startheaders();
include "mysql.php";
global $c;
$is =
mysql_query(
"SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",
$c) or die(mysql_error());
$ir = mysql_fetch_array($is);
check_level();
$fm = money_formatter($ir['money']);
$cm = money_formatter($ir['crystals'], '');
$lv = date('F j, Y, g:i a', $ir['laston']);
$h->userdata($ir, $lv, $fm, $cm);
$h->menuarea();
if ($ir['mailban'])
{
die(
"! ERROR
You have been mail banned for {$ir['mailban']} days.
Reason: {$ir['mb_reason']}");
}
$_GET['ID'] = abs((int) $_GET['ID']);
print
"
";
switch ($_GET['action'])
{
case 'inbox':
mail_inbox();
break;
case 'outbox':
mail_outbox();
break;
case 'compose':
mail_compose();
break;
case 'delete':
mail_delete();
break;
case 'send':
mail_send();
break;
case 'delall':
mail_delall();
break;
case 'delall2':
mail_delall2();
break;
case 'archive':
mail_archive();
break;
default:
mail_inbox();
break;
}
function mail_inbox()
{
global $ir, $c, $userid, $h;
print
"Only the last 25 messages sent to you are visible.
| From | Subject/Message |
";
$q =
mysql_query(
"SELECT m.*,u.* FROM mail m LEFT JOIN users u ON m.mail_from=u.userid WHERE m.mail_to=$userid ORDER BY mail_time DESC LIMIT 25",
$c);
while ($r = mysql_fetch_array($q))
{
$sent = date('F j, Y, g:i:s a', $r['mail_time']);
print "| ";
if ($r['userid'])
{
print
"{$r['username']} [{$r['userid']}]";
}
else
{
print "SYSTEM";
}
$fm = urlencode($r['mail_text']);
print
" | \n{$r['mail_subject']} |
Sent at: $sent Reply
Delete
Report | {$r['mail_text']} |
";
}
mysql_query("UPDATE mail SET mail_read=1 WHERE mail_to=$userid", $c);
}
function mail_outbox()
{
global $ir, $c, $userid, $h;
print
"Only the last 25 messages you have sent are visible.
| To | Subject/Message |
";
$q =
mysql_query(
"SELECT m.*,u.* FROM mail m LEFT JOIN users u ON m.mail_to=u.userid WHERE m.mail_from=$userid ORDER BY mail_time DESC LIMIT 25",
$c);
while ($r = mysql_fetch_array($q))
{
$sent = date('F j, Y, g:i:s a', $r['mail_time']);
print
"| {$r['username']} [{$r['userid']}] | {$r['mail_subject']} |
Sent at: $sent
| {$r['mail_text']} |
";
}
}
function mail_compose()
{
global $ir, $c, $userid, $h;
print
"";
if ($_GET['ID'])
{
print
"
| Your last 5 mails to/from this person: |
";
$q =
mysql_query(
"SELECT m.*,u1.username as sender from mail m left join users u1 on m.mail_from=u1.userid WHERE (m.mail_from=$userid AND m.mail_to={$_GET['ID']}) OR (m.mail_to=$userid AND m.mail_from={$_GET['ID']}) ORDER BY m.mail_time DESC LIMIT 5",
$c);
while ($r = mysql_fetch_array($q))
{
$sent = date('F j, Y, g:i:s a', $r['mail_time']);
print
"| $sent | {$r['sender']} wrote: {$r['mail_text']} |
";
}
print "
";
}
}
function mail_send()
{
global $ir, $c, $userid, $h;
$subj =
mysql_real_escape_string(
str_replace(array("\n"), array("
"),
htmlentities(
stripslashes(strip_tags($_POST['subject'])),
ENT_QUOTES, 'ISO-8859-1')), $c);
$msg =
mysql_real_escape_string(
str_replace(array("\n"), array("
"),
htmlentities(
stripslashes(strip_tags($_POST['message'])),
ENT_QUOTES, 'ISO-8859-1')), $c);
$to = (int) $_POST['userid'];
mysql_query(
"INSERT INTO mail VALUES(NULL,0,$userid,$to," . time()
. ",'$subj','$msg')", $c) or die(mysql_error());
print "Message sent.
> Back";
}
function mail_delete()
{
global $ir, $c, $userid, $h;
mysql_query(
"DELETE FROM mail WHERE mail_id={$_GET['ID']} AND mail_to=$userid",
$c);
print "Message deleted.
> Back";
}
function mail_delall()
{
global $ir, $c, $userid, $h;
print
"This will delete all the messages in your inbox.
There is NO undo, so be sure.
> Yes, delete all messages
> No, go back";
}
function mail_delall2()
{
global $ir, $c, $userid, $h;
mysql_query("DELETE FROM mail WHERE mail_to='$userid'", $c);
print
"All " . mysql_affected_rows($c)
. " mails in your inbox were deleted.
> Back";
}
function mail_archive()
{
global $ir, $c, $userid, $h;
print
"This tool will download an archive of all your messages.
> Download Inbox
> Download Outbox";
}
$h->endpage();