> WHERE recipientid='".$userrow["id"]."' ORDER BY postdate DESC"), "id"); $row["messages"] = "\n"; if ($messages == false) { $row["messages"] .= ""; } else { foreach($messages as $a=>$b) { if ($b["status"] == 0) { $b["new"] = "*"; } else { $b["new"] = ""; } if ($b["gold"] != 0) { $b["money"] = "\$"; } else { $b["money"] = ""; } $row["messages"] .= parsetemplate(gettemplate("mailbox_listrow"), $b); } } $row["messages"] .= "

You do not have any messages.

\n"; display("Post Office", parsetemplate(gettemplate("mailbox_list"), $row)); } function outbox() { global $userrow; $messages = dorow(doquery("SELECT *, DATE_FORMAT(postdate, '%m.%d.%Y ~ %H:%i') AS fpostdate FROM <> WHERE senderid='".$userrow["id"]."' ORDER BY postdate DESC"), "id"); $row["messages"] = "\n"; if ($messages == false) { $row["messages"] .= ""; } else { foreach($messages as $a=>$b) { $row["messages"] .= parsetemplate(gettemplate("mailbox_listoutrow"), $b); } } $row["messages"] .= "

You do not have any sent messages.

\n"; display("Post Office", parsetemplate(gettemplate("mailbox_listout"), $row)); } function letter() { global $userrow; if (!is_numeric($_GET["id"])) { err("Invalid action. Please go back and try again."); } $message = dorow(doquery("SELECT *, DATE_FORMAT(postdate, '%m.%d.%Y ~ %H:%i') AS fpostdate FROM <> WHERE id='".$_GET["id"]."' LIMIT 1")); if ($message == false) { err("Invalid action. Please go back and try again."); } if ($message["recipientid"] != $userrow["id"]) { err("Invalid action. Please go back and try again."); } // Handle money transfers. $message["moneytransfer"] = ""; if ($message["gold"] != 0) { $userrow["gold"] += $message["gold"]; $message["moneytransfer"] = "You have received ".$message["gold"]." Gold with this message.
"; updateuserrow(); } // Reset status to old, and gold to zero, so they can't keep reading the message to get more money. if ($message["status"] == 0) { $statusquery = doquery("UPDATE <> SET status='1', gold='0' WHERE id='".$_GET["id"]."' LIMIT 1"); } // Pull the sender's userrow so we can show avatars. $sender = dorow(doquery("SELECT * FROM <> WHERE id='".$message["senderid"]."' LIMIT 1")); if ($sender["charpicture"] != "") { $message["senderavatar"] = ""; } else { $message["senderavatar"] = ""; } $message["message"] = nl2br($message["message"]); display("Post Office", parsetemplate(gettemplate("mailbox_letter"), $message)); } function letterout() { global $userrow; if (!is_numeric($_GET["id"])) { err("Invalid action. Please go back and try again."); } $message = dorow(doquery("SELECT *, DATE_FORMAT(postdate, '%m.%d.%Y ~ %H:%i') AS fpostdate FROM <> WHERE id='".$_GET["id"]."' LIMIT 1")); if ($message == false) { err("Invalid action. Please go back and try again."); } if ($message["senderid"] != $userrow["id"]) { err("Invalid action. Please go back and try again."); } $message["message"] = nl2br($message["message"]); display("Post Office", parsetemplate(gettemplate("mailbox_letterout"), $message)); } function mailnew() { global $userrow; if (isset($_POST["submit"])) { // Check for errors. extract($_POST); $errors = 0; $errorlist = ""; if ($userrow["gold"] < 5) { $errors++; $errorlist .= "You do not have enough gold to cover the postage fee.
"; } $checkuser = dorow(doquery("SELECT * FROM <> WHERE charname='$recipient' LIMIT 1")); if ($checkuser == false) { $errors++; $errorlist .= "There is no player with that Character Name.
"; } if (trim($gold) != "") { if (!is_numeric($gold)) { $errors++; $errorlist .= "The Send Gold field must be a number.
"; } if ($gold < 1) { $errors++; $errorlist .= "Money Transfer amount must be greater than 0.
"; } if ($userrow["gold"] < $gold + 5) { $errors++; $errorlist .= "You don't have that much gold to send.
"; } if ($userrow["account"] == $checkuser["account"] && $gold >= ($userrow["gold"] / 10)) { $errors++; $errorlist .= "You are only allowed to send up to 10% of your gold to another character on your account.
"; } } if ($recipient == $userrow["charname"]) { $errors++; $errorlist .= "You cannot send a message to yourself. That would be a waste of 5 gold, dummy!"; } if (trim($title) == "") { $errors++; $errorlist .= "You must enter a Subject.
"; } if ($errors == 0) { // Subtract gold. $userrow["gold"] -= 5; if (trim($gold) != "") { $userrow["gold"] -= $gold; } updateuserrow(); // And send the message. $send = doquery("INSERT INTO <> SET id='', postdate=NOW(), senderid='".$userrow["id"]."', sendername='".$userrow["charname"]."', recipientid='".$checkuser["id"]."', recipientname='$recipient', status='0', title='$title', message='$message', gold='$gold'"); display("Post Office", gettemplate("mailbox_sent")); } else { // Die gracefully on errors. err("The following error(s) occurred when trying to send your letter:
$errorlist
Please go back and try again."); } } display("Post Office", gettemplate("mailbox_new")); } function mailreply() { global $userrow; if (!is_numeric($_GET["id"])) { err("Invalid action. Please go back and try again."); } $origmessage = dorow(doquery("SELECT *, DATE_FORMAT(postdate, '%m.%d.%Y ~ %H:%i') AS fpostdate FROM <> WHERE id='".$_GET["id"]."' LIMIT 1")); if ($origmessage == false) { err("Invalid action. Please go back and try again."); } if ($origmessage["recipientid"] != $userrow["id"]) { err("Invalid action. Please go back and try again."); } if (isset($_POST["submit"])) { // Check for errors. extract($_POST); $errors = 0; $errorlist = ""; if ($userrow["gold"] < 5) { $errors++; $errorlist .= "You do not have enough gold to cover the postage fee.
"; } $checkuser = dorow(doquery("SELECT * FROM <> WHERE charname='".$origmessage["sendername"]."' LIMIT 1")); if ($checkuser == false) { $errors++; $errorlist .= "There is no player with that Character Name.
"; } if (trim($gold) != "") { if (!is_numeric($gold)) { $errors++; $errorlist .= "The Send Gold field must be a number.
"; } if ($gold < 1) { $errors++; $errorlist .= "Money Transfer amount must be greater than 0.
"; } if ($userrow["gold"] < $gold + 5) { $errors++; $errorlist .= "You don't have that much gold to send.
"; } if ($userrow["account"] == $checkuser["account"] && $gold >= ($userrow["gold"] / 10)) { $errors++; $errorlist .= "You are only allowed to send up to 10% of your gold to another character on your account.
"; } } if (trim($title) == "") { $errors++; $errorlist .= "You must enter a Subject.
"; } if ($errors == 0) { // Subtract gold. $userrow["gold"] -= 5; if (trim($gold) != "") { $userrow["gold"] -= $gold; } updateuserrow(); // And send the message. $send = doquery("INSERT INTO <> SET id='', postdate=NOW(), senderid='".$userrow["id"]."', sendername='".$userrow["charname"]."', recipientid='".$origmessage["senderid"]."', recipientname='".$origmessage["sendername"]."', status='0', title='$title', message='$message', gold='$gold'"); display("Post Office", gettemplate("mailbox_sent")); } else { // Die gracefully on errors. err("The following error(s) occurred when trying to send your letter:
$errorlist
Please go back and try again."); } } $origmessage["message"] = nl2br($origmessage["message"]); display("Post Office", parsetemplate(gettemplate("mailbox_reply"), $origmessage)); } function maildelete() { global $userrow; if (!is_numeric($_GET["id"])) { err("Invalid action. Please go back and try again."); } $message = dorow(doquery("SELECT *, DATE_FORMAT(postdate, '%m.%d.%Y ~ %H:%i') AS fpostdate FROM <> WHERE id='".$_GET["id"]."' LIMIT 1")); if ($message == false) { err("Invalid action. Please go back and try again."); } if ($message["recipientid"] != $userrow["id"]) { err("Invalid action. Please go back and try again."); } $delete = doquery("DELETE FROM <> WHERE id='".$_GET["id"]."'"); die(header("Location: index.php?do=mailbox")); } ?>