| Zeile 50 | Zeile 50 |
|---|
/**
* PM ID currently being manipulated by the datahandlers.
|
/**
* PM ID currently being manipulated by the datahandlers.
|
| | *
* @var int
|
*/
public $pmid = 0;
| */
public $pmid = 0;
|
| Zeile 62 | Zeile 64 |
|---|
/**
* Verifies a private message subject.
|
/**
* Verifies a private message subject.
|
*
| *
|
* @return boolean True when valid, false when invalid.
*/
function verify_subject()
{
$subject = &$this->data['subject'];
|
* @return boolean True when valid, false when invalid.
*/
function verify_subject()
{
$subject = &$this->data['subject'];
|
|
|
// Subject is over 85 characters, too long.
if(my_strlen($subject) > 85)
{
$this->set_error("too_long_subject");
|
// Subject is over 85 characters, too long.
if(my_strlen($subject) > 85)
{
$this->set_error("too_long_subject");
|
return false;
}
| return false;
}
|
// No subject, apply the default [no subject]
if(!trim_blank_chrs($subject))
{
$this->set_error("missing_subject");
|
// No subject, apply the default [no subject]
if(!trim_blank_chrs($subject))
{
$this->set_error("missing_subject");
|
return false;
}
| return false;
}
|
return true;
}
| return true;
}
|
| Zeile 92 | Zeile 94 |
|---|
function verify_message()
{
$message = &$this->data['message'];
|
function verify_message()
{
$message = &$this->data['message'];
|
|
|
// No message, return an error.
if(trim_blank_chrs($message) == '')
|
// No message, return an error.
if(trim_blank_chrs($message) == '')
|
{
| {
|
$this->set_error("missing_message");
return false;
}
|
$this->set_error("missing_message");
return false;
}
|
| |
// If the length of message is beyond SQL limitation for 'text' field
else if(strlen($message) > 65535)
{
$this->set_error("message_too_long", array('65535', strlen($message)));
return false;
}
|
return true;
}
| return true;
}
|
| Zeile 128 | Zeile 138 |
|---|
// Check if the sender is over their quota or not - if they are, disable draft sending
if(isset($pm['options']['savecopy']) && $pm['options']['savecopy'] != 0 && empty($pm['saveasdraft']))
{
|
// Check if the sender is over their quota or not - if they are, disable draft sending
if(isset($pm['options']['savecopy']) && $pm['options']['savecopy'] != 0 && empty($pm['saveasdraft']))
{
|
if($sender_permissions['pmquota'] != "0" && $sender['totalpms'] >= $sender_permissions['pmquota'] && $this->admin_override != true)
| if($sender_permissions['pmquota'] != 0 && $sender['totalpms'] >= $sender_permissions['pmquota'] && $this->admin_override != true)
|
{
$pm['options']['savecopy'] = 0;
}
| {
$pm['options']['savecopy'] = 0;
}
|
| Zeile 177 | Zeile 187 |
|---|
// No recipients? Skip query
if(empty($pm[$recipient_type]))
{
|
// No recipients? Skip query
if(empty($pm[$recipient_type]))
{
|
if($recipient_type == 'to' && !$pm['saveasdraft'])
| if($recipient_type == 'to' && empty($pm['saveasdraft']))
|
{
$this->set_error("no_recipients");
return false;
| {
$this->set_error("no_recipients");
return false;
|
| Zeile 218 | Zeile 228 |
|---|
foreach(array("toid", "bccid") as $recipient_type)
{
if(!isset($pm[$recipient_type]))
|
foreach(array("toid", "bccid") as $recipient_type)
{
if(!isset($pm[$recipient_type]))
|
{
| {
|
$pm[$recipient_type] = array();
}
if(!is_array($pm[$recipient_type]))
| $pm[$recipient_type] = array();
}
if(!is_array($pm[$recipient_type]))
|
| Zeile 283 | Zeile 293 |
|---|
}
// Now we're done with that we loop through each recipient
|
}
// Now we're done with that we loop through each recipient
|
| | $pm['recipients'] = array();
|
foreach($recipients as $user)
{
// Collect group permissions for this recipient.
| foreach($recipients as $user)
{
// Collect group permissions for this recipient.
|
| Zeile 291 | Zeile 302 |
|---|
// See if the sender is on the recipients ignore list and that either
// - admin_override is set or
// - sender is an administrator
|
// See if the sender is on the recipients ignore list and that either
// - admin_override is set or
// - sender is an administrator
|
if(($this->admin_override != true && $sender_permissions['cancp'] != 1) && $sender_permissions['canoverridepm'] != 1)
| if($this->admin_override != true && $sender_permissions['canoverridepm'] != 1)
|
{
if(!empty($user['ignorelist']) && strpos(','.$user['ignorelist'].',', ','.$pm['fromid'].',') !== false)
{
|
{
if(!empty($user['ignorelist']) && strpos(','.$user['ignorelist'].',', ','.$pm['fromid'].',') !== false)
{
|
$this->set_error('recipient_is_ignoring', array($user['username']));
| $this->set_error("recipient_is_ignoring", array(htmlspecialchars_uni($user['username'])));
|
}
// Is the recipient only allowing private messages from their buddy list?
|
}
// Is the recipient only allowing private messages from their buddy list?
|
if($mybb->settings['allowbuddyonly'] == 1 && $user['receivefrombuddy'] == 1 && !empty($user['buddylist']) && strpos(','.$user['buddylist'].',', ','.$pm['fromid'].',') === false)
| if(empty($pm['saveasdraft']) && $mybb->settings['allowbuddyonly'] == 1 && $user['receivefrombuddy'] == 1 && !empty($user['buddylist']) && strpos(','.$user['buddylist'].',', ','.$pm['fromid'].',') === false)
|
{
$this->set_error('recipient_has_buddy_only', array(htmlspecialchars_uni($user['username'])));
}
| {
$this->set_error('recipient_has_buddy_only', array(htmlspecialchars_uni($user['username'])));
}
|
| Zeile 307 | Zeile 318 |
|---|
// Can the recipient actually receive private messages based on their permissions or user setting?
if(($user['receivepms'] == 0 || $recipient_permissions['canusepms'] == 0) && empty($pm['saveasdraft']))
{
|
// Can the recipient actually receive private messages based on their permissions or user setting?
if(($user['receivepms'] == 0 || $recipient_permissions['canusepms'] == 0) && empty($pm['saveasdraft']))
{
|
$this->set_error("recipient_pms_disabled", array($user['username']));
| $this->set_error("recipient_pms_disabled", array(htmlspecialchars_uni($user['username'])));
|
return false;
}
}
// Check to see if the user has reached their private message quota - if they have, email them.
|
return false;
}
}
// Check to see if the user has reached their private message quota - if they have, email them.
|
if($recipient_permissions['pmquota'] != "0" && $user['totalpms'] >= $recipient_permissions['pmquota'] && $recipient_permissions['cancp'] != 1 && $sender_permissions['cancp'] != 1 && empty($pm['saveasdraft']) && !$this->admin_override)
| if($recipient_permissions['pmquota'] != 0 && $user['totalpms'] >= $recipient_permissions['pmquota'] && $sender_permissions['cancp'] != 1 && empty($pm['saveasdraft']) && !$this->admin_override)
|
{
if(trim($user['language']) != '' && $lang->language_exists($user['language']))
{
| {
if(trim($user['language']) != '' && $lang->language_exists($user['language']))
{
|
| Zeile 357 | Zeile 368 |
|---|
if($this->admin_override != true)
{
|
if($this->admin_override != true)
{
|
$this->set_error("recipient_reached_quota", array($user['username']));
| $this->set_error("recipient_reached_quota", array(htmlspecialchars_uni($user['username'])));
|
}
}
| }
}
|
| Zeile 384 | Zeile 395 |
|---|
/**
* Verify that the user is not flooding the system.
*
|
/**
* Verify that the user is not flooding the system.
*
|
* @return boolean True
| * @return boolean
|
*/
function verify_pm_flooding()
{
global $mybb, $db;
|
*/
function verify_pm_flooding()
{
global $mybb, $db;
|
$pm = &$this->data;
|
$pm = &$this->data;
|
// Check if post flooding is enabled within MyBB or if the admin override option is specified.
|
// Check if post flooding is enabled within MyBB or if the admin override option is specified.
|
if($mybb->settings['pmfloodsecs'] > 0 && $pm['fromid'] != 0 && $this->admin_override == false)
| if($mybb->settings['pmfloodsecs'] > 0 && $pm['fromid'] != 0 && $this->admin_override == false && !is_moderator(0, '', $pm['fromid']))
|
{
// Fetch the senders profile data.
$sender = get_user($pm['fromid']);
| {
// Fetch the senders profile data.
$sender = get_user($pm['fromid']);
|
| Zeile 403 | Zeile 414 |
|---|
$sender['lastpm'] = $db->fetch_field($query, "dateline");
// A little bit of calculation magic and moderator status checking.
|
$sender['lastpm'] = $db->fetch_field($query, "dateline");
// A little bit of calculation magic and moderator status checking.
|
if(TIME_NOW-$sender['lastpm'] <= $mybb->settings['pmfloodsecs'] && !is_moderator("", "", $pm['fromid']))
| if(TIME_NOW-$sender['lastpm'] <= $mybb->settings['pmfloodsecs'])
|
{
// Oops, user has been flooding - throw back error message.
$time_to_wait = ($mybb->settings['pmfloodsecs'] - (TIME_NOW-$sender['lastpm'])) + 1;
| {
// Oops, user has been flooding - throw back error message.
$time_to_wait = ($mybb->settings['pmfloodsecs'] - (TIME_NOW-$sender['lastpm'])) + 1;
|
| Zeile 424 | Zeile 435 |
|---|
/**
* Verifies if the various 'options' for sending PMs are valid.
|
/**
* Verifies if the various 'options' for sending PMs are valid.
|
*
* @return boolean True when valid, false when invalid.
| *
* @return boolean True when valid, false when invalid.
|
*/
function verify_options()
{
| */
function verify_options()
{
|
| Zeile 446 | Zeile 457 |
|---|
}
return true;
}
|
}
return true;
}
|
|
|
/**
* Validate an entire private message.
*
| /**
* Validate an entire private message.
*
|
| Zeile 468 | Zeile 479 |
|---|
$this->verify_sender();
|
$this->verify_sender();
|
$this->verify_recipient();
| $this->verify_recipient();
|
$this->verify_message();
|
$this->verify_message();
|
|
|
$this->verify_options();
$plugins->run_hooks("datahandler_pm_validate", $this);
// Choose the appropriate folder to save in.
|
$this->verify_options();
$plugins->run_hooks("datahandler_pm_validate", $this);
// Choose the appropriate folder to save in.
|
if(!empty($pm['saveasdraft']))
| if(!empty($pm['saveasdraft']))
|
{
$pm['folder'] = 3;
}
| {
$pm['folder'] = 3;
}
|
| Zeile 497 | Zeile 508 |
|---|
return true;
}
}
|
return true;
}
}
|
|
|
/**
* Insert a new private message.
*
| /**
* Insert a new private message.
*
|
| Zeile 511 | Zeile 522 |
|---|
if(!$this->get_validated())
{
die("The PM needs to be validated before inserting it into the DB.");
|
if(!$this->get_validated())
{
die("The PM needs to be validated before inserting it into the DB.");
|
}
| }
|
if(count($this->get_errors()) > 0)
{
die("The PM is not valid.");
| if(count($this->get_errors()) > 0)
{
die("The PM is not valid.");
|
| Zeile 525 | Zeile 536 |
|---|
$pm['pmid'] = 0;
}
$pm['pmid'] = (int)$pm['pmid'];
|
$pm['pmid'] = 0;
}
$pm['pmid'] = (int)$pm['pmid'];
|
|
|
if(empty($pm['icon']) || $pm['icon'] < 0)
|
if(empty($pm['icon']) || $pm['icon'] < 0)
|
{
| {
|
$pm['icon'] = 0;
|
$pm['icon'] = 0;
|
}
| }
|
$uid = 0;
|
$uid = 0;
|
if(!is_array($pm['recipients']))
{
$recipient_list = array();
}
else
| // Build recipient list
$recipient_list = array();
if(isset($pm['recipients']) && is_array($pm['recipients']))
|
{
|
{
|
// Build recipient list
| |
foreach($pm['recipients'] as $recipient)
{
if(!empty($recipient['bcc']))
| foreach($pm['recipients'] as $recipient)
{
if(!empty($recipient['bcc']))
|
| Zeile 575 | Zeile 583 |
|---|
$draftcheck = $db->fetch_array($query);
// This PM was previously a draft
|
$draftcheck = $db->fetch_array($query);
// This PM was previously a draft
|
if($draftcheck['pmid'])
| if(!empty($draftcheck['pmid']))
|
{
if($draftcheck['deletetime'])
{
| {
if($draftcheck['deletetime'])
{
|
| Zeile 600 | Zeile 608 |
|---|
}
$plugins->run_hooks("datahandler_pm_insert_updatedraft", $this);
|
}
$plugins->run_hooks("datahandler_pm_insert_updatedraft", $this);
|
$db->insert_query("privatemessages", $this->pm_insert_data);
|
$this->pmid = $db->insert_query("privatemessages", $this->pm_insert_data);
$plugins->run_hooks("datahandler_pm_insert_updatedraft_commit", $this);
|
// If this is a draft, end it here - below deals with complete messages
return array(
|
// If this is a draft, end it here - below deals with complete messages
return array(
|
| Zeile 616 | Zeile 627 |
|---|
// Send email notification of new PM if it is enabled for the recipient
$query = $db->simple_select("privatemessages", "dateline", "uid='".$recipient['uid']."' AND folder='1'", array('order_by' => 'dateline', 'order_dir' => 'desc', 'limit' => 1));
$lastpm = $db->fetch_array($query);
|
// Send email notification of new PM if it is enabled for the recipient
$query = $db->simple_select("privatemessages", "dateline", "uid='".$recipient['uid']."' AND folder='1'", array('order_by' => 'dateline', 'order_dir' => 'desc', 'limit' => 1));
$lastpm = $db->fetch_array($query);
|
if($recipient['pmnotify'] == 1 && $recipient['lastactive'] > $lastpm['dateline'])
| if($recipient['pmnotify'] == 1 && (empty($lastpm['dateline']) || $recipient['lastactive'] > $lastpm['dateline']))
|
{
if($recipient['language'] != "" && $lang->language_exists($recipient['language']))
{
| {
if($recipient['language'] != "" && $lang->language_exists($recipient['language']))
{
|
| Zeile 652 | Zeile 663 |
|---|
require_once MYBB_ROOT.'inc/class_parser.php';
$parser = new Postparser;
|
require_once MYBB_ROOT.'inc/class_parser.php';
$parser = new Postparser;
|
|
|
$parser_options = array(
'me_username' => $pm['sender']['username'],
'filter_badwords' => 1
);
|
$parser_options = array(
'me_username' => $pm['sender']['username'],
'filter_badwords' => 1
);
|
|
|
$pm['message'] = $parser->text_parse_message($pm['message'], $parser_options);
$emailmessage = $lang->sprintf($emailmessage, $recipient['username'], $pm['sender']['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $pm['message']);
$emailsubject = $lang->sprintf($emailsubject, $mybb->settings['bbname'], $pm['subject']);
|
$pm['message'] = $parser->text_parse_message($pm['message'], $parser_options);
$emailmessage = $lang->sprintf($emailmessage, $recipient['username'], $pm['sender']['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $pm['message']);
$emailsubject = $lang->sprintf($emailsubject, $mybb->settings['bbname'], $pm['subject']);
|
|
|
$new_email = array(
"mailto" => $db->escape_string($recipient['email']),
"mailfrom" => '',
| $new_email = array(
"mailto" => $db->escape_string($recipient['email']),
"mailfrom" => '',
|
| Zeile 679 | Zeile 690 |
|---|
$this->pm_insert_data['toid'] = $recipient['uid'];
$plugins->run_hooks("datahandler_pm_insert", $this);
|
$this->pm_insert_data['toid'] = $recipient['uid'];
$plugins->run_hooks("datahandler_pm_insert", $this);
|
| |
|
$this->pmid[] = $db->insert_query("privatemessages", $this->pm_insert_data);
|
$this->pmid[] = $db->insert_query("privatemessages", $this->pm_insert_data);
|
| |
$plugins->run_hooks("datahandler_pm_insert_commit", $this);
|
// If PM noices/alerts are on, show!
if($recipient['pmnotice'] == 1)
|
// If PM noices/alerts are on, show!
if($recipient['pmnotice'] == 1)
|
| Zeile 702 | Zeile 716 |
|---|
{
$sql_array = array(
'status' => 3,
|
{
$sql_array = array(
'status' => 3,
|
'statustime' => TIME_NOW
| 'statustime' => TIME_NOW
|
);
$db->update_query("privatemessages", $sql_array, "pmid={$pm['pmid']} AND uid={$pm['sender']['uid']}");
}
| );
$db->update_query("privatemessages", $sql_array, "pmid={$pm['pmid']} AND uid={$pm['sender']['uid']}");
}
|
| Zeile 719 | Zeile 733 |
|---|
// If we're saving a copy
if($pm['options']['savecopy'] != 0)
{
|
// If we're saving a copy
if($pm['options']['savecopy'] != 0)
{
|
if(isset($recipient_list['to']) && count($recipient_list['to']) == 1)
| if(isset($recipient_list['to']) && is_array($recipient_list['to']) && count($recipient_list['to']) == 1)
|
{
$this->pm_insert_data['toid'] = $uid;
}
| {
$this->pm_insert_data['toid'] = $uid;
}
|
| Zeile 733 | Zeile 747 |
|---|
$this->pm_insert_data['receipt'] = 0;
$plugins->run_hooks("datahandler_pm_insert_savedcopy", $this);
|
$this->pm_insert_data['receipt'] = 0;
$plugins->run_hooks("datahandler_pm_insert_savedcopy", $this);
|
| |
|
$db->insert_query("privatemessages", $this->pm_insert_data);
|
$db->insert_query("privatemessages", $this->pm_insert_data);
|
| |
$plugins->run_hooks("datahandler_pm_insert_savedcopy_commit", $this);
|
// Because the sender saved a copy, update their total pm count
require_once MYBB_ROOT."/inc/functions_user.php";
|
// Because the sender saved a copy, update their total pm count
require_once MYBB_ROOT."/inc/functions_user.php";
|