View file mail/act/write.php

<?php defined('ACCESS') OR die('No direct script access...');
/**
 * Author - koder_alex
 * ISQ - 669906617
 * VK - https://vk.com/koder_alex
 * It is forbidden to give, sell, modify.
 */
thead('Выбор собеседника');
if($_SERVER['REQUEST_METHOD'] == 'POST')
{
	if(!empty($_POST['q']))
	{
		$_POST['q'] = implode('+', explode(' ', my_esc($_POST['q'])));
		redirect('/mail/?act=write&q='.$_POST['q'].'&type=2');
	}
	else
		redirect('/mail/?act=write');
}
$t = (isset($_GET['type']) && is_numeric($_GET['type']) && (int)$_GET['type'] <= 2? (int)$_GET['type'] : 0);
$sql = '';
if($config['q']['text'])
	$sql = "`user`.`nick` like '%".$config['q']['text']."%' AND ";

?>
<div class="head_panel">
  <div class="hp_block"><form action="/mail/?act=write" class="qsearch" method="POST">
  <table class="row_table"><tbody><tr>
    <td class="row_table_main_column">
      <div class="qs_field_wrap">   
        <div class="iwrap"><input class="textfield qs_textfield" name="q" value="<?= $config['q']['text'] ?>" autocomplete="off" id="ma_search_field" placeholder="Введите ник друга.." type="text"></div>
      </div>
    </td>
    <td class="row_table_last_column"><input class="button qs_button al_tab" value="Искать" type="submit"></td>
  </tr></tbody></table>
</form></div>
</div>
<?
$k_post=mysql_result(mysql_query("SELECT COUNT(frend) FROM `frends` INNER JOIN `user` ON `frends`.`frend`=`user`.`id` WHERE $sql`frends`.`user` = '$user[id]' AND `frends`.`i` = '1'"), 0);
if ($k_post)
{
	$k_page=k_page($k_post,$set['p_str']);
	$page=page($k_page);
	$start=$set['p_str']*$page-$set['p_str'];
	$q = mysql_query("SELECT frend FROM `frends` INNER JOIN `user` ON `frends`.`frend`=`user`.`id` WHERE $sql`frends`.`user` = '$user[id]' AND `frends`.`i` = '1' ORDER BY `user`.`date_last` DESC LIMIT $start, $set[p_str]");
	while($post = mysql_fetch_assoc($q))
	{
		$d = d_user($post['frend'], true, 'ii_img');
		?>
		<a href="/mail?act=show&amp;peer=<?= $d['id'] ?>" class="inline_item"><div class="ii_body"><?= $d['avatar'] ?><span class="ii_owner"><?= $d['group'] . preg_replace('/'.$config['q']['text'].'/i', '<em class="found">$0</em>', $d['nick']) . $d['medal'] . $d['online'] ?></span></div></a>
		<?
	}
	if ($k_page > 1)
		str_vk('/mail/?act=write&' . ($config['q']['text'] ?  'q='.$config['q']['text'].'&type=2&' : ''), $k_page, $page);
}
else
	show($config['q']['type'][$t], 'null');