fix: users can't see sent messages

#367
This commit is contained in:
Martin Ambrus
2017-11-22 15:55:17 +01:00
parent 3329c1ea34
commit 68032702c3
3 changed files with 10 additions and 9 deletions
+2 -1
View File
@@ -25,8 +25,9 @@ class Message {
if ($req_file == 'nachrichten.php') { if ($req_file == 'nachrichten.php') {
if ( isset( $_GET['t'] ) ) { if ( isset( $_GET['t'] ) ) {
switch ( $_GET['t'] ) { switch ( $_GET['t'] ) {
// send messages page // send messages page or a single sent message
case 2: case 2:
case '2a':
$this->getMessages( 2 ); $this->getMessages( 2 );
break; break;
+1 -1
View File
@@ -68,7 +68,7 @@
echo "<tr>"; echo "<tr>";
} }
echo "<td class=\"sel\">".((!$support_messages || ($support_messages && $message->inbox1[$i-1]['target'] != 1)) ? "<input class=\"check\" type=\"checkbox\" name=\"n".$name."\" value=\"".$message->sent1[$i-1]['id']."\" />" : '<u><b title="Sent as Support"><i>S</i></b></u>')."</td> echo "<td class=\"sel\">".((!$support_messages || ($support_messages && $message->inbox1[$i-1]['target'] != 1)) ? "<input class=\"check\" type=\"checkbox\" name=\"n".$name."\" value=\"".$message->sent1[$i-1]['id']."\" />" : '<u><b title="Sent as Support"><i>S</i></b></u>')."</td>
<td class=\"top\"><a href=\"nachrichten.php?id=".$message->sent1[$i-1]['id']."\">".$message->sent1[$i-1]['topic']."</a> "; <td class=\"top\"><a href=\"nachrichten.php?t=2a&amp;id=".$message->sent1[$i-1]['id']."\">".$message->sent1[$i-1]['topic']."</a> ";
if($message->sent1[$i-1]['viewed'] == 0) { if($message->sent1[$i-1]['viewed'] == 0) {
echo "(unread)"; echo "(unread)";
} }
+2 -2
View File
@@ -120,7 +120,7 @@ if ( isset( $_GET['confirm'] ) && is_numeric( $_GET['confirm'] ) ) {
<div id="mid"> <div id="mid">
<?php include("Templates/menu.tpl"); <?php include("Templates/menu.tpl");
if(isset($_GET['id']) && !isset($_GET['t'])) { if(isset($_GET['id']) && (!isset($_GET['t']) || $_GET['t'] == '2a')) {
$message->loadMessage($_GET['id']); $message->loadMessage($_GET['id']);
include("Templates/Message/read.tpl"); include("Templates/Message/read.tpl");
} }
@@ -128,7 +128,7 @@ else if(isset($_GET['t'])) {
switch($_GET['t']) { switch($_GET['t']) {
case 1: case 1:
if(isset($_GET['id'])) { if(isset($_GET['id'])) {
$id = preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['id']); $id = preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['id']);
} }
include("Templates/Message/write.tpl"); include("Templates/Message/write.tpl");
break; break;