query( "SELECT * FROM " . USERPREFIX . "_usergroups ORDER BY id ASC" ); while ( $row = $db->get_row() ) { $user_group[$row['id']] = array (); foreach ( $row as $key => $value ) { $user_group[$row['id']][$key] = $value; } } set_vars( "usergroup", $user_group ); $db->free(); } if ( !$user_group[$member_id['user_group']]['allow_admin'] ) die( "error" ); $parse = new ParseFilter( ); $parse->safe_mode = true; $parse->allow_url = $user_group[$member_id['user_group']]['allow_url']; $parse->allow_image = $user_group[$member_id['user_group']]['allow_image']; if( ! $is_logged ) die( "error" ); $id = intval( $_POST['id'] ); $text = convert_unicode( $_POST['text'], $config['charset'] ); if( !$id OR !$text) die( "error" ); $row = $db->super_query( "SELECT id, title, autor FROM " . PREFIX . "_post WHERE id='{$id}'" ); if ( !$row['id'] ) die( "error" ); $title = stripslashes($row['title']); $row = $db->super_query( "SELECT email, name, user_id FROM " . USERPREFIX . "_users WHERE name = '{$row['autor']}'" ); if( ! $row['user_id'] ) die( "User not found" ); $message = <<safesql( $parse->BB_Parse( $parse->process( trim( $message ) ), false ) ); $time = time() + ($config['date_adjust'] * 60); $db->query( "INSERT INTO " . USERPREFIX . "_pm (subj, text, user, user_from, date, pm_read, folder) values ('{$lang['message_pm']}', '$message', '{$row['user_id']}', '{$member_id['name']}', '$time', 'no', 'inbox')" ); $db->query( "UPDATE " . USERPREFIX . "_users SET pm_all=pm_all+1, pm_unread=pm_unread+1 WHERE user_id='{$row['user_id']}'" ); if( $config['mail_pm'] ) { include_once ENGINE_DIR . '/classes/mail.class.php'; $mail = new dle_mail( $config ); $mail_template = $db->super_query( "SELECT template FROM " . PREFIX . "_email WHERE name='pm' LIMIT 0,1" ); $mail_template['template'] = stripslashes( $mail_template['template'] ); $mail_template['template'] = str_replace( "{%username%}", $row['name'], $mail_template['template'] ); $mail_template['template'] = str_replace( "{%date%}", langdate( "j F Y H:i", $time ), $mail_template['template'] ); $mail_template['template'] = str_replace( "{%fromusername%}", $member_id['name'], $mail_template['template'] ); $mail_template['template'] = str_replace( "{%title%}", $lang['message_pm'], $mail_template['template'] ); $body = str_replace( '\n', "", $message ); $body = str_replace( '\r', "", $body ); $body = str_replace( '"', '"', $message ); $body = stripslashes( stripslashes( $body ) ); $body = str_replace( "
", "\n", $body ); $body = strip_tags( $body ); $mail_template['template'] = str_replace( "{%text%}", $body, $mail_template['template'] ); $mail->send( $row['email'], $lang['mail_pm'], $mail_template['template'] ); } @header( "Content-type: text/css; charset=" . $config['charset'] ); echo "ok"; ?>