include($phpbb_root_path . 'extension.inc');

include($phpbb_root_path . 'common.'.$phpEx);

include($phpbb_root_path . 'includes/bbcode.'.$phpEx);

//

// Is PM disabled?

//

if ( !empty($board_config['privmsg_disable']) )

{

}

$html_entities_match = array('#&#', '#<#', '#>#');

//

// Parameters

//

$refresh = $preview || $submit_search;

{

if ( $folder != 'inbox' && $folder != 'outbox' && $folder != 'sentbox' && $folder != 'savebox' )

{

exit;

}

// Start session management

$userdata = $session->start();

$auth->acl($userdata);

// End session management

//

// Var definitions

//

{

}

else

{

$mode = '';

}

{

}

else

{

'body' => 'privmsgs_popup.tpl')

);

{

if ( $userdata['user_new_privmsg'] )

{

}

else if ( $mode == 'read' )

{

{

}

else

{

}

{

$header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

header($header_location . append_sid("login.$phpEx?redirect=privmsg.$phpEx&folder=$folder&mode=$mode&" . POST_POST_URL . "=$privmsgs_id", true));

)";

break;

default:

break;

}

$pm_sql_user

AND u.user_id = pm.privmsgs_from_userid

AND u2.user_id = pm.privmsgs_to_userid";

//

// Did the query return any data?

$sql = "UPDATE " . PRIVMSGS_TABLE . "

SET privmsgs_type = " . PRIVMSGS_READ_MAIL . "

WHERE privmsgs_id = " . $privmsg['privmsgs_id'];

$sql = "UPDATE " . USERS_TABLE . "

SET user_unread_privmsg = user_unread_privmsg - 1

WHERE user_id = " . $userdata['user_id'];

//

// Check to see if the poster has a 'full' sent box

FROM " . PRIVMSGS_TABLE . "

WHERE privmsgs_type = " . PRIVMSGS_SENT_MAIL . "

AND privmsgs_from_userid = " . $privmsg['privmsgs_from_userid'];

$sql_priority = ( SQL_LAYER == 'mysql' ) ? 'LOW_PRIORITY' : '';

WHERE privmsgs_type = " . PRIVMSGS_SENT_MAIL . "

AND privmsgs_date = " . $sent_info['oldest_post_time'] . "

AND privmsgs_from_userid = " . $privmsg['privmsgs_from_userid'];

}

}

//

$sql = "INSERT $sql_priority INTO " . PRIVMSGS_TABLE . " (privmsgs_type, privmsgs_subject, privmsgs_from_userid, privmsgs_to_userid, privmsgs_date, privmsgs_ip, privmsgs_enable_html, privmsgs_enable_bbcode, privmsgs_enable_smilies, privmsgs_attach_sig)

VALUES (" . PRIVMSGS_SENT_MAIL . ", '" . str_replace("\'", "''", addslashes($privmsg['privmsgs_subject'])) . "', " . $privmsg['privmsgs_from_userid'] . ", " . $privmsg['privmsgs_to_userid'] . ", " . $privmsg['privmsgs_date'] . ", '" . $privmsg['privmsgs_ip'] . "', " . $privmsg['privmsgs_enable_html'] . ", " . $privmsg['privmsgs_enable_bbcode'] . ", " . $privmsg['privmsgs_enable_smilies'] . ", " . $privmsg['privmsgs_attach_sig'] . ")";

$privmsg_sent_id = $db->sql_nextid();

$sql = "INSERT $sql_priority INTO " . PRIVMSGS_TEXT_TABLE . " (privmsgs_text_id, privmsgs_bbcode_uid, privmsgs_text)

VALUES ($privmsg_sent_id, '" . $privmsg['privmsgs_bbcode_uid'] . "', '" . str_replace("\'", "''", addslashes($privmsg['privmsgs_text'])) . "')";

}

//

$username_to = $privmsg['username_2'];

$user_id_to = $privmsg['user_id_2'];

$profile_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_profile'] . '" alt="' . $lang['Read_profile'] . '" title="' . $lang['Read_profile'] . '" border="0" /></a>';

$profile = '<a href="' . $temp_url . '">' . $lang['Read_profile'] . '</a>';

$pm_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_pm'] . '" alt="' . $lang['Send_private_message'] . '" title="' . $lang['Send_private_message'] . '" border="0" /></a>';

$pm = '<a href="' . $temp_url . '">' . $lang['Send_private_message'] . '</a>';

{

$email_img = '<a href="' . $email_uri . '"><img src="' . $images['icon_email'] . '" alt="' . $lang['Send_email'] . '" title="' . $lang['Send_email'] . '" border="0" /></a>';

$email = '<a href="' . $email_uri . '">' . $lang['Send_email'] . '</a>';

$aim_img = ( $privmsg['user_aim'] ) ? '<a href="aim:goim?screenname=' . $privmsg['user_aim'] . '&amp;message=Hello+Are+you+there?"><img src="' . $images['icon_aim'] . '" alt="' . $lang['AIM'] . '" title="' . $lang['AIM'] . '" border="0" /></a>' : '';

$aim = ( $privmsg['user_aim'] ) ? '<a href="aim:goim?screenname=' . $privmsg['user_aim'] . '&amp;message=Hello+Are+you+there?">' . $lang['AIM'] . '</a>' : '';

$msn_img = ( $privmsg['user_msnm'] ) ? '<a href="' . $temp_url . '"><img src="' . $images['icon_msnm'] . '" alt="' . $lang['MSNM'] . '" title="' . $lang['MSNM'] . '" border="0" /></a>' : '';

$msn = ( $privmsg['user_msnm'] ) ? '<a href="' . $temp_url . '">' . $lang['MSNM'] . '</a>' : '';

$private_message = smilies_pass($private_message);

}

//

// Dump it to the templating engine

}

else if ( ( $delete && $mark_list ) || $delete_all )

{

{

$header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

header($header_location . append_sid("login.$phpEx?redirect=privmsg.$phpEx&folder=inbox", true));

if ( !$confirm )

{

$s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';

for($i = 0; $i < count($mark_list); $i++)

{

$sql = "SELECT privmsgs_id

FROM " . PRIVMSGS_TABLE . "

WHERE $delete_type";

while ( $row = $db->sql_fetchrow($result) )

{

{

$delete_sql_id = implode(', ', $mark_list);

// Need to decrement the new message counter of recipient

// problem is this doesn't affect the unread counter even

// though it may be the one that needs changing ... hhmmm

if ( $folder == 'outbox' )

{

$sql = "SELECT privmsgs_to_userid

WHERE privmsgs_id IN ($delete_sql_id)

AND privmsgs_from_userid = " . $userdata['user_id'] . "

AND privmsgs_type = " . PRIVMSGS_NEW_MAIL;

$update_pm_sql = '';

while( $row = $db->sql_fetchrow($result) )

$sql = "UPDATE " . USERS_TABLE . "

SET user_new_privmsg = user_new_privmsg - 1

WHERE user_id IN ($update_pm_sql)";

}

$sql = "SELECT privmsgs_to_userid

WHERE privmsgs_id IN ($delete_sql_id)

AND privmsgs_from_userid = " . $userdata['user_id'] . "

AND privmsgs_type = " . PRIVMSGS_UNREAD_MAIL;

$update_pm_sql = '';

while( $row = $db->sql_fetchrow($result) )

$sql = "UPDATE " . USERS_TABLE . "

SET user_unread_privmsg = user_unread_privmsg - 1

WHERE user_id IN ($update_pm_sql)";

}

}

break;

}

}

}

}

else if ( $save && $mark_list && $folder != 'savebox' && $folder != 'outbox' )

{

{

$header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

header($header_location . append_sid("login.$phpEx?redirect=privmsg.$phpEx&folder=inbox", true));

AND privmsgs_type = " . PRIVMSGS_SAVED_IN_MAIL . " )

OR ( privmsgs_from_userid = " . $userdata['user_id'] . "

AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ") )";

$sql_priority = ( SQL_LAYER == 'mysql' ) ? 'LOW_PRIORITY' : '';

OR ( privmsgs_from_userid = " . $userdata['user_id'] . "

AND privmsgs_type = " . PRIVMSGS_SAVED_OUT_MAIL . ") )

AND privmsgs_date = " . $saved_info['oldest_post_time'];

}

}

$saved_sql .= " AND privmsgs_id IN ($saved_sql_id)";

}

}

else if ( $submit || $refresh || $mode != '' )

{

{

$header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

header($header_location . append_sid("login.$phpEx?redirect=privmsg.$phpEx&folder=$folder&mode=$mode" . $user_id, true));

}

}

else

{

}

if ( !$board_config['allow_bbcode'] )

}

else

{

}

if ( !$board_config['allow_smilies'] )

}

else

{

}

$user_sig = ( $userdata['user_sig'] != '' && $board_config['allow_sig'] ) ? $userdata['user_sig'] : "";

if ( $submit && $mode != 'edit' )

{

// Flood control

$sql = "SELECT MAX(privmsgs_date) AS last_post_time

FROM " . PRIVMSGS_TABLE . "

WHERE privmsgs_from_userid = " . $userdata['user_id'];

}

// End Flood control

}

if ( $submit )

{

{

$sql = "SELECT user_id, user_notify_pm, user_email, user_lang, user_active

FROM " . USERS_TABLE . "

$error_msg .= ( ( !empty($error_msg) ) ? '<br />' : '' ) . $lang['No_to_user'];

}

if ( empty($privmsg_subject) )

{

$error = TRUE;

$error_msg .= ( ( !empty($error_msg) ) ? '<br />' : '' ) . $lang['Empty_subject'];

}

{

if ( !$error )

{

$bbcode_uid = make_bbcode_uid();

}

}

}

if ( !$userdata['user_allow_pm'] )

{

$message = $lang['Cannot_send_privmsg'];

}

$msg_time = time();

OR privmsgs_type = " . PRIVMSGS_READ_MAIL . "

OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . " )

AND privmsgs_to_userid = " . $to_userdata['user_id'];

$sql_priority = ( SQL_LAYER == 'mysql' ) ? 'LOW_PRIORITY' : '';

OR privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . " )

AND privmsgs_date = " . $inbox_info['oldest_post_time'] . "

AND privmsgs_to_userid = " . $to_userdata['user_id'];

}

}

WHERE privmsgs_id = $privmsg_id";

}

if ( $mode != 'edit' )

{

WHERE privmsgs_text_id = $privmsg_id";

}

if ( $mode != 'edit' )

{

$msg = $lang['Message_sent'] . '<br /><br />' . sprintf($lang['Click_return_inbox'], '<a href="' . append_sid("privmsg.$phpEx?folder=inbox") . '">', '</a> ') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

}

else if ( $preview || $refresh || $error )

{

// passed to the script, process it a little, do some checks

// where neccessary, etc.

//

$privmsg_message = preg_replace('#<textarea>#si', '&lt;textarea&gt;', $privmsg_message);

if ( !$preview )

{

FROM " . PRIVMSGS_TABLE . " pm, " . USERS_TABLE . " u

WHERE pm.privmsgs_id = $privmsg_id

AND u.user_id = pm.privmsgs_from_userid";

if ( $postrow = $db->sql_fetchrow($result) )

{

if ( $userdata['user_id'] != $postrow['user_id'] )

{

}

$user_sig = ( $postrow['user_sig'] != '' && $board_config['allow_sig'] ) ? $postrow['user_sig'] : '';

message_die(GENERAL_ERROR, $lang['No_post_id']);

}

{

$sql = "SELECT username

FROM " . USERS_TABLE . "

AND ( pm.privmsgs_type = " . PRIVMSGS_NEW_MAIL . "

OR pm.privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . " )

AND u.user_id = pm.privmsgs_to_userid";

if ( !($privmsg = $db->sql_fetchrow($result)) )

{

AND pmt.privmsgs_text_id = pm.privmsgs_id

AND pm.privmsgs_to_userid = " . $userdata['user_id'] . "

AND u.user_id = pm.privmsgs_from_userid";

if ( !($privmsg = $db->sql_fetchrow($result)) )

{

$privmsg_message = str_replace('<br />', "\n", $privmsg_message);

$privmsg_message = preg_replace('#</textarea>#si', '&lt;/textarea&gt;', $privmsg_message);

$privmsg_message = '[quote="' . $to_username . '"]' . $privmsg_message . '[/quote]';

if ( !$userdata['user_allow_pm'] && $mode != 'edit' )

{

$message = $lang['Cannot_send_privmsg'];

}

//

}

$preview_message = make_clickable($preview_message);

$s_hidden_fields = '<input type="hidden" name="folder" value="' . $folder . '" />';

$s_hidden_fields .= '<input type="hidden" name="mode" value="' . $mode . '" />';

if ( isset($privmsg_id) )

{

}

$template->set_filenames(array(

'POST_SUBJECT' => $preview_subject,

'MESSAGE_TO' => $to_username,

'MESSAGE_FROM' => $userdata['username'],

'MESSAGE' => $preview_message,

'S_HIDDEN_FIELDS' => $s_hidden_fields,

'L_BBCODE_F_HELP' => $lang['bbcode_f_help'],

'L_EMPTY_MESSAGE' => $lang['Empty_message'],

'L_FONT_SIZE' => $lang['Font_size'],

'L_FONT_TINY' => $lang['font_tiny'],

'L_FONT_SMALL' => $lang['font_small'],

'U_VIEW_FORUM' => append_sid("privmsg.$phpEx"))

);

include($phpbb_root_path . 'includes/page_tail.'.$phpEx);

}

//

// Default page

//

{

$header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

header($header_location . append_sid("login.$phpEx?redirect=privmsg.$phpEx&folder=inbox", true));

}

// Update unread status

$sql = "UPDATE " . USERS_TABLE . "

SET user_unread_privmsg = user_unread_privmsg + user_new_privmsg, user_new_privmsg = 0, user_last_privmsg = " . $userdata['session_start'] . "

WHERE user_id = " . $userdata['user_id'];

$sql = "UPDATE " . PRIVMSGS_TABLE . "

SET privmsgs_type = " . PRIVMSGS_UNREAD_MAIL . "

WHERE privmsgs_type = " . PRIVMSGS_NEW_MAIL . "

AND privmsgs_to_userid = " . $userdata['user_id'];

// Reset PM counters

$userdata['user_new_privmsg'] = 0;

$userdata['user_unread_privmsg'] = ( $userdata['user_new_privmsg'] + $userdata['user_unread_privmsg'] );

// Generate page

$page_title = $lang['Private_Messaging'];

include($phpbb_root_path . 'includes/page_header.'.$phpEx);

// Load templates

$template->set_filenames(array(

'body' => 'privmsgs_body.tpl')

);

break;

default:

break;

}

//

// Show messages over previous x days/months

//

{

$min_msg_time = time() - ($msg_days * 86400);

$limit_msg_time_total = " AND privmsgs_date > $min_msg_time";

$limit_msg_time = " AND pm.privmsgs_date > $min_msg_time ";

{

$start = 0;

}

//

// Get messages

//

$pm_total = ( $row = $db->sql_fetchrow($result) ) ? $row['total'] : 0;

$pm_all_total = ( $row = $db->sql_fetchrow($result) ) ? $row['total'] : 0;

//

if ( $folder == 'inbox' )

{

$post_pm_img = '<a href="' . append_sid("privmsg.$phpEx?mode=post") . '"><img src="' . $images['pm_postmsg'] . '" alt="' . $lang['Post_new_pm'] . '" border="0"></a>';

$edit_pm_img = '';

$l_box_name = $lang['Inbox'];

$post_pm_img = '<a href="' . append_sid("privmsg.$phpEx?mode=post") . '"><img src="' . $images['pm_postmsg'] . '" alt="' . $lang['Post_new_pm'] . '" border="0"></a>';

$reply_pm_img = '';

$quote_pm_img = '';

$l_box_name = $lang['Outbox'];

}

else if ( $folder == 'savebox' )

{

$post_pm_img = '<a href="' . append_sid("privmsg.$phpEx?mode=post") . '"><img src="' . $images['pm_postmsg'] . '" alt="' . $lang['Post_new_pm'] . '" border="0"></a>';

$edit_pm_img = '';

$l_box_name = $lang['Savedbox'];

{

$post_pm_img = '<a href="' . append_sid("privmsg.$phpEx?mode=post") . '"><img src="' . $images['pm_postmsg'] . '" alt="' . $lang['Post_new_pm'] . '" border="0"></a>';

$reply_pm_img = '';

$edit_pm_img = '';

$l_box_name = $lang['Sentbox'];

'U_POST_NEW_TOPIC' => $post_new_topic_url)

);

// Okay, let's build the correct folder

if ( $row = $db->sql_fetchrow($result) )

{

$msg_userid = $row['user_id'];

$msg_username = $row['username'];

$msg_subject = $row['privmsgs_subject'];

$msg_subject = preg_replace($orig_word, $replacement_word, $msg_subject);

}

if ( $flag == PRIVMSGS_NEW_MAIL && $folder == 'inbox' )

{