<h2>Editing File: /var/softaculous/fud/default/drawmsg.inc</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php
/**
* copyright            : (C) 2001-2021 Advanced Internet Designs Inc.
* email                : forum@prohost.org
* $Id$
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; version 2 of the License.
**/

/* Handle poll votes if any are present. */
function register_vote(&amp;$options, $poll_id, $opt_id, $mid)
{
	/* Invalid option or previously voted. */
	if (!isset($options[$opt_id]) || q_singleval('SELECT id FROM fud30_poll_opt_track WHERE poll_id='. $poll_id .' AND user_id='. _uid)) {
		return;
	}

	if (db_li('INSERT INTO fud30_poll_opt_track(poll_id, user_id, ip_addr, poll_opt) VALUES('. $poll_id .', '. _uid .', '. (!_uid ? _esc(get_ip()) : 'null') .', '. $opt_id .')', $a)) {
		q('UPDATE fud30_poll_opt SET votes=votes+1 WHERE id='. $opt_id);
		q('UPDATE fud30_poll SET total_votes=total_votes+1 WHERE id='. $poll_id);
		$options[$opt_id][1] += 1;
		q('UPDATE fud30_msg SET poll_cache='. _esc(serialize($options)) .' WHERE id='. $mid);
	}

	return 1;
}

$GLOBALS['__FMDSP__'] = array();

/* Needed for message threshold &amp; reveling messages. */
if (isset($_GET['rev'])) {
	$_GET['rev'] = htmlspecialchars((string)$_GET['rev']);
	foreach (explode(':', $_GET['rev']) as $v) {
		$GLOBALS['__FMDSP__'][(int)$v] = 1;
	}
	if ($GLOBALS['FUD_OPT_2'] &amp; 32768) {
		define('reveal_lnk', '/'. $_GET['rev']);
	} else {
		define('reveal_lnk', '&amp;amp;rev='. $_GET['rev']);
	}
} else {
	define('reveal_lnk', '');
}

/* Initialize buddy &amp; ignore list for registered users. */
if (_uid) {
	if ($usr-&gt;buddy_list) {
		$usr-&gt;buddy_list = unserialize($usr-&gt;buddy_list);
	}
	if ($usr-&gt;ignore_list) {
		$usr-&gt;ignore_list = unserialize($usr-&gt;ignore_list);
		if (isset($usr-&gt;ignore_list[1])) {
			$usr-&gt;ignore_list[0] =&amp; $usr-&gt;ignore_list[1];
		}
	}

	/* Handle temporarily un-hidden users. */
	if (isset($_GET['reveal'])) {
		$_GET['reveal'] = htmlspecialchars((string)$_GET['reveal']);
		foreach(explode(':', $_GET['reveal']) as $v) {
			$v = (int) $v;
			if (isset($usr-&gt;ignore_list[$v])) {
				$usr-&gt;ignore_list[$v] = 0;
			}
		}
		if ($GLOBALS['FUD_OPT_2'] &amp; 32768) {
			define('unignore_tmp', '/'. $_GET['reveal']);
		} else {
			define('unignore_tmp', '&amp;amp;reveal='. $_GET['reveal']);
		}
	} else {
		define('unignore_tmp', '');
	}
} else {
	define('unignore_tmp', '');
	if (isset($_GET['reveal'])) {
		unset($_GET['reveal']);
	}
}

$_SERVER['QUERY_STRING_ENC'] = htmlspecialchars($_SERVER['QUERY_STRING']);

function make_tmp_unignore_lnk($id)
{
	if ($GLOBALS['FUD_OPT_2'] &amp; 32768 &amp;&amp; strpos($_SERVER['QUERY_STRING_ENC'], '?') === false) {
		$_SERVER['QUERY_STRING_ENC'] .= '?1=1';
	}

	if (!isset($_GET['reveal'])) {
		return $_SERVER['QUERY_STRING_ENC'] .'&amp;amp;reveal='. $id;
	} else {
		return str_replace('&amp;amp;reveal='. $_GET['reveal'], unignore_tmp .':'. $id, $_SERVER['QUERY_STRING_ENC']);
	}
}

function make_reveal_link($id)
{
	if ($GLOBALS['FUD_OPT_2'] &amp; 32768 &amp;&amp; strpos($_SERVER['QUERY_STRING_ENC'], '?') === false) {
		$_SERVER['QUERY_STRING_ENC'] .= '?1=1';
	}

	if (empty($GLOBALS['__FMDSP__'])) {
		return $_SERVER['QUERY_STRING_ENC'] .'&amp;amp;rev='. $id;
	} else {
		return str_replace('&amp;amp;rev='. $_GET['rev'], reveal_lnk .':'. $id, $_SERVER['QUERY_STRING_ENC']);
	}
}

/* Draws a message, needs a message object, user object, permissions array,
 * flag indicating wether or not to show controls and a variable indicating
 * the number of the current message (needed for cross message pager)
 * last argument can be anything, allowing forms to specify various vars they
 * need to.
 */
function tmpl_drawmsg($obj, $usr, $perms, $hide_controls, &amp;$m_num, $misc)
{
	$o1 =&amp; $GLOBALS['FUD_OPT_1'];
	$o2 =&amp; $GLOBALS['FUD_OPT_2'];
	$a = (int) $obj-&gt;users_opt;
	$b =&amp; $usr-&gt;users_opt;
	$MOD =&amp; $GLOBALS['MOD'];

	$next_page = $next_message = $prev_message = '';
	/* Draw next/prev message controls. */
	if (!$hide_controls &amp;&amp; $misc) {
		/* Tree view is a special condition, we only show 1 message per page. */
		if ($_GET['t'] == 'tree' || $_GET['t'] == 'tree_msg') {
			$prev_message = $misc[0] ? '&lt;a href=&quot;javascript://&quot; onclick=&quot;fud_tree_msg_focus('.$misc[0].', \''.s.'\', \'utf-8\'); return false;&quot;&gt;&lt;img src=&quot;[[relativeurl]]/theme/default/images/up.png&quot; title=&quot;Go to previous message&quot; alt=&quot;Go to previous message&quot; width=&quot;16&quot; height=&quot;11&quot; /&gt;&lt;/a&gt;' : '';
			$next_message = $misc[1] ? '&lt;a href=&quot;javascript://&quot; onclick=&quot;fud_tree_msg_focus('.$misc[1].', \''.s.'\', \'utf-8\'); return false;&quot;&gt;&lt;img alt=&quot;Go to previous message&quot; title=&quot;Go to next message&quot; src=&quot;[[relativeurl]]/theme/default/images/down.png&quot; width=&quot;16&quot; height=&quot;11&quot; /&gt;&lt;/a&gt;' : '';
		} else {
			/* Handle previous link. */
			if (!$m_num &amp;&amp; $obj-&gt;id &gt; $obj-&gt;root_msg_id) { /* prev link on different page */
				$prev_message = '&lt;a href=&quot;[[relativeurl]]/index.php?t='.$_GET['t'].'&amp;amp;'._rsid.'&amp;amp;prevloaded=1&amp;amp;th='.$obj-&gt;thread_id.'&amp;amp;start='.($misc[0] - $misc[1]).reveal_lnk.unignore_tmp.'&quot;&gt;&lt;img src=&quot;[[relativeurl]]/theme/default/images/up.png&quot; title=&quot;Go to previous message&quot; alt=&quot;Go to previous message&quot; width=&quot;16&quot; height=&quot;11&quot; /&gt;&lt;/a&gt;';
			} else if ($m_num) { /* Inline link, same page. */
				$prev_message = '&lt;a href=&quot;javascript://&quot; onclick=&quot;chng_focus(\'#msg_num_'.$m_num.'\');&quot;&gt;&lt;img alt=&quot;Go to previous message&quot; title=&quot;Go to previous message&quot; src=&quot;[[relativeurl]]/theme/default/images/up.png&quot; width=&quot;16&quot; height=&quot;11&quot; /&gt;&lt;/a&gt;';
			}

			/* Handle next link. */
			if ($obj-&gt;id &lt; $obj-&gt;last_post_id) {
				if ($m_num &amp;&amp; !($misc[1] - $m_num - 1)) { /* next page link */
					$next_message = '&lt;a href=&quot;[[relativeurl]]/index.php?t='.$_GET['t'].'&amp;amp;'._rsid.'&amp;amp;prevloaded=1&amp;amp;th='.$obj-&gt;thread_id.'&amp;amp;start='.($misc[0] + $misc[1]).reveal_lnk.unignore_tmp.'&quot;&gt;&lt;img alt=&quot;Go to previous message&quot; title=&quot;Go to next message&quot; src=&quot;[[relativeurl]]/theme/default/images/down.png&quot; width=&quot;16&quot; height=&quot;11&quot; /&gt;&lt;/a&gt;';
					$next_page = '&lt;a href=&quot;[[relativeurl]]/index.php?t='.$_GET['t'].'&amp;amp;'._rsid.'&amp;amp;prevloaded=1&amp;amp;th='.$obj-&gt;thread_id.'&amp;amp;start='.($misc[0] + $misc[1]).reveal_lnk.unignore_tmp.'&quot;&gt;Next Page &lt;img src=&quot;[[relativeurl]]/theme/default/images/goto.gif&quot; width=&quot;9&quot; height=&quot;9&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;';
				} else {
					$next_message = '&lt;a href=&quot;javascript://&quot; onclick=&quot;chng_focus(\'#msg_num_'.($m_num + 2).'\');&quot;&gt;&lt;img alt=&quot;Go to next message&quot; title=&quot;Go to next message&quot; src=&quot;[[relativeurl]]/theme/default/images/down.png&quot; width=&quot;16&quot; height=&quot;11&quot; /&gt;&lt;/a&gt;';
				}
			}
		}
		++$m_num;
	}

	$user_login = $obj-&gt;user_id ? $obj-&gt;login : $GLOBALS['ANON_NICK'];

	/* Check if the message should be ignored and it is not temporarily revelead. */
	if ($usr-&gt;ignore_list &amp;&amp; !empty($usr-&gt;ignore_list[$obj-&gt;poster_id]) &amp;&amp; !isset($GLOBALS['__FMDSP__'][$obj-&gt;id])) {
		return !$hide_controls ? '&lt;tr&gt;
	&lt;td&gt;
		&lt;table border=&quot;0&quot; cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; class=&quot;MsgTable&quot;&gt;
		&lt;tr&gt;
			&lt;td class=&quot;MsgIg al&quot;&gt;
				&lt;a name=&quot;msg_num_'.$m_num.'&quot;&gt;&lt;/a&gt;
				&lt;a name=&quot;msg_'.$obj-&gt;id.'&quot;&gt;&lt;/a&gt;
				'.($obj-&gt;user_id ? 'Message by &lt;a href=&quot;[[relativeurl]]/index.php?t=usrinfo&amp;amp;'._rsid.'&amp;amp;id='.$obj-&gt;user_id.'&quot;&gt;'.$obj-&gt;login.'&lt;/a&gt; is ignored' : ''.$GLOBALS['ANON_NICK'].' is ignored' )  .'&amp;nbsp;
				[&lt;a href=&quot;[[relativeurl]]/index.php?'. make_reveal_link($obj-&gt;id).'&quot;&gt;reveal message&lt;/a&gt;]&amp;nbsp;
				[&lt;a href=&quot;[[relativeurl]]/index.php?'.make_tmp_unignore_lnk($obj-&gt;poster_id).'&quot;&gt;reveal all messages by '.$user_login.'&lt;/a&gt;]&amp;nbsp;
				[&lt;a href=&quot;[[relativeurl]]/index.php?t=ignore_list&amp;amp;del='.$obj-&gt;poster_id.'&amp;amp;redr=1&amp;amp;'._rsid.'&amp;amp;SQ='.$GLOBALS['sq'].'&quot;&gt;stop ignoring this user&lt;/a&gt;]&lt;/td&gt;
				&lt;td class=&quot;MsgIg&quot; align=&quot;right&quot;&gt;'.$prev_message.$next_message.'
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;/table&gt;
	&lt;/td&gt;
&lt;/tr&gt;' : '&lt;tr class=&quot;MsgR1 GenText&quot;&gt;
	&lt;td&gt;&lt;a name=&quot;msg_num_'.$m_num.'&quot;&gt;&lt;/a&gt; &lt;a name=&quot;msg_'.$obj-&gt;id.'&quot;&gt;&lt;/a&gt;Post by '.$user_login.' is ignored&amp;nbsp;&lt;/td&gt;
&lt;/tr&gt;';
	}

	if ($obj-&gt;user_id &amp;&amp; !$hide_controls) {
		$custom_tag = $obj-&gt;custom_status ? '&lt;br /&gt;'.$obj-&gt;custom_status.'' : '';
		$c = (int) $obj-&gt;level_opt;

		if ($obj-&gt;avatar_loc &amp;&amp; $a &amp; 8388608 &amp;&amp; $b &amp; 8192 &amp;&amp; $o1 &amp; 28 &amp;&amp; !($c &amp; 2)) {
			if (!($c &amp; 1)) {
				$level_name =&amp; $obj-&gt;level_name;
				$level_image = $obj-&gt;level_img ? '&amp;nbsp;&lt;img src=&quot;[[relativeurl]]/images/'.$obj-&gt;level_img.'&quot; alt=&quot;&quot; /&gt;' : '';
			} else {
				$level_name = $level_image = '';
			}
		} else {
			$level_image = $obj-&gt;level_img ? '&amp;nbsp;&lt;img src=&quot;[[relativeurl]]/images/'.$obj-&gt;level_img.'&quot; alt=&quot;&quot; /&gt;' : '';
			$obj-&gt;avatar_loc = '';
			$level_name =&amp; $obj-&gt;level_name;
		}
		$avatar = ($obj-&gt;avatar_loc || $level_image) ? '&lt;td class=&quot;avatarPad wo&quot;&gt;'.$obj-&gt;avatar_loc.$level_image.'&lt;/td&gt;' : '';
		$dmsg_tags = ($custom_tag || $level_name) ? '&lt;div class=&quot;ctags&quot;&gt;'.$level_name.$custom_tag.'&lt;/div&gt;' : '';

		if (($o2 &amp; 32 &amp;&amp; !($a &amp; 32768)) || $b &amp; 1048576) {
			$online_indicator = (($obj-&gt;time_sec + $GLOBALS['LOGEDIN_TIMEOUT'] * 60) &gt; __request_timestamp__) ? '&lt;img src=&quot;[[relativeurl]]/theme/default/images/online.png&quot; alt=&quot;'.$obj-&gt;login.' is currently online&quot; title=&quot;'.$obj-&gt;login.' is currently online&quot; width=&quot;16&quot; height=&quot;16&quot; /&gt;&amp;nbsp;' : '&lt;img src=&quot;[[relativeurl]]/theme/default/images/offline.png&quot; alt=&quot;'.$obj-&gt;login.' is currently offline&quot; title=&quot;'.$obj-&gt;login.' is currently offline&quot; width=&quot;16&quot; height=&quot;16&quot; /&gt;&amp;nbsp;';
		} else {
			$online_indicator = '';
		}

		$user_link = '&lt;a href=&quot;[[relativeurl]]/index.php?t=usrinfo&amp;amp;id='.$obj-&gt;user_id.'&amp;amp;'._rsid.'&quot;&gt;'.$user_login.'&lt;/a&gt;';

		$location = $obj-&gt;location ? '&lt;br /&gt;&lt;b&gt;Location: &lt;/b&gt;'.(strlen($obj-&gt;location) &gt; $GLOBALS['MAX_LOCATION_SHOW'] ? substr($obj-&gt;location, 0, $GLOBALS['MAX_LOCATION_SHOW']) . '...' : $obj-&gt;location).'' : '';

		if (_uid &amp;&amp; _uid != $obj-&gt;user_id) {
			$buddy_link	= !isset($usr-&gt;buddy_list[$obj-&gt;user_id]) ? '&lt;a href=&quot;[[relativeurl]]/index.php?t=buddy_list&amp;amp;add='.$obj-&gt;user_id.'&amp;amp;'._rsid.'&amp;amp;SQ='.$GLOBALS['sq'].'&quot;&gt;add to buddy list&lt;/a&gt;&lt;br /&gt;' : '&lt;a href=&quot;[[relativeurl]]/index.php?t=buddy_list&amp;amp;del='.$obj-&gt;user_id.'&amp;amp;redr=1&amp;amp;'._rsid.'&amp;amp;SQ='.$GLOBALS['sq'].'&quot;&gt;remove from buddy list&lt;/a&gt;&lt;br /&gt;';
			$ignore_link	= !isset($usr-&gt;ignore_list[$obj-&gt;user_id]) ? '&lt;a href=&quot;[[relativeurl]]/index.php?t=ignore_list&amp;amp;add='.$obj-&gt;user_id.'&amp;amp;'._rsid.'&amp;amp;SQ='.$GLOBALS['sq'].'&quot;&gt;ignore all messages by this user&lt;/a&gt;' : '&lt;a href=&quot;[[relativeurl]]/index.php?t=ignore_list&amp;amp;del='.$obj-&gt;user_id.'&amp;amp;redr=1&amp;amp;'._rsid.'&amp;amp;SQ='.$GLOBALS['sq'].'&quot;&gt;stop ignoring messages by this user&lt;/a&gt;';
			$dmsg_bd_il	= ''.$buddy_link.$ignore_link.'&lt;br /&gt;';
		} else {
			$dmsg_bd_il = '';
		}

		/* Show im buttons if need be. */
		if ($b &amp; 16384) {
			$im = '';
			if ($obj-&gt;icq) {
				$im .= '&lt;a href=&quot;[[relativeurl]]/index.php?t=usrinfo&amp;amp;id='.$obj-&gt;poster_id.'&amp;amp;'._rsid.'#icq_msg&quot;&gt;&lt;img title=&quot;'.$obj-&gt;icq.'&quot; src=&quot;[[relativeurl]]/theme/default/images/icq.png&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;';
			}
			if ($obj-&gt;facebook) {
				$im .= '&lt;a href=&quot;https://www.facebook.com/'.$obj-&gt;facebook.'&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/facebook.png&quot; title=&quot;'.$obj-&gt;facebook.'&quot; /&gt;&lt;/a&gt;';
			}
			if ($obj-&gt;yahoo) {
				$im .= '&lt;a href=&quot;http://edit.yahoo.com/config/send_webmesg?.target='.$obj-&gt;yahoo.'&amp;amp;.src=pg&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/yahoo.png&quot; title=&quot;'.$obj-&gt;yahoo.'&quot; /&gt;&lt;/a&gt;';
			}
			if ($obj-&gt;jabber) {
				$im .=  '&lt;img src=&quot;[[relativeurl]]/theme/default/images/jabber.png&quot; title=&quot;'.$obj-&gt;jabber.'&quot; alt=&quot;&quot; /&gt;';
			}
			if ($obj-&gt;google) {
				$im .= '&lt;img src=&quot;[[relativeurl]]/theme/default/images/google.png&quot; title=&quot;'.$obj-&gt;google.'&quot; alt=&quot;&quot; /&gt;';
			}
			if ($obj-&gt;skype) {
				$im .=  '&lt;a href=&quot;callto://'.$obj-&gt;skype.'&quot;&gt;&lt;img src=&quot;[[relativeurl]]/theme/default/images/skype.png&quot; title=&quot;'.$obj-&gt;skype.'&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;';
			}
			if ($obj-&gt;twitter) {
				$im .=  '&lt;a href=&quot;https://twitter.com/'.$obj-&gt;twitter.'&quot;&gt;&lt;img src=&quot;[[relativeurl]]/theme/default/images/twitter.png&quot; title=&quot;'.$obj-&gt;twitter.'&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;';
			}
			if ($im) {
				$dmsg_im_row = ''.$im.'&lt;br /&gt;';
			} else {
				$dmsg_im_row = '';
			}
		} else {
			$dmsg_im_row = '';
		}
	} else {
		$user_link = $obj-&gt;user_id ? ''.$user_login.'' : ''.$user_login;
		$dmsg_tags = $dmsg_im_row = $dmsg_bd_il = $location = $online_indicator = $avatar = '';
	}

	/* Display message body.
	 * If we have message threshold &amp; the entirity of the post has been revelead show a
	 * preview otherwise if the message body exists show an actual body.
	 * If there is no body show a 'no-body' message.
	 */
	if (!$hide_controls &amp;&amp; $obj-&gt;message_threshold &amp;&amp; $obj-&gt;length_preview &amp;&amp; $obj-&gt;length &gt; $obj-&gt;message_threshold &amp;&amp; !isset($GLOBALS['__FMDSP__'][$obj-&gt;id])) {
		$msg_body = '&lt;span class=&quot;MsgBodyText&quot;&gt;'.read_msg_body($obj-&gt;offset_preview, $obj-&gt;length_preview, $obj-&gt;file_id_preview).'&lt;/span&gt;
...&lt;br /&gt;&lt;br /&gt;&lt;div class=&quot;ac&quot;&gt;[ &lt;a href=&quot;[[relativeurl]]/index.php?'.make_reveal_link($obj-&gt;id).'&quot;&gt;Show the rest of the message&lt;/a&gt; ]&lt;/div&gt;';
	} else if ($obj-&gt;length) {
		$msg_body = '&lt;span class=&quot;MsgBodyText&quot;&gt;'.read_msg_body($obj-&gt;foff, $obj-&gt;length, $obj-&gt;file_id).'&lt;/span&gt;';
	} else {
		$msg_body = 'No Message Body';
	}

	/* Draw file attachments if there are any. */
	$drawmsg_file_attachments = '';
	if ($obj-&gt;attach_cnt &amp;&amp; !empty($obj-&gt;attach_cache)) {
		$atch = unserialize($obj-&gt;attach_cache);
		if (!empty($atch)) {
			foreach ($atch as $v) {
				$sz = $v[2] / 1024;
				$drawmsg_file_attachments .= '&lt;li&gt;
	&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/images/mime/'.$v[4].'&quot; class=&quot;at&quot; /&gt;
	&lt;span class=&quot;GenText fb&quot;&gt;Attachment:&lt;/span&gt; &lt;a href=&quot;[[relativeurl]]/index.php?t=getfile&amp;amp;id='.$v[0].'&amp;amp;'._rsid.'&quot; title=&quot;'.$v[1].'&quot;&gt;'.$v[1].'&lt;/a&gt;
	&lt;br /&gt;
	&lt;span class=&quot;SmallText&quot;&gt;(Size: '.($sz &lt; 1000 ? number_format($sz, 2).'KB' : number_format($sz/1024, 2).'MB').', Downloaded '.convertPlural($v[3], array(''.$v[3].' time',''.$v[3].' times')).')&lt;/span&gt;
&lt;/li&gt;';
			}
			$drawmsg_file_attachments = '&lt;ul class=&quot;AttachmentsList&quot;&gt;
	'.$drawmsg_file_attachments.'
&lt;/ul&gt;';
		}
		/* Append session to getfile. */
		if (_uid) {
			if ($o1 &amp; 128 &amp;&amp; !isset($_COOKIE[$GLOBALS['COOKIE_NAME']])) {
				$msg_body = str_replace('&lt;img src=&quot;index.php?t=getfile', '&lt;img src=&quot;index.php?t=getfile&amp;amp;S='. s, $msg_body);
				$tap = 1;
			}
			if ($o2 &amp; 32768 &amp;&amp; (isset($tap) || $o2 &amp; 8192)) {
				$pos = 0;
				while (($pos = strpos($msg_body, '&lt;img src=&quot;index.php/fa/', $pos)) !== false) {
					$pos = strpos($msg_body, '&quot;', $pos + 11);
					$msg_body = substr_replace($msg_body, _rsid, $pos, 0);
				}
			}
		}
	}

	if ($obj-&gt;poll_cache) {
		$obj-&gt;poll_cache = unserialize($obj-&gt;poll_cache);
	}

	/* Handle poll votes. */
	if (!empty($_POST['poll_opt']) &amp;&amp; ($_POST['poll_opt'] = (int)$_POST['poll_opt']) &amp;&amp; !($obj-&gt;thread_opt &amp; 1) &amp;&amp; $perms &amp; 512) {
		if (register_vote($obj-&gt;poll_cache, $obj-&gt;poll_id, $_POST['poll_opt'], $obj-&gt;id)) {
			$obj-&gt;total_votes += 1;
			$obj-&gt;cant_vote = 1;
		}
		unset($_GET['poll_opt']);
	}

	/* Display poll if there is one. */
	if ($obj-&gt;poll_id &amp;&amp; $obj-&gt;poll_cache) {
		/* We need to determine if we allow the user to vote or see poll results. */
		$show_res = 1;

		if (isset($_GET['pl_view']) &amp;&amp; !isset($_POST['pl_view'])) {
			$_POST['pl_view'] = $_GET['pl_view'];
		}

		/* Various conditions that may prevent poll voting. */
		if (!$hide_controls &amp;&amp; !$obj-&gt;cant_vote &amp;&amp;
			(!isset($_POST['pl_view']) || $_POST['pl_view'] != $obj-&gt;poll_id) &amp;&amp;
			($perms &amp; 512 &amp;&amp; (!($obj-&gt;thread_opt &amp; 1) || $perms &amp; 4096)) &amp;&amp;
			(!$obj-&gt;expiry_date || ($obj-&gt;creation_date + $obj-&gt;expiry_date) &gt; __request_timestamp__) &amp;&amp;
			/* Check if the max # of poll votes was reached. */
			(!$obj-&gt;max_votes || $obj-&gt;total_votes &lt; $obj-&gt;max_votes)
		) {
			$show_res = 0;
		}

		$i = 0;

		$poll_data = '';
		foreach ($obj-&gt;poll_cache as $k =&gt; $v) {
			++$i;
			if ($show_res) {
				$length = ($v[1] &amp;&amp; $obj-&gt;total_votes) ? round($v[1] / $obj-&gt;total_votes * 100) : 0;
				$poll_data .= '&lt;tr class=&quot;'.alt_var('msg_poll_alt_clr','RowStyleB','RowStyleA').'&quot;&gt;
	&lt;td&gt;'.$i.'.&lt;/td&gt;
	&lt;td&gt;'.$v[0].'&lt;/td&gt;
	&lt;td&gt;&lt;img src=&quot;[[relativeurl]]/theme/default/images/poll_pix.gif&quot; alt=&quot;&quot; height=&quot;10&quot; width=&quot;'.$length.'&quot; /&gt; '.$v[1].' / '.$length.'%&lt;/td&gt;
&lt;/tr&gt;';
			} else {
				$poll_data .= '&lt;tr class=&quot;'.alt_var('msg_poll_alt_clr','RowStyleB','RowStyleA').'&quot;&gt;
	&lt;td&gt;'.$i.'.&lt;/td&gt;
	&lt;td colspan=&quot;2&quot;&gt;&lt;label&gt;&lt;input type=&quot;radio&quot; name=&quot;poll_opt&quot; value=&quot;'.$k.'&quot; /&gt;&amp;nbsp;&amp;nbsp;'.$v[0].'&lt;/label&gt;&lt;/td&gt;
&lt;/tr&gt;';
			}
		}

		if (!$show_res) {
			$poll = '&lt;br /&gt;
&lt;form action=&quot;[[relativeurl]]/index.php?'.htmlspecialchars($_SERVER['QUERY_STRING']).'#msg_'.$obj-&gt;id.'&quot; method=&quot;post&quot;&gt;'._hs.'
&lt;table cellspacing=&quot;1&quot; cellpadding=&quot;2&quot; class=&quot;PollTable&quot;&gt;
&lt;tr&gt;
	&lt;th class=&quot;nw&quot; colspan=&quot;3&quot;&gt;'.$obj-&gt;poll_name.'&lt;span class=&quot;ptp&quot;&gt;[ '.$obj-&gt;total_votes.' '.convertPlural($obj-&gt;total_votes, array('vote','votes')).' ]&lt;/span&gt;&lt;/th&gt;
&lt;/tr&gt;
'.$poll_data.'
&lt;tr class=&quot;'.alt_var('msg_poll_alt_clr','RowStyleB','RowStyleA').' ar&quot;&gt;
	&lt;td colspan=&quot;3&quot;&gt;
		&lt;input type=&quot;submit&quot; class=&quot;button&quot; name=&quot;pl_vote&quot; value=&quot;Vote&quot; /&gt;
		&amp;nbsp;'.($obj-&gt;total_votes ? '&lt;input type=&quot;submit&quot; class=&quot;button&quot; name=&quot;pl_res&quot; value=&quot;View Results&quot; /&gt;' : '' )  .'
	&lt;/td&gt;
&lt;/tr&gt;
&lt;/table&gt;
&lt;input type=&quot;hidden&quot; name=&quot;pl_view&quot; value=&quot;'.$obj-&gt;poll_id.'&quot; /&gt;
&lt;/form&gt;
&lt;br /&gt;';
		} else {
			$poll = '&lt;br /&gt;
&lt;table cellspacing=&quot;1&quot; cellpadding=&quot;2&quot; class=&quot;PollTable&quot;&gt;
&lt;tr&gt;
	&lt;th class=&quot;nw&quot; colspan=&quot;3&quot;&gt;'.$obj-&gt;poll_name.'&lt;span class=&quot;vt&quot;&gt;[ '.$obj-&gt;total_votes.' '.convertPlural($obj-&gt;total_votes, array('vote','votes')).' ]&lt;/span&gt;&lt;/th&gt;
&lt;/tr&gt;
'.$poll_data.'
&lt;/table&gt;
&lt;br /&gt;';
		}

		if (($p = strpos($msg_body, '{POLL}')) !== false) {
			$msg_body = substr_replace($msg_body, $poll, $p, 6);
		} else {
			$msg_body = $poll . $msg_body;
		}
	}

	/* Determine if the message was updated and if this needs to be shown. */
	if ($obj-&gt;update_stamp) {
		if ($obj-&gt;updated_by != $obj-&gt;poster_id &amp;&amp; $o1 &amp; 67108864) {
			$modified_message = '&lt;p class=&quot;fl&quot;&gt;[Updated on: '.print_date('%a, %d %B %Y %H:%M', $obj-&gt;update_stamp).'] by Moderator&lt;/p&gt;';
		} else if ($obj-&gt;updated_by == $obj-&gt;poster_id &amp;&amp; $o1 &amp; 33554432) {
			$modified_message = '&lt;p class=&quot;fl&quot;&gt;[Updated on: '.print_date('%a, %d %B %Y %H:%M', $obj-&gt;update_stamp).']&lt;/p&gt;';
		} else {
			$modified_message = '';
		}
	} else {
		$modified_message = '';
	}

	if ($_GET['t'] != 'tree' &amp;&amp; $_GET['t'] != 'msg') {
		$lnk = d_thread_view;
	} else {
		$lnk =&amp; $_GET['t'];
	}

	$rpl = '';
	if (!$hide_controls) {

		/* Show reply links, eg: [message #1 is a reply to message #2]. */
		if ($o2 &amp; 536870912) {
			if ($obj-&gt;reply_to &amp;&amp; $obj-&gt;reply_to != $obj-&gt;id) {
				$rpl = '&lt;span class=&quot;SmallText&quot;&gt;[&lt;a href=&quot;[[relativeurl]]/index.php?t='.$lnk.'&amp;amp;th='.$obj-&gt;thread_id.'&amp;amp;goto='.$obj-&gt;id.'&amp;amp;'._rsid.'#msg_'.$obj-&gt;id.'&quot;&gt;message #'.$obj-&gt;id.'&lt;/a&gt; is a reply to &lt;a href=&quot;[[relativeurl]]/index.php?t='.$lnk.'&amp;amp;th='.$obj-&gt;thread_id.'&amp;amp;goto='.$obj-&gt;reply_to.'&amp;amp;'._rsid.'#msg_'.$obj-&gt;reply_to.'&quot;&gt;message #'.$obj-&gt;reply_to.'&lt;/a&gt;]&lt;/span&gt;';
			} else {
				$rpl = '&lt;span class=&quot;SmallText&quot;&gt;[&lt;a href=&quot;[[relativeurl]]/index.php?t='.$lnk.'&amp;amp;th='.$obj-&gt;thread_id.'&amp;amp;goto='.$obj-&gt;id.'&amp;amp;'._rsid.'#msg_'.$obj-&gt;id.'&quot;&gt;message #'.$obj-&gt;id.'&lt;/a&gt;]&lt;/span&gt;';
			}
		}

		/* Little trick, this variable will only be available if we have a next link leading to another page. */
		if (empty($next_page)) {
			$next_page = '&amp;nbsp;';
		}

		// Edit button if editing is enabled, EDIT_TIME_LIMIT has not transpired, and there are no replies.
		if (_uid &amp;&amp; 
			($perms &amp; 16 ||
				(_uid == $obj-&gt;poster_id &amp;&amp; 
					(!$GLOBALS['EDIT_TIME_LIMIT'] ||
					__request_timestamp__ - $obj-&gt;post_stamp &lt; $GLOBALS['EDIT_TIME_LIMIT'] * 60
					) &amp;&amp;
				(($GLOBALS['FUD_OPT_3'] &amp; 1024) || $obj-&gt;id == $obj-&gt;last_post_id))
			)
		   )
		{
			$edit_link = '&lt;a href=&quot;[[relativeurl]]/index.php?t=post&amp;amp;msg_id='.$obj-&gt;id.'&amp;amp;'._rsid.'&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/msg_edit.gif&quot; width=&quot;71&quot; height=&quot;18&quot; /&gt;&lt;/a&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;';
		} else {
			$edit_link = '';
		}

		if (!($obj-&gt;thread_opt &amp; 1) || $perms &amp; 4096) {
			$reply_link = '&lt;a href=&quot;[[relativeurl]]/index.php?t=post&amp;amp;reply_to='.$obj-&gt;id.'&amp;amp;'._rsid.'&quot; rel=&quot;nofollow&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/msg_reply.gif&quot; width=&quot;71&quot; height=&quot;18&quot; /&gt;&lt;/a&gt;&amp;nbsp;';
			$quote_link = '&lt;a href=&quot;[[relativeurl]]/index.php?t=post&amp;amp;reply_to='.$obj-&gt;id.'&amp;amp;quote=true&amp;amp;'._rsid.'&quot; rel=&quot;nofollow&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/msg_quote.gif&quot; width=&quot;71&quot; height=&quot;18&quot; /&gt;&lt;/a&gt;';
		} else {
			$reply_link = $quote_link = '';
		}
	}

	return '&lt;tr&gt;
	&lt;td class=&quot;MsgSpacer&quot;&gt;
		&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; class=&quot;MsgTable&quot;&gt;
		&lt;tr&gt;
			&lt;td class=&quot;MsgR1 vt al expanded&quot;&gt;&lt;a name=&quot;msg_num_'.$m_num.'&quot;&gt;&lt;/a&gt;&lt;a name=&quot;msg_'.$obj-&gt;id.'&quot;&gt;&lt;/a&gt;'.($obj-&gt;icon &amp;&amp; !$hide_controls ? '&lt;img src=&quot;[[relativeurl]]/images/message_icons/'.$obj-&gt;icon.'&quot; alt=&quot;'.$obj-&gt;icon.'&quot; /&gt;&amp;nbsp;&amp;nbsp;' : '' )  .'&lt;span class=&quot;MsgSubText&quot;&gt;&lt;a href=&quot;[[relativeurl]]/index.php?t='.$lnk.'&amp;amp;th='.$obj-&gt;thread_id.'&amp;amp;goto='.$obj-&gt;id.'&amp;amp;'._rsid.'#msg_'.$obj-&gt;id.'&quot; class=&quot;MsgSubText&quot;&gt;'.$obj-&gt;subject.'&lt;/a&gt;&lt;/span&gt; '.$rpl.'&lt;/td&gt;
			&lt;td class=&quot;MsgR1 vt ar&quot;&gt;&lt;span class=&quot;DateText&quot;&gt;'.print_date('%a, %d %B %Y %H:%M', $obj-&gt;post_stamp).'&lt;/span&gt; '.$prev_message.$next_message.'&lt;/td&gt;
		&lt;/tr&gt;
		&lt;tr class=&quot;MsgR2&quot;&gt;
			&lt;td class=&quot;MsgR2&quot; colspan=&quot;2&quot;&gt;
				&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; class=&quot;ContentTable&quot;&gt;
				&lt;tr class=&quot;MsgR2&quot;&gt;
				'.$avatar.'
					&lt;td class=&quot;msgud&quot;&gt;
						'.$online_indicator.'
						'.$user_link.'
						'.(!$hide_controls ? ''.($obj-&gt;disp_flag_cc &amp;&amp; $GLOBALS['FUD_OPT_3'] &amp; 524288 ? '&amp;nbsp;&amp;nbsp;&lt;img src=&quot;[[relativeurl]]/images/flags/'.$obj-&gt;disp_flag_cc.'.png&quot; border=&quot;0&quot; width=&quot;16&quot; height=&quot;11&quot; title=&quot;'.$obj-&gt;flag_country.'&quot; alt=&quot;'.$obj-&gt;flag_country.'&quot;/&gt;' : '' )  .($obj-&gt;user_id ? '&lt;br /&gt;&lt;b&gt;Messages:&lt;/b&gt; '.$obj-&gt;posted_msg_count.'&lt;br /&gt;&lt;b&gt;Registered:&lt;/b&gt; '.print_date('%B %Y', $obj-&gt;join_date).' '.$location.'' : '' )  .'' : '' )  .'
						'.($GLOBALS['FUD_OPT_4'] &amp; 4 &amp;&amp; $obj-&gt;poster_id &gt; 0 ? '&lt;div class=&quot;karma_usr_'.$obj-&gt;poster_id.' SmallText&quot;&gt;
'.($MOD ? '&lt;a href=&quot;javascript://&quot; onclick=&quot;window_open(\'[[relativeurl]]/index.php?t=karma_track&amp;amp;'._rsid.'&amp;amp;msgid='.$obj-&gt;id.'\', \'karma_rating_track\', 300, 400);&quot; class=&quot;karma&quot;&gt;' : '' )  .'
	&lt;b&gt;Karma:&lt;/b&gt; '.$obj-&gt;karma.'
'.($MOD ? '&lt;/a&gt;' : '' )  .'
' : '' )  .'&lt;/div&gt;
					&lt;/td&gt;
					&lt;td class=&quot;msgud&quot;&gt;'.$dmsg_tags.'&lt;/td&gt;
					&lt;td class=&quot;msgot&quot;&gt;'.$dmsg_bd_il.$dmsg_im_row.(!$hide_controls ? ''.(($obj-&gt;host_name &amp;&amp; $o1 &amp; 268435456) ? '&lt;b&gt;From:&lt;/b&gt; '.$obj-&gt;host_name.'&lt;br /&gt;' : '' )  .(($b &amp; 1048576 || $usr-&gt;md || $o1 &amp; 134217728) ? '&lt;b&gt;IP:&lt;/b&gt; &lt;a href=&quot;[[relativeurl]]/index.php?t=ip&amp;amp;ip='.$obj-&gt;ip_addr.'&amp;amp;'._rsid.'&quot;&gt;'.$obj-&gt;ip_addr.'&lt;/a&gt;' : '' )  .'' : '' )  .'&lt;/td&gt;
		&lt;/tr&gt;
		&lt;/table&gt;
	&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
	&lt;td colspan=&quot;2&quot; class=&quot;MsgR3&quot;&gt;
		'.$msg_body.'
		'.$drawmsg_file_attachments.'
		'.(!$hide_controls ? ''.(($obj-&gt;sig &amp;&amp; $o1 &amp; 32768 &amp;&amp; $obj-&gt;msg_opt &amp; 1 &amp;&amp; $b &amp; 4096 &amp;&amp; !($a &amp; 67108864)) ? '&lt;br /&gt;&lt;br /&gt;&lt;div class=&quot;signature&quot; /&gt;'.$obj-&gt;sig.'&lt;/div&gt;' : '' )  .'
		&lt;div class=&quot;SmallText clear&quot;&gt;'.$modified_message.'&lt;p class=&quot;fr&quot;&gt;&lt;a href=&quot;[[relativeurl]]/index.php?t=report&amp;amp;msg_id='.$obj-&gt;id.'&amp;amp;'._rsid.'&quot; rel=&quot;nofollow&quot;&gt;Report message to a moderator&lt;/a&gt;&lt;/p&gt;' : '' )  .'&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;
'.(!$hide_controls ? '&lt;tr&gt;
	&lt;td colspan=&quot;2&quot; class=&quot;MsgToolBar&quot;&gt;
		&lt;table border=&quot;0&quot; cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; class=&quot;wa&quot;&gt;
		&lt;tr&gt;
			&lt;td class=&quot;al nw&quot;&gt;
				'.($obj-&gt;user_id ? '&lt;a href=&quot;[[relativeurl]]/index.php?t=usrinfo&amp;amp;id='.$obj-&gt;user_id.'&amp;amp;'._rsid.'&quot; rel=&quot;nofollow&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/msg_about.gif&quot; /&gt;&lt;/a&gt;&amp;nbsp;
				'.(($o1 &amp; 4194304 &amp;&amp; $a &amp; 16) ? '&lt;a href=&quot;[[relativeurl]]/index.php?t=email&amp;amp;toi='.$obj-&gt;user_id.'&amp;amp;'._rsid.'&quot; rel=&quot;nofollow&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/msg_email.gif&quot; width=&quot;71&quot; height=&quot;18&quot; /&gt;&lt;/a&gt;&amp;nbsp;' : '' )  .'
				'.($o1 &amp; 1024 ? '&lt;a href=&quot;[[relativeurl]]/index.php?t=ppost&amp;amp;toi='.$obj-&gt;user_id.'&amp;amp;rmid='.$obj-&gt;id.'&amp;amp;'._rsid.'&quot; rel=&quot;nofollow&quot;&gt;&lt;img alt=&quot;Send a private message to this user&quot; title=&quot;Send a private message to this user&quot; src=&quot;[[relativeurl]]/theme/default/images/msg_pm.gif&quot; width=&quot;71&quot; height=&quot;18&quot; /&gt;&lt;/a&gt;' : '' )  .'' : '' )  .'
				'.(($GLOBALS['FUD_OPT_4'] &amp; 4 &amp;&amp; $perms &amp; 1024 &amp;&amp; $obj-&gt;poster_id &gt; 0 &amp;&amp; !$obj-&gt;cant_karma &amp;&amp; $obj-&gt;poster_id != $usr-&gt;id) ? '
    &lt;span id=karma_link_'.$obj-&gt;id.' class=&quot;SmallText&quot;&gt;Rate author:
	&lt;a href=&quot;javascript://&quot; onclick=&quot;changeKarma('.$obj-&gt;id.','.$obj-&gt;poster_id.',\'up\',\''.s.'\',\''.$usr-&gt;sq.'\');&quot; class=&quot;karma up&quot;&gt;+1&lt;/a&gt;
	&lt;a href=&quot;javascript://&quot; onclick=&quot;changeKarma('.$obj-&gt;id.','.$obj-&gt;poster_id.',\'down\',\''.s.'\',\''.$usr-&gt;sq.'\');&quot; class=&quot;karma down&quot;&gt;-1&lt;/a&gt;
    &lt;/span&gt;
' : '' )  .'
			&lt;/td&gt;
			&lt;td class=&quot;GenText wa ac&quot;&gt;'.$next_page.'&lt;/td&gt;
			&lt;td class=&quot;nw ar&quot;&gt;
				'.($perms &amp; 32 ? '&lt;a href=&quot;[[relativeurl]]/index.php?t=mmod&amp;amp;del='.$obj-&gt;id.'&amp;amp;'._rsid.'&quot;&gt;&lt;img alt=&quot;&quot; src=&quot;[[relativeurl]]/theme/default/images/msg_delete.gif&quot; width=&quot;71&quot; height=&quot;18&quot; /&gt;&lt;/a&gt;&amp;nbsp;' : '' )  .'
				'.$edit_link.'
				'.$reply_link.'
				'.$quote_link.'
			&lt;/td&gt;
		&lt;/tr&gt;
		&lt;/table&gt;
	&lt;/td&gt;
&lt;/tr&gt;' : '' )  .'
&lt;/table&gt;
&lt;/td&gt;&lt;/tr&gt;';
}
?&gt;
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fvar%2Fsoftaculous%2Ffud%2Fdefault'>Back to Directory</a>