| Zeile 12 | Zeile 12 |
|---|
define("IGNORE_CLEAN_VARS", "sid");
define('THIS_SCRIPT', 'private.php');
|
define("IGNORE_CLEAN_VARS", "sid");
define('THIS_SCRIPT', 'private.php');
|
$templatelist = "private_send,private_send_buddyselect,private_read,private_tracking,private_tracking_readmessage,private_tracking_unreadmessage,private_orderarrow,usercp_nav_attachments,usercp_nav_messenger_compose,private_tracking_readmessage_stop";
$templatelist .= ",private_folders,private_folders_folder,private_folders_folder_unremovable,private,usercp_nav,private_empty_folder,private_empty,private_archive_txt,private_archive_csv,private_archive_html,private_tracking_unreadmessage_stop";
$templatelist .= ",usercp_nav_messenger,usercp_nav_changename,usercp_nav_profile,usercp_nav_misc,multipage,multipage_end,multipage_jump_page,multipage_nextpage,multipage_page,multipage_page_current,multipage_page_link_current,multipage_prevpage,multipage_start,usercp_nav_editsignature,posticons_icon";
$templatelist .= ",private_messagebit,codebuttons,smilieinsert,smilieinsert_getmore,smilieinsert_smilie,smilieinsert_smilie_empty,posticons,private_send_autocomplete,private_messagebit_denyreceipt,private_read_to,postbit_online,postbit_warninglevel_formatted,postbit_iplogged_hiden";
| $templatelist = "private_send,private_send_buddyselect,private_tracking,private_tracking_readmessage,private_tracking_unreadmessage,usercp_nav_attachments,usercp_nav_messenger_compose,private_tracking_readmessage_stop";
$templatelist .= ",private_folders,private_folders_folder,private_folders_folder_unremovable,private,usercp_nav,private_empty_folder,private_archive_txt,private_archive_csv,private_archive_html,private_tracking_unreadmessage_stop";
$templatelist .= ",usercp_nav_messenger,usercp_nav_changename,multipage,multipage_end,multipage_jump_page,multipage_nextpage,multipage_page,multipage_page_current,multipage_page_link_current,multipage_prevpage,multipage_start";
$templatelist .= ",private_messagebit,codebuttons,posticons,private_send_autocomplete,private_messagebit_denyreceipt,postbit_warninglevel_formatted,private_emptyexportlink,postbit_purgespammer,postbit_gotopost,private_read";
|
$templatelist .= ",postbit_delete_pm,postbit,private_tracking_nomessage,private_nomessages,postbit_author_guest,private_multiple_recipients_user,private_multiple_recipients_bcc,private_multiple_recipients,usercp_nav_messenger_folder";
|
$templatelist .= ",postbit_delete_pm,postbit,private_tracking_nomessage,private_nomessages,postbit_author_guest,private_multiple_recipients_user,private_multiple_recipients_bcc,private_multiple_recipients,usercp_nav_messenger_folder";
|
$templatelist .= ",private_search_messagebit,private_search_results_nomessages,private_search_results,private_advanced_search,previewpost,private_send_tracking,private_send_signature,private_read_bcc,private_composelink,postbit_purgespammer";
$templatelist .= ",private_archive,private_quickreply,private_pmspace,private_limitwarning,postbit_groupimage,postbit_offline,postbit_www,postbit_replyall_pm,postbit_signature,postbit_classic,postbit_gotopost,postbit_userstar,postbit_reputation_formatted_link,postbit_icon";
$templatelist .= ",private_archive_folders_folder,private_archive_folders,postbit_warninglevel,postbit_author_user,postbit_reply_pm,postbit_forward_pm,private_messagebit_icon,private_jump_folders_folder,private_advanced_search_folders";
$templatelist .= ",private_jump_folders,postbit_avatar,postbit_warn,postbit_rep_button,postbit_email,postbit_reputation,private_move,private_read_action,postbit_away,postbit_pm,usercp_nav_messenger_tracking,postbit_find,private_emptyexportlink";
| $templatelist .= ",private_search_messagebit,private_search_results_nomessages,private_search_results,private_advanced_search,previewpost,private_send_tracking,private_send_signature,private_read_bcc,private_composelink";
$templatelist .= ",private_archive,private_quickreply,private_pmspace,private_limitwarning,postbit_groupimage,postbit_offline,postbit_www,postbit_replyall_pm,postbit_signature,postbit_classic,postbit_reputation_formatted_link";
$templatelist .= ",private_archive_folders_folder,private_archive_folders,postbit_warninglevel,postbit_author_user,postbit_forward_pm,private_messagebit_icon,private_jump_folders_folder,private_advanced_search_folders,usercp_nav_home";
$templatelist .= ",private_jump_folders,postbit_avatar,postbit_warn,postbit_rep_button,postbit_email,postbit_reputation,private_move,private_read_action,postbit_away,postbit_pm,usercp_nav_messenger_tracking,postbit_find";
$templatelist .= ",usercp_nav_editsignature,posticons_icon,postbit_icon,postbit_iplogged_hiden,usercp_nav_profile,usercp_nav_misc,postbit_userstar,private_read_to,postbit_online,private_empty,private_orderarrow,postbit_reply_pm";
|
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
|
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
|
| Zeile 49 | Zeile 50 |
|---|
"pmfolders" => $mybb->user['pmfolders']
);
$db->update_query("users", $sql_array, "uid = ".$mybb->user['uid']);
|
"pmfolders" => $mybb->user['pmfolders']
);
$db->update_query("users", $sql_array, "uid = ".$mybb->user['uid']);
|
}
// On a random occassion, recount the user's pms just to make sure everything is in sync.
$rand = my_rand(0, 9);
if($rand == 5)
{
update_pm_count();
| |
}
$mybb->input['fid'] = $mybb->get_input('fid', MyBB::INPUT_INT);
$folder_id = $folder_name = '';
|
}
$mybb->input['fid'] = $mybb->get_input('fid', MyBB::INPUT_INT);
$folder_id = $folder_name = '';
|
|
|
$foldernames = array();
$foldersexploded = explode("$%%$", $mybb->user['pmfolders']);
foreach($foldersexploded as $key => $folders)
{
$folderinfo = explode("**", $folders, 2);
if($mybb->input['fid'] == $folderinfo[0])
|
$foldernames = array();
$foldersexploded = explode("$%%$", $mybb->user['pmfolders']);
foreach($foldersexploded as $key => $folders)
{
$folderinfo = explode("**", $folders, 2);
if($mybb->input['fid'] == $folderinfo[0])
|
{
| {
|
$sel = ' selected="selected"';
}
else
| $sel = ' selected="selected"';
}
else
|
| Zeile 85 | Zeile 79 |
|---|
eval("\$folderoplist_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
eval("\$foldersearch_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
}
|
eval("\$folderoplist_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
eval("\$foldersearch_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
}
|
| |
$from_fid = $mybb->input['fid'];
|
eval("\$folderjump = \"".$templates->get("private_jump_folders")."\";");
eval("\$folderoplist = \"".$templates->get("private_move")."\";");
|
eval("\$folderjump = \"".$templates->get("private_jump_folders")."\";");
eval("\$folderoplist = \"".$templates->get("private_move")."\";");
|
| Zeile 121 | Zeile 117 |
|---|
case "results":
add_breadcrumb($lang->nav_results);
break;
|
case "results":
add_breadcrumb($lang->nav_results);
break;
|
}
| }
|
if(!empty($mybb->input['preview']))
{
$mybb->input['action'] = "send";
}
|
if(!empty($mybb->input['preview']))
{
$mybb->input['action'] = "send";
}
|
|
|
if(($mybb->input['action'] == "do_search" || $mybb->input['action'] == "do_stuff" && ($mybb->get_input('quick_search') || !$mybb->get_input('hop') && !$mybb->get_input('moveto') && !$mybb->get_input('delete'))) && $mybb->request_method == "post")
{
$plugins->run_hooks("private_do_search_start");
|
if(($mybb->input['action'] == "do_search" || $mybb->input['action'] == "do_stuff" && ($mybb->get_input('quick_search') || !$mybb->get_input('hop') && !$mybb->get_input('moveto') && !$mybb->get_input('delete'))) && $mybb->request_method == "post")
{
$plugins->run_hooks("private_do_search_start");
|
|
|
// Simulate coming from our advanced search form with some preset options
if($mybb->get_input('quick_search'))
{
| // Simulate coming from our advanced search form with some preset options
if($mybb->get_input('quick_search'))
{
|
| Zeile 157 | Zeile 153 |
|---|
if($remaining_time == 1)
{
$lang->error_searchflooding = $lang->sprintf($lang->error_searchflooding_1, $mybb->settings['searchfloodtime']);
|
if($remaining_time == 1)
{
$lang->error_searchflooding = $lang->sprintf($lang->error_searchflooding_1, $mybb->settings['searchfloodtime']);
|
}
| }
|
else
{
$lang->error_searchflooding = $lang->sprintf($lang->error_searchflooding, $mybb->settings['searchfloodtime'], $remaining_time);
| else
{
$lang->error_searchflooding = $lang->sprintf($lang->error_searchflooding, $mybb->settings['searchfloodtime'], $remaining_time);
|
| Zeile 225 | Zeile 221 |
|---|
else
{
$sortby = "dateline";
|
else
{
$sortby = "dateline";
|
}
| }
|
if(my_strtolower($mybb->get_input('sortordr')) == "asc")
{
$sortorder = "asc";
|
if(my_strtolower($mybb->get_input('sortordr')) == "asc")
{
$sortorder = "asc";
|
}
| }
|
else
{
$sortorder = "desc";
|
else
{
$sortorder = "desc";
|
}
| }
|
$plugins->run_hooks("private_do_search_end");
redirect("private.php?action=results&sid=".$sid."&sortby=".$sortby."&order=".$sortorder, $lang->redirect_searchresults);
}
|
$plugins->run_hooks("private_do_search_end");
redirect("private.php?action=results&sid=".$sid."&sortby=".$sortby."&order=".$sortorder, $lang->redirect_searchresults);
}
|
|
|
if($mybb->input['action'] == "results")
{
$sid = $mybb->get_input('sid');
| if($mybb->input['action'] == "results")
{
$sid = $mybb->get_input('sid');
|
| Zeile 252 | Zeile 248 |
|---|
}
$plugins->run_hooks("private_results_start");
|
}
$plugins->run_hooks("private_results_start");
|
|
|
// Decide on our sorting fields and sorting order.
$order = my_strtolower($mybb->get_input('order'));
$sortby = my_strtolower($mybb->get_input('sortby'));
|
// Decide on our sorting fields and sorting order.
$order = my_strtolower($mybb->get_input('order'));
$sortby = my_strtolower($mybb->get_input('sortby'));
|
|
|
$sortby_accepted = array('subject', 'username', 'dateline');
if(in_array($sortby, $sortby_accepted))
|
$sortby_accepted = array('subject', 'username', 'dateline');
if(in_array($sortby, $sortby_accepted))
|
{
| {
|
$query_sortby = $sortby;
if($query_sortby == "username")
| $query_sortby = $sortby;
if($query_sortby == "username")
|
| Zeile 268 | Zeile 264 |
|---|
$query_sortby = "fromusername";
}
}
|
$query_sortby = "fromusername";
}
}
|
else
{
$sortby = $query_sortby = "dateline";
}
if($order != "asc")
{
$order = "desc";
| else
{
$sortby = $query_sortby = "dateline";
}
if($order != "asc")
{
$order = "desc";
|
}
if(!$mybb->settings['threadsperpage'] || (int)$mybb->settings['threadsperpage'] < 1)
| }
if(!$mybb->settings['threadsperpage'] || (int)$mybb->settings['threadsperpage'] < 1)
|
| Zeile 294 | Zeile 290 |
|---|
{
$start = 0;
$page = 1;
|
{
$start = 0;
$page = 1;
|
}
| }
|
$end = $start + $perpage;
$lower = $start+1;
$upper = $end;
| $end = $start + $perpage;
$lower = $start+1;
$upper = $end;
|
| Zeile 311 | Zeile 307 |
|---|
$pmscount = $db->fetch_array($query);
if($upper > $pmscount)
|
$pmscount = $db->fetch_array($query);
if($upper > $pmscount)
|
{
| {
|
$upper = $pmscount;
}
$multipage = multipage($pmscount['total'], $perpage, $page, "private.php?action=results&sid=".htmlspecialchars_uni($mybb->get_input('sid'))."&sortby={$sortby}&order={$order}");
$messagelist = '';
|
$upper = $pmscount;
}
$multipage = multipage($pmscount['total'], $perpage, $page, "private.php?action=results&sid=".htmlspecialchars_uni($mybb->get_input('sid'))."&sortby={$sortby}&order={$order}");
$messagelist = '';
|
|
|
$icon_cache = $cache->read("posticons");
// Cache users in multiple recipients for sent & drafts folder
| $icon_cache = $cache->read("posticons");
// Cache users in multiple recipients for sent & drafts folder
|
| Zeile 329 | Zeile 325 |
|---|
if(is_array($recipients['to']) && count($recipients['to']))
{
$get_users = array_merge($get_users, $recipients['to']);
|
if(is_array($recipients['to']) && count($recipients['to']))
{
$get_users = array_merge($get_users, $recipients['to']);
|
}
if(isset($recipients['bcc']) && is_array($recipients['bcc']) && count($recipients['bcc']))
{
$get_users = array_merge($get_users, $recipients['bcc']);
}
}
| }
if(isset($recipients['bcc']) && is_array($recipients['bcc']) && count($recipients['bcc']))
{
$get_users = array_merge($get_users, $recipients['bcc']);
}
}
|
$get_users = implode(',', array_unique($get_users));
// Grab info
| $get_users = implode(',', array_unique($get_users));
// Grab info
|
| Zeile 360 | Zeile 356 |
|---|
");
while($message = $db->fetch_array($query))
{
|
");
while($message = $db->fetch_array($query))
{
|
$msgalt = $msgsuffix = $msgprefix = '';
| $msgalt = $msgstatus = '';
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
$msgfolder = 'new_pm.png';
| $msgstatus = 'new_pm';
|
$msgalt = $lang->new_pm;
|
$msgalt = $lang->new_pm;
|
$msgprefix = "<strong>";
$msgsuffix = "</strong>";
| |
}
|
}
|
elseif($message['status'] == 1)
| else if($message['status'] == 1)
|
{
|
{
|
$msgfolder = 'old_pm.png';
| $msgstatus = 'old_pm';
|
$msgalt = $lang->old_pm;
}
|
$msgalt = $lang->old_pm;
}
|
elseif($message['status'] == 3)
| else if($message['status'] == 3)
|
{
|
{
|
$msgfolder = 're_pm.png';
| $msgstatus = 're_pm';
|
$msgalt = $lang->reply_pm;
}
else if($message['status'] == 4)
{
|
$msgalt = $lang->reply_pm;
}
else if($message['status'] == 4)
{
|
$msgfolder = 'fw_pm.png';
| $msgstatus = 'fw_pm';
|
$msgalt = $lang->fwd_pm;
}
| $msgalt = $lang->fwd_pm;
}
|
| Zeile 400 | Zeile 394 |
|---|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$to_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$to_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
|
| Zeile 410 | Zeile 405 |
|---|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$bcc_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$bcc_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
|
| Zeile 419 | Zeile 415 |
|---|
}
else if($message['toid'])
{
|
}
else if($message['toid'])
{
|
$tofromusername = $message['tousername'];
| $tofromusername = htmlspecialchars_uni($message['tousername']);
|
$tofromuid = $message['toid'];
}
else
| $tofromuid = $message['toid'];
}
else
|
| Zeile 429 | Zeile 425 |
|---|
}
else
{
|
}
else
{
|
$tofromusername = $message['fromusername'];
| $tofromusername = htmlspecialchars_uni($message['fromusername']);
|
$tofromuid = $message['fromid'];
if($tofromuid == 0)
{
| $tofromuid = $message['fromid'];
if($tofromuid == 0)
{
|
| Zeile 561 | Zeile 557 |
|---|
$plugins->run_hooks("private_send_do_send");
// Attempt to see if this PM is a duplicate or not
|
$plugins->run_hooks("private_send_do_send");
// Attempt to see if this PM is a duplicate or not
|
| | $to = array_map("trim", explode(",", $mybb->get_input('to')));
$to_escaped = implode("','", array_map(array($db, 'escape_string'), array_map('my_strtolower', $to)));
|
$time_cutoff = TIME_NOW - (5 * 60 * 60);
$query = $db->query("
SELECT pm.pmid
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON(u.uid=pm.toid)
|
$time_cutoff = TIME_NOW - (5 * 60 * 60);
$query = $db->query("
SELECT pm.pmid
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON(u.uid=pm.toid)
|
WHERE LOWER(u.username)='".$db->escape_string(my_strtolower($mybb->get_input('to')))."' AND pm.dateline > {$time_cutoff} AND pm.fromid='{$mybb->user['uid']}' AND pm.subject='".$db->escape_string($mybb->get_input('subject'))."' AND pm.message='".$db->escape_string($mybb->get_input('message'))."' AND pm.folder!='3'
| WHERE LOWER(u.username) IN ('{$to_escaped}') AND pm.dateline > {$time_cutoff} AND pm.fromid='{$mybb->user['uid']}' AND pm.subject='".$db->escape_string($mybb->get_input('subject'))."' AND pm.message='".$db->escape_string($mybb->get_input('message'))."' AND pm.folder!='3'
LIMIT 0, 1
|
");
$duplicate_check = $db->fetch_field($query, "pmid");
if($duplicate_check)
| ");
$duplicate_check = $db->fetch_field($query, "pmid");
if($duplicate_check)
|
| Zeile 588 | Zeile 587 |
|---|
);
// Split up any recipients we have
|
);
// Split up any recipients we have
|
$pm['to'] = explode(",", $mybb->get_input('to'));
$pm['to'] = array_map("trim", $pm['to']);
| $pm['to'] = $to;
|
if(!empty($mybb->input['bcc']))
{
$pm['bcc'] = explode(",", $mybb->get_input('bcc'));
| if(!empty($mybb->input['bcc']))
{
$pm['bcc'] = explode(",", $mybb->get_input('bcc'));
|
| Zeile 906 | Zeile 904 |
|---|
{
$to .= $comma.htmlspecialchars_uni($user['username']);
$comma = $lang->comma;
|
{
$to .= $comma.htmlspecialchars_uni($user['username']);
$comma = $lang->comma;
|
}
}
}
}
| }
}
}
}
|
// New PM with recipient preset
if($mybb->get_input('uid', MyBB::INPUT_INT) && empty($mybb->input['preview']))
|
// New PM with recipient preset
if($mybb->get_input('uid', MyBB::INPUT_INT) && empty($mybb->input['preview']))
|
| Zeile 1079 | Zeile 1077 |
|---|
if($pm['fromid'] == 0)
{
$pm['username'] = $lang->mybb_engine;
|
if($pm['fromid'] == 0)
{
$pm['username'] = $lang->mybb_engine;
|
}
| }
|
if(!$pm['username'])
{
$pm['username'] = $lang->na;
| if(!$pm['username'])
{
$pm['username'] = $lang->na;
|
| Zeile 1109 | Zeile 1107 |
|---|
}
// Fetch recipient names from the database
|
}
// Fetch recipient names from the database
|
$bcc_recipients = $to_recipients = array();
| $bcc_recipients = $to_recipients = $bcc_form_val = array();
|
$query = $db->simple_select('users', 'uid, username', "uid IN ({$uid_sql})");
while($recipient = $db->fetch_array($query))
{
// User is a BCC recipient
|
$query = $db->simple_select('users', 'uid, username', "uid IN ({$uid_sql})");
while($recipient = $db->fetch_array($query))
{
// User is a BCC recipient
|
| | $recipient['username'] = htmlspecialchars_uni($recipient['username']);
|
if($show_bcc && in_array($recipient['uid'], $pm['recipients']['bcc']))
{
$bcc_recipients[] = build_profile_link($recipient['username'], $recipient['uid']);
|
if($show_bcc && in_array($recipient['uid'], $pm['recipients']['bcc']))
{
$bcc_recipients[] = build_profile_link($recipient['username'], $recipient['uid']);
|
| | $bcc_form_val[] = $recipient['username'];
|
}
// User is a normal recipient
else if(in_array($recipient['uid'], $pm['recipients']['to']))
| }
// User is a normal recipient
else if(in_array($recipient['uid'], $pm['recipients']['to']))
|
| Zeile 1129 | Zeile 1129 |
|---|
if(count($bcc_recipients) > 0)
{
$bcc_recipients = implode(', ', $bcc_recipients);
|
if(count($bcc_recipients) > 0)
{
$bcc_recipients = implode(', ', $bcc_recipients);
|
| | $bcc_form_val = implode(',', $bcc_form_val);
|
eval("\$bcc = \"".$templates->get("private_read_bcc")."\";");
|
eval("\$bcc = \"".$templates->get("private_read_bcc")."\";");
|
| | }
else
{
$bcc_form_val = '';
|
}
$replyall = false;
| }
$replyall = false;
|
| Zeile 1140 | Zeile 1145 |
|---|
if(count($to_recipients) > 0)
{
|
if(count($to_recipients) > 0)
{
|
$to_recipients = implode(", ", $to_recipients);
| $to_recipients = implode($lang->comma, $to_recipients);
|
}
else
{
| }
else
{
|
| Zeile 1187 | Zeile 1192 |
|---|
if($mybb->user['uid'] == $pm['fromid'])
{
$to = htmlspecialchars_uni($mybb->user['username']);
|
if($mybb->user['uid'] == $pm['fromid'])
{
$to = htmlspecialchars_uni($mybb->user['username']);
|
}
| }
|
else
|
else
|
{
| {
|
$query = $db->simple_select('users', 'username', "uid='{$pm['fromid']}'");
$to = htmlspecialchars_uni($db->fetch_field($query, 'username'));
|
$query = $db->simple_select('users', 'username', "uid='{$pm['fromid']}'");
$to = htmlspecialchars_uni($db->fetch_field($query, 'username'));
|
}
| }
|
$private_send_tracking = '';
if($mybb->usergroup['cantrackpms'])
|
$private_send_tracking = '';
if($mybb->usergroup['cantrackpms'])
|
| Zeile 1201 | Zeile 1206 |
|---|
eval("\$private_send_tracking = \"".$templates->get("private_send_tracking")."\";");
}
|
eval("\$private_send_tracking = \"".$templates->get("private_send_tracking")."\";");
}
|
|
$expaltext = (in_array("quickreply", $collapse)) ? "[+]" : "[-]";
|
eval("\$quickreply = \"".$templates->get("private_quickreply")."\";");
}
| eval("\$quickreply = \"".$templates->get("private_quickreply")."\";");
}
|
| Zeile 1270 | Zeile 1276 |
|---|
while($readmessage = $db->fetch_array($query))
{
$readmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($readmessage['subject']));
|
while($readmessage = $db->fetch_array($query))
{
$readmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($readmessage['subject']));
|
| | $readmessage['tousername'] = htmlspecialchars_uni($readmessage['tousername']);
|
$readmessage['profilelink'] = build_profile_link($readmessage['tousername'], $readmessage['toid']);
$readdate = my_date('relative', $readmessage['readtime']);
eval("\$readmessages .= \"".$templates->get("private_tracking_readmessage")."\";");
| $readmessage['profilelink'] = build_profile_link($readmessage['tousername'], $readmessage['toid']);
$readdate = my_date('relative', $readmessage['readtime']);
eval("\$readmessages .= \"".$templates->get("private_tracking_readmessage")."\";");
|
| Zeile 1326 | Zeile 1333 |
|---|
while($unreadmessage = $db->fetch_array($query))
{
$unreadmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($unreadmessage['subject']));
|
while($unreadmessage = $db->fetch_array($query))
{
$unreadmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($unreadmessage['subject']));
|
| | $unreadmessage['tousername'] = htmlspecialchars_uni($unreadmessage['tousername']);
|
$unreadmessage['profilelink'] = build_profile_link($unreadmessage['tousername'], $unreadmessage['toid']);
$senddate = my_date('relative', $unreadmessage['dateline']);
eval("\$unreadmessages .= \"".$templates->get("private_tracking_unreadmessage")."\";");
| $unreadmessage['profilelink'] = build_profile_link($unreadmessage['tousername'], $unreadmessage['toid']);
$senddate = my_date('relative', $unreadmessage['dateline']);
eval("\$unreadmessages .= \"".$templates->get("private_tracking_unreadmessage")."\";");
|
| Zeile 1745 | Zeile 1753 |
|---|
if($db->num_rows($query) == 1)
{
$db->delete_query("privatemessages", "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."'");
|
if($db->num_rows($query) == 1)
{
$db->delete_query("privatemessages", "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."'");
|
}
else
{
| }
else
{
|
$sql_array = array(
"folder" => 4,
"deletetime" => TIME_NOW
| $sql_array = array(
"folder" => 4,
"deletetime" => TIME_NOW
|
| Zeile 1779 | Zeile 1787 |
|---|
$folderinfo[1] = get_pm_folder_name($folderinfo[0], $folderinfo[1]);
$folder_id = $folderinfo[0];
|
$folderinfo[1] = get_pm_folder_name($folderinfo[0], $folderinfo[1]);
$folder_id = $folderinfo[0];
|
$folder_name = $folderinfo[1];
| $folder_name = $folderinfo[1];
|
eval("\$folderlist_folder .= \"".$templates->get("private_archive_folders_folder")."\";");
|
eval("\$folderlist_folder .= \"".$templates->get("private_archive_folders_folder")."\";");
|
}
eval("\$folderlist = \"".$templates->get("private_archive_folders")."\";");
| }
eval("\$folderlist = \"".$templates->get("private_archive_folders")."\";");
|
$plugins->run_hooks("private_export_end");
|
$plugins->run_hooks("private_export_end");
|
| Zeile 1797 | Zeile 1805 |
|---|
{
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
|
{
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
|
|
|
$plugins->run_hooks("private_do_export_start");
|
$plugins->run_hooks("private_do_export_start");
|
$lang->private_messages_for = $lang->sprintf($lang->private_messages_for, $mybb->user['username']);
| $lang->private_messages_for = $lang->sprintf($lang->private_messages_for, htmlspecialchars_uni($mybb->user['username']));
|
$exdate = my_date($mybb->settings['dateformat'], TIME_NOW, 0, 0);
$extime = my_date($mybb->settings['timeformat'], TIME_NOW, 0, 0);
$lang->exported_date = $lang->sprintf($lang->exported_date, $exdate, $extime);
| $exdate = my_date($mybb->settings['dateformat'], TIME_NOW, 0, 0);
$extime = my_date($mybb->settings['timeformat'], TIME_NOW, 0, 0);
$lang->exported_date = $lang->sprintf($lang->exported_date, $exdate, $extime);
|
| Zeile 1815 | Zeile 1823 |
|---|
if($mybb->get_input('pmid', MyBB::INPUT_INT))
{
$wsql = "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."' AND uid='".$mybb->user['uid']."'";
|
if($mybb->get_input('pmid', MyBB::INPUT_INT))
{
$wsql = "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."' AND uid='".$mybb->user['uid']."'";
|
}
| }
|
else
{
if($mybb->get_input('daycut', MyBB::INPUT_INT) && ($mybb->get_input('dayway') != "disregard"))
|
else
{
if($mybb->get_input('daycut', MyBB::INPUT_INT) && ($mybb->get_input('dayway') != "disregard"))
|
{
| {
|
$datecut = TIME_NOW-($mybb->get_input('daycut', MyBB::INPUT_INT) * 86400);
$wsql = "pm.dateline";
if($mybb->get_input('dayway') == "older")
|
$datecut = TIME_NOW-($mybb->get_input('daycut', MyBB::INPUT_INT) * 86400);
$wsql = "pm.dateline";
if($mybb->get_input('dayway') == "older")
|
{
| {
|
$wsql .= "<=";
}
else
|
$wsql .= "<=";
}
else
|
{
| {
|
$wsql .= ">=";
}
$wsql .= "'$datecut'";
|
$wsql .= ">=";
}
$wsql .= "'$datecut'";
|
}
| }
|
else
{
$wsql = "1=1";
| else
{
$wsql = "1=1";
|
| Zeile 1848 | Zeile 1856 |
|---|
{
$folderlst = '';
break;
|
{
$folderlst = '';
break;
|
}
else
{
| }
else
{
|
if(!$folderlst)
{
$folderlst = " AND pm.folder IN ('$val'";
| if(!$folderlst)
{
$folderlst = " AND pm.folder IN ('$val'";
|
| Zeile 1920 | Zeile 1928 |
|---|
{
$tofromuid = $message['fromid'];
if($mybb->input['exporttype'] == "txt")
|
{
$tofromuid = $message['fromid'];
if($mybb->input['exporttype'] == "txt")
|
{
| {
|
$tofromusername = $message['fromusername'];
}
else
| $tofromusername = $message['fromusername'];
}
else
|
| Zeile 1948 | Zeile 1956 |
|---|
$message['subject'] = $parser->parse_badwords($message['subject']);
if($message['folder'] != "3")
{
|
$message['subject'] = $parser->parse_badwords($message['subject']);
if($message['folder'] != "3")
{
|
$senddate = my_date($mybb->settings['dateformat'], $message['dateline']);
$sendtime = my_date($mybb->settings['timeformat'], $message['dateline']);
| $senddate = my_date($mybb->settings['dateformat'], $message['dateline'], "", false);
$sendtime = my_date($mybb->settings['timeformat'], $message['dateline'], "", false);
|
$senddate .= " $lang->at $sendtime";
}
else
| $senddate .= " $lang->at $sendtime";
}
else
|
| Zeile 1981 | Zeile 1989 |
|---|
if($mybb->input['exporttype'] == "csv")
{
|
if($mybb->input['exporttype'] == "csv")
{
|
$message['message'] = addslashes($message['message']);
$message['subject'] = addslashes($message['subject']);
$message['tousername'] = addslashes($message['tousername']);
$message['fromusername'] = addslashes($message['fromusername']);
| $message['message'] = my_escape_csv($message['message']);
$message['subject'] = my_escape_csv($message['subject']);
$message['tousername'] = my_escape_csv($message['tousername']);
$message['fromusername'] = my_escape_csv($message['fromusername']);
|
}
if(empty($donefolder[$message['folder']]))
| }
if(empty($donefolder[$message['folder']]))
|
| Zeile 2006 | Zeile 2014 |
|---|
}
else
{
|
}
else
{
|
$foldername = addslashes($folderinfo[1]);
| $foldername = my_escape_csv($folderinfo[1]);
|
}
$donefolder[$message['folder']] = 1;
}
| }
$donefolder[$message['folder']] = 1;
}
|
| Zeile 2032 | Zeile 2040 |
|---|
$db->delete_query("privatemessages", "pmid IN ('0'$ids)");
// Update PM count
update_pm_count();
|
$db->delete_query("privatemessages", "pmid IN ('0'$ids)");
// Update PM count
update_pm_count();
|
}
if($mybb->input['exporttype'] == "html")
{
| }
if($mybb->input['exporttype'] == "html")
{
|
$filename = "pm-archive.html";
$contenttype = "text/html";
}
| $filename = "pm-archive.html";
$contenttype = "text/html";
}
|
| Zeile 2060 | Zeile 2068 |
|---|
}
else
{
|
}
else
{
|
| | echo "\xEF\xBB\xBF"; // UTF-8 BOM
|
echo $archived;
}
}
| echo $archived;
}
}
|
| Zeile 2139 | Zeile 2148 |
|---|
if($page > 0)
{
$start = ($page-1) *$perpage;
|
if($page > 0)
{
$start = ($page-1) *$perpage;
|
}
else
| }
else
|
{
$start = 0;
$page = 1;
| {
$start = 0;
$page = 1;
|
| Zeile 2156 | Zeile 2165 |
|---|
}
if($mybb->input['order'] || ($sortby && $sortby != "dateline"))
|
}
if($mybb->input['order'] || ($sortby && $sortby != "dateline"))
|
{
$page_url = "private.php?fid={$folder}&sortby={$sortby}&order={$mybb->input['order']}";
| {
$page_url = "private.php?fid={$folder}&sortby={$sortby}&order={$sortordernow}";
|
}
else
{
| }
else
{
|
| Zeile 2166 | Zeile 2175 |
|---|
$multipage = multipage($pmscount['total'], $perpage, $page, $page_url);
$messagelist = '';
|
$multipage = multipage($pmscount['total'], $perpage, $page, $page_url);
$messagelist = '';
|
|
|
$icon_cache = $cache->read("posticons");
// Cache users in multiple recipients for sent & drafts folder
| $icon_cache = $cache->read("posticons");
// Cache users in multiple recipients for sent & drafts folder
|
| Zeile 2175 | Zeile 2184 |
|---|
if($sortfield == "username")
{
$u = "u.";
|
if($sortfield == "username")
{
$u = "u.";
|
}
else
| }
else
|
{
$u = "pm.";
}
| {
$u = "pm.";
}
|
| Zeile 2188 | Zeile 2197 |
|---|
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=pm.toid)
WHERE pm.folder='{$folder}' AND pm.uid='{$mybb->user['uid']}'
|
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=pm.toid)
WHERE pm.folder='{$folder}' AND pm.uid='{$mybb->user['uid']}'
|
ORDER BY {$u}{$sortfield} {$mybb->input['order']}
| ORDER BY {$u}{$sortfield} {$sortordernow}
|
LIMIT {$start}, {$perpage}
");
while($row = $db->fetch_array($users_query))
{
$recipients = my_unserialize($row['recipients']);
if(is_array($recipients['to']) && count($recipients['to']))
|
LIMIT {$start}, {$perpage}
");
while($row = $db->fetch_array($users_query))
{
$recipients = my_unserialize($row['recipients']);
if(is_array($recipients['to']) && count($recipients['to']))
|
{
| {
|
$get_users = array_merge($get_users, $recipients['to']);
}
| $get_users = array_merge($get_users, $recipients['to']);
}
|
| Zeile 2204 | Zeile 2213 |
|---|
$get_users = array_merge($get_users, $recipients['bcc']);
}
}
|
$get_users = array_merge($get_users, $recipients['bcc']);
}
}
|
|
|
$get_users = implode(',', array_unique($get_users));
// Grab info
| $get_users = implode(',', array_unique($get_users));
// Grab info
|
| Zeile 2212 | Zeile 2221 |
|---|
{
$users_query = $db->simple_select("users", "uid, username, usergroup, displaygroup", "uid IN ({$get_users})");
while($user = $db->fetch_array($users_query))
|
{
$users_query = $db->simple_select("users", "uid, username, usergroup, displaygroup", "uid IN ({$get_users})");
while($user = $db->fetch_array($users_query))
|
{
| {
|
$cached_users[$user['uid']] = $user;
}
}
| $cached_users[$user['uid']] = $user;
}
}
|
| Zeile 2255 | Zeile 2264 |
|---|
{
while($message = $db->fetch_array($query))
{
|
{
while($message = $db->fetch_array($query))
{
|
$msgalt = $msgsuffix = $msgprefix = '';
| $msgalt = $msgstatus = '';
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
$msgfolder = 'new_pm.png';
| $msgstatus = 'new_pm';
|
$msgalt = $lang->new_pm;
|
$msgalt = $lang->new_pm;
|
$msgprefix = "<strong>";
$msgsuffix = "</strong>";
| |
}
|
}
|
elseif($message['status'] == 1)
| else if($message['status'] == 1)
|
{
|
{
|
$msgfolder = 'old_pm.png';
| $msgstatus = 'old_pm';
|
$msgalt = $lang->old_pm;
}
|
$msgalt = $lang->old_pm;
}
|
elseif($message['status'] == 3)
| else if($message['status'] == 3)
|
{
|
{
|
$msgfolder = 're_pm.png';
| $msgstatus = 're_pm';
|
$msgalt = $lang->reply_pm;
}
|
$msgalt = $lang->reply_pm;
}
|
elseif($message['status'] == 4)
| else if($message['status'] == 4)
|
{
|
{
|
$msgfolder = 'fw_pm.png';
| $msgstatus = 'fw_pm';
|
$msgalt = $lang->fwd_pm;
}
| $msgalt = $lang->fwd_pm;
}
|
| Zeile 2285 | Zeile 2293 |
|---|
{ // Sent Items or Drafts Folder Check
$recipients = my_unserialize($message['recipients']);
$to_users = $bcc_users = '';
|
{ // Sent Items or Drafts Folder Check
$recipients = my_unserialize($message['recipients']);
$to_users = $bcc_users = '';
|
if(count($recipients['to']) > 1 || (count($recipients['to']) == 1 && isset($recipients['bcc']) && count($recipients['bcc']) > 0))
| if(isset($recipients['to']) && count($recipients['to']) > 1 || (isset($recipients['to']) && count($recipients['to']) == 1 && isset($recipients['bcc']) && count($recipients['bcc']) > 0))
|
{
foreach($recipients['to'] as $uid)
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
foreach($recipients['to'] as $uid)
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
|
| Zeile 2305 | Zeile 2314 |
|---|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
|
| Zeile 2318 | Zeile 2328 |
|---|
}
else if($message['toid'])
{
|
}
else if($message['toid'])
{
|
$tofromusername = $message['tousername'];
| $tofromusername = htmlspecialchars_uni($message['tousername']);
|
$tofromuid = $message['toid'];
|
$tofromuid = $message['toid'];
|
}
| }
|
else
{
$tofromusername = $lang->not_sent;
| else
{
$tofromusername = $lang->not_sent;
|
| Zeile 2328 | Zeile 2338 |
|---|
}
else
{
|
}
else
{
|
$tofromusername = $message['fromusername'];
| $tofromusername = htmlspecialchars_uni($message['fromusername']);
|
$tofromuid = $message['fromid'];
if($tofromuid == 0)
{
| $tofromuid = $message['fromid'];
if($tofromuid == 0)
{
|
| Zeile 2392 | Zeile 2402 |
|---|
}
$pmspacebar = '';
|
}
$pmspacebar = '';
|
if($mybb->usergroup['pmquota'] != '0' && $mybb->usergroup['cancp'] != 1)
| if($mybb->usergroup['pmquota'] != 0)
|
{
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "uid='".$mybb->user['uid']."'");
$pmscount = $db->fetch_array($query);
| {
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "uid='".$mybb->user['uid']."'");
$pmscount = $db->fetch_array($query);
|
| Zeile 2456 | Zeile 2466 |
|---|
}
$limitwarning = '';
|
}
$limitwarning = '';
|
if($mybb->usergroup['pmquota'] != "0" && $pmscount['total'] >= $mybb->usergroup['pmquota'] && $mybb->usergroup['cancp'] != 1)
| if($mybb->usergroup['pmquota'] != 0 && $pmscount['total'] >= $mybb->usergroup['pmquota'])
|
{
eval("\$limitwarning = \"".$templates->get("private_limitwarning")."\";");
}
| {
eval("\$limitwarning = \"".$templates->get("private_limitwarning")."\";");
}
|