Gazelle/sections/staffpm/ajax_get_response.php
2013-12-12 08:01:01 +00:00

38 lines
649 B
PHP

<?
enforce_login();
// Get user level
$DB->query("
SELECT
i.SupportFor,
p.DisplayStaff
FROM users_info AS i
JOIN users_main AS m ON m.ID = i.UserID
JOIN permissions AS p ON p.ID = m.PermissionID
WHERE i.UserID = ".$LoggedUser['ID']
);
list($SupportFor, $DisplayStaff) = $DB->next_record();
if (!$IsFLS) {
// Logged in user is not FLS or Staff
error(403);
}
if ($ID = (int)$_GET['id']) {
$DB->query("
SELECT Message
FROM staff_pm_responses
WHERE ID = $ID");
list($Message) = $DB->next_record();
if ($_GET['plain'] == 1) {
echo $Message;
} else {
echo Text::full_format($Message);
}
} else {
// No ID
echo '-1';
}
?>