?php if($ThemeSet['TableStyle']=="div") { ?>
 187 <div class="TableMenuRow1">
 188 <span style="float: left;">
 189 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 190 </span>&nbsp;</div>
 191 <?php } ?>
 192 <table class="TableMenu" style="width: 100%;">
 193 <?php if($ThemeSet['TableStyle']=="table") { ?>
 194 <tr class="TableMenuRow1">
 195 <td class="TableMenuColumn1" colspan="4"><span style="float: left;">
 196 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 197 </span>&nbsp;</td>
 198 </tr><?php } ?>
 199 <tr id="Messenger" class="TableMenuRow2">
 200 <th class="TableMenuColumn2" style="width: 4%;">State</th>
 201 <th class="TableMenuColumn2" style="width: 46%;">Message Name</th>
 202 <th class="TableMenuColumn2" style="width: 25%;">Sender</th>
 203 <th class="TableMenuColumn2" style="width: 25%;">Time</th>
 204 </tr>
 205 <?php
 206 while ($i < $num) {
 207 $PMID=sql_result($result,$i,"id");
 208 $PMDiscussionID=sql_result($result,$i,"DiscussionID");
 209 $SenderID=sql_result($result,$i,"SenderID");
 210 $SenderIP=sql_result($result,$i,"IP");
 211 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat);
 212 if($PreSenderName['Name']===null) { $SenderID = -1;
 213 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat); }
 214 $SenderName = $PreSenderName['Name'];
 215 $SenderHidden = $PreSenderName['Hidden'];
 216 $ReciverID=sql_result($result,$i,"ReciverID");
 217 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat);
 218 if($PreReciverName['Name']===null) { $ReciverID = -1;
 219 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat); }
 220 $ReciverName = $PreReciverName['Name'];
 221 $ReciverHidden = $PreReciverName['Hidden'];
 222 $PMGuest=sql_result($result,$i,"GuestName");
 223 $MessageName=sql_result($result,$i,"MessageTitle");
 224 $MessageDesc=sql_result($result,$i,"Description");
 225 $DateSend=sql_result($result,$i,"DateSend");
 226 $tmpusrcurtime = new DateTime();
 227 $tmpusrcurtime->setTimestamp($DateSend);
 228 $tmpusrcurtime->setTimezone($usertz);
 229 $DateSend=$tmpusrcurtime->format($_SESSION['iDBDateFormat'].", ".$_SESSION['iDBTimeFormat']);
 230 $MessageStat=sql_result($result,$i,"Read");
 231 if($SenderName=="Guest") { $SenderName=$PMGuest;
 232 if($SenderName==null) { $SenderName="Guest"; } }
 233 $PreMessage = $ThemeSet['MessageUnread'];
 234 if ($MessageStat==0) {
 235         $PreMessage=$ThemeSet['MessageUnread']; }
 236 if ($MessageStat==1) {
 237         $PreMessage=$ThemeSet['MessageRead']; }
 238 ?>
 239 <tr class="TableMenuRow3" id="Message<?php echo $PMID; ?>">
 240 <td class="TableMenuColumn3"><div class="messagestate">
 241 <?php echo $PreMessage; ?></div></td>
 242 <td class="TableMenuColumn3"><div class="messagename">
 243 <?php if($PMDiscussionID<=0) { ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']).$qstrhtml."&#35;message".$PMID; ?>"><?php echo $MessageName; ?></a><?php } if($PMDiscussionID>0) { ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMDiscussionID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']).$qstrhtml."&#35;message".$PMID; ?>"><?php echo $MessageName; ?></a><?php } ?></div>
 244 <div class="messagedesc"><?php echo $MessageDesc; ?></div></td>
 245 <td class="TableMenuColumn3" style="text-align: center;"><?php
 246 if($SenderID>0&&$SenderHidden=="no") {
 247 echo "<a href=\"";
 248 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$SenderID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 249 echo "\">".$SenderName."</a>"; }
 250 if($SenderID<=0||$SenderHidden=="yes") {
 251 echo "<span>".$SenderName."</span>"; }
 252 ?></td>
 253 <td class="TableMenuColumn3" style="text-align: center;"><?php echo $DateSend; ?></td>
 254 </tr>
 255 <?php ++$i; } sql_free_result($result); ?>
 256 <tr id="MessengerEnd" class="TableMenuRow4">
 257 <td class="TableMenuColumn4" colspan="4">&nbsp;</td>
 258 </tr>
 259 <?php }
 260 if($_GET['act']=="viewsent") {
 261 //Get SQL LIMIT Number
 262 $nums = $_GET['page'] * $Settings['max_pmlist'];
 263 $PageLimit = $nums - $Settings['max_pmlist'];
 264 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"SenderID\"=%i ORDER BY \"DateSend\" DESC ".$SQLimit, array($_SESSION['UserID'],$PageLimit,$Settings['max_pmlist']));
 265 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."messenger\" WHERE \"SenderID\"=%i", array($_SESSION['UserID']));
 266 $result=sql_query($query,$SQLStat);
 267 $rnresult=sql_query($rnquery,$SQLStat);
 268 $NumberMessage = sql_result($rnresult,0);
 269 sql_free_result($rnresult);
 270 if($NumberMessage==null) {
 271         $NumberMessage = 0; }
 272 $num = $NumberMessage;
 273 $num=sql_num_rows($result);
 274 //Start MessengerList Page Code
 275 if(!isset($Settings['max_pmlist'])) { $Settings['max_pmlist'] = 10; }
 276 if($_GET['page']==null) { $_GET['page'] = 1; }
 277 if($_GET['page']<=0) { $_GET['page'] = 1; }
 278 $nums = $_GET['page'] * $Settings['max_pmlist'];
 279 if($nums>$num) { $nums = $num; }
 280 $numz = $nums - $Settings['max_pmlist'];
 281 if($numz<=0) { $numz = 0; }
 282 //$i=$numz;
 283 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
 284 if($nums>=$num) { $nextpage = $_GET['page']; }
 285 if($numz>=$Settings['max_pmlist']) { $backpage = $_GET['page'] - 1; }
 286 if($_GET['page']<=1) { $backpage = 1; }
 287 $pnum = $num; $l = 1; $Pages = null;
 288 while ($pnum>0) {
 289 if($pnum>=$Settings['max_pmlist']) {
 290         $pnum = $pnum - $Settings['max_pmlist'];
 291         $Pages[$l] = $l; ++$l; }
 292 if($pnum<$Settings['max_pmlist']&&$pnum>0) {
 293         $pnum = $pnum - $pnum;
 294         $Pages[$l] = $l; ++$l; } }
 295 //End MessengerList Page Code
 296 $num=sql_num_rows($result);
 297 $i=0;
 298 //List Page Number Code Start
 299 $pagenum=count($Pages);
 300 if($_GET['page']>$pagenum) {
 301         $_GET['page'] = $pagenum; }
 302 $pagei=0; $pstring = null;
 303 if($pagenum>1) {
 304 $pstring = "<div class=\"PageList\"><span class=\"pagelink\">".$pagenum." Pages:</span> "; }
 305 if($_GET['page']<4) { $Pagez[0] = null; }
 306 if($_GET['page']>=4) { $Pagez[0] = "First"; }
 307 if($_GET['page']>=3) {
 308 $Pagez[1] = $_GET['page'] - 2; }
 309 if($_GET['page']<3) {
 310 $Pagez[1] = null; }
 311 if($_GET['page']>=2) {
 312 $Pagez[2] = $_GET['page'] - 1; }
 313 if($_GET['page']<2) {
 314 $Pagez[2] = null; }
 315 $Pagez[3] = $_GET['page'];
 316 if($_GET['page']<$pagenum) {
 317 $Pagez[4] = $_GET['page'] + 1; }
 318 if($_GET['page']>=$pagenum) {
 319 $Pagez[4] = null; }
 320 $pagenext = $_GET['page'] + 1;
 321 if($pagenext<$pagenum) {
 322 $Pagez[5] = $_GET['page'] + 2; }
 323 if($pagenext>=$pagenum) {
 324 $Pagez[5] = null; }
 325 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 326 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 327 $pagenumi=count($Pagez);
 328 if($num==0) {
 329 $pagenumi = 0;
 330 $pstring = null; }
 331 if($pagenum>1) {
 332 while ($pagei < $pagenumi) {
 333 if($_GET['page']!=1&&$pagei==1) {
 334 $Pback = $_GET['page'] - 1;
 335 $pstring = $pstring."<span class=\"pagelink\">a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pback,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&lt;</a></span> "; }
 336 if($Pagez[$pagei]!=null&&
 337    $Pagez[$pagei]!="First"&&
 338    $Pagez[$pagei]!="Last") {
 339 if($pagei!=3) {
 340 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; }
 341 if($pagei==3) {
 342 $pstring = $pstring."<span class=\"pagecurrent\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; } }
 343 if($Pagez[$pagei]=="First") {
 344 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&laquo;</a></span> "; }
 345 if($Pagez[$pagei]=="Last") {
 346 $ptestnext = $pagenext + 1;
 347 $paget = $pagei - 1;
 348 $Pnext = $_GET['page'] + 1;
 349 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pnext,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&gt;</a></span> ";
 350 if($ptestnext<$pagenum) {
 351 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&raquo;</a></span> "; } }
 352         ++$pagei; } $pstring = $pstring."</div>"; }
 353 //echo $pstring;
 354 //List Page Number Code end
 355 echo $pstring;
 356 if($pagenum>1) {
 357 ?>
 358 <div class="DivPageLinks">&nbsp;</div>
 359 <?php } ?>
 360 <div class="TableMenuBorder">
 361 <?php if($ThemeSet['TableStyle']=="div") { ?>
 362 <div class="TableMenuRow1">
 363 <span style="float: left;">
 364 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 365 </span>&nbsp;</div>
 366 <?php } ?>
 367 <table class="TableMenu" style="width: 100%;">
 368 <?php if($ThemeSet['TableStyle']=="table") { ?>
 369 <tr class="TableMenuRow1">
 370 <td class="TableMenuColumn1" colspan="4"><span style="float: left;">
 371 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 372 </span>&nbsp;</td>
 373 </tr><?php } ?>
 374 <tr id="Messenger" class="TableMenuRow2">
 375 <th class="TableMenuColumn2" style="width: 4%;">State</th>
 376 <th class="TableMenuColumn2" style="width: 46%;">Message Name</th>
 377 <th class="TableMenuColumn2" style="width: 25%;">Sent To</th>
 378 <th class="TableMenuColumn2" style="width: 25%;">Time</th>
 379 </tr>
 380 <?php
 381 while ($i < $num) {
 382 $PMID=sql_result($result,$i,"id");
 383 $PMDiscussionID=sql_result($result,$i,"DiscussionID");
 384 $SenderID=sql_result($result,$i,"SenderID");
 385 $SenderIP=sql_result($result,$i,"IP");
 386 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat);
 387 if($PreSenderName['Name']===null) { $SenderID = -1;
 388 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat); }
 389 $SenderName = $PreSenderName['Name'];
 390 $SenderHidden = $PreSenderName['Hidden'];
 391 $ReciverID=sql_result($result,$i,"ReciverID");
 392 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat);
 393 if($PreReciverName['Name']===null) { $ReciverID = -1;
 394 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat); }
 395 $ReciverName = $PreReciverName['Name'];
 396 $ReciverHidden = $PreReciverName['Hidden'];
 397 $PMGuest=sql_result($result,$i,"GuestName");
 398 $MessageName=sql_result($result,$i,"MessageTitle");
 399 $MessageDesc=sql_result($result,$i,"Description");
 400 $DateSend=sql_result($result,$i,"DateSend");
 401 $tmpusrcurtime = new DateTime();
 402 $tmpusrcurtime->setTimestamp($DateSend);
 403 $tmpusrcurtime->setTimezone($usertz);
 404 $DateSend=$tmpusrcurtime->format($_SESSION['iDBDateFormat'].", ".$_SESSION['iDBTimeFormat']);
 405 $MessageStat=sql_result($result,$i,"Read");
 406 if($SenderName=="Guest") { $SenderName=$PMGuest;
 407 if($SenderName==null) { $SenderName="Guest"; } }
 408 $PreMessage = $ThemeSet['MessageUnread'];
 409 if ($MessageStat==0) {
 410         $PreMessage=$ThemeSet['MessageUnread']; }
 411 if ($MessageStat==1) {
 412         $PreMessage=$ThemeSet['MessageRead']; }
 413 ?>
 414 <tr class="TableMenuRow3" id="Message<?php echo $PMID; ?>">
 415 <td class="TableMenuColumn3"><div class="messagestate">
 416 <?php echo $PreMessage; ?></div></td>
 417 <td class="TableMenuColumn3"><div class="messagename">
 418 <?php if($PMDiscussionID<=0) { ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']).$qstrhtml."&#35;message".$PMID; ?>"><?php echo $MessageName; ?></a><?php } if($PMDiscussionID>0) { ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMDiscussionID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']).$qstrhtml."&#35;message".$PMID; ?>"><?php echo $MessageName; ?></a><?php } ?></div>
 419 <div class="messagedesc"><?php echo $MessageDesc; ?></div></td>
 420 <td class="TableMenuColumn3" style="text-align: center;"><?php
 421 if($ReciverID>0&&$ReciverHidden=="no") {
 422 echo "<a href=\"";
 423 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$ReciverID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 424 echo "\">".$ReciverName."</a>"; }
 425 if($ReciverID<=0||$ReciverHidden=="yes") {
 426 echo "<span>".$ReciverName."</span>"; }
 427 ?></td>
 428 <td class="TableMenuColumn3" style="text-align: center;"><?php echo $DateSend; ?></td>
 429 </tr>
 430 <?php ++$i; } ?>
 431 <tr id="MessengerEnd" class="TableMenuRow4">
 432 <td class="TableMenuColumn4" colspan="4">&nbsp;</td>
 433 </tr>
 434 <?php sql_free_result($result); }
 435 if($_GET['act']=="read") {
 436 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE (\"id\"=%i OR \"DiscussionID\"=%i) AND (\"SenderID\"=%i OR \"ReciverID\"=%i)", array($_GET['id'], $_GET['id'], $_SESSION['UserID'], $_SESSION['UserID']));
 437 $result=sql_query($query,$SQLStat);
 438 $num=sql_num_rows($result);
 439 $is=0;
 440 if($num==0) { redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 441 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 442 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 443 while ($is < $num) {
 444 $PMID=sql_result($result,$is,"id");
 445 $SenderID=sql_result($result,$is,"SenderID");
 446 $SenderIP=sql_result($result,$is,"IP");
 447 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat);
 448 if($PreSenderName['Name']===null) { $SenderID = -1;
 449 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat); }
 450 $SenderName = $PreSenderName['Name'];
 451 $SenderHidden = $PreSenderName['Hidden'];
 452 $ReciverID=sql_result($result,$is,"ReciverID");
 453 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat);
 454 if($PreReciverName['Name']===null) { $ReciverID = -1;
 455 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat); }
 456 $ReciverName = $PreReciverName['Name'];
 457 $ReciverHidden = $PreReciverName['Hidden'];
 458 $PMGuest=sql_result($result,$is,"GuestName");
 459 $MessageName=sql_result($result,$is,"MessageTitle");
 460 $DateSend=sql_result($result,$is,"DateSend");
 461 $tmpusrcurtime = new DateTime();
 462 $tmpusrcurtime->setTimestamp($DateSend);
 463 $tmpusrcurtime->setTimezone($usertz);
 464 $DateSend=$tmpusrcurtime->format($_SESSION['iDBDateFormat'].", ".$_SESSION['iDBTimeFormat']);
 465 $MessageText=sql_result($result,$is,"MessageText");
 466 $MessageDesc=sql_result($result,$is,"Description");
 467 $ipshow = "two";
 468 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i", array($SenderID));
 469 $reresult=sql_query($requery,$SQLStat);
 470 $renum=sql_num_rows($reresult);
 471 $rei=0;
 472 $memrequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."mempermissions\" WHERE \"id\"=%i LIMIT 1", array($SenderID));
 473 $memreresult=sql_query($memrequery,$SQLStat);
 474 $memrenum=sql_num_rows($memreresult);
 475 if($_SESSION['UserID']!=$ReciverID&&
 476         $_SESSION['UserID']!=$SenderID) {
 477 redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 478 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 479 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 480 while ($rei < $renum) {
 481 $User1ID=$SenderID;
 482 $User1Name=sql_result($reresult,$rei,"Name");
 483 $SenderName = $User1Name;
 484 $User1IP=sql_result($reresult,$rei,"IP");
 485 if($User1IP==$SenderIP) { $ipshow = "one"; }
 486 $User1Email=sql_result($reresult,$rei,"Email");
 487 $User1Title=sql_result($reresult,$rei,"Title");
 488 $PreUserCanExecPHP=sql_result($memreresult,$rei,"CanExecPHP");
 489 if($PreUserCanExecPHP!="yes"&&$PreUserCanExecPHP!="no"&&$PreUserCanExecPHP!="group") {
 490         $PreUserCanExecPHP = "no"; }
 491 $PreUserCanDoHTML=sql_result($memreresult,$rei,"CanDoHTML");
 492 if($PreUserCanDoHTML!="yes"&&$PreUserCanDoHTML!="no"&&$PreUserCanDoHTML!="group") {
 493         $PreUserCanDoHTML = "no"; }
 494 $PreUserCanUseBBTags=sql_result($memreresult,$rei,"CanUseBBTags");
 495 if($PreUserCanUseBBTags!="yes"&&$PreUserCanUseBBTags!="no"&&$PreUserCanUseBBTags!="group") {
 496         $PreUserCanUseBBTags = "no"; }
 497 sql_free_result($memreresult);
 498 $User1Joined=sql_result($reresult,$rei,"Joined");
 499 $tmpusrcurtime = new DateTime();
 500 $tmpusrcurtime->setTimestamp($User1Joined);
 501 $tmpusrcurtime->setTimezone($usertz);
 502 $User1Joined=$tmpusrcurtime->format($_SESSION['iDBDateFormat']);
 503 $User1LevelID=sql_result($reresult,$rei,"LevelID");
 504 $lquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."levels\" WHERE \"id\"=%i LIMIT 1", array($User1LevelID));
 505 $lresult=sql_query($lquery,$SQLStat);
 506 $User1Level=sql_result($lresult,0,"Name");
 507 $User1GroupID=sql_result($reresult,$rei,"GroupID");
 508 $User1Hidden=sql_result($reresult,$rei,"HiddenMember");
 509 $SenderHidden = $User1Hidden;
 510 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i", array($User1GroupID));
 511 $gresult=sql_query($gquery,$SQLStat);
 512 $User1Group=sql_result($gresult,0,"Name");
 513 $User1CanExecPHP = $PreUserCanExecPHP;
 514 if($PreUserCanExecPHP=="group") {
 515 $User1CanExecPHP=sql_result($gresult,0,"CanExecPHP"); }
 516 if($User1CanExecPHP!="yes"&&$User1CanExecPHP!="no") {
 517         $User1CanExecPHP = "no"; }
 518 $User1CanDoHTML = $PreUserCanDoHTML;
 519 if($PreUserCanDoHTML=="group") {
 520 $User1CanDoHTML=sql_result($gresult,0,"CanDoHTML"); }
 521 if($User1CanDoHTML!="yes"&&$User1CanDoHTML!="no") {
 522         $User1CanDoHTML = "no"; }
 523 $User1CanUseBBTags = $PreUserCanUseBBTags;
 524 if($User1CanUseBBTags=="group") {
 525 $User1CanUseBBTags=sql_result($gresult,0,"CanUseBBTags"); }
 526 if($User1CanUseBBTags!="yes"&&$User1CanUseBBTags!="no") {
 527         $User1CanUseBBTags = "no"; }
 528 $GroupNamePrefix=sql_result($gresult,0,"NamePrefix");
 529 $GroupNameSuffix=sql_result($gresult,0,"NameSuffix");
 530 sql_free_result($gresult); sql_free_result($lresult);
 531 if($User1Title=="") { $User1Title = $User1Group; }
 532 $User1Signature=sql_result($reresult,$rei,"Signature");
 533 $User1Avatar=sql_result($reresult,$rei,"Avatar");
 534 $User1AvatarSize=sql_result($reresult,$rei,"AvatarSize");
 535 if ($User1Avatar=="http://"||$User1Avatar==null||
 536         strtolower($User1Avatar)=="noavatar") {
 537 $User1Avatar=$ThemeSet['NoAvatar'];
 538 $User1AvatarSize=$ThemeSet['NoAvatarSize']; }
 539 $AvatarSize1=explode("x", $User1AvatarSize);
 540 $AvatarSize1W=$AvatarSize1[0]; $AvatarSize1H=$AvatarSize1[1];
 541 $User1Website=sql_result($reresult,$rei,"Website");
 542 if($User1Website=="http://") {
 543         $User1Website = $Settings['idburl']; }
 544 $User1Website = urlcheck($User1Website);
 545 $BoardWWWChCk = parse_url($Settings['idburl']);
 546 $User1WWWChCk = parse_url($User1Website);
 547 $opennew = " onclick=\"window.open(this.href);return false;\"";
 548 if($BoardWWWChCk['host']==$User1WWWChCk['host']) {
 549         $opennew = null; }
 550 $User1PostCount=sql_result($reresult,$rei,"PostCount");
 551 $User1Karma=sql_result($reresult,$rei,"Karma");
 552 $User1IP=sql_result($reresult,$rei,"IP");
 553 ++$rei; } sql_free_result($reresult);
 554 if($_SESSION['UserID']==$ReciverID) {
 555 $queryup = sql_pre_query("UPDATE \"".$Settings['sqltable']."messenger\" SET \"Read\"=%i WHERE \"id\"=%i", array(1,$_GET['id']));
 556 sql_query($queryup,$SQLStat); }
 557 if($User1Name=="Guest") { $User1Name=$PMGuest;
 558 if($User1Name==null) { $User1Name="Guest"; } }
 559 if(isset($GroupNamePrefix)&&$GroupNamePrefix!=null) {
 560         $User1Name = $GroupNamePrefix.$User1Name; }
 561 if(isset($GroupNameSuffix)&&$GroupNameSuffix!=null) {
 562         $User1Name = $User1Name.$GroupNameSuffix; }
 563 if($User1CanUseBBTags=="yes") { $MessageText = bbcode_parser($MessageText); }
 564 if($User1CanExecPHP=="no") {
 565 $MessageText = preg_replace("/\[ExecPHP\](.*?)\[\/ExecPHP\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute php code.",$MessageText); }
 566 if($User1CanExecPHP=="yes") { $MessageText = php_execute($MessageText); }
 567 if($User1CanDoHTML=="no") {
 568 $MessageText = preg_replace("/\[DoHTML\](.*?)\[\/DoHTML\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute html.",$MessageText); }
 569 if($User1CanDoHTML=="yes") { $MessageText = do_html_bbcode($MessageText); }
 570 $MessageText = text2icons($MessageText,$Settings['sqltable'],$SQLStat);
 571 $MessageText = preg_replace("/\<br\>/", "<br />", nl2br($MessageText));
 572 $MessageText = url2link($MessageText);
 573 if($User1CanUseBBTags=="yes") { $User1Signature = bbcode_parser($User1Signature); }
 574 if($User1CanExecPHP=="no") {
 575 $User1Signature = preg_replace("/\[ExecPHP\](.*?)\[\/ExecPHP\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute php code.",$User1Signature); }
 576 if($User1CanExecPHP=="yes") { $User1Signature = php_execute($User1Signature); }
 577 if($User1CanDoHTML=="no") {
 578 $User1Signature = preg_replace("/\[DoHTML\](.*?)\[\/DoHTML\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute html.",$User1Signature); }
 579 if($User1CanDoHTML=="yes") { $User1Signature = do_html_bbcode($User1Signature); }
 580 $User1Signature = text2icons($User1Signature,$Settings['sqltable'],$SQLStat);
 581 $User1Signature = preg_replace("/\<br\>/", "<br />", nl2br($User1Signature));
 582 $User1Signature = url2link($User1Signature);
 583 ?>
 584 <div class="TableInfoMini1Border" id="message<?php echo $PMID; ?>">
 585 <?php if($ThemeSet['TableStyle']=="div") { ?>
 586 <div class="TableInfoMiniRow1">
 587 <span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a> ( <?php echo $MessageDesc; ?> )</span>
 588 </div>
 589 <?php } ?>
 590 <table class="TableInfoMini1" style="width: 100%;" id="pmessage<?php echo $is+1; ?>">
 591 <?php if($ThemeSet['TableStyle']=="table") { ?>
 592 <tr class="TableInfoMiniRow1">
 593 <td class="TableInfoMiniColumn1" colspan="2"><span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a> ( <?php echo $MessageDesc; ?> )</span>
 594 </td>
 595 </tr><?php } ?>
 596 <tr class="TableInfoMiniRow2">
 597 <td class="TableInfoMiniColumn2" style="vertical-align: middle; width: 160px;">
 598 &nbsp;<?php
 599 if($User1ID>0&&$User1Hidden=="no") {
 600 echo "<a href=\"";
 601 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 602 echo "\">".$User1Name."</a>"; }
 603 if($User1ID<=0||$User1Hidden=="yes") {
 604 echo "<span>".$User1Name."</span>"; }
 605 ?></td>
 606 <td class="TableInfoMiniColumn2" style="vertical-align: middle;">
 607 <div style="float: left; text-align: left;">
 608 <span style="font-weight: bold;">Time Sent: </span><?php echo $DateSend; ?>
 609 </div>
 610 <div style="text-align: right;">
 611 <?php if(isset($ThemeSet['Report'])&&$ThemeSet['Report']!=null) { ?>
 612 <a href="#Act/Report"><?php echo $ThemeSet['Report']; ?></a>
 613 <?php } if($GroupInfo['CanPM']=="yes"&&isset($ThemeSet['QuoteReply'])&&$ThemeSet['QuoteReply']!=null) {
 614 if($_SESSION['UserID']!=$User1ID) { $SendToID = $User1ID; }
 615 if($_SESSION['UserID']==$User1ID) { $SendToID = $ReciverID; }
 616 echo $ThemeSet['LineDividerTopic']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create&id=".$SendToID."&post=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $ThemeSet['QuoteReply']; ?></a>
 617 <?php } ?>&nbsp;</div>
 618 </td>
 619 </tr>
 620 <tr class="TableInfoMiniRow3">
 621 <td class="TableInfoMiniColumn3" style="vertical-align: top; width: 180px;">
 622 <?php  // Avatar Table Thanks For SeanJ's Help at http://seanj.jcink.com/
 623  ?>
 624  <table class="AvatarTable" style="width: 100px; height: 100px; text-align: center;">
 625         <tr class="AvatarRow" style="width: 100%; height: 100%;">
 626                 <td class="AvatarRow" style="width: 100%; height: 100%; text-align: center; vertical-align: middle;">
 627                 <img src="<?php echo $User1Avatar; ?>" alt="<?php echo $User1Name; ?>'s Avatar" title="<?php echo $User1Name; ?>'s Avatar" style="border: 0px; width: <?php echo $AvatarSize1W; ?>px; height: <?php echo $AvatarSize1H; ?>px;" />
 628                 </td>
 629         </tr>
 630  </table><br />
 631 <?php echo $User1Title; ?><br />
 632 Group: <?php echo $User1Group; ?><br />
 633 Level: <?php echo $User1Level; ?><br />
 634 Member: <?php
 635 if($User1ID>0&&$User1Hidden=="no") { echo $User1ID; }
 636 if($User1ID<=0||$User1Hidden=="yes") { echo 0; }
 637 ?><br />
 638 Posts: <?php echo $User1PostCount; ?><br />
 639 Karma: <?php echo $User1Karma; ?><br />
 640 Joined: <?php echo $User1Joined; ?><br />
 641 <?php if($GroupInfo['CanViewIPAddress']=="yes") { ?>
 642 User IP: <a onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$User1IP); ?>">
 643 <?php echo $User1IP; ?></a><br />
 644 <?php if($ipshow=="two") { ?>
 645 Message IP: <a onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$SenderIP); ?>">
 646 <?php echo $SenderIP; ?></a><br />
 647 <?php } } ?><br />
 648 </td>
 649 <td class="TableInfoMiniColumn3" style="vertical-align: middle;">
 650 <div class="pmpost"><?php echo $MessageText; ?></div>
 651 <?php if(isset($User1Signature)&&$User1Signature!="") { ?> <br />--------------------
 652 <div class="signature"><?php echo $User1Signature; ?></div><?php } ?>
 653 </td>
 654 </tr>
 655 <tr class="TableInfoMiniRow4">
 656 <td class="TableInfoMiniColumn4" colspan="2">
 657 <span style="text-align: left;">&nbsp;<a href="<?php
 658 if($User1ID>0&&$User1Hidden=="no"&&isset($ThemeSet['Profile'])&&$ThemeSet['Profile']!=null) {
 659 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); }
 660 if(($User1ID<=0||$User1Hidden=="yes")&&isset($ThemeSet['Profile'])&&$ThemeSet['Profile']!=null) {
 661 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 662 ?>"><?php echo $ThemeSet['Profile']; ?></a>
 663 <?php if(isset($ThemeSet['WWW'])&&$ThemeSet['WWW']!=null) {
 664 echo $ThemeSet['LineDividerTopic']; ?><a href="<?php echo $User1Website; ?>"<?php echo $opennew; ?>><?php echo $ThemeSet['WWW']; ?></a><?php } echo $ThemeSet['LineDividerTopic']; ?><a href="<?php
 665 if($User1ID>0&&$User1Hidden=="no"&&isset($ThemeSet['PM'])&&$ThemeSet['PM']!=null) {
 666 echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); }
 667 if(($User1ID<=0||$User1Hidden=="yes")&&isset($ThemeSet['PM'])&&$ThemeSet['PM']!=null) {
 668 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 669 ?>"><?php echo $ThemeSet['PM']; ?></a></span>
 670 </td></tr>
 671 </table></div>
 672 <div class="DivReplies">&nbsp;</div>
 673 <?php ++$is; } ?>
 674 </td></tr>
 675 </table>
 676 <?php sql_free_result($result); }
 677 if($_GET['act']!="read") { ?>
 678 </table></div>
 679 </td></tr>
 680 </table>
 681 <?php } }
 682 if($_GET['act']=="create") {
 683 $SendMessageTo = null;
 684 if($_GET['id']!=null&&$_GET['id']!=-1) {
 685 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i", array($_GET['id']));
 686 $reresult=sql_query($requery,$SQLStat);
 687 $renum=sql_num_rows($reresult);
 688 $rei=0;
 689 while ($rei < $renum) {
 690 $SendMessageTo = sql_result($reresult,$rei,"Name");
 691 $SendMessageTo = htmlspecialchars($SendMessageTo, ENT_QUOTES, $Settings['charset']);
 692 $SendToGroupID = sql_result($reresult,$rei,"GroupID");
 693 ++$rei; } sql_free_result($reresult); }
 694 if(!isset($renum)) { $renum = 0; }
 695 if($renum==0) { $SendMessageTo = null; }
 696 $QuoteReply = null; $QuoteDescription = null; $QuoteTitle = null;
 697 if($_GET['post']!=null and is_numeric($_GET['post'])) {
 698 if(isset($SendMessageTo)) {
 699 $QuoteUserName = $SendMessageTo; }
 700 if(!isset($SendMessageTo)) {
 701 $QuoteUserName = "Unknown"; }
 702 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"id\"=%i AND (\"SenderID\"=%i OR \"ReciverID\"=%i)", array($_GET['post'], $_SESSION['UserID'], $_SESSION['UserID']));
 703 $result=sql_query($query,$SQLStat);
 704 $num=sql_num_rows($result);
 705 if($num>0) {
 706 $QuoteTitle=sql_result($result,0,"MessageTitle");
 707 $MessageText=sql_result($result,0,"MessageText");
 708 $QuoteReply = preg_replace("/\<br\>/", "<br />", nl2br($MessageText));
 709 $QuoteDescription=sql_result($result,0,"Description");
 710 $result=sql_query($query,$SQLStat);
 711 $num=sql_num_rows($result);
 712 $QuoteReply = remove_bad_entities($QuoteReply);
 713 $QuoteDescription = str_replace("Re: ","",$QuoteDescription);
 714 $QuoteDescription = "Re: ".$QuoteDescription;
 715 $QuoteTitle = str_replace("Re: ","",$QuoteTitle);
 716 $QuoteTitle = "Re: ".$QuoteTitle;
 717 $QuoteReply = null; } }
 718 if(!isset($num)) { $num = 0; }
 719 if($num==0) { $_GET['post'] = null; }
 720 $UFID = rand_uuid("rand");
 721 $_SESSION['UserFormID'] = $UFID;
 722 ?>
 723 <div class="Table1Border">
 724 <?php if($ThemeSet['TableStyle']=="div") { ?>
 725 <div class="TableRow1">
 726 <span style="text-align: left;">
 727 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Seanding a Message</a></span></div>
 728 <?php } ?>
 729 <table class="Table1" id="MakeMessage">
 730 <?php if($ThemeSet['TableStyle']=="table") { ?>
 731 <tr class="TableRow1" id="MessageStart">
 732 <td class="TableColumn1" colspan="2"><span style="text-align: left;">
 733 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Seanding a Message</a></span>
 734 </td>
 735 </tr><?php } ?>
 736 <tr id="MakeMessageRow" class="TableRow2">
 737 <td class="TableColumn2" colspan="2" style="width: 100%;">Making a Message</td>
 738 </tr>
 739 <tr class="TableRow3" id="MkMessage">
 740 <td class="TableColumn3" style="width: 15%; vertical-align: middle; text-align: center;">
 741 <div style="width: 100%; height: 160px; overflow: auto;">
 742 <table style="width: 100%; text-align: center;"><?php
 743 $melanie_query=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."smileys\" WHERE \"Display\"='yes'", array(null));
 744 $melanie_result=sql_query($melanie_query,$SQLStat);
 745 $melanie_num=sql_num_rows($melanie_result);
 746 $melanie_p=0; $SmileRow=0; $SmileCRow=0;
 747 while ($melanie_p < $melanie_num) { ++$SmileRow;
 748 $FileName=sql_result($melanie_result,$melanie_p,"FileName");
 749 $SmileName=sql_result($melanie_result,$melanie_p,"SmileName");
 750 $SmileText=sql_result($melanie_result,$melanie_p,"SmileText");
 751 $SmileDirectory=sql_result($melanie_result,$melanie_p,"Directory");
 752 $ShowSmile=sql_result($melanie_result,$melanie_p,"Display");
 753 $ReplaceType=sql_result($melanie_result,$melanie_p,"ReplaceCI");
 754 if($SmileRow==1) { ?><tr>
 755         <?php } if($SmileRow<5) { ++$SmileCRow; ?>
 756         <td><img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('ReplyPost','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" /></td>
 757         <?php } if($SmileRow==5) { ++$SmileCRow; ?>
 758         <td><img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('ReplyPost','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" /></td></tr>
 759         <?php $SmileCRow=0; $SmileRow=0; }
 760 ++$melanie_p; }
 761 if($SmileCRow<5&&$SmileCRow!=0) {
 762 $SmileCRowL = 5 - $SmileCRow;
 763 echo "<td colspan=\"".$SmileCRowL."\">&nbsp;</td></tr>"; }
 764 echo "</table>";
 765 sql_free_result($melanie_result);
 766 ?></div></td>
 767 <td class="TableColumn3" style="width: 85%;">
 768 <form style="display: inline;" method="post" id="MkReplyForm" action="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">
 769 <table style="text-align: left;">
 770 <tr style="text-align: left;">
 771         <td style="width: 50%;"><label class="TextBoxLabel" for="SendMessageTo">Insert UserName:</label></td>
 772         <td style="width: 50%;"><input maxlength="25" type="text" name="SendMessageTo" class="TextBox" id="SendMessageTo" size="20" value="<?php echo $SendMessageTo; ?>" /></td>
 773 </tr><tr style="text-align: left;">
 774         <td style="width: 50%;"><label class="TextBoxLabel" for="MessageName">Insert Message Name:</label></td>
 775         <td style="width: 50%;"><input maxlength="30" type="text" name="MessageName" class="TextBox" id="MessageName" size="20" value="<?php echo $QuoteTitle; ?>" /></td>
 776 </tr><tr style="text-align: left;">
 777         <td style="width: 50%;"><label class="TextBoxLabel" for="MessageDesc">Insert Message Description:</label></td>
 778         <td style="width: 50%;"><input maxlength="45" type="text" name="MessageDesc" class="TextBox" id="MessageDesc" size="20" value="<?php echo $QuoteDescription; ?>" /></td>
 779 </tr><?php if($_SESSION['UserGroup']==$Settings['GuestGroup']) { ?><tr style="text-align: left;">
 780         <td style="width: 50%;"><label class="TextBoxLabel" for="GuestName">Insert Guest Name:</label></td>
 781         <?php if(!isset($_SESSION['GuestName'])) { ?>
 782         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" /></td>
 783         <?php } if(isset($_SESSION['GuestName'])) { ?>
 784         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" value="<?php echo $_SESSION['GuestName']; ?>" /></td>
 785 <?php } ?></tr><?php } ?>
 786 </table>
 787 <table style="text-align: left;">
 788 <tr style="text-align: left;">
 789 <td style="width: 100%;">
 790 <label class="TextBoxLabel" for="Message">Insert Your Message:</label><br />
 791 <textarea rows="10" name="Message" id="Message" cols="40" class="TextBox"><?php echo $QuoteReply; ?></textarea><br />
 792 <?php if($_SESSION['UserGroup']==$Settings['GuestGroup']&&$Settings['captcha_guest']=="on") { ?>
 793 <label class="TextBoxLabel" for="signcode"><img src="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=MkCaptcha",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>" alt="CAPTCHA Code" title="CAPTCHA Code" /></label><br />
 794 <input maxlength="25" type="text" class="TextBox" name="signcode" size="20" id="signcode" value="Enter SignCode" /><br />
 795 <?php } ?>
 796 <input type="hidden" name="act" value="sendmessages" style="display: none;" />
 797 <?php if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { ?>
 798 <input type="hidden" name="GuestName" value="null" style="display: none;" />
 799 <?php } ?>
 800 <input type="submit" class="Button" value="Send Message" name="send_message" />
 801 <input type="hidden" style="display: none;" name="fid" value="<?php echo $UFID; ?>" />
 802 <input type="hidden" style="display: none;" name="ubid" value="<?php echo $Settings['BoardUUID']; ?>" />
 803 <?php if($_GET['post']!=null and is_numeric($_GET['post'])) { ?>
 804 <input type="hidden" style="display: none;" name="post" value="<?php echo $_GET['post']; ?>" />
 805 <?php } if($_GET['post']==null or !is_numeric($_GET['post'])) { ?>
 806 <input type="hidden" style="display: none;" name="post" value="0" />
 807 <?php } ?>
 808 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 809 </td></tr></table>
 810 </form></td></tr>
 811 <tr id="MkReplyEnd" class="TableRow4">
 812 <td class="TableColumn4" colspan="2">&nbsp;</td>
 813 </tr>
 814 </table></div>
 815 <?php } if($_GET['act']=="sendmessage"&&$_POST['act']=="sendmessages") {
 816 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
 817 $URL['REFERER'] = $REFERERurl['host'];
 818 $URL['HOST'] = $_SERVER["SERVER_NAME"];
 819 $REFERERurl = null;
 820 if(!isset($_POST['SendMessageTo'])) { $_POST['SendMessageTo'] = null; }
 821 if(!isset($_POST['MessageName'])) { $_POST['MessageName'] = null; }
 822 if(!isset($_POST['MessageDesc'])) { $_POST['MessageDesc'] = null; }
 823 if(!isset($_POST['Message'])) { $_POST['Message'] = null; }
 824 if(!isset($_POST['GuestName'])) { $_POST['GuestName'] = null; }
 825 if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 826         $Settings['captcha_guest']=="on") {
 827 require($SettDir['inc']."captcha.php"); }
 828 ?>
 829 <div class="Table1Border">
 830 <?php if($ThemeSet['TableStyle']=="div") { ?>
 831 <div class="TableRow1">
 832 <span style="text-align: left;">
 833 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Making a Message</a></span></div>
 834 <?php } ?>
 835 <table class="Table1">
 836 <?php if($ThemeSet['TableStyle']=="table") { ?>
 837 <tr class="TableRow1">
 838 <td class="TableColumn1"><span style="text-align: left;">
 839 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Making a Message</a></span>
 840 </td>
 841 </tr><?php } ?>
 842 <tr class="TableRow2">
 843 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Make Message: </th>
 844 </tr>
 845 <tr class="TableRow3">
 846 <td class="TableColumn3">
 847 <table style="width: 100%; height: 25%; text-align: center;">
 848 <?php if (pre_strlen($_POST['SendMessageTo'])>="25") { $Error="Yes";  ?>
 849 <tr>
 850         <td><span class="TableMessage">
 851         <br />Send to user name too big.<br />
 852         </span>&nbsp;</td>
 853 </tr>
 854 <?php } if($_POST['fid']!=$_SESSION['UserFormID']) { $Error="Yes";  ?>
 855 <tr>
 856         <td><span class="TableMessage">
 857         <br />Sorry the referering url dose not match our host name.<br />
 858         </span>&nbsp;</td>
 859 </tr>
 860 <?php } if($_POST['ubid']!=$Settings['BoardUUID']) { $Error="Yes";  ?>
 861 <tr>
 862         <td><span class="TableMessage">
 863         <br />Sorry the referering url dose not match our host name.<br />
 864         </span>&nbsp;</td>
 865 </tr>
 866 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 867         $Settings['captcha_guest']=="on") {
 868 if (PhpCaptcha::Validate($_POST['signcode'])) {
 869 //echo 'Valid code entered';
 870 } else { $Error="Yes"; ?>
 871 <tr>
 872         <td><span class="TableMessage">
 873         <br />Invalid code entered<br />
 874         </span>&nbsp;</td>
 875 </tr>
 876 <?php } } if ($_POST['SendMessageTo']==null) { $Error="Yes";  ?>
 877 <tr>
 878         <td><span class="TableMessage">
 879         <br />You need to enter a user name to send message to.<br />
 880         </span>&nbsp;</td>
 881 </tr>
 882 <?php } if (pre_strlen($_POST['MessageName'])>="30") { $Error="Yes";  ?>
 883 <tr>
 884         <td><span class="TableMessage">
 885         <br />Message Name is too big.<br />
 886         </span>&nbsp;</td>
 887 </tr>
 888 <?php } if (pre_strlen($_POST['MessageDesc'])>="45") { $Error="Yes";  ?>
 889 <tr>
 890         <td><span class="TableMessage">
 891         <br />Message Description is too big.<br />
 892         </span>&nbsp;</td>
 893 </tr>
 894 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 895         pre_strlen($_POST['GuestName'])>="25") { $Error="Yes"; ?>
 896 <tr>
 897         <td><span class="TableMessage">
 898         <br />You Guest Name is too big.<br />
 899         </span>&nbsp;</td>
 900 </tr>
 901 <?php } if ($Settings['TestReferer']=="on") {
 902         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
 903 <tr>
 904         <td><span class="TableMessage">
 905         <br />Sorry the referering url dose not match our host name.<br />
 906         </span>&nbsp;</td>
 907 </tr>
 908 <?php } }
 909 if(is_numeric($_POST['post'])) { $_POST['post'] = intval($_POST['post'], 10); }
 910 if(!isset($_POST['post']) or !is_numeric($_POST['post']) or $_POST['post']==null) { $_POST['post'] = 0; }
 911 if($_POST['post']>0) {
 912 $querychckm = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"id\"=%i AND (\"SenderID\"=%i OR \"ReciverID\"=%i)", array($_POST['post'], $_SESSION['UserID'], $_SESSION['UserID']));
 913 $resultchckm=sql_query($querychckm,$SQLStat);
 914 $numchckm=sql_num_rows($resultchckm);
 915 if($numchckm==0) { $_POST['post'] = 0; }
 916 sql_free_result($resultchckm); }
 917 $_POST['MessageName'] = stripcslashes(htmlspecialchars($_POST['MessageName'], ENT_QUOTES, $Settings['charset']));
 918 //$_POST['MessageName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['MessageName']);
 919 $_POST['MessageName'] = remove_spaces($_POST['MessageName']);
 920 $_POST['MessageDesc'] = stripcslashes(htmlspecialchars($_POST['MessageDesc'], ENT_QUOTES, $Settings['charset']));
 921 //$_POST['MessageDesc'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['MessageDesc']);
 922 $_POST['MessageDesc'] = remove_spaces($_POST['MessageDesc']);
 923 $_POST['SendMessageTo'] = stripcslashes(htmlspecialchars($_POST['SendMessageTo'], ENT_QUOTES, $Settings['charset']));
 924 //$_POST['SendMessageTo'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['SendMessageTo']);
 925 $_POST['SendMessageTo'] = remove_spaces($_POST['SendMessageTo']);
 926 $_POST['GuestName'] = stripcslashes(htmlspecialchars($_POST['GuestName'], ENT_QUOTES, $Settings['charset']));
 927 //$_POST['GuestName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['GuestName']);
 928 $_POST['GuestName'] = remove_spaces($_POST['GuestName']);
 929 $_POST['Message'] = stripcslashes(htmlspecialchars($_POST['Message'], ENT_QUOTES, $Settings['charset']));
 930 //$_POST['Message'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['Message']);
 931 //$_POST['Message'] = remove_spaces($_POST['Message']);
 932 $_POST['Message'] = remove_bad_entities($_POST['Message']);
 933 if($_SESSION['UserGroup']==$Settings['GuestGroup']) {
 934 if(isset($_POST['GuestName'])&&$_POST['GuestName']!=null) {
 935 if($cookieDomain==null) {
 936 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir); }
 937 if($cookieDomain!=null) {
 938 if($cookieSecure===true) {
 939 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir, $cookieDomain, 1); }
 940 if($cookieSecure===false) {
 941 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir, $cookieDomain); } }
 942 $_SESSION['GuestName']=$_POST['GuestName']; } }
 943 /*    <_<  iWordFilter  >_>
 944    by Kazuki Przyborowski - Cool Dude 2k */
 945 $melanieqy=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."wordfilter\"", array(null));
 946 $melaniert=sql_query($melanieqy,$SQLStat);
 947 $melanienm=sql_num_rows($melaniert);
 948 $melanies=0;
 949 while ($melanies < $melanienm) {
 950 $Filter=sql_result($melaniert,$melanies,"FilterWord");
 951 $Replace=sql_result($melaniert,$melanies,"Replacement");
 952 $CaseInsensitive=sql_result($melaniert,$melanies,"CaseInsensitive");
 953 if($CaseInsensitive=="on") { $CaseInsensitive = "yes"; }
 954 if($CaseInsensitive=="off") { $CaseInsensitive = "no"; }
 955 if($CaseInsensitive!="yes"||$CaseInsensitive!="no") { $CaseInsensitive = "no"; }
 956 $WholeWord=sql_result($melaniert,$melanies,"WholeWord");
 957 if($WholeWord=="on") { $WholeWord = "yes"; }
 958 if($WholeWord=="off") { $WholeWord = "no"; }
 959 if($WholeWord!="yes"&&$WholeWord!="no") { $WholeWord = "no"; }
 960 $Filter = preg_quote($Filter, "/");
 961 if($CaseInsensitive!="yes"&&$WholeWord=="yes") {
 962 $_POST['Message'] = preg_replace("/\b(".$Filter.")\b/", $Replace, $_POST['Message']);
 963 $_POST['MessageDesc'] = preg_replace("/\b(".$Filter.")\b/", $Replace, $_POST['MessageDesc']); }
 964 if($CaseInsensitive=="yes"&&$WholeWord=="yes") {
 965 $_POST['Message'] = preg_replace("/\b(".$Filter.")\b/i", $Replace, $_POST['Message']);
 966 $_POST['MessageDesc'] = preg_replace("/\b(".$Filter.")\b/i", $Replace, $_POST['MessageDesc']); }
 967 if($CaseInsensitive!="yes"&&$WholeWord!="yes") {
 968 $_POST['Message'] = preg_replace("/".$Filter."/", $Replace, $_POST['Message']);
 969 $_POST['MessageDesc'] = preg_replace("/".$Filter."/", $Replace, $_POST['MessageDesc']); }
 970 if($CaseInsensitive=="yes"&&$WholeWord!="yes") {
 971 $_POST['Message'] = preg_replace("/".$Filter."/i", $Replace, $_POST['Message']);
 972 $_POST['MessageDesc'] = preg_replace("/".$Filter."/i", $Replace, $_POST['MessageDesc']); }
 973 ++$melanies; } sql_free_result($melaniert);
 974 $lonewolfqy=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."restrictedwords\" WHERE \"RestrictedMessageName\"='yes' or \"RestrictedUserName\"='yes'", array(null));
 975 $lonewolfrt=sql_query($lonewolfqy,$SQLStat);
 976 $lonewolfnm=sql_num_rows($lonewolfrt);
 977 $lonewolfs=0; $RMatches = null; $RGMatches = null;
 978 while ($lonewolfs < $lonewolfnm) {
 979 $RWord=sql_result($lonewolfrt,$lonewolfs,"Word");
 980 $RCaseInsensitive=sql_result($lonewolfrt,$lonewolfs,"CaseInsensitive");
 981 if($RCaseInsensitive=="on") { $RCaseInsensitive = "yes"; }
 982 if($RCaseInsensitive=="off") { $RCaseInsensitive = "no"; }
 983 if($RCaseInsensitive!="yes"||$RCaseInsensitive!="no") { $RCaseInsensitive = "no"; }
 984 $RWholeWord=sql_result($lonewolfrt,$lonewolfs,"WholeWord");
 985 if($RWholeWord=="on") { $RWholeWord = "yes"; }
 986 if($RWholeWord=="off") { $RWholeWord = "no"; }
 987 if($RWholeWord!="yes"||$RWholeWord!="no") { $RWholeWord = "no"; }
 988 $RestrictedMessageName=sql_result($lonewolfrt,$lonewolfs,"RestrictedMessageName");
 989 if($RestrictedMessageName=="on") { $RestrictedMessageName = "yes"; }
 990 if($RestrictedMessageName=="off") { $RestrictedMessageName = "no"; }
 991 if($RestrictedMessageName!="yes"||$RestrictedMessageName!="no") { $RestrictedMessageName = "no"; }
 992 $RestrictedUserName=sql_result($lonewolfrt,$lonewolfs,"RestrictedUserName");
 993 if($RestrictedUserName=="on") { $RestrictedUserName = "yes"; }
 994 if($RestrictedUserName=="off") { $RestrictedUserName = "no"; }
 995 if($RestrictedUserName!="yes"||$RestrictedUserName!="no") { $RestrictedUserName = "no"; }
 996 $RWord = preg_quote($RWord, "/");
 997 if($RCaseInsensitive!="yes"&&$RWholeWord=="yes") {
 998 if($RestrictedMessageName=="yes") {
 999 $RMatches = preg_match("/\b(".$RWord.")\b/", $_POST['MessageName']);
1000         if($RMatches==true) { break 1; } }
1001 if($RestrictedUserName=="yes") {
1002 $RGMatches = preg_match("/\b(".$RWord.")\b/", $_POST['GuestName']);
1003         if($RGMatches==true) { break 1; } } }
1004 if($RCaseInsensitive=="yes"&&$RWholeWord=="yes") {
1005 if($RestrictedMessageName=="yes") {
1006 $RMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['MessageName']);
1007         if($RMatches==true) { break 1; } }
1008 if($RestrictedUserName=="yes") {
1009 $RGMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['GuestName']);
1010         if($RGMatches==true) { break 1; } } }
1011 if($RCaseInsensitive!="yes"&&$RWholeWord!="yes") {
1012 if($RestrictedMessageName=="yes") {
1013 $RMatches = preg_match("/".$RWord."/", $_POST['MessageName']);
1014         if($RMatches==true) { break 1; } }
1015 if($RestrictedUserName=="yes") {
1016 $RGMatches = preg_match("/".$RWord."/", $_POST['GuestName']);
1017         if($RGMatches==true) { break 1; } } }
1018 if($RCaseInsensitive=="yes"&&$RWholeWord!="yes") {
1019 if($RestrictedMessageName=="yes") {
1020 $RMatches = preg_match("/".$RWord."/i", $_POST['MessageName']);
1021         if($RMatches==true) { break 1; } }
1022 if($RestrictedUserName=="yes") {
1023 $RGMatches = preg_match("/".$RWord."/i", $_POST['GuestName']);
1024         if($RGMatches==true) { break 1; } } }
1025 ++$lonewolfs; } sql_free_result($lonewolfrt);
1026 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"Name\"='%s'", array($_POST['SendMessageTo']));
1027 $reresult=sql_query($requery,$SQLStat);
1028 $renum=sql_num_rows($reresult);
1029 $rei=0;
1030 while ($rei < $renum) {
1031 $SendMessageToID = sql_result($reresult,$rei,"id");
1032 $SendToGroupID = sql_result($reresult,$rei,"GroupID");
1033 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i", array($SendToGroupID));
1034 $gresult=sql_query($gquery,$SQLStat);
1035 $SendUserCanPM=sql_result($gresult,0,"CanPM");
1036 $SendUserCanPM = strtolower($SendUserCanPM);
1037 if($SendUserCanPM!="yes"&&$SendUserCanPM!="no") {
1038         $SendUserCanPM = "no"; }
1039 sql_free_result($gresult);
1040 ++$rei; } sql_free_result($reresult);
1041 if($renum==0) { $Error="Yes"; ?>
1042 <tr>
1043         <td><span class="TableMessage">
1044         <br />Cound not find users name.<br />
1045         </span>&nbsp;</td>
1046 </tr>
1047 <?php } if ($_POST['MessageName']==null) { $Error="Yes";  ?>
1048 <tr>
1049         <td><span class="TableMessage">
1050         <br />You need to enter a Message Name.<br />
1051         </span>&nbsp;</td>
1052 </tr>
1053 <?php } if ($_POST['MessageDesc']==null) { $Error="Yes";  ?>
1054 <tr>
1055         <td><span class="TableMessage">
1056         <br />You need to enter a Message Description.<br />
1057         </span>&nbsp;</td>
1058 </tr>
1059 <?php } if ($SendUserCanPM=="no") { $Error="Yes";  ?>
1060 <tr>
1061         <td><span class="TableMessage">
1062         <br />User Name enter can not get messages.<br />
1063         </span>&nbsp;</td>
1064 </tr>
1065 <?php } if ($_POST['Message']==null) { $Error="Yes";  ?>
1066 <tr>
1067         <td><span class="TableMessage">
1068         <br />You need to enter a Message.<br />
1069         </span>&nbsp;</td>
1070 </tr>
1071 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
1072         $_POST['GuestName']==null) { $Error="Yes"; ?>
1073 <tr>
1074         <td><span class="TableMessage">
1075         <br />You need to enter a Guest Name.<br />
1076         </span>&nbsp;</td>
1077 </tr>
1078 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
1079         $RGMatches==true) { $Error="Yes"; ?>
1080 <tr>
1081         <td><span class="TableMessage">
1082         <br />This Guest Name is restricted to use.<br />
1083         </span>&nbsp;</td>
1084 </tr>
1085 <?php } if($RMatches==true) { $Error="Yes"; ?>
1086 <tr>
1087         <td><span class="TableMessage">
1088         <br />This Message Name is restricted to use.<br />
1089         </span>&nbsp;</td>
1090 </tr>
1091 <?php } if ($Error=="Yes") {
1092 redirect("refresh",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false),"4"); ?>
1093 <tr>
1094         <td><span class="TableMessage">
1095         <br />Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to goto index page.<br />&nbsp;
1096         </span><br /></td>
1097 </tr>
1098 <?php } if ($Error!="Yes") { $LastActive = $utccurtime->getTimestamp();
1099 if($_SESSION['UserGroup']==$Settings['GuestGroup']) { $User1Name = $_POST['GuestName']; }
1100 if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { $User1Name = $_SESSION['MemberName']; }
1101 $User1IP=$_SERVER['REMOTE_ADDR'];
1102 $query = sql_pre_query("INSERT INTO \"".$Settings['sqltable']."messenger\" (\"DiscussionID\", \"SenderID\", \"ReciverID\", \"GuestName\", \"MessageTitle\", \"MessageText\", \"Description\", \"DateSend\", \"Read\", \"IP\") VALUES
1103 (%i, %i, %i, '%s', '%s', '%s', '%s', %i, %i, '%s')", array($_POST['post'],$_SESSION['UserID'],$SendMessageToID,$_SESSION['MemberName'],$_POST['MessageName'],$_POST['Message'],$_POST['MessageDesc'],$LastActive,0,$User1IP));
1104 sql_query($query,$SQLStat);
1105 $messageid = sql_get_next_id($Settings['sqltable'],"messenger",$SQLStat);
1106 $msglinkback = "Click <a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">here</a> to go back to mailbox.";
1107 if($_POST['post']>0) { $msglinkback = "Click <a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$_POST['post'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">here</a> to go back to message."; }
1108 ?><tr>
1109         <td><span class="TableMessage"><br />
1110         Message sent to user <?php echo $_POST['SendMessageTo']; ?>.<br />
1111         <?php echo $msglinkback; ?><br />&nbsp;
1112         </span><br /></td>
1113 </tr>
1114 <?php } ?>
1115 </table>
1116 </td></tr>
1117 <tr class="TableRow4">
1118 <td class="TableColumn4">&nbsp;</td>
1119 </tr>
1120 </table></div>
1121 <?php } ?>
1122 <div class="DivMessages">&nbsp;</div>