Ето кода, взел съм го от системата на vescus (Leasy PHP). Пробвал съм го, работи
SQL
Код:
CREATE TABLE `pmessages` (
`title` varchar(255) NOT NULL default 'Untitled Message',
`message` text NOT NULL,
`touser` varchar(255) NOT NULL default '',
`from` varchar(255) NOT NULL default '',
`unread` varchar(255) NOT NULL default 'unread',
`date` date NOT NULL default '0000-00-00',
`id` int(15) NOT NULL auto_increment,
`reply` varchar(15) NOT NULL default 'no',
PRIMARY KEY (`id`)
);
pm.php
Код:
<?php
session_start();
if($_SESSION['username'])
{
?>
<script language="javascript" type="text/javascript">
</script>
<?php
$pmsesusername = $_SESSION['username'];
$db_conn = mysql_connect("localhost", "username", "password")
or die("unable to connect to the database");
mysql_select_db("database", $db_conn) or die("unable to select the database");
$new = mysql_query("select * from pmessages where unread = 'unread' and touser = '$pmsesusername'");
$numbermessages = mysql_num_rows($new);
echo '<p><a href="?page=pm&pms=inbox" class="sub">Кутия: ('.$numbermessages.')</a> <a href="?page=pm&pms=write" class="sub">Ново ЛС</a></p>';
switch($_GET[pms])
{
default:
break;
case 'write':
if (!$_POST[send])
{
echo ("<form method='POST' name='az' style='margin: 0px;'>
<p>До:*</p>
<p><select name='to'>
");
$getusers = mysql_query("SELECT * FROM users ORDER BY 'username' ASC");
while ($users = MySQL_Fetch_Array($getusers)) {
echo ("<p><option value='$users[username]'>$users[username]</option>");
}
echo ("
</select></p>
<p>Тема:*</p>
<p><input type='text' name='subject' size='20'></p>
<p>"); ?>
<a href="javascript:areatext('[b]Text[/b]');"><font face="verdana" color="#666" size="2">[ b ]</font></a>
<a href="javascript:areatext('[i]Text[/i]');"><font face="verdana" color="#666" size="2"><i>[ i ]</i></font></a>
<a href="javascript:areatext('[u]Text[/u]');"><font face="verdana" color="#666" size="2"><u>[ u ]</u></font></a>
<a href="javascript:areatext('[color=]Text[/color]');"><font face="verdana" color="#666" size="2">[ Color ]</font></a>
<a href="javascript:areatext('[size=0]Text[/size]');"><font face="verdana" color="#666" size="2">[ Size ]</font></a>
<a href="javascript:areatext('[img]Address[/img]');"><font face="verdana" color="#666" size="2">[ IMG ]</font></a>
<a href="javascript:areatext('[url=Address]Name[/url]');"><font face="#666" color="#666" size="2">[ URL ]</font></a>
<a href="javascript:areatext('[code]
');"><font face="#666" color="#666" size="2">[ Code ]</font></a>
<p align="center">
<a href="javascript:areatext('

');"><img src="images/smilies/icon_smile.gif" alt="Smile" border="0"></a>
<a href="javascript:areatext('

');"><img src="images/smilies/icon_sad.gif" alt="Sad" border="0"></a>
<a href="javascript:areatext(':arrow:');"><img src="images/smilies/icon_arrow.gif" alt="Arrow" border="0"></a>
<a href="javascript:areatext('

');"><img src="images/smilies/icon_biggrin.gif" alt="Biggrin" border="0"></a>
<a href="javascript:areatext(':?');"><img src="images/smilies/icon_confused.gif" alt="Confused" border="0"></a>
<a href="javascript:areatext('8)');"><img src="images/smilies/icon_cool.gif" alt="Cool" border="0"></a>
<a href="javascript:areatext(';(');"><img src="images/smilies/icon_cry.gif" alt="Cry" border="0"></a>
<a href="javascript:areatext('Shocked');"><img src="images/smilies/icon_eek.gif" alt="Eek" border="0"></a>
<a href="javascript:areatext(':evil:');"><img src="images/smilies/icon_evil.gif" alt="Evil" border="0"></a>
<a href="javascript:areatext('Exclamation');"><img src="images/smilies/icon_exclaim.gif" alt="Exclaim" border="0"></a>
<a href="javascript:areatext('Idea');"><img src="images/smilies/icon_idea.gif" alt="Idea" border="0"></a>
<a href="javascript:areatext('Laughing');"><img src="images/smilies/icon_lol.gif" alt="Lol" border="0"></a>
<a href="javascript:areatext(':x');"><img src="images/smilies/icon_mad.gif" alt="Mad" border="0"></a>
<a href="javascript:areatext('Question');"><img src="images/smilies/icon_question.gif" alt="Question" border="0"></a>
<a href="javascript:areatext('

');"><img src="images/smilies/icon_razz.gif" alt="Razz" border="0"></a>
<a href="javascript:areatext('

');"><img src="images/smilies/icon_redface.gif" alt="Redface" border="0"></a>
<a href="javascript:areatext(':roll:');"><img src="images/smilies/icon_rolleyes.gif" alt="Rolleyes" border="0"></a>
<a href="javascript:areatext('

');"><img src="images/smilies/icon_surprised.gif" alt="Surprised" border="0"></a>
<a href="javascript:areatext(':wink:');"><img src="images/smilies/icon_wink.gif" alt="Wink" border="0"></a>
<?php echo ("</p>
<p>Съобщение:*</p>
<p><textarea rows='7' name='message' cols='35'></textarea></p>
<p><input type='submit' value='Изпрати' name='send'></p>
</form>");
}
if ($_POST[to])
{
$subject = htmlspecialchars(addslashes("$_POST[subject]"));
$message = htmlspecialchars(addslashes("$_POST[message]"));
$to = htmlspecialchars(addslashes("$_POST[to]"));
$send = mysql_query("INSERT INTO `pmessages` ( `title` , `message` ,
`touser` , `from` , `unread` ,
`date` ) VALUES ('$subject', '$message', '$to',
'$pmsesusername', 'unread', NOW())");
echo ('<p>Съобщението беше изпратено успешно.</p></p>');
}
break;
case 'delete':
if (!$_GET[msgid])
{
echo ('<p>Съжалявам, но това е невалидно съобщение!</p>');
}
else
{
$getmsg = mysql_query("SELECT * from pmessages where id = '$_GET[msgid]'");
$msg = mysql_fetch_array($getmsg);
if ($msg[touser] != $pmsesusername)
{
echo ('<p>Това съобщение не беше изпратено към вас!</p>');
}
else
{
$delete = mysql_query("delete from pmessages where id = '$_GET[msgid]'");
echo ('<p>Съобщението беше изтрито успешно</p>');
}
}
break;
case 'inbox':
$get = mysql_query("SELECT * from pmessages where touser = '$pmsesusername' ORDER BY id");
echo ("");
$nummessages = mysql_num_rows($get);
if ($nummessages == 0)
{
echo ('<p>Нямате лични съобщения!</p>');
}
else
{
echo("");
while ($messages = mysql_fetch_array($get))
{
echo ("<p><a href='?page=pm&pms=view&msgid=$messages[id]'>");
if ($messages[reply] == yes)
{
echo ('<p>Отговор от: ');
}
echo ("$messages[title]</a></p>
<p><a href=\"?page=login&ext=viewprofile&user=$messages[from]\">$messages[from]</a></p>
<p>$messages[date]</p>
<p><a href='?page=pm&pms=delete&msgid=$messages[id]'>Изтрий</a></p>
</tr>");
}
echo ('</table>');
}
break;
case 'view':
if (!$_GET[msgid])
{
echo ('<p>Невалидно съобщение!</p>');
}
else
{
$getmsg= mysql_query("SELECT * from pmessages where id = '$_GET[msgid]'");
$msg = mysql_fetch_array($getmsg);
if ($msg[touser] == $pmsesusername)
{
if (!$_POST[message])
{
$markread = mysql_query("Update pmessages set unread = 'read' where id = '$_GET[msgid]'");
$msg[message] = nl2br(stripslashes("$msg[message]"));
echo ("
<form method='POST' style='margin: 0px;'>
<p><b>From:<a href=\"?page=login&ext=viewprofile&user=$msg[from]\">$msg[from]</a></b></p>
<p><b>Тема: $msg[title]</b></p>
<p><b>Съобщение:<u>$msg[message]</u></b></p>
<p><b>Отговори:</b></p>
<p><textarea rows='6' name='message' cols='45'></textarea></p>
<p><input type='submit' value='Изпрати' name='send'></p>
</form>");
}
if ($_POST[message])
{
$message = htmlspecialchars(addslashes("$_POST[message]"));
$do = mysql_query("INSERT INTO `pmessages` ( `title` , `message` , `touser` , `from` , `unread` ,
`date`, `reply`) VALUES
('$msg[title]', '$message', '$msg[from]', '$pmsesusername',
'unread', NOW(), 'yes')");
echo ('<p>Вашето съобщение беше изпратено!</p>');
}
}
}
break;
}
}
else
{
echo '<p>Достъп отказан, моля <a href="?page=login&ext=hlogin">Влезте</a></p>';
}
?>
[/code]