<?php
include "common.php";
$fileC = file("db/PMs/" . $_SESSION['user']->getUserId() . ".dat", FILE_IGNORE_NEW_LINES);
$str = "";
foreach ($fileC as $line) {
$temp = new PM($line);
if ($temp->getMessageId() != $_GET['messageId']) {
$str .= $line . "\n";
}
}
file_put_contents("db/PMs/" . $_SESSION['user']->getUserId() . ".dat", $str);
header("location: pmInbox.php");
<?php
$_POST['subject'] = str_replace("~", "", $_POST['subject']);
$_POST['message'] = str_replace("~", "", $_POST['message']);
if (trim(stripslashes($_POST['subject'])) == "") {
header("Location: pmCompose.php?userId=" . $_GET['userId'] . "&error=1");
exit;
}
include "common.php";
include_once "function.misc.php";
$fileC = file("db/PMs/" . $_GET['userId'] . ".dat");
$temp = new PM(array_pop($fileC));
$str = $temp->getMessageId() + 1;
$str .= "~" . $_SESSION['user']->getUserId();
$str .= "~" . $_GET['userId'];
$str .= "~" . date("G:i:s, j M Y");
$str .= "~false";
$str .= "~" . htmlentities(stripslashes($_POST['subject']));
$postString = stripslashes($_POST['message']);
$postString = str_replace("\n", "", $postString);
$postString = str_replace("\r\n", "", $postString);
$postString = str_replace("\r", "", $postString);
preg_match_all("/<img.*? \\/>/", $postString, $matches);
foreach ($matches[0] as $match) {
$url = substr(substr(strstr($match, 'src="'), 5), 0, strpos(substr(strstr($match, 'src="'), 5), '"'));
if (@urlfilesize($url, "kb") <= 200) {
$imgDimensions = @getimagesize($url);
if ($imgDimensions[0] > 600 || $imgDimensions[1] > 600 || $imgDimensions == false) {
$postString = str_replace($match, "", $postString);
}
} else {
