View file chat/rooms.post.php

<?php
#-*- coding: utf-8 -*-
#Name:     chatRooms v1.0 alpha
#Author:    Nugroho Adi Prayatso
#e-mail:     hongoaoi@gmail.com
#Web:        frendzzi.tk

include_once '../sys/inc/start.php';
$doc = new document();
$doc->title='Chat';

if ($user->group >= 1)mysql_query("DELETE FROM `chat_who` WHERE `id_user` = '$user->id'");
mysql_query("DELETE FROM `chat_who` WHERE `time` < '".(TIME-120)."'");
if (!isset($_GET['id']) || !is_numeric($_GET['id']))
{
header('Refresh: 1; url=./');
$doc->err('Error when selecting');
exit;
}
$id_room=(int)$_GET['id'];

$q=mysql_query("SELECT * FROM `chat_rooms` WHERE `id` = '$id_room'");

if (!mysql_num_rows($q))
{
header('Refresh: 1; url=./');
$doc->err('Not found');
exit;
}

$room=mysql_fetch_assoc($q);
$nama=mysql_fetch_array(mysql_query("select * from chat_rooms where id =".$id_room));

if ($user->group >= 1)mysql_query("INSERT INTO `chat_who` (`id_user`, `time`,  `room`) values('$user->id', '" . TIME . "', '$id_room')");

//$pesan="[user]$user->id[/user], entered $nama[name] room";
if ($user->group >= 1)mysql_query("INSERT INTO `chat_post` (`id_user`, `time`, `msg`, `room`) values('0', '" . TIME . "', '$pesan', '$id_room') LIMIT 1");//
##pengembangan kedepan

$doc->title = 'Chat - '.$nama['name'].' ('.mysql_result(mysql_query("SELECT COUNT(*) FROM `users_online` WHERE `request` LIKE '/chat/rooms.%.php?id=$id_room'"),0).')';

    if (isset($_POST['msg']) && $user->group) {
        $msg = text::input_text($_POST['msg']);

        if ($mat = is_valid::mat($msg))
            $doc->err('Found bad tense: %s', $mat);
        elseif ($msg) {

            $user->balls++;
mysql_query("INSERT INTO `chat_post` (`id_user`, `time`, `msg`, `room`) values('$user->id', '" . TIME . "', '".my_esc($msg)."', '$id_room')");
header('Refresh: 1; url=rooms.post.php?id='.$id_room);
            $doc->ret('Back', '?id='.$id_room);
            $doc->msg('Message successfully added');
            exit;
        } else {
            $doc->err('Error when post a message');
        }
}

$smarty = new design();
$smarty->assign('method','post');

if ($user->group){

$elements=array();
$elements[]=array('type'=>'textarea', 'title'=>'Messages', 'br'=>1, 'info'=>array('name'=>'msg'));

$elements[]=array('type'=>'submit', 'br'=>0, 'info'=>array('value'=>'Submit'));
$smarty->assign('el',$elements);
$smarty->display('input.form.tpl');
    }



$posts = array();
##
$link = "rooms.who.php?id=$room[id]";
$whois = "<a href='$link'>".mysql_result(mysql_query("SELECT COUNT(*) FROM `users_online` WHERE `request` LIKE '/chat/rooms.%.php?id=$id_room'"),0)." people online now";
##
$posts[] = array('icon' => array('size' => 'small', 'src' => '/sys/images/icons/dpanel.smiles.png'), 'title' => $whois, 'url'=>'/chat/rooms.who.php?id='.$id_room.'');

$pages = new pages;
$pages->posts = mysql_result(mysql_query("SELECT COUNT(*) FROM `chat_post` WHERE `room` = '$room[id]'"), 0);$pages->this_page();

$q = mysql_query("SELECT * FROM `chat_post` WHERE `room` = '$room[id]' ORDER BY `id` DESC LIMIT {$pages->my_start()}, {$pages->items_per_page}");
while ($msg=mysql_fetch_assoc($q)) {

    $act = array();

    if ($user->group >= 2)
        $act[] = array('delete', "chat.delete.php?id=$msg[id]&amp;return=" . URL);

    $ank = new user($msg['id_user']);
    $posts[] = array('title' => $ank->show() . ' (' . vremja($msg['time']) . ')', 'icon' => $ank->icon(), 'post' => stripslashes(output_text($msg['msg'])), 'act' => $act);

}
if (!$posts)$posts[]=array('icon'=>array('size'=>'small','src'=>'/sys/images/icons/empty.png'),'title'=>'No messages');

$show = new design();
$show->assign('post',$posts);
$show->display('design.listing.tpl');

$pages->listing('?id='.$id_room.'&amp;');
if ($user->group >= 4)
    $doc->act('Delete rooms', 'chat.delete_room.php?id='.$id_room.'');
if ($user->group >= 4)
    $doc->act('Settings', 'rooms.edit.php?id='.$id_room.'');
if ($user->group)
    $doc->ret('Chat', '/chat');

?>