<?
    
/*
*
Author modules XxxDIABLOxxX
*
*/

foreach (['common', 'functions', 'user', 'h'] as $scandir) {
	
	$title = 'Почта';
	
	      include './system/'.$scandir.'.php';
	
} 

	

if(!$user) header('Location: /');


?>
<div class='main'>
<?
$id = (int) abs($_GET['id']);

if($id) {

$ho = fetch("SELECT * FROM `users` WHERE `id` = ?", array($id));
  
  if(!$id OR !$ho OR $id == $user['id']) header('Location: /mail/');

?>
<div class='menuList'><li><a href='/mail/'><img src='/images/icon/arrow_b.png' alt=''/>Назад в почту</a></li></div><div class='mini-line'></div>
<?

$contacts = rows("SELECT * FROM `contacts` WHERE `user` = ? AND `ho` = ?", array($user['id'], $ho['id']));
$contacts_ho = rows("SELECT * FROM `contacts` WHERE `ho` = ? AND `user` = ?", array($user['id'], $ho['id']));

if(!$contacts) query("INSERT INTO `contacts` SET `user`=?, `ho`=?, `time`=?", array($user['id'], $ho['id'], time()));

if(!$contacts_ho) query("INSERT INTO `contacts` SET `ho`=?, `user`=?, `time`=?", array($user['id'], $ho['id'], time()));

  if($ho['r'] != $user['r']) $_s = 100; else $_s = 1;
  
  $text = _trim($_POST['text']);

if($text) {
	
	$antiflood = fetch("SELECT * FROM `mail` WHERE `from` = ? ORDER BY `time` DESC LIMIT ?", array($user['id'], 1));
	$blacklist = rows("SELECT * FROM `blacklist` WHERE `user2` = ? AND `user` = ?", array($user['id'], $ho['id']));
	
	if(time() - $antiflood['time'] < 2) $errors[] = 'Писать можно 1 раз в 1 секунду';
    if($user['s'] < $_s) $errors[] = 'Не хватает <img src=\'/images/icon/silver.png\' alt=\'*\'/> '.($_s - $user['s']).' серебра<div class=\'separ\'></div><a href=\'/trade/\'>Купить</a>';
	if($blacklist) $errors[] = 'Вы в черном списке '.$ho['login'].'';
	   
    if($errors) {

      echo '<div class=\'block\' align=\'center\'>';
        
      foreach($errors as $error) {
          
        echo $error.'<br/>';
          
      }
      echo '</div><div class=\'mini-line\'></div>';

    }
    else
    {

        $text = eregi_replace( "[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]", "Реклама", $text);
        
        $text = str_replace(array('ru', 'net', 'com', 'рф', 'tk', 'su', 'us', 'mobi', 'ua', 'www', 'http'), '*', $text);

		query("UPDATE `users` SET `s` = ? WHERE `id` = ?", array($_s, $user['id']));
		
		query("INSERT INTO `mail` SET `from` = ?, `to` = ?, `text` = ?, `time` = ?", array($user['id'], $ho['id'], $text, time()));
         
	    query("UPDATE `contacts` SET `time` = ? WHERE `user` = ? AND `ho` = ?", array(time(),$user['id'], $ho['id']));
		
		query("UPDATE `contacts` SET `time` = ? WHERE `ho` = ? AND `user` = ?", array(time(),$user['id'], $ho['id']));
		
      header('location: /mail/'.$ho['id'].'/');
   
    }

  }
if($ho['id'] != 999999){ 
  echo '
<div class=\'block_zero\'>
  <form action=\'/mail/'.$ho['id'].'/\' method=\'post\'>
    Сообщение:<br/><input name=\'text\' style=\'width: 90%;\' class=\'text\'></a><a href=\'/smiles\'><img src=\'/images/mini_ulibka.gif\'></a><br/>
     <span class=\'btn\'><span class=\'end\'><input class=\'label\' type=\'submit\' value=\'Отправить\'>Отправить</span></span>
    
  </form>
  <center><font color=\'#909090\'><small><small>Стоимость сообщения '.($user['r'] == $ho['r'] ? 'своей':'чужой').' фракции <img src=\'/images/icon/silver.png\' alt=\'*\'/> '.$_s.'</font></small></small></font></center>
</div></div>
<div class=\'mini-line\'></div>';
}

$max = 10;
$count = rows("SELECT * FROM `mail` WHERE `from` = ? AND `to` = ? OR `to` = ? AND `from` = ?", array($user['id'], $ho['id'], $user['id'], $ho['id']));
$pages = ceil($count/$max);
$page = _string(_num($_GET['page']));
if($page > $pages) $page = $pages;
if($page < 1) $page = 1;
$start = $page * $max - $max;
if($count > 0) {
	
	$col = array('#ffffff', '#f09060', '#90c0c0');
    
$q = query("SELECT * FROM `mail` WHERE `from` = ? AND `to` = ? OR `to` = ? AND `from` = ? ORDER BY `time` DESC LIMIT ?,?", array($user['id'], $ho['id'], $user['id'], $ho['id'], $start, $max));
    
	foreach($q as $row) {
		
		$from = fetch("SELECT * FROM `users` WHERE `id` = ?", array($row['from']));

  echo '<div class=\'block_zero\'><span style=\'float: right; color: '.(($row['read'] == 0) ? '#90c090':'#909090').';\'>'.date('d.m | H:i', $row['time']).'</span>'.($from['id'] != 999999 ? '<img src=\'/images/icon/race/'.$from['r'].($from['online'] > time() - 300 ? '':'-off').'.png\' alt=\'*\'/> <a href=\'/user/'.$from['id'].'/\'>'.$from['login'].'</a><br/>':'<img src=\'/images/icon/race/bot.png\' alt="*"/> Система<br/>').''.($from['id'] != 999999 ? '<font color=\''.$col[$from['access']].'\'>'.bb(smiles($row['text'])).'</font>' : '<font color=#9DC8E7>'.bb(smiles($row['text']))).'</font></div><div class=\'dot-line\'></div>'; 

  if($row['to'] == $user['id'] && $row['read'] == 0) rows("UPDATE `mail` SET `read` = ? WHERE `id` = ?", array(1, $row['id']));
	  
    }
    echo '<div class=\'block_zero\'>'.pages('/mail/'.$id.'/?').'</div>';

  }
  else
  {
  
    echo '<div class=\'block_zero\'><font color=\'#909090\'>Сообщений нет</font></div>';
  
  }
?>
<div class='mini-line'></div><div class='center'><div class='block_zero'>Подарки: <img src='/images/icon/romantic.png' alt=''/><a href='/giftshop/6746866/romantic/'>Романтика</a> / <span style='white-space:nowrap;'><img src='/images/icon/friendship.png' alt=''/> <a href='/giftshop/6746866/friendship/'>Дружба</a></span> / <span style='white-space:nowrap;'><img src='/images/icon/fiesta.png' alt=''/> <a href='/giftshop/6746866/fiesta/'>Праздники</a></span> / <span style='white-space:nowrap;'><img src='/images/icon/sport.png' alt=''/> <a href='/giftshop/6746866/sport/'>Спорт</a></span><div class='mb10'></div><a class='btn' href='/mail/friends/add/6746866?r=9398196'><span class='end'><span class='label'>В друзья</span></span></a> <a class='btn' href='/mail/blacklist/add/6746866?r=9398196'><span class='end'><span class='label'>В игнор</span></span></a> </div></div><div class='mini-line'></div>
  <div class='mini-line'></div><div class='menuList'><li><a href='/forum/topic/31/'><img src='/images/icon/section_new.png' alt=''/>Важно! Безопасность персонажа</a></li></div>

</div>
<?
  include './system/f.php';

}
else
{

$max = 10;
$count = rows("SELECT * FROM `contacts` WHERE `user` = ?", array($user['id']));
$pages = ceil($count/$max);
$page = _string(_num($_GET['page']));

if($page > $pages) $page = $pages;
if($page < 1) $page = 1;
$start = $page * $max - $max;

if($count > 0) {

    echo '<div class=\'main\'>';
	
	$q = query("SELECT * FROM `contacts` WHERE `user` = ? ORDER BY `time` DESC LIMIT ?,?", array($user['id'], $start, $max));
	
	foreach($q as $row) {
		
		$ho = fetch("SELECT * FROM `users` WHERE `id` = ?", array($row['ho']));

        echo '<div class=\'mini-line\'></div><a href=\'/mail/'.$row['ho'].'/\'><img src=\'/images/icon/race/'.$ho['r'].($ho['online'] > time() - 300 ? '':'-off').'.png\' alt=\'*\'/> '.$ho['login'].'</a>, '.$ho['level'].' ур.';
         
		$new = rows("SELECT * FROM `mail` WHERE `from` = ? AND `to` = ? AND `read` = ?", array($ho['id'], $user['id'], 0));
		
		if($new > 0) echo '<font color=\'#90c090\'>+'.$new.'</font>';
		
		$lost = fetch("SELECT * FROM `mail` WHERE `from` = ? AND `to` = ? OR `to` = ? AND `from` = ? ORDER BY `time` DESC LIMIT ?", array($user['id'], $ho['id'], $user['id'], $ho['id'], 1));
		
		if($lost) echo '<br/><font color=\'#909090\'>'.(mb_strlen($lost['text'],'UTF-8') >= 25 ? mb_substr($lost['text'],0, 25, 'UTF-8').'...':$lost['text']).'</font>';
		
		echo '</div><div class=\'mini-line\'></div>';
    
    }
 
 echo '<div class=\'block_zero\'>'.pages('/mail/?').'</div>';

  }
  else
  {

    echo '<div class=\'main\'><font color=\'#909090\'>Почта пуста</font></div>';

  }

  include './system/f.php';

}

?>