is there any problem in this syntax
----------------------------------------------------
this is cuteftp builtin editor which changes the color after GREATER THAN SIGN. I wonder why its changing the color after ">" sign .
this is the whole file [message.php]
----------------------------------
----------------------------------------------------
this is cuteftp builtin editor which changes the color after GREATER THAN SIGN. I wonder why its changing the color after ">" sign .
this is the whole file [message.php]
----------------------------------
Code:
include "settings.php";
include "include.php";
$HD_CURPAGE = $HD_URL_MESSAGES;
if( $_SESSION[login_type] == $LOGIN_INVALID )
Header( "Location: {$HD_URL_LOGIN}?redirect=" . urlencode( $HD_CURPAGE ) );
if( $_POST[cmd] == "action" )
{
if( $_POST[action] == "delete" )
{
$query = "";
reset( $_POST );
while( list( $key, $val ) = each( $_POST ) )
{
if( is_int( $key ) && $val == "on" )
{
mysql_query( "DELETE FROM {$pre}message WHERE ( ticket_id = '$key' && user_id = '{$_SESSION[user][id]}' )" );
if( !get_row_count( "SELECT COUNT(*) FROM {$pre}message WHERE ( ticket_id = '$key' )" ) )
{
mysql_query( "DELETE FROM {$pre}ticket WHERE ( ticket_id = '$key' )" );
mysql_query( "DELETE FROM {$pre}post WHERE ( ticket_id = '$key' )" );
mysql_query( "DELETE FROM {$pre}message WHERE ( ticket_id = '$key' )" );
if( is_dir( "{$HD_TICKET_FILES}/{$key}" ) )
system( "rm -rf {$HD_TICKET_FILES}/{$key}" );
}
}
}
}
else if( ($_POST[action] == "read") || ($_POST[action] == "unread") )
{
$viewed = ($_POST[action] == "read");
while( list( $key, $val ) = each( $_POST ) )
{
if( is_int( $key ) && $val == "on" )
mysql_query( "UPDATE {$pre}message SET viewed = '$viewed' WHERE ( ticket_id = '$key' )" );
}
}
}
if( $_POST[cmd] == "new" )
{
if( ((count( $_POST[users] ) + count( $_POST[dept] )) > 0) && (trim( $_POST[subject] ) != "") && (trim( $_POST[message] ) != "") )
{
for( $i = 0; $i < count( $_POST[dept] ); $i++ )
{
$res = mysql_query( "SELECT user_id FROM {$pre}privilege WHERE ( dept_id = '{$_POST[dept][$i]}' || dept_id = '0' )" );
while( $row = mysql_fetch_array( $res ) )
{
if( $row[user_id] != $_SESSION[user][id] )
{
$found = 0;
for( $j = 0; $j < count( $_POST[users] ); $j++ )
if( $_POST[users][$j] == $row[user_id] )
$found = 1;
if( !$found )
$_POST[users][] = $row[user_id];
}
}
}
$ticket = "M" . strtoupper( base_convert( time( ), 10, 16 ) );
mysql_query( "INSERT INTO {$pre}ticket ( ticket_id, dept_id, subject, date, status, notify, priority, lastactivity ) VALUES ( '$ticket', '{$_SESSION[user][id]}', '{$_POST[subject]}', '" . time( ) . "', '$HD_STATUS_OPEN', '" . ($_POST[notify] == "on" ? "1" : "0") . "', '{$_POST[priority]}', '" . time( ) . "' )" );
$id = mysql_insert_id( );
mysql_query( "INSERT INTO {$pre}post ( ticket_id, user_id, date, subject, message ) VALUES ( '$id', '{$_SESSION[user][id]}', '" . time( ) . "', '{$_POST[subject]}', '{$_POST[message]}' )" );
for( $i = 0; $i < count( $_POST[users] ); $i++ )
mysql_query( "INSERT INTO {$pre}message ( ticket_id, user_id, viewed ) VALUES ( '$id', '{$_POST[users][$i]}', '0' )" );
mysql_query( "INSERT INTO {$pre}message( ticket_id, user_id, viewed ) VALUES ( '$id', '{$_SESSION[user][id]}', '1' )" );
Header( "Location: $HD_CURPAGE" );
exit;
}
else
$msg = "<div class=\"errorbox\">All fields are required to send a message.</div><br />";
}
Comment