Oxygen

<?php

/**

 * Project:     Oxygen Bulletin Board

 * File :       $HeadURL$

 * Revision :   $Revision$

 * Author :     $Author$

 * Date :       $Date$

 * Id :         $Id$

 *

 * Oxygen is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License as published

 * by the Free Software Foundation; either version 2 of the License,

 * or (at your option) any later version.

 *

 * Oxygen is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston,

 * MA  02111-1307  USA

 *

 * @link http://www.o2php.com/

 * @copyright 2002-2006 Oxygen Team.

 * @author Eric Fredj <heltem at o2php dot com>

 * @package o2php

 * @version [VERSION]

 */

define("O2_NOQUICKJUMP", true);

$TPL_LOAD = 'u2u_header, u2u_footer, u2u_row, u2u, u2u_send, u2u_ignore, u2u_view_refwdlinks, u2u_view, u2u_message';

require('./header.php');

function u2umsg($message, $redirect = "") {

        global $themedata, $settings, $lang, $u2uheader, $u2ufooter;

        if('' != $redirect ) {

                $redirectjs = redirect($redirect, true);

        }

        eval("\$msg = \"".template("u2u_message")."\";");

        echo $msg;

        exit;

}

if($status == "Administrator" && $user != "") {

        $u2uuser = $user;

        $userlink = "user=$user";

} else {

        $u2uuser = $o2user;

        $userlink = "";

}

$query = $db->query("SELECT COUNT(*) FROM $table[u2u] WHERE (msgto='$u2uuser' AND folder LIKE '%inbox%') OR (msgfrom='$u2uuser' AND folder LIKE '%outbox%')");

$u2unb = $db->result($query, 0);

$precis = number_format((( $u2unb * 100) / $settings['u2uquota']), 2, ",", " ");

$barre = floor($precis) * 4.2;

eval("\$u2uheader = \"".template("u2u_header")."\";");

eval("\$u2ufooter = \"".template("u2u_footer")."\";");

if(!$o2sid) {

        u2umsg($lang['u2unotloggedin']);

        exit;

}

if($action == "send") {

        if($u2unb >= $settings['u2uquota']) {

                u2umsg($lang['u2ureachedquota']);

        } else {

                if(!isset($submit)) {

                        $touser = htmlspecialchars($username);

                        if($u2uid) {

                                $query = $db->query("SELECT * FROM $table[u2u] WHERE u2uid='$u2uid' AND msgto='$u2uuser'");

                                $u2u = $db->fetch_assoc($query);

                                if($do == "reply") {

                                        if($u2u['isnew'] != 'no') {

                                                $db->query("UPDATE $table[u2u] SET isnew='no' WHERE u2uid='$u2u[u2uid]'");

                                        }

                                        $subject = $lang['textre'] . ' : ' . $u2u['subject'];

                                        $message = '[quote]' . $u2u['message'] . '[/quote]';

                                        $touser = $u2u['msgfrom'];

                                }

                                if($do == "forward") {

                                        $subject = $lang['textfwd'] . ' : ' . $u2u['subject'];

                                        $message = '[quote]' . $u2u['message'] . '[/quote]';

                                        $touser = $u2u['msgfrom'];

                                }

                        }

                        $members = array();

                        $query = $db->query("SELECT uid, username FROM $table[members] ORDER BY username");

                        while($member = $db->fetch_assoc($query)) {

                                $members[] = $member;

                        }

                        $pop = new wdgPopup('msgto');

                        $pop->setKeyName('uid');

                        $pop->setValueName('username');

                        $pop->setValues($members);

                        $pop->selected = $touser;

                        $cbouser = $pop->render();

                        eval("\$u2usend = \"".template("u2u_send")."\";");

                        echo $u2usend;

                } else {

                        $query = $db->query("SELECT username, ignoreu2u FROM $table[members] WHERE username='$msgto'");

                        $member = $db->fetch_assoc($query);

                        $ignoreu2uarray = exploder($member['ignoreu2u'], ",");

                        if(empty($member['username'])) {

                                u2umsg($lang['badrcpt'], "javascript:history.go(-1)");

                        } elseif(in_array($u2uuser, $ignoreu2uarray)) {

                                u2umsg($lang['u2ublocked']);

                                exit;

                        }

                        if($settings['max_post_length']) {

                                $message = substr($message, 0, $settings['max_post_length']);

                        }

                        $message = addslashes($message);

                        $subject = addslashes($subject);

                        $uniqueid = substr(md5("$username|$now"), 0, 10);

                        if($saveoutbox == "yes") {

                                $db->query("INSERT INTO $table[u2u] VALUES('', '$member[username]', '$u2uuser', '$now', '$subject', '$message', '$uniqueid|inbox|outbox', 'yes')");

                        } else {

                                $db->query("INSERT INTO $table[u2u] VALUES('', '$member[username]', '$u2uuser', '$now', '$subject', '$message', '$uniqueid|inbox', 'yes')");

                        }

                        u2umsg($lang['imsentmsg'], "u2u.php?$userlink");

                }

        }

} elseif($action == "delete") {

        if($folder == "outbox") {

                $msg_field = "msgfrom";

        } else {

                $msg_field = "msgto";

                $clause = "isnew='no',";

        }

        if($u2uid) {

                $delete[] = $u2uid;

        }

        if(is_array($delete)) {

                foreach($delete as $val) {

                        $query = $db->query("SELECT * FROM $table[u2u] WHERE u2uid='$val'");

                        $u2umsg = $db->fetch_assoc($query);

                        $dfolder = explode('|', $u2umsg['folder']);

                        $dfolder = array_diff($dfolder, array($folder));

                        if(count($dfolder) <= 1) {

                                $db->query("DELETE FROM $table[u2u] WHERE u2uid='$val'");

                        } else {

                                $dfolder = implode("|", $dfolder);

                                $db->query("UPDATE $table[u2u] SET $clause folder='$dfolder' WHERE u2uid='$val'");

                        }

                }

        }

        if($folder == "outbox") {

                u2umsg($lang['imdeletedmsg'], "u2u.php?folder=outbox&$userlink");

        } else {

                u2umsg($lang['imdeletedmsg'], "u2u.php?$userlink");

        }

} elseif($action == "ignore") {

        if(!isset($submit)) {

                $query = $db->query("SELECT ignoreu2u FROM $table[members] WHERE username='$u2uuser'");

                $mem = $db->fetch_assoc($query);

                eval("\$u2uignore = \"".template("u2u_ignore")."\";");

                echo $u2uignore;

        } else {

                $db->query("UPDATE $table[members] SET ignoreu2u='$ignorelist' WHERE username='$u2uuser'");

                u2umsg($lang['ignoreupdate'], "u2u.php?$userlink");

        }

} elseif($action == "view") {

        $query = $db->query("SELECT * FROM $table[u2u] WHERE u2uid='$u2uid'");

        $u2u = $db->fetch_assoc($query);

        if($u2u['msgfrom'] == $u2uuser || $u2u['msgto'] == $u2uuser || $status == "Administrator") {

                if($u2u['msgto'] == $u2uuser) {

                        $db->query("UPDATE $table[u2u] SET isnew='no' WHERE u2uid='$u2u[u2uid]'");

                }

                $dateline = datecvt($u2u['dateline']);

                $u2u['subject'] = html($u2u['subject']);

                if($u2u['msgfrom'] != $u2uuser) {

                        eval("\$refwdlinks = \"".template("u2u_view_refwdlinks")."\";");

                }

                $bbT->init();

                $tags = array(

                        'quote',

                        'color',

                        'align',

                        'center',

                        'url',

                        'bg',

                        'sql',

                        'blink',

                        'php',

                        'email',

                        'font',

                        'flash',

                        'marquee',

                        'img',

                        'member',

                        'code',

                        'list',

                        'li',

                        'table',

                        'row',

                        'col',

                        'strike',

                        'size',

                        'title',

                        'b',

                        'i',

                        'u',

                        'sup',

                        'sub');

                $bbT->handleTags($tags);

                // Cache Smilies

                smcwcache(true, false);

                $smilies = $o2cache['smilies'];

                if($smilies[0] > 0) {

                        $bbT->addSmilies($smilies[1]);

                }

                $u2u['message'] = $bbT->processHtml($u2u['message']);

                $u2u['message'] = $bbT->processWrap($u2u['message']);

                $u2u['message'] = $bbT->processTags($u2u['message'], true);

                $u2u['message'] = $bbT->processContent($u2u['message']);

                eval("\$u2u_view = \"".template("u2u_view")."\";");

                echo $u2u_view;

        }

} else {

        if(!$folder) {

                $folder = "inbox";

                $clause = "msgto='$u2uuser'";

        } else {

                $folder = "outbox";

                $clause = "msgfrom='$u2uuser'";

                $lang['textu2uinbox'] = $lang['textu2uoutbox'];

                $lang['textfrom'] = $lang['textto'];

        }

        $query = $db->query("SELECT * FROM $table[u2u] WHERE $clause AND folder LIKE '%$folder%' ORDER BY dateline DESC");

        while($message = $db->fetch_assoc($query)) {

                $senton = datecvt($message['dateline']);

                $thisbg = 'altbg' . (($j++ % 2) + 1);

                if('' === $message['subject']) {

                        $message['subject'] = '<i>&lt;' . $lang['textnosub'] . '&gt;</i>';

                } else {

                        $message['subject'] = html($message['subject']);

                }

                if('outbox' === $folder) {

                        $message['msgfrom'] = $message['msgto'];

                }

                if('no' === $message['isnew']) {

                        $u2ustatus = $lang['textu2unonew'];

                } else {

                        $u2ustatus = $lang['textu2unew'];

                }

                eval("\$u2u_row .= \"".template("u2u_row")."\";");

        }

        eval("\$u2u = \"".template("u2u")."\";");

        echo $u2u;

}