kartero.org

<?php

 

require_once("core.php");

 

if (!isset($_SESSION['logged_uid']) or !isset($_SESSION['logged_lvl']) or !isset($_SESSION['logged_key']) or ($_SESSION['logged_lvl'] != "subscriber")) {

        exit;

 

if (isset($_POST['new']) and !empty($_POST['new']) and is_numeric($_POST['new'])) {

 

        $reply_from = "$usr_name <{$_SESSION['logged_uid']}>";

        $reply_from = htmlentities($reply_from,ENT_QUOTES,"UTF-8");

 

        $post_alias_query = mysql_query("select domains.id, aliases.id from aliases, domains where aliases.alias='{$_SESSION['logged_uid']}' and aliases.mode='1' and aliases.domain=domains.id and domains.mode='1' order by aliases.domain, aliases.id");

 

        echo "<title>Kartero - Compose - {$_SESSION['logged_uid']}</title>";

 

        echo "<table border=\"0\" cellspacing=\"0\" callpadding=\"0\" width=\"100%\"><tr><td valign=\"top\">";

 

        echo "<table border=\"0\" cellspacing=\"2\" cellpadding=\"0\" width=\"100%\">";

 

        echo "<form method=\"post\">";

 

        echo "<tr><td width=\"50\"><b>From:</b></td><td rowspan=\"7\" width=\"5\"></td><td colspan=\"2\">";

 

        if (mysql_num_rows($post_alias_query) > 0) {

 

                echo "<select class=\"input\" name=\"reply_from\">";

                echo "<option>$reply_from</option>";

 

                while ($row = mysql_fetch_assoc($post_alias_query)) {

                        echo "<option>$usr_name &lt;$row[id]&gt;</option>";

                }

 

                echo "</select>";

        }

        else {

                echo "<input class=\"input\" type=\"text\" name=\"reply_from\" value=\"$reply_from\" readonly>";

        }

 

        echo "</td></tr>";

 

        mysql_free_result($post_alias_query);

 

        echo "<tr><td><b>To:</b></td><td colspan=\"2\"><input required autofocus class=\"input\" type=\"text\" name=\"reply_to\"></td></tr>";

        echo "<tr><td><b>Cc:</b></td><td colspan=\"2\"><input class=\"input\" type=\"text\" name=\"reply_cc\"></td></tr>";

        echo "<tr><td><b>Bcc:</b></td><td colspan=\"2\"><input class=\"input\" type=\"text\" name=\"reply_bcc\"></td></tr>";

        echo "<tr><td><b>Subject:</b></td><td colspan=\"2\"><input required class=\"input\" type=\"text\" name=\"reply_subj\"></td></tr>";

 

        echo "<tr><td></td><td colspan=\"2\"><textarea required class=\"input\" name=\"reply_body\" id=\"reply_body\" rows=\"10\">";

 

        echo "</textarea></td></tr>";

 

        kartero_local_storage("reply_body",$_SESSION['logged_uid']);

 

        echo "<input type=\"hidden\" name=\"filedrop_box\" value=\"$filedrop_box\">";

 

        echo "<tr><td></td><td>";

 

        echo "<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\"><tr>";

        echo "<td valign=\"middle\"><input type=\"checkbox\" name=\"reply_hi\"></td><td valign=\"middle\">high priority</td>";

        echo "<td width=\"10\"></td>";

        echo "<td valign=\"middle\"><input type=\"checkbox\" name=\"reply_rr\"></td><td valign=\"middle\">read receipt</td>";

        echo "<td width=\"10\"></td>";

        echo "<td valign=\"middle\"><input type=\"checkbox\" name=\"reply_dr\"></td><td valign=\"middle\">delivery receipt</td>";

        echo "<td width=\"10\"></td>";

        echo "<td valign=\"middle\"><input type=\"checkbox\" name=\"reply_sm\"></td><td valign=\"middle\">sign</td>";

        echo "<td width=\"10\"></td>";

        echo "<td valign=\"middle\"><input type=\"checkbox\" name=\"reply_dm\" id=\"reply_dm\" onclick=\"if (this.checked) { document.getElementById('reply_go').innerHTML='save'; } else { document.getElementById('reply_go').innerHTML='send'; }\"></td><td valign=\"middle\">draft</td>";

        echo "</tr></table>";

 

        echo "</td><td align=\"right\"><table border=\"0\" cellspacing=\"0\" cellpadding=\"0\"><tr><td><input type=\"image\" src=\"images/mail-reply.png\" onclick=\"if (document.getElementById('reply_dm').checked) { if (confirm('Save message?')) {return true;} else {return false;}} else { if (confirm('Send message?')) {return true;} else {return false;}}\"></td><td width=\"40\" align=\"center\" valign=\"middle\" id=\"reply_go\">send</span></td></tr></table></td></tr>";

 

        echo "</table>";

 

        echo "</form>";

 

        echo "</td></tr>";

        echo "</table>";

 

 

 

<div class="message">

 

<table border="0" cellspacing="0" cellpadding="0">

<form name="filedrop_form" enctype="multipart/form-data" action="filedrop.php" method="post" target="filedrop" onsubmit="this.elements['filedrop_submit'].disabled = true;document.getElementById('filedrop_wait').innerHTML = '<img src=images/ajax-loader.gif border=0 width=16 height=16 hspace=5>';">

<tr><td>

<input type="hidden" name="MAX_FILE_SIZE" value="<?php echo $max_file_size; ?>">

<input type="hidden" name="filedrop_box" value="<?php echo $filedrop_box; ?>">

<input type="file" name="filedrop_obj[]" multiple>

<input type="submit" name="filedrop_submit" value="Upload">

</td>

 

<td>

<div id="filedrop_wait"></div>

</td></tr>

 

</form>

</table>

 

</div>

 

<iframe style="display: none;" id="filedrop" name="filedrop" src="filedrop.php" frameborder="0" scrolling="0" width="100%" height="0"></iframe>