inc/messages.php

   1 <?php
   2 /*
   3     This program is free software; you can redistribute it and/or modify
   4     it under the terms of the Revised BSD License.
   5
   6     This program is distributed in the hope that it will be useful,
   7     but WITHOUT ANY WARRANTY; without even the implied warranty of
   8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9     Revised BSD License for more details.
  10
  11     Copyright 2004-2011 iDB Support - http://idb.berlios.de/
  12     Copyright 2004-2011 Game Maker 2k - http://gamemaker2k.org/
  13
  14     $FileInfo: messages.php - Last Update: 06/14/2011 SVN 672 - Author: cooldude2k $
  15 */
  16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
  17 if ($File3Name=="messages.php"||$File3Name=="/messages.php") {
  18         require('index.php');
  19         exit(); }
  20 if(!is_numeric($_GET['id'])) { $_GET['id'] = null; }
  21 if(!is_numeric($_GET['post'])) { $_GET['post'] = null; }
  22 if(!is_numeric($_GET['page'])) { $_GET['page'] = 1; }
  23 // Check if we can read/send PM
  24 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanPM']=="no") {
  25 redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
  26 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
  27 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
  28 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=view","&","=",$prexqstr['index'],$exqstr['index']);
  29 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
  30 $_SESSION['ViewingFile'] = $exfile['index'].$Settings['file_ext']; }
  31 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
  32 $_SESSION['ViewingFile'] = $exfile['index']; }
  33 $_SESSION['PreViewingTitle'] = "Viewing";
  34 $_SESSION['ViewingTitle'] = "Messages";
  35 if($_GET['act']=="view"||$_GET['act']=="viewsent"||$_GET['act']=="read") {
  36 ?>
  37 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">Board index</a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Mailbox</a></div>
  38 <div class="DivNavLinks">&nbsp;</div>
  39 <table class="Table3">
  40 <tr style="width: 100%; vertical-align: top;">
  41         <td style="width: 15%; vertical-align: top;">
  42         <div class="TableSMenuBorder">
  43 <?php if($ThemeSet['TableStyle']=="div") { ?>
  44 <div class="TableSMenuRow1">
  45 <?php echo $ThemeSet['TitleIcon']; ?>Messenger</div>
  46 <?php } ?>
  47 <table id="ProfileLinks" class="TableSMenu" style="width: 100%; text-align: left; vertical-align: top;">
  48 <?php if($ThemeSet['TableStyle']=="table") { ?>
  49 <tr class="TableSMenuRow1">
  50 <td class="TableSMenuColumn1"><?php echo $ThemeSet['TitleIcon']; ?>Messenger</td>
  51 </tr><?php } ?>
  52 <tr class="TableSMenuRow2">
  53 <td class="TableSMenuColumn2">&nbsp;</td>
  54 </tr><tr class="TableSMenuRow3">
  55 <td class="TableSMenuColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">View MailBox</a></td>
  56 </tr><tr class="TableSMenuRow3">
  57 <td class="TableSMenuColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">View SentBox</a></td>
  58 </tr><tr class="TableSMenuRow3">
  59 <td class="TableSMenuColumn3"><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Send Message</a></td>
  60 </tr><tr class="TableSMenuRow4">
  61 <td class="TableSMenuColumn4">&nbsp;</td>
  62 </tr></table></div>
  63 </td>
  64         <td style="width: 85%; vertical-align: top;">
  65 <?php
  66 if($_GET['act']=="view") {
  67 //Get SQL LIMIT Number
  68 $nums = $_GET['page'] * $Settings['max_pmlist'];
  69 $PageLimit = $nums - $Settings['max_pmlist'];
  70 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"ReciverID\"=%i ORDER BY \"DateSend\" DESC ".$SQLimit, array($_SESSION['UserID'],$PageLimit,$Settings['max_pmlist']));
  71 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."messenger\" WHERE \"ReciverID\"=%i", array($_SESSION['UserID']));
  72 $result=sql_query($query,$SQLStat);
  73 $rnresult=sql_query($rnquery,$SQLStat);
  74 $NumberMessage = sql_result($rnresult,0);
  75 sql_free_result($rnresult);
  76 if($NumberMessage==null) {
  77         $NumberMessage = 0; }
  78 $num = $NumberMessage;
  79 $num=sql_num_rows($result);
  80 //Start MessengerList Page Code
  81 if(!isset($Settings['max_pmlist'])) { $Settings['max_pmlist'] = 10; }
  82 if($_GET['page']==null) { $_GET['page'] = 1; }
  83 if($_GET['page']<=0) { $_GET['page'] = 1; }
  84 $nums = $_GET['page'] * $Settings['max_pmlist'];
  85 if($nums>$num) { $nums = $num; }
  86 $numz = $nums - $Settings['max_pmlist'];
  87 if($numz<=0) { $numz = 0; }
  88 //$i=$numz;
  89 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
  90 if($nums>=$num) { $nextpage = $_GET['page']; }
  91 if($numz>=$Settings['max_pmlist']) { $backpage = $_GET['page'] - 1; }
  92 if($_GET['page']<=1) { $backpage = 1; }
  93 $pnum = $num; $l = 1; $Pages = null;
  94 while ($pnum>0) {
  95 if($pnum>=$Settings['max_pmlist']) {
  96         $pnum = $pnum - $Settings['max_pmlist'];
  97         $Pages[$l] = $l; ++$l; }
  98 if($pnum<$Settings['max_pmlist']&&$pnum>0) {
  99         $pnum = $pnum - $pnum;
 100         $Pages[$l] = $l; ++$l; } }
 101 //End MessengerList Page Code
 102 $num=sql_num_rows($result);
 103 $i=0;
 104 //List Page Number Code Start
 105 $pagenum=count($Pages);
 106 if($_GET['page']>$pagenum) {
 107         $_GET['page'] = $pagenum; }
 108 $pagei=0; $pstring = null;
 109 if($pagenum>1) {
 110 $pstring = "<div class=\"PageList\"><span class=\"pagelink\">".$pagenum." Pages:</span> "; }
 111 if($_GET['page']<4) { $Pagez[0] = null; }
 112 if($_GET['page']>=4) { $Pagez[0] = "First"; }
 113 if($_GET['page']>=3) {
 114 $Pagez[1] = $_GET['page'] - 2; }
 115 if($_GET['page']<3) {
 116 $Pagez[1] = null; }
 117 if($_GET['page']>=2) {
 118 $Pagez[2] = $_GET['page'] - 1; }
 119 if($_GET['page']<2) {
 120 $Pagez[2] = null; }
 121 $Pagez[3] = $_GET['page'];
 122 if($_GET['page']<$pagenum) {
 123 $Pagez[4] = $_GET['page'] + 1; }
 124 if($_GET['page']>=$pagenum) {
 125 $Pagez[4] = null; }
 126 $pagenext = $_GET['page'] + 1;
 127 if($pagenext<$pagenum) {
 128 $Pagez[5] = $_GET['page'] + 2; }
 129 if($pagenext>=$pagenum) {
 130 $Pagez[5] = null; }
 131 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 132 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 133 $pagenumi=count($Pagez);
 134 if($num==0) {
 135 $pagenumi = 0;
 136 $pstring = null; }
 137 if($pagenum>1) {
 138 while ($pagei < $pagenumi) {
 139 if($_GET['page']!=1&&$pagei==1) {
 140 $Pback = $_GET['page'] - 1;
 141 $pstring = $pstring."<span class=\"pagelink\">a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pback,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&lt;</a></span> "; }
 142 if($Pagez[$pagei]!=null&&
 143    $Pagez[$pagei]!="First"&&
 144    $Pagez[$pagei]!="Last") {
 145 if($pagei!=3) {
 146 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; }
 147 if($pagei==3) {
 148 $pstring = $pstring."<span class=\"pagecurrent\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; } }
 149 if($Pagez[$pagei]=="First") {
 150 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&laquo;</a></span> "; }
 151 if($Pagez[$pagei]=="Last") {
 152 $ptestnext = $pagenext + 1;
 153 $paget = $pagei - 1;
 154 $Pnext = $_GET['page'] + 1;
 155 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$Pnext,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&gt;</a></span> ";
 156 if($ptestnext<$pagenum) {
 157 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&raquo;</a></span> "; } }
 158         ++$pagei; } $pstring = $pstring."</div>"; }
 159 //echo $pstring;
 160 //List Page Number Code end
 161 echo $pstring;
 162 if($pagenum>1) {
 163 ?>
 164 <div class="DivPageLinks">&nbsp;</div>
 165 <?php } ?>
 166 <div class="TableMenuBorder">
 167 <?php if($ThemeSet['TableStyle']=="div") { ?>
 168 <div class="TableMenuRow1">
 169 <span style="float: left;">
 170 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 171 </span>&nbsp;</div>
 172 <?php } ?>
 173 <table class="TableMenu" style="width: 100%;">
 174 <?php if($ThemeSet['TableStyle']=="table") { ?>
 175 <tr class="TableMenuRow1">
 176 <td class="TableMenuColumn1" colspan="4"><span style="float: left;">
 177 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 178 </span>&nbsp;</td>
 179 </tr><?php } ?>
 180 <tr id="Messenger" class="TableMenuRow2">
 181 <th class="TableMenuColumn2" style="width: 4%;">State</th>
 182 <th class="TableMenuColumn2" style="width: 46%;">Message Name</th>
 183 <th class="TableMenuColumn2" style="width: 25%;">Sender</th>
 184 <th class="TableMenuColumn2" style="width: 25%;">Time</th>
 185 </tr>
 186 <?php
 187 while ($i < $num) {
 188 $PMID=sql_result($result,$i,"id");
 189 $SenderID=sql_result($result,$i,"SenderID");
 190 $SenderIP=sql_result($result,$i,"IP");
 191 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat);
 192 if($PreSenderName['Name']===null) { $SenderID = -1;
 193 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat); }
 194 $SenderName = $PreSenderName['Name'];
 195 $SenderHidden = $PreSenderName['Hidden'];
 196 $ReciverID=sql_result($result,$i,"ReciverID");
 197 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat);
 198 if($PreReciverName['Name']===null) { $ReciverID = -1;
 199 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat); }
 200 $ReciverName = $PreReciverName['Name'];
 201 $ReciverHidden = $PreReciverName['Hidden'];
 202 $PMGuest=sql_result($result,$i,"GuestName");
 203 $MessageName=sql_result($result,$i,"MessageTitle");
 204 $MessageDesc=sql_result($result,$i,"Description");
 205 $DateSend=sql_result($result,$i,"DateSend");
 206 $DateSend=GMTimeChange("F j, Y, g:i a",$DateSend,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 207 $MessageStat=sql_result($result,$i,"Read");
 208 if($SenderName=="Guest") { $SenderName=$PMGuest;
 209 if($SenderName==null) { $SenderName="Guest"; } }
 210 $PreMessage = $ThemeSet['MessageUnread'];
 211 if ($MessageStat==0) {
 212         $PreMessage=$ThemeSet['MessageUnread']; }
 213 if ($MessageStat==1) {
 214         $PreMessage=$ThemeSet['MessageRead']; }
 215 ?>
 216 <tr class="TableMenuRow3" id="Message<?php echo $PMID; ?>">
 217 <td class="TableMenuColumn3"><div class="messagestate">
 218 <?php echo $PreMessage; ?></div></td>
 219 <td class="TableMenuColumn3"><div class="messagename">
 220 <a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a></div>
 221 <div class="messagedesc"><?php echo $MessageDesc; ?></div></td>
 222 <td class="TableMenuColumn3" style="text-align: center;"><?php
 223 if($SenderID>0&&$SenderHidden=="no") {
 224 echo "<a href=\"";
 225 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$SenderID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 226 echo "\">".$SenderName."</a>"; }
 227 if($SenderID<=0||$SenderHidden=="yes") {
 228 echo "<span>".$SenderName."</span>"; }
 229 ?></td>
 230 <td class="TableMenuColumn3" style="text-align: center;"><?php echo $DateSend; ?></td>
 231 </tr>
 232 <?php ++$i; } sql_free_result($result); ?>
 233 <tr id="MessengerEnd" class="TableMenuRow4">
 234 <td class="TableMenuColumn4" colspan="4">&nbsp;</td>
 235 </tr>
 236 <?php }
 237 if($_GET['act']=="viewsent") {
 238 //Get SQL LIMIT Number
 239 $nums = $_GET['page'] * $Settings['max_pmlist'];
 240 $PageLimit = $nums - $Settings['max_pmlist'];
 241 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"SenderID\"=%i ORDER BY \"DateSend\" DESC ".$SQLimit, array($_SESSION['UserID'],$PageLimit,$Settings['max_pmlist']));
 242 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."messenger\" WHERE \"SenderID\"=%i", array($_SESSION['UserID']));
 243 $result=sql_query($query,$SQLStat);
 244 $rnresult=sql_query($rnquery,$SQLStat);
 245 $NumberMessage = sql_result($rnresult,0);
 246 sql_free_result($rnresult);
 247 if($NumberMessage==null) {
 248         $NumberMessage = 0; }
 249 $num = $NumberMessage;
 250 $num=sql_num_rows($result);
 251 //Start MessengerList Page Code
 252 if(!isset($Settings['max_pmlist'])) { $Settings['max_pmlist'] = 10; }
 253 if($_GET['page']==null) { $_GET['page'] = 1; }
 254 if($_GET['page']<=0) { $_GET['page'] = 1; }
 255 $nums = $_GET['page'] * $Settings['max_pmlist'];
 256 if($nums>$num) { $nums = $num; }
 257 $numz = $nums - $Settings['max_pmlist'];
 258 if($numz<=0) { $numz = 0; }
 259 //$i=$numz;
 260 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
 261 if($nums>=$num) { $nextpage = $_GET['page']; }
 262 if($numz>=$Settings['max_pmlist']) { $backpage = $_GET['page'] - 1; }
 263 if($_GET['page']<=1) { $backpage = 1; }
 264 $pnum = $num; $l = 1; $Pages = null;
 265 while ($pnum>0) {
 266 if($pnum>=$Settings['max_pmlist']) {
 267         $pnum = $pnum - $Settings['max_pmlist'];
 268         $Pages[$l] = $l; ++$l; }
 269 if($pnum<$Settings['max_pmlist']&&$pnum>0) {
 270         $pnum = $pnum - $pnum;
 271         $Pages[$l] = $l; ++$l; } }
 272 //End MessengerList Page Code
 273 $num=sql_num_rows($result);
 274 $i=0;
 275 //List Page Number Code Start
 276 $pagenum=count($Pages);
 277 if($_GET['page']>$pagenum) {
 278         $_GET['page'] = $pagenum; }
 279 $pagei=0; $pstring = null;
 280 if($pagenum>1) {
 281 $pstring = "<div class=\"PageList\"><span class=\"pagelink\">".$pagenum." Pages:</span> "; }
 282 if($_GET['page']<4) { $Pagez[0] = null; }
 283 if($_GET['page']>=4) { $Pagez[0] = "First"; }
 284 if($_GET['page']>=3) {
 285 $Pagez[1] = $_GET['page'] - 2; }
 286 if($_GET['page']<3) {
 287 $Pagez[1] = null; }
 288 if($_GET['page']>=2) {
 289 $Pagez[2] = $_GET['page'] - 1; }
 290 if($_GET['page']<2) {
 291 $Pagez[2] = null; }
 292 $Pagez[3] = $_GET['page'];
 293 if($_GET['page']<$pagenum) {
 294 $Pagez[4] = $_GET['page'] + 1; }
 295 if($_GET['page']>=$pagenum) {
 296 $Pagez[4] = null; }
 297 $pagenext = $_GET['page'] + 1;
 298 if($pagenext<$pagenum) {
 299 $Pagez[5] = $_GET['page'] + 2; }
 300 if($pagenext>=$pagenum) {
 301 $Pagez[5] = null; }
 302 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 303 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 304 $pagenumi=count($Pagez);
 305 if($num==0) {
 306 $pagenumi = 0;
 307 $pstring = null; }
 308 if($pagenum>1) {
 309 while ($pagei < $pagenumi) {
 310 if($_GET['page']!=1&&$pagei==1) {
 311 $Pback = $_GET['page'] - 1;
 312 $pstring = $pstring."<span class=\"pagelink\">a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pback,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&lt;</a></span> "; }
 313 if($Pagez[$pagei]!=null&&
 314    $Pagez[$pagei]!="First"&&
 315    $Pagez[$pagei]!="Last") {
 316 if($pagei!=3) {
 317 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; }
 318 if($pagei==3) {
 319 $pstring = $pstring."<span class=\"pagecurrent\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">".$Pagez[$pagei]."</a></span> "; } }
 320 if($Pagez[$pagei]=="First") {
 321 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&laquo;</a></span> "; }
 322 if($Pagez[$pagei]=="Last") {
 323 $ptestnext = $pagenext + 1;
 324 $paget = $pagei - 1;
 325 $Pnext = $_GET['page'] + 1;
 326 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$Pnext,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&gt;</a></span> ";
 327 if($ptestnext<$pagenum) {
 328 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger'])."\">&raquo;</a></span> "; } }
 329         ++$pagei; } $pstring = $pstring."</div>"; }
 330 //echo $pstring;
 331 //List Page Number Code end
 332 echo $pstring;
 333 if($pagenum>1) {
 334 ?>
 335 <div class="DivPageLinks">&nbsp;</div>
 336 <?php } ?>
 337 <div class="TableMenuBorder">
 338 <?php if($ThemeSet['TableStyle']=="div") { ?>
 339 <div class="TableMenuRow1">
 340 <span style="float: left;">
 341 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 342 </span>&nbsp;</div>
 343 <?php } ?>
 344 <table class="TableMenu" style="width: 100%;">
 345 <?php if($ThemeSet['TableStyle']=="table") { ?>
 346 <tr class="TableMenuRow1">
 347 <td class="TableMenuColumn1" colspan="4"><span style="float: left;">
 348 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=viewsent&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">MailBox&nbsp;(<?php echo $PMNumber; ?>)</a>
 349 </span>&nbsp;</td>
 350 </tr><?php } ?>
 351 <tr id="Messenger" class="TableMenuRow2">
 352 <th class="TableMenuColumn2" style="width: 4%;">State</th>
 353 <th class="TableMenuColumn2" style="width: 46%;">Message Name</th>
 354 <th class="TableMenuColumn2" style="width: 25%;">Sent To</th>
 355 <th class="TableMenuColumn2" style="width: 25%;">Time</th>
 356 </tr>
 357 <?php
 358 while ($i < $num) {
 359 $PMID=sql_result($result,$i,"id");
 360 $SenderID=sql_result($result,$i,"SenderID");
 361 $SenderIP=sql_result($result,$i,"IP");
 362 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat);
 363 if($PreSenderName['Name']===null) { $SenderID = -1;
 364 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat); }
 365 $SenderName = $PreSenderName['Name'];
 366 $SenderHidden = $PreSenderName['Hidden'];
 367 $ReciverID=sql_result($result,$i,"ReciverID");
 368 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat);
 369 if($PreReciverName['Name']===null) { $ReciverID = -1;
 370 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat); }
 371 $ReciverName = $PreReciverName['Name'];
 372 $ReciverHidden = $PreReciverName['Hidden'];
 373 $PMGuest=sql_result($result,$i,"GuestName");
 374 $MessageName=sql_result($result,$i,"MessageTitle");
 375 $MessageDesc=sql_result($result,$i,"Description");
 376 $DateSend=sql_result($result,$i,"DateSend");
 377 $DateSend=GMTimeChange("F j, Y, g:i a",$DateSend,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 378 $MessageStat=sql_result($result,$i,"Read");
 379 if($SenderName=="Guest") { $SenderName=$PMGuest;
 380 if($SenderName==null) { $SenderName="Guest"; } }
 381 $PreMessage = $ThemeSet['MessageUnread'];
 382 if ($MessageStat==0) {
 383         $PreMessage=$ThemeSet['MessageUnread']; }
 384 if ($MessageStat==1) {
 385         $PreMessage=$ThemeSet['MessageRead']; }
 386 ?>
 387 <tr class="TableMenuRow3" id="Message<?php echo $PMID; ?>">
 388 <td class="TableMenuColumn3"><div class="messagestate">
 389 <?php echo $PreMessage; ?></div></td>
 390 <td class="TableMenuColumn3"><div class="messagename">
 391 <a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=read&id=".$PMID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a></div>
 392 <div class="messagedesc"><?php echo $MessageDesc; ?></div></td>
 393 <td class="TableMenuColumn3" style="text-align: center;"><?php
 394 if($ReciverID>0&&$ReciverHidden=="no") {
 395 echo "<a href=\"";
 396 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$ReciverID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 397 echo "\">".$ReciverName."</a>"; }
 398 if($ReciverID<=0||$ReciverHidden=="yes") {
 399 echo "<span>".$ReciverName."</span>"; }
 400 ?></td>
 401 <td class="TableMenuColumn3" style="text-align: center;"><?php echo $DateSend; ?></td>
 402 </tr>
 403 <?php ++$i; } ?>
 404 <tr id="MessengerEnd" class="TableMenuRow4">
 405 <td class="TableMenuColumn4" colspan="4">&nbsp;</td>
 406 </tr>
 407 <?php sql_free_result($result); }
 408 if($_GET['act']=="read") {
 409 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"id\"=%i", array($_GET['id']));
 410 $result=sql_query($query,$SQLStat);
 411 $num=sql_num_rows($result);
 412 $is=0;
 413 if($num==0) { redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 414 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 415 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 416 while ($is < $num) {
 417 $PMID=sql_result($result,$is,"id");
 418 $SenderID=sql_result($result,$is,"SenderID");
 419 $SenderIP=sql_result($result,$is,"IP");
 420 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat);
 421 if($PreSenderName['Name']===null) { $SenderID = -1;
 422 $PreSenderName = GetUserName($SenderID,$Settings['sqltable'],$SQLStat); }
 423 $SenderName = $PreSenderName['Name'];
 424 $SenderHidden = $PreSenderName['Hidden'];
 425 $ReciverID=sql_result($result,$is,"ReciverID");
 426 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat);
 427 if($PreReciverName['Name']===null) { $ReciverID = -1;
 428 $PreReciverName = GetUserName($ReciverID,$Settings['sqltable'],$SQLStat); }
 429 $ReciverName = $PreReciverName['Name'];
 430 $ReciverHidden = $PreReciverName['Hidden'];
 431 $PMGuest=sql_result($result,$is,"GuestName");
 432 $MessageName=sql_result($result,$is,"MessageTitle");
 433 $DateSend=sql_result($result,$is,"DateSend");
 434 $DateSend=GMTimeChange("F j, Y, g:i a",$DateSend,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 435 $MessageText=sql_result($result,$is,"MessageText");
 436 $MessageDesc=sql_result($result,$is,"Description");
 437 $ipshow = "two";
 438 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i", array($SenderID));
 439 $reresult=sql_query($requery,$SQLStat);
 440 $renum=sql_num_rows($reresult);
 441 $rei=0;
 442 $memrequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."mempermissions\" WHERE \"id\"=%i LIMIT 1", array($SenderID));
 443 $memreresult=sql_query($memrequery,$SQLStat);
 444 $memrenum=sql_num_rows($memreresult);
 445 if($_SESSION['UserID']!=$ReciverID&&
 446         $_SESSION['UserID']!=$SenderID) {
 447 redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 448 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 449 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 450 while ($rei < $renum) {
 451 $User1ID=$SenderID;
 452 $User1Name=sql_result($reresult,$rei,"Name");
 453 $SenderName = $User1Name;
 454 $User1IP=sql_result($reresult,$rei,"IP");
 455 if($User1IP==$SenderIP) { $ipshow = "one"; }
 456 $User1Email=sql_result($reresult,$rei,"Email");
 457 $User1Title=sql_result($reresult,$rei,"Title");
 458 $PreUserCanExecPHP=sql_result($memreresult,$rei,"CanExecPHP");
 459 if($PreUserCanExecPHP!="yes"&&$PreUserCanExecPHP!="no"&&$PreUserCanExecPHP!="group") {
 460         $PreUserCanExecPHP = "no"; }
 461 $PreUserCanDoHTML=sql_result($memreresult,$rei,"CanDoHTML");
 462 if($PreUserCanDoHTML!="yes"&&$PreUserCanDoHTML!="no"&&$PreUserCanDoHTML!="group") {
 463         $PreUserCanDoHTML = "no"; }
 464 $PreUserCanUseBBags=sql_result($memreresult,$rei,"CanUseBBags");
 465 if($PreUserCanUseBBags!="yes"&&$PreUserCanUseBBags!="no"&&$PreUserCanUseBBags!="group") {
 466         $PreUserCanUseBBags = "no"; }
 467 sql_free_result($memreresult);
 468 $User1Joined=sql_result($reresult,$rei,"Joined");
 469 $User1Joined=GMTimeChange("M j Y",$User1Joined,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 470 $User1GroupID=sql_result($reresult,$rei,"GroupID");
 471 $User1Hidden=sql_result($reresult,$rei,"HiddenMember");
 472 $SenderHidden = $User1Hidden;
 473 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i", array($User1GroupID));
 474 $gresult=sql_query($gquery,$SQLStat);
 475 $User1Group=sql_result($gresult,0,"Name");
 476 $User1CanExecPHP = $PreUserCanExecPHP;
 477 if($PreUserCanExecPHP=="group") {
 478 $User1CanExecPHP=sql_result($gresult,0,"CanExecPHP"); }
 479 if($User1CanExecPHP!="yes"&&$User1CanExecPHP!="no") {
 480         $User1CanExecPHP = "no"; }
 481 $User1CanDoHTML = $PreUserCanDoHTML;
 482 if($PreUserCanDoHTML=="group") {
 483 $User1CanDoHTML=sql_result($gresult,0,"CanDoHTML"); }
 484 if($User1CanDoHTML!="yes"&&$User1CanDoHTML!="no") {
 485         $User1CanDoHTML = "no"; }
 486 $User1CanUseBBags = $PreUserCanUseBBags;
 487 if($User1CanUseBBags=="group") {
 488 $User1CanUseBBags=sql_result($gresult,0,"CanUseBBags"); }
 489 if($User1CanUseBBags!="yes"&&$User1CanUseBBags!="no") {
 490         $User1CanUseBBags = "no"; }
 491 $GroupNamePrefix=sql_result($gresult,0,"NamePrefix");
 492 $GroupNameSuffix=sql_result($gresult,0,"NameSuffix");
 493 sql_free_result($gresult);
 494 if($User1Title=="") { $User1Title = $User1Group; }
 495 $User1Signature=sql_result($reresult,$rei,"Signature");
 496 $User1Avatar=sql_result($reresult,$rei,"Avatar");
 497 $User1AvatarSize=sql_result($reresult,$rei,"AvatarSize");
 498 if ($User1Avatar=="http://"||$User1Avatar==null||
 499         strtolower($User1Avatar)=="noavatar") {
 500 $User1Avatar=$ThemeSet['NoAvatar'];
 501 $User1AvatarSize=$ThemeSet['NoAvatarSize']; }
 502 $AvatarSize1=explode("x", $User1AvatarSize);
 503 $AvatarSize1W=$AvatarSize1[0]; $AvatarSize1H=$AvatarSize1[1];
 504 $User1Website=sql_result($reresult,$rei,"Website");
 505 $User1Website = urlcheck($User1Website);
 506 $BoardWWWChCk = parse_url($Settings['idburl']);
 507 $User1WWWChCk = parse_url($User1Website);
 508 $opennew = " onclick=\"window.open(this.href);return false;\"";
 509 if($BoardWWWChCk['host']==$User1WWWChCk['host']) {
 510         $opennew = null; }
 511 $User1PostCount=sql_result($reresult,$rei,"PostCount");
 512 $User1Karma=sql_result($reresult,$rei,"Karma");
 513 $User1IP=sql_result($reresult,$rei,"IP");
 514 ++$rei; } sql_free_result($reresult);
 515 ++$is; } sql_free_result($result);
 516 if($_SESSION['UserID']==$ReciverID) {
 517 $queryup = sql_pre_query("UPDATE \"".$Settings['sqltable']."messenger\" SET \"Read\"=%i WHERE \"id\"=%i", array(1,$_GET['id']));
 518 sql_query($queryup,$SQLStat); }
 519 if($User1Name=="Guest") { $User1Name=$PMGuest;
 520 if($User1Name==null) { $User1Name="Guest"; } }
 521 if(isset($GroupNamePrefix)&&$GroupNamePrefix!=null) {
 522         $User1Name = $GroupNamePrefix.$User1Name; }
 523 if(isset($GroupNameSuffix)&&$GroupNameSuffix!=null) {
 524         $User1Name = $User1Name.$GroupNameSuffix; }
 525 if($User1CanUseBBags=="yes") { $MessageText = bbcode_parser($MessageText); }
 526 if($User1CanExecPHP=="no") {
 527 $MessageText = preg_replace("/\[ExecPHP\](.*?)\[\/ExecPHP\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute php code.",$MessageText); }
 528 if($User1CanExecPHP=="yes") { $MessageText = php_execute($MessageText); }
 529 if($User1CanDoHTML=="no") {
 530 $MessageText = preg_replace("/\[DoHTML\](.*?)\[\/DoHTML\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute html.",$MessageText); }
 531 if($User1CanDoHTML=="yes") { $MessageText = do_html_bbcode($MessageText); }
 532 $MessageText = text2icons($MessageText,$Settings['sqltable'],$SQLStat);
 533 $MessageText = preg_replace("/\<br\>/", "<br />", nl2br($MessageText));
 534 $MessageText = url2link($MessageText);
 535 if($User1CanUseBBags=="yes") { $User1Signature = bbcode_parser($User1Signature); }
 536 if($User1CanExecPHP=="no") {
 537 $User1Signature = preg_replace("/\[ExecPHP\](.*?)\[\/ExecPHP\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute php code.",$User1Signature); }
 538 if($User1CanExecPHP=="yes") { $User1Signature = php_execute($User1Signature); }
 539 if($User1CanDoHTML=="no") {
 540 $User1Signature = preg_replace("/\[DoHTML\](.*?)\[\/DoHTML\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute html.",$User1Signature); }
 541 if($User1CanDoHTML=="yes") { $User1Signature = do_html_bbcode($User1Signature); }
 542 $User1Signature = text2icons($User1Signature,$Settings['sqltable'],$SQLStat);
 543 $User1Signature = preg_replace("/\<br\>/", "<br />", nl2br($User1Signature));
 544 $User1Signature = url2link($User1Signature);
 545 ?>
 546 <div class="TableInfoMini1Border">
 547 <?php if($ThemeSet['TableStyle']=="div") { ?>
 548 <div class="TableInfoMiniRow1">
 549 <span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a> ( <?php echo $MessageDesc; ?> )</span>
 550 </div>
 551 <?php } ?>
 552 <table class="TableInfoMini1" style="width: 100%;">
 553 <?php if($ThemeSet['TableStyle']=="table") { ?>
 554 <tr class="TableInfoMiniRow1">
 555 <td class="TableInfoMiniColumn1" colspan="2"><span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $MessageName; ?></a> ( <?php echo $MessageDesc; ?> )</span>
 556 </td>
 557 </tr><?php } ?>
 558 <tr class="TableInfoMiniRow2">
 559 <td class="TableInfoMiniColumn2" style="vertical-align: middle; width: 160px;">
 560 &nbsp;<?php
 561 if($User1ID>0&&$User1Hidden=="no") {
 562 echo "<a href=\"";
 563 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 564 echo "\">".$User1Name."</a>"; }
 565 if($User1ID<=0||$User1Hidden=="yes") {
 566 echo "<span>".$User1Name."</span>"; }
 567 ?></td>
 568 <td class="TableInfoMiniColumn2" style="vertical-align: middle;">
 569 <div style="float: left; text-align: left;">
 570 <span style="font-weight: bold;">Time Sent: </span><?php echo $DateSend; ?>
 571 </div>
 572 <div style="text-align: right;">
 573 <?php if(isset($ThemeSet['Report'])&&$ThemeSet['Report']!=null) { ?>
 574 <a href="#Act/Report"><?php echo $ThemeSet['Report']; ?></a>
 575 <?php } if($GroupInfo['CanPM']=="yes"&&isset($ThemeSet['QuoteReply'])&&$ThemeSet['QuoteReply']!=null) {
 576 echo $ThemeSet['LineDividerTopic']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create&id=".$User1ID."&post=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>"><?php echo $ThemeSet['QuoteReply']; ?></a>
 577 <?php } ?>&nbsp;</div>
 578 </td>
 579 </tr>
 580 <tr class="TableInfoMiniRow3">
 581 <td class="TableInfoMiniColumn3" style="vertical-align: top; width: 180px;">
 582 <?php  // Avatar Table Thanks For SeanJ's Help at http://seanj.jcink.com/
 583  ?>
 584  <table class="AvatarTable" style="width: 100px; height: 100px; text-align: center;">
 585         <tr class="AvatarRow" style="width: 100%; height: 100%;">
 586                 <td class="AvatarRow" style="width: 100%; height: 100%; text-align: center; vertical-align: middle;">
 587                 <img src="<?php echo $User1Avatar; ?>" alt="<?php echo $User1Name; ?>'s Avatar" title="<?php echo $User1Name; ?>'s Avatar" style="border: 0px; width: <?php echo $AvatarSize1W; ?>px; height: <?php echo $AvatarSize1H; ?>px;" />
 588                 </td>
 589         </tr>
 590  </table><br />
 591 <?php echo $User1Title; ?><br />
 592 Group: <?php echo $User1Group; ?><br />
 593 Member: <?php
 594 if($User1ID>0&&$User1Hidden=="no") { echo $User1ID; }
 595 if($User1ID<=0||$User1Hidden=="yes") { echo 0; }
 596 ?><br />
 597 Posts: <?php echo $User1PostCount; ?><br />
 598 Karma: <?php echo $User1Karma; ?><br />
 599 Joined: <?php echo $User1Joined; ?><br />
 600 <?php if($GroupInfo['HasAdminCP']=="yes") { ?>
 601 User IP: <a onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$User1IP); ?>">
 602 <?php echo $User1IP; ?></a><br />
 603 <?php if($ipshow=="two") { ?>
 604 Message IP: <a onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$SenderIP); ?>">
 605 <?php echo $SenderIP; ?></a><br />
 606 <?php } } ?><br />
 607 </td>
 608 <td class="TableInfoMiniColumn3" style="vertical-align: middle;">
 609 <div class="pmpost"><?php echo $MessageText; ?></div>
 610 <?php if(isset($User1Signature)&&$User1Signature!="") { ?> <br />--------------------
 611 <div class="signature"><?php echo $User1Signature; ?></div><?php } ?>
 612 </td>
 613 </tr>
 614 <tr class="TableInfoMiniRow4">
 615 <td class="TableInfoMiniColumn4" colspan="2">
 616 <span style="text-align: left;">&nbsp;<a href="<?php
 617 if($User1ID>0&&$User1Hidden=="no"&&isset($ThemeSet['Profile'])&&$ThemeSet['Profile']!=null) {
 618 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); }
 619 if(($User1ID<=0||$User1Hidden=="yes")&&isset($ThemeSet['Profile'])&&$ThemeSet['Profile']!=null) {
 620 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 621 ?>"><?php echo $ThemeSet['Profile']; ?></a>
 622 <?php if(isset($ThemeSet['WWW'])&&$ThemeSet['WWW']!=null) {
 623 echo $ThemeSet['LineDividerTopic']; ?><a href="<?php echo $User1Website; ?>"<?php echo $opennew; ?>><?php echo $ThemeSet['WWW']; ?></a><?php } echo $ThemeSet['LineDividerTopic']; ?><a href="<?php
 624 if($User1ID>0&&$User1Hidden=="no"&&isset($ThemeSet['PM'])&&$ThemeSet['PM']!=null) {
 625 echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); }
 626 if(($User1ID<=0||$User1Hidden=="yes")&&isset($ThemeSet['PM'])&&$ThemeSet['PM']!=null) {
 627 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 628 ?>"><?php echo $ThemeSet['PM']; ?></a></span>
 629 </td></tr>
 630 <?php } ?>
 631 </table></div>
 632 </td></tr>
 633 </table>
 634 <?php } if($_GET['act']=="create") {
 635 $SendMessageTo = null;
 636 if($_GET['id']!=null&&$_GET['id']!=-1) {
 637 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i", array($_GET['id']));
 638 $reresult=sql_query($requery,$SQLStat);
 639 $renum=sql_num_rows($reresult);
 640 $rei=0;
 641 while ($rei < $renum) {
 642 $SendMessageTo = sql_result($reresult,$rei,"Name");
 643 $SendMessageTo = htmlspecialchars($SendMessageTo, ENT_QUOTES, $Settings['charset']);
 644 $SendToGroupID = sql_result($reresult,$rei,"GroupID");
 645 ++$rei; } sql_free_result($reresult); }
 646 if(!isset($renum)) { $renum = 0; }
 647 if($renum==0) { $SendMessageTo = null; }
 648 $QuoteReply = null; $QuoteDescription = null; $QuoteTitle = null;
 649 if($_GET['post']!=null) {
 650 if(isset($SendMessageTo)) {
 651 $QuoteUserName = $SendMessageTo; }
 652 if(!isset($SendMessageTo)) {
 653 $QuoteUserName = "Unknown"; }
 654 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."messenger\" WHERE \"id\"=%i", array($_GET['post']));
 655 $result=sql_query($query,$SQLStat);
 656 $num=sql_num_rows($result);
 657 $QuoteTitle=sql_result($result,0,"MessageTitle");
 658 $MessageText=sql_result($result,0,"MessageText");
 659 $QuoteReply = preg_replace("/\<br\>/", "<br />", nl2br($MessageText));
 660 $QuoteDescription=sql_result($result,0,"Description");
 661 $result=sql_query($query,$SQLStat);
 662 $num=sql_num_rows($result);
 663 $QuoteReply = remove_bad_entities($QuoteReply);
 664 $QuoteDescription = str_replace("Re: ","",$QuoteDescription);
 665 $QuoteDescription = "Re: ".$QuoteDescription;
 666 $QuoteTitle = str_replace("Re: ","",$QuoteTitle);
 667 $QuoteTitle = "Re: ".$QuoteTitle;
 668 $QuoteReply = null; }
 669 $UFID = rand_uuid("rand");
 670 $_SESSION['UserFormID'] = $UFID;
 671 ?>
 672 <div class="Table1Border">
 673 <?php if($ThemeSet['TableStyle']=="div") { ?>
 674 <div class="TableRow1">
 675 <span style="text-align: left;">
 676 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Seanding a Message</a></span></div>
 677 <?php } ?>
 678 <table class="Table1" id="MakeMessage">
 679 <?php if($ThemeSet['TableStyle']=="table") { ?>
 680 <tr class="TableRow1" id="MessageStart">
 681 <td class="TableColumn1" colspan="2"><span style="text-align: left;">
 682 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Seanding a Message</a></span>
 683 </td>
 684 </tr><?php } ?>
 685 <tr id="MakeMessageRow" class="TableRow2">
 686 <td class="TableColumn2" colspan="2" style="width: 100%;">Making a Message</td>
 687 </tr>
 688 <tr class="TableRow3" id="MkMessage">
 689 <td class="TableColumn3" style="width: 15%; vertical-align: middle; text-align: center;">
 690 <div style="width: 100%; height: 160px; overflow: auto;">
 691 <table style="width: 100%; text-align: center;"><?php
 692 $renee_query=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."smileys\" WHERE \"Display\"='yes'", array(null));
 693 $renee_result=sql_query($renee_query,$SQLStat);
 694 $renee_num=sql_num_rows($renee_result);
 695 $renee_s=0; $SmileRow=0; $SmileCRow=0;
 696 while ($renee_s < $renee_num) { ++$SmileRow;
 697 $FileName=sql_result($renee_result,$renee_s,"FileName");
 698 $SmileName=sql_result($renee_result,$renee_s,"SmileName");
 699 $SmileText=sql_result($renee_result,$renee_s,"SmileText");
 700 $SmileDirectory=sql_result($renee_result,$renee_s,"Directory");
 701 $ShowSmile=sql_result($renee_result,$renee_s,"Display");
 702 $ReplaceType=sql_result($renee_result,$renee_s,"ReplaceCI");
 703 if($SmileRow==1) { ?><tr>
 704         <?php } if($SmileRow<5) { ++$SmileCRow; ?>
 705         <td><img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('ReplyPost','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" /></td>
 706         <?php } if($SmileRow==5) { ++$SmileCRow; ?>
 707         <td><img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('ReplyPost','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" /></td></tr>
 708         <?php $SmileCRow=0; $SmileRow=0; }
 709 ++$renee_s; }
 710 if($SmileCRow<5&&$SmileCRow!=0) {
 711 $SmileCRowL = 5 - $SmileCRow;
 712 echo "<td colspan=\"".$SmileCRowL."\">&nbsp;</td></tr>"; }
 713 echo "</table>";
 714 sql_free_result($renee_result);
 715 ?></div></td>
 716 <td class="TableColumn3" style="width: 85%;">
 717 <form style="display: inline;" method="post" id="MkReplyForm" action="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">
 718 <table style="text-align: left;">
 719 <tr style="text-align: left;">
 720         <td style="width: 50%;"><label class="TextBoxLabel" for="SendMessageTo">Insert UserName:</label></td>
 721         <td style="width: 50%;"><input maxlength="25" type="text" name="SendMessageTo" class="TextBox" id="SendMessageTo" size="20" value="<?php echo $SendMessageTo; ?>" /></td>
 722 </tr><tr style="text-align: left;">
 723         <td style="width: 50%;"><label class="TextBoxLabel" for="MessageName">Insert Message Name:</label></td>
 724         <td style="width: 50%;"><input maxlength="30" type="text" name="MessageName" class="TextBox" id="MessageName" size="20" value="<?php echo $QuoteTitle; ?>" /></td>
 725 </tr><tr style="text-align: left;">
 726         <td style="width: 50%;"><label class="TextBoxLabel" for="MessageDesc">Insert Message Description:</label></td>
 727         <td style="width: 50%;"><input maxlength="45" type="text" name="MessageDesc" class="TextBox" id="MessageDesc" size="20" value="<?php echo $QuoteDescription; ?>" /></td>
 728 </tr><?php if($_SESSION['UserGroup']==$Settings['GuestGroup']) { ?><tr style="text-align: left;">
 729         <td style="width: 50%;"><label class="TextBoxLabel" for="GuestName">Insert Guest Name:</label></td>
 730         <?php if(!isset($_SESSION['GuestName'])) { ?>
 731         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" /></td>
 732         <?php } if(isset($_SESSION['GuestName'])) { ?>
 733         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" value="<?php echo $_SESSION['GuestName']; ?>" /></td>
 734 <?php } ?></tr><?php } ?>
 735 </table>
 736 <table style="text-align: left;">
 737 <tr style="text-align: left;">
 738 <td style="width: 100%;">
 739 <label class="TextBoxLabel" for="Message">Insert Your Message:</label><br />
 740 <textarea rows="10" name="Message" id="Message" cols="40" class="TextBox"><?php echo $QuoteReply; ?></textarea><br />
 741 <?php if($_SESSION['UserGroup']==$Settings['GuestGroup']&&$Settings['captcha_guest']=="on") { ?>
 742 <label class="TextBoxLabel" for="signcode"><img src="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=MkCaptcha",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>" alt="CAPTCHA Code" title="CAPTCHA Code" /></label><br />
 743 <input maxlength="25" type="text" class="TextBox" name="signcode" size="20" id="signcode" value="Enter SignCode" /><br />
 744 <?php } ?>
 745 <input type="hidden" name="act" value="sendmessages" style="display: none;" />
 746 <?php if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { ?>
 747 <input type="hidden" name="GuestName" value="null" style="display: none;" />
 748 <?php } ?>
 749 <input type="submit" class="Button" value="Send Message" name="send_message" />
 750 <input type="hidden" style="display: none;" name="fid" value="<?php echo $UFID; ?>" />
 751 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 752 </td></tr></table>
 753 </form></td></tr>
 754 <tr id="MkReplyEnd" class="TableRow4">
 755 <td class="TableColumn4" colspan="2">&nbsp;</td>
 756 </tr>
 757 </table></div>
 758 <?php } if($_GET['act']=="sendmessage"&&$_POST['act']=="sendmessages") {
 759 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
 760 $URL['REFERER'] = $REFERERurl['host'];
 761 $URL['HOST'] = $_SERVER["SERVER_NAME"];
 762 $REFERERurl = null;
 763 if(!isset($_POST['SendMessageTo'])) { $_POST['SendMessageTo'] = null; }
 764 if(!isset($_POST['MessageName'])) { $_POST['MessageName'] = null; }
 765 if(!isset($_POST['MessageDesc'])) { $_POST['MessageDesc'] = null; }
 766 if(!isset($_POST['Message'])) { $_POST['Message'] = null; }
 767 if(!isset($_POST['GuestName'])) { $_POST['GuestName'] = null; }
 768 if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 769         $Settings['captcha_guest']=="on") {
 770 require($SettDir['inc']."captcha.php"); }
 771 ?>
 772 <div class="Table1Border">
 773 <?php if($ThemeSet['TableStyle']=="div") { ?>
 774 <div class="TableRow1">
 775 <span style="text-align: left;">
 776 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Making a Message</a></span></div>
 777 <?php } ?>
 778 <table class="Table1">
 779 <?php if($ThemeSet['TableStyle']=="table") { ?>
 780 <tr class="TableRow1">
 781 <td class="TableColumn1"><span style="text-align: left;">
 782 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=sendmessage",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Making a Message</a></span>
 783 </td>
 784 </tr><?php } ?>
 785 <tr class="TableRow2">
 786 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Make Message: </th>
 787 </tr>
 788 <tr class="TableRow3">
 789 <td class="TableColumn3">
 790 <table style="width: 100%; height: 25%; text-align: center;">
 791 <?php if (pre_strlen($_POST['SendMessageTo'])>="25") { $Error="Yes";  ?>
 792 <tr>
 793         <td><span class="TableMessage">
 794         <br />Send to user name too big.<br />
 795         </span>&nbsp;</td>
 796 </tr>
 797 <?php } if($_POST['fid']!=$_SESSION['UserFormID']) { $Error="Yes";  ?>
 798 <tr>
 799         <td><span class="TableMessage">
 800         <br />Sorry the referering url dose not match our host name.<br />
 801         </span>&nbsp;</td>
 802 </tr>
 803 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 804         $Settings['captcha_guest']=="on") {
 805 if (PhpCaptcha::Validate($_POST['signcode'])) {
 806 //echo 'Valid code entered';
 807 } else { $Error="Yes"; ?>
 808 <tr>
 809         <td><span class="TableMessage">
 810         <br />Invalid code entered<br />
 811         </span>&nbsp;</td>
 812 </tr>
 813 <?php } } if ($_POST['SendMessageTo']==null) { $Error="Yes";  ?>
 814 <tr>
 815         <td><span class="TableMessage">
 816         <br />You need to enter a user name to send message to.<br />
 817         </span>&nbsp;</td>
 818 </tr>
 819 <?php } if (pre_strlen($_POST['MessageName'])>="30") { $Error="Yes";  ?>
 820 <tr>
 821         <td><span class="TableMessage">
 822         <br />Message Name is too big.<br />
 823         </span>&nbsp;</td>
 824 </tr>
 825 <?php } if (pre_strlen($_POST['MessageDesc'])>="45") { $Error="Yes";  ?>
 826 <tr>
 827         <td><span class="TableMessage">
 828         <br />Message Description is too big.<br />
 829         </span>&nbsp;</td>
 830 </tr>
 831 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 832         pre_strlen($_POST['GuestName'])>="25") { $Error="Yes"; ?>
 833 <tr>
 834         <td><span class="TableMessage">
 835         <br />You Guest Name is too big.<br />
 836         </span>&nbsp;</td>
 837 </tr>
 838 <?php } if ($Settings['TestReferer']=="on") {
 839         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
 840 <tr>
 841         <td><span class="TableMessage">
 842         <br />Sorry the referering url dose not match our host name.<br />
 843         </span>&nbsp;</td>
 844 </tr>
 845 <?php } }
 846 $_POST['MessageName'] = stripcslashes(htmlspecialchars($_POST['MessageName'], ENT_QUOTES, $Settings['charset']));
 847 //$_POST['MessageName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['MessageName']);
 848 $_POST['MessageName'] = remove_spaces($_POST['MessageName']);
 849 $_POST['MessageDesc'] = stripcslashes(htmlspecialchars($_POST['MessageDesc'], ENT_QUOTES, $Settings['charset']));
 850 //$_POST['MessageDesc'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['MessageDesc']);
 851 $_POST['MessageDesc'] = remove_spaces($_POST['MessageDesc']);
 852 $_POST['SendMessageTo'] = stripcslashes(htmlspecialchars($_POST['SendMessageTo'], ENT_QUOTES, $Settings['charset']));
 853 //$_POST['SendMessageTo'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['SendMessageTo']);
 854 $_POST['SendMessageTo'] = remove_spaces($_POST['SendMessageTo']);
 855 $_POST['GuestName'] = stripcslashes(htmlspecialchars($_POST['GuestName'], ENT_QUOTES, $Settings['charset']));
 856 //$_POST['GuestName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['GuestName']);
 857 $_POST['GuestName'] = remove_spaces($_POST['GuestName']);
 858 $_POST['Message'] = stripcslashes(htmlspecialchars($_POST['Message'], ENT_QUOTES, $Settings['charset']));
 859 //$_POST['Message'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['Message']);
 860 //$_POST['Message'] = remove_spaces($_POST['Message']);
 861 $_POST['Message'] = remove_bad_entities($_POST['Message']);
 862 if($_SESSION['UserGroup']==$Settings['GuestGroup']) {
 863 if(isset($_POST['GuestName'])&&$_POST['GuestName']!=null) {
 864 if($cookieDomain==null) {
 865 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir); }
 866 if($cookieDomain!=null) {
 867 if($cookieSecure===true) {
 868 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir, $cookieDomain, 1); }
 869 if($cookieSecure===false) {
 870 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir, $cookieDomain); } }
 871 $_SESSION['GuestName']=$_POST['GuestName']; } }
 872 /*    <_<  iWordFilter  >_>
 873    by Kazuki Przyborowski - Cool Dude 2k */
 874 $katarzynaqy=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."wordfilter\"", array(null));
 875 $katarzynart=sql_query($katarzynaqy,$SQLStat);
 876 $katarzynanm=sql_num_rows($katarzynart);
 877 $katarzynas=0;
 878 while ($katarzynas < $katarzynanm) {
 879 $Filter=sql_result($katarzynart,$katarzynas,"FilterWord");
 880 $Replace=sql_result($katarzynart,$katarzynas,"Replacement");
 881 $CaseInsensitive=sql_result($katarzynart,$katarzynas,"CaseInsensitive");
 882 if($CaseInsensitive=="on") { $CaseInsensitive = "yes"; }
 883 if($CaseInsensitive=="off") { $CaseInsensitive = "no"; }
 884 if($CaseInsensitive!="yes"||$CaseInsensitive!="no") { $CaseInsensitive = "no"; }
 885 $WholeWord=sql_result($katarzynart,$katarzynas,"WholeWord");
 886 if($WholeWord=="on") { $WholeWord = "yes"; }
 887 if($WholeWord=="off") { $WholeWord = "no"; }
 888 if($WholeWord!="yes"&&$WholeWord!="no") { $WholeWord = "no"; }
 889 $Filter = preg_quote($Filter, "/");
 890 if($CaseInsensitive!="yes"&&$WholeWord=="yes") {
 891 $_POST['Message'] = preg_replace("/\b(".$Filter.")\b/", $Replace, $_POST['Message']);
 892 $_POST['MessageDesc'] = preg_replace("/\b(".$Filter.")\b/", $Replace, $_POST['MessageDesc']); }
 893 if($CaseInsensitive=="yes"&&$WholeWord=="yes") {
 894 $_POST['Message'] = preg_replace("/\b(".$Filter.")\b/i", $Replace, $_POST['Message']);
 895 $_POST['MessageDesc'] = preg_replace("/\b(".$Filter.")\b/i", $Replace, $_POST['MessageDesc']); }
 896 if($CaseInsensitive!="yes"&&$WholeWord!="yes") {
 897 $_POST['Message'] = preg_replace("/".$Filter."/", $Replace, $_POST['Message']);
 898 $_POST['MessageDesc'] = preg_replace("/".$Filter."/", $Replace, $_POST['MessageDesc']); }
 899 if($CaseInsensitive=="yes"&&$WholeWord!="yes") {
 900 $_POST['Message'] = preg_replace("/".$Filter."/i", $Replace, $_POST['Message']);
 901 $_POST['MessageDesc'] = preg_replace("/".$Filter."/i", $Replace, $_POST['MessageDesc']); }
 902 ++$katarzynas; } sql_free_result($katarzynart);
 903 $lonewolfqy=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."restrictedwords\" WHERE \"RestrictedMessageName\"='yes' or \"RestrictedUserName\"='yes'", array(null));
 904 $lonewolfrt=sql_query($lonewolfqy,$SQLStat);
 905 $lonewolfnm=sql_num_rows($lonewolfrt);
 906 $lonewolfs=0; $RMatches = null; $RGMatches = null;
 907 while ($lonewolfs < $lonewolfnm) {
 908 $RWord=sql_result($lonewolfrt,$lonewolfs,"Word");
 909 $RCaseInsensitive=sql_result($lonewolfrt,$lonewolfs,"CaseInsensitive");
 910 if($RCaseInsensitive=="on") { $RCaseInsensitive = "yes"; }
 911 if($RCaseInsensitive=="off") { $RCaseInsensitive = "no"; }
 912 if($RCaseInsensitive!="yes"||$RCaseInsensitive!="no") { $RCaseInsensitive = "no"; }
 913 $RWholeWord=sql_result($lonewolfrt,$lonewolfs,"WholeWord");
 914 if($RWholeWord=="on") { $RWholeWord = "yes"; }
 915 if($RWholeWord=="off") { $RWholeWord = "no"; }
 916 if($RWholeWord!="yes"||$RWholeWord!="no") { $RWholeWord = "no"; }
 917 $RestrictedMessageName=sql_result($lonewolfrt,$lonewolfs,"RestrictedMessageName");
 918 if($RestrictedMessageName=="on") { $RestrictedMessageName = "yes"; }
 919 if($RestrictedMessageName=="off") { $RestrictedMessageName = "no"; }
 920 if($RestrictedMessageName!="yes"||$RestrictedMessageName!="no") { $RestrictedMessageName = "no"; }
 921 $RestrictedUserName=sql_result($lonewolfrt,$lonewolfs,"RestrictedUserName");
 922 if($RestrictedUserName=="on") { $RestrictedUserName = "yes"; }
 923 if($RestrictedUserName=="off") { $RestrictedUserName = "no"; }
 924 if($RestrictedUserName!="yes"||$RestrictedUserName!="no") { $RestrictedUserName = "no"; }
 925 $RWord = preg_quote($RWord, "/");
 926 if($RCaseInsensitive!="yes"&&$RWholeWord=="yes") {
 927 if($RestrictedMessageName=="yes") {
 928 $RMatches = preg_match("/\b(".$RWord.")\b/", $_POST['MessageName']);
 929         if($RMatches==true) { break 1; } }
 930 if($RestrictedUserName=="yes") {
 931 $RGMatches = preg_match("/\b(".$RWord.")\b/", $_POST['GuestName']);
 932         if($RGMatches==true) { break 1; } } }
 933 if($RCaseInsensitive=="yes"&&$RWholeWord=="yes") {
 934 if($RestrictedMessageName=="yes") {
 935 $RMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['MessageName']);
 936         if($RMatches==true) { break 1; } }
 937 if($RestrictedUserName=="yes") {
 938 $RGMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['GuestName']);
 939         if($RGMatches==true) { break 1; } } }
 940 if($RCaseInsensitive!="yes"&&$RWholeWord!="yes") {
 941 if($RestrictedMessageName=="yes") {
 942 $RMatches = preg_match("/".$RWord."/", $_POST['MessageName']);
 943         if($RMatches==true) { break 1; } }
 944 if($RestrictedUserName=="yes") {
 945 $RGMatches = preg_match("/".$RWord."/", $_POST['GuestName']);
 946         if($RGMatches==true) { break 1; } } }
 947 if($RCaseInsensitive=="yes"&&$RWholeWord!="yes") {
 948 if($RestrictedMessageName=="yes") {
 949 $RMatches = preg_match("/".$RWord."/i", $_POST['MessageName']);
 950         if($RMatches==true) { break 1; } }
 951 if($RestrictedUserName=="yes") {
 952 $RGMatches = preg_match("/".$RWord."/i", $_POST['GuestName']);
 953         if($RGMatches==true) { break 1; } } }
 954 ++$lonewolfs; } sql_free_result($lonewolfrt);
 955 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"Name\"='%s'", array($_POST['SendMessageTo']));
 956 $reresult=sql_query($requery,$SQLStat);
 957 $renum=sql_num_rows($reresult);
 958 $rei=0;
 959 while ($rei < $renum) {
 960 $SendMessageToID = sql_result($reresult,$rei,"id");
 961 $SendToGroupID = sql_result($reresult,$rei,"GroupID");
 962 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i", array($SendToGroupID));
 963 $gresult=sql_query($gquery,$SQLStat);
 964 $SendUserCanPM=sql_result($gresult,0,"CanPM");
 965 $SendUserCanPM = strtolower($SendUserCanPM);
 966 if($SendUserCanPM!="yes"&&$SendUserCanPM!="no") {
 967         $SendUserCanPM = "no"; }
 968 sql_free_result($gresult);
 969 ++$rei; } sql_free_result($reresult);
 970 if($renum==0) { $Error="Yes"; ?>
 971 <tr>
 972         <td><span class="TableMessage">
 973         <br />Cound not find users name.<br />
 974         </span>&nbsp;</td>
 975 </tr>
 976 <?php } if ($_POST['MessageName']==null) { $Error="Yes";  ?>
 977 <tr>
 978         <td><span class="TableMessage">
 979         <br />You need to enter a Message Name.<br />
 980         </span>&nbsp;</td>
 981 </tr>
 982 <?php } if ($_POST['MessageDesc']==null) { $Error="Yes";  ?>
 983 <tr>
 984         <td><span class="TableMessage">
 985         <br />You need to enter a Message Description.<br />
 986         </span>&nbsp;</td>
 987 </tr>
 988 <?php } if ($SendUserCanPM=="no") { $Error="Yes";  ?>
 989 <tr>
 990         <td><span class="TableMessage">
 991         <br />User Name enter can not get messages.<br />
 992         </span>&nbsp;</td>
 993 </tr>
 994 <?php } if ($_POST['Message']==null) { $Error="Yes";  ?>
 995 <tr>
 996         <td><span class="TableMessage">
 997         <br />You need to enter a Message.<br />
 998         </span>&nbsp;</td>
 999 </tr>
1000 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
1001         $_POST['GuestName']==null) { $Error="Yes"; ?>
1002 <tr>
1003         <td><span class="TableMessage">
1004         <br />You need to enter a Guest Name.<br />
1005         </span>&nbsp;</td>
1006 </tr>
1007 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
1008         $RGMatches==true) { $Error="Yes"; ?>
1009 <tr>
1010         <td><span class="TableMessage">
1011         <br />This Guest Name is restricted to use.<br />
1012         </span>&nbsp;</td>
1013 </tr>
1014 <?php } if($RMatches==true) { $Error="Yes"; ?>
1015 <tr>
1016         <td><span class="TableMessage">
1017         <br />This Message Name is restricted to use.<br />
1018         </span>&nbsp;</td>
1019 </tr>
1020 <?php } if ($Error=="Yes") {
1021 redirect("refresh",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false),"4"); ?>
1022 <tr>
1023         <td><span class="TableMessage">
1024         <br />Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to goto index page.<br />&nbsp;
1025         </span><br /></td>
1026 </tr>
1027 <?php } if ($Error!="Yes") { $LastActive = GMTimeStamp();
1028 if($_SESSION['UserGroup']==$Settings['GuestGroup']) { $User1Name = $_POST['GuestName']; }
1029 if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { $User1Name = $_SESSION['MemberName']; }
1030 $User1IP=$_SERVER['REMOTE_ADDR'];
1031 $query = sql_pre_query("INSERT INTO \"".$Settings['sqltable']."messenger\" (\"SenderID\", \"ReciverID\", \"GuestName\", \"MessageTitle\", \"MessageText\", \"Description\", \"DateSend\", \"Read\", \"IP\") VALUES
1032 (%i, %i, '%s', '%s', '%s', '%s', %i, %i, '%s')", array($_SESSION['UserID'],$SendMessageToID,$_SESSION['MemberName'],$_POST['MessageName'],$_POST['Message'],$_POST['MessageDesc'],$LastActive,0,$User1IP));
1033 sql_query($query,$SQLStat);
1034 $messageid = sql_get_next_id($Settings['sqltable'],"messenger",$SQLStat);
1035 ?><tr>
1036         <td><span class="TableMessage"><br />
1037         Message sent to user <?php echo $_POST['SendMessageTo']; ?>.<br />
1038         Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to go back to index.<br />&nbsp;
1039         </span><br /></td>
1040 </tr>
1041 <?php } ?>
1042 </table>
1043 </td></tr>
1044 <tr class="TableRow4">
1045 <td class="TableColumn4">&nbsp;</td>
1046 </tr>
1047 </table></div>
1048 <?php } ?>
1049 <div class="DivMessages">&nbsp;</div>