"; show_image(REPORT_POST_IMAGE, "Block messages from this user", REPORT_POST_IMAGE_HEIGHT); echo ""; } $action = get_str("action", true); if ($action == null) { $action = post_str("action", true); } if ($action == null) { // Prepend "select_" because translated actions may clash with default actions $action = "select_".post_str("action_select", true); } if ($action == "select_") { $action = "inbox"; } $logged_in_user = get_logged_in_user(); function make_script() { echo " "; } function do_inbox($logged_in_user) { page_head(tra("Private messages").": ".tra("Inbox")); make_script(); if (get_int("sent", true) == 1) { echo "
".tra("Your message has been sent.")."
\n"; } $options = new output_options; $query = mysql_query("SELECT * FROM private_messages WHERE userid=".$logged_in_user->id." ORDER BY date DESC"); if (mysql_num_rows($query) == 0) { echo tra("You have no private messages."); } else { echo "
\n"; echo form_tokens($logged_in_user->authenticator); start_table(); echo "".tra("Subject")."".tra("Sender and date")."".tra("Message")."\n"; $i = 0; while ($row = mysql_fetch_object($query)) { $i++; $class = ($i%2)? "row0": "row1"; echo "\n"; $checkbox = "id."\">"; if (!$row->opened) { mysql_query("UPDATE private_messages SET opened=1 WHERE id=$row->id"); } echo " $checkbox $row->subject \n"; echo "".user_links(get_user_from_id($row->senderid)); show_block_link($row->senderid); echo "
".time_str($row->date)."\n"; echo "".output_transform($row->content, $options)."

"; $tokens = url_tokens($logged_in_user->authenticator); show_button("forum_pm.php?action=delete&id=$row->id&$tokens", tra("Delete"), "Delete this message"); show_button("forum_pm.php?action=new&replyto=$row->id", tra("Reply"), "Reply to this message"); echo "\n"; } echo " Select all | Unselect all selected messages "; end_table(); echo "

\n"; } } function do_read($logged_in_user) { $id = get_int("id"); $message = mysql_query("SELECT * FROM private_messages WHERE id=".$id." AND userid=".$logged_in_user->id); if (mysql_num_rows($message) == 0) { error_page(tra("No such message")); } else { $message = mysql_fetch_object($message); page_head(tra("Private messages")." : ".$message->subject); pm_header(); start_table(); echo "".tra("Subject")."".$message->subject.""; echo "".tra("Sender")."".user_links(get_user_from_id($message->senderid)); show_block_link($message->senderid); echo ""; echo "".tra("Date")."".time_str($message->date).""; echo "".tra("Message")."".output_transform($message->content, $options).""; echo "\n"; echo "".tra("Delete")."\n"; echo " | ".tra("Reply")."\n"; echo " | ".tra("Inbox")."\n"; end_table(); if ($message->opened == 0) { mysql_query("UPDATE private_messages SET opened=1 WHERE id=$id"); } } } function do_new($logged_in_user) { check_banished(new User($logged_in_user->id)); pm_create_new(); } function do_delete($logged_in_user) { $id = get_int("id", true); if ($id == null) { $id = post_int("id"); } check_tokens($logged_in_user->authenticator); mysql_query("DELETE FROM private_messages WHERE userid=".$logged_in_user->id." AND id=$id"); header("Location: forum_pm.php"); } function do_send($logged_in_user) { check_banished(new User($logged_in_user->id)); check_tokens($logged_in_user->authenticator); $to = stripslashes(post_str("to", true)); $subject = stripslashes(post_str("subject", true)); $content = stripslashes(post_str("content", true)); if (post_str("preview", true) == tra("Preview")) { pm_create_new(); } if (($to == null) || ($subject == null) || ($content == null)) { pm_create_new(tra("You need to fill all fields to send a private message")); } else { akismet_check(new User($logged_in_user->id), $content); $to = str_replace(", ", ",", $to); // Filter out spaces after separator $users = explode(",", $to); $userlist = array(); $userids = array(); // To prevent from spamming a single user by adding it multiple times foreach ($users as $username) { $user = explode(" ", $username); if (is_numeric($user[0])) { // user ID is gived $userid = $user[0]; $user = lookup_user_id($userid); if ($user == null) { pm_create_new(tra("Could not find user with id %1", $userid)); } } else { $user = lookup_user_name($username); if ($user == null) { pm_create_new(tra("Could not find user with username %1", $username)); } elseif ($user == -1) { // Non-unique username pm_create_new(tra("%1 is not a unique username; you will have to use user ID", $username)); } } $ignorelist = mysql_query("SELECT ignorelist FROM forum_preferences WHERE userid=".$user->id); $ignorelist = mysql_fetch_object($ignorelist); $ignorelist = $ignorelist->ignorelist; $ignorelist = explode("|", $ignorelist); if (in_array($logged_in_user->id, $ignorelist)) { pm_create_new(tra("User %1 (ID: %2) is not accepting private messages from you.", $user->name, $user->id)); } if ($userids[$user->id] == null) { $userlist[] = $user; $userids[$user->id] = true; } } foreach ($userlist as $user) { check_pm_count($logged_in_user->id); pm_send($user, $subject, $content); } Header("Location: forum_pm.php?action=inbox&sent=1"); } } function do_block($logged_in_user) { $id = get_int("id"); $user = mysql_query("SELECT name FROM user WHERE id=$id"); if ($user) { $user = mysql_fetch_object($user); page_head(tra("Really block %1?", $user->name)); echo "
".tra("Are you really sure you want to block user %1 from sending you private messages?", $user->name)."
\n"; echo tra("Please note that you can only block a limited amount of users.")."
\n"; echo "
".tra("Once the user has been blocked you can unblock it using forum preferences page.")."
\n"; echo "
\n"; echo form_tokens($logged_in_user->authenticator); echo "\n"; echo "\n"; echo "\n"; echo "".tra("No, cancel")."\n"; echo "
\n"; } else { error_page(tra("No such user")); } } function do_confirmedblock($logged_in_user) { check_tokens($logged_in_user->authenticator); $id = post_int("id"); $user = new User($logged_in_user->id); $blocked = new User($id); $user->addIgnoredUser($blocked); page_head(tra("User %1 blocked", $blocked->getName())); echo "
".tra("User %1 has been blocked from sending you private messages.", $blocked->getName())."\n"; echo tra("To unblock, visit %1message board preferences%2", "", "")."
\n"; } function do_delete_selected($logged_in_user) { check_tokens($logged_in_user->authenticator); foreach ($_POST["pm_select"] as $id) { $query = mysql_query("SELECT * FROM private_messages WHERE id=".mysql_real_escape_string($id)." AND userid=".$logged_in_user->id); if (mysql_num_rows($query) == 1) { // User has rights to delete the message mysql_query("DELETE FROM private_messages WHERE id=".mysql_real_escape_string($id)); } } Header("Location: forum_pm.php?action=inbox&deleted=1"); } function do_mark_as_read_selected($logged_in_user) { check_tokens($logged_in_user->authenticator); foreach ($_POST["pm_select"] as $id) { $query = mysql_query("SELECT * FROM private_messages WHERE id=".mysql_real_escape_string($id)." AND userid=".$logged_in_user->id); if (mysql_num_rows($query) == 1) { mysql_query("UPDATE private_messages SET opened=1 WHERE id=".mysql_real_escape_string($id)); } } Header("Location: forum_pm.php?action=inbox"); } function do_mark_as_unread_selected($logged_in_user) { check_tokens($logged_in_user->authenticator); foreach ($_POST["pm_select"] as $id) { $query = mysql_query("SELECT * FROM private_messages WHERE id=".mysql_real_escape_string($id)." AND userid=".$logged_in_user->id); if (mysql_num_rows($query) == 1) { mysql_query("UPDATE private_messages SET opened=0 WHERE id=".mysql_real_escape_string($id)); } } Header("Location: forum_pm.php?action=inbox"); } if ($action == "inbox") { do_inbox($logged_in_user); } elseif ($action == "read") { do_read($logged_in_user); } elseif ($action == "new") { do_new($logged_in_user); } elseif ($action == "delete") { do_delete($logged_in_user); } elseif ($action == "send") { do_send($logged_in_user); } elseif ($action == "block") { do_block($logged_in_user); } elseif ($action == "confirmedblock") { do_confirmedblock($logged_in_user); } elseif ($action == "select_".tra("Delete")) { do_delete_selected($logged_in_user); } elseif ($action == "select_".tra("Mark as read")) { do_mark_as_read_selected($logged_in_user); } elseif ($action == "select_".tra("Mark as unread")) { do_mark_as_unread_selected($logged_in_user); } else { error_page("Unknown action"); } page_tail(); ?>