Tsar_Lyagushka/HB
1
0
Fork 0
forked from halo-battle/game
Code Issues Pull requests Projects Releases Wiki Activity

Version 1.7l

Browse source
This commit is contained in:
nemunaire 2008-11-19 12:00:00 +01:00
commit aea537909a
42 changed files with 718 additions and 131 deletions
Download patch file Download diff file Expand all files Collapse all files

58
onyx/hb_game/jeu/envoyer.php
View file

@ -4,34 +4,40 @@ $page = 'envoyer';
$titre = 'Envoyer un message';
if (!empty($_POST['objet']) && !empty($_POST['nom']) && !empty($_POST['message'])) {
$util = htmlentities($_POST['nom']);
$bdd->connexion();
$bdd->escape($util);
if ($bdd->unique_query("SELECT pseudo FROM $table_user WHERE pseudo = '$util';")) {
$message = htmlspecialchars($_POST['message']);
$objet = htmlspecialchars($_POST['objet']);
$pseudo = $queryUser["pseudo"];
$time = time();
$bdd->escape($message);
$bdd->escape($objet);
$bdd->escape($pseudo);
$bdd->query("INSERT INTO $table_mail VALUES(NULL, '1', '$util', '$pseudo', '$objet', '$message', '$time');");
$bdd->deconnexion();
$utils = explode(';', $_POST['nom']);
$nbutil = count($utils);
$template->assign('message','Votre message a été envoyé avec succès.');
$template->assign('script','<script type="text/javascript">setTimeout(\'document.location.href="?p=messagerie";\', 2500);</script>');
$template->assign('couleur','green');
$template->display('game/erreur.tpl');
exit;
}
else {
$bdd->deconnexion();
$template->assign('message','Impossible de trouver le destinataire du message.');
$template->assign('script','<script type="text/javascript">setTimeout(\'document.location.href="?p=envoyer";\', 2500);</script>');
$template->assign('couleur','red');
$template->display('game/erreur.tpl');
exit;
$time = time();
$message = htmlspecialchars($_POST['message']);
$objet = htmlspecialchars($_POST['objet']);
$bdd->connexion();
$bdd->escape($message);
$bdd->escape($objet);
$bdd->escape($pseudo);
for($i = 0; $i < $nbutil; $i++){
$util = trim(htmlentities($utils[$i]));
if (empty($util)) continue;
$bdd->escape($util);
if ($bdd->unique_query("SELECT pseudo FROM $table_user WHERE pseudo = '$util';")) {
$pseudo = $queryUser["pseudo"];
$bdd->query("INSERT INTO $table_mail VALUES(NULL, '1', '$util', '$pseudo', '$objet', '$message', '$time');");
}
else {
$bdd->deconnexion();
$template->assign('message','Impossible de trouver l\'un des destinataire du message : '.$util);
$template->assign('script','<script type="text/javascript">setTimeout(\'document.location.href="?p=envoyer";\', 2500);</script>');
$template->assign('couleur','red');
$template->display('game/erreur.tpl');
exit;
}
}
$bdd->deconnexion();
$template->assign('message','Votre message a été envoyé avec succès.');
$template->assign('script','<script type="text/javascript">setTimeout(\'document.location.href="?p=messagerie";\', 2500);</script>');
$template->assign('couleur','green');
$template->display('game/erreur.tpl');
exit;
}
if (isset($_GET['d'])) $template->assign('destinataire', htmlentities($_GET['d']));