ca_tracker/send_message_process.php at master · Darrellbor/ca_tracker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
<?php
	session_start();
	require_once("db_connect.php");

	$subject=isset($_POST['subject']) ? trim($_POST['subject']) : "";
	$message=isset($_POST['message']) ? trim($_POST['message']) : "";
	$date_of_message=date("Y-m-d");
	$message_viability="new";
	$sender_visible="yes";
	$recepient_visible="yes";

	if($subject!="")
	{
		$_SESSION['subject']="$subject";
	}
	$_SESSION['message']="$message";
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>

<body>
	<?php
		if($subject=="")
		{
			$subject="No Subject";
		}

		$message_id="Msg00001";
		$get_message_id=mysql_query("select * from `messages` order by message_id desc");
		if($get_message_id==FALSE)
		{
			$_SESSION['message']="Error encountered selecting messages";
			$_SESSION['messagetype']="error";
			header("Location: send_message.php");
			exit();
		}

		if(mysql_num_rows($get_message_id)>0)
		{
			mysql_data_seek($get_message_id,0);
			$row_get_message_id=mysql_fetch_assoc($get_message_id);
			$last_message_id=$row_get_message_id['message_id'];

			$last_id=intval(substr($last_message_id,4,5));
			$new_id=strval($last_id+1);

			while(strlen($new_id)<5)
			{
				$new_id="0" . $new_id;
			}

			$message_id="Msg" . $new_id;
		}

		$insert_sql=mysql_query("insert into `messages` set sender_reg_id='".$_SESSION['current_user_reg_no']."',sender_full_name='".$_SESSION['current_user_full_name']."',sender_email='".$_SESSION['current_user_email']."',sender_visible='$sender_visible',message_id='$message_id',subject='$subject',message='$message',recepient_reg_id='".$_SESSION['friend_reg_id']."',recepient_full_name='".$_SESSION['friend_full_name']."',recepient_email='".$_SESSION['friend_email']."',recepient_visible='$recepient_visible',message_viability='$message_viability',date_of_message='$date_of_message'");

		if($insert_sql==FALSE)
		{
			$_SESSION['message']="Error encountered sending message";
			$_SESSION['messagetype']="error";
			header("Location: send_message.php");
			exit();
		}

		unset($_SESSION['subject'],$_SESSION['message'],$_SESSION['friend_email'],$_SESSION['friend_full_name'],$_SESSION['friend_reg_id']);
		$_SESSION['message']="Your message was successfully sent";
		$_SESSION['messagetype']="success";
		header("Location: my_friends.php");
		exit();
	?>
</body>
</html>