Gazelle/sections/inbox/conversation.php

<?
include(SERVER_ROOT.'/classes/class_text.php');
$Text = new TEXT;

$ConvID = $_GET['id'];
if (!$ConvID || !is_number($ConvID)) {
	error(404);
}



$UserID = $LoggedUser['ID'];
$DB->query("SELECT InInbox, InSentbox FROM pm_conversations_users WHERE UserID='$UserID' AND ConvID='$ConvID'");
if ($DB->record_count() == 0) {
	error(403);
}
list($InInbox, $InSentbox) = $DB->next_record();




if (!$InInbox && !$InSentbox) {

	error(404);
}

// Get information on the conversation
$DB->query("
	SELECT
		c.Subject,
		cu.Sticky,
		cu.UnRead,
		cu.ForwardedTo
	FROM pm_conversations AS c
		JOIN pm_conversations_users AS cu ON c.ID=cu.ConvID
	WHERE c.ID='$ConvID'
		AND UserID='$UserID'");
list($Subject, $Sticky, $UnRead, $ForwardedID) = $DB->next_record();


$DB->query("
	SELECT um.ID, Username
	FROM pm_messages AS pm
		JOIN users_main AS um ON um.ID=pm.SenderID
	WHERE pm.ConvID='$ConvID'");

while (list($PMUserID, $Username) = $DB->next_record()) {
	$PMUserID = (int)$PMUserID;
	$Users[$PMUserID]['UserStr'] = Users::format_username($PMUserID, true, true, true, true);
	$Users[$PMUserID]['Username'] = $Username;
}
$Users[0]['UserStr'] = 'System'; // in case it's a message from the system
$Users[0]['Username'] = 'System';



if ($UnRead == '1') {

	$DB->query("UPDATE pm_conversations_users SET UnRead='0' WHERE ConvID='$ConvID' AND UserID='$UserID'");
	// Clear the caches of the inbox and sentbox
	$Cache->decrement('inbox_new_'.$UserID);
}

View::show_header('View conversation '.$Subject, 'comments,inbox,bbcode');

// Get messages
$DB->query("SELECT SentDate, SenderID, Body, ID FROM pm_messages AS m WHERE ConvID='$ConvID' ORDER BY ID");
?>
<div class="thin">
	<h2><?=$Subject.($ForwardedID > 0 ? ' (Forwarded to '.$ForwardedName.')' : '')?></h2>
	<div class="linkbox">
		<a href="inbox.php" class="brackets">Back to inbox</a>
	</div>
<?

while (list($SentDate, $SenderID, $Body, $MessageID) = $DB->next_record()) { ?>
	<div class="box vertical_space">
		<div class="head">
			<strong><?=$Users[(int)$SenderID]['UserStr']?></strong> <?=time_diff($SentDate)?> - <a href="#quickpost" onclick="Quote('<?=$MessageID?>','<?=$Users[(int)$SenderID]['Username']?>');" class="brackets">Quote</a>
		</div>
		<div class="body" id="message<?=$MessageID?>">
			<?=$Text->full_format($Body)?>
		</div>
	</div>
<?
}
$DB->query("
	SELECT UserID
	FROM pm_conversations_users
	WHERE UserID!='$LoggedUser[ID]'
		AND ConvID='$ConvID'
		AND (ForwardedTo=0 OR ForwardedTo=UserID)");
$ReceiverIDs = $DB->collect('UserID');


if (!empty($ReceiverIDs) && (empty($LoggedUser['DisablePM']) || array_intersect($ReceiverIDs, array_keys($StaffIDs)))) {
?>
	<h3>Reply</h3>
	<form class="send_form" name="reply" action="inbox.php" method="post" id="messageform">
		<div class="box pad">
			<input type="hidden" name="action" value="takecompose" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<input type="hidden" name="toid" value="<?=implode(',',$ReceiverIDs)?>" />
			<input type="hidden" name="convid" value="<?=$ConvID?>" />
			<textarea id="quickpost" name="body" cols="90" rows="10" onkeyup="resize('quickpost')"></textarea> <br />
			<div id="preview" class="box vertical_space body hidden"></div>
			<div id="buttons" class="center">
				<input type="button" value="Preview" onclick="Quick_Preview();" />
				<input type="submit" value="Send message" />
			</div>
		</div>
	</form>
<?
}
?>
	<h3>Manage conversation</h3>
	<form class="manage_form" name="messages" action="inbox.php" method="post">
		<div class="box pad">
			<input type="hidden" name="action" value="takeedit" />
			<input type="hidden" name="convid" value="<?=$ConvID?>" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />

			<table class="layout" width="100%">
				<tr>
					<td class="label"><label for="sticky">Sticky</label></td>
					<td>
						<input type="checkbox" id="sticky" name="sticky"<? if ($Sticky) { echo ' checked="checked"'; } ?> />
					</td>
					<td class="label"><label for="mark_unread">Mark as unread</label></td>
					<td>
						<input type="checkbox" id="mark_unread" name="mark_unread" />
					</td>
					<td class="label"><label for="delete">Delete conversation</label></td>
					<td>
						<input type="checkbox" id="delete" name="delete" />
					</td>

				</tr>
				<tr>
					<td class="center" colspan="6"><input type="submit" value="Manage conversation" /></td>
				</tr>
			</table>
		</div>
	</form>
<?
$DB->query("SELECT SupportFor FROM users_info WHERE UserID = ".$LoggedUser['ID']);
list($FLS) = $DB->next_record();
if ((check_perms('users_mod') || $FLS != '') && (!$ForwardedID || $ForwardedID == $LoggedUser['ID'])) {
?>
	<h3>Forward conversation</h3>
	<form class="send_form" name="forward" action="inbox.php" method="post">
		<div class="box pad">
			<input type="hidden" name="action" value="forward" />
			<input type="hidden" name="convid" value="<?=$ConvID?>" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<label for="receiverid">Forward to</label>
			<select id="receiverid" name="receiverid">
<?
	foreach ($StaffIDs as $StaffID => $StaffName) {
		if ($StaffID == $LoggedUser['ID'] || in_array($StaffID, $ReceiverIDs)) {
			continue;
		}
?>
				<option value="<?=$StaffID?>"><?=$StaffName?></option>
<?
	}
?>
			</select>
			<input type="submit" value="Forward" />
		</div>
	</form>
<?
}

//And we're done!
?>
</div>
<?
View::show_footer();
?>