3274b4708d08c7fe0fe1601d39cf5c8252b474fe
[atutor.git] / docs / inbox / sent_messages.php
1 <?php
2 /****************************************************************/
3 /* ATutor                                                                                                               */
4 /****************************************************************/
5 /* Copyright (c) 2002-2010                                      */
6 /* Inclusive Design Institute                                   */
7 /* http://atutor.ca                                                                                             */
8 /*                                                              */
9 /* This program is free software. You can redistribute it and/or*/
10 /* modify it under the terms of the GNU General Public License  */
11 /* as published by the Free Software Foundation.                                */
12 /****************************************************************/
13 // $Id$
14 $_user_location = 'public';
15
16 define('AT_INCLUDE_PATH', '../include/');
17 require (AT_INCLUDE_PATH.'vitals.inc.php');
18
19 if (!$_SESSION['valid_user']) {
20         require(AT_INCLUDE_PATH.'header.inc.php');
21         $msg->printInfos('INVALID_USER');
22         require(AT_INCLUDE_PATH.'footer.inc.php');
23         exit;
24 }
25
26 $_GET['view'] = intval($_GET['view']);
27
28 if ($_GET['delete']) {
29         $_GET['delete'] = intval($_GET['delete']);
30
31         if($result = mysql_query("DELETE FROM ".TABLE_PREFIX."messages_sent WHERE from_member_id=$_SESSION[member_id] AND message_id=$_GET[delete]",$db)){
32                 $msg->addFeedback('ACTION_COMPLETED_SUCCESSFULLY');
33         }
34
35         header('Location: '.$_SERVER['PHP_SELF']);
36         exit;
37 } else if (isset($_POST['submit_yes'], $_POST['ids'])) {
38         $ids = $addslashes($_POST['ids']);
39
40         $sql = "DELETE FROM ".TABLE_PREFIX."messages_sent WHERE from_member_id=$_SESSION[member_id] AND message_id IN ($ids)";
41         mysql_query($sql, $db);
42
43         $msg->addFeedback('ACTION_COMPLETED_SUCCESSFULLY');
44
45         header('Location: '.$_SERVER['PHP_SELF']);
46         exit;
47 } else if (isset($_POST['submit_no'])) {
48         $msg->addFeedback('CANCELLED');
49
50         header('Location: '.$_SERVER['PHP_SELF']);
51         exit;
52 } else if (isset($_POST['move'], $_POST['id'])) {
53         $_POST['id'][] = 0; // to make it non-empty
54         $_POST['id'] = implode(',', $_POST['id']);
55         $ids = $addslashes($_POST['id']);
56
57         $sql = "INSERT INTO ".TABLE_PREFIX."messages SELECT 0, course_id, from_member_id, {$_SESSION['member_id']}, date_sent, 0, 0, subject, body FROM ".TABLE_PREFIX."messages_sent WHERE from_member_id=$_SESSION[member_id] AND message_id IN ($ids)";
58         mysql_query($sql, $db);
59
60         $sql = "DELETE FROM ".TABLE_PREFIX."messages_sent WHERE from_member_id=$_SESSION[member_id] AND message_id IN ($ids)";
61         mysql_query($sql, $db);
62
63         $msg->addFeedback('ACTION_COMPLETED_SUCCESSFULLY');
64
65         header('Location: '.$_SERVER['PHP_SELF']);
66         exit;
67 } else if ((isset($_POST['delete']) || isset($_POST['move'])) && !isset($_POST['id'])) {
68         $msg->addError('NO_ITEM_SELECTED');
69         header('Location: '.$_SERVER['PHP_SELF']);
70         exit;
71 }
72
73 require(AT_INCLUDE_PATH.'header.inc.php');
74
75 if (isset($_GET['view']) && $_GET['view']) {
76         $sql    = "SELECT * FROM ".TABLE_PREFIX."messages_sent WHERE message_id=$_GET[view] AND from_member_id=$_SESSION[member_id]";
77         $result = mysql_query($sql, $db);
78
79 } else if (isset($_POST['delete'], $_POST['id'])) {
80         $hidden_vars['ids'] = implode(',', $_POST['id']);
81
82         $msg->addConfirm('DELETE_MSGS', $hidden_vars);
83         $msg->printConfirm();
84 }
85
86 $msg->printInfos(array('INBOX_SENT_MSGS_TTL', $_config['sent_msgs_ttl']));
87
88 $sql    = "SELECT * FROM ".TABLE_PREFIX."messages_sent WHERE from_member_id=$_SESSION[member_id] ORDER BY date_sent DESC";
89 $result = mysql_query($sql,$db);
90
91 $savant->assign('result', $result);
92 $savant->assign('result_messages', $result_messages);
93 $savant->display('inbox/sent_messages.tmpl.php');
94 require(AT_INCLUDE_PATH.'footer.inc.php'); ?>