Gecko [ midwest-tb.com ]

Name	Size	Permission
assets	[ DIR ]	drwxr-xr-x
functions	[ DIR ]	drwxr-xr-x
img	[ DIR ]	drwxr-xr-x
includes	[ DIR ]	drwxr-xr-x
.htaccess	4.65 KB	-rw-r--r--
01admin.zip	112.24 KB	-rw-r--r--
add_user.php	11.21 KB	-rw-r--r--
banner.php	1.41 KB	-rw-r--r--
db.php	30 B	-rw-r--r--
delete.php	357 B	-rw-r--r--
delete_banner.php	736 B	-rw-r--r--
delete_post.php	960 B	-rw-r--r--
delete_user.php	991 B	-rw-r--r--
edit_banner.php	3.38 KB	-rw-r--r--
edit_post.php	11.55 KB	-rw-r--r--
edit_post2.php	5.62 KB	-rw-r--r--
edit_user.php	13.09 KB	-rw-r--r--
editsettings.php	2.61 KB	-rw-r--r--
error_log	54.03 KB	-rw-r--r--
function_users.php	6.8 KB	-rw-r--r--
functions.php	10.92 KB	-rw-r--r--
home.php	6.62 KB	-rw-r--r--
index.php	56 B	-rw-r--r--
insert_banners.php	3.07 KB	-rw-r--r--
insert_post.php	9.63 KB	-rw-r--r--
login.php	1.57 KB	-rw-r--r--
login_admin.php	3.11 KB	-rw-r--r--
logout.php	164 B	-rw-r--r--
member.php	17.64 KB	-rw-r--r--
payment_setting.php	2.97 KB	-rw-r--r--
picupload.php	2.12 KB	-rw-r--r--
post.php	2.02 KB	-rw-r--r--
posts.php	2.94 KB	-rw-r--r--
print_shipment.php	1.91 KB	-rw-r--r--
register_admin.php	8.45 KB	-rw-r--r--
remove_amount.php	1.01 KB	-rw-r--r--
searchmembers.php	2.94 KB	-rw-r--r--
send_email.php	5.02 KB	-rw-r--r--
testimony.php	3.15 KB	-rw-r--r--
upload_files.php	2.59 KB	-rw-r--r--
user_error.php	188 B	-rw-r--r--
user_withdrawal.php	4.99 KB	-rw-r--r--
view_admin.php	2.84 KB	-rw-r--r--
view_banners.php	2.4 KB	-rw-r--r--
view_posts.php	2.85 KB	-rw-r--r--
view_referrals_bonus.php	2.83 KB	-rw-r--r--
view_users.php	4.78 KB	-rw-r--r--
viewconversation.php	5.37 KB	-rw-r--r--
viewmessage.php	2.4 KB	-rw-r--r--
viewmessages.php	4.24 KB	-rw-r--r--
website_setting.php	3.09 KB	-rw-r--r--

Code Editor : viewconversation.php

<?php include("includes/header.php");
include("includes/navbar.php");
?>

<div class="row">
        <div class="col-12">
            <div class="card">
                <div class="card-header">
                    <h4 class="card-title">Conversation</h4>
               <hr/>
<?php

if(isset($_GET['user'])){

$show = $_GET['user'];

if($user==$show){

?>
<script type="text/javascript">
            window.location.href = "no_access.php"
        </script>
<?php
}

$sql2 = "SELECT * FROM users WHERE username='$show' ";
$run2= mysqli_query($con,$sql2);
while($row= mysqli_fetch_array($run2)) {	$user_fullname2 = $row['fullname'] ; }

echo "Contact support between ADMIN and ".$user_fullname2. " <br/><br/>";

//samll work here
?>
<head>
<title><?php echo "I & ".$user_fullname2. ""?> </title>
<head>

<br/>
<div id="del_button">
	<form action="" method="POST"> <button name="attach" type="submit"class="btn btn-success"  >Attach file to message <br/></button></form>
</div>
<br/>

<form action="" method="POST" enctype="multipart/form-data">	
<textarea  border="3" rows="3" cols="24" name="message"></textarea>	<br/>
<?php if(isset($_POST['attach'])){	echo 'Attach a file: <input type="file" name="file" > <br/> <em>max size of file 10 mb</em>';} ?>	
   <button name="submit" class="btn btn-primary" type="submit">Send message</button>
</form>
<br/>

<?php

if(isset($_POST['submit'])){

$message = $_POST['message'];
$time = date('y-m-d, h:ia');
$status="unread";

$errors= array();
      $file_name = mysql_escape_string($_FILES['file']['name']);

if($file_name!=""){	
   $rand= rand(1, 99999);

$file_name = $rand.$_FILES['file']['name'];

$file_size =$_FILES['file']['size'];
		$file_tmp =$_FILES['file']['tmp_name'];
		$file_type=$_FILES['file']['type'];   
		$file_ext=explode('.',$_FILES['file']['name']);

$file_ext=strtolower(end($file_ext));
		
		$expensions= array("jpeg","jpg","png", "zip","txt" ,"apk","pdf","doc","mp3" ,"mp4"); 		
		
		if($file_size > 10971520){
		echo'File size must not exceed 10 MB';
		}
					
		if(empty($errors)==true){
			move_uploaded_file($file_tmp,"".$link."files/".$file_name);
echo "The file was succesfully attached to your message";
}
}

if($message==""){
	echo "Your message is empty!";
}

elseif(strlen($message)>=1000){
 echo "message too long";
}

else{
	
$sql= "INSERT into messages(message, time, sender, recipient, status, file) VALUES ('$message' , '$time', '$user', '$show', '$status', '$file_name')";

$result=mysqli_query($con,$sql);

if($result){
echo '<div id="notice3"> Contact support sent!</div>';
}
else{
	echo"message not sent";
}

}

?>
<?php

$offset= 0;
$page_result= 4;
				
				if(isset($_GET['pageno'])){

$page_value = $_GET['pageno'];

if($page_value > 1){
						$offset= ($page_value - 1) * $page_result;
					}
				}

//$sql2="UPDATE messages SET status ='read' WHERE recipient ='$user' && sender='$show'"; $run= mysqli_query($con,$sql2);

$sql = "SELECT * FROM messages WHERE recipient ='$show' && sender='$user' OR recipient ='$user' && sender='$show' ORDER BY id DESC LIMIT $offset, $page_result ";
$run= mysqli_query($con,$sql);
$check= mysqli_num_rows($run);

if($check < 1){
	echo "No conversations yet<br/>";
}

else{
while($row= mysqli_fetch_array($run)){

$id = $row['id'];
	$sender = $row['sender'];
	$message = $row['message'];
	$recipient= $row['recipient'];
	$time = $row['time'];
	$file= $row['file'];
	include("functions/friendly_time.php");
	
include("functions/smiley.php");

$show = $_GET['user'];

if($sender==$user){

echo '<div id="chat_right" class="div'.$id.'"> <div id="chat_right2"><br/> <strong><a href="'.$sender.'"/>'.$fullname.'</a></strong><br/>';
		echo ''.$message.'<br/>';
		if($file!=""){
			$format=explode('.',$file);
	echo '<img src="img/file.png" width="50" height="50"/><br/>';
			   echo '<a href="../download_file.php?filename='.$file.'">Download attachment</a><br/>';
		}
	echo "<em> ".$newtime."</em><br/>";
	echo '<a href="#" onclick="DeleteChat('.$id.')"/>Delete</a></div></div><hr/> ';

}
else{
echo '<div id="chat_left" class="div'.$id.'"> <div id="chat_left2"><br/> <strong><a href="'.$sender.'"/>'.$user_fullname2.''.$l_fullname.'</a></strong><br/>';
		echo ''.$message.'<br/>';

if($file!=""){
	echo '<img src="img/file.png" width="50" height="50"/><br/>';
			   echo '<a href="../download_file.php?filename='.$file.'">Download attachment</a><br/>';
		}
		echo "<em> ".$newtime."</em></div></div><hr/> ";
		
}

}
}

?>
<script type="text/javascript">

function DeleteChat(div){

confirm('Are you sure you want to delete?');
    $(".div"+div+"").hide();
 $.ajax({
        url:"functions/delete_chat.php?id="+div+"&delete=yes",
        success:function(data)
        { }
        });

}
</script>
<?php

}
?>

<?php
$result =mysqli_query($con,"SELECT id  from messages WHERE recipient ='$show' && sender='$user' OR recipient ='$user' && sender='$show'");
$numrows=mysqli_num_rows($result);

$pagecount = $numrows; // Total number of rows
$num = $pagecount / $page_result ;

if($_GET['pageno'] < $num)
{
   echo "<a href = 'viewconversation.php?user=".$show."&pageno=".($_GET['pageno'] + 1)." '> Load older conversations </a>";
}

?>
</div>
<?php

include("includes/footer.php");

${this.title}

Code Editor : viewconversation.php