X-Git-Url: https://git.harvie.cz/?a=blobdiff_plain;f=inc%2Feventz%2Fsend.inc;h=a3389330b944edcb8cd8917f085c909adef519b4;hb=HEAD;hp=4782b45b52eb5b65a54d0531d7554c5cdf934e4e;hpb=e586807dafc64c3fe152ab518599e6cf3f0f84e1;p=mirrors%2FKyberia-bloodline.git diff --git a/inc/eventz/send.inc b/inc/eventz/send.inc deleted file mode 100644 index 4782b45..0000000 --- a/inc/eventz/send.inc +++ /dev/null @@ -1,78 +0,0 @@ - pyxel: tak fixni sql inject ktory je pri posielani posty konkretne meno uzivatela // - $mail_name=mysql_escape_string($mail_name); - $mail_to=explode(";",$mail_name); - $mail_text=$_POST['mail_text']; - $nohtml=$_POST['nohtml']; - - if (count($mail_to)==1) { - $q="select user_id from users where login='$mail_name'"; - $result=$db->query($q); - $result->next(); - $to=$result->getRecord(); - $mail_to_id[]=$to['user_id']; - } - - elseif (count($mail_to)>1) { - foreach ($mail_to as $mail_to_exploded) { - $q="select user_id from users where login='$mail_to_exploded'"; - $result=$db->query($q); - $result->next(); - $to=$result->getRecord(); - $mail_to_id[]=$to['user_id']; - } - } - - - if (empty($mail_text)) { - global $error; - $error="Prilis kratka sprava. Syr vesela krava, student prava a ci dobra trava?"; - return false; - } - - if ($mail_to_id) { - - $mail_text=nodes::processContent($mail_text); - global $htmlparse; - if ($htmlparse) { - $error=$htmlparse; - return false; - } - foreach ($mail_to_id as $mail_to_id_send) { - $q="insert into mail set mail_user='$user_id',mail_read='no', mail_from='$user_id',mail_text='$mail_text',mail_to='$mail_to_id_send',mail_timestamp=NOW()"; - $result=$db->query($q); - $duplicate_id=$db->getLastInsertId(); - $q="insert into mail set mail_duplicate_id='$duplicate_id', mail_read='no',mail_user='$mail_to_id_send',mail_from='$user_id',mail_text='$mail_text', mail_to='$mail_to_id_send',mail_timestamp=NOW()"; - $result=$db->query($q); - $db->query("update users set user_mail=user_mail+1, user_mail_name='$user_name' where user_id='$mail_to_id_send'"); - } - return true; - - } - - else { - global $error; - $error="user $mail_to does not exist"; - return false; - } - } - - -?>