$user_info['messages'],
'allowed' => $context['message_limit'],
'percent' => $bar,
'bar' => min(100, (int) $bar),
'text' => sprintf($txt['pm_currently_using'], $user_info['messages'], round($bar, 1)),
);
}
// We should probably cache this information for speed.
$context['labels'] = $user_settings['messageLabels'] == '' ? array() : explode(',', $user_settings['messageLabels']);
foreach ($context['labels'] as $k => $v)
$context['labels'][(int) $k] = array('id' => $k, 'name' => trim($v), 'messages' => 0, 'unread_messages' => 0);
$context['labels'][-1] = array('id' => -1, 'name' => $txt['pm_msg_label_inbox'], 'messages' => 0, 'unread_messages' => 0);
// !!! The idea would be to cache this information in the members table, and invlidate it when they are sent messages.
$result = db_query("
SELECT labels, is_read, COUNT(*) AS num
FROM {$db_prefix}pm_recipients
WHERE ID_MEMBER = $ID_MEMBER
GROUP BY labels, is_read", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($result))
{
$this_labels = explode(',', $row['labels']);
foreach ($this_labels as $this_label)
{
$context['labels'][(int) $this_label]['messages'] += $row['num'];
if (!($row['is_read'] & 1))
$context['labels'][(int) $this_label]['unread_messages'] += $row['num'];
}
}
mysql_free_result($result);
// This determines if we have more labels than just the standard inbox.
$context['currently_using_labels'] = count($context['labels']) > 1 ? 1 : 0;
// Some stuff for the labels...
$context['current_label_id'] = isset($_REQUEST['l']) && isset($context['labels'][(int) $_REQUEST['l']]) ? (int) $_REQUEST['l'] : -1;
$context['current_label'] = &$context['labels'][(int) $context['current_label_id']]['name'];
$context['folder'] = !isset($_REQUEST['f']) || $_REQUEST['f'] != 'outbox' ? 'inbox' : 'outbox';
// This is convenient. Do you know how annoying it is to do this every time?!
$context['current_label_redirect'] = 'action=pm;f=' . $context['folder'] . (isset($_GET['start']) ? ';start=' . $_GET['start'] : '') . (isset($_REQUEST['l']) ? ';l=' . $_REQUEST['l'] : '');
// Build the linktree for all the actions...
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm',
'name' => $txt[144]
);
$subActions = array(
'addbuddy' => 'WirelessAddBuddy',
'manlabels' => 'ManageLabels',
'outbox' => 'MessageFolder',
'pmactions' => 'MessageActionsApply',
'prune' => 'MessagePrune',
'removeall' => 'MessageKillAllQuery',
'removeall2' => 'MessageKillAll',
'report' => 'ReportMessage',
'search' => 'MessageSearch',
'search2' => 'MessageSearch2',
'send' => 'MessagePost',
'send2' => 'MessagePost2',
);
if (!isset($_REQUEST['sa']) || !isset($subActions[$_REQUEST['sa']]))
MessageFolder();
else
{
messageIndexBar($_REQUEST['sa']);
$subActions[$_REQUEST['sa']]();
}
}
// A sidebar to easily access different areas of the section
function messageIndexBar($area)
{
global $txt, $context, $scripturl, $sc, $modSettings, $settings, $user_info;
$context['pm_areas'] = array(
'folders' => array(
'title' => $txt['pm_messages'],
'areas' => array(
'send' => array('link' => '' . $txt[321] . '', 'href' => $scripturl . '?action=pm;sa=send'),
'' => array(),
'inbox' => array('link' => '' . $txt[316] . '', 'href' => $scripturl . '?action=pm'),
'outbox' => array('link' => '' . $txt[320] . '', 'href' => $scripturl . '?action=pm;f=outbox'),
),
),
'labels' => array(
'title' => $txt['pm_labels'],
'areas' => array(),
),
'pref' => array(
'title' => $txt['pm_preferences'],
'areas' => array(
'search' => array('link' => '' . $txt['pm_search_bar_title'] . '', 'href' => $scripturl . '?action=pm;sa=search'),
'manlabels' => array('link' => '' . $txt['pm_manage_labels'] . '', 'href' => $scripturl . '?action=pm;sa=manlabels'),
'prune' => array('link' => '' . $txt['pm_prune'] . '', 'href' => $scripturl . '?action=pm;sa=prune'),
),
),
);
// Handle labels.
if (empty($context['currently_using_labels']))
unset($context['pm_areas']['labels']);
else
{
// Note we send labels by id as it will have less problems in the querystring.
foreach ($context['labels'] as $label)
{
if ($label['id'] == -1)
continue;
$context['pm_areas']['labels']['areas']['label' . $label['id']] = array(
'link' => '' . $label['name'] . '',
'href' => $scripturl . '?action=pm;l=' . $label['id'],
'unread_messages' => &$context['labels'][(int) $label['id']]['unread_messages'],
'messages' => &$context['labels'][(int) $label['id']]['messages'],
);
}
}
$context['pm_areas']['folders']['areas']['inbox']['unread_messages'] = &$context['labels'][-1]['unread_messages'];
$context['pm_areas']['folders']['areas']['inbox']['messages'] = &$context['labels'][-1]['messages'];
// Do we have a limit on the amount of messages we can keep?
if (!empty($context['message_limit']))
{
$bar = round(($user_info['messages'] * 100) / $context['message_limit'], 1);
$context['limit_bar'] = array(
'messages' => $user_info['messages'],
'allowed' => $context['message_limit'],
'percent' => $bar,
'bar' => $bar > 100 ? 100 : (int) $bar,
'text' => sprintf($txt['pm_currently_using'], $user_info['messages'], $bar)
);
// Force it in to somewhere.
$context['pm_areas']['pref']['areas']['limit_bar'] = array('limit_bar' => true);
}
// Where we are now.
$context['pm_area'] = $area;
// obExit will know what to do!
if (!WIRELESS)
$context['template_layers'][] = 'pm';
}
// A folder, ie. outbox/inbox.
function MessageFolder()
{
global $txt, $scripturl, $db_prefix, $ID_MEMBER, $modSettings, $context;
global $messages_request, $user_info, $recipients, $options;
// Make sure the starting location is valid.
if (isset($_GET['start']) && $_GET['start'] != 'new')
$_GET['start'] = (int) $_GET['start'];
elseif (!isset($_GET['start']) && !empty($options['view_newest_pm_first']))
$_GET['start'] = 0;
else
$_GET['start'] = 'new';
// Set up some basic theme stuff.
$context['allow_hide_email'] = !empty($modSettings['allow_hideEmail']);
$context['from_or_to'] = $context['folder'] != 'outbox' ? 'from' : 'to';
$context['get_pmessage'] = 'prepareMessageContext';
$labelQuery = $context['folder'] != 'outbox' ? "
AND FIND_IN_SET('$context[current_label_id]', pmr.labels)" : '';
// Set the index bar correct!
messageIndexBar($context['current_label_id'] == -1 ? $context['folder'] : 'label' . $context['current_label_id']);
// Sorting the folder.
$sort_methods = array(
'date' => 'pm.ID_PM',
'name' => "IFNULL(mem.realName, '')",
'subject' => 'pm.subject',
);
// They didn't pick one, use the forum default.
if (!isset($_GET['sort']) || !isset($sort_methods[$_GET['sort']]))
{
$context['sort_by'] = 'date';
$_GET['sort'] = 'pm.ID_PM';
$descending = false;
}
// Otherwise use the defaults: ascending, by date.
else
{
$context['sort_by'] = $_GET['sort'];
$_GET['sort'] = $sort_methods[$_GET['sort']];
$descending = isset($_GET['desc']);
}
if (!empty($options['view_newest_pm_first']))
$descending = !$descending;
$context['sort_direction'] = $descending ? 'down' : 'up';
// Why would you want access to your outbox if you're not allowed to send anything?
if ($context['folder'] == 'outbox')
isAllowedTo('pm_send');
// Set the text to resemble the current folder.
$pmbox = $context['folder'] != 'outbox' ? $txt[316] : $txt[320];
$txt[412] = str_replace('PMBOX', $pmbox, $txt[412]);
// Now, build the link tree!
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;f=' . $context['folder'],
'name' => $pmbox
);
// Build it further for a label.
if ($context['current_label_id'] != -1)
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;f=' . $context['folder'] . ';l=' . $context['current_label_id'],
'name' => $txt['pm_current_label'] . ': ' . $context['current_label']
);
// Mark all messages as read if in the inbox.
if ($context['folder'] != 'outbox' && !empty($context['labels'][(int) $context['current_label_id']]['unread_messages']))
markMessages(null, $context['current_label_id']);
// Figure out how many messages there are.
if ($context['folder'] == 'outbox')
$request = db_query("
SELECT COUNT(*)
FROM {$db_prefix}personal_messages
WHERE ID_MEMBER_FROM = $ID_MEMBER
AND deletedBySender = 0", __FILE__, __LINE__);
else
$request = db_query("
SELECT COUNT(*)
FROM {$db_prefix}pm_recipients AS pmr
WHERE pmr.ID_MEMBER = $ID_MEMBER
AND pmr.deleted = 0$labelQuery", __FILE__, __LINE__);
list ($max_messages) = mysql_fetch_row($request);
mysql_free_result($request);
// Only show the button if there are messages to delete.
$context['show_delete'] = $max_messages > 0;
// Start on the last page.
if (!is_numeric($_GET['start']) || $_GET['start'] >= $max_messages)
$_GET['start'] = ($max_messages - 1) - (($max_messages - 1) % $modSettings['defaultMaxMessages']);
elseif ($_GET['start'] < 0)
$_GET['start'] = 0;
// ... but wait - what if we want to start from a specific message?
if (isset($_GET['pmid']))
{
$_GET['pmid'] = (int) $_GET['pmid'];
// With only one page of PM's we're gonna want page 1.
if ($max_messages <= $modSettings['defaultMaxMessages'])
$_GET['start'] = 0;
else
{
if ($context['folder'] == 'outbox')
$request = db_query("
SELECT COUNT(*)
FROM {$db_prefix}personal_messages
WHERE ID_MEMBER_FROM = $ID_MEMBER
AND deletedBySender = 0
AND ID_PM " . ($descending ? '>' : '<') . " $_GET[pmid]", __FILE__, __LINE__);
else
$request = db_query("
SELECT COUNT(*)
FROM {$db_prefix}pm_recipients AS pmr
WHERE pmr.ID_MEMBER = $ID_MEMBER
AND pmr.deleted = 0$labelQuery
AND ID_PM " . ($descending ? '>' : '<') . " $_GET[pmid]", __FILE__, __LINE__);
list ($_GET['start']) = mysql_fetch_row($request);
mysql_free_result($request);
// To stop the page index's being abnormal, start the page on the page the message would normally be located on...
$_GET['start'] = $modSettings['defaultMaxMessages'] * (int) ($_GET['start'] / $modSettings['defaultMaxMessages']);
}
}
// Set up the page index.
$context['page_index'] = constructPageIndex($scripturl . '?action=pm;f=' . $context['folder'] . (isset($_REQUEST['l']) ? ';l=' . (int) $_REQUEST['l'] : '') . ';sort=' . $context['sort_by'] . (isset($_GET['desc']) ? ';desc' : ''), $_GET['start'], $max_messages, $modSettings['defaultMaxMessages']);
$context['start'] = $_GET['start'];
// Determine the navigation context (especially useful for the wireless template).
$context['links'] = array(
'first' => $_GET['start'] >= $modSettings['defaultMaxMessages'] ? $scripturl . '?action=pm;start=0' : '',
'prev' => $_GET['start'] >= $modSettings['defaultMaxMessages'] ? $scripturl . '?action=pm;start=' . ($_GET['start'] - $modSettings['defaultMaxMessages']) : '',
'next' => $_GET['start'] + $modSettings['defaultMaxMessages'] < $max_messages ? $scripturl . '?action=pm;start=' . ($_GET['start'] + $modSettings['defaultMaxMessages']) : '',
'last' => $_GET['start'] + $modSettings['defaultMaxMessages'] < $max_messages ? $scripturl . '?action=pm;start=' . (floor(($max_messages - 1) / $modSettings['defaultMaxMessages']) * $modSettings['defaultMaxMessages']) : '',
'up' => $scripturl,
);
$context['page_info'] = array(
'current_page' => $_GET['start'] / $modSettings['defaultMaxMessages'] + 1,
'num_pages' => floor(($max_messages - 1) / $modSettings['defaultMaxMessages']) + 1
);
// Load the messages up...
// !!!SLOW This query uses a filesort. (inbox only.)
$request = db_query("
SELECT pm.ID_PM, pm.ID_MEMBER_FROM
FROM ({$db_prefix}personal_messages AS pm" . ($context['folder'] == 'outbox' ? ')' . ($context['sort_by'] == 'name' ? "
LEFT JOIN {$db_prefix}pm_recipients AS pmr ON (pmr.ID_PM = pm.ID_PM)" : '') : ", {$db_prefix}pm_recipients AS pmr)") . ($context['sort_by'] == 'name' ? ("
LEFT JOIN {$db_prefix}members AS mem ON (mem.ID_MEMBER = " . ($context['folder'] == 'outbox' ? 'pmr.ID_MEMBER' : 'pm.ID_MEMBER_FROM') . ")") : '') . "
WHERE " . ($context['folder'] == 'outbox' ? "pm.ID_MEMBER_FROM = $ID_MEMBER
AND pm.deletedBySender = 0" : "pmr.ID_PM = pm.ID_PM
AND pmr.ID_MEMBER = $ID_MEMBER
AND pmr.deleted = 0$labelQuery") . (empty($_GET['pmsg']) ? '' : "
AND pm.ID_PM = " . (int) $_GET['pmsg']) . "
ORDER BY " . ($_GET['sort'] == 'pm.ID_PM' && $context['folder'] != 'outbox' ? 'pmr.ID_PM' : $_GET['sort']) . ($descending ? ' DESC' : ' ASC') . (empty($_GET['pmsg']) ? "
LIMIT $_GET[start], $modSettings[defaultMaxMessages]" : ''), __FILE__, __LINE__);
// Load the ID_PMs and ID_MEMBERs and initialize recipients.
$pms = array();
$posters = $context['folder'] == 'outbox' ? array($ID_MEMBER) : array();
$recipients = array();
while ($row = mysql_fetch_assoc($request))
{
if (!isset($recipients[$row['ID_PM']]))
{
$pms[] = $row['ID_PM'];
if (!empty($row['ID_MEMBER_FROM']) && $context['folder'] != 'outbox')
$posters[] = $row['ID_MEMBER_FROM'];
$recipients[$row['ID_PM']] = array(
'to' => array(),
'bcc' => array()
);
}
}
mysql_free_result($request);
if (!empty($pms))
{
// Get recipients (don't include bcc-recipients for your inbox, you're not supposed to know :P).
$request = db_query("
SELECT pmr.ID_PM, mem_to.ID_MEMBER AS ID_MEMBER_TO, mem_to.realName AS toName, pmr.bcc, pmr.labels, pmr.is_read
FROM {$db_prefix}pm_recipients AS pmr
LEFT JOIN {$db_prefix}members AS mem_to ON (mem_to.ID_MEMBER = pmr.ID_MEMBER)
WHERE pmr.ID_PM IN (" . implode(', ', $pms) . ")", __FILE__, __LINE__);
$context['message_labels'] = array();
$context['message_replied'] = array();
while ($row = mysql_fetch_assoc($request))
{
if ($context['folder'] == 'outbox' || empty($row['bcc']))
$recipients[$row['ID_PM']][empty($row['bcc']) ? 'to' : 'bcc'][] = empty($row['ID_MEMBER_TO']) ? $txt[28] : '' . $row['toName'] . '';
if ($row['ID_MEMBER_TO'] == $ID_MEMBER && $context['folder'] != 'outbox')
{
$context['message_replied'][$row['ID_PM']] = $row['is_read'] & 2;
$row['labels'] = $row['labels'] == '' ? array() : explode(',', $row['labels']);
foreach ($row['labels'] as $v)
{
if (isset($context['labels'][(int) $v]))
$context['message_labels'][$row['ID_PM']][(int) $v] = array('id' => $v, 'name' => $context['labels'][(int) $v]['name']);
}
}
}
mysql_free_result($request);
// Load any users....
$posters = array_unique($posters);
if (!empty($posters))
loadMemberData($posters);
// Execute the query!
$messages_request = db_query("
SELECT pm.ID_PM, pm.subject, pm.ID_MEMBER_FROM, pm.body, pm.msgtime, pm.fromName
FROM {$db_prefix}personal_messages AS pm" . ($context['folder'] == 'outbox' ? "
LEFT JOIN {$db_prefix}pm_recipients AS pmr ON (pmr.ID_PM = pm.ID_PM)" : '') . ($context['sort_by'] == 'name' ? "
LEFT JOIN {$db_prefix}members AS mem ON (mem.ID_MEMBER = " . ($context['folder'] == 'outbox' ? 'pmr.ID_MEMBER' : 'pm.ID_MEMBER_FROM') . ")" : '') . "
WHERE pm.ID_PM IN (" . implode(',', $pms) . ")" . ($context['folder'] == 'outbox' ? "
GROUP BY pm.ID_PM" : '') . "
ORDER BY $_GET[sort] " . ($descending ? ' DESC' : ' ASC') . "
LIMIT " . count($pms), __FILE__, __LINE__);
}
else
$messages_request = false;
$context['can_send_pm'] = allowedTo('pm_send');
if (!WIRELESS)
$context['sub_template'] = 'folder';
$context['page_title'] = $txt[143];
}
// Get a personal message for the theme. (used to save memory.)
function prepareMessageContext($reset = false)
{
global $txt, $scripturl, $modSettings, $context, $messages_request, $memberContext, $recipients;
// Count the current message number....
static $counter = null;
if ($counter === null || $reset)
$counter = $context['start'];
static $temp_pm_selected = null;
if ($temp_pm_selected === null)
{
$temp_pm_selected = isset($_SESSION['pm_selected']) ? $_SESSION['pm_selected'] : array();
$_SESSION['pm_selected'] = array();
}
// Bail if it's false, ie. no messages.
if ($messages_request == false)
return false;
// Reset the data?
if ($reset == true)
return @mysql_data_seek($messages_request, 0);
// Get the next one... bail if anything goes wrong.
$message = mysql_fetch_assoc($messages_request);
if (!$message)
return(false);
// Use '(no subject)' if none was specified.
$message['subject'] = $message['subject'] == '' ? $txt[24] : $message['subject'];
// Load the message's information - if it's not there, load the guest information.
if (!loadMemberContext($message['ID_MEMBER_FROM']))
{
$memberContext[$message['ID_MEMBER_FROM']]['name'] = $message['fromName'];
$memberContext[$message['ID_MEMBER_FROM']]['id'] = 0;
$memberContext[$message['ID_MEMBER_FROM']]['group'] = $txt[28];
$memberContext[$message['ID_MEMBER_FROM']]['link'] = $message['fromName'];
$memberContext[$message['ID_MEMBER_FROM']]['email'] = '';
$memberContext[$message['ID_MEMBER_FROM']]['hide_email'] = true;
$memberContext[$message['ID_MEMBER_FROM']]['is_guest'] = true;
}
// Censor all the important text...
censorText($message['body']);
censorText($message['subject']);
// Run UBBC interpreter on the message.
$message['body'] = parse_bbc($message['body'], true, 'pm' . $message['ID_PM']);
// Send the array.
$output = array(
'alternate' => $counter % 2,
'id' => $message['ID_PM'],
'member' => &$memberContext[$message['ID_MEMBER_FROM']],
'subject' => $message['subject'],
'time' => timeformat($message['msgtime']),
'timestamp' => forum_time(true, $message['msgtime']),
'counter' => $counter,
'body' => $message['body'],
'recipients' => &$recipients[$message['ID_PM']],
'number_recipients' => count($recipients[$message['ID_PM']]['to']),
'labels' => &$context['message_labels'][$message['ID_PM']],
'fully_labeled' => count($context['message_labels'][$message['ID_PM']]) == count($context['labels']),
'is_replied_to' => &$context['message_replied'][$message['ID_PM']],
'is_selected' => !empty($temp_pm_selected) && in_array($message['ID_PM'], $temp_pm_selected),
);
$counter++;
return $output;
}
function MessageSearch()
{
global $context, $txt, $scripturl, $modSettings;
if (isset($_REQUEST['params']))
{
$temp_params = explode('|"|', base64_decode(strtr($_REQUEST['params'], array(' ' => '+'))));
$context['search_params'] = array();
foreach ($temp_params as $i => $data)
{
@list ($k, $v) = explode('|\'|', $data);
$context['search_params'][$k] = stripslashes($v);
}
}
if (isset($_REQUEST['search']))
$context['search_params']['search'] = stripslashes(un_htmlspecialchars($_REQUEST['search']));
if (isset($context['search_params']['search']))
$context['search_params']['search'] = htmlspecialchars($context['search_params']['search']);
if (isset($context['search_params']['userspec']))
$context['search_params']['userspec'] = htmlspecialchars(stripslashes($context['search_params']['userspec']));
if (!empty($context['search_params']['searchtype']))
$context['search_params']['searchtype'] = 2;
if (!empty($context['search_params']['minage']))
$context['search_params']['minage'] = (int) $context['search_params']['minage'];
if (!empty($context['search_params']['maxage']))
$context['search_params']['maxage'] = (int) $context['search_params']['maxage'];
$context['search_params']['subject_only'] = !empty($context['search_params']['subject_only']);
$context['search_params']['show_complete'] = !empty($context['search_params']['show_complete']);
// Create the array of labels to be searched.
$context['search_labels'] = array();
$searchedLabels = isset($context['search_params']['labels']) && $context['search_params']['labels'] != '' ? explode(',', $context['search_params']['labels']) : array();
foreach ($context['labels'] as $label)
{
$context['search_labels'][] = array(
'id' => $label['id'],
'name' => $label['name'],
'checked' => !empty($searchedLabels) ? in_array($label['id'], $searchedLabels) : true,
);
}
// Are all the labels checked?
$context['check_all'] = empty($searchedLabels) || count($context['search_labels']) == count($searchedLabels);
// Load the error text strings if there were errors in the search.
if (!empty($context['search_errors']))
{
loadLanguage('Errors');
$context['search_errors']['messages'] = array();
foreach ($context['search_errors'] as $search_error => $dummy)
{
if ($search_error == 'messages')
continue;
$context['search_errors']['messages'][] = $txt['error_' . $search_error];
}
}
$context['simple_search'] = isset($context['search_params']['advanced']) ? empty($context['search_params']['advanced']) : !empty($modSettings['simpleSearch']) && !isset($_REQUEST['advanced']);
$context['page_title'] = $txt['pm_search_title'];
$context['sub_template'] = 'search';
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;sa=search',
'name' => $txt['pm_search_bar_title'],
);
}
function MessageSearch2()
{
global $scripturl, $modSettings, $user_info, $context, $txt, $db_prefix;
global $ID_MEMBER, $memberContext, $func;
if (!empty($context['load_average']) && !empty($modSettings['loadavg_search']) && $context['load_average'] >= $modSettings['loadavg_search'])
fatal_lang_error('loadavg_search_disabled', false);
// !!! For the moment force the folder to the inbox.
$context['folder'] = 'inbox';
// Some useful general permissions.
$context['can_send_pm'] = allowedTo('pm_send');
// Some hardcoded veriables that can be tweaked if required.
$maxMembersToSearch = 500;
// Extract all the search parameters.
$search_params = array();
if (isset($_REQUEST['params']))
{
$temp_params = explode('|"|', base64_decode(strtr($_REQUEST['params'], array(' ' => '+'))));
foreach ($temp_params as $i => $data)
{
@list ($k, $v) = explode('|\'|', $data);
$search_params[$k] = stripslashes($v);
}
}
$context['start'] = isset($_GET['start']) ? (int) $_GET['start'] : 0;
// Store whether simple search was used (needed if the user wants to do another query).
if (!isset($search_params['advanced']))
$search_params['advanced'] = empty($_REQUEST['advanced']) ? 0 : 1;
// 1 => 'allwords' (default, don't set as param) / 2 => 'anywords'.
if (!empty($search_params['searchtype']) || (!empty($_REQUEST['searchtype']) && $_REQUEST['searchtype'] == 2))
$search_params['searchtype'] = 2;
// Minimum age of messages. Default to zero (don't set param in that case).
if (!empty($search_params['minage']) || (!empty($_REQUEST['minage']) && $_REQUEST['minage'] > 0))
$search_params['minage'] = !empty($search_params['minage']) ? (int) $search_params['minage'] : (int) $_REQUEST['minage'];
// Maximum age of messages. Default to infinite (9999 days: param not set).
if (!empty($search_params['maxage']) || (!empty($_REQUEST['maxage']) && $_REQUEST['maxage'] != 9999))
$search_params['maxage'] = !empty($search_params['maxage']) ? (int) $search_params['maxage'] : (int) $_REQUEST['maxage'];
$search_params['subject_only'] = !empty($search_params['subject_only']) || !empty($_REQUEST['subject_only']);
$search_params['show_complete'] = !empty($search_params['show_complete']) || !empty($_REQUEST['show_complete']);
// Default the user name to a wildcard matching every user (*).
if (!empty($search_params['user_spec']) || (!empty($_REQUEST['userspec']) && $_REQUEST['userspec'] != '*'))
$search_params['userspec'] = isset($search_params['userspec']) ? $search_params['userspec'] : $_REQUEST['userspec'];
// If there's no specific user, then don't mention it in the main query.
if (empty($search_params['userspec']))
$userQuery = '';
else
{
$userString = strtr(addslashes($func['htmlspecialchars'](stripslashes($search_params['userspec']), ENT_QUOTES)), array('"' => '"'));
$userString = strtr($userString, array('%' => '\%', '_' => '\_', '*' => '%', '?' => '_'));
preg_match_all('~"([^"]+)"~', $userString, $matches);
$possible_users = array_merge($matches[1], explode(',', preg_replace('~"([^"]+)"~', '', $userString)));
for ($k = 0, $n = count($possible_users); $k < $n; $k++)
{
$possible_users[$k] = trim($possible_users[$k]);
if (strlen($possible_users[$k]) == 0)
unset($possible_users[$k]);
}
// Who matches those criteria?
// !!! This doesn't support outbox searching.
$request = db_query("
SELECT ID_MEMBER
FROM {$db_prefix}members
WHERE realName LIKE '" . implode("' OR realName LIKE '", $possible_users) . "'", __FILE__, __LINE__);
// Simply do nothing if there're too many members matching the criteria.
if (mysql_num_rows($request) > $maxMembersToSearch)
$userQuery = '';
elseif (mysql_num_rows($request) == 0)
$userQuery = "AND pm.ID_MEMBER_FROM = 0 AND (pm.fromName LIKE '" . implode("' OR pm.fromName LIKE '", $possible_users) . "')";
else
{
$memberlist = array();
while ($row = mysql_fetch_assoc($request))
$memberlist[] = $row['ID_MEMBER'];
$userQuery = "AND (pm.ID_MEMBER_FROM IN (" . implode(', ', $memberlist) . ") OR (pm.ID_MEMBER_FROM = 0 AND (pm.fromName LIKE '" . implode("' OR pm.fromName LIKE '", $possible_users) . "')))";
}
mysql_free_result($request);
}
// Setup the sorting variables...
// !!! Add more in here!
$sort_columns = array(
'ID_PM',
);
if (empty($search_params['sort']) && !empty($_REQUEST['sort']))
list ($search_params['sort'], $search_params['sort_dir']) = array_pad(explode('|', $_REQUEST['sort']), 2, '');
$search_params['sort'] = !empty($search_params['sort']) && in_array($search_params['sort'], $sort_columns) ? $search_params['sort'] : 'ID_PM';
$search_params['sort_dir'] = !empty($search_params['sort_dir']) && $search_params['sort_dir'] == 'asc' ? 'asc' : 'desc';
// Sort out any labels we may be searching by.
$labelQuery = '';
if ($context['folder'] == 'inbox' && !empty($search_params['advanced']) && $context['currently_using_labels'])
{
// Came here from pagination? Put them back into $_REQUEST for sanitization.
if (isset($search_params['labels']))
$_REQUEST['searchlabel'] = explode(',', $search_params['labels']);
// Assuming we have some labels - make them all integers.
if (!empty($_REQUEST['searchlabel']) && is_array($_REQUEST['searchlabel']))
{
foreach ($_REQUEST['searchlabel'] as $key => $id)
$_REQUEST['searchlabel'][$key] = (int) $id;
}
else
$_REQUEST['searchlabel'] = array();
// Now that everything is cleaned up a bit, make the labels a param.
$search_params['labels'] = implode(',', $_REQUEST['searchlabel']);
// No labels selected? That must be an error!
if (empty($_REQUEST['searchlabel']))
$context['search_errors']['no_labels_selected'] = true;
// Otherwise prepare the query!
elseif (count($_REQUEST['searchlabel']) != count($context['labels']))
$labelQuery = "
AND (FIND_IN_SET('" . implode("', pmr.labels) OR FIND_IN_SET('", $_REQUEST['searchlabel']) . "', pmr.labels))";
}
// What are we actually searching for?
$search_params['search'] = !empty($search_params['search']) ? $search_params['search'] : (isset($_REQUEST['search']) ? stripslashes($_REQUEST['search']) : '');
// If we ain't got nothing - we should error!
if (!isset($search_params['search']) || $search_params['search'] == '')
$context['search_errors']['invalid_search_string'] = true;
// Extract phrase parts first (e.g. some words "this is a phrase" some more words.)
preg_match_all('~(?:^|\s)([-]?)"([^"]+)"(?:$|\s)~' . ($context['utf8'] ? 'u' : ''), $search_params['search'], $matches, PREG_PATTERN_ORDER);
$searchArray = $matches[2];
// Remove the phrase parts and extract the words.
$tempSearch = explode(' ', preg_replace('~(?:^|\s)([-]?)"([^"]+)"(?:$|\s)~' . ($context['utf8'] ? 'u' : ''), ' ', $search_params['search']));
// A minus sign in front of a word excludes the word.... so...
$excludedWords = array();
// .. first, we check for things like -"some words", but not "-some words".
foreach ($matches[1] as $index => $word)
if ($word == '-')
{
$word = $func['strtolower'](trim($searchArray[$index]));
if (strlen($word) > 0)
$excludedWords[] = addslashes($word);
unset($searchArray[$index]);
}
// Now we look for -test, etc.... normaller.
foreach ($tempSearch as $index => $word)
if (strpos(trim($word), '-') === 0)
{
$word = substr($func['strtolower'](trim($word)), 1);
if (strlen($word) > 0)
$excludedWords[] = addslashes($word);
unset($tempSearch[$index]);
}
$searchArray = array_merge($searchArray, $tempSearch);
// Trim everything and make sure there are no words that are the same.
foreach ($searchArray as $index => $value)
{
$searchArray[$index] = $func['strtolower'](trim($value));
if ($searchArray[$index] == '')
unset($searchArray[$index]);
else
{
// Sort out entities first.
$searchArray[$index] = $func['htmlspecialchars']($searchArray[$index]);
$searchArray[$index] = addslashes($searchArray[$index]);
}
}
$searchArray = array_unique($searchArray);
// Create an array of replacements for highlighting.
$context['mark'] = array();
foreach ($searchArray as $word)
$context['mark'][$word] = '' . $word . '';
// This contains *everything*
$searchWords = array_merge($searchArray, $excludedWords);
// Make sure at least one word is being searched for.
if (empty($searchArray))
$context['search_errors']['invalid_search_string'] = true;
// Sort out the search query so the user can edit it - if they want.
$context['search_params'] = $search_params;
if (isset($context['search_params']['search']))
$context['search_params']['search'] = htmlspecialchars($context['search_params']['search']);
if (isset($context['search_params']['userspec']))
$context['search_params']['userspec'] = htmlspecialchars($context['search_params']['userspec']);
// Now we have all the parameters, combine them together for pagination and the like...
$context['params'] = array();
foreach ($search_params as $k => $v)
$context['params'][] = $k . '|\'|' . addslashes($v);
$context['params'] = base64_encode(implode('|"|', $context['params']));
// Compile the subject query part.
$andQueryParts = array();
foreach ($searchWords as $index => $word)
{
if ($word == '')
continue;
if ($search_params['subject_only'])
$andQueryParts[] = "pm.subject" . (in_array($word, $excludedWords) ? ' NOT' : '') . " LIKE '%" . strtr($word, array('_' => '\\_', '%' => '\\%')) . "%'";
else
$andQueryParts[] = '(pm.subject' . (in_array($word, $excludedWords) ? ' NOT' : '') . " LIKE '%" . strtr($word, array('_' => '\\_', '%' => '\\%')) . "%' " . (in_array($word, $excludedWords) ? 'AND pm.body NOT' : 'OR pm.body') . " LIKE '%" . strtr($word, array('_' => '\\_', '%' => '\\%')) . "%')";
}
$searchQuery = ' 1';
if (!empty($andQueryParts))
$searchQuery = implode(!empty($search_params['searchtype']) && $search_params['searchtype'] == 2 ? ' OR ' : ' AND ', $andQueryParts);
// If we have errors - return back to the first screen...
if (!empty($context['search_errors']))
{
$_REQUEST['params'] = $context['params'];
return MessageSearch();
}
// Get the amount of results.
$request = db_query("
SELECT COUNT(*)
FROM ({$db_prefix}pm_recipients AS pmr, {$db_prefix}personal_messages AS pm)
WHERE pm.ID_PM = pmr.ID_PM" . ($context['folder'] == 'inbox' ? "
AND pmr.ID_MEMBER = $ID_MEMBER
AND pmr.deleted = 0" : "
AND pm.ID_MEMBER_FROM = $ID_MEMBER
AND pm.deletedBySender = 0") . "
$userQuery$labelQuery
AND ($searchQuery)", __FILE__, __LINE__);
list ($numResults) = mysql_fetch_row($request);
mysql_free_result($request);
// Get all the matching messages... using standard search only (No caching and the like!)
// !!! This doesn't support outbox searching yet.
$request = db_query("
SELECT pm.ID_PM, pm.ID_MEMBER_FROM
FROM ({$db_prefix}pm_recipients AS pmr, {$db_prefix}personal_messages AS pm)
WHERE pm.ID_PM = pmr.ID_PM" . ($context['folder'] == 'inbox' ? "
AND pmr.ID_MEMBER = $ID_MEMBER
AND pmr.deleted = 0" : "
AND pm.ID_MEMBER_FROM = $ID_MEMBER
AND pm.deletedBySender = 0") . "
$userQuery$labelQuery
AND ($searchQuery)
ORDER BY $search_params[sort] $search_params[sort_dir]
LIMIT $context[start], $modSettings[search_results_per_page]", __FILE__, __LINE__);
$foundMessages = array();
$posters = array();
while ($row = mysql_fetch_assoc($request))
{
$foundMessages[] = $row['ID_PM'];
$posters[] = $row['ID_MEMBER_FROM'];
}
mysql_free_result($request);
// Load the users...
$posters = array_unique($posters);
if (!empty($posters))
loadMemberData($posters);
// Sort out the page index.
$context['page_index'] = constructPageIndex($scripturl . '?action=pm;sa=search2;params=' . $context['params'], $_GET['start'], $numResults, $modSettings['search_results_per_page'], false);
$context['message_labels'] = array();
$context['message_replied'] = array();
$context['personal_messages'] = array();
if (!empty($foundMessages))
{
// Now get recipients (but don't include bcc-recipients for your inbox, you're not supposed to know :P!)
$request = db_query("
SELECT
pmr.ID_PM, mem_to.ID_MEMBER AS ID_MEMBER_TO, mem_to.realName AS toName,
pmr.bcc, pmr.labels, pmr.is_read
FROM {$db_prefix}pm_recipients AS pmr
LEFT JOIN {$db_prefix}members AS mem_to ON (mem_to.ID_MEMBER = pmr.ID_MEMBER)
WHERE pmr.ID_PM IN (" . implode(', ', $foundMessages) . ")", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
{
if ($context['folder'] == 'outbox' || empty($row['bcc']))
$recipients[$row['ID_PM']][empty($row['bcc']) ? 'to' : 'bcc'][] = empty($row['ID_MEMBER_TO']) ? $txt[28] : '' . $row['toName'] . '';
if ($row['ID_MEMBER_TO'] == $ID_MEMBER && $context['folder'] != 'outbox')
{
$context['message_replied'][$row['ID_PM']] = $row['is_read'] & 2;
$row['labels'] = $row['labels'] == '' ? array() : explode(',', $row['labels']);
// This is a special need for linking to messages.
foreach ($row['labels'] as $v)
{
if (isset($context['labels'][(int) $v]))
$context['message_labels'][$row['ID_PM']][(int) $v] = array('id' => $v, 'name' => $context['labels'][(int) $v]['name']);
// Here we find the first label on a message - for linking to posts in results
if (!isset($context['first_label'][$row['ID_PM']]) && !in_array('-1', $row['labels']))
$context['first_label'][$row['ID_PM']] = (int) $v;
}
}
}
// Prepare the query for the callback!
$request = db_query("
SELECT pm.ID_PM, pm.subject, pm.ID_MEMBER_FROM, pm.body, pm.msgtime, pm.fromName
FROM {$db_prefix}personal_messages AS pm
WHERE pm.ID_PM IN (" . implode(',', $foundMessages) . ")
ORDER BY $search_params[sort] $search_params[sort_dir]
LIMIT " . count($foundMessages), __FILE__, __LINE__);
$counter = 0;
while ($row = mysql_fetch_assoc($request))
{
// If there's no message subject, use the default.
$row['subject'] = $row['subject'] == '' ? $txt[24] : $row['subject'];
// Load this posters context info, if it ain't there then fill in the essentials...
if (!loadMemberContext($row['ID_MEMBER_FROM']))
{
$memberContext[$row['ID_MEMBER_FROM']]['name'] = $row['fromName'];
$memberContext[$row['ID_MEMBER_FROM']]['id'] = 0;
$memberContext[$row['ID_MEMBER_FROM']]['group'] = $txt[28];
$memberContext[$row['ID_MEMBER_FROM']]['link'] = $row['fromName'];
$memberContext[$row['ID_MEMBER_FROM']]['email'] = '';
$memberContext[$row['ID_MEMBER_FROM']]['hide_email'] = true;
$memberContext[$row['ID_MEMBER_FROM']]['is_guest'] = true;
}
// Censor anything we don't want to see...
censorText($row['body']);
censorText($row['subject']);
// Parse out any BBC...
$row['body'] = parse_bbc($row['body'], true, 'pm' . $row['ID_PM']);
$href = $scripturl . '?action=pm;f=' . $context['folder'] . (isset($context['first_label'][$row['ID_PM']]) ? ';l=' . $context['first_label'][$row['ID_PM']] : '') . ';pmid='. $row['ID_PM'] . '#msg' . $row['ID_PM'];
$context['personal_messages'][] = array(
'id' => $row['ID_PM'],
'member' => &$memberContext[$row['ID_MEMBER_FROM']],
'subject' => $row['subject'],
'body' => $row['body'],
'time' => timeformat($row['msgtime']),
'recipients' => &$recipients[$row['ID_PM']],
'labels' => &$context['message_labels'][$row['ID_PM']],
'fully_labeled' => count($context['message_labels'][$row['ID_PM']]) == count($context['labels']),
'is_replied_to' => &$context['message_replied'][$row['ID_PM']],
'href' => $href,
'link' => '' . $row['subject'] . '',
'counter' => ++$counter,
);
}
mysql_free_result($request);
}
// Finish off the context.
$context['page_title'] = $txt['pm_search_title'];
$context['sub_template'] = 'search_results';
$context['pm_area'] = 'search';
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;sa=search',
'name' => $txt['pm_search_bar_title'],
);
}
// Send a new message?
function MessagePost()
{
global $txt, $sourcedir, $db_prefix, $ID_MEMBER, $scripturl, $modSettings;
global $context, $options, $func, $language, $user_info;
isAllowedTo('pm_send');
if (loadLanguage('PersonalMessage', '', false) === false)
loadLanguage('InstantMessage');
// Just in case it was loaded from somewhere else.
if (!WIRELESS)
{
if (loadTemplate('PersonalMessage', false) === false)
loadTemplate('InstantMessage');
$context['sub_template'] = 'send';
}
// Extract out the spam settings - cause it's neat.
list ($modSettings['max_pm_recipients'], $modSettings['pm_posts_verification'], $modSettings['pm_posts_per_hour']) = explode(',', $modSettings['pm_spam_settings']);
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');
// Set the title...
$context['page_title'] = $txt[148];
$context['reply'] = isset($_REQUEST['pmsg']) || isset($_REQUEST['quote']);
// Check whether we've gone over the limit of messages we can send per hour.
if (!empty($modSettings['pm_posts_per_hour']) && !allowedTo(array('admin_forum', 'moderate_forum', 'send_mail')))
{
// How many have they sent this last hour?
$request = db_query("
SELECT COUNT(pr.ID_PM) AS postCount
FROM ({$db_prefix}personal_messages AS pm, {$db_prefix}pm_recipients AS pr)
WHERE pm.ID_MEMBER_FROM = $ID_MEMBER
AND pm.msgtime > " . (time() - 3600) . "
AND pr.ID_PM = pm.ID_PM", __FILE__, __LINE__);
list ($postCount) = mysql_fetch_row($request);
mysql_free_result($request);
if (!empty($postCount) && $postCount >= $modSettings['pm_posts_per_hour'])
{
// Excempt moderators.
$request = db_query("
SELECT ID_MEMBER
FROM {$db_prefix}moderators
WHERE ID_MEMBER = $ID_MEMBER", __FILE__, __LINE__);
if (mysql_num_rows($request) == 0)
fatal_error(sprintf($txt['pm_too_many_per_hour'], $modSettings['pm_posts_per_hour']));
mysql_free_result($request);
}
}
// Quoting/Replying to a message?
if (!empty($_REQUEST['pmsg']))
{
$_REQUEST['pmsg'] = (int) $_REQUEST['pmsg'];
// Get the quoted message (and make sure you're allowed to see this quote!).
$request = db_query("
SELECT
pm.ID_PM, pm.body, pm.subject, pm.msgtime, mem.memberName,
IFNULL(mem.ID_MEMBER, 0) AS ID_MEMBER, IFNULL(mem.realName, pm.fromName) AS realName
FROM ({$db_prefix}personal_messages AS pm" . ($context['folder'] == 'outbox' ? '' : ", {$db_prefix}pm_recipients AS pmr") . ")
LEFT JOIN {$db_prefix}members AS mem ON (mem.ID_MEMBER = pm.ID_MEMBER_FROM)
WHERE pm.ID_PM = $_REQUEST[pmsg]" . ($context['folder'] == 'outbox' ? "
AND pm.ID_MEMBER_FROM = $ID_MEMBER" : "
AND pmr.ID_PM = $_REQUEST[pmsg]
AND pmr.ID_MEMBER = $ID_MEMBER") . "
LIMIT 1", __FILE__, __LINE__);
if (mysql_num_rows($request) == 0)
fatal_lang_error('pm_not_yours', false);
$row_quoted = mysql_fetch_assoc($request);
mysql_free_result($request);
// Censor the message.
censorText($row_quoted['subject']);
censorText($row_quoted['body']);
// Add 'Re: ' to it....
if (!isset($context['response_prefix']) && !($context['response_prefix'] = cache_get_data('response_prefix')))
{
if ($language === $user_info['language'])
$context['response_prefix'] = $txt['response_prefix'];
else
{
loadLanguage('index', $language, false);
$context['response_prefix'] = $txt['response_prefix'];
loadLanguage('index');
}
cache_put_data('response_prefix', $context['response_prefix'], 600);
}
$form_subject = $row_quoted['subject'];
if ($context['reply'] && trim($context['response_prefix']) != '' && $func['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
$form_subject = $context['response_prefix'] . $form_subject;
if (isset($_REQUEST['quote']))
{
// Remove any nested quotes and
...
$form_message = preg_replace('~~i', "\n", $row_quoted['body']);
if (!empty($modSettings['removeNestedQuotes']))
$form_message = preg_replace(array('~\n?\[quote.*?\].+?\[/quote\]\n?~is', '~^\n~', '~\[/quote\]~'), '', $form_message);
if (empty($row_quoted['ID_MEMBER']))
$form_message = '[quote author="' . $row_quoted['realName'] . ""]\n" . $form_message . "\n[/quote]";
else
$form_message = '[quote author=' . $row_quoted['realName'] . ' link=action=profile;u=' . $row_quoted['ID_MEMBER'] . ' date=' . $row_quoted['msgtime'] . "]\n" . $form_message . "\n[/quote]";
}
else
$form_message = '';
// Do the BBC thang on the message.
$row_quoted['body'] = parse_bbc($row_quoted['body'], true, 'pm' . $row_quoted['ID_PM']);
// Set up the quoted message array.
$context['quoted_message'] = array(
'id' => $row_quoted['ID_PM'],
'member' => array(
'name' => $row_quoted['realName'],
'username' => $row_quoted['memberName'],
'id' => $row_quoted['ID_MEMBER'],
'href' => !empty($row_quoted['ID_MEMBER']) ? $scripturl . '?action=profile;u=' . $row_quoted['ID_MEMBER'] : '',
'link' => !empty($row_quoted['ID_MEMBER']) ? '' . $row_quoted['realName'] . '' : $row_quoted['realName'],
),
'subject' => $row_quoted['subject'],
'time' => timeformat($row_quoted['msgtime']),
'timestamp' => forum_time(true, $row_quoted['msgtime']),
'body' => $row_quoted['body']
);
}
else
{
$context['quoted_message'] = false;
$form_subject = '';
$form_message = '';
}
// Sending by ID? Replying to all? Fetch the realName(s).
if (isset($_REQUEST['u']))
{
// Store all the members who are getting this...
$membersTo = array();
// If the user is replying to all, get all the other members this was sent to..
if ($_REQUEST['u'] == 'all' && isset($row_quoted))
{
// Firstly, to reply to all we clearly already have $row_quoted - so have the original member from.
$membersTo[] = '"' . $row_quoted['realName'] . '"';
// Now to get the others.
$request = db_query("
SELECT mem.realName
FROM {$db_prefix}pm_recipients AS pmr
LEFT JOIN {$db_prefix}members AS mem ON (mem.ID_MEMBER = pmr.ID_MEMBER)
WHERE pmr.ID_PM = $_REQUEST[pmsg]
AND pmr.ID_MEMBER != $ID_MEMBER
AND bcc = 0", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$membersTo[] = '"' . htmlspecialchars($row['realName']) . '"';
mysql_free_result($request);
}
else
{
$_REQUEST['u'] = explode(',', $_REQUEST['u']);
foreach ($_REQUEST['u'] as $key => $uID)
$_REQUEST['u'][$key] = (int) $uID;
$request = db_query("
SELECT realName
FROM {$db_prefix}members
WHERE ID_MEMBER IN (" . implode(', ', $_REQUEST['u']) . ")
LIMIT " . count($_REQUEST['u']), __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$membersTo[] = '"' . $row['realName'] . '"';
mysql_free_result($request);
}
// Create the 'to' string - Quoting it, just in case it's something like bob,i,like,commas,man.
$_REQUEST['to'] = implode(', ', $membersTo);
}
// Set the defaults...
$context['subject'] = $form_subject != '' ? $form_subject : $txt[24];
$context['message'] = str_replace(array('"', '<', '>'), array('"', '<', '>'), $form_message);
$context['to'] = isset($_REQUEST['to']) ? stripslashes($_REQUEST['to']) : '';
$context['bcc'] = isset($_REQUEST['bcc']) ? stripslashes($_REQUEST['bcc']) : '';
$context['post_error'] = array();
$context['copy_to_outbox'] = !empty($options['copy_to_outbox']);
// And build the link tree.
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;sa=send',
'name' => $txt[321]
);
$context['visual_verification'] = !$user_info['is_admin'] && !empty($modSettings['pm_posts_verification']) && $user_info['posts'] < $modSettings['pm_posts_verification'];
if ($context['visual_verification'])
{
$context['use_graphic_library'] = in_array('gd', get_loaded_extensions());
$context['verificiation_image_href'] = $scripturl . '?action=verificationcode;rand=' . md5(mt_rand());
// Skip I, J, L, O, Q, S and Z.
$character_range = array_merge(range('A', 'H'), array('K', 'M', 'N', 'P'), range('R', 'Z'));
// Generate a new code.
$_SESSION['visual_verification_code'] = '';
for ($i = 0; $i < 5; $i++)
$_SESSION['visual_verification_code'] .= $character_range[array_rand($character_range)];
}
// Register this form and get a sequence number in $context.
checkSubmitOnce('register');
}
// An error in the message...
function messagePostError($error_types, $to, $bcc)
{
global $txt, $context, $scripturl, $modSettings, $db_prefix, $ID_MEMBER;
global $func, $user_info;
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');
if (!WIRELESS)
$context['sub_template'] = 'send';
if (isset($_REQUEST['u']))
$_REQUEST['u'] = is_array($_REQUEST['u']) ? $_REQUEST['u'] : explode(',', $_REQUEST['u']);
$context['page_title'] = $txt[148];
// Set everything up like before....
$context['to'] = stripslashes($to);
$context['bcc'] = stripslashes($bcc);
$context['subject'] = isset($_REQUEST['subject']) ? $func['htmlspecialchars'](stripslashes($_REQUEST['subject'])) : '';
$context['message'] = isset($_REQUEST['message']) ? str_replace(array(' '), array(' '), $func['htmlspecialchars'](stripslashes($_REQUEST['message']))) : '';
$context['copy_to_outbox'] = !empty($_REQUEST['outbox']);
$context['reply'] = !empty($_REQUEST['replied_to']);
if ($context['reply'])
{
$_REQUEST['replied_to'] = (int) $_REQUEST['replied_to'];
$request = db_query("
SELECT
pm.ID_PM, pm.body, pm.subject, pm.msgtime, mem.memberName,
IFNULL(mem.ID_MEMBER, 0) AS ID_MEMBER, IFNULL(mem.realName, pm.fromName) AS realName
FROM ({$db_prefix}personal_messages AS pm" . ($context['folder'] == 'outbox' ? '' : ", {$db_prefix}pm_recipients AS pmr") . ")
LEFT JOIN {$db_prefix}members AS mem ON (mem.ID_MEMBER = pm.ID_MEMBER_FROM)
WHERE pm.ID_PM = $_REQUEST[replied_to]" . ($context['folder'] == 'outbox' ? "
AND pm.ID_MEMBER_FROM = $ID_MEMBER" : "
AND pmr.ID_PM = $_REQUEST[replied_to]
AND pmr.ID_MEMBER = $ID_MEMBER") . "
LIMIT 1", __FILE__, __LINE__);
if (mysql_num_rows($request) == 0)
fatal_lang_error('pm_not_yours', false);
$row_quoted = mysql_fetch_assoc($request);
mysql_free_result($request);
censorText($row_quoted['subject']);
censorText($row_quoted['body']);
$context['quoted_message'] = array(
'id' => $row_quoted['ID_PM'],
'member' => array(
'name' => $row_quoted['realName'],
'username' => $row_quoted['memberName'],
'id' => $row_quoted['ID_MEMBER'],
'href' => !empty($row_quoted['ID_MEMBER']) ? $scripturl . '?action=profile;u=' . $row_quoted['ID_MEMBER'] : '',
'link' => !empty($row_quoted['ID_MEMBER']) ? '' . $row_quoted['realName'] . '' : $row_quoted['realName'],
),
'subject' => $row_quoted['subject'],
'time' => timeformat($row_quoted['msgtime']),
'timestamp' => forum_time(true, $row_quoted['msgtime']),
'body' => parse_bbc($row_quoted['body'], true, 'pm' . $row_quoted['ID_PM']),
);
}
// Build the link tree....
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;sa=send',
'name' => $txt[321]
);
// Set each of the errors for the template.
loadLanguage('Errors');
$context['post_error'] = array(
'messages' => array(),
);
foreach ($error_types as $error_type)
{
// There is no compatible language string. So lets work around that.
if ($error_type == 'wrong_verification_code')
$txt['error_wrong_verification_code'] = $txt['visual_verification_failed'];
$context['post_error'][$error_type] = true;
if (isset($txt['error_' . $error_type]))
$context['post_error']['messages'][] = $txt['error_' . $error_type];
}
// Check whether we need to show the code again.
$context['visual_verification'] = !$user_info['is_admin'] && !empty($modSettings['pm_posts_verification']) && $user_info['posts'] < $modSettings['pm_posts_verification'];
if ($context['visual_verification'])
{
$context['use_graphic_library'] = in_array('gd', get_loaded_extensions());
$context['verificiation_image_href'] = $scripturl . '?action=verificationcode;rand=' . md5(mt_rand());
}
// No check for the previous submission is needed.
checkSubmitOnce('free');
// Acquire a new form sequence number.
checkSubmitOnce('register');
}
// Send it!
function MessagePost2()
{
global $txt, $ID_MEMBER, $context, $sourcedir;
global $db_prefix, $user_info, $modSettings, $scripturl, $func;
isAllowedTo('pm_send');
require_once($sourcedir . '/Subs-Auth.php');
if (loadLanguage('PersonalMessage', '', false) === false)
loadLanguage('InstantMessage');
// Extract out the spam settings - it saves database space!
list ($modSettings['max_pm_recipients'], $modSettings['pm_posts_verification'], $modSettings['pm_posts_per_hour']) = explode(',', $modSettings['pm_spam_settings']);
// Check whether we've gone over the limit of messages we can send per hour - fatal error if fails!
if (!empty($modSettings['pm_posts_per_hour']) && !allowedTo(array('admin_forum', 'moderate_forum', 'send_mail')))
{
// How many messages have they sent this last hour?
$request = db_query("
SELECT COUNT(pr.ID_PM) AS postCount
FROM ({$db_prefix}personal_messages AS pm, {$db_prefix}pm_recipients AS pr)
WHERE pm.ID_MEMBER_FROM = $ID_MEMBER
AND pm.msgtime > " . (time() - 3600) . "
AND pr.ID_PM = pm.ID_PM", __FILE__, __LINE__);
list ($postCount) = mysql_fetch_row($request);
mysql_free_result($request);
if (!empty($postCount) && $postCount >= $modSettings['pm_posts_per_hour'])
{
// Excempt moderators.
$request = db_query("
SELECT ID_MEMBER
FROM {$db_prefix}moderators
WHERE ID_MEMBER = $ID_MEMBER", __FILE__, __LINE__);
if (mysql_num_rows($request) == 0)
fatal_error(sprintf($txt['pm_too_many_per_hour'], $modSettings['pm_posts_per_hour']));
mysql_free_result($request);
}
}
// Initialize the errors we're about to make.
$post_errors = array();
// If your session timed out, show an error, but do allow to re-submit.
if (checkSession('post', '', false) != '')
$post_errors[] = 'session_timeout';
$_REQUEST['subject'] = isset($_REQUEST['subject']) ? trim($_REQUEST['subject']) : '';
$_REQUEST['to'] = empty($_POST['to']) ? (empty($_GET['to']) ? '' : $_GET['to']) : stripslashes($_POST['to']);
$_REQUEST['bcc'] = empty($_POST['bcc']) ? (empty($_GET['bcc']) ? '' : $_GET['bcc']) : stripslashes($_POST['bcc']);
// Did they make any mistakes?
if ($_REQUEST['subject'] == '')
$post_errors[] = 'no_subject';
if (!isset($_REQUEST['message']) || $_REQUEST['message'] == '')
$post_errors[] = 'no_message';
elseif (!empty($modSettings['max_messageLength']) && $func['strlen']($_REQUEST['message']) > $modSettings['max_messageLength'])
$post_errors[] = 'long_message';
if (empty($_REQUEST['to']) && empty($_REQUEST['bcc']) && empty($_REQUEST['u']))
$post_errors[] = 'no_to';
// Wrong verification code?
if (!$user_info['is_admin'] && !empty($modSettings['pm_posts_verification']) && $user_info['posts'] < $modSettings['pm_posts_verification'] && (empty($_REQUEST['visual_verification_code']) || strtoupper($_REQUEST['visual_verification_code']) !== $_SESSION['visual_verification_code']))
$post_errors[] = 'wrong_verification_code';
// If they did, give a chance to make ammends.
if (!empty($post_errors))
return messagePostError($post_errors, $func['htmlspecialchars']($_REQUEST['to']), $func['htmlspecialchars']($_REQUEST['bcc']));
// Want to take a second glance before you send?
if (isset($_REQUEST['preview']))
{
// Set everything up to be displayed.
$context['preview_subject'] = $func['htmlspecialchars'](stripslashes($_REQUEST['subject']));
$context['preview_message'] = $func['htmlspecialchars'](stripslashes($_REQUEST['message']), ENT_QUOTES);
preparsecode($context['preview_message'], true);
// Parse out the BBC if it is enabled.
$context['preview_message'] = parse_bbc($context['preview_message']);
// Censor, as always.
censorText($context['preview_subject']);
censorText($context['preview_message']);
// Set a descriptive title.
$context['page_title'] = $txt[507] . ' - ' . $context['preview_subject'];
// Pretend they messed up :P.
return messagePostError(array(), $func['htmlspecialchars']($_REQUEST['to']), $func['htmlspecialchars']($_REQUEST['bcc']));
}
// Protect from message spamming.
spamProtection('spam');
// Prevent double submission of this form.
checkSubmitOnce('check');
// Initialize member ID array.
$recipients = array(
'to' => array(),
'bcc' => array()
);
// Format the to and bcc members.
$input = array(
'to' => array(),
'bcc' => array()
);
if (empty($_REQUEST['u']))
{
// To who..?
if (!empty($_REQUEST['to']))
{
// We're going to take out the "s anyway ;).
$_REQUEST['to'] = strtr($_REQUEST['to'], array('\\"' => '"'));
preg_match_all('~"([^"]+)"~', $_REQUEST['to'], $matches);
$input['to'] = array_unique(array_merge($matches[1], explode(',', preg_replace('~"([^"]+)"~', '', $_REQUEST['to']))));
}
// Your secret's safe with me!
if (!empty($_REQUEST['bcc']))
{
// We're going to take out the "s anyway ;).
$_REQUEST['bcc'] = strtr($_REQUEST['bcc'], array('\\"' => '"'));
preg_match_all('~"([^"]+)"~', $_REQUEST['bcc'], $matches);
$input['bcc'] = array_unique(array_merge($matches[1], explode(',', preg_replace('~"([^"]+)"~', '', $_REQUEST['bcc']))));
}
foreach ($input as $rec_type => $rec)
{
foreach ($rec as $index => $member)
if (strlen(trim($member)) > 0)
$input[$rec_type][$index] = $func['htmlspecialchars']($func['strtolower'](stripslashes(trim($member))));
else
unset($input[$rec_type][$index]);
}
// Find the requested members - bcc and to.
$foundMembers = findMembers(array_merge($input['to'], $input['bcc']));
// Store IDs of the members that were found.
foreach ($foundMembers as $member)
{
// It's easier this way.
$member['name'] = strtr($member['name'], array(''' => '\''));
foreach ($input as $rec_type => $to_members)
if (array_intersect(array($func['strtolower']($member['username']), $func['strtolower']($member['name']), $func['strtolower']($member['email'])), $to_members))
{
$recipients[$rec_type][] = $member['id'];
// Get rid of this username. The ones that remain were not found.
$input[$rec_type] = array_diff($input[$rec_type], array($func['strtolower']($member['username']), $func['strtolower']($member['name']), $func['strtolower']($member['email'])));
}
}
}
else
{
$_REQUEST['u'] = explode(',', $_REQUEST['u']);
foreach ($_REQUEST['u'] as $key => $uID)
$_REQUEST['u'][$key] = (int) $uID;
$request = db_query("
SELECT ID_MEMBER
FROM {$db_prefix}members
WHERE ID_MEMBER IN (" . implode(',', $_REQUEST['u']) . ")
LIMIT " . count($_REQUEST['u']), __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$recipients['to'][] = $row['ID_MEMBER'];
mysql_free_result($request);
}
// Before we send the PM, let's make sure we don't have an abuse of numbers.
if (!empty($modSettings['max_pm_recipients']) && count($recipients['to']) + count($recipients['bcc']) > $modSettings['max_pm_recipients'] && !allowedTo(array('moderate_forum', 'send_mail', 'admin_forum')))
{
$context['send_log'] = array(
'sent' => array(),
'failed' => array(sprintf($txt['pm_too_many_recipients'], $modSettings['max_pm_recipients'])),
);
}
// Do the actual sending of the PM.
else
{
if (!empty($recipients['to']) || !empty($recipients['bcc']))
$context['send_log'] = sendpm($recipients, $_REQUEST['subject'], $_REQUEST['message'], !empty($_REQUEST['outbox']));
else
$context['send_log'] = array(
'sent' => array(),
'failed' => array()
);
}
// Add a log message for all recipients that were not found.
foreach ($input as $rec_type => $rec)
{
// Either bad_to or bad_bcc.
if (!empty($rec) && !in_array('bad_' . $rec_type, $post_errors))
$post_errors[] = 'bad_' . $rec_type;
foreach ($rec as $i => $member)
{
$context['send_log']['failed'][] = sprintf($txt['pm_error_user_not_found'], $input[$rec_type][$i]);
}
}
// Mark the message as "replied to".
if (!empty($context['send_log']['sent']) && !empty($_REQUEST['replied_to']) && isset($_REQUEST['f']) && $_REQUEST['f'] == 'inbox')
{
db_query("
UPDATE {$db_prefix}pm_recipients
SET is_read = is_read | 2
WHERE ID_PM = " . (int) $_REQUEST['replied_to'] . "
AND ID_MEMBER = $ID_MEMBER
LIMIT 1", __FILE__, __LINE__);
}
// If one or more of the recipient were invalid, go back to the post screen with the failed usernames.
if (!empty($context['send_log']['failed']))
return messagePostError($post_errors, empty($input['to']) ? '' : '"' . implode('", "', $input['to']) . '"', empty($input['bcc']) ? '' : '"' . implode('", "', $input['bcc']) . '"');
// Go back to the where they sent from, if possible...
redirectexit($context['current_label_redirect']);
}
// This function lists all buddies for wireless protocols.
function WirelessAddBuddy()
{
global $scripturl, $txt, $db_prefix, $user_info, $context;
isAllowedTo('pm_send');
$context['page_title'] = $txt['wireless_pm_add_buddy'];
$current_buddies = empty($_REQUEST['u']) ? array() : explode(',', $_REQUEST['u']);
foreach ($current_buddies as $key => $buddy)
$current_buddies[$key] = (int) $buddy;
$base_url = $scripturl . '?action=pm;sa=send;u=' . (empty($current_buddies) ? '' : implode(',', $current_buddies) . ',');
$context['pm_href'] = $scripturl . '?action=pm;sa=send' . (empty($current_buddies) ? '' : ';u=' . implode(',', $current_buddies));
$context['buddies'] = array();
if (!empty($user_info['buddies']))
{
$request = db_query("
SELECT ID_MEMBER, realName
FROM {$db_prefix}members
WHERE ID_MEMBER IN (" . implode(',', $user_info['buddies']) . ")
ORDER BY realName
LIMIT " . count($user_info['buddies']), __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$context['buddies'][] = array(
'id' => $row['ID_MEMBER'],
'name' => $row['realName'],
'selected' => in_array($row['ID_MEMBER'], $current_buddies),
'add_href' => $base_url . $row['ID_MEMBER'],
);
mysql_free_result($request);
}
}
// This function performs all additional stuff...
function MessageActionsApply()
{
global $txt, $db_prefix, $ID_MEMBER, $context, $user_info;
checkSession('request');
if (isset($_REQUEST['del_selected']))
$_REQUEST['pm_action'] = 'delete';
if (isset($_REQUEST['pm_action']) && $_REQUEST['pm_action'] != '' && !empty($_REQUEST['pms']) && is_array($_REQUEST['pms']))
{
foreach ($_REQUEST['pms'] as $pm)
$_REQUEST['pm_actions'][(int) $pm] = $_REQUEST['pm_action'];
}
if (empty($_REQUEST['pm_actions']))
redirectexit($context['current_label_redirect']);
$to_delete = array();
$to_label = array();
$label_type = array();
foreach ($_REQUEST['pm_actions'] as $pm => $action)
{
if ($action === 'delete')
$to_delete[] = (int) $pm;
else
{
if (substr($action, 0, 4) == 'add_')
{
$type = 'add';
$action = substr($action, 4);
}
elseif (substr($action, 0, 4) == 'rem_')
{
$type = 'rem';
$action = substr($action, 4);
}
else
$type = 'unk';
if ($action == '-1' || $action == '0' || (int) $action > 0)
{
$to_label[(int) $pm] = (int) $action;
$label_type[(int) $pm] = $type;
}
}
}
// Deleting, it looks like?
if (!empty($to_delete))
deleteMessages($to_delete, $context['folder']);
// Are we labeling anything?
if (!empty($to_label) && $context['folder'] == 'inbox')
{
$updateErrors = 0;
// Get information about each message...
$request = db_query("
SELECT ID_PM, labels
FROM {$db_prefix}pm_recipients
WHERE ID_MEMBER = $ID_MEMBER
AND ID_PM IN (" . implode(',', array_keys($to_label)) . ")
LIMIT " . count($to_label), __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
{
$labels = $row['labels'] == '' ? array('-1') : explode(',', trim($row['labels']));
// Already exists? Then... unset it!
$ID_LABEL = array_search($to_label[$row['ID_PM']], $labels);
if ($ID_LABEL !== false && $label_type[$row['ID_PM']] !== 'add')
unset($labels[$ID_LABEL]);
elseif ($label_type[$row['ID_PM']] !== 'rem')
$labels[] = $to_label[$row['ID_PM']];
$set = implode(',', array_unique($labels));
if ($set == '')
$set = '-1';
// Check that this string isn't going to be too large for the database.
if ($set > 60)
$updateErrors++;
else
{
db_query("
UPDATE {$db_prefix}pm_recipients
SET labels = '$set'
WHERE ID_PM = $row[ID_PM]
AND ID_MEMBER = $ID_MEMBER
LIMIT 1", __FILE__, __LINE__);
}
}
mysql_free_result($request);
// Any errors?
// !!! Separate the sprintf?
if (!empty($updateErrors))
fatal_error(sprintf($txt['labels_too_many'], $updateErrors));
}
// Back to the folder.
$_SESSION['pm_selected'] = array_keys($to_label);
redirectexit($context['current_label_redirect'] . (count($to_label) == 1 ? '#' . $_SESSION['pm_selected'][0] : ''), count($to_label) == 1 && $context['browser']['is_ie']);
}
// Are you sure you want to PERMANENTLY (mostly) delete ALL your messages?
function MessageKillAllQuery()
{
global $txt, $context;
// Only have to set up the template....
$context['sub_template'] = 'ask_delete';
$context['page_title'] = $txt[412];
$context['delete_all'] = $_REQUEST['f'] == 'all';
// And set the folder name...
$txt[412] = str_replace('PMBOX', $context['folder'] != 'outbox' ? $txt[316] : $txt[320], $txt[412]);
}
// Delete ALL the messages!
function MessageKillAll()
{
global $context;
checkSession('get');
// If all then delete all messages the user has.
if ($_REQUEST['f'] == 'all')
deleteMessages(null, null);
// Otherwise just the selected folder.
else
deleteMessages(null, $_REQUEST['f'] != 'outbox' ? 'inbox' : 'outbox');
// Done... all gone.
redirectexit($context['current_label_redirect']);
}
// This function allows the user to delete all messages older than so many days.
function MessagePrune()
{
global $txt, $context, $db_prefix, $ID_MEMBER, $scripturl;
// Actually delete the messages.
if (isset($_REQUEST['age']))
{
checkSession();
// Calculate the time to delete before.
$deleteTime = time() - (86400 * (int) $_REQUEST['age']);
// Array to store the IDs in.
$toDelete = array();
// Select all the messages they have sent older than $deleteTime.
$request = db_query("
SELECT ID_PM
FROM {$db_prefix}personal_messages
WHERE deletedBySender = 0
AND ID_MEMBER_FROM = $ID_MEMBER
AND msgtime < $deleteTime", __FILE__, __LINE__);
while ($row = mysql_fetch_row($request))
$toDelete[] = $row[0];
mysql_free_result($request);
// Select all messages in their inbox older than $deleteTime.
$request = db_query("
SELECT pmr.ID_PM
FROM ({$db_prefix}pm_recipients AS pmr, {$db_prefix}personal_messages AS pm)
WHERE pmr.deleted = 0
AND pmr.ID_MEMBER = $ID_MEMBER
AND pm.ID_PM = pmr.ID_PM
AND pm.msgtime < $deleteTime", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$toDelete[] = $row['ID_PM'];
mysql_free_result($request);
// Delete the actual messages.
deleteMessages($toDelete);
// Go back to their inbox.
redirectexit($context['current_label_redirect']);
}
// Build the link tree elements.
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;sa=prune',
'name' => $txt['pm_prune']
);
$context['sub_template'] = 'prune';
$context['page_title'] = $txt['pm_prune'];
}
// Delete the specified personal messages.
function deleteMessages($personal_messages, $folder = null, $owner = null)
{
global $ID_MEMBER, $db_prefix, $user_info;
if ($owner === null)
$owner = array($ID_MEMBER);
elseif (empty($owner))
return;
elseif (!is_array($owner))
$owner = array($owner);
if ($personal_messages !== null)
{
if (empty($personal_messages) || !is_array($personal_messages))
return;
foreach ($personal_messages as $index => $delete_id)
$personal_messages[$index] = (int) $delete_id;
$where = '
AND ID_PM IN (' . implode(', ', array_unique($personal_messages)) . ')';
}
else
$where = '';
if ($folder == 'outbox' || $folder === null)
{
db_query("
UPDATE {$db_prefix}personal_messages
SET deletedBySender = 1
WHERE ID_MEMBER_FROM IN (" . implode(', ', $owner) . ")
AND deletedBySender = 0$where", __FILE__, __LINE__);
}
if ($folder != 'outbox' || $folder === null)
{
// Calculate the number of messages each member's gonna lose...
$request = db_query("
SELECT ID_MEMBER, COUNT(*) AS numDeletedMessages, IF(is_read & 1, 1, 0) AS is_read
FROM {$db_prefix}pm_recipients
WHERE ID_MEMBER IN (" . implode(', ', $owner) . ")
AND deleted = 0$where
GROUP BY ID_MEMBER, is_read", __FILE__, __LINE__);
// ...And update the statistics accordingly - now including unread messages!.
while ($row = mysql_fetch_assoc($request))
{
if ($row['is_read'])
updateMemberData($row['ID_MEMBER'], array('instantMessages' => $where == '' ? 0 : "instantMessages - $row[numDeletedMessages]"));
else
updateMemberData($row['ID_MEMBER'], array('instantMessages' => $where == '' ? 0 : "instantMessages - $row[numDeletedMessages]", 'unreadMessages' => $where == '' ? 0 : "unreadMessages - $row[numDeletedMessages]"));
// If this is the current member we need to make their message count correct.
if ($ID_MEMBER == $row['ID_MEMBER'])
{
$user_info['messages'] -= $row['numDeletedMessages'];
if (!($row['is_read']))
$user_info['unread_messages'] -= $row['numDeletedMessages'];
}
}
mysql_free_result($request);
// Do the actual deletion.
db_query("
UPDATE {$db_prefix}pm_recipients
SET deleted = 1
WHERE ID_MEMBER IN (" . implode(', ', $owner) . ")
AND deleted = 0$where", __FILE__, __LINE__);
}
// If sender and recipients all have deleted their message, it can be removed.
$request = db_query("
SELECT pm.ID_PM, pmr.ID_PM AS recipient
FROM {$db_prefix}personal_messages AS pm
LEFT JOIN {$db_prefix}pm_recipients AS pmr ON (pmr.ID_PM = pm.ID_PM AND deleted = 0)
WHERE pm.deletedBySender = 1
" . str_replace('ID_PM', 'pm.ID_PM', $where) . "
HAVING recipient IS null", __FILE__, __LINE__);
$remove_pms = array();
while ($row = mysql_fetch_assoc($request))
$remove_pms[] = $row['ID_PM'];
mysql_free_result($request);
if (!empty($remove_pms))
{
db_query("
DELETE FROM {$db_prefix}personal_messages
WHERE ID_PM IN (" . implode(', ', $remove_pms) . ")
LIMIT " . count($remove_pms), __FILE__, __LINE__);
db_query("
DELETE FROM {$db_prefix}pm_recipients
WHERE ID_PM IN (" . implode(', ', $remove_pms) . ')', __FILE__, __LINE__);
}
}
// Mark personal messages read.
function markMessages($personal_messages = null, $label = null, $owner = null)
{
global $ID_MEMBER, $db_prefix, $context, $user_info;
if ($owner === null)
$owner = $ID_MEMBER;
db_query("
UPDATE {$db_prefix}pm_recipients
SET is_read = is_read | 1
WHERE ID_MEMBER = $owner
AND NOT (is_read & 1)" . ($label === null ? '' : "
AND FIND_IN_SET($label, labels)") . ($personal_messages !== null ? "
AND ID_PM IN (" . implode(', ', $personal_messages) . ")
LIMIT " . count($personal_messages) : ''), __FILE__, __LINE__);
if ($owner == $ID_MEMBER)
{
foreach ($context['labels'] as $label)
$context['labels'][(int) $label['id']]['unread_messages'] = 0;
}
// If something wasn't marked as read, get the number of unread messages remaining.
if (db_affected_rows() > 0)
{
$result = db_query("
SELECT labels, COUNT(*) AS num
FROM {$db_prefix}pm_recipients
WHERE ID_MEMBER = $owner
AND NOT (is_read & 1)
GROUP BY labels", __FILE__, __LINE__);
$total_unread = 0;
while ($row = mysql_fetch_assoc($result))
{
$total_unread += $row['num'];
if ($owner != $ID_MEMBER)
continue;
$this_labels = explode(',', $row['labels']);
foreach ($this_labels as $this_label)
$context['labels'][(int) $this_label]['unread_messages'] += $row['num'];
}
mysql_free_result($result);
updateMemberData($owner, array('unreadMessages' => $total_unread));
// If it was for the current member, reflect this in the $user_info array too.
if ($owner == $ID_MEMBER)
$user_info['unread_messages'] = $total_unread;
}
}
// This function handles adding, deleting and editing labels on messages.
function ManageLabels()
{
global $txt, $context, $db_prefix, $ID_MEMBER, $scripturl, $func;
// Build the link tree elements...
$context['linktree'][] = array(
'url' => $scripturl . '?action=pm;sa=manlabels',
'name' => $txt['pm_manage_labels']
);
$context['page_title'] = $txt['pm_manage_labels'];
$context['sub_template'] = 'labels';
$the_labels = array();
// Add all existing labels to the array to save, slashing them as necessary...
foreach ($context['labels'] as $label)
{
if ($label['id'] != -1)
$the_labels[$label['id']] = addslashes($label['name']);
}
if (isset($_GET['sesc']))
{
// This will be for updating messages.
$message_changes = array();
$new_labels = array();
// Adding a new label?
if (isset($_POST['add']))
{
$_POST['label'] = strtr($func['htmlspecialchars'](trim($_POST['label'])), array(',' => ','));
if ($func['strlen']($_POST['label']) > 30)
$_POST['label'] = $func['substr']($_POST['label'], 0, 30);
if ($_POST['label'] != '')
$the_labels[] = $_POST['label'];
}
// Deleting an existing label?
elseif (isset($_POST['delete'], $_POST['delete_label']))
{
$i = 0;
foreach ($the_labels as $id => $name)
{
if (isset($_POST['delete_label'][$id]))
{
unset($the_labels[$id]);
$message_changes[$id] = true;
}
else
$new_labels[$id] = $i++;
}
}
// The hardest one to deal with... changes.
elseif (isset($_POST['save']) && !empty($_POST['label_name']))
{
$i = 0;
foreach ($the_labels as $id => $name)
{
if ($id == -1)
continue;
elseif (isset($_POST['label_name'][$id]))
{
$_POST['label_name'][$id] = trim(strtr($func['htmlspecialchars']($_POST['label_name'][$id]), array(',' => ',')));
if ($func['strlen']($_POST['label_name'][$id]) > 30)
$_POST['label_name'][$id] = $func['substr']($_POST['label_name'][$id], 0, 30);
if ($_POST['label_name'][$id] != '')
{
$the_labels[(int) $id] = $_POST['label_name'][$id];
$new_labels[$id] = $i++;
}
else
{
unset($the_labels[(int) $id]);
$message_changes[(int) $id] = true;
}
}
else
$new_labels[$id] = $i++;
}
}
// Save the label status.
updateMemberData($ID_MEMBER, array('messageLabels' => "'" . implode(',', $the_labels) . "'"));
// Update all the messages currently with any label changes in them!
if (!empty($message_changes))
{
$searchArray = array_keys($message_changes);
if (!empty($new_labels))
{
for ($i = max($searchArray) + 1, $n = max(array_keys($new_labels)); $i <= $n; $i++)
$searchArray[] = $i;
}
// Now find the messages to change.
$request = db_query("
SELECT ID_PM, labels
FROM {$db_prefix}pm_recipients
WHERE FIND_IN_SET('" . implode("', labels) OR FIND_IN_SET('", $searchArray) . "', labels)
AND ID_MEMBER = $ID_MEMBER", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
{
// Do the long task of updating them...
$toChange = explode(',', $row['labels']);
foreach ($toChange as $key => $value)
if (in_array($value, $searchArray))
{
if (isset($new_labels[$value]))
$toChange[$key] = $new_labels[$value];
else
unset($toChange[$key]);
}
if (empty($toChange))
$toChange[] = '-1';
// Update the message.
db_query("
UPDATE {$db_prefix}pm_recipients
SET labels = '" . implode(',', array_unique($toChange)) . "'
WHERE ID_PM = $row[ID_PM]
AND ID_MEMBER = $ID_MEMBER
LIMIT 1", __FILE__, __LINE__);
}
mysql_free_result($request);
}
// To make the changes appear right away, redirect.
redirectExit('action=pm;sa=manlabels');
}
}
// Allows a user to report a personal message they receive to the administrator.
function ReportMessage()
{
global $txt, $context, $scripturl, $sourcedir, $db_prefix, $ID_MEMBER;
global $user_info, $language, $modSettings, $func;
// Check that this feature is even enabled!
if (empty($modSettings['enableReportPM']) || empty($_REQUEST['pmsg']))
fatal_lang_error(1, false);
$context['pm_id'] = (int) $_REQUEST['pmsg'];
$context['page_title'] = $txt['pm_report_title'];
// If we're here, just send the user to the template, with a few useful context bits.
if (!isset($_REQUEST['report']))
{
$context['sub_template'] = 'report_message';
// !!! I don't like being able to pick who to send it to. Favoritism, etc. sucks.
// Now, get all the administrators.
$request = db_query("
SELECT ID_MEMBER, realName
FROM {$db_prefix}members
WHERE ID_GROUP = 1 OR FIND_IN_SET(1, additionalGroups)
ORDER BY realName", __FILE__, __LINE__);
$context['admins'] = array();
while ($row = mysql_fetch_assoc($request))
$context['admins'][$row['ID_MEMBER']] = $row['realName'];
mysql_free_result($request);
// How many admins in total?
$context['admin_count'] = count($context['admins']);
}
// Otherwise, let's get down to the sending stuff.
else
{
// First, pull out the message contents, and verify it actually went to them!
$request = db_query("
SELECT pm.subject, pm.body, pm.msgtime, pm.ID_MEMBER_FROM, IFNULL(m.realName, pm.fromName) AS senderName
FROM ({$db_prefix}personal_messages AS pm, {$db_prefix}pm_recipients AS pmr)
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = pm.ID_MEMBER_FROM)
WHERE pm.ID_PM = $context[pm_id]
AND pmr.ID_PM = pm.ID_PM
AND pmr.ID_MEMBER = $ID_MEMBER
AND pmr.deleted = 0
LIMIT 1", __FILE__, __LINE__);
// Can only be a hacker here!
if (mysql_num_rows($request) == 0)
fatal_lang_error(1, false);
list ($subject, $body, $time, $memberFromID, $memberFromName) = mysql_fetch_row($request);
mysql_free_result($request);
// Remove the line breaks...
$body = preg_replace('~~i', "\n", $body);
// Get any other recipients of the email.
$request = db_query("
SELECT mem_to.ID_MEMBER AS ID_MEMBER_TO, mem_to.realName AS toName, pmr.bcc
FROM {$db_prefix}pm_recipients AS pmr
LEFT JOIN {$db_prefix}members AS mem_to ON (mem_to.ID_MEMBER = pmr.ID_MEMBER)
WHERE pmr.ID_PM = $context[pm_id]
AND pmr.ID_MEMBER != $ID_MEMBER", __FILE__, __LINE__);
$recipients = array();
$hidden_recipients = 0;
while ($row = mysql_fetch_assoc($request))
{
// If it's hidden still don't reveal their names - privacy after all ;)
if ($row['bcc'])
$hidden_recipients++;
else
$recipients[] = '[url=' . $scripturl . '?action=profile;u=' . $row['ID_MEMBER_TO'] . ']' . $row['toName'] . '[/url]';
}
mysql_free_result($request);
if ($hidden_recipients)
$recipients[] = sprintf($txt['pm_report_pm_hidden'], $hidden_recipients);
// Now let's get out and loop through the admins.
$request = db_query("
SELECT ID_MEMBER, realName, lngfile
FROM {$db_prefix}members
WHERE (ID_GROUP = 1 OR FIND_IN_SET(1, additionalGroups))
" . (empty($_REQUEST['ID_ADMIN']) ? '' : 'AND ID_MEMBER = ' . (int) $_REQUEST['ID_ADMIN']) . "
ORDER BY lngfile", __FILE__, __LINE__);
// Maybe we shouldn't advertise this?
if (mysql_num_rows($request) == 0)
fatal_lang_error(1, false);
$memberFromName = un_htmlspecialchars($memberFromName);
// Prepare the message storage array.
$messagesToSend = array();
// Loop through each admin, and add them to the right language pile...
while ($row = mysql_fetch_assoc($request))
{
// Need to send in the correct language!
$cur_language = empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'];
if (!isset($messagesToSend[$cur_language]))
{
if (loadLanguage('PersonalMessage', $cur_language, false) === false)
loadLanguage('InstantMessage', $cur_language);
// Make the body.
$report_body = str_replace(array('{REPORTER}', '{SENDER}'), array(un_htmlspecialchars($user_info['name']), $memberFromName), $txt['pm_report_pm_user_sent']);
// !!! I don't think this handles slashes in the reason properly.
$report_body .= stripslashes("\n[b]$_REQUEST[reason][/b]\n\n");
if (!empty($recipients))
$report_body .= $txt['pm_report_pm_other_recipients'] . " " . implode(', ', $recipients) . "\n\n";
$report_body .= $txt['pm_report_pm_unedited_below'] . "\n[quote author=" . (empty($memberFromID) ? '"' . $memberFromName . '"' : $memberFromName . ' link=action=profile;u=' . $memberFromID . ' date=' . $time) . "]\n" . un_htmlspecialchars($body) . '[/quote]';
// Plonk it in the array ;)
$messagesToSend[$cur_language] = array(
'subject' => addslashes(($func['strpos']($subject, $txt['pm_report_pm_subject']) === false ? $txt['pm_report_pm_subject'] : '') . $subject),
'body' => addslashes($report_body),
'recipients' => array(
'to' => array(),
'bcc' => array()
),
);
}
// Add them to the list.
$messagesToSend[$cur_language]['recipients']['to'][$row['ID_MEMBER']] = $row['ID_MEMBER'];
}
mysql_free_result($request);
// Send a different email for each language.
foreach ($messagesToSend as $lang => $message)
sendpm($message['recipients'], $message['subject'], $message['body']);
// Give the user their own language back!
if (!empty($modSettings['userLanguage']))
{
if (loadLanguage('PersonalMessage', '', false) === false)
loadLanguage('InstantMessage');
}
// Leave them with a template.
$context['sub_template'] = 'report_message_complete';
}
}
?>