HB/game/messagerie.php

<?php
if(!defined('INDEX')) { header('Location: ../'); exit; }
$page = 'messagerie';
$titre = 'Messagerie';

if (isset($_POST['IM'])) {
	$stop = false;
	for($i=1 ; $i<=$_POST['IM'] ; $i++) {
		if (!empty($_POST['m'.$i])) {
			$mes = $_POST['m'.$i];
			mysql_query("DELETE FROM `$table_mail` WHERE `destinataire` = '".$queryUser["pseudo"]."' AND `id` = '$mes';");
			$stop = true;
		}
	}
	if ($stop) { header('Location: ?p=messagerie'); exit; }
}
if (isset($_POST['IR'])) {
	$stop = false;
	for($i=1 ; $i<=$_POST['IR'] ; $i++) {
		if (!empty($_POST['r'.$i])) {
			$mes = $_POST['r'.$i];
			mysql_query("UPDATE `$table_mail` SET vu='s' WHERE `destinataire` = '".$queryUser["pseudo"]."' AND `id` = '$mes';");
			$stop = true;
		}
	}
	if ($stop) { header('Location: ?p=messagerie'); exit; }
}

$messcomp = $chapeau->query("SELECT * FROM `$table_mail` WHERE `destinataire` = '".$queryUser["pseudo"]."' AND `expediteur` != '' ORDER BY `id` DESC;");
$nbmax = $chapeau->num_rows;

$result = $chapeau->query("SELECT * FROM `$table_mail` WHERE `destinataire` = '".$queryUser["pseudo"]."' AND `expediteur` != '' ORDER BY `id` DESC LIMIT 50;");

if ($queryUser['auth_level'] >= 3 && $nbmax > $i) $result = $messcomp;
elseif ($nbmax > $chapeau->num_rows) $template->assign('avertissement', '<p style="color: red; "><b>Vous avez des messages en attente de réception. Libérez de la place dans votre messagerie pour les afficher.</b></p>');

$TEMP_messages = array();
$i=0;
$nbc = count($result);
for ($i=0 ; $i < $nbc ; $i++) {
	$TEMP_messages[] = array($result[$i]['sujet'], date("d/m/y H:i:s", $result[$i]['temps']), $result[$i]['expediteur'], bbcode($result[$i]['contenu']), $i+1, $result[$i]['id']);
}
$template->assign('messages', $TEMP_messages);
$template->assign('IM', $i);


$result = mysql_query("SELECT * FROM `$table_mail` WHERE `destinataire` = '".$queryUser["pseudo"]."' AND `expediteur` = '' AND `vu` != 's' ORDER BY `id` DESC;");
$TEMP_rapport = array();
$i=0;
while ($data = mysql_fetch_array($result)) {
	$i++;
	$TEMP_rapport[] = array($data['sujet'], date("d/m/y H:i:s", $data['temps']), 0, bbcode($data['contenu']), $i, $data['id']);
}
$template->assign('rapports', $TEMP_rapport);
$template->assign('IR', $i);
$template->assign('script', '<script>
for (j=1; document.getElementsByName(\'m\'+j)[0]; j++) hide(document.getElementsByName(\'m\'+j)[0]);
for (j=1; document.getElementsByName(\'r\'+j)[0]; j++) hide(document.getElementsByName(\'r\'+j)[0]);
</script>');

mysql_query("UPDATE `$table_mail` SET `vu` = '0' WHERE `destinataire` = '".$queryUser["pseudo"]."' AND `vu` != 's'");
?>