<?php
    include('mb.php');
    $metaData = getMetaData("mailbox"); 
    if(!$_SESSION['userid']) {
        header("Location: $basehttp/login");
        exit();
    }
    
    $max_mails_per_page = 24;
    
    //count pages if needed
    if(!isset($_GET['page']) || $_GET['page'] == '' || !is_numeric($_GET['page'])) {
        $page = 1;
    } else {
        $page = $_GET['page'];
    }
    $from = (($page * $max_mails_per_page) - $max_mails_per_page);
    
    //delete----------------------------------------------------------------------------------
    if($_GET['delete'] == 'true' && $_GET['mode'] == 'read'){
        $mid = intval($_GET['mid']);
        $message = dbQuery("SELECT * FROM mail WHERE record_num = '$mid'");
        
        if($message[0]['from_user'] == $_SESSION['userid']){
            dbQuery("UPDATE mail SET sender_deleted = 1 WHERE record_num = '$mid'");
            header("Location: $basehttp/mailbox/outbox/");
        }else{
            dbQuery("UPDATE mail SET recipient_deleted = 1 WHERE record_num = '$mid'");
            header("Location: $basehttp/mailbox/");
        }
    }
    //----------------------------------------------------------------------------------------
    
    $title = "Mailbox";
    $headertitle = "My Mailbox";
    getTemplate("template.overall_header.php");
    if($_GET[mode] == 'outbox'){
        if(isset($_POST['list'])){
            foreach($_POST['list'] as $i){
                dbQuery("UPDATE mail SET sender_deleted = '1' WHERE record_num = '$i'",false);
            }
        }
        
        $outbox = dbQuery("SELECT * FROM mail WHERE from_user = '".$_SESSION['userid']."' AND sender_deleted = '0' ORDER BY date_sent DESC LIMIT $from,$max_mails_per_page",false);
        $total_results = count(dbQuery("SELECT * FROM mail WHERE from_user = '".$_SESSION['userid']."' AND sender_deleted = '0' ORDER BY date_sent DESC",false));
        $total_pages = ceil($total_results/$max_mails_per_page);
        
        include($basepath.'/includes/mailbox/outbox.php');
    }else if($_GET[mode] == 'read'){
        $mid = mysql_real_escape_string($_GET['mid']);
        $message = dbQuery("SELECT * FROM mail WHERE record_num = '$mid'");
        
        if(is_array($message)){
            if(($message[0]['from_user'] == $_SESSION['userid'] && $message[0]['sender_deleted'] == 0) || ($message[0]['to_user'] == $_SESSION['userid'] && $message[0]['recipient_deleted'] == 0)){
                if($message[0]['from_user'] == $_SESSION['userid']){
                    $message_type = 'outbox';
                }else{
                    $message_type = 'inbox';
                    dbQuery("UPDATE mail SET recipient_read = 1 WHERE record_num = '$mid'");
                }
            }else{
                $error_ = 'There is no such message in your inbox.';
            }
        }else{
            $error_ = 'Message you try to see does not exist.';
        }
        
        include($basepath.'/includes/mailbox/read.php');
    }else if($_GET['mode'] == 'compose'){
        if($_POST){
            $error_ = '';
            $username = '';
            if($_POST['additional_username']){
                $username = mysql_real_escape_string($_POST['additional_username']);
            }else{
                $username = mysql_real_escape_string($_POST['username']);
            }
            
            if($username != $_SESSION['username']){
                $get_userid = dbQuery("SELECT record_num,premium FROM users WHERE username = '$username'",false);
                
                if(is_array($get_userid)){
                    //save mail
                    $subject = mysql_real_escape_string($_POST['subject']);
                    $body = mysql_real_escape_string($_POST['message']);
                    $sent = date("Y-m-d H:i:s",time());
                    dbQuery("INSERT INTO mail(from_user,to_user,subject,body,date_sent,recipient_read,recipient_deleted,sender_deleted,sender_ip) 
                                VALUES('".$_SESSION['userid']."','".$get_userid[0]['record_num']."','$subject','$body','$sent','0','0','0','".$_SERVER['REMOTE_ADDR']."')",false);
                   	sendInboxMessage($get_userid[0]['record_num']); 
                    echo '<script type="text/javascript">window.location = "'.$basehttp.'/mailbox/";</script>';
                }else{
                    $error_ .= 'User you try to send message to, does not exists.';
                }
            } else {
                $error_ .= 'You can\'t send email to yourself.';
            }
        }
        
        if($_GET['reply'] == 'true'){
            $reply = true;
            $mid = mysql_real_escape_string($_GET['mid']);
            $message = dbQuery("SELECT * FROM mail WHERE record_num = '$mid'");
            
            $to = $message[0]['from_user'];
            if($to != 0){
                $touser = dbQuery("SELECT username FROM users WHERE record_num = '$to'");
                $to_username = $touser[0]['username'];
            } else {
                $to_username = 'Admin';
            }
            $subject = 'Re: '.$message[0]['subject'];
            $body = "--------------- original message -----------------\n\r".$message[0]['body'];
        }
        
        include($basepath.'/includes/mailbox/compose.php');
    }else{
        if(isset($_POST['list'])){
            foreach($_POST['list'] as $i){
                dbQuery("UPDATE mail SET recipient_deleted = '1' WHERE record_num = '$i'",false);
            }
        }
        
        $inbox = dbQuery("SELECT * FROM mail WHERE to_user = '".$_SESSION['userid']."' AND recipient_deleted = '0' ORDER BY date_sent DESC LIMIT $from,$max_mails_per_page",false);
        $total_results = count(dbQuery("SELECT * FROM mail WHERE to_user = '".$_SESSION['userid']."' AND recipient_deleted = '0' ORDER BY date_sent DESC",false));
        
        $total_pages = ceil($total_results/$max_mails_per_page);
        
        include($basepath.'/includes/mailbox/inbox.php');
    }
    
    getTemplate("template.overall_footer.php");
?>