kartero.org

<?php

 

if (!isset($_SESSION['logged_uid']) or !isset($_SESSION['logged_lvl']) or !isset($_SESSION['logged_key']) or ($_SESSION['logged_lvl'] != "subscriber")) {

        exit;

 

require_once("core.php");

 

if (isset($_POST['new']) and !empty($_POST['new']) and is_numeric($_POST['new'])) {

 

        $reply_from = "\"$usr_name\" <{$_SESSION['logged_uid']}>";

        $reply_from = htmlentities($reply_from,ENT_QUOTES);

 

        $post_alias_query = mysql_query("select domains.id, aliases.id from aliases, domains where aliases.alias='{$_SESSION['logged_uid']}' and aliases.mode='1' and aliases.domain=domains.id and domains.mode='1' order by aliases.domain, aliases.id");

 

        echo "<title>Kartero - Compose - {$_SESSION['logged_uid']}</title>";

 

        echo "<table border=\"0\" cellspacing=\"0\" callpadding=\"0\" width=\"800\"><tr><td valign=\"top\">";

 

        echo "<table border=\"0\" cellspacing=\"2\" cellpadding=\"0\" width=\"100%\">";

 

        echo "<form method=\"post\">";

 

        echo "<tr><td width=\"50\"><b>From:</b></td><td rowspan=\"7\" width=\"5\"></td><td>";

 

        if (mysql_num_rows($post_alias_query) > 0) {

 

                echo "<select class=\"input\" name=\"reply_from\">";

                echo "<option>$reply_from</option>";

 

                while ($row = mysql_fetch_assoc($post_alias_query)) {

                        echo "<option>\"$usr_name\" &lt;$row[id]&gt;</option>";

                }

 

                echo "</select>";

        }

        else {

                echo "<input class=\"input\" type=\"text\" name=\"reply_from\" value=\"$reply_from\" readonly>";

        }

 

        echo "</td></tr>";

 

        mysql_free_result($post_alias_query);

 

        echo "<tr><td><b>To:</b></td><td><input required autofocus class=\"input\" type=\"text\" name=\"reply_to\"></td></tr>";

        echo "<tr><td><b>Cc:</b></td><td><input class=\"input\" type=\"text\" name=\"reply_cc\"></td></tr>";

        echo "<tr><td><b>Bcc:</b></td><td><input class=\"input\" type=\"text\" name=\"reply_bcc\"></td></tr>";

        echo "<tr><td><b>Subject:</b></td><td><input required class=\"input\" type=\"text\" name=\"reply_subj\"></td></tr>";

 

        echo "<tr><td></td><td><textarea required class=\"input\" name=\"reply_body\" rows=\"10\">";

 

        echo "</textarea></td></tr>";

 

        echo "<input type=\"hidden\" name=\"filedrop_box\" value=\"$filedrop_box\">";

 

        echo "<tr><td></td><td align=\"right\"><div class=\"label\"><input type=\"image\" src=\"images/mail-reply.png\" onclick=\"if (confirm('Send message?')) {return true;} else {return false;}\"></div><div class=\"label\">send</div></td></tr>";

 

        echo "</table>";

 

        echo "</form>";

 

        echo "</td></tr>";

        echo "</table>";

 

 

 

<div class="message">

 

<iframe name="filedrop" src="filedrop.php" frameborder="0" scrolling="0" width="0" height="0"></iframe>

 

<table border="0" cellspacing="0" cellpadding="0">

<form name="filedrop_form" enctype="multipart/form-data" action="filedrop.php" method="post" target="filedrop" onsubmit="this.elements['filedrop_submit'].disabled = true;document.getElementById('filedrop_wait').innerHTML = '<img src=images/ajax-loader.gif border=0 width=16 height=16 hspace=5>';">

<tr><td>

<input type="hidden" name="MAX_FILE_SIZE" value="<?php echo $max_file_size; ?>">

<input type="hidden" name="filedrop_box" value="<?php echo $filedrop_box; ?>">

<input type="file" name="filedrop_obj">

<input type="submit" name="filedrop_submit" value="Upload">

</td>

 

<td>

<div id="filedrop_wait"></div>

</td></tr>

 

</form>

</table>

 

</div>