SetFields('torrentid', '1', 'number', 'Invalid torrent ID.', array('maxlength' => 1000000000, 'minlength' => 1)); // we shouldn't have torrent IDs higher than a billion $Validate->SetFields('groupid', '1', 'number', 'Invalid group ID.', array('maxlength' => 1000000000, 'minlength' => 1)); // we shouldn't have group IDs higher than a billion either $Validate->SetFields('subject', '0', 'string', 'Invalid subject.', array('maxlength' => 1000, 'minlength' => 1)); $Validate->SetFields('message', '0', 'string', 'Invalid message.', array('maxlength' => 10000, 'minlength' => 1)); $Err = $Validate->ValidateForm($_POST); // Validate the form if ($Err) { error($Err); header('Location: '.$_SERVER['HTTP_REFERER']); die(); } //******************************************************************************// //--------------- Send PMs to users --------------------------------------------// $DB->query(" SELECT uid FROM xbt_snatched WHERE fid = $TorrentID"); if ($DB->record_count() > 0) { // Save this because send_pm uses $DB to run its own query... Oops... $Snatchers = $DB->to_array(); foreach ($Snatchers as $UserID) { Misc::send_pm($UserID[0], 0, $Subject, $Message); } } Misc::write_log($LoggedUser['Username']." sent mass notice to snatchers of torrent $TorrentID in group $GroupID"); header("Location: torrents.php?id=$GroupID"); ?>