| Zeile 12 | Zeile 12 |
|---|
define("IGNORE_CLEAN_VARS", "sid");
define('THIS_SCRIPT', 'private.php');
|
define("IGNORE_CLEAN_VARS", "sid");
define('THIS_SCRIPT', 'private.php');
|
$templatelist = "private_send,private_send_buddyselect,private_read,private_tracking,private_tracking_readmessage,private_tracking_unreadmessage,private_orderarrow,usercp_nav_attachments,usercp_nav_messenger_compose,private_tracking_readmessage_stop";
$templatelist .= ",private_folders,private_folders_folder,private_folders_folder_unremovable,private,usercp_nav,private_empty_folder,private_empty,private_archive_txt,private_archive_csv,private_archive_html,private_tracking_unreadmessage_stop";
$templatelist .= ",usercp_nav_messenger,usercp_nav_changename,usercp_nav_profile,usercp_nav_misc,multipage,multipage_end,multipage_jump_page,multipage_nextpage,multipage_page,multipage_page_current,multipage_page_link_current,multipage_prevpage,multipage_start,usercp_nav_editsignature,posticons_icon";
$templatelist .= ",private_messagebit,codebuttons,smilieinsert,smilieinsert_getmore,smilieinsert_smilie,smilieinsert_smilie_empty,posticons,private_send_autocomplete,private_messagebit_denyreceipt,private_read_to,postbit_online";
| $templatelist = "private_send,private_send_buddyselect,private_tracking,private_tracking_readmessage,private_tracking_unreadmessage,usercp_nav_attachments,usercp_nav_messenger_compose,private_tracking_readmessage_stop";
$templatelist .= ",private_folders,private_folders_folder,private_folders_folder_unremovable,private,usercp_nav,private_empty_folder,private_archive_txt,private_archive_csv,private_archive_html,private_tracking_unreadmessage_stop";
$templatelist .= ",usercp_nav_messenger,usercp_nav_changename,multipage,multipage_end,multipage_jump_page,multipage_nextpage,multipage_page,multipage_page_current,multipage_page_link_current,multipage_prevpage,multipage_start";
$templatelist .= ",private_messagebit,codebuttons,posticons,private_send_autocomplete,private_messagebit_denyreceipt,postbit_warninglevel_formatted,private_emptyexportlink,postbit_purgespammer,postbit_gotopost,private_read";
|
$templatelist .= ",postbit_delete_pm,postbit,private_tracking_nomessage,private_nomessages,postbit_author_guest,private_multiple_recipients_user,private_multiple_recipients_bcc,private_multiple_recipients,usercp_nav_messenger_folder";
|
$templatelist .= ",postbit_delete_pm,postbit,private_tracking_nomessage,private_nomessages,postbit_author_guest,private_multiple_recipients_user,private_multiple_recipients_bcc,private_multiple_recipients,usercp_nav_messenger_folder";
|
$templatelist .= ",private_search_messagebit,private_search_results_nomessages,private_search_results,private_advanced_search,previewpost,private_send_tracking,private_send_signature,private_read_bcc,private_composelink,postbit_purgespammer";
$templatelist .= ",private_archive,private_quickreply,private_pmspace,private_limitwarning,postbit_groupimage,postbit_offline,postbit_www,postbit_replyall_pm,postbit_signature,postbit_classic,postbit_gotopost";
$templatelist .= ",private_archive_folders_folder,private_archive_folders,postbit_warninglevel,postbit_author_user,postbit_reply_pm,postbit_forward_pm,private_messagebit_icon,private_jump_folders_folder,private_advanced_search_folders";
$templatelist .= ",private_jump_folders,postbit_avatar,postbit_warn,postbit_rep_button,postbit_email,postbit_reputation,private_move,private_read_action,postbit_away,postbit_pm,usercp_nav_messenger_tracking,postbit_find,private_emptyexportlink";
| $templatelist .= ",private_search_messagebit,private_search_results_nomessages,private_search_results,private_advanced_search,previewpost,private_send_tracking,private_send_signature,private_read_bcc,private_composelink";
$templatelist .= ",private_archive,private_quickreply,private_pmspace,private_limitwarning,postbit_groupimage,postbit_offline,postbit_www,postbit_replyall_pm,postbit_signature,postbit_classic,postbit_reputation_formatted_link";
$templatelist .= ",private_archive_folders_folder,private_archive_folders,postbit_warninglevel,postbit_author_user,postbit_forward_pm,private_messagebit_icon,private_jump_folders_folder,private_advanced_search_folders,usercp_nav_home";
$templatelist .= ",private_jump_folders,postbit_avatar,postbit_warn,postbit_rep_button,postbit_email,postbit_reputation,private_move,private_read_action,postbit_away,postbit_pm,usercp_nav_messenger_tracking,postbit_find";
$templatelist .= ",usercp_nav_editsignature,posticons_icon,postbit_icon,postbit_iplogged_hiden,usercp_nav_profile,usercp_nav_misc,postbit_userstar,private_read_to,postbit_online,private_empty,private_orderarrow,postbit_reply_pm";
|
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
|
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
|
| Zeile 51 | Zeile 52 |
|---|
$db->update_query("users", $sql_array, "uid = ".$mybb->user['uid']);
}
|
$db->update_query("users", $sql_array, "uid = ".$mybb->user['uid']);
}
|
// On a random occassion, recount the user's pms just to make sure everything is in sync.
$rand = my_rand(0, 9);
if($rand == 5)
{
update_pm_count();
}
$mybb->input['fid'] = $mybb->get_input('fid', 1);
| $mybb->input['fid'] = $mybb->get_input('fid', MyBB::INPUT_INT);
|
$folder_id = $folder_name = '';
|
$folder_id = $folder_name = '';
|
| Zeile 80 | Zeile 74 |
|---|
$folder_id = $folderinfo[0];
$folder_name = $folderinfo[1];
|
$folder_id = $folderinfo[0];
$folder_name = $folderinfo[1];
|
|
|
eval("\$folderjump_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
eval("\$folderoplist_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
eval("\$foldersearch_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
}
|
eval("\$folderjump_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
eval("\$folderoplist_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
eval("\$foldersearch_folder .= \"".$templates->get("private_jump_folders_folder")."\";");
}
|
| |
$from_fid = $mybb->input['fid'];
|
eval("\$folderjump = \"".$templates->get("private_jump_folders")."\";");
eval("\$folderoplist = \"".$templates->get("private_move")."\";");
eval("\$foldersearch = \"".$templates->get("private_advanced_search_folders")."\";");
usercp_menu();
|
eval("\$folderjump = \"".$templates->get("private_jump_folders")."\";");
eval("\$folderoplist = \"".$templates->get("private_move")."\";");
eval("\$foldersearch = \"".$templates->get("private_advanced_search_folders")."\";");
usercp_menu();
|
|
|
$plugins->run_hooks("private_start");
// Make navigation
| $plugins->run_hooks("private_start");
// Make navigation
|
| Zeile 166 | Zeile 162 |
|---|
}
}
|
}
}
|
if($mybb->get_input('subject', 1) != 1 && $mybb->get_input('message', 1) != 1)
| if($mybb->get_input('subject', MyBB::INPUT_INT) != 1 && $mybb->get_input('message', MyBB::INPUT_INT) != 1)
|
{
error($lang->error_nosearchresults);
}
|
{
error($lang->error_nosearchresults);
}
|
if($mybb->get_input('message', 1) == 1)
| if($mybb->get_input('message', MyBB::INPUT_INT) == 1)
|
{
$resulttype = "pmmessages";
}
| {
$resulttype = "pmmessages";
}
|
| Zeile 182 | Zeile 178 |
|---|
$search_data = array(
"keywords" => $mybb->get_input('keywords'),
|
$search_data = array(
"keywords" => $mybb->get_input('keywords'),
|
"subject" => $mybb->get_input('subject', 1),
"message" => $mybb->get_input('message', 1),
| "subject" => $mybb->get_input('subject', MyBB::INPUT_INT),
"message" => $mybb->get_input('message', MyBB::INPUT_INT),
|
"sender" => $mybb->get_input('sender'),
|
"sender" => $mybb->get_input('sender'),
|
"status" => $mybb->get_input('status', 2),
"folder" => $mybb->get_input('folder', 2)
| "status" => $mybb->get_input('status', MyBB::INPUT_ARRAY),
"folder" => $mybb->get_input('folder', MyBB::INPUT_ARRAY)
|
);
if($db->can_search == true)
| );
if($db->can_search == true)
|
| Zeile 198 | Zeile 194 |
|---|
else
{
error($lang->error_no_search_support);
|
else
{
error($lang->error_no_search_support);
|
}
| }
|
$sid = md5(uniqid(microtime(), true));
$searcharray = array(
"sid" => $db->escape_string($sid),
| $sid = md5(uniqid(microtime(), true));
$searcharray = array(
"sid" => $db->escape_string($sid),
|
| Zeile 217 | Zeile 213 |
|---|
// Sender sort won't work yet
$sortby = array('subject', 'sender', 'dateline');
|
// Sender sort won't work yet
$sortby = array('subject', 'sender', 'dateline');
|
|
|
if(in_array($mybb->get_input('sort'), $sortby))
{
$sortby = $mybb->get_input('sort');
|
if(in_array($mybb->get_input('sort'), $sortby))
{
$sortby = $mybb->get_input('sort');
|
}
| }
|
else
{
$sortby = "dateline";
|
else
{
$sortby = "dateline";
|
}
| }
|
if(my_strtolower($mybb->get_input('sortordr')) == "asc")
|
if(my_strtolower($mybb->get_input('sortordr')) == "asc")
|
{
| {
|
$sortorder = "asc";
|
$sortorder = "asc";
|
}
else
{
| }
else
{
|
$sortorder = "desc";
}
| $sortorder = "desc";
}
|
| Zeile 282 | Zeile 278 |
|---|
{
$mybb->settings['threadsperpage'] = 20;
}
|
{
$mybb->settings['threadsperpage'] = 20;
}
|
| |
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "pmid IN(".$db->escape_string($search['querycache']).")");
$pmscount = $db->fetch_field($query, "total");
|
// Work out pagination, which page we're at, as well as the limits.
$perpage = $mybb->settings['threadsperpage'];
|
// Work out pagination, which page we're at, as well as the limits.
$perpage = $mybb->settings['threadsperpage'];
|
$page = $mybb->get_input('page', 1);
| $page = $mybb->get_input('page', MyBB::INPUT_INT);
|
if($page > 0)
{
$start = ($page-1) * $perpage;
|
if($page > 0)
{
$start = ($page-1) * $perpage;
|
| | $pages = ceil($pmscount / $perpage);
if($page > $pages)
{
$start = 0;
$page = 1;
}
|
}
else
{
| }
else
{
|
| Zeile 307 | Zeile 312 |
|---|
}
// Do Multi Pages
|
}
// Do Multi Pages
|
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "pmid IN(".$db->escape_string($search['querycache']).")");
$pmscount = $db->fetch_array($query);
| |
if($upper > $pmscount)
{
$upper = $pmscount;
}
|
if($upper > $pmscount)
{
$upper = $pmscount;
}
|
$multipage = multipage($pmscount['total'], $perpage, $page, "private.php?action=results&sid=".htmlspecialchars_uni($mybb->get_input('sid'))."&sortby={$sortby}&order={$order}");
| $multipage = multipage($pmscount, $perpage, $page, "private.php?action=results&sid=".htmlspecialchars_uni($mybb->get_input('sid'))."&sortby={$sortby}&order={$order}");
|
$messagelist = '';
|
$messagelist = '';
|
|
|
$icon_cache = $cache->read("posticons");
// Cache users in multiple recipients for sent & drafts folder
| $icon_cache = $cache->read("posticons");
// Cache users in multiple recipients for sent & drafts folder
|
| Zeile 334 | Zeile 336 |
|---|
if(isset($recipients['bcc']) && is_array($recipients['bcc']) && count($recipients['bcc']))
{
$get_users = array_merge($get_users, $recipients['bcc']);
|
if(isset($recipients['bcc']) && is_array($recipients['bcc']) && count($recipients['bcc']))
{
$get_users = array_merge($get_users, $recipients['bcc']);
|
}
}
$get_users = implode(',', array_unique($get_users));
| }
}
$get_users = implode(',', array_unique($get_users));
|
// Grab info
if($get_users)
|
// Grab info
if($get_users)
|
| Zeile 360 | Zeile 362 |
|---|
");
while($message = $db->fetch_array($query))
{
|
");
while($message = $db->fetch_array($query))
{
|
$msgalt = $msgsuffix = $msgprefix = '';
| $msgalt = $msgstatus = '';
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
$msgfolder = 'new_pm.png';
| $msgstatus = 'new_pm';
|
$msgalt = $lang->new_pm;
|
$msgalt = $lang->new_pm;
|
$msgprefix = "<strong>";
$msgsuffix = "</strong>";
| |
}
|
}
|
elseif($message['status'] == 1)
| else if($message['status'] == 1)
|
{
|
{
|
$msgfolder = 'old_pm.png';
| $msgstatus = 'old_pm';
|
$msgalt = $lang->old_pm;
}
|
$msgalt = $lang->old_pm;
}
|
elseif($message['status'] == 3)
| else if($message['status'] == 3)
|
{
|
{
|
$msgfolder = 're_pm.png';
| $msgstatus = 're_pm';
|
$msgalt = $lang->reply_pm;
}
else if($message['status'] == 4)
{
|
$msgalt = $lang->reply_pm;
}
else if($message['status'] == 4)
{
|
$msgfolder = 'fw_pm.png';
| $msgstatus = 'fw_pm';
|
$msgalt = $lang->fwd_pm;
}
| $msgalt = $lang->fwd_pm;
}
|
| Zeile 400 | Zeile 400 |
|---|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$to_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$to_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
|
| Zeile 410 | Zeile 411 |
|---|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$bcc_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
eval("\$bcc_users .= \"".$templates->get("private_multiple_recipients_user")."\";");
}
|
| Zeile 419 | Zeile 421 |
|---|
}
else if($message['toid'])
{
|
}
else if($message['toid'])
{
|
$tofromusername = $message['tousername'];
| $tofromusername = htmlspecialchars_uni($message['tousername']);
|
$tofromuid = $message['toid'];
}
else
| $tofromuid = $message['toid'];
}
else
|
| Zeile 429 | Zeile 431 |
|---|
}
else
{
|
}
else
{
|
$tofromusername = $message['fromusername'];
| $tofromusername = htmlspecialchars_uni($message['fromusername']);
|
$tofromuid = $message['fromid'];
if($tofromuid == 0)
{
| $tofromuid = $message['fromid'];
if($tofromuid == 0)
{
|
| Zeile 553 | Zeile 555 |
|---|
if($mybb->usergroup['cansendpms'] == 0)
{
error_no_permission();
|
if($mybb->usergroup['cansendpms'] == 0)
{
error_no_permission();
|
}
| }
|
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
|
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
|
| Zeile 561 | Zeile 563 |
|---|
$plugins->run_hooks("private_send_do_send");
// Attempt to see if this PM is a duplicate or not
|
$plugins->run_hooks("private_send_do_send");
// Attempt to see if this PM is a duplicate or not
|
| | $to = array_map("trim", explode(",", $mybb->get_input('to')));
$to = array_unique($to); // Filter out any duplicates
$to_escaped = implode("','", array_map(array($db, 'escape_string'), array_map('my_strtolower', $to)));
|
$time_cutoff = TIME_NOW - (5 * 60 * 60);
$query = $db->query("
SELECT pm.pmid
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON(u.uid=pm.toid)
|
$time_cutoff = TIME_NOW - (5 * 60 * 60);
$query = $db->query("
SELECT pm.pmid
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON(u.uid=pm.toid)
|
WHERE LOWER(u.username)='".$db->escape_string(my_strtolower($mybb->get_input('to')))."' AND pm.dateline > {$time_cutoff} AND pm.fromid='{$mybb->user['uid']}' AND pm.subject='".$db->escape_string($mybb->get_input('subject'))."' AND pm.message='".$db->escape_string($mybb->get_input('message'))."' AND pm.folder!='3'
| WHERE LOWER(u.username) IN ('{$to_escaped}') AND pm.dateline > {$time_cutoff} AND pm.fromid='{$mybb->user['uid']}' AND pm.subject='".$db->escape_string($mybb->get_input('subject'))."' AND pm.message='".$db->escape_string($mybb->get_input('message'))."' AND pm.folder!='3'
LIMIT 0, 1
|
");
$duplicate_check = $db->fetch_field($query, "pmid");
if($duplicate_check)
| ");
$duplicate_check = $db->fetch_field($query, "pmid");
if($duplicate_check)
|
| Zeile 580 | Zeile 586 |
|---|
$pm = array(
"subject" => $mybb->get_input('subject'),
"message" => $mybb->get_input('message'),
|
$pm = array(
"subject" => $mybb->get_input('subject'),
"message" => $mybb->get_input('message'),
|
"icon" => $mybb->get_input('icon', 1),
| "icon" => $mybb->get_input('icon', MyBB::INPUT_INT),
|
"fromid" => $mybb->user['uid'],
"do" => $mybb->get_input('do'),
|
"fromid" => $mybb->user['uid'],
"do" => $mybb->get_input('do'),
|
"pmid" => $mybb->get_input('pmid', 1),
| "pmid" => $mybb->get_input('pmid', MyBB::INPUT_INT),
|
"ipaddress" => $session->packedip
);
// Split up any recipients we have
|
"ipaddress" => $session->packedip
);
// Split up any recipients we have
|
$pm['to'] = explode(",", $mybb->get_input('to'));
$pm['to'] = array_map("trim", $pm['to']);
| $pm['to'] = $to;
|
if(!empty($mybb->input['bcc']))
{
$pm['bcc'] = explode(",", $mybb->get_input('bcc'));
$pm['bcc'] = array_map("trim", $pm['bcc']);
}
|
if(!empty($mybb->input['bcc']))
{
$pm['bcc'] = explode(",", $mybb->get_input('bcc'));
$pm['bcc'] = array_map("trim", $pm['bcc']);
}
|
$mybb->input['options'] = $mybb->get_input('options', 2);
| $mybb->input['options'] = $mybb->get_input('options', MyBB::INPUT_ARRAY);
|
if(!$mybb->usergroup['cantrackpms'])
{
|
if(!$mybb->usergroup['cantrackpms'])
{
|
| Zeile 627 | Zeile 632 |
|---|
if(isset($mybb->input['options']['readreceipt']))
{
$pm['options']['readreceipt'] = $mybb->input['options']['readreceipt'];
|
if(isset($mybb->input['options']['readreceipt']))
{
$pm['options']['readreceipt'] = $mybb->input['options']['readreceipt'];
|
}
| }
|
if(!empty($mybb->input['saveasdraft']))
{
$pm['saveasdraft'] = 1;
|
if(!empty($mybb->input['saveasdraft']))
{
$pm['saveasdraft'] = 1;
|
}
| }
|
$pmhandler->set_data($pm);
// Now let the pm handler do all the hard work.
| $pmhandler->set_data($pm);
// Now let the pm handler do all the hard work.
|
| Zeile 648 | Zeile 653 |
|---|
$plugins->run_hooks("private_do_send_end");
if(isset($pminfo['draftsaved']))
|
$plugins->run_hooks("private_do_send_end");
if(isset($pminfo['draftsaved']))
|
{
| {
|
redirect("private.php", $lang->redirect_pmsaved);
}
else
| redirect("private.php", $lang->redirect_pmsaved);
}
else
|
| Zeile 661 | Zeile 666 |
|---|
if($mybb->input['action'] == "send")
{
if($mybb->usergroup['cansendpms'] == 0)
|
if($mybb->input['action'] == "send")
{
if($mybb->usergroup['cansendpms'] == 0)
|
{
| {
|
error_no_permission();
}
| error_no_permission();
}
|
| Zeile 689 | Zeile 694 |
|---|
if(!empty($mybb->input['preview']) || $send_errors)
{
|
if(!empty($mybb->input['preview']) || $send_errors)
{
|
$options = $mybb->get_input('options', 2);
| $options = $mybb->get_input('options', MyBB::INPUT_ARRAY);
|
if(isset($options['signature']) && $options['signature'] == 1)
{
$optionschecked['signature'] = 'checked="checked"';
| if(isset($options['signature']) && $options['signature'] == 1)
{
$optionschecked['signature'] = 'checked="checked"';
|
| Zeile 706 | Zeile 711 |
|---|
{
$optionschecked['readreceipt'] = 'checked="checked"';
}
|
{
$optionschecked['readreceipt'] = 'checked="checked"';
}
|
$to = htmlspecialchars_uni($mybb->get_input('to'));
$bcc = htmlspecialchars_uni($mybb->get_input('bcc'));
| $to = htmlspecialchars_uni(implode(', ', array_unique(array_map('trim', explode(',', $mybb->get_input('to'))))));
$bcc = htmlspecialchars_uni(implode(', ', array_unique(array_map('trim', explode(',', $mybb->get_input('bcc'))))));
|
}
$preview = '';
// Preview
if(!empty($mybb->input['preview']))
{
|
}
$preview = '';
// Preview
if(!empty($mybb->input['preview']))
{
|
$options = $mybb->get_input('options', 2);
| $options = $mybb->get_input('options', MyBB::INPUT_ARRAY);
|
$query = $db->query("
SELECT u.username AS userusername, u.*, f.*
FROM ".TABLE_PREFIX."users u
| $query = $db->query("
SELECT u.username AS userusername, u.*, f.*
FROM ".TABLE_PREFIX."users u
|
| Zeile 728 | Zeile 733 |
|---|
$post['postusername'] = $mybb->user['username'];
$post['message'] = $mybb->get_input('message');
$post['subject'] = htmlspecialchars_uni($mybb->get_input('subject'));
|
$post['postusername'] = $mybb->user['username'];
$post['message'] = $mybb->get_input('message');
$post['subject'] = htmlspecialchars_uni($mybb->get_input('subject'));
|
$post['icon'] = $mybb->get_input('icon', 1);
| $post['icon'] = $mybb->get_input('icon', MyBB::INPUT_INT);
|
if(!isset($options['disablesmilies']))
{
$options['disablesmilies'] = 0;
| if(!isset($options['disablesmilies']))
{
$options['disablesmilies'] = 0;
|
| Zeile 768 | Zeile 773 |
|---|
{
// New PM, so load default settings
if($mybb->user['signature'] != '')
|
{
// New PM, so load default settings
if($mybb->user['signature'] != '')
|
{
| {
|
$optionschecked['signature'] = 'checked="checked"';
}
if($mybb->usergroup['cantrackpms'] == 1)
| $optionschecked['signature'] = 'checked="checked"';
}
if($mybb->usergroup['cantrackpms'] == 1)
|
| Zeile 785 | Zeile 790 |
|---|
SELECT pm.*, u.username AS quotename
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=pm.fromid)
|
SELECT pm.*, u.username AS quotename
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=pm.fromid)
|
WHERE pm.pmid='".$mybb->get_input('pmid', 1)."' AND pm.uid='{$mybb->user['uid']}'
| WHERE pm.pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."' AND pm.uid='{$mybb->user['uid']}'
|
");
$pm = $db->fetch_array($query);
| ");
$pm = $db->fetch_array($query);
|
| Zeile 836 | Zeile 841 |
|---|
if(!empty($recipientids))
{
$query = $db->simple_select("users", "uid, username", "uid IN ({$recipientids})");
|
if(!empty($recipientids))
{
$query = $db->simple_select("users", "uid, username", "uid IN ({$recipientids})");
|
while($user = $db->fetch_array($query))
{
| while($user = $db->fetch_array($query))
{
|
if(isset($recipients['bcc']) && is_array($recipients['bcc']) && in_array($user['uid'], $recipient_list['bcc']))
{
$bcc .= htmlspecialchars_uni($user['username']).', ';
| if(isset($recipients['bcc']) && is_array($recipients['bcc']) && in_array($user['uid'], $recipient_list['bcc']))
{
$bcc .= htmlspecialchars_uni($user['username']).', ';
|
| Zeile 906 | Zeile 911 |
|---|
{
$to .= $comma.htmlspecialchars_uni($user['username']);
$comma = $lang->comma;
|
{
$to .= $comma.htmlspecialchars_uni($user['username']);
$comma = $lang->comma;
|
}
}
| }
}
|
}
}
// New PM with recipient preset
|
}
}
// New PM with recipient preset
|
if($mybb->get_input('uid', 1) && empty($mybb->input['preview']))
| if($mybb->get_input('uid', MyBB::INPUT_INT) && empty($mybb->input['preview']))
|
{
|
{
|
$query = $db->simple_select('users', 'username', "uid='".$mybb->get_input('uid', 1)."'");
| $query = $db->simple_select('users', 'username', "uid='".$mybb->get_input('uid', MyBB::INPUT_INT)."'");
|
$to = htmlspecialchars_uni($db->fetch_field($query, 'username')).', ';
}
| $to = htmlspecialchars_uni($db->fetch_field($query, 'username')).', ';
}
|
| Zeile 926 | Zeile 931 |
|---|
if($send_errors)
{
|
if($send_errors)
{
|
$to = htmlspecialchars_uni($mybb->get_input('to'));
$bcc = htmlspecialchars_uni($mybb->get_input('bcc'));
| $to = htmlspecialchars_uni(implode(', ', array_unique(array_map('trim', explode(',', $mybb->get_input('to'))))));
$bcc = htmlspecialchars_uni(implode(', ', array_unique(array_map('trim', explode(',', $mybb->get_input('bcc'))))));
|
}
// Load the auto complete javascript if it is enabled.
eval("\$autocompletejs = \"".$templates->get("private_send_autocomplete")."\";");
|
}
// Load the auto complete javascript if it is enabled.
eval("\$autocompletejs = \"".$templates->get("private_send_autocomplete")."\";");
|
$pmid = $mybb->get_input('pmid', 1);
| $pmid = $mybb->get_input('pmid', MyBB::INPUT_INT);
|
$do = $mybb->get_input('do');
if($do != "forward" && $do != "reply" && $do != "replyall")
{
| $do = $mybb->get_input('do');
if($do != "forward" && $do != "reply" && $do != "replyall")
{
|
| Zeile 967 | Zeile 972 |
|---|
{
$plugins->run_hooks("private_read");
|
{
$plugins->run_hooks("private_read");
|
$pmid = $mybb->get_input('pmid', 1);
| $pmid = $mybb->get_input('pmid', MyBB::INPUT_INT);
|
$query = $db->query("
SELECT pm.*, u.*, f.*
|
$query = $db->query("
SELECT pm.*, u.*, f.*
|
| Zeile 981 | Zeile 986 |
|---|
if(!$pm)
{
error($lang->error_invalidpm);
|
if(!$pm)
{
error($lang->error_invalidpm);
|
}
| }
|
if($pm['folder'] == 3)
{
header("Location: private.php?action=send&pmid={$pm['pmid']}");
| if($pm['folder'] == 3)
{
header("Location: private.php?action=send&pmid={$pm['pmid']}");
|
| Zeile 1006 | Zeile 1011 |
|---|
if($pm['receipt'] == 1)
{
|
if($pm['receipt'] == 1)
{
|
if($mybb->usergroup['candenypmreceipts'] == 1 && $mybb->get_input('denyreceipt', 1) == 1)
| if($mybb->usergroup['candenypmreceipts'] == 1 && $mybb->get_input('denyreceipt', MyBB::INPUT_INT) == 1)
|
{
$receiptadd = 0;
}
| {
$receiptadd = 0;
}
|
| Zeile 1049 | Zeile 1054 |
|---|
{
$reply_string = $lang->you_replied_on;
$reply_date = my_date('relative', $pm['statustime']);
|
{
$reply_string = $lang->you_replied_on;
$reply_date = my_date('relative', $pm['statustime']);
|
if((TIME_NOW - $pm['statustime']) < 3600)
{
|
if((TIME_NOW - $pm['statustime']) < 3600)
{
|
// Relative string for the first hour
$reply_string = $lang->you_replied;
}
| // Relative string for the first hour
$reply_string = $lang->you_replied;
}
|
| Zeile 1060 | Zeile 1065 |
|---|
eval("\$action_time = \"".$templates->get("private_read_action")."\";");
}
else if($pm['status'] == 4 && $pm['statustime'])
|
eval("\$action_time = \"".$templates->get("private_read_action")."\";");
}
else if($pm['status'] == 4 && $pm['statustime'])
|
{
| {
|
$forward_string = $lang->you_forwarded_on;
$forward_date = my_date('relative', $pm['statustime']);
| $forward_string = $lang->you_forwarded_on;
$forward_date = my_date('relative', $pm['statustime']);
|
| Zeile 1068 | Zeile 1073 |
|---|
{
$forward_string = $lang->you_forwarded;
}
|
{
$forward_string = $lang->you_forwarded;
}
|
|
|
$actioned_on = $lang->sprintf($forward_string, $forward_date);
eval("\$action_time = \"".$templates->get("private_read_action")."\";");
}
| $actioned_on = $lang->sprintf($forward_string, $forward_date);
eval("\$action_time = \"".$templates->get("private_read_action")."\";");
}
|
| Zeile 1077 | Zeile 1082 |
|---|
$pm['subject'] = htmlspecialchars_uni($parser->parse_badwords($pm['subject']));
if($pm['fromid'] == 0)
|
$pm['subject'] = htmlspecialchars_uni($parser->parse_badwords($pm['subject']));
if($pm['fromid'] == 0)
|
{
| {
|
$pm['username'] = $lang->mybb_engine;
}
if(!$pm['username'])
{
$pm['username'] = $lang->na;
|
$pm['username'] = $lang->mybb_engine;
}
if(!$pm['username'])
{
$pm['username'] = $lang->na;
|
}
| }
|
// Fetch the recipients for this message
$pm['recipients'] = my_unserialize($pm['recipients']);
if(is_array($pm['recipients']['to']))
|
// Fetch the recipients for this message
$pm['recipients'] = my_unserialize($pm['recipients']);
if(is_array($pm['recipients']['to']))
|
{
| {
|
$uid_sql = implode(',', $pm['recipients']['to']);
}
else
|
$uid_sql = implode(',', $pm['recipients']['to']);
}
else
|
{
| {
|
$uid_sql = $pm['toid'];
$pm['recipients']['to'] = array($pm['toid']);
|
$uid_sql = $pm['toid'];
$pm['recipients']['to'] = array($pm['toid']);
|
}
| }
|
$show_bcc = 0;
// If we have any BCC recipients and this user is an Administrator, add them on to the query
| $show_bcc = 0;
// If we have any BCC recipients and this user is an Administrator, add them on to the query
|
| Zeile 1109 | Zeile 1114 |
|---|
}
// Fetch recipient names from the database
|
}
// Fetch recipient names from the database
|
$bcc_recipients = $to_recipients = array();
| $bcc_recipients = $to_recipients = $bcc_form_val = array();
|
$query = $db->simple_select('users', 'uid, username', "uid IN ({$uid_sql})");
while($recipient = $db->fetch_array($query))
{
// User is a BCC recipient
|
$query = $db->simple_select('users', 'uid, username', "uid IN ({$uid_sql})");
while($recipient = $db->fetch_array($query))
{
// User is a BCC recipient
|
| | $recipient['username'] = htmlspecialchars_uni($recipient['username']);
|
if($show_bcc && in_array($recipient['uid'], $pm['recipients']['bcc']))
{
$bcc_recipients[] = build_profile_link($recipient['username'], $recipient['uid']);
|
if($show_bcc && in_array($recipient['uid'], $pm['recipients']['bcc']))
{
$bcc_recipients[] = build_profile_link($recipient['username'], $recipient['uid']);
|
| | $bcc_form_val[] = $recipient['username'];
|
}
// User is a normal recipient
else if(in_array($recipient['uid'], $pm['recipients']['to']))
|
}
// User is a normal recipient
else if(in_array($recipient['uid'], $pm['recipients']['to']))
|
{
| {
|
$to_recipients[] = build_profile_link($recipient['username'], $recipient['uid']);
}
|
$to_recipients[] = build_profile_link($recipient['username'], $recipient['uid']);
}
|
}
| }
|
$bcc = '';
if(count($bcc_recipients) > 0)
|
$bcc = '';
if(count($bcc_recipients) > 0)
|
{
| {
|
$bcc_recipients = implode(', ', $bcc_recipients);
|
$bcc_recipients = implode(', ', $bcc_recipients);
|
| | $bcc_form_val = implode(',', $bcc_form_val);
|
eval("\$bcc = \"".$templates->get("private_read_bcc")."\";");
|
eval("\$bcc = \"".$templates->get("private_read_bcc")."\";");
|
| | }
else
{
$bcc_form_val = '';
|
}
$replyall = false;
| }
$replyall = false;
|
| Zeile 1140 | Zeile 1152 |
|---|
if(count($to_recipients) > 0)
{
|
if(count($to_recipients) > 0)
{
|
$to_recipients = implode(", ", $to_recipients);
| $to_recipients = implode($lang->comma, $to_recipients);
|
}
else
{
| }
else
{
|
| Zeile 1187 | Zeile 1199 |
|---|
if($mybb->user['uid'] == $pm['fromid'])
{
$to = htmlspecialchars_uni($mybb->user['username']);
|
if($mybb->user['uid'] == $pm['fromid'])
{
$to = htmlspecialchars_uni($mybb->user['username']);
|
}
else
{
| }
else
{
|
$query = $db->simple_select('users', 'username', "uid='{$pm['fromid']}'");
$to = htmlspecialchars_uni($db->fetch_field($query, 'username'));
|
$query = $db->simple_select('users', 'username', "uid='{$pm['fromid']}'");
$to = htmlspecialchars_uni($db->fetch_field($query, 'username'));
|
}
| }
|
$private_send_tracking = '';
if($mybb->usergroup['cantrackpms'])
{
| $private_send_tracking = '';
if($mybb->usergroup['cantrackpms'])
{
|
| Zeile 1201 | Zeile 1213 |
|---|
eval("\$private_send_tracking = \"".$templates->get("private_send_tracking")."\";");
}
|
eval("\$private_send_tracking = \"".$templates->get("private_send_tracking")."\";");
}
|
|
$expaltext = (in_array("quickreply", $collapse)) ? "[+]" : "[-]";
|
eval("\$quickreply = \"".$templates->get("private_quickreply")."\";");
|
eval("\$quickreply = \"".$templates->get("private_quickreply")."\";");
|
}
$plugins->run_hooks("private_read_end");
| }
$plugins->run_hooks("private_read_end");
|
eval("\$read = \"".$templates->get("private_read")."\";");
output_page($read);
|
eval("\$read = \"".$templates->get("private_read")."\";");
output_page($read);
|
| Zeile 1217 | Zeile 1230 |
|---|
{
error_no_permission();
}
|
{
error_no_permission();
}
|
|
|
$plugins->run_hooks("private_tracking_start");
$readmessages = '';
$unreadmessages = '';
|
$plugins->run_hooks("private_tracking_start");
$readmessages = '';
$unreadmessages = '';
|
|
|
if(!$mybb->settings['postsperpage'] || (int)$mybb->settings['postsperpage'] < 1)
{
$mybb->settings['postsperpage'] = 20;
|
if(!$mybb->settings['postsperpage'] || (int)$mybb->settings['postsperpage'] < 1)
{
$mybb->settings['postsperpage'] = 20;
|
}
| }
|
// Figure out if we need to display multiple pages.
$perpage = $mybb->settings['postsperpage'];
$query = $db->simple_select("privatemessages", "COUNT(pmid) as readpms", "receipt='2' AND folder!='3' AND status!='0' AND fromid='".$mybb->user['uid']."'");
$postcount = $db->fetch_field($query, "readpms");
|
// Figure out if we need to display multiple pages.
$perpage = $mybb->settings['postsperpage'];
$query = $db->simple_select("privatemessages", "COUNT(pmid) as readpms", "receipt='2' AND folder!='3' AND status!='0' AND fromid='".$mybb->user['uid']."'");
$postcount = $db->fetch_field($query, "readpms");
|
$page = $mybb->get_input('read_page', 1);
|
$page = $mybb->get_input('read_page', MyBB::INPUT_INT);
|
$pages = $postcount / $perpage;
$pages = ceil($pages);
if($mybb->get_input('read_page') == "last")
|
$pages = $postcount / $perpage;
$pages = ceil($pages);
if($mybb->get_input('read_page') == "last")
|
{
$page = $pages;
}
if($page > $pages || $page <= 0)
{
$page = 1;
}
if($page)
{
$start = ($page-1) * $perpage;
}
else
{
$start = 0;
$page = 1;
}
| {
$page = $pages;
}
if($page > $pages || $page <= 0)
{
$page = 1;
}
if($page)
{
$start = ($page-1) * $perpage;
}
else
{
$start = 0;
$page = 1;
}
|
$read_multipage = multipage($postcount, $perpage, $page, "private.php?action=tracking&read_page={page}");
$query = $db->query("
| $read_multipage = multipage($postcount, $perpage, $page, "private.php?action=tracking&read_page={page}");
$query = $db->query("
|
| Zeile 1270 | Zeile 1283 |
|---|
while($readmessage = $db->fetch_array($query))
{
$readmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($readmessage['subject']));
|
while($readmessage = $db->fetch_array($query))
{
$readmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($readmessage['subject']));
|
| | $readmessage['tousername'] = htmlspecialchars_uni($readmessage['tousername']);
|
$readmessage['profilelink'] = build_profile_link($readmessage['tousername'], $readmessage['toid']);
$readdate = my_date('relative', $readmessage['readtime']);
eval("\$readmessages .= \"".$templates->get("private_tracking_readmessage")."\";");
| $readmessage['profilelink'] = build_profile_link($readmessage['tousername'], $readmessage['toid']);
$readdate = my_date('relative', $readmessage['readtime']);
eval("\$readmessages .= \"".$templates->get("private_tracking_readmessage")."\";");
|
| Zeile 1289 | Zeile 1303 |
|---|
$query = $db->simple_select("privatemessages", "COUNT(pmid) as unreadpms", "receipt='1' AND folder!='3' AND status='0' AND fromid='".$mybb->user['uid']."'");
$postcount = $db->fetch_field($query, "unreadpms");
|
$query = $db->simple_select("privatemessages", "COUNT(pmid) as unreadpms", "receipt='1' AND folder!='3' AND status='0' AND fromid='".$mybb->user['uid']."'");
$postcount = $db->fetch_field($query, "unreadpms");
|
$page = $mybb->get_input('unread_page', 1);
| $page = $mybb->get_input('unread_page', MyBB::INPUT_INT);
|
$pages = $postcount / $perpage;
$pages = ceil($pages);
| $pages = $postcount / $perpage;
$pages = ceil($pages);
|
| Zeile 1326 | Zeile 1340 |
|---|
while($unreadmessage = $db->fetch_array($query))
{
$unreadmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($unreadmessage['subject']));
|
while($unreadmessage = $db->fetch_array($query))
{
$unreadmessage['subject'] = htmlspecialchars_uni($parser->parse_badwords($unreadmessage['subject']));
|
| | $unreadmessage['tousername'] = htmlspecialchars_uni($unreadmessage['tousername']);
|
$unreadmessage['profilelink'] = build_profile_link($unreadmessage['tousername'], $unreadmessage['toid']);
$senddate = my_date('relative', $unreadmessage['dateline']);
eval("\$unreadmessages .= \"".$templates->get("private_tracking_unreadmessage")."\";");
| $unreadmessage['profilelink'] = build_profile_link($unreadmessage['tousername'], $unreadmessage['toid']);
$senddate = my_date('relative', $unreadmessage['dateline']);
eval("\$unreadmessages .= \"".$templates->get("private_tracking_unreadmessage")."\";");
|
| Zeile 1358 | Zeile 1373 |
|---|
if(!empty($mybb->input['stoptracking']))
{
|
if(!empty($mybb->input['stoptracking']))
{
|
$mybb->input['readcheck'] = $mybb->get_input('readcheck', 2);
| $mybb->input['readcheck'] = $mybb->get_input('readcheck', MyBB::INPUT_ARRAY);
|
if(!empty($mybb->input['readcheck']))
|
if(!empty($mybb->input['readcheck']))
|
{
| {
|
foreach($mybb->input['readcheck'] as $key => $val)
|
foreach($mybb->input['readcheck'] as $key => $val)
|
{
$sql_array = array(
"receipt" => 0
);
$db->update_query("privatemessages", $sql_array, "pmid=".(int)$key." AND fromid=".$mybb->user['uid']);
}
}
| {
$sql_array = array(
"receipt" => 0
);
$db->update_query("privatemessages", $sql_array, "pmid=".(int)$key." AND fromid=".$mybb->user['uid']);
}
}
|
$plugins->run_hooks("private_do_tracking_end");
redirect("private.php?action=tracking", $lang->redirect_pmstrackingstopped);
}
elseif(!empty($mybb->input['stoptrackingunread']))
{
|
$plugins->run_hooks("private_do_tracking_end");
redirect("private.php?action=tracking", $lang->redirect_pmstrackingstopped);
}
elseif(!empty($mybb->input['stoptrackingunread']))
{
|
$mybb->input['unreadcheck'] = $mybb->get_input('unreadcheck', 2);
| $mybb->input['unreadcheck'] = $mybb->get_input('unreadcheck', MyBB::INPUT_ARRAY);
|
if(!empty($mybb->input['unreadcheck']))
{
foreach($mybb->input['unreadcheck'] as $key => $val)
| if(!empty($mybb->input['unreadcheck']))
{
foreach($mybb->input['unreadcheck'] as $key => $val)
|
| Zeile 1390 | Zeile 1405 |
|---|
}
elseif(!empty($mybb->input['cancel']))
{
|
}
elseif(!empty($mybb->input['cancel']))
{
|
$mybb->input['unreadcheck'] = $mybb->get_input('unreadcheck', 2);
| $mybb->input['unreadcheck'] = $mybb->get_input('unreadcheck', MyBB::INPUT_ARRAY);
|
if(!empty($mybb->input['unreadcheck']))
{
foreach($mybb->input['unreadcheck'] as $pmid => $val)
{
$pmids[$pmid] = (int)$pmid;
|
if(!empty($mybb->input['unreadcheck']))
{
foreach($mybb->input['unreadcheck'] as $pmid => $val)
{
$pmids[$pmid] = (int)$pmid;
|
}
| }
|
$pmids = implode(",", $pmids);
$query = $db->simple_select("privatemessages", "uid", "pmid IN ($pmids) AND fromid='".$mybb->user['uid']."'");
|
$pmids = implode(",", $pmids);
$query = $db->simple_select("privatemessages", "uid", "pmid IN ($pmids) AND fromid='".$mybb->user['uid']."'");
|
| Zeile 1464 | Zeile 1479 |
|---|
$fid = "new$i";
$foldername = '';
eval("\$newfolders .= \"".$templates->get("private_folders_folder")."\";");
|
$fid = "new$i";
$foldername = '';
eval("\$newfolders .= \"".$templates->get("private_folders_folder")."\";");
|
}
$plugins->run_hooks("private_folders_end");
| }
$plugins->run_hooks("private_folders_end");
|
eval("\$folders = \"".$templates->get("private_folders")."\";");
output_page($folders);
}
| eval("\$folders = \"".$templates->get("private_folders")."\";");
output_page($folders);
}
|
| Zeile 1482 | Zeile 1497 |
|---|
$highestid = 2;
$folders = '';
$donefolders = array();
|
$highestid = 2;
$folders = '';
$donefolders = array();
|
$mybb->input['folder'] = $mybb->get_input('folder', 2);
| $mybb->input['folder'] = $mybb->get_input('folder', MyBB::INPUT_ARRAY);
|
foreach($mybb->input['folder'] as $key => $val)
{
if(empty($donefolders[$val]) )// Probably was a check for duplicate folder names, but doesn't seem to be used now
| foreach($mybb->input['folder'] as $key => $val)
{
if(empty($donefolders[$val]) )// Probably was a check for duplicate folder names, but doesn't seem to be used now
|
| Zeile 1611 | Zeile 1626 |
|---|
$plugins->run_hooks("private_do_empty_start");
$emptyq = '';
|
$plugins->run_hooks("private_do_empty_start");
$emptyq = '';
|
$mybb->input['empty'] = $mybb->get_input('empty', 2);
| $mybb->input['empty'] = $mybb->get_input('empty', MyBB::INPUT_ARRAY);
|
$keepunreadq = '';
|
$keepunreadq = '';
|
if($mybb->get_input('keepunread', 1) == 1)
| if($mybb->get_input('keepunread', MyBB::INPUT_INT) == 1)
|
{
$keepunreadq = " AND status!='0'";
}
| {
$keepunreadq = " AND status!='0'";
}
|
| Zeile 1658 | Zeile 1673 |
|---|
}
elseif(!empty($mybb->input['moveto']))
{
|
}
elseif(!empty($mybb->input['moveto']))
{
|
$mybb->input['check'] = $mybb->get_input('check', 2);
| $mybb->input['check'] = $mybb->get_input('check', MyBB::INPUT_ARRAY);
|
if(!empty($mybb->input['check']))
{
foreach($mybb->input['check'] as $key => $val)
| if(!empty($mybb->input['check']))
{
foreach($mybb->input['check'] as $key => $val)
|
| Zeile 1674 | Zeile 1689 |
|---|
if(!empty($mybb->input['fromfid']))
{
|
if(!empty($mybb->input['fromfid']))
{
|
redirect("private.php?fid=".$mybb->get_input('fromfid', 1), $lang->redirect_pmsmoved);
| redirect("private.php?fid=".$mybb->get_input('fromfid', MyBB::INPUT_INT), $lang->redirect_pmsmoved);
|
}
else
{
| }
else
{
|
| Zeile 1683 | Zeile 1698 |
|---|
}
elseif(!empty($mybb->input['delete']))
{
|
}
elseif(!empty($mybb->input['delete']))
{
|
$mybb->input['check'] = $mybb->get_input('check', 2);
| $mybb->input['check'] = $mybb->get_input('check', MyBB::INPUT_ARRAY);
|
if(!empty($mybb->input['check']))
{
$pmssql = '';
| if(!empty($mybb->input['check']))
{
$pmssql = '';
|
| Zeile 1725 | Zeile 1740 |
|---|
if(!empty($mybb->input['fromfid']))
{
|
if(!empty($mybb->input['fromfid']))
{
|
redirect("private.php?fid=".$mybb->get_input('fromfid', 1), $lang->redirect_pmsdeleted);
| redirect("private.php?fid=".$mybb->get_input('fromfid', MyBB::INPUT_INT), $lang->redirect_pmsdeleted);
|
}
else
{
| }
else
{
|
| Zeile 1741 | Zeile 1756 |
|---|
$plugins->run_hooks("private_delete_start");
|
$plugins->run_hooks("private_delete_start");
|
$query = $db->simple_select("privatemessages", "*", "pmid='".$mybb->get_input('pmid', 1)."' AND uid='".$mybb->user['uid']."' AND folder='4'", array('order_by' => 'pmid'));
| $query = $db->simple_select("privatemessages", "*", "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."' AND uid='".$mybb->user['uid']."' AND folder='4'", array('order_by' => 'pmid'));
|
if($db->num_rows($query) == 1)
{
|
if($db->num_rows($query) == 1)
{
|
$db->delete_query("privatemessages", "pmid='".$mybb->get_input('pmid', 1)."'");
| $db->delete_query("privatemessages", "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."'");
|
}
else
{
| }
else
{
|
| Zeile 1752 | Zeile 1767 |
|---|
"folder" => 4,
"deletetime" => TIME_NOW
);
|
"folder" => 4,
"deletetime" => TIME_NOW
);
|
$db->update_query("privatemessages", $sql_array, "pmid='".$mybb->get_input('pmid', 1)."' AND uid='".$mybb->user['uid']."'");
| $db->update_query("privatemessages", $sql_array, "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."' AND uid='".$mybb->user['uid']."'");
|
}
// Update PM count
| }
// Update PM count
|
| Zeile 1800 | Zeile 1815 |
|---|
$plugins->run_hooks("private_do_export_start");
|
$plugins->run_hooks("private_do_export_start");
|
$lang->private_messages_for = $lang->sprintf($lang->private_messages_for, $mybb->user['username']);
| $lang->private_messages_for = $lang->sprintf($lang->private_messages_for, htmlspecialchars_uni($mybb->user['username']));
|
$exdate = my_date($mybb->settings['dateformat'], TIME_NOW, 0, 0);
$extime = my_date($mybb->settings['timeformat'], TIME_NOW, 0, 0);
$lang->exported_date = $lang->sprintf($lang->exported_date, $exdate, $extime);
| $exdate = my_date($mybb->settings['dateformat'], TIME_NOW, 0, 0);
$extime = my_date($mybb->settings['timeformat'], TIME_NOW, 0, 0);
$lang->exported_date = $lang->sprintf($lang->exported_date, $exdate, $extime);
|
| Zeile 1812 | Zeile 1827 |
|---|
$foldersexploded[$key] = implode("**", $folderinfo);
}
|
$foldersexploded[$key] = implode("**", $folderinfo);
}
|
if($mybb->get_input('pmid', 1))
| if($mybb->get_input('pmid', MyBB::INPUT_INT))
|
{
|
{
|
$wsql = "pmid='".$mybb->get_input('pmid', 1)."' AND uid='".$mybb->user['uid']."'";
| $wsql = "pmid='".$mybb->get_input('pmid', MyBB::INPUT_INT)."' AND uid='".$mybb->user['uid']."'";
|
}
else
{
|
}
else
{
|
if($mybb->get_input('daycut', 1) && ($mybb->get_input('dayway') != "disregard"))
| if($mybb->get_input('daycut', MyBB::INPUT_INT) && ($mybb->get_input('dayway') != "disregard"))
|
{
|
{
|
$datecut = TIME_NOW-($mybb->get_input('daycut', 1) * 86400);
| $datecut = TIME_NOW-($mybb->get_input('daycut', MyBB::INPUT_INT) * 86400);
|
$wsql = "pm.dateline";
if($mybb->get_input('dayway') == "older")
{
| $wsql = "pm.dateline";
if($mybb->get_input('dayway') == "older")
{
|
| Zeile 1837 | Zeile 1852 |
|---|
$wsql = "1=1";
}
|
$wsql = "1=1";
}
|
$mybb->input['exportfolders'] = $mybb->get_input('exportfolders', 2);
| $mybb->input['exportfolders'] = $mybb->get_input('exportfolders', MyBB::INPUT_ARRAY);
|
if(!empty($mybb->input['exportfolders']))
{
$folderlst = '';
| if(!empty($mybb->input['exportfolders']))
{
$folderlst = '';
|
| Zeile 1872 | Zeile 1887 |
|---|
error($lang->error_pmnoarchivefolders);
}
|
error($lang->error_pmnoarchivefolders);
}
|
if($mybb->get_input('exportunread', 1) != 1)
| if($mybb->get_input('exportunread', MyBB::INPUT_INT) != 1)
|
{
$wsql .= " AND pm.status!='0'";
}
| {
$wsql .= " AND pm.status!='0'";
}
|
| Zeile 1948 | Zeile 1963 |
|---|
$message['subject'] = $parser->parse_badwords($message['subject']);
if($message['folder'] != "3")
{
|
$message['subject'] = $parser->parse_badwords($message['subject']);
if($message['folder'] != "3")
{
|
$senddate = my_date($mybb->settings['dateformat'], $message['dateline']);
$sendtime = my_date($mybb->settings['timeformat'], $message['dateline']);
| $senddate = my_date($mybb->settings['dateformat'], $message['dateline'], "", false);
$sendtime = my_date($mybb->settings['timeformat'], $message['dateline'], "", false);
|
$senddate .= " $lang->at $sendtime";
}
else
| $senddate .= " $lang->at $sendtime";
}
else
|
| Zeile 1981 | Zeile 1996 |
|---|
if($mybb->input['exporttype'] == "csv")
{
|
if($mybb->input['exporttype'] == "csv")
{
|
$message['message'] = addslashes($message['message']);
$message['subject'] = addslashes($message['subject']);
$message['tousername'] = addslashes($message['tousername']);
$message['fromusername'] = addslashes($message['fromusername']);
| $message['message'] = my_escape_csv($message['message']);
$message['subject'] = my_escape_csv($message['subject']);
$message['tousername'] = my_escape_csv($message['tousername']);
$message['fromusername'] = my_escape_csv($message['fromusername']);
|
}
if(empty($donefolder[$message['folder']]))
| }
if(empty($donefolder[$message['folder']]))
|
| Zeile 2006 | Zeile 2021 |
|---|
}
else
{
|
}
else
{
|
$foldername = addslashes($folderinfo[1]);
| $foldername = my_escape_csv($folderinfo[1]);
|
}
$donefolder[$message['folder']] = 1;
}
| }
$donefolder[$message['folder']] = 1;
}
|
| Zeile 2027 | Zeile 2042 |
|---|
$plugins->run_hooks("private_do_export_end");
eval("\$archived = \"".$templates->get("private_archive_".$mybb->input['exporttype'], 1, 0)."\";");
|
$plugins->run_hooks("private_do_export_end");
eval("\$archived = \"".$templates->get("private_archive_".$mybb->input['exporttype'], 1, 0)."\";");
|
if($mybb->get_input('deletepms', 1) == 1)
| if($mybb->get_input('deletepms', MyBB::INPUT_INT) == 1)
|
{ // delete the archived pms
$db->delete_query("privatemessages", "pmid IN ('0'$ids)");
// Update PM count
| { // delete the archived pms
$db->delete_query("privatemessages", "pmid IN ('0'$ids)");
// Update PM count
|
| Zeile 2060 | Zeile 2075 |
|---|
}
else
{
|
}
else
{
|
| | echo "\xEF\xBB\xBF"; // UTF-8 BOM
|
echo $archived;
}
}
| echo $archived;
}
}
|
| Zeile 2126 | Zeile 2142 |
|---|
// Do Multi Pages
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "uid='".$mybb->user['uid']."' AND folder='$folder'");
|
// Do Multi Pages
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "uid='".$mybb->user['uid']."' AND folder='$folder'");
|
$pmscount = $db->fetch_array($query);
| $pmscount = $db->fetch_field($query, "total");
|
if(!$mybb->settings['threadsperpage'] || (int)$mybb->settings['threadsperpage'] < 1)
{
|
if(!$mybb->settings['threadsperpage'] || (int)$mybb->settings['threadsperpage'] < 1)
{
|
| Zeile 2134 | Zeile 2150 |
|---|
}
$perpage = $mybb->settings['threadsperpage'];
|
}
$perpage = $mybb->settings['threadsperpage'];
|
$page = $mybb->get_input('page', 1);
| $page = $mybb->get_input('page', MyBB::INPUT_INT);
|
if($page > 0)
{
$start = ($page-1) *$perpage;
|
if($page > 0)
{
$start = ($page-1) *$perpage;
|
| | $pages = ceil($pmscount / $perpage);
if($page > $pages)
{
$start = 0;
$page = 1;
}
|
}
else
{
| }
else
{
|
| Zeile 2157 | Zeile 2179 |
|---|
if($mybb->input['order'] || ($sortby && $sortby != "dateline"))
{
|
if($mybb->input['order'] || ($sortby && $sortby != "dateline"))
{
|
$page_url = "private.php?fid={$folder}&sortby={$sortby}&order={$mybb->input['order']}";
| $page_url = "private.php?fid={$folder}&sortby={$sortby}&order={$sortordernow}";
|
}
else
{
$page_url = "private.php?fid={$folder}";
}
|
}
else
{
$page_url = "private.php?fid={$folder}";
}
|
$multipage = multipage($pmscount['total'], $perpage, $page, $page_url);
| $multipage = multipage($pmscount, $perpage, $page, $page_url);
|
$messagelist = '';
$icon_cache = $cache->read("posticons");
| $messagelist = '';
$icon_cache = $cache->read("posticons");
|
| Zeile 2188 | Zeile 2210 |
|---|
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=pm.toid)
WHERE pm.folder='{$folder}' AND pm.uid='{$mybb->user['uid']}'
|
FROM ".TABLE_PREFIX."privatemessages pm
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=pm.toid)
WHERE pm.folder='{$folder}' AND pm.uid='{$mybb->user['uid']}'
|
ORDER BY {$u}{$sortfield} {$mybb->input['order']}
| ORDER BY {$u}{$sortfield} {$sortordernow}
|
LIMIT {$start}, {$perpage}
");
while($row = $db->fetch_array($users_query))
| LIMIT {$start}, {$perpage}
");
while($row = $db->fetch_array($users_query))
|
| Zeile 2255 | Zeile 2277 |
|---|
{
while($message = $db->fetch_array($query))
{
|
{
while($message = $db->fetch_array($query))
{
|
$msgalt = $msgsuffix = $msgprefix = '';
| $msgalt = $msgstatus = '';
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
// Determine Folder Icon
if($message['status'] == 0)
{
|
$msgfolder = 'new_pm.png';
| $msgstatus = 'new_pm';
|
$msgalt = $lang->new_pm;
|
$msgalt = $lang->new_pm;
|
$msgprefix = "<strong>";
$msgsuffix = "</strong>";
| |
}
|
}
|
elseif($message['status'] == 1)
| else if($message['status'] == 1)
|
{
|
{
|
$msgfolder = 'old_pm.png';
| $msgstatus = 'old_pm';
|
$msgalt = $lang->old_pm;
}
|
$msgalt = $lang->old_pm;
}
|
elseif($message['status'] == 3)
| else if($message['status'] == 3)
|
{
|
{
|
$msgfolder = 're_pm.png';
| $msgstatus = 're_pm';
|
$msgalt = $lang->reply_pm;
}
|
$msgalt = $lang->reply_pm;
}
|
elseif($message['status'] == 4)
| else if($message['status'] == 4)
|
{
|
{
|
$msgfolder = 'fw_pm.png';
| $msgstatus = 'fw_pm';
|
$msgalt = $lang->fwd_pm;
}
| $msgalt = $lang->fwd_pm;
}
|
| Zeile 2285 | Zeile 2306 |
|---|
{ // Sent Items or Drafts Folder Check
$recipients = my_unserialize($message['recipients']);
$to_users = $bcc_users = '';
|
{ // Sent Items or Drafts Folder Check
$recipients = my_unserialize($message['recipients']);
$to_users = $bcc_users = '';
|
if(count($recipients['to']) > 1 || (count($recipients['to']) == 1 && isset($recipients['bcc']) && count($recipients['bcc']) > 0))
| if(isset($recipients['to']) && count($recipients['to']) > 1 || (isset($recipients['to']) && count($recipients['to']) == 1 && isset($recipients['bcc']) && count($recipients['bcc']) > 0))
|
{
foreach($recipients['to'] as $uid)
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
foreach($recipients['to'] as $uid)
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
|
| Zeile 2305 | Zeile 2327 |
|---|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
{
$profilelink = get_profile_link($uid);
$user = $cached_users[$uid];
|
| | $user['username'] = htmlspecialchars_uni($user['username']);
|
$username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
| $username = format_name($user['username'], $user['usergroup'], $user['displaygroup']);
if(!$user['username'])
{
|
| Zeile 2318 | Zeile 2341 |
|---|
}
else if($message['toid'])
{
|
}
else if($message['toid'])
{
|
$tofromusername = $message['tousername'];
| $tofromusername = htmlspecialchars_uni($message['tousername']);
|
$tofromuid = $message['toid'];
|
$tofromuid = $message['toid'];
|
}
| }
|
else
{
$tofromusername = $lang->not_sent;
| else
{
$tofromusername = $lang->not_sent;
|
| Zeile 2328 | Zeile 2351 |
|---|
}
else
{
|
}
else
{
|
$tofromusername = $message['fromusername'];
| $tofromusername = htmlspecialchars_uni($message['fromusername']);
|
$tofromuid = $message['fromid'];
if($tofromuid == 0)
{
| $tofromuid = $message['fromid'];
if($tofromuid == 0)
{
|
| Zeile 2392 | Zeile 2415 |
|---|
}
$pmspacebar = '';
|
}
$pmspacebar = '';
|
if($mybb->usergroup['pmquota'] != '0' && $mybb->usergroup['cancp'] != 1)
| if($mybb->usergroup['pmquota'] != 0)
|
{
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "uid='".$mybb->user['uid']."'");
$pmscount = $db->fetch_array($query);
| {
$query = $db->simple_select("privatemessages", "COUNT(*) AS total", "uid='".$mybb->user['uid']."'");
$pmscount = $db->fetch_array($query);
|
| Zeile 2456 | Zeile 2479 |
|---|
}
$limitwarning = '';
|
}
$limitwarning = '';
|
if($mybb->usergroup['pmquota'] != "0" && $pmscount['total'] >= $mybb->usergroup['pmquota'] && $mybb->usergroup['cancp'] != 1)
| if($mybb->usergroup['pmquota'] != 0 && $pmscount['total'] >= $mybb->usergroup['pmquota'])
|
{
eval("\$limitwarning = \"".$templates->get("private_limitwarning")."\";");
}
| {
eval("\$limitwarning = \"".$templates->get("private_limitwarning")."\";");
}
|