Gazelle/sections/staffpm/viewconv.php

<?
include(SERVER_ROOT.'/classes/class_text.php');
$Text = new TEXT;

if ($ConvID = (int)$_GET['id']) {
	// Get conversation info
	$DB->query("SELECT Subject, UserID, Level, AssignedToUser, Unread, Status FROM staff_pm_conversations WHERE ID=$ConvID");
	list($Subject, $UserID, $Level, $AssignedToUser, $Unread, $Status) = $DB->next_record();
	
	if ($UserID == $LoggedUser['ID'] || $IsStaff || ($Level == 0 && $IsFLS) || $LoggedUser['ID'] == $AssignedToUser) {
		// User is trying to view their own unread conversation, set it to read
		if ($UserID == $LoggedUser['ID'] && $Unread) {
			$DB->query("UPDATE staff_pm_conversations SET Unread=false WHERE ID=$ConvID");
			// Clear cache for user
			$Cache->delete_value('staff_pm_new_'.$LoggedUser['ID']);
		}
		
		show_header('Staff PM', 'staffpm,bbcode');
		
		$UserInfo = user_info($UserID);
		$UserStr = format_username($UserID, $UserInfo['Username'], $UserInfo['Donor'], $UserInfo['Warned'], $UserInfo['Enabled'], $UserInfo['PermissionID']);
		
		$OwnerID = $UserID;

?>
<div id="thin">
	<h2>Staff PM - <?=display_str($Subject)?></h2>	
	<div class="linkbox">
<? 
		// Staff only
		if ($IsStaff) { 
?>
		<a href="staffpm.php">[My unanswered]</a>
<? 
		} 
		
		// FLS/Staff
		if ($IsFLS) { 
?>
		<a href="staffpm.php?view=unanswered">[All unanswered]</a>
		<a href="staffpm.php?view=open">[Open]</a>
		<a href="staffpm.php?view=resolved">[Resolved]</a>
<? 
		// User
		} else { 
?>
		<a href="staffpm.php">[Back to inbox]</a>
<?
		}
		
?>
		<br />
		<br />
	</div>
	<div id="inbox">
<?
		// Get messages
		$StaffPMs = $DB->query("SELECT UserID, SentDate, Message FROM staff_pm_messages WHERE ConvID=$ConvID");
		
		while(list($UserID, $SentDate, $Message) = $DB->next_record()) {
			// Set user string
			if ($UserID == $OwnerID) {
				// User, use prepared string
				$UserString = $UserStr;
			} else {
				// Staff/FLS
				$UserInfo = user_info($UserID);
				$UserString = format_username($UserID, $UserInfo['Username'], $UserInfo['Donor'], $UserInfo['Warned'], $UserInfo['Enabled'], $UserInfo['PermissionID']);

			}
?>
		<div class="box vertical_space">
			<div class="head">
				<strong>
					<?=$UserString?>
				
				</strong> 
				<?=time_diff($SentDate, 2, true)?>

			</div>
			<div class="body"><?=$Text->full_format($Message)?></div>
		</div>
		<div align="center" style="display: none"></div>
<?
			$DB->set_query_id($StaffPMs);
		}
		
		// Common responses
		if ($IsFLS && $Status != 'Resolved') {
?>
		<div id="common_answers" class="hidden">
			<div class="box vertical_space">
				<div class="head">
					<strong>Preview</strong>
				</div>
				<div id="common_answers_body" class="body">Select an answer from the dropdown to view it.</div>
			</div>
			<br />
			<div class="center">
				<select id="common_answers_select" onChange="UpdateMessage();">
					<option id="first_common_response">Select a message</option>
<?
			// List common responses
			$DB->query("SELECT ID, Name FROM staff_pm_responses");
			while(list($ID, $Name) = $DB->next_record()) {
?>
					<option value="<?=$ID?>"><?=$Name?></option>
<?
			}
?>
				</select>
				<input type="button" value="Set message" onClick="SetMessage();" />
				<input type="button" value="Create new / Edit" onClick="location.href='staffpm.php?action=responses&convid=<?=$ConvID?>'" />
			</div>
		</div>
<?
		}
		
		// Ajax assign response div
		if ($IsStaff) {
?>
		<div id="ajax_message" class="hidden center alertbar"></div>
<?
		}		
		
		// Replybox and buttons
?>
		<h3>Reply</h3>
		<div class="box pad">
			<div id="preview" class="hidden"></div>
			<div id="buttons" class="center">
				<form action="staffpm.php" method="post" id="messageform">
					<input type="hidden" name="action" value="takepost" />
					<input type="hidden" name="convid" value="<?=$ConvID?>" id="convid" />
					<textarea id="quickpost" name="message" cols="90" rows="10"></textarea> <br />
<? 
		// Assign to
		if ($IsStaff) {
			// Staff assign dropdown
?>
					<select id="assign_to" name="assign">
						<optgroup label="User classes">
<?
			// FLS "class"
			$Selected = (!$AssignedToUser && $Level == 0) ? ' selected="selected"' : '';
?>
							<option value="class_0"<?=$Selected?>>First Line Support</option>
<?				
			// Staff classes
			foreach ($ClassLevels as $Class) { 
				// Create one <option> for each staff user class
				if ($Class['Level'] >= 700) {
					$Selected = (!$AssignedToUser && ($Level == $Class['Level'])) ? ' selected="selected"' : '';
?>
							<option value="class_<?=$Class['Level']?>"<?=$Selected?>><?=$Class['Name']?></option>
<?
				}
			}
?>
						</optgroup>
						<optgroup label="Staff">
<?
			
			// Staff members
			$DB->query("
				SELECT
					m.ID,
					m.Username
				FROM permissions as p
				JOIN users_main as m ON m.PermissionID=p.ID
				WHERE p.DisplayStaff='1'
				ORDER BY p.Level DESC"
			);
			while(list($ID, $Name) = $DB->next_record()) { 
				// Create one <option> for each staff member
				$Selected = ($AssignedToUser == $ID) ? ' selected="selected"' : '';
?>
							<option value="user_<?=$ID?>"<?=$Selected?>><?=$Name?></option>
<?
			}	
?>
						</optgroup>
						<optgroup label="First Line Support">
<?
			// FLS users
			$DB->query("
				SELECT
					m.ID,
					m.Username
				FROM users_info as i
				JOIN users_main as m ON m.ID=i.UserID
				JOIN permissions as p ON p.ID=m.PermissionID
				WHERE p.DisplayStaff!='1' AND i.SupportFor!=''
			");
			while(list($ID, $Name) = $DB->next_record()) { 
				// Create one <option> for each FLS user
				$Selected = ($AssignedToUser == $ID) ? ' selected="selected"' : '';
?>
							<option value="user_<?=$ID?>"<?=$Selected?>><?=$Name?></option>
<?
			}
?>
						</optgroup>
					</select>
					<input type="button" onClick="Assign();" value="Assign" />
<?
		} elseif ($IsFLS) {	// FLS assign button
?>
					<input type="button" value="Assign to staff" onClick="location.href='staffpm.php?action=assign&convid=<?=$ConvID?>';" />
<?
		}
		
		if ($Status != 'Resolved') {
		
				if ($IsFLS) { ?>
					<input type="button" value="Common answers" onClick="$('#common_answers').toggle();" />
					<input type="button" value="Preview" onclick="PreviewMessage();" /> 
<?				} ?>
					<input type="button" value="Resolve" onClick="location.href='staffpm.php?action=resolve&id=<?=$ConvID?>';" />
					<input type="submit" value="Send message" />
<?	
		} else {
?>
					<input type="button" value="Unresolve" onClick="location.href='staffpm.php?action=unresolve&id=<?=$ConvID?>';" />
<?	
		}
?>
				</form>
			</div>
		</div>
	</div>
</div>
<?
		
	show_footer();
	} else {
		// User is trying to view someone else's conversation
		error(403);
	}
} else {
	// No id
	header('Location: staffpm.php');
}