Файл: wenr.online/app/mail/send.php
Строк: 34
<?php
if (!$user->isAuth() or empty($user->get()->email)) {
redirect('/save');
exit;
}
$smile = $db->prepare('select * from smile order by id desc');
$smile -> execute();
$smile = $smile ->fetchAll();
if(!isset($user->get($_GET['id'])->user_id) or $_GET['id'] == $user->get()->user_id){
redirect('/mail');
exit;
}
$view = $db->prepare("UPDATE `mail` SET `read` = ? WHERE `kont` = ?");
$view -> execute([1,$user->get()->user_id]);
$read = $db->prepare("UPDATE `kont` SET `new_msg` = ? WHERE `id_kont` = ? and `id_user` = ?");
$read -> execute([0,$user->get($_GET['id'])->user_id,$user->get()->user_id]);
if(isset($_POST['msg'])){
if(empty($_POST['msg'])){
redirect('/mail');
exit;
}
if($user->get()->lvl < 3){
redirect('/mail');
exit;
}
$msg = Clean :: text($_POST['msg']);
$sql = $db->prepare("INSERT INTO `mail` (`user`,`kont`,`read`,`msg`,`time`) VALUES (?,?,?,?,?)");
$sql->execute([$user->get()->user_id,$user->get($_GET['id'])->user_id,0,$msg,time()]);
$add_k = $db->prepare("INSERT INTO `kont` (`id_user`, `id_kont`, `time`) VALUES (?,?,?)");
$add_k -> execute([$user->get()->user_id,$user->get($_GET['id'])->user_id,time()]);
$add_u = $db->prepare("INSERT INTO `kont` (`id_user`, `id_kont`, `time`) VALUES (?,?,?)");
$add_k -> execute([$user->get($_GET['id'])->user_id,$user->get()->user_id,time()]);
$new = $db->prepare("UPDATE `kont` SET `new_msg` = `new_msg` + ?,`time` = ? WHERE `id_kont` = ? and `id_user` = ?");
$new -> execute([1,time(),$user->get()->user_id,$user->get($_GET['id'])->user_id]);
$new2 = $db->prepare("UPDATE `kont` SET `time` = ? WHERE `id_kont` = ? and `id_user` = ?");
$new2 -> execute([time(),$user->get($_GET['id'])->user_id,$user->get()->user_id]);
redirect('/mail/send?id='.$user->get($_GET['id'])->user_id);
exit;
}
$all = $db->prepare('select * from `mail` where `user` = ? and `kont` = ? or `user` = ? and `kont` = ? order by `time` desc');
$all -> execute([$user->get()->user_id,
$user->get($_GET['id'])->user_id,
$user->get($_GET['id'])->user_id,
$user->get()->user_id
]);
$all = $all->fetchAll();
$peger = new ArrayPaginator('/mail/send?id='.$_GET['id'], 15);
$items = $peger->getItems($all);
echo $template->render('mail.send',
['all' => $items,
'peger' => $peger,
'smile' => $smile
]
);