mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 10:56:26 +00:00
37 lines
808 B
PHP
37 lines
808 B
PHP
|
<?
|
||
|
|
enforce_login();
|
||
|
|
|
||
|
|
// Get user level
|
||
|
|
$DB->query("
|
||
|
|
SELECT
|
||
|
|
i.SupportFor,
|
||
|
|
p.DisplayStaff
|
||
|
|
FROM users_info as i
|
||
|
|
JOIN users_main as m ON m.ID = i.UserID
|
||
|
|
JOIN permissions as p ON p.ID = m.PermissionID
|
||
|
|
WHERE i.UserID = ".$LoggedUser['ID']
|
||
|
|
);
|
||
|
|
list($SupportFor, $DisplayStaff) = $DB->next_record();
|
||
|
|
|
||
|
|
if (!($SupportFor != '' || $DisplayStaff == '1')) {
|
||
|
|
// Logged in user is not FLS or Staff
|
||
|
|
error(403);
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($ID = (int)$_GET['id']) {
|
||
|
|
$DB->query("SELECT Message FROM staff_pm_responses WHERE ID=$ID");
|
||
|
|
list($Message) = $DB->next_record();
|
||
|
|
if ($_GET['plain'] == 1) {
|
||
|
|
echo $Message;
|
||
|
|
} else {
|
||
|
|
include(SERVER_ROOT.'/classes/class_text.php'); // Text formatting class
|
||
|
|
$Text = new TEXT;
|
||
|
|
echo $Text->full_format($Message);
|
||
|
|
}
|
||
|
|
|
||
|
|
} else {
|
||
|
|
// No id
|
||
|
|
echo '-1';
|
||
|
|
}
|
||
|
|
?>
|