Файл: modules/mail/delete_history.php
Строк: 53
<?php
/**
* Licensed under The MIT License
* For full copyright and license information, please see the LICENSE.txt
* Redistributions of files must retain the above copyright notice.
*
* @copyright Copyright (c) 2013, Taras Chornyi, Sergiy Mazurenko, Ivan Kotliar
* @link http://perf-engine.net
* @package PerfEngine
* @license http://www.opensource.org/licenses/mit-license.php MIT License
*/
$mail_chat = $db->query("SELECT * FROM `mail_chat` WHERE `id` = '".abs(intval($_GET['id']))."'")->fetch();
$counter = $db->query("SELECT * FROM `mail` WHERE `mail_chat_id` = '".abs(intval($_GET['id']))."' AND `del` != '".$user['id']."'")->rowCount();
$delete = $db->query("SELECT * FROM `mail_chat` WHERE `id` = '".abs(intval($_GET['id']))."'")->fetch();
if(!isset($_GET['id']) || $db->query("SELECT * FROM `mail_chat` WHERE `id` = '".abs(intval($_GET['id']))."'")->rowCount() == 0 || $counter == 0 || $mail_chat['user_id'] != $user['id'] && $mail_chat['who_id'] != $user['id'])
{
redirect('/');
}
$locate = 'in_cabinet';
if(isset($_POST['yes'])) {
$db->query("DELETE FROM `mail` WHERE `mail_chat_id` = '".abs(intval($_GET['id']))."' AND `del` = '".($mail_chat['user_id'] == $user['id'] ? ''.$mail_chat['who_id'].'': ''.$mail_chat['user_id'].'')."'");
$db->query("UPDATE `mail` SET `del` = '".$user['id'] . "' WHERE `mail_chat_id` = '".abs(intval($_GET['id']))."'");
redirect('/mail/chat/'.($mail_chat['user_id'] == $user['id'] ? $mail_chat['who_id']: $mail_chat['user_id']).'/');
} elseif(isset($_POST['no'])) {
redirect('/mail/chat/'.($mail_chat['user_id'] == $user['id'] ? $mail_chat['who_id']: $mail_chat['user_id']).'/');
}
$title = _t('delete_history');
include_header($title);
Template::div('title', $title);
echo '<form action="" method="post">
<div class="menu">
'._t('only_mess').': <b>'.$counter.'</b><br/>
<b>'. _t('r_sure') .'</b><br/>
<input name="yes" type="submit" value="'. _t('yyes') .'" /> <input name="no" type="submit" value="'. _t('yno') .'" /><br/>
</div>
</form>';
Template::div('block', img('mail.png') .'<a href="/mail/">'._t('u_mail').'</a><br/>'
. NAV .'<a href="/mail/chat/'.($delete['user_id'] == $user['id'] ? ''.$delete['who_id'].'': ''.$delete['user_id'].'').'/">'._t('back_mail').'</a><br/>'
. NAV .'<a href="/user/panel/">'._t('user_panel').'</a><br/>'
. HICO .'<a href="/">'. _t('home').'</a>');
include_footer();
?>