Gazelle/sections/staffpm/resolve.php

<?
if ($ID = (int)($_GET['id'])) {
	// Check if conversation belongs to user
	$DB->query("
		SELECT UserID, AssignedToUser
		FROM staff_pm_conversations
		WHERE ID = $ID");
	list($UserID, $AssignedToUser) = $DB->next_record();

	if ($UserID == $LoggedUser['ID'] || $IsFLS || $AssignedToUser == $LoggedUser['ID']) {
		// Conversation belongs to user or user is staff, resolve it
		$DB->query("
			UPDATE staff_pm_conversations
			SET Status = 'Resolved', ResolverID = ".$LoggedUser['ID']."
			WHERE ID = $ID");
		$Cache->delete_value('staff_pm_new_'.$LoggedUser['ID']);
		$Cache->delete_value('num_staff_pms_'.$LoggedUser['ID']);

		header('Location: staffpm.php');
	} else {
		// Conversation does not belong to user
		error(403);
	}
} else {
	// No ID
	header('Location: staffpm.php');
}
?>