287 lines
11 KiB
PHP
287 lines
11 KiB
PHP
<?php
|
|
|
|
// Pandora - the Free monitoring system
|
|
// ====================================
|
|
// Copyright (c) 2004-2006 Sancho Lerena, slerena@gmail.com
|
|
// Copyright (c) 2005-2006 Artica Soluciones Tecnologicas S.L, info@artica.es
|
|
// Copyright (c) 2004-2006 Raul Mateos Martin, raulofpandora@gmail.com
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU General Public License
|
|
// as published by the Free Software Foundation; either version 2
|
|
// of the License, or (at your option) any later version.
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with this program; if not, write to the Free Software
|
|
// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
// Load global vars
|
|
require("include/config.php");
|
|
|
|
function create_message($usuario_origen, $usuario_destino, $subject, $mensaje){
|
|
$ahora=date("Y/m/d H:i:s");
|
|
require ("include/config.php");
|
|
require ("include/languages/language_".$language_code.".php");
|
|
$sql='
|
|
INSERT INTO tmensajes (id_usuario_origen, id_usuario_destino, subject, mensaje, timestamp)
|
|
VALUES ("'.$usuario_origen.'", "'.$usuario_destino.'", "'.$subject.'", "'.$mensaje.'","'.$ahora.'")';
|
|
$result=mysql_query($sql);
|
|
if ($result) {
|
|
echo "<h3 class='suc'>".$lang_label["message_ok"]."</h3>";
|
|
} else {
|
|
echo "<h3 class='error'>".$lang_label["message_no"]."</h3>";
|
|
}
|
|
}
|
|
|
|
function create_message_g($usuario_origen, $usuario_destino, $subject, $mensaje){
|
|
$ahora=date("Y/m/d H:i:s");
|
|
require ("include/config.php");
|
|
require ("include/languages/language_".$language_code.".php");
|
|
$sql='INSERT INTO tmensajes (id_usuario_origen, id_usuario_destino, subject, mensaje, timestamp) VALUES ("'.$usuario_origen.'", "'.$usuario_destino.'", "'.$subject.'", "'.$mensaje.'","'.$ahora.'")';
|
|
$result=mysql_query($sql);
|
|
if ($result) {
|
|
$error=0;
|
|
} else {
|
|
$error=1;
|
|
}
|
|
return $error;
|
|
}
|
|
|
|
//First Queries
|
|
$iduser=$_SESSION['id_usuario'];
|
|
|
|
$sql2='SELECT COUNT(*) FROM tmensajes WHERE id_usuario_destino="'.$iduser.'" AND estado="FALSE";';
|
|
$resultado2=mysql_query($sql2);
|
|
$row2=mysql_fetch_array($resultado2);
|
|
$sql3='SELECT * FROM tgrupo';
|
|
$resultado3=mysql_query($sql3);
|
|
|
|
if (isset($_GET["nuevo_mensaje"])){
|
|
// Create message
|
|
$usuario_destino = give_parameter_post ("u_destino");
|
|
$subject = give_parameter_post ("subject");
|
|
$mensaje = give_parameter_post ("mensaje");
|
|
create_message($iduser, $usuario_destino, $subject, $mensaje);
|
|
}
|
|
|
|
if (isset($_GET["nuevo_mensaje_g"])){
|
|
// Create message to groups
|
|
$grupo_destino = give_parameter_post ("g_destino");
|
|
$subject = give_parameter_post ("subject");
|
|
$mensaje = give_parameter_post ("mensaje");
|
|
$sql= 'SELECT id_usuario FROM tusuario_perfil WHERE id_grupo ='. $grupo_destino;
|
|
$result = mysql_query($sql);
|
|
|
|
if (mysql_fetch_row($result)){
|
|
while ($row=mysql_fetch_array($result)){
|
|
$error=create_message_g($iduser, $row["id_usuario"], $subject, $mensaje);
|
|
}
|
|
if ($error==0)
|
|
echo "<h3 class='suc'>".$lang_label["message_ok"]."</h3>";
|
|
else
|
|
echo "<h3 class='error'>".$lang_label["message_no"]."</h3>";
|
|
} else {
|
|
echo "<h3 class='error'>".$lang_label["message_no"]."</h3>";
|
|
}
|
|
}
|
|
echo "<h2>".$lang_label["messages"]." > ";
|
|
|
|
if (isset($_GET["nuevo"]) || isset($_GET["nuevo_g"])){
|
|
if (isset($_GET["nuevo"])){ //create message
|
|
echo $lang_label["new_message"].'</h2>';
|
|
echo '
|
|
<form name="new_mes" method="POST" action="index.php?sec=messages&sec2=operation/messages/message&nuevo_mensaje=1">
|
|
<table width=600 class="databox_color" cellpadding=4 cellspacing=4>
|
|
<tr>
|
|
<td class="datos">'.$lang_label["m_from"].':</td>
|
|
<td class="datos"><b>'.$iduser.'</b></td></tr>
|
|
<tr>
|
|
<td class="datos2">'.$lang_label["m_to"].':</td>
|
|
<td class="datos2">';
|
|
if (isset($_POST["u_destino"])) {
|
|
echo '<b>'.$_POST["u_destino"].'</b>
|
|
<input type="hidden" name="u_destino" value='.$_POST["u_destino"].'>';
|
|
} else {
|
|
echo '<select name="u_destino" width="120">';
|
|
|
|
$sql_1="SELECT * FROM tusuario_perfil WHERE id_usuario = '$iduser'";
|
|
$result_1=mysql_query($sql_1);
|
|
while ($row_1=mysql_fetch_array($result_1)){
|
|
$sql_2="SELECT * FROM tusuario_perfil WHERE id_grupo = ".$row_1["id_grupo"];
|
|
$result_2=mysql_query($sql_2);
|
|
while ($row_2=mysql_fetch_array($result_2)){
|
|
if (give_acl($row_2["id_usuario"], $row_2["id_grupo"], "IR")==1)
|
|
echo "<option value='".$row_2["id_usuario"]."'>".$row_2["id_usuario"]."</option>";
|
|
}
|
|
}
|
|
echo '</select>';
|
|
}
|
|
echo '</td></tr>
|
|
<tr><td class="datos">'.$lang_label["subject"].':</td>
|
|
<td class="datos">';
|
|
if (isset($_POST["subject"]))
|
|
echo '</b><input name="subject" value="'.$_POST["subject"].'" size=70>';
|
|
else
|
|
echo '<input name="subject" size=60>';
|
|
echo '</td></tr>
|
|
<tr>
|
|
<td class="datos2">'.$lang_label["message"].':</td>
|
|
<td class="datos2"><textarea name="mensaje" rows="15" cols=70 >';
|
|
if (isset($_POST["mensaje"])) {
|
|
echo $_POST["mensaje"];
|
|
}
|
|
echo '</textarea></td>
|
|
</tr></table>
|
|
<table width=600 cellspacing=4 cellpadding=4><tr><td align=right>
|
|
<input type="submit" class="sub wand" name="send_mes" value="'.$lang_label["send_mes"].'"></form></td></tr></table>';
|
|
}
|
|
|
|
if (isset($_GET["nuevo_g"])){
|
|
echo $lang_label["new_message_g"].'</h2>';
|
|
echo '
|
|
<form name="new_mes" method="post" action="index.php?sec=messages&sec2=operation/messages/message&nuevo_mensaje_g=1">
|
|
<table width=600 class="databox_color" cellpadding=4 cellspacing=4>
|
|
<tr>
|
|
<td class="datos">'.$lang_label["m_from"].':</td>
|
|
<td class="datos"><b>'.$iduser.'</b></td>
|
|
</tr>
|
|
<tr>
|
|
<td class="datos2">'.$lang_label["m_to"].':</td>
|
|
<td class="datos2">';
|
|
echo '<select name="g_destino" class="w130">';
|
|
|
|
$sql_1="SELECT id_grupo FROM tusuario_perfil WHERE id_usuario = '$iduser'";
|
|
$result_1=mysql_query($sql_1);
|
|
while ($row_1=mysql_fetch_array($result_1)){
|
|
echo "<option value=".$row_1["id_grupo"].">".dame_nombre_grupo($row_1["id_grupo"])."</option>";
|
|
|
|
}
|
|
echo '</select>';
|
|
echo '</td></tr>
|
|
<tr><td class="datos">'.$lang_label["subject"].':</td><td class="datos"><input name="subject" size=60></td></tr>
|
|
<tr>
|
|
<td class="datos2">'.$lang_label["message"].':</td>
|
|
<td class="datos"><textarea name="mensaje" rows="12" cols=60></textarea></td>
|
|
</tr>
|
|
</table>
|
|
<table width=600 cellspacing=4 cellpadding=4><tr><td align=right>
|
|
<input type="submit" class="sub wand" name="send_mes" value="'.$lang_label["send_mes"].'"></form>
|
|
</td></tr></table>';
|
|
}
|
|
} else {
|
|
|
|
echo $lang_label["read_mes"]."</h2>";
|
|
// Get list of messages for this user
|
|
if (isset($_GET["borrar"])){
|
|
$id_mensaje = $_GET["id_mensaje"];
|
|
$sql5='DELETE FROM tmensajes WHERE id_usuario_destino="'.$iduser.'" AND id_mensaje="'.$id_mensaje.'"';
|
|
$resultado5=mysql_query($sql5);
|
|
if ($resultado5) {
|
|
echo "<h3 class='suc'>".$lang_label["del_message_ok"]."</h3>";
|
|
} else {
|
|
echo "<h3 class='error'>".$lang_label["del_message_no"]."</h3>";
|
|
}
|
|
}
|
|
if ($row2["COUNT(*)"]!=0){
|
|
echo "<p>";
|
|
echo $lang_label["new_message_bra"]."<b> ".$row2["COUNT(*)"]."</b> <img src='images/email.png'>".$lang_label["new_message_ket"]."</p>";
|
|
}
|
|
$sql3='SELECT * FROM tmensajes WHERE id_usuario_destino="'.$iduser.'" ORDER BY timestamp desc';
|
|
$resultado3=mysql_query($sql3);
|
|
$color=1;
|
|
if (mysql_num_rows($resultado3)) {
|
|
echo "<table width=650 class='databox' cellpadding=4 cellspacing=4><tr>
|
|
<th>".$lang_label["read"]."</th>
|
|
<th>".$lang_label["sender"]."</th>
|
|
<th>".$lang_label["subject"]."</th>
|
|
<th>".$lang_label["timestamp"]."</th>
|
|
<th>".$lang_label["delete"]."</th>
|
|
</tr>";
|
|
while ($row3=mysql_fetch_array($resultado3)){
|
|
if ($color == 1){
|
|
$tdcolor = "datos";
|
|
$color = 0;
|
|
}
|
|
else {
|
|
$tdcolor = "datos2";
|
|
$color = 1;
|
|
}
|
|
echo "<tr>";
|
|
echo "<td align='center' class='$tdcolor'>";
|
|
if ($row3["estado"]==1)
|
|
echo "<img src='images/email_open.png' border=0>";
|
|
else
|
|
echo "<img src='images/email.png' border=0>";
|
|
echo "</td>";
|
|
echo "<td class='$tdcolor'>";
|
|
echo "<a href=index.php?sec=usuarios&sec2=operation/users/user_edit&ver=".$row3["id_usuario_origen"].">".$row3["id_usuario_origen"]."</td><td class='".$tdcolor."'><a href='index.php?sec=messages&sec2=operation/messages/message&leer=1&id_mensaje=".$row3["id_mensaje"]."'><b>";
|
|
|
|
if ($row3["subject"])
|
|
echo $row3["subject"];
|
|
else
|
|
echo $lang_label["no_subject"];
|
|
|
|
echo "</b></a></td>
|
|
<td class='".$tdcolor."'>".$row3["timestamp"]."</td>";
|
|
echo "<td class='$tdcolor' align='center'><a href='index.php?sec=messages&sec2=operation/messages/message&borrar=1&id_mensaje=".$row3["id_mensaje"]."'><img src='images/cross.png' border='0'></a></td></tr>";
|
|
}
|
|
echo "</table>";
|
|
} else {
|
|
echo "<div class='nf'>".$lang_label["no_messages"]."</div>"; //no messages
|
|
}
|
|
|
|
// Read message
|
|
if (isset($_GET["leer"])){
|
|
$id_mensaje = $_GET["id_mensaje"];
|
|
$sql4='SELECT * FROM tmensajes WHERE id_usuario_destino="'.$iduser.'" AND id_mensaje="'.$id_mensaje.'"';
|
|
$sql41='UPDATE tmensajes SET estado="1" WHERE id_mensaje="'.$id_mensaje.'"';
|
|
$resultado4=mysql_query($sql4);
|
|
$row4=mysql_fetch_array($resultado4);
|
|
$resultado41=mysql_query($sql41);
|
|
echo '<table class="databox_color" width=650 cellpadding=4 cellspacing=4>';
|
|
echo '<form method="post" name="reply_mes" action="index.php?sec=messages&sec2=operation/messages/message&nuevo">';
|
|
echo '<tr>
|
|
<td class="datos">'.$lang_label["from"].':</td>
|
|
<td class="datos"><b>'.$row4["id_usuario_origen"].'</b></td>
|
|
</tr>';
|
|
// Subject
|
|
echo '<tr>
|
|
<td class="datos2">'.$lang_label["subject"].':</td>
|
|
<td class="datos2" valign="top"><b>'.$row4["subject"].'</b></td>
|
|
</tr>';
|
|
// text
|
|
echo '<tr><td class="datos" valign="top">'.$lang_label["message"].':</td>
|
|
<td class="datos"><textarea name="mensaje" rows="15" cols=70 readonly>'.$row4["mensaje"].'</textarea></td></tr>
|
|
</table>
|
|
<input type="hidden" name="u_destino" value="'.$row4["id_usuario_origen"].'">
|
|
<input type="hidden" name="subject" value="Re: '.$row4["subject"].'">
|
|
<input type="hidden" name="mensaje" value="'.$row4["id_usuario_origen"].$lang_label["wrote"].': '.$row4["mensaje"].'">';
|
|
echo '<table width=650 cellpadding=4 cellspacing=4>';
|
|
echo "<tr><td align=right>";
|
|
echo '<input type="submit" class="sub next" name="send_mes" value="'.$lang_label["reply"].'">';
|
|
echo '</form>';
|
|
echo "</td></tr></table>";
|
|
} else {
|
|
echo '</table>';
|
|
echo '<table width=650 cellpadding=4 cellspacing=4>
|
|
<tr>';
|
|
if (mysql_num_rows($resultado3)) {
|
|
echo '<td align="right">';
|
|
} else {
|
|
echo '<td>';
|
|
}
|
|
echo '
|
|
<form method="post" name="new_mes" action="index.php?sec=messages&sec2=operation/messages/message&nuevo">
|
|
<input type="submit" class="sub next" name="send_mes" value="'.$lang_label["new_message"].'"></form>
|
|
</td></tr></table>';
|
|
}
|
|
if (mysql_num_rows($resultado3)) {
|
|
echo "";
|
|
echo "<span class='rmess'>".$lang_label["message_read"]."</span>";
|
|
echo "<span class='nrmess'>".$lang_label["message_not_read"]."</span>";
|
|
}
|
|
}
|
|
|
|
?>
|