<h2>Editing File: /var/softaculous/fud/default/private.inc</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php
/**
* copyright            : (C) 2001-2013 Advanced Internet Designs Inc.
* email                : forum@prohost.org
* $Id$
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; version 2 of the License.
**/

$GLOBALS['recv_user_id'] = array();

class fud_pmsg
{
	var	$id, $to_list, $ouser_id, $duser_id, $pdest, $ip_addr, $host_name, $post_stamp, $icon, $fldr,
		$subject, $attach_cnt, $pmsg_opt, $length, $foff, $login, $ref_msg_id, $body;

	function add($track='')
	{
		$this-&gt;post_stamp = __request_timestamp__;
		$this-&gt;ip_addr = get_ip();
		$this-&gt;host_name = $GLOBALS['FUD_OPT_1'] &amp; 268435456 ? _esc(get_host($this-&gt;ip_addr)) : 'NULL';

		if ($this-&gt;fldr != 1) {
			$this-&gt;read_stamp = $this-&gt;post_stamp;
		}

		if ($GLOBALS['FUD_OPT_3'] &amp; 32768) {
			$this-&gt;foff = $this-&gt;length = -1;
		} else {
			list($this-&gt;foff, $this-&gt;length) = write_pmsg_body($this-&gt;body);
		}

		$this-&gt;id = db_qid('INSERT INTO fud30_pmsg (
			ouser_id,
			duser_id,
			pdest,
			to_list,
			ip_addr,
			host_name,
			post_stamp,
			icon,
			fldr,
			subject,
			attach_cnt,
			read_stamp,
			ref_msg_id,
			foff,
			length,
			pmsg_opt
			) VALUES(
				'. $this-&gt;ouser_id .',
				'. ($this-&gt;duser_id ? $this-&gt;duser_id : $this-&gt;ouser_id) .',
				'. (isset($GLOBALS['recv_user_id'][0]) ? (int)$GLOBALS['recv_user_id'][0] : '0') .',
				'. ssn($this-&gt;to_list) .',
				\''. $this-&gt;ip_addr .'\',
				'. $this-&gt;host_name .',
				'. $this-&gt;post_stamp .',
				'. ssn($this-&gt;icon) .',
				'. $this-&gt;fldr .',
				'. _esc($this-&gt;subject) .',
				'. (int)$this-&gt;attach_cnt .',
				'. $this-&gt;read_stamp .',
				'. ssn($this-&gt;ref_msg_id) .',
				'. (int)$this-&gt;foff .',
				'. (int)$this-&gt;length .',
				'. $this-&gt;pmsg_opt .'
			)');

		if ($GLOBALS['FUD_OPT_3'] &amp; 32768 &amp;&amp; $this-&gt;body) {
			$fid = db_qid('INSERT INTO fud30_msg_store (data) VALUES('. _esc($this-&gt;body) .')');
			q('UPDATE fud30_pmsg SET length='. $fid .' WHERE id='. $this-&gt;id);
		}

		if ($this-&gt;fldr == 3 &amp;&amp; !$track) {
			$this-&gt;send_pmsg();
		}
	}

	function send_pmsg()
	{
		$this-&gt;pmsg_opt |= 16|32;
		$this-&gt;pmsg_opt &amp;= 16|32|1|2|4;

		foreach($GLOBALS['recv_user_id'] as $v) {
			$id = db_qid('INSERT INTO fud30_pmsg (
				to_list,
				ouser_id,
				ip_addr,
				host_name,
				post_stamp,
				icon,
				fldr,
				subject,
				attach_cnt,
				foff,
				length,
				duser_id,
				ref_msg_id,
				pmsg_opt
			) VALUES (
				'. ssn($this-&gt;to_list).',
				'. $this-&gt;ouser_id .',
				\''. $this-&gt;ip_addr .'\',
				'. $this-&gt;host_name .',
				'. $this-&gt;post_stamp .',
				'. ssn($this-&gt;icon) .',
				1,
				'. _esc($this-&gt;subject) .',
				'. (int)$this-&gt;attach_cnt .',
				'. $this-&gt;foff .',
				'. $this-&gt;length .',
				'. $v .',
				'. ssn($this-&gt;ref_msg_id) .',
				'. $this-&gt;pmsg_opt .')');

			if ($GLOBALS['FUD_OPT_3'] &amp; 32768 &amp;&amp; $this-&gt;body) {
				$fid = db_qid('INSERT INTO fud30_msg_store (data) VALUES('. _esc($this-&gt;body) .')');
				q('UPDATE fud30_pmsg SET length='. $fid .' WHERE id='. $id);
			}

			$GLOBALS['send_to_array'][] = array($v, $id);
			$um[$v] = $id;
		}
		$c =  uq('SELECT id, email FROM fud30_users WHERE id IN('. implode(',', $GLOBALS['recv_user_id']) .') AND users_opt&gt;=64 AND '. q_bitand('users_opt', 64) .' &gt; 0');

		$from = reverse_fmt($GLOBALS['usr']-&gt;alias);
		$subject = reverse_fmt($this-&gt;subject);

		while ($r = db_rowarr($c)) {
			/* Do not send notifications about messages sent to self. */
			if ($r[0] == $this-&gt;ouser_id) {
				continue;
			}
			send_pm_notification($r[1], $um[$r[0]], $subject, $from);
		}
		unset($c);
	}

	function sync()
	{
		$this-&gt;post_stamp = __request_timestamp__;
		$this-&gt;ip_addr    = get_ip();
		$this-&gt;host_name  = $GLOBALS['FUD_OPT_1'] &amp; 268435456 ? _esc(get_host($this-&gt;ip_addr)) : 'NULL';

		if ($GLOBALS['FUD_OPT_3'] &amp; 32768) {	// DB_MESSAGE_STORAGE
			if ($fid = q_singleval('SELECT length FROM fud30_pmsg WHERE id='. $this-&gt;id .' AND foff!=-1')) {
				q('DELETE FROM fud30_msg_store WHERE id='. $this-&gt;length);
			}
			$this-&gt;foff = $this-&gt;length = -1;
		} else {
			list($this-&gt;foff, $this-&gt;length) = write_pmsg_body($this-&gt;body);
		}

		q('UPDATE fud30_pmsg SET
			to_list='. ssn($this-&gt;to_list) .',
			icon='. ssn($this-&gt;icon) .',
			ouser_id='. $this-&gt;ouser_id .',
			duser_id='. $this-&gt;ouser_id .',
			post_stamp='. $this-&gt;post_stamp .',
			subject='. _esc($this-&gt;subject) .',
			ip_addr=\''. $this-&gt;ip_addr .'\',
			host_name='. $this-&gt;host_name .',
			attach_cnt='. (int)$this-&gt;attach_cnt .',
			fldr='. $this-&gt;fldr .',
			foff='. (int)$this-&gt;foff .',
			length='. (int)$this-&gt;length .',
			pmsg_opt='. $this-&gt;pmsg_opt .'
		WHERE id='. $this-&gt;id);

		if ($GLOBALS['FUD_OPT_3'] &amp; 32768 &amp;&amp; $this-&gt;body) {
			$fid = db_qid('INSERT INTO fud30_msg_store (data) VALUES('. _esc($this-&gt;body) .')');
			q('UPDATE fud30_pmsg SET length='. $fid .' WHERE id='. $this-&gt;id);
		}

		if ($this-&gt;fldr == 3) {
			$this-&gt;send_pmsg();
		}
	}
}

function write_pmsg_body($text)
{
	if (($ll = !db_locked())) {
		db_lock('fud30_fl_pm WRITE');
	}

	$fp = fopen($GLOBALS['MSG_STORE_DIR'] .'private', 'ab');
	if (!$fp) {
		exit(&quot;FATAL ERROR: cannot open private message store&lt;br /&gt;\n&quot;);
	}

	fseek($fp, 0, SEEK_END);
	if (!($s = ftell($fp))) {
		$s = __ffilesize($fp);
	}

	if (($len = fwrite($fp, $text)) !== strlen($text)) {
		exit(&quot;FATAL ERROR: system has ran out of disk space&lt;br /&gt;\n&quot;);
	}
	fclose($fp);

	if ($ll) {
		db_unlock();
	}

	if (!$s) {
		@chmod($GLOBALS['MSG_STORE_DIR'] .'private', ($GLOBALS['FUD_OPT_2'] &amp; 8388608 ? 0600 : 0644));
	}

	return array($s, $len);
}

function read_pmsg_body($offset, $length)
{
	if ($length &lt; 1) {
		return;
	}

	if ($GLOBALS['FUD_OPT_3'] &amp; 32768 &amp;&amp; $offset == -1) {
		return q_singleval('SELECT data FROM fud30_msg_store WHERE id='. $length);
	}

	$fp = fopen($GLOBALS['MSG_STORE_DIR'].'private', 'rb');
	fseek($fp, $offset, SEEK_SET);
	$str = fread($fp, $length);
	fclose($fp);

	return $str;
}

function pmsg_move($mid, $fid, $validate)
{
	if (!$validate &amp;&amp; !q_singleval('SELECT id FROM fud30_pmsg WHERE duser_id='. _uid .' AND id='. $mid)) {
		return;
	}

	q('UPDATE fud30_pmsg SET fldr='. $fid .' WHERE duser_id='. _uid .' AND id='. $mid);
}

function pmsg_del($mid, $fldr=0)
{
	if (!$fldr &amp;&amp; !($fldr = q_singleval('SELECT fldr FROM fud30_pmsg WHERE duser_id='. _uid .' AND id='. $mid))) {
		return;
	}

	if ($fldr != 5) {
		pmsg_move($mid, 5, 0);
	} else {
		if ($GLOBALS['FUD_OPT_3'] &amp; 32768 &amp;&amp; ($fid = q_singleval('SELECT length FROM fud30_pmsg WHERE id='. $mid .' AND foff=-1'))) {
			q('DELETE FROM fud30_msg_store WHERE id='. $fid);
		}
		q('DELETE FROM fud30_pmsg WHERE id='.$mid);
		$c = uq('SELECT id FROM fud30_attach WHERE message_id='. $mid .' AND attach_opt=1');
		while ($r = db_rowarr($c)) {
			@unlink($GLOBALS['FILE_STORE'] . $r[0] .'.atch');
		}
		unset($c);
		q('DELETE FROM fud30_attach WHERE message_id='. $mid .' AND attach_opt=1');
	}
}

function send_pm_notification($email, $pid, $subject, $from)
{
	send_email($GLOBALS['NOTIFY_FROM'], $email, '['.$GLOBALS['FORUM_TITLE'].'] New Private Message Notification', 'You have a new private message titled &quot;'.$subject.'&quot;, from &quot;'.$from.'&quot;, in the forum &quot;'.$GLOBALS['FORUM_TITLE'].'&quot;.\nTo view the message, click here: [[softurl]]/index.php?t=pmsg_view&amp;id='.$pid.'\n\nTo stop future notifications, disable &quot;Private Message Notification&quot; in your profile.');
}
?&gt;
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fvar%2Fsoftaculous%2Ffud%2Fdefault'>Back to Directory</a>