Просмотр файла action.php

<?php
include 'sys/db.php';
include 'sys/conf.php';
include 'sys/start.php';
include 'sys/functions.php';
if(isset($_POST['addmsg'])){
	$id=intval($_POST['id']);
	$msg=strip($_POST['msg']);
	$query_send=mysql_query("SELECT id FROM `users` WHERE id = '$user[id]' LIMIT 1;")or die(mysql_error());
	if(mysql_num_rows($query_send)==0){
		header("location: mail.php?&re=nouser");
		exit;
	}elseif(strlen($msg)<2 && strlen($msg)<4048){
		header("location: mail.php?add=".$uid."&re=ermsg");
		exit;
	}else{
		$rec_id=intval(mysql_result($query_send,0,0));
		if($id==$rec_id){
			header("location: mail.php?add=".$uid."&re=selfmsg");
			exit;
		}else{
			mysql_query("INSERT INTO `mail` (send, rec, msg, time) VALUES('$id','$user[id]','$msg','".time()."') ;")or die(mysql_error());
			header("location: mail.php?re=send_ok");
			exit;
		};
	};
}elseif(isset($_GET['delsend']) && intval($_GET['delsend'])>0){
	$mid=intval($_GET['delsend']);
	$rand=intval($_GET['r']);
	if(mysql_result(mysql_query("SELECT COUNT(*) FROM `mail` WHERE rec = '$user[id]' AND id = '$mid' AND outbox = '1';"),0)==0){
		unset($_SESSION['rand']);
		header("location: mail.php?send&re=404");
		exit;
	}elseif(!isset($rand) || $rand!=$_SESSION['rand']){
		unset($_SESSION['rand']);
		header("location: mail.php?send&re=vzlom");
		exit;
	}else{
		unset($_SESSION['rand']);
		mysql_query("UPDATE `mail` SET outbox = '0' WHERE id = '$mid' LIMIT 1;")or die(mysql_error());
		mysql_query("DELETE FROM `mail` WHERE inbox = '0' AND outbox = '0';")or die(mysql_error());
		header("location: mail.php?send&re=del_ok");
		exit;
	};
}elseif(isset($_GET['delallsend'])){
	$rand=intval($_GET['r']);
	if(!isset($rand) || $rand!=$_SESSION['rand']){
		unset($_SESSION['rand']);
		header("location: mail.php?send&re=vzlom");
		exit;
	}else{
		unset($_SESSION['rand']);
		mysql_query("UPDATE `mail` SET outbox = '0' WHERE send = '$id';")or die(mysql_error());
		mysql_query("DELETE FROM `mail` WHERE inbox = '0' AND outbox = '0';")or die(mysql_error());
		header("location: mail.php?send&re=del_ok");
		exit;
	};
}elseif(isset($_GET['delrec']) && intval($_GET['delrec'])>0){
	$mid=intval($_GET['delrec']);
	$rand=intval($_GET['r']);
	if(mysql_result(mysql_query("SELECT COUNT(*) FROM `mail` WHERE send = '$user[id]' AND id = '$mid' AND inbox = '1';"),0)==0){
		unset($_SESSION['rand']);
		header("location: mail.php?re=404");
		exit;
	}elseif(!isset($rand) || $rand!=$_SESSION['rand']){
		unset($_SESSION['rand']);
		header("location: mail.php?re=vzlom");
		exit;
	}else{
		unset($_SESSION['rand']);
		mysql_query("UPDATE `mail` SET inbox = '0' WHERE id = '$mid' LIMIT 1;")or die(mysql_error());
		mysql_query("DELETE FROM `mail` WHERE inbox = '0' AND outbox = '0';")or die(mysql_error());
		header("location: mail.php?re=del_ok");
		exit;
	};
}elseif(isset($_GET['delallrec'])){
	$rand=intval($_GET['r']);
	if(!isset($rand) || $rand!=$_SESSION['rand']){
		unset($_SESSION['rand']);
		header("location: mail.php?re=vzlom");
		exit;
	}else{
		unset($_SESSION['rand']);
		mysql_query("UPDATE `mail` SET inbox = '0' WHERE rec = '$id';")or die(mysql_error());
		mysql_query("DELETE FROM `mail` WHERE inbox = '0' AND outbox = '0';")or die(mysql_error());
		header("location: mail.php?re=del_ok");
		exit;
	};
}
?>