engelsystem/www-ssl/nonpublic/messages.php

<?php
require_once ('../bootstrap.php');

$title = "Himmel";
$header = "";

include "includes/header.php";

if (!isset ($_GET["action"]))
	$_GET["action"] = "start";

switch ($_GET["action"]) {
	case "start" :
		echo Get_Text("Hello") . $_SESSION['Nick'] . ", <br />\n";
		echo Get_Text("pub_messages_text1") . "<br /><br />\n";

		//show exist Messages
		$SQL = "SELECT * FROM `Messages` WHERE `SUID`='" . $_SESSION["UID"] . "' OR `RUID`='" . $_SESSION["UID"] . "'";
		$erg = mysql_query($SQL, $con);

		echo "<table border=\"0\" class=\"border\" cellpadding=\"2\" cellspacing=\"1\">\n";
		echo "<tr>\n";
		echo "<td class=\"contenttopic\"><b>" . Get_Text("pub_messages_Datum") . "</b></td>\n";
		echo "<td class=\"contenttopic\"><b>" . Get_Text("pub_messages_Von") . "</b></td>\n";
		echo "<td class=\"contenttopic\"><b>" . Get_Text("pub_messages_An") . "</b></td>\n";
		echo "<td class=\"contenttopic\"><b>" . Get_Text("pub_messages_Text") . "</b></td>\n";
		echo "<td class=\"contenttopic\"></td>\n";
		echo "</tr>\n";

		for ($i = 0; $i < mysql_num_rows($erg); $i++) {
			echo "<tr class=\"content\">\n";
			echo "<td>" . mysql_result($erg, $i, "Datum") . "</td>\n";
			echo "<td>" . UID2Nick(mysql_result($erg, $i, "SUID")) . "</td>\n";
			echo "<td>" . UID2Nick(mysql_result($erg, $i, "RUID")) . "</td>\n";
			echo "<td>" . mysql_result($erg, $i, "Text") . "</td>\n";
			echo "<td>";

			if (mysql_result($erg, $i, "RUID") == $_SESSION["UID"]) {
				echo "<a href=\"?action=DelMsg&Datum=" . mysql_result($erg, $i, "Datum") . "\">" . Get_Text("pub_messages_DelMsg") . "</a>";

				if (mysql_result($erg, $i, "isRead") == "N")
					echo "<a href=\"?action=MarkRead&Datum=" . mysql_result($erg, $i, "Datum") . "\">" . Get_Text("pub_messages_MarkRead") . "</a>";
			} else {
				if (mysql_result($erg, $i, "isRead") == "N")
					echo Get_Text("pub_messages_NotRead");
			}

			echo "</td>\n";
			echo "</tr>\n";
		}

		// send Messeges
		echo "<form action=\"" . $_SERVER['SCRIPT_NAME'] . "?action=SendMsg\" method=\"POST\">";
		echo "<tr class=\"content\">\n";
		echo "<td></td>\n";
		echo "<td></td>\n";

		// Listet alle Nicks auf
		echo "<td><select name=\"RUID\">\n";

		$usql = "SELECT * FROM `User` WHERE (`UID`!='" . $_SESSION["UID"] . "') ORDER BY `Nick`";
		$uErg = mysql_query($usql, $con);
		$urowcount = mysql_num_rows($uErg);

		for ($k = 0; $k < $urowcount; $k++) {
			echo "<option value=\"" . mysql_result($uErg, $k, "UID") . "\">" . mysql_result($uErg, $k, "Nick") . "</option>\n";
		}

		echo "</select></td>\n";
		echo "<td><textarea name=\"Text\"  cols=\"30\" rows=\"10\"></textarea></td>\n";
		echo "<td><input type=\"submit\" value=\"" . Get_Text("save") . "\"></td>\n";
		echo "</tr>\n";
		echo "</form>";

		echo "</table>\n";
		break;

	case "SendMsg" :
		echo Get_Text("pub_messages_Send1") . "...<br />\n";

		$SQL = "INSERT INTO `Messages` ( `Datum` , `SUID` , `RUID` , `Text` ) VALUES (" .
		"'" . gmdate("Y-m-j H:i:s", time()) . "', " .
		"'" . $_SESSION["UID"] . "', " .
		"'" . $_POST["RUID"] . "', " .
		"'" . $_POST["Text"] . "');";

		$Erg = mysql_query($SQL, $con);

		if ($Erg == 1)
			echo Get_Text("pub_messages_Send_OK") . "\n";
		else
			echo Get_Text("pub_messages_Send_Error") . "...\n(" . mysql_error($con) . ")";
		break;

	case "MarkRead" :
		$SQL = "UPDATE `Messages` SET `isRead` = 'Y' " .
		"WHERE `Datum` = '" . $_GET["Datum"] . "' AND `RUID`='" . $_SESSION["UID"] . "' " .
		"LIMIT 1 ;";
		$Erg = mysql_query($SQL, $con);

		if ($Erg == 1)
			echo Get_Text("pub_messages_MarkRead_OK") . "\n";
		else
			echo Get_Text("pub_messages_MarkRead_KO") . "...\n(" . mysql_error($con) . ")";
		break;

	case "DelMsg" :
		$SQL = "DELETE FROM `Messages` " .
		"WHERE `Datum` = '" . $_GET["Datum"] . "' AND `RUID` ='" . $_SESSION["UID"] . "' " .
		"LIMIT 1;";
		$Erg = mysql_query($SQL, $con);

		if ($Erg == 1)
			echo Get_Text("pub_messages_DelMsg_OK") . "\n";
		else
			echo Get_Text("pub_messages_DelMsg_KO") . "...\n(" . mysql_error($con) . ")";
		break;

	default :
		echo Get_Text("pub_messages_NoCommand");
}

include "includes/footer.php";
?>