<?
session_start();

$document = array();
$script = "";
$init = "";

require "../lib/getnpost.php";
require "../lib/config.php";
require "../lib/dbconnect.php";
require "../lib/auth.php";
require "../lib/common.php";

require "mypage_common.php";

function mkMyRead(
	&$document, &$script, &$init, $mbid, $page, $mmid, $ss, $sc, $st, $usid
) {
	global $PSYCHEID, $PsycheAdmin;

	if ($PsycheAdmin && $usid) {
		$usidstring = "&usid=$usid";

		$usidstring2 = <<<EOS
<input type="hidden" id="usid" name="usid" value="$usid" />

EOS;
	}

	$document['main'] = <<<EOS
            <table width="748" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td>&nbsp;</td>
              </tr>
            </table>
            <table width="748" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td width="412" height="55" background="/images/subtitlebox_pat.gif" style="padding-left:30px"><img src="/mypage/images/subtitle_05.gif" width="163" height="26"></td>
                <td width="336" background="/images/subtitlebox_pat.gif" ><table width="100%" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td height="30" align="right" style="padding-right:10px"><img src="/images/locationbar_title.gif" width="65" height="11" align="absmiddle"><font color="2F89C2">È¨ &gt; ³»Á¤º¸ &gt; 1:1¹®ÀÇ³»¿ª</font></td>
                    </tr>
                  </table></td>
              </tr>
            </table> 
            <br>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td><img src="/mypage/images/caption_03.gif" width="468" height="65"></td>
              </tr>
            </table>
            <br>

EOS;

	$ste = urlencode($st);

	$result = mysql_query("select
mm.mmid, mm.mbid, mm.usid, us.usname, us.uslogin, mm.mmtime, mm.mmread,
mm.mmsubject, mm.mmcontent
from mymessages as mm
left join users as us on mm.usid = us.usid
where mm.mmid = '$mmid'");

	list($mmid, $mbid, $usid, $usname, $uslogin, $mmtime, $mmread,
	$mmsubject, $mmcontent) = mysql_fetch_row($result);

	if ($PsycheAdmin && $usid) {
		$usnamestring = <<<EOS
<a href="/mypage/myinfo.php?usid=$usid" target="_blank">$usname</a>
EOS;
	} else {
		$usnamestring = $usname;
	}

	if ($uslogin) $usnamestring .= " ($uslogin)";

	if ($usid != $PSYCHEID) {
		mysql_query("update mymessages set mmread = mmread + 1 where mmid = '$mmid'");
	}

	# Ã·ºÎ

	$result = mysql_query("select maid, maname
from myattaches
where mmid = '$mmid'
order by maid");

	$atstring = <<<EOS
<table border="0" cellpadding="0" cellspacing="0">
<tr><td style="padding: 3px 0px;">

EOS;

	while (list($mai, $man) = mysql_fetch_row($result)) {
		$atstring .= <<<EOS
<a href="/community/transfer.php?maid=$mai" style="line-height: 18px;">$man</a><br />

EOS;
	}

	$atstring .= <<<EOS
</td></tr>
</table>

EOS;

	# ´ñ±Û

	$result = mysql_query("select
mc.mcid, mc.usid, us.usname, mc.mccontent, mc.mctime
from mycomments as mc
left join users as us on mc.usid = us.usid
where mc.mmid = '$mmid'
order by mc.mcid");

	$comments = "";

	while (list($mci, $usi, $usn, $mcc, $mct) = mysql_fetch_row($result)) {
		if ($usi == $PSYCHEID || $PsycheAdmin) {
			$mcdelstring = <<<EOS
<a href="javascript:delComment($mci)"><img src="/images/re_delete.gif" width="15" height="15" border="0"></a>
EOS;
		} else {
			$mcdelstring = "";
		}

		$comments .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" colspan="2" bgcolor="#DADADA"></td>
              </tr>
              <tr> 
                <td width="635" style="padding: 5px;"><img src="/images/ball_black.gif" width="3" height="11"> 
                  $usn ($mct)</td>
                <td width="15" style="padding: 5px;">$mcdelstring</td>
              </tr>
              <tr> 
<td colspan="2" style="padding: 5px; padding-left:10px">$mcc</td>
              </tr>
            </table> 

EOS;
	}

	if ($PSYCHEID && ($mbid == $PSYCHEID || $PsycheAdmin)) {
		$comments .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="5">
              <tr> 
                <td height="7" ></td>
              </tr>
              <tr> 
                <td height="70" align="center" bgcolor="F7F6F6"> 
<table width="650" border="0" cellspacing="0" cellpadding="0">
<form id="commentform" action="{$_SERVER['PHP_SELF']}" method="post"
 onsubmit="return checkComment();">
                    <tr> 
                      <td width="571">
<textarea id="mccontent" name="mccontent" class="box02" style="width: 548px; height: 46px;"></textarea> 
<input type="hidden" name="mbid" value="$mbid" />
$usidstring2
<input type="hidden" name="page" value="$page" />
<input type="hidden" name="mmid" value="$mmid" />
<input type="hidden" name="ss" value="$ss" />
<input type="hidden" name="sc" value="$sc" />
<input type="hidden" name="st" value="$st" />
<input type="hidden" name="commentsubmit" value="1" />
                      </td>
                      <td width="79"><input type="image" src="/images/b_comment.gif" width="91" height="43"></td>
                    </tr>
</form>
                  </table>
                </td>
              </tr>
            </table>

EOS;
	} else {
		$comments .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" colspan="2" bgcolor="#DADADA"></td>
              </tr>
            </table>

EOS;
	}


	$document['main'] .= <<<EOS
            <table width="670" border="0" cellspacing="0" cellpadding="0">
<tr>
                <td height="5" bgcolor="3EA5DA"></td>
              </tr>
              <tr>
                <td height="2"></td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr>
                <td width="15"><img src="/community/images/boxleft.gif" width="15" height="35"></td>
                <td width="640" background="/community/images/boxpat.gif"><table width="640" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td width="70" align="center"><img src="/helpdesk/images/t_subject.gif" width="22" height="11"></td>
                      <td width="1"><img src="/helpdesk/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td style="padding-left:15px">$mmsubject</td>
                    </tr>
                  </table></td>
                <td width="15"><img src="/community/images/boxright.gif" width="15" height="35"></td>
              </tr>
            </table>
           
            <table width="668" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td width="668" height="30" align="center"> <table width="640" border="0" cellspacing="0" cellpadding="0">
<tr> 
                      <td width="70" align="center"><img src="/helpdesk/images/t_name.gif" width="32" height="11"></td>
                      <td width="1"><img src="/helpdesk/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td width="386" style="padding-left:15px">
$usnamestring</td>
                      <td width="183" align="right">($mmtime, Hit: $mmread)</td>
                    </tr>
                  </table>
                </td>
              </tr>
			  
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="E5E3E3"></td>
              </tr>
           
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="30" align="center" bgcolor="F7F6F6"><table width="640" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td width="70" align="center"><img src="/helpdesk/images/t_file.gif" width="42" height="11"></td>
                      <td width="1"><img src="/helpdesk/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td style="padding-left:15px">$atstring</td>
                    </tr>
                  </table></td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="E5E3E3"></td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="10">
              <tr> 
                <td width="85" height="250">&nbsp;</td>
                <td width="585" height="200" valign="top" style="line-height:18px">
$mmcontent
                </td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="3EA5DA"></td>
              </tr>
              <tr> 
                <td height="25" align="center" bgcolor="F7F6F6">&nbsp;</td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="5">
              <tr> 
                <td width="329">

EOS;

	if ($PSYCHEID && ($mbid == $PSYCHEID || $PsycheAdmin)) {
		$document['main'] .= <<<EOS
<a href="mywrite.php?mbid=$mbid&page=$page&mmid=$mmid&ss=$ss&sc=$sc&st=$ste{$usidstring}"><img src="/images/b_reply.gif" width="52" height="20" border="0"></a>

EOS;

		$writestring = <<<EOS
<a href="mywrite.php?mbid=$mbid&page=$page&ss=$ss&sc=$sc&st=$ste{$usidstring}"><img src="/images/b_write.gif" width="52" height="20" border="0"></a>

EOS;
	}

	if ($usid == $PSYCHEID || $PsycheAdmin) {
		$document['main'] .= <<<EOS
<a href="myedit.php?mbid=$mbid&page=$page&mmid=$mmid&ss=$ss&sc=$sc&st=$ste{$usidstring}"><img src="/images/b_modify.gif" width="52" height="20" border="0"></a>
<a href="javascript:delMessage($mmid)"><img src="/images/b_delete.gif" width="52" height="20" border="0"></a>

EOS;
	}

	$document['main'] .= <<<EOS
                </td>
                <td width="321" align="right">
$writestring
<a href="mylist.php?mbid=$mbid&page=$page&ss=$ss&sc=$sc&st=$ste{$usidstring}"><img src="/images/b_list.gif" width="52" height="20" border="0"></a>
                </td>
              </tr>
            </table>
            <br>

$comments

EOS;

	$script .= <<<EOS
function delMessage(n) {
	if (confirm("ÀÌ ±ÛÀ» »èÁ¦ÇÏ½Ã°Ú½À´Ï±î?")) {
		window.location.href = "{$_SERVER['PHP_SELF']}?mbid=$mbid&page=$page&ss=$ss&sc=$sc&st=$ste{$usidstring}&mmdel=" + n;
	}
}

function delComment(n) {
	if (confirm("ÀÌ ´ñ±ÛÀ» »èÁ¦ÇÏ½Ã°Ú½À´Ï±î?")) {
		window.location.href = "{$_SERVER['PHP_SELF']}?mbid=$mbid&page=$page&mmid=$mmid{$usidstring}&mcdel=" + n;
	}
}

function checkComment() {
	f = document.getElementById("commentform");

	if (!f.mccontent.value) {
		alert("´ñ±Û ³»¿ëÀ» ÀÔ·ÂÇØ ÁÖ¼¼¿ä.");
		f.mccontent.focus();

		return false;
	}

	return true;
}

EOS;
}

## Start

if (!$PSYCHEID) {
	header("Location: https://www.prosigner.com/member/signin.php");

	return;
}

if (!$mbid) {
	if ($PsycheAdmin && $usid) {
		$mbid = $usid;
	} else {
		$mbid = $PSYCHEID;
	}
}

if ($mbid != $PSYCHEID && !$PsycheAdmin) {
	header("Location: https://www.prosigner.com/member/signin.php");

	return;
}

if ($commentsubmit) {
	if (!$PSYCHEID || ($mbid != $PSYCHEID && !$PsycheAdmin)) {
		header("Location: https://www.prosigner.com/member/signin.php");

		return;
	}

	$ste = urlencode($st);

	$mccontent = nl2br(htmlspecialchars($mccontent));

	$mccontent = addslashes($mccontent);

	mysql_query("insert into mycomments
(usid, mmid, mccontent, mctime) values
('$PSYCHEID', '$mmid', '$mccontent', now())");

	mysql_query("update mymessages set mmcomments = mmcomments + 1
where mmid = '$mmid'");

	header("Location: {$_SERVER['PHP_SELF']}?mbid=$mbid&page=$page&mmid=$mmid&ss=$ss&sc=$sc&st=$ste");

	return;
} elseif ($mmdel) {
	if (!$PSYCHEID || ($mbid != $PSYCHEID && !$PsycheAdmin)) {
		header("Location: /");

		return;
	}

	$ste = urlencode($st);

	$result = mysql_query("select
usid, mmgroup, mmdepth, mmseq, mmattaches, mmcomments
from mymessages
where mmid = '$mmdel'");

	list($usid, $mmgroup, $mmdepth, $mmseq, $mmattaches, $mmcomments)
	= mysql_fetch_row($result);

	if ($usid == $PSYCHEID || $PsycheAdmin) {
		mysql_query("delete from mymessages where mmid = '$mmdel'");

		if ($mmgroup) {
			$result = mysql_query("select max(mmseq) from mymessages
where mmgroup = '$mmgroup' and mmdepth = '$mmdepth' and mmseq < '$mmseq'");

			list($mmseqmax) = mysql_fetch_row($result);

			if ($mmseqmax) {
				$mmseqwherestring = "and mmseq > '$mmseqmax'";
			}

			mysql_query("update mymessages set mmdepth = mmdepth - 1
where mmgroup = '$mmgroup' and mmseq < '$mmseq' $mmseqwherestring");
		}

		if ($mmattaches) {
			$result = mysql_query("select maid, maname from myattaches
where mmid = '$mmdel'");

			while (list($ati, $atn) = mysql_fetch_row($result)) {
				$atpath = $BOARD_ATTACHPATH . "/MA_" . $ati . "_" . $atn;

				if (file_exists($atpath)) {
					unlink($atpath);
				}
			}

			mysql_query("delete from myattaches where mmid = '$mmdel'");
		}

		if ($mmcomments) {
			mysql_query("delete from mycomments where mmid = '$mmdel'");
		}

		header("Location: mylist.php?mbid=$mbid&page=$page&ss=$ss&sc=$sc&st=$ste");

		return;
	} else {
		header("Location: /");

		return;
	}
} elseif ($mcdel) {
	if (!$PSYCHEID || ($mbid != $PSYCHEID && !$PsycheAdmin)) {
		header("Location: /");

		return;
	}

	$ste = urlencode($st);

	$result = mysql_query("select mc.usid
from mycomments as mc
where mc.mcid = '$mcdel'");

	list($usid) = mysql_fetch_row($result);

	if ($usid == $PSYCHEID || $PsycheAdmin) {
		mysql_query("delete from mycomments where mcid = '$mcdel'");

		mysql_query("update mymessages set mmcomments = mmcomments - 1
where mmid = '$mmid'");

		header("Location: {$_SERVER['PHP_SELF']}?mbid=$mbid&page=$page&mmid=$mmid&ss=$ss&sc=$sc&st=$ste");

		return;
	} else {
		header("Location: /");

		return;
	}
}

mkMyRead($document, $script, $init, $mbid, $page, $mmid, $ss, $sc, $st, $usid);

require "mypage_template.php";
?>
