Просмотр файла user/private/manage.php

<?php

/*********************************************************************/
#---------------------------KokirCMS Соц сети-------------------------#
#---------------------Kiriyan и kokir Сайт kiriyan.org----------------#
#-------------------------------2012 г.-------------------------------#
#------------------Связь ICQ 455002004. [email protected]#
#----------------------------Пример ewwap.ru--------------------------#
/*********************************************************************/

require('../../inc/head.php');

if(empty($_GET['id']) || !ctype_digit($_GET['id']))
  header("Location: index.php");
$id = $_GET['id'];

switch($mode)
{
  case 'delete':
    $path = 'index.php';
    if($httpReferer)
        $path = $httpReferer;

    $post = mysql_fetch_array(mysql_query("SELECT * FROM `mail` WHERE `id` = $id;"));

    if($post['from'] == $user['id'] || $post['to'] == $user['id'])
        mysql_query("DELETE FROM `mail` WHERE `id` = $id;");
    header("Location: $path");
  break;

/*********************************************************************/

  default:
    if(isset($_GET['accept']))
    {
        mysql_query("DELETE FROM `mail` WHERE `from` IN(" . $user['id'] . ", " . $id . ") AND `to` IN(" . $user['id'] . ", " . $id . ");");
        header("Location: dialog.php?u={$id}");
    }

    echo '<div class="menu adm">';
    echo 'Вы уверены, что хотите удалить переписку?<br/>';
    echo '<a href="?id=' . $id . '&amp;accept">Да</a> | <a href="dialog.php?u=' . $id . '">Нет</a>';
    echo '</div>';
}

require('../../inc/end.php');

?>