<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?

include 'includes/verify_session.php';

if (send_messages == 2 && $en['m_daysleft'] == 0) {ob_clean(); header('Location:'.constant('dir').'upgrade.html'); exit; }

$en['err'] = '';

$res = sql_query("SELECT * FROM $membtable WHERE m_user='$en[to]'");
if (sql_num_rows($res) == 0) $en['err'] .= '<br>'._msg_no_user;
if ($en['text'] == '') $en['err'] .= '<br>'._no_text;
if ($en['subj'] == '') $en['err'] .= '<br>'._no_subj;

        if ($en['err'] != '') {

        $en['err'] = '<font color=red><B>'.$en['err'].'</b></font><br>';

        load_template('modules/messages/templates/compose.tpl');

        } else {
        
        $line = sql_fetch_assoc($res);
        
        $en['text'] = strip_tags($en['text']);
        $en['text'] = strip_tags(stripslashes($en['text']));
        $en['subj'] = strip_tags(stripslashes($en['subj']));
        
        $en['recip'] = $line['m_user'];
        $en['text_'] = $en['text'];
        $en['subj_'] = $en['subj'];

        $en['text'] = str_replace("\r",'',$en['text']);
        $en['text'] = str_replace("\n",'<br>',$en['text']);
        $en['text'] = sql_escape_string($en['text']);
        $en['subj'] = sql_escape_string($en['subj']);
        
        //banned?
        unset($ban);
        $res = sql_query("SELECT * FROM $mbantable LEFT JOIN $membtable ON b_owner=m_id WHERE b_owner='$line[m_id]' AND b_banned='$en[m_id]'".(paid_ban == 'Yes' ? ' AND m_daysleft>0' : ''));
        if (sql_num_rows($res) > 0) $ban = true;
        if (paid_ban == 'Yes' && $line['m_daysleft'] == 0) $ban = false;
        if (!$ban)
                sql_query("INSERT INTO $msgtable (msg_sender,msg_recip,msg_subj,msg_text,msg_time,msg_ip,msg_status)
                                  VALUES ($en[m_id],$line[m_id],'$en[subj]','$en[text]',".time().",'$ip',1)");

        $en['msg'] = '<B><br>'._msg_sent.'</b><Br><Br>';
        
        if (msg_notify == 'Yes' && $line['m_msg_alerts'] == 1) {

                $en['msg_id'] = sql_insert_id();
                $mail = emailtemplate('emails/message_notify.tpl');

                mail($line['m_email'], $mail['subj'], $mail['body'],
                     "From: ".admin_email."\r\n"
                    ."Reply-To: ".admin_email."\r\n"
                    ."X-Mailer: PHP/" . phpversion());

                }

        load_template('modules/messages/templates/message_list.tpl');

        }

?>