Subversion Repositories Applications.papyrus

Compare Revisions

Ignore whitespace Rev 830 → Rev 831

/trunk/client/phorum/bibliotheque/phorum/pm.php
New file
0,0 → 1,966
<?php
 
////////////////////////////////////////////////////////////////////////////////
// //
// Copyright (C) 2006 Phorum Development Team //
// http://www.phorum.org //
// //
// This program is free software. You can redistribute it and/or modify //
// it under the terms of either the current Phorum License (viewable at //
// phorum.org) or the Phorum License that was distributed with this file //
// //
// This program is distributed in the hope that it will be useful, //
// but WITHOUT ANY WARRANTY, without even the implied warranty of //
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. //
// //
// You should have received a copy of the Phorum License //
// along with this program. //
////////////////////////////////////////////////////////////////////////////////
 
// These language strings are set dynamically, so the language
// tool won't recognize them automatically. Therefore they are
// mentioned here.
// $PHORUM["DATA"]["LANG"]["PMFolderCreateSuccess"]
// $PHORUM["DATA"]["LANG"]["PMFolderRenameSuccess"]
// $PHORUM["DATA"]["LANG"]["PMFolderDeleteSuccess"]
// $PHORUM["DATA"]["LANG"]["PMSent"]
 
// PMTODO If reading from a mail notify, lookup the folder_id,
// so the close button will work. Now the folder_id is empty.
// PMTODO implement pm_reply_flag functionality
 
define('phorum_page','pm');
 
include_once("./common.php");
 
phorum_require_login();
 
// set all our common URL's
phorum_build_common_urls();
 
include_once("./include/email_functions.php");
include_once("./include/format_functions.php");
 
// a user has to be logged in to use the private messages system
if (!$PHORUM["DATA"]["LOGGEDIN"]) {
phorum_redirect_by_url(phorum_get_url(PHORUM_LIST_URL));
exit();
}
 
// if the user is not fully logged in, send him to the login page
if (!$PHORUM["DATA"]["FULLY_LOGGEDIN"]) {
 
// Construct the URL to redirect to after logging in.
$args = array(PHORUM_PM_URL);
foreach ($PHORUM["args"] as $k => $v) {
if (in_array("$k=$v", $PHORUM["DATA"]["GET_VARS"])) continue;
if(is_numeric($k)) $args[] = $v; else $args[] = "$k=$v";
}
$redir = urlencode(call_user_func_array('phorum_get_url', $args));
 
phorum_redirect_by_url(phorum_get_url(PHORUM_LOGIN_URL, "redir=$redir"));
exit();
}
 
// If private messages are disabled, just show a simple error message.
if (! $PHORUM["enable_pm"]) {
$PHORUM["DATA"]["BLOCK_CONTENT"] = $PHORUM["DATA"]["LANG"]["PMDisabled"];
include phorum_get_template("header");
phorum_hook("after_header");
include phorum_get_template("stdblock");
phorum_hook("before_footer");
include phorum_get_template("footer");
return;
}
 
// ------------------------------------------------------------------------
// Parameter handling
// ------------------------------------------------------------------------
 
// Retrieve a parameter from either the args-list or $_POST.
function phorum_getparam($name)
{
$PHORUM = $GLOBALS["PHORUM"];
 
$ret = NULL;
if (isset($PHORUM["args"][$name])) {
$ret = trim($PHORUM["args"][$name]);
}elseif (isset($_POST[$name])) {
$ret = trim($_POST[$name]);
}
 
return $ret;
}
 
// Get basic parameters.
$action = phorum_getparam('action');
$page = phorum_getparam('page');
$folder_id = phorum_getparam('folder_id');
$pm_id = phorum_getparam('pm_id');
$forum_id = $PHORUM["forum_id"];
$user_id = $PHORUM["user"]["user_id"];
$hide_userselect = phorum_getparam('hide_userselect');
 
// Get recipients from the form and create a valid list of recipients.
$recipients = array();
if (isset($_POST["recipients"]) && is_array($_POST["recipients"])) {
foreach ($_POST["recipients"] as $id => $username) {
$user = phorum_user_get($id, false);
if ($user) {
$recipients[$id] = $user;
}
}
}
 
// init error var
$error_msg = "";
 
// ------------------------------------------------------------------------
// Banlist checking
// ------------------------------------------------------------------------
 
// Start editor Post message Post reply
if ($page == 'send' || $action == 'post' || ($action == 'list' && isset($pm_id)))
{
include_once("./include/profile_functions.php");
$error = phorum_check_bans(array(
array($PHORUM["user"]["username"], PHORUM_BAD_NAMES),
array($PHORUM["user"]["email"], PHORUM_BAD_EMAILS),
array($user_id, PHORUM_BAD_USERID),
array(NULL, PHORUM_BAD_IPS),
));
 
// Show an error in case we encountered a ban.
if (! empty($error)) {
$PHORUM["DATA"]["ERROR"] = $error;
include phorum_get_template("header");
phorum_hook("after_header");
include phorum_get_template("message");
phorum_hook("before_footer");
include phorum_get_template("footer");
return;
}
}
 
// ------------------------------------------------------------------------
// Perform actions
// ------------------------------------------------------------------------
 
// Initialize error and ok message.
$error = '';
$okmsg = '';
 
// init folder list
$pm_folders = phorum_db_pm_getfolders(NULL, true);
 
// Translate button clicks from the read page to appropriate actions.
if (isset($_POST['close_message'])) {
$page = 'list';
} elseif (isset($_POST['delete_message'])) {
$page = 'list';
$_POST['delete'] = 1;
$_POST['checked'] = array($pm_id);
$action = 'list';
} elseif (isset($_POST['move_message'])) {
$page = 'list';
$_POST['move'] = 1;
$_POST['checked'] = array($pm_id);
$action = 'list';
} elseif (isset($_POST['reply']) || isset($_POST['reply_to_all'])) {
$page = 'send';
$action = '';
}
 
if (!empty($action)) {
 
// Utility function to check if a foldername already exists.
// No extreme checking with locking here. Technically
// speaking duplicate foldernames will work. It's just
// confusing for the user.
function phorum_pm_folder_exists($foldername)
{
global $pm_folders;
foreach ($pm_folders as $id => $data) {
if (strcasecmp($foldername, $data["name"]) == 0) {
return true;
}
}
return false;
}
 
// Redirect will be set to a true value if after performing
// the action we want to use a redirect to get to the
// result page. This is done for two reasons:
// 1) Let the result page use refreshed PM data;
// 2) Prevent reloading of the action page (which could for
// example result in duplicate message sending).
// The variable $redirect_message can be set to a language
// key string to have a message displayed after redirection.
$redirect = false;
$redirect_message = '';
 
switch($action) {
 
// Actions which are triggered from the folder management interface.
case "folders":
 
$redirect = false;
$page = "folders";
 
// Create folder.
if (!empty($_POST['create_folder']))
{
$foldername = trim($_POST["create_folder_name"]);
 
if ($foldername != '')
{
if (phorum_pm_folder_exists($foldername)) {
$error = $PHORUM["DATA"]["LANG"]["PMFolderExistsError"];
} else {
phorum_db_pm_create_folder($foldername);
$redirect_message = "PMFolderCreateSuccess";
$redirect = true;
}
 
}
}
 
// Rename a folder.
elseif (!empty($_POST['rename_folder']))
{
$from = $_POST['rename_folder_from'];
$to = trim($_POST['rename_folder_to']);
 
if (!empty($from) && $to != '') {
if (phorum_pm_folder_exists($to)) {
$error = $PHORUM["DATA"]["LANG"]["PMFolderExistsError"];
} else {
phorum_db_pm_rename_folder($from, $to);
$redirect_message = "PMFolderRenameSuccess";
$redirect = true;
}
}
}
 
// Delete a folder.
elseif (!empty($_POST['delete_folder']))
{
$folder_id = $_POST["delete_folder_target"];
if (!empty($folder_id)) {
phorum_db_pm_delete_folder($folder_id);
$redirect_message = "PMFolderDeleteSuccess";
$redirect = true;
 
// Invalidate user cache, to update message counts.
phorum_cache_remove('user',$user_id);
}
}
 
break;
 
 
// Actions which are triggered from the list interface.
case "list":
 
// Delete all checked messages.
if (isset($_POST["delete"]) && isset($_POST["checked"])) {
foreach($_POST["checked"] as $pm_id) {
if (phorum_db_pm_get($pm_id, $folder_id)) {
phorum_db_pm_delete($pm_id, $folder_id);
}
}
 
// Invalidate user cache, to update message counts.
phorum_cache_remove('user',$user_id);
}
 
// Move checked messages to another folder.
elseif (isset($_POST["move"]) && isset($_POST["checked"])) {
$to = $_POST['target_folder'];
if (! empty($to)) {
foreach($_POST["checked"] as $pm_id) {
if (phorum_db_pm_get($pm_id, $folder_id)) {
phorum_db_pm_move($pm_id, $folder_id, $to);
}
}
}
}
 
$page = "list";
$redirect = true;
 
break;
 
 
// Actions which are triggered from the post form.
case "post":
 
// Parse clicks on the image buttons that we use for
// deleting recipients from the list of recipients.
// These are not sent as name=value, but instead
// name_x=xclickoffset and name_y=yclickoffset are sent.
// Also accept normal button clicks with name="del_rcpt::<id>",
// so template builders can use that.
$del_rcpt = NULL;
foreach ($_POST as $key => $val) {
if (preg_match('/^del_rcpt::(\d+)(_x)?$/', $key, $m)) {
$del_rcpt = $m[1];
break;
}
}
 
// Determine what action to perform.
$action = "post";
if (isset($_POST["preview"])) $action = "preview";
if (isset($_POST["rcpt_add"])) $action = "rcpt_add";
if (!is_null($del_rcpt)) $action = "del_rcpt";
 
// Adding a recipient.
if ($action == "rcpt_add" || $action == "preview" || $action == "post") {
 
// Convert adding a recipient by name to adding by user id.
if (isset($_POST["to_name"])) {
$to_name = trim($_POST["to_name"]);
if ($to_name != '') {
$to_user_id = phorum_db_user_check_field('username', $to_name);
if ($to_user_id) {
$_POST["to_id"] = $to_user_id;
unset($_POST["to_name"]);
} else {
$error = $PHORUM["DATA"]["LANG"]["UserNotFound"];
}
}
}
 
// Add a recipient by id.
if (isset($_POST["to_id"]) && is_numeric($_POST["to_id"])) {
$user = phorum_user_get($_POST["to_id"], false);
if ($user) {
$recipients[$user["user_id"]] = $user;
}
}
 
$page = "send";
 
// Deleting a recipient.
} elseif ($action == "del_rcpt") {
 
unset($recipients[$del_rcpt]);
$page = "send";
 
// When deleting a recipient, we always have to
// show the user selection. Put it back in, for
// situations where we had the user selection
// hidden intentionally.
$hide_userselect = 0;
}
 
// For previewing the message, no action has to be taken.
if ($action == "preview") {
$page = "send";
}
 
// Posting the message.
elseif ($action == "post") {
 
// Only send the message if we have at least one recipient.
if (count($recipients)) {
$_POST["subject"] = trim($_POST["subject"]);
$_POST["message"] = trim($_POST["message"]);
 
// Only send the message if all required message data is filled in.
if ($_POST["subject"] == '' || $_POST["message"] == '') {
 
$error = $PHORUM["DATA"]["LANG"]["PMRequiredFields"];
 
// Message data is okay. Post the message.
} else {
 
if (empty($_POST["keep"])) $_POST["keep"] = 0;
 
// Check if sender and recipients have not yet reached the
// maximum number of messages that may be stored on the server.
// Administrators may always send PM.
if (!$PHORUM['user']['admin'] && $PHORUM['max_pm_messagecount'])
{
// Build a list of users to check.
$checkusers = $recipients;
if ($_POST['keep']) $checkusers[] = $PHORUM['user'];
 
// Check all users.
foreach ($checkusers as $user)
{
if ($user['admin']) continue; // No limits for admins
$current_count = phorum_db_pm_messagecount(PHORUM_PM_ALLFOLDERS, $user["user_id"]);
if ($current_count['total'] >= $PHORUM['max_pm_messagecount']) {
if ($user['user_id'] == $PHORUM["user"]["user_id"]) {
$error = $PHORUM["DATA"]["LANG"]["PMFromMailboxFull"];
} else {
$error = $PHORUM["DATA"]["LANG"]["PMToMailboxFull"];
$error = str_replace('%recipient%', htmlspecialchars($user["username"]), $error);
}
}
}
}
 
// Send the private message if no errors occurred.
if (empty($error)) {
 
$pm_message_id = phorum_db_pm_send($_POST["subject"], $_POST["message"], array_keys($recipients), NULL, $_POST["keep"]);
 
// Show an error in case of problems.
if (! $pm_message_id) {
 
$error = $PHORUM["DATA"]["LANG"]["PMNotSent"];
 
// Do e-mail notifications on successful sending.
} else {
 
include_once("./include/email_functions.php");
 
$pm_message = array(
'pm_message_id' => $pm_message_id,
'subject' => $_POST['subject'],
'message' => $_POST['message'],
'from_username' => $PHORUM['user']['username'],
'from_user_id' => $user_id,
);
 
// Sort all recipients that want a notify by language.
$langrcpts = array();
foreach ($recipients as $rcpt_id => $rcpt) {
 
if ($rcpt["pm_email_notify"]) {
if (!isset($langrcpts[$rcpt["user_language"]])) {
$langrcpts[$rcpt["user_language"]] = array($rcpt);
} else {
$langrcpts[$rcpt["user_language"]][] = $rcpt;
}
}
}
 
phorum_email_pm_notice($pm_message, $langrcpts);
 
phorum_hook("pm_sent", $pm_message);
}
}
 
// Invalidate user cache, to update message counts.
phorum_cache_remove('user', $user_id);
foreach ($recipients as $rcpt) {
phorum_cache_remove('user', $rcpt["user_id"]);
}
 
$redirect_message = "PMSent";
}
 
} else {
$error = $PHORUM["DATA"]["LANG"]["PMNoRecipients"];
}
 
// Stay on the post page in case of errors. Redirect on success.
if ($error) {
$page = "send";
} else {
$redirect = true;
}
 
}
 
break;
 
 
// Actions that are triggered from the buddy list.
case "buddies":
 
// Delete all checked buddies.
if (isset($_POST["delete"]) && isset($_POST["checked"])) {
foreach($_POST["checked"] as $buddy_user_id) {
phorum_db_pm_buddy_delete($buddy_user_id);
phorum_hook("buddy_delete", $buddy_user_id);
}
}
 
// Send a PM to the checked buddies.
if (isset($_POST["send_pm"]) && isset($_POST["checked"])) {
$pm_rcpts = $_POST["checked"];
if (count($pm_rcpts)) {
$redirect = true;
$page = "send";
} else {
unset($pm_rcpts);
}
}
 
break;
 
 
// Add a user to this user's buddy list.
case "addbuddy":
 
$buddy_user_id = $PHORUM["args"]["addbuddy_id"];
if (!empty($buddy_user_id)) {
if (phorum_db_pm_buddy_add($buddy_user_id)) {
$okmsg = $PHORUM["DATA"]["LANG"]["BuddyAddSuccess"];
phorum_hook("buddy_add", $buddy_user_id);
} else {
$error = $PHORUM["DATA"]["LANG"]["BuddyAddFail"];
}
}
break;
 
 
default:
die("Unhandled action for pm.php: " . htmlspecialchars($action));
 
}
 
// The action has been completed successfully.
// Redirect the user to the result page.
if ($redirect)
{
$args = array(
PHORUM_PM_URL,
"page=" . $page,
"folder_id=" . $folder_id,
);
if (isset($pm_rcpts)) $args[] = "to_id=" . implode(':', $pm_rcpts);
if (!empty($pm_id)) $args[] = "pm_id=" . $pm_id;
if (!empty($redirect_message)) $args[] = "okmsg=" . $redirect_message;
 
$redir_url = call_user_func_array('phorum_get_url', $args);
 
phorum_redirect_by_url($redir_url);
exit();
}
 
}
 
// ------------------------------------------------------------------------
// Display a PM page
// ------------------------------------------------------------------------
 
// Use the message list as the default page.
if (!$page){
$page = "list";
$folder_id = PHORUM_PM_INBOX;
}
 
// Show an OK message for a redirected page?
$okmsg_id = phorum_getparam('okmsg');
if ($okmsg_id && isset($PHORUM["DATA"]["LANG"][$okmsg_id])) {
$okmsg = $PHORUM["DATA"]["LANG"][$okmsg_id];
}
 
// Make error and OK messages available in the template.
$PHORUM["DATA"]["ERROR"] = (empty($error)) ? "" : $error;
$PHORUM["DATA"]["OKMSG"] = (empty($okmsg)) ? "" : $okmsg;
 
switch ($page) {
 
// Manage the PM folders.
case "folders":
 
$PHORUM["DATA"]["CREATE_FOLDER_NAME"] = isset($_POST["create_folder_name"]) ? htmlspecialchars($_POST["create_folder_name"]) : '';
$PHORUM["DATA"]["RENAME_FOLDER_NAME"] = isset($_POST["rename_folder_name"]) ? htmlspecialchars($_POST["rename_folder_name"]) : '';
$template = "pm_folders";
break;
 
 
// Manage the buddies.
case "buddies":
 
// Retrieve a list of users that are buddies for the current user.
$buddy_list = phorum_db_pm_buddy_list(NULL, true);
if (count($buddy_list)) {
$buddy_users = phorum_user_get(array_keys($buddy_list), false);
$buddy_users = phorum_hook("read_user_info", $buddy_users);
} else {
$buddy_users = array();
}
 
// Sort the buddies by username.
function phorum_sort_buddy_list($a,$b) {
return strcasecmp($a["username"], $b["username"]);
}
uasort($buddy_users, 'phorum_sort_buddy_list');
 
$buddies = array();
foreach ($buddy_users as $id => $buddy_user) {
$buddy = array(
'user_id' => $id,
'profile_url' => phorum_get_url(PHORUM_PROFILE_URL, $buddy_user["user_id"]),
'username' => htmlspecialchars($buddy_user["username"]),
'real_name' => isset($buddy_user["real_name"]) ? htmlspecialchars($buddy_user["real_name"]) : '',
'mutual' => $buddy_list[$id]["mutual"],
);
 
if (!$buddy_user['hide_activity']) {
$buddy["date_last_active"] = phorum_date($PHORUM["short_date"], $buddy_user["date_last_active"]);
} else {
$buddy["date_last_active"] = "-";
}
$buddies[$id] = $buddy;
}
 
$PHORUM["DATA"]["USERTRACK"] = $PHORUM["track_user_activity"];
$PHORUM["DATA"]["BUDDIES"] = $buddies;
$PHORUM["DATA"]["BUDDYCOUNT"] = count($buddies);
 
$PHORUM["DATA"]["PMLOCATION"] = $PHORUM["DATA"]["LANG"]["Buddies"];
 
$template = "pm_buddies";
break;
 
 
// Show a listing of messages in a folder.
case "list":
 
// Check if the folder exists for the user.
if (! isset($pm_folders[$folder_id])) {
$PHORUM["DATA"]["BLOCK_CONTENT"] = $PHORUM["DATA"]["LANG"]["PMFolderNotAvailable"];
$template = "stdblock";
} else {
 
$list = phorum_db_pm_list($folder_id);
 
// Prepare data for the templates (formatting and XSS prevention).
$list = phorum_pm_format($list);
foreach ($list as $message_id => $message)
{
$list[$message_id]["from_profile_url"] = phorum_get_url(PHORUM_PROFILE_URL, $message["from_user_id"]);
$list[$message_id]["read_url"]=phorum_get_url(PHORUM_PM_URL, "page=read", "folder_id=$folder_id", "pm_id=$message_id");
$list[$message_id]["date"] = phorum_date($PHORUM["short_date"], $message["datestamp"]);
$list[$message_id]["recipient_count"] = count($message["recipients"]);
$receive_count = 0;
foreach ($message["recipients"] as $rcpt_id => $rcpt) {
if ($rcpt["read_flag"]) $receive_count++;
$list[$message_id]["recipients"][$rcpt_id]["username"] = htmlspecialchars($rcpt["username"]);
$list[$message_id]["recipients"][$rcpt_id]["to_profile_url"] = phorum_get_url(PHORUM_PROFILE_URL, $rcpt_id);
}
$list[$message_id]["receive_count"] = $receive_count;
}
 
// Setup template variables.
$PHORUM["DATA"]["MESSAGECOUNT"] = count($list);
$PHORUM["DATA"]["MESSAGES"] = $list;
$PHORUM["DATA"]["PMLOCATION"] = $pm_folders[$folder_id]["name"];
 
$template = "pm_list";
}
 
break;
 
 
// Read a single private message.
case "read":
 
if (($message=phorum_db_pm_get($pm_id, $folder_id))) {
 
// Mark the message read.
if (! $message['read_flag']) {
phorum_db_pm_setflag($message["pm_message_id"], PHORUM_PM_READ_FLAG, true);
 
// Invalidate user cache, to update message counts.
phorum_cache_remove('user',$user_id);
}
 
// Run the message through the default message formatting.
list($message) = phorum_pm_format(array($message));
 
// Setup data for recipients.
foreach ($message["recipients"] as $rcpt_id => $rcpt) {
$message["recipients"][$rcpt_id]["username"] = htmlspecialchars($rcpt["username"]);
$message["recipients"][$rcpt_id]["to_profile_url"] = phorum_get_url(PHORUM_PROFILE_URL, $rcpt_id);
}
$message["recipient_count"] = count($message["recipients"]);
 
// Setup URL's and format date.
$message["from_profile_url"]=phorum_get_url(PHORUM_PROFILE_URL, $message["from_user_id"]);
$message["date"]=phorum_date($PHORUM["short_date"], $message["datestamp"]);
 
$PHORUM["DATA"]["MESSAGE"] = $message;
$PHORUM["DATA"]["PMLOCATION"] = $PHORUM["DATA"]["LANG"]["PMRead"];
 
// re-init folder list to account for change in read flags
$pm_folders = phorum_db_pm_getfolders(NULL, true);
 
// Set folder id to the right folder for this message.
$folder_id = $message["pm_folder_id"];
if ($folder_id == 0) {
$folder_id = $message["special_folder"];
}
 
$template = "pm_read";
 
} else {
 
// The message was not found. Show an error.
$PHORUM["DATA"]["BLOCK_CONTENT"] = $PHORUM["DATA"]["LANG"]["PMNotAvailable"];
$template = "stdblock";
}
 
break;
 
 
// Post a new private message.
case "send":
 
// Setup the default array with the message data.
$msg = array(
"from_username" => $PHORUM["user"]["username"],
"keep" => isset($_POST["keep"]) && $_POST["keep"] ? 1 : 0,
"subject" => isset($_POST["subject"]) ? $_POST["subject"] : '',
"message" => isset($_POST["message"]) ? $_POST["message"] : '',
"preview" => isset($_POST["preview"]) ? 1 : 0,
"recipients" => $recipients,
);
 
// Data initialization for posting messages on first request.
if ($action == NULL || $action != 'post')
{
// Setup data for sending a private message to specified recipients.
// Recipients are passed on as a standard phorum argument "to_id"
// containing a colon separated list of users.
if (isset($PHORUM["args"]["to_id"])) {
foreach (explode(":", $PHORUM["args"]["to_id"]) as $rcpt_id) {
settype($rcpt_id, "int");
$user = phorum_user_get($rcpt_id, false);
if ($user) {
$msg["recipients"][$rcpt_id] = array(
"username" => $user["username"],
"user_id" => $user["user_id"]
);
}
}
 
$hide_userselect = 1;
 
// Setup data for replying to a private message.
} elseif (isset($pm_id)) {
 
$message = phorum_db_pm_get($pm_id);
$msg["subject"] = $message["subject"];
$msg["message"] = $message["message"];
$msg["recipients"][$message["from_user_id"]] = array(
"username" => $message["from_username"],
"user_id" => $message["from_user_id"]
);
$msg = phorum_pm_quoteformat($message["from_username"], $msg);
 
// Include the other recipient, excecpt the active
// user himself, when replying to all.
if (isset($_POST["reply_to_all"])) {
foreach($message["recipients"] as $rcpt) {
if ($user_id == $rcpt["user_id"]) continue;
$msg["recipients"][$rcpt["user_id"]] = array(
"username" => $rcpt["username"],
"user_id" => $rcpt["user_id"],
);
}
}
 
$hide_userselect = 1;
 
// Setup data for replying privately to a forum post.
} elseif (isset($PHORUM["args"]["message_id"])) {
 
$message = phorum_db_get_message($PHORUM["args"]["message_id"], "message_id", true);
 
if (phorum_user_access_allowed(PHORUM_USER_ALLOW_READ) && ($PHORUM["forum_id"]==$message["forum_id"] || $message["forum_id"] == 0)) {
 
// get url to the message board thread
$origurl = phorum_get_url(PHORUM_READ_URL, $message["thread"], $message["message_id"]);
 
// Find the real username, because some mods rewrite the
// username in the message table. There will be a better solution
// for selecting recipients, but for now this will fix some
// of the problems.
$user = phorum_user_get($message["user_id"], false);
 
$msg["subject"] = $message["subject"];
$msg["message"] = $message["body"];
$msg["recipients"][$message["user_id"]] = array(
'username' => $user["username"],
'user_id' => $user["user_id"]
);
$msg = phorum_pm_quoteformat($user["username"], $msg, $origurl);
}
 
$hide_userselect = 1;
}
}
 
// Setup data for previewing a message.
if ($msg["preview"]) {
list($preview) = phorum_pm_format(array($msg));
$PHORUM["DATA"]["PREVIEW"] = $preview;
}
 
// XSS prevention.
foreach ($msg as $key => $val) {
switch ($key) {
case "recipients": {
foreach ($val as $id => $data) {
$msg[$key][$id]["username"] = htmlspecialchars($data["username"]);
}
break;
}
default: {
$msg[$key] = htmlspecialchars($val);
break;
}
}
}
 
 
$PHORUM["DATA"]["MESSAGE"] = $msg;
$PHORUM["DATA"]["RECIPIENT_COUNT"] = count($msg["recipients"]);
$PHORUM["DATA"]["SHOW_USERSELECTION"] = true;
 
// Determine what input element gets the focus.
$focus_id = 'userselection';
if ($PHORUM["DATA"]["RECIPIENT_COUNT"]) $focus_id = 'subject';
if (!empty($msg["subject"])) $focus_id = 'message';
$PHORUM["DATA"]["FOCUS_TO_ID"] = $focus_id;
 
// Create data for a user dropdown list, if configured.
if ($PHORUM["DATA"]["SHOW_USERSELECTION"] && $PHORUM["enable_dropdown_userlist"])
{
$allusers = array();
$userlist = phorum_user_get_list();
foreach ($userlist as $user_id => $userinfo){
if (isset($msg["recipients"][$user_id])) continue;
$userinfo["displayname"] = htmlspecialchars($userinfo["displayname"]);
$userinfo["username"] = htmlspecialchars($userinfo["username"]);
$userinfo["user_id"] = $user_id;
$allusers[] = $userinfo;
}
$PHORUM["DATA"]["USERS"] = $allusers;
if (count($allusers) == 0) $PHORUM["DATA"]["SHOW_USERSELECTION"] = false;
}
 
$PHORUM["DATA"]["PMLOCATION"] = $PHORUM["DATA"]["LANG"]["SendPM"];
$template = "pm_post";
break;
}
 
if ($hide_userselect) {
$PHORUM["DATA"]["SHOW_USERSELECTION"] = 0;
}
 
// Make message count and quota information available in the templates.
$PHORUM['DATA']['MAX_PM_MESSAGECOUNT'] = 0;
if (! $PHORUM['user']['admin']) {
$PHORUM['DATA']['MAX_PM_MESSAGECOUNT'] = $PHORUM['SETTINGS']['max_pm_messagecount'];
if ($PHORUM['SETTINGS']['max_pm_messagecount'])
{
$current_count = phorum_db_pm_messagecount(PHORUM_PM_ALLFOLDERS);
$PHORUM['DATA']['PM_MESSAGECOUNT'] = $current_count['total'];
$space_left = $PHORUM['SETTINGS']['max_pm_messagecount'] - $current_count['total'];
if ($space_left < 0) $space_left = 0;
$PHORUM['DATA']['PM_SPACE_LEFT'] = $space_left;
$PHORUM['DATA']['LANG']['PMSpaceLeft'] = str_replace('%pm_space_left%', $space_left, $PHORUM['DATA']['LANG']['PMSpaceLeft']);
}
}
 
// Make a list of folders for use in the menu and a list of folders that
// the user created. The latter will be set to zero if no user folders
// are available.
 
$pm_userfolders = array();
foreach($pm_folders as $id => $data)
{
$pm_folders[$id]["is_special"] = is_numeric($id) ? 0 : 1;
$pm_folders[$id]["is_outgoing"] = $id == PHORUM_PM_OUTBOX;
$pm_folders[$id]["id"] = $id;
$pm_folders[$id]["name"] = htmlspecialchars($data["name"]);
$pm_folders[$id]["url"] = phorum_get_url(PHORUM_PM_URL, "page=list", "folder_id=$id");
 
if (!$pm_folders[$id]["is_special"]) {
$pm_userfolders[$id] = $pm_folders[$id];
}
}
 
$PHORUM["DATA"]["URL"]["PM_FOLDERS"] = phorum_get_url(PHORUM_PM_URL, "page=folders");
$PHORUM["DATA"]["URL"]["PM_SEND"] = phorum_get_url(PHORUM_PM_URL, "page=send");
$PHORUM["DATA"]["URL"]["BUDDIES"] = phorum_get_url(PHORUM_PM_URL, "page=buddies");
 
$PHORUM["DATA"]["PM_FOLDERS"] = $pm_folders;
$PHORUM["DATA"]["PM_USERFOLDERS"] = count($pm_userfolders) ? $pm_userfolders : 0;
 
 
// Set some default template data.
$PHORUM["DATA"]["ACTION"]=phorum_get_url( PHORUM_PM_ACTION_URL );
$PHORUM["DATA"]["FOLDER_ID"] = $folder_id;
$PHORUM["DATA"]["FOLDER_IS_INCOMING"] = $folder_id == PHORUM_PM_OUTBOX ? 0 : 1;
$PHORUM["DATA"]["PM_PAGE"] = $page;
$PHORUM["DATA"]["HIDE_USERSELECT"] = $hide_userselect;
 
include phorum_get_template("header");
phorum_hook("after_header");
if ($error_msg) {
$PHORUM["DATA"]["ERROR"] = $error_msg;
unset($PHORUM["DATA"]["MESSAGE"]);
include phorum_get_template("message");
} else {
include phorum_get_template("pm");
}
phorum_hook("before_footer");
include phorum_get_template("footer");
 
// ------------------------------------------------------------------------
// Utility functions
// ------------------------------------------------------------------------
 
// Apply the default forum message formatting to a private message.
function phorum_pm_format($messages)
{
include_once("./include/format_functions.php");
 
// Reformat message so it looks like a forum message.
foreach ($messages as $id => $message)
{
$messages[$id]["author"] = $message["from_username"];
$messages[$id]["body"] = isset($message["message"]) ? $message["message"] : "";
$messages[$id]["email"] = "";
}
 
// Run the messages through the formatting code.
$messages = phorum_format_messages($messages);
 
// Reformat message back to a private message.
foreach ($messages as $id => $message)
{
$messages[$id]["message"] = $message["body"];
$messages[$id]["from_username"] = $message["author"];
unset($messages[$id]["body"]);
unset($messages[$id]["author"]);
}
 
return $messages;
}
 
// Apply message reply quoting to a private message.
function phorum_pm_quoteformat($orig_author, $message, $inreplyto = NULL)
{
$PHORUM = $GLOBALS["PHORUM"];
 
// Build the reply subject.
if (substr($message["subject"], 0, 3) != "Re:") {
$message["subject"] = "Re: ".$message["subject"];
}
 
// Build a quoted version of the message body.
$quote = phorum_strip_body($message["message"]);
$quote = str_replace("\n", "\n> ", $quote);
$quote = wordwrap(trim($quote), 50, "\n> ", true);
$quote = ($inreplyto != NULL ? "{$PHORUM['DATA']['LANG']['InReplyTo']} {$inreplyto}\n" : '') .
"$orig_author {$PHORUM['DATA']['LANG']['Wrote']}:\n" .
str_repeat("-", 55)."\n> {$quote}\n\n\n";
$message["message"] = $quote;
 
return $message;
}
 
?>