View file mail/act/msg.php

<?php defined('ACCESS') OR die('No direct script access...');
/**
 * Author - koder_alex
 * ISQ - 669906617
 * VK - https://vk.com/koder_alex
 * It is forbidden to give, sell, modify.
 */
	if(!(isset($_GET['id']) && is_numeric($_GET['id'])))
		redirect('/mail/', 'Ошибка доступа.', 'error');
	thead('Сообщение');
	$mail = mysql_fetch_assoc(mysql_query("SELECT id, id_user, IF(id_user = '$user[id]', id_kont, id_user) AS contact, time, msg, attachments FROM `mail` WHERE `id` = '".(int)$_GET['id']."' AND (`id_user` = '".$user['id']."' OR `id_kont` = '".$user['id']."')  AND unlink != '".$user['id']."' LIMIT 1"));
	if(!$mail)
		redirect('/mail/', 'Ошибка доступа.', 'error');
	$ank = d_user($mail['contact'], 1, 'op_img');

	?>
  <div class="owner_panel">
    <a href="/id<?= $ank['id'] ?>"><?= $ank['avatar'] ?></a>
    <div class="op_cont">
      <div><?= $mail['id_user'] == $user['id'] ? 'Ваше сообщение для ' : '' ?><a class="op_owner" href="/id<?= $ank['id'] ?>"><?= $ank['group'] . $ank['nick'] . $ank['medal'] . $ank['online'] ?></a></div>
      <div class="op_info"><span class="item_date"><?= vremja($mail['time']) ?></span></div>
    </div>
  </div>
    <div class="msg_item _msg single_msg_item">
      <div class="mi_cont">
        <div class="mi_head"></div>
        <div class="mi_body"><div class="mi_text"><?= output_text($mail['msg']) ?></div>
        <?
        if($mail['attachments'])
		    showAttachments($mail['id']);
        ?>
      	<div class="mi_links"><a href="/mail/?act=delete&amp;id=<?= $mail['id'] ?>">Удалить</a> - <a href="/mail/?act=show&amp;peer=<?= $mail['contact'] ?>">Назад</a></div></div></div></div>