Gazelle/sections/inbox/compose.php

<?

if (empty($Return)) {
	$ToID = $_GET['to'];
	if ($ToID == $LoggedUser['ID']) {
		error("You cannot start a conversation with yourself!");
		header('Location: inbox.php');
	}
}

if (!$ToID || !is_number($ToID)) {
	error(404);
}

if (!empty($LoggedUser['DisablePM']) && !isset($StaffIDs[$ToID])) {
	error(403);
}

$DB->query("SELECT Username FROM users_main WHERE ID='$ToID'");
list($Username) = $DB->next_record();
if (!$Username) {
	error(404);
}
View::show_header('Compose', 'inbox,bbcode');
?>
<div class="thin">
	<div class="header">
		<h2>Send a message to <a href="user.php?id=<?=$ToID?>"><?=$Username?></a></h2>
	</div>
	<form class="send_form" name="message" action="inbox.php" method="post" id="messageform">
		<div class="box pad">
			<input type="hidden" name="action" value="takecompose" />
			<input type="hidden" name="toid" value="<?=$ToID?>" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<div id="quickpost">
				<h3>Subject</h3>
				<input type="text" name="subject" size="95" value="<?=(!empty($Subject) ? $Subject : '')?>" /><br />
				<h3>Body</h3>
				<textarea id="body" name="body"  cols="95"  rows="10" onkeyup="resize('body')"><?=(!empty($Body) ? $Body : '')?></textarea>
			</div>
			<div id="preview" class="hidden"></div>
			<div id="buttons" class="center">
				<input type="button" value="Preview" onclick="Quick_Preview();" />
				<input type="submit" value="Send message" />
			</div>
		</div>
	</form>
</div>

<?
View::show_footer();
?>