View file wapirate/wml/inbxproc3.php

<?php 
include("head.php"); 
$pmtext = $_POST["pmtext"]; 
$fid = $_GET["fid"]; 
if($action=="sendpm") 
{ 
echo "<card id=\"main\" title=\"Inbox\">"; 
echo "<p align=\"center\">"; 
$whonick = getnick_uid($who); 
$byuid = getuid_sid($sid); 
$tm = time(); 
$lastpm = mysql_fetch_array(mysql_query("SELECT MAX(timesent) FROM ibwf_private WHERE byuid='".$byuid."'")); 
$pmfl = $lastpm[0]+getpmaf(); 
if($byuid==1218)$pmfl=0; 
if($pmfl<$tm) 
{ 
if(!isblocked($pmtext,$byuid)) 
{ 
if((!isignored($byuid, $who))&&(!istrashed($byuid))) 
{ 
$res = mysql_query("INSERT INTO ibwf_private SET text='".$pmtext."', byuid='".$byuid."', touid='".$who."', timesent='".$tm."'"); 
}else{ 
$res = true; 
} 
if($res) 
{ 

echo "<img src=\"images/ok.gif\" alt=\"O\"/>"; 
echo "PM was sent successfully to $whonick<br/><br/>"; 
echo parsepm($pmtext, $sid); 

}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>"; 
echo "Can't Send PM To $whonick<br/><br/>"; 
} 
}else{ 
$bantime = time() + (7*24*60*60); 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>"; 
echo "Can't Send PM To $whonick<br/><br/>"; 
echo "DONT SPAM<br/> As a result of your action:<br/><small><b>1. You have lost your shield.<br/>2. You have lost all your plusses.<br/>3. You are BANNED!</b></small>"; 
mysql_query("INSERT INTO ibwf_penalties SET uid='".$byuid."', penalty='1', exid='1', timeto='".$bantime."', pnreas='Banned: Automatic Ban for spamming'"); 
mysql_query("UPDATE ibwf_users SET plusses='0', shield='0' WHERE id='".$byuid."'"); 
mysql_query("INSERT INTO ibwf_private SET text='".$pmtext."', byuid='".$byuid."', touid='2', timesent='".$tm."'"); 
} 
}else{ 
$rema = $pmfl - $tm; 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>"; 
echo "Flood Control: $rema Seconds<br/><br/>"; 
} 
echo "<br/><br/><a href=\"inbox3.php?action=main&amp;fid=$fid\">Back to Inbox</a><br/>"; 
echo"<b><small>Or<br/></small></b>"; 
echo "<a href=\"index.php?action=viewfrm&amp;fid=$fid\">Back to Forum</a><br/>"; 
echo "<a href=\"index.php?action=main\"><img src=\"images/home.gif\" alt=\"*\"/>"; 
echo "Home</a>"; 
echo "</p>"; 
echo "</card>"; 
} 
else if($action=="sendto") 
{ 
echo "<card id=\"main\" title=\"Inbox\">"; 
echo "<p align=\"center\">"; 
$pmtou = $_POST["pmtou"]; 
$who = getuid_nick($pmtou); 
if($who==0) 
{ 
echo "<img src=\"images/notok.gif\" alt=\"x\"/>User Doesn't Exist<br/>"; 
}else{ 
$whonick = getnick_uid($who); 
$byuid = getuid_sid($sid); 
$tm = time(); 
$lastpm = mysql_fetch_array(mysql_query("SELECT MAX(timesent) FROM ibwf_private WHERE byuid='".$byuid."'")); 
$pmfl = $lastpm[0]+getpmaf(); 
if($pmfl<$tm) 
{ 
if(!isblocked($pmtext,$byuid)) 
{ 
if((!isignored($byuid, $who))&&(!istrashed($byuid))) 
{ 
$res = mysql_query("INSERT INTO ibwf_private SET text='".$pmtext."', byuid='".$byuid."', touid='".$who."', timesent='".$tm."'"); 
}else{ 
$res = true; 
} 
if($res) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>"; 
echo "PM was sent successfully to $whonick<br/><br/>"; 
echo parsepm($pmtext, $sid); 

}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>"; 
echo "Can't Send PM To $whonick<br/><br/>"; 
} 
}else{ 
$bantime = time() + (7*24*60*60); 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>"; 
echo "Can't Send PM To $whonick<br/><br/>"; 
echo "DONT SPAM!!!<br/> As a result of your action:<br/><small><b>1. You have lost your shield.<br/>2. You have lost all your plusses.<br/>3. AUTOMATIC BAN!</b></small>"; 
mysql_query("INSERT INTO ibwf_penalties SET uid='".$byuid."', penalty='1', exid='1', timeto='".$bantime."', pnreas='Banned: Automatic Ban for spamming'"); 
mysql_query("UPDATE ibwf_users SET plusses='0', shield='0' WHERE id='".$byuid."'"); 
mysql_query("INSERT INTO ibwf_private SET text='".$pmtext."', byuid='".$byuid."', touid='2', timesent='".$tm."', reported='1'"); 
} 
}else{ 
$rema = $pmfl - $tm; 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>"; 
echo "Flood Control: $rema Seconds<br/><br/>"; 
} 

} 

echo "<br/><br/><a href=\"inbox3.php?action=main&amp;fid=$fid\">Back to Inbox</a><br/>"; 
echo "<a href=\"index.php?action=main\"><img src=\"images/home.gif\" alt=\"*\"/>"; 
echo "Home</a>"; 
echo "</p>"; 
echo "</card>"; 
} 
else if($action=="proc") 
{ 
$pmact = $_POST["pmact"]; 
$pact = explode("-",$pmact); 
$pmid = $pact[1]; 
$pact = $pact[0]; 
echo "<card id=\"main\" title=\"Inbox\">"; 
echo "<p align=\"center\">"; 
$pminfo = mysql_fetch_array(mysql_query("SELECT text, byuid, touid, reported FROM ibwf_private WHERE id='".$pmid."'")); 
if($pact=="rep") 
{ 
addonline(getuid_sid($sid),"Sending PM",""); 

$whonick = getnick_uid($pminfo[1]); 
echo "Send PM to $whonick<br/><br/>"; 
echo "<input name=\"pmtext\" maxlength=\"500\"/><br/>"; 
echo "<anchor>SEND<go href=\"inbxproc3.php?action=sendpm&amp;who=$pminfo[1]&amp;fid=$fid\" method=\"post\">"; 
echo "<postfield name=\"pmtext\" value=\"$(pmtext)\"/>"; 
echo "</go></anchor>"; 

}else if($pact=="del") 
{ 
addonline(getuid_sid($sid),"Deleting PM",""); 
if(getuid_sid($sid)==$pminfo[2]) 
{ 
if($pminfo[3]=="1") 
{ 

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't Delete PM At The Moment"; 
}else{ 
$del = mysql_query("DELETE FROM ibwf_private WHERE id='".$pmid."' "); 
if($del) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>PM deleted successfully"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't Delete PM At The Moment"; 
} 
} 

}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM ain't yours"; 
} 
}else if($pact=="str") 
{ 
addonline(getuid_sid($sid),"Starring PM",""); 
if(getuid_sid($sid)==$pminfo[2]) 
{ 
$str = mysql_query("UPDATE ibwf_private SET starred='1' WHERE id='".$pmid."' "); 
if($str) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>PM starred successfully"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't star PM at the moment"; 
} 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM ain't yours"; 
} 
}else if($pact=="ust") 
{ 
addonline(getuid_sid($sid),"Unstarring PM",""); 
if(getuid_sid($sid)==$pminfo[2]) 
{ 
$str = mysql_query("UPDATE ibwf_private SET starred='0' WHERE id='".$pmid."' "); 
if($str) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>PM unstarred successfully"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't unstar PM at the moment"; 
} 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM ain't yours"; 
} 
}else if($pact=="rpt") 
{ 
addonline(getuid_sid($sid),"Reporting PM",""); 
if(getuid_sid($sid)==$pminfo[2]) 
{ 
if($pminfo[3]=="0") 
{ 
$str = mysql_query("UPDATE ibwf_private SET reported='1' WHERE id='".$pmid."' "); 
if($str) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>PM reported to mods successfully"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't report PM at the moment"; 
} 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM is already reported"; 
} 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM ain't yours"; 
} 
} 
else if($pact=="frd") 
{ 
addonline(getuid_sid($sid),"Forwarding PM",""); 
if(getuid_sid($sid)==$pminfo[2]||getuid_sid($sid)==$pminfo[1]) 
{ 

echo "Forward to E-Mail:<br/><br/>"; 
echo "<input name=\"email\" maxlength=\"250\"/><br/>"; 
echo "<anchor>Forward<go href=\"inbxproc3.php?action=frdpm&amp;fid=$fid\" method=\"post\">"; 
echo "<postfield name=\"email\" value=\"$(email)\"/>"; 
echo "<postfield name=\"pmid\" value=\"$pmid\"/>"; 
echo "</go></anchor>"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM ain't yours"; 
} 
} 
else if($pact=="dnl") 
{ 
addonline(getuid_sid($sid),"Downloading PM",""); 
if(getuid_sid($sid)==$pminfo[2]||getuid_sid($sid)==$pminfo[1]) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"X\"/>request processed successfully<br/><br/>"; 
echo "<a href=\"rwdpm.php?action=dpm&amp;pmid=$pmid\">Download PM</a>"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM ain't yours"; 
} 
} 
echo "<br/><br/><a href=\"inbox3.php?action=main&amp;fid=$fid\">Back to Inbox</a><br/>"; 
echo "<a href=\"index.php?action=main\"><img src=\"images/home.gif\" alt=\"*\"/>"; 
echo "Home</a>"; 
echo "</p>"; 
echo "</card>"; 
} 

else if($action=="proall") 
{ 
$pact = $_POST["pmact"]; 
echo "<card id=\"main\" title=\"Inbox\">"; 
echo "<p align=\"center\">"; 
addonline(getuid_sid($sid),"Deleting PMs",""); 
$uid = getuid_sid($sid); 
if($pact=="ust") 
{ 

$del = mysql_query("DELETE FROM ibwf_private WHERE touid='".$uid."' AND reported !='1' AND starred='0' And unread='0'"); 
if($del) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>All PMS except starred and unread are deleted successfully"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't Delete PM At The Moment"; 
} 
}else if($pact=="red") 
{ 

$del = mysql_query("DELETE FROM ibwf_private WHERE touid='".$uid."' AND reported !='1' and unread='0'"); 
if($del) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>All PMS except unread, including starred are deleted successfully"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't Delete PM at The Moment"; 
} 

}else if($pact=="all") 
{ 
$del = mysql_query("DELETE FROM ibwf_private WHERE touid='".$uid."' AND reported !='1'"); 
if($del) 
{ 
echo "<img src=\"images/ok.gif\" alt=\"O\"/>All PMS except reported, including starred and unread are deleted successfully"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>Can't Delete PM At The Moment"; 
} 
} 

echo "<br/><br/><a href=\"inbox3.php?action=main&amp;fid=$fid\">Back to Inbox</a><br/>"; 
echo "<a href=\"index.php?action=main\"><img src=\"images/home.gif\" alt=\"*\"/>"; 
echo "Home</a>"; 
echo "</p>"; 
echo "</card>"; 

} 
else if($action=="frdpm") 
{ 
$email = $_POST["email"]; 
$pmid = $_POST["pmid"]; 
addonline(getuid_sid($sid),"Forwarding PM",""); 
echo "<card id=\"main\" title=\"Inbox\">"; 
echo "<p align=\"center\">"; 

$pminfo = mysql_fetch_array(mysql_query("SELECT text, byuid, timesent,touid, reported FROM ibwf_private WHERE id='".$pmid."'")); 


if(($pminfo[3]==getuid_sid($sid))||($pminfo[1]==getuid_sid($sid))) 
{ 
$from_head = "From: noreply@wapirate.wen.ru"; 
$subject = "PM By ".getnick_uid($pminfo[1])." To ".getnick_uid($pminfo[3])." (wapirate.wen.ru)"; 
$content = "Date: ".date("l d/m/y H:i:s", $pminfo[2])."\n\n"; 
$content .= $pminfo[0]."\n------------------------\n"; 
$content .= "wapirate.wen.ru: The best wap community!"; 
mail($email, $subject, $content, $from_head); 
echo "<img src=\"images/ok.gif\" alt=\"X\"/>PM forwarded to $email"; 
}else{ 
echo "<img src=\"images/notok.gif\" alt=\"X\"/>This PM ain't yours"; 
} 
echo "<br/><br/><a href=\"inbox3.php?action=main&amp;fid=$fid\">Back to Inbox</a><br/>"; 
echo "<a href=\"index.php?action=main\"><img src=\"images/home.gif\" alt=\"*\"/>"; 
echo "Home</a>"; 
echo "</p>"; 
echo "</card>"; 

} 

else{ 
addonline(getuid_sid($sid),"Lost in inbox lol",""); 
echo "<card id=\"main\" title=\"Inbox\">"; 
echo "<p align=\"center\">"; 
echo "I don't know how you got in here, but there's nothing to show<br/><br/>"; 
echo "<a href=\"index.php?action=main\"><img src=\"images/home.gif\" alt=\"*\"/>"; 
echo "Home</a>"; 
echo "</p></card>"; 
} 
?> 
</wml>