OSDN Git Service

Update sql.php
[idb/iDB.git.git] / messenger.php
index d7e7415..6f92b90 100644 (file)
@@ -8,25 +8,35 @@
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     Revised BSD License for more details.
 
-    Copyright 2004-2008 Cool Dude 2k - http://idb.berlios.de/
-    Copyright 2004-2008 Game Maker 2k - http://intdb.sourceforge.net/
+    Copyright 2004-2019 iDB Support - https://idb.osdn.jp/support/category.php?act=view&id=1
+    Copyright 2004-2019 Game Maker 2k - https://idb.osdn.jp/support/category.php?act=view&id=2
 
-    $FileInfo: messenger.php - Last Update: 01/01/2008 SVN 144 - Author: cooldude2k $
+    $FileInfo: messenger.php - Last Update: 08/02/2019 SVN 905 - Author: cooldude2k $
 */
+if(ini_get("register_globals")) {
+require_once('inc/misc/killglobals.php'); }
 require('preindex.php');
 $usefileext = $Settings['file_ext'];
 if($ext=="noext"||$ext=="no ext"||$ext=="no+ext") { $usefileext = ""; }
 $filewpath = $exfile['messenger'].$usefileext.$_SERVER['PATH_INFO'];
+$idbactcheck = array("view", "viewsent", "read", "create", "sendmessage");
 ?>
-
+<?php $iWrappers['EXTRALINKS'] = null;
+ob_start("idb_suboutput_handler"); ?>
 <title> <?php echo $Settings['board_name'].$idbpowertitle; ?> </title>
+<?php $iWrappers['TITLETAG'] = ob_get_clean(); 
+ob_start("idb_suboutput_handler"); ?>
 </head>
 <body>
-<?php require($SettDir['inc'].'navbar.php');
+<?php $iWrappers['BODYTAG'] = ob_get_clean();
+ob_start("idb_suboutput_handler");
+require($SettDir['inc'].'navbar.php');
+$iWrappers['NAVBAR'] = ob_get_clean();
+ob_start("idb_suboutput_handler");
 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanPM']=="no") {
-redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
-ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 ?>
 
 <?php 
@@ -34,25 +44,32 @@ if($_SESSION['UserGroup']!=$Settings['GuestGroup']||
        $GroupInfo['CanPM']=="yes") {
 if($_GET['act']==null)
 { $_GET['act']="view"; }
+if(!in_array($_GET['act'], $idbactcheck))
+{ $_GET['act']="view"; }
 if(!is_numeric($_GET['id'])&&$_GET['act']!="create")
 { $_GET['id']="1"; }
 if($_GET['act']=="view"||$_GET['act']=="viewsent")
-{ require($SettDir['inc'].'pm.php'); }
+{ require($SettDir['inc'].'messages.php'); }
 if($_GET['act']=="read"||$_GET['act']=="create"||
        $_GET['act']=="sendmessage"||$_POST['act']=="sendmessages")
-{ require($SettDir['inc'].'pm.php'); } }
+{ require($SettDir['inc'].'messages.php'); } }
+$iWrappers['CONTENT'] = ob_get_clean();
+ob_start("idb_suboutput_handler");
 require($SettDir['inc'].'endpage.php');
+$iWrappers['COPYRIGHT'] = ob_get_clean();
+ob_start("idb_suboutput_handler");
 if(!isset($MessageName)) { $MessageName = null; }
 ?>
-
 </body>
 </html>
 <?php 
+$iWrappers['HTMLEND'] = ob_get_clean();
+require($SettDir['inc'].'iwrapper.php');
 if($_GET['act']=="read") {
 change_title($Settings['board_name']." ".$ThemeSet['TitleDivider']." ".$MessageName,$Settings['use_gzip'],$GZipEncode['Type']); }
 if($_GET['act']=="viewsent") { 
 change_title($Settings['board_name']." ".$ThemeSet['TitleDivider']." Viewing Sent MailBox",$Settings['use_gzip'],$GZipEncode['Type']); }
-if($_GET['act']!="read"&&$_GET['act']!="viewsent") { 
+if($_GET['act']=="view") {
 change_title($Settings['board_name']." ".$ThemeSet['TitleDivider']." Viewing MailBox",$Settings['use_gzip'],$GZipEncode['Type']); }
 if($_GET['act']=="create") { 
 change_title($Settings['board_name']." ".$ThemeSet['TitleDivider']." Making a Message",$Settings['use_gzip'],$GZipEncode['Type']); }