Gazelle/sections/inbox/takeedit.php

<?
authorize();

$UserID = $LoggedUser['ID'];
$ConvID = $_POST['convid'];
if (!is_number($ConvID)) {
	error(404);
}
$DB->query("
	SELECT UserID
	FROM pm_conversations_users
	WHERE UserID='$UserID' AND ConvID='$ConvID'");
if (!$DB->has_results()) {
	error(403);
}

if (isset($_POST['delete'])) {
	$DB->query("
		UPDATE pm_conversations_users
		SET
			InInbox='0',
			InSentbox='0',
			Sticky='0'
		WHERE ConvID='$ConvID' AND UserID='$UserID'");
} else {
	if (isset($_POST['sticky'])) {
		$DB->query("
			UPDATE pm_conversations_users
			SET Sticky='1'
			WHERE ConvID='$ConvID' AND UserID='$UserID'");
	} else {
		$DB->query("
			UPDATE pm_conversations_users
			SET Sticky='0'
			WHERE ConvID='$ConvID' AND UserID='$UserID'");
	}
	if (isset($_POST['mark_unread'])) {
		$DB->query("
			UPDATE pm_conversations_users
			SET Unread='1'
			WHERE ConvID='$ConvID' AND UserID='$UserID'");
		$Cache->increment('inbox_new_'.$UserID);
	}
}
header('Location: ' . Inbox::get_inbox_link());
?>