Gazelle/sections/inbox/conversation.php

<?
$ConvID = $_GET['id'];
if (!$ConvID || !is_number($ConvID)) {
	error(404);
}


$UserID = $LoggedUser['ID'];
$DB->query("
	SELECT InInbox, InSentbox
	FROM pm_conversations_users
	WHERE UserID = '$UserID'
		AND ConvID = '$ConvID'");
if (!$DB->has_results()) {
	error(403);
}
list($InInbox, $InSentbox) = $DB->next_record();



if (!$InInbox && !$InSentbox) {

	error(404);
}

// Get information on the conversation
$DB->query("
	SELECT
		c.Subject,
		cu.Sticky,
		cu.UnRead,
		cu.ForwardedTo
	FROM pm_conversations AS c
		JOIN pm_conversations_users AS cu ON c.ID = cu.ConvID
	WHERE c.ID = '$ConvID'
		AND UserID = '$UserID'");
list($Subject, $Sticky, $UnRead, $ForwardedID) = $DB->next_record();


$DB->query("
	SELECT um.ID, Username
	FROM pm_messages AS pm
		JOIN users_main AS um ON um.ID = pm.SenderID
	WHERE pm.ConvID = '$ConvID'");

$ConverstionParticipants = $DB->to_array();

foreach ($ConverstionParticipants as $Participant) {
	$PMUserID = (int)$Participant['ID'];
	$Users[$PMUserID]['UserStr'] = Users::format_username($PMUserID, true, true, true, true);
	$Users[$PMUserID]['Username'] = $Participant['Username'];
}

$Users[0]['UserStr'] = 'System'; // in case it's a message from the system
$Users[0]['Username'] = 'System';


if ($UnRead == '1') {

	$DB->query("
		UPDATE pm_conversations_users
		SET UnRead = '0'
		WHERE ConvID = '$ConvID'
			AND UserID = '$UserID'");
	// Clear the caches of the inbox and sentbox
	$Cache->decrement("inbox_new_$UserID");
}

View::show_header("View conversation $Subject", 'comments,inbox,bbcode,jquery.validate,form_validate');

// Get messages
$DB->query("
	SELECT SentDate, SenderID, Body, ID
	FROM pm_messages
	WHERE ConvID = '$ConvID'
	ORDER BY ID");
?>
<div class="thin">
	<h2><?=$Subject.($ForwardedID > 0 ? " (Forwarded to $ForwardedName)" : '')?></h2>
	<div class="linkbox">
		<a href="<?=Inbox::get_inbox_link(); ?>" class="brackets">Back to inbox</a>
	</div>
<?

while (list($SentDate, $SenderID, $Body, $MessageID) = $DB->next_record()) { ?>
	<div class="box vertical_space">
		<div class="head" style="overflow: hidden;">
			<div style="float: left;">
				<strong><?=$Users[(int)$SenderID]['UserStr']?></strong> <?=time_diff($SentDate)?> - <a href="#quickpost" onclick="Quote('<?=$MessageID?>','<?=$Users[(int)$SenderID]['Username']?>');" class="brackets">Quote</a>
			</div>
			<div style="float: right;"><a href="#">&uarr;</a> <a href="#messageform">&darr;</a></div>
		</div>
		<div class="body" id="message<?=$MessageID?>">
			<?=Text::full_format($Body)?>
		</div>
	</div>
<?
}
$DB->query("
	SELECT UserID
	FROM pm_conversations_users
	WHERE UserID != '$LoggedUser[ID]'
		AND ConvID = '$ConvID'
		AND (ForwardedTo = 0 OR ForwardedTo = UserID)");
$ReceiverIDs = $DB->collect('UserID');


if (!empty($ReceiverIDs) && (empty($LoggedUser['DisablePM']) || array_intersect($ReceiverIDs, array_keys($StaffIDs)))) {
?>
	<h3>Reply</h3>
	<form class="send_form" name="reply" action="inbox.php" method="post" id="messageform">
		<div class="box pad">
			<input type="hidden" name="action" value="takecompose" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<input type="hidden" name="toid" value="<?=implode(',', $ReceiverIDs)?>" />
			<input type="hidden" name="convid" value="<?=$ConvID?>" />
			<textarea id="quickpost" class="required" name="body" cols="90" rows="10" onkeyup="resize('quickpost');"></textarea> <br />
			<div id="preview" class="box vertical_space body hidden"></div>
			<div id="buttons" class="center">
				<input type="button" value="Preview" onclick="Quick_Preview();" />
				<input type="submit" value="Send message" />
			</div>
		</div>
	</form>
<?
}
?>
	<h3>Manage conversation</h3>
	<form class="manage_form" name="messages" action="inbox.php" method="post">
		<div class="box pad">
			<input type="hidden" name="action" value="takeedit" />
			<input type="hidden" name="convid" value="<?=$ConvID?>" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />

			<table class="layout" width="100%">
				<tr>
					<td class="label"><label for="sticky">Sticky</label></td>
					<td>
						<input type="checkbox" id="sticky" name="sticky"<? if ($Sticky) { echo ' checked="checked"'; } ?> />
					</td>
					<td class="label"><label for="mark_unread">Mark as unread</label></td>
					<td>
						<input type="checkbox" id="mark_unread" name="mark_unread" />
					</td>
					<td class="label"><label for="delete">Delete conversation</label></td>
					<td>
						<input type="checkbox" id="delete" name="delete" />
					</td>

				</tr>
				<tr>
					<td class="center" colspan="6"><input type="submit" value="Manage conversation" /></td>
				</tr>
			</table>
		</div>
	</form>
<?
$DB->query("
	SELECT SupportFor
	FROM users_info
	WHERE UserID = ".$LoggedUser['ID']);
list($FLS) = $DB->next_record();
if ((check_perms('users_mod') || $FLS != '') && (!$ForwardedID || $ForwardedID == $LoggedUser['ID'])) {
?>
	<h3>Forward conversation</h3>
	<form class="send_form" name="forward" action="inbox.php" method="post">
		<div class="box pad">
			<input type="hidden" name="action" value="forward" />
			<input type="hidden" name="convid" value="<?=$ConvID?>" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<label for="receiverid">Forward to</label>
			<select id="receiverid" name="receiverid">
<?
	foreach ($StaffIDs as $StaffID => $StaffName) {
		if ($StaffID == $LoggedUser['ID'] || in_array($StaffID, $ReceiverIDs)) {
			continue;
		}
?>
				<option value="<?=$StaffID?>"><?=$StaffName?></option>
<?
	}
?>
			</select>
			<input type="submit" value="Forward" />
		</div>
	</form>
<?
}

//And we're done!
?>
</div>
<?
View::show_footer();
?>