} elseif($action == 'admin') {
if (!$isadmin) {
showmessage("抱歉，你沒有管理員的權力！");
}
$discuz_action = 102;
$aaction = $aaction ? $aaction : 'list';
if ($aaction == 'list') {
$checksql = ($check=='1') ? 'AND new=1':'';
if (submitcheck(pmuser)) {
$query = $db->query("SELECT uid FROM cdb_members where username=$username LIMIT 1");
$usr=$db->fetch_array($query);
$checksql .= 'AND msgto1id='.$usr[uid];
if (!$usr[uid]) {
showmessage('找不到該用戶');
}
}
if ($page) {
$start = ($page - 1) * $tpp;
} else {
$start = 0;
$page = 1;
}
$query = $db->query("SELECT COUNT(1) FROM cdb_pms where dateline >0 $checksql");
$multipage = multi($db->result($query, 0), $tpp, $page, "pm.php?action=admin&aaction=list&check=$check");
$query = $db->query("SELECT p.*,m.username FROM cdb_pms p LEFT JOIN cdb_members m ON m.uid=p.msgtoid $checksql ORDER BY dateline desc LIMIT $start, $tpp");
while ($pm = $db->fetch_array($query)) {
$pm['usernameenc'] = rawurlencode($pm['msgfrom']);
$pm[get] = !$pm[username] ? "已刪除的用戶" : "<a href='viewpro.php?uid=".$pm[msgtoid]."'>".$pm[username]."</a>";
$totime = gmdate("$dateformat $timeformat", $pm[dateline] + ($timeoffset * 3600));
$pmlist[] = $pm;
}
} elseif ($aaction == 'view') {
$codecount = 0;
$query = $db->query("SELECT p.*, m.username AS msgto FROM $table_pms p
LEFT JOIN $table_members m ON m.uid=p.msgtoid
WHERE pmid='$pmid'");
if(!$pm = $db->fetch_array($query)) {
showmessage('pm_nonexistence');
}
$folder = $folder == 'track' ? $folder : $pm['folder'];
$pm['dateline'] = gmdate("$dateformat $timeformat", $pm['dateline'] + $timeoffset * 3600);
$pm['message'] = postify($pm['message'], 0, 0, 1, 0, 1, 1);
$action = "view";
} elseif ($aaction == 'delete') {
$checkadd = $folder == 'track' ? "AND new='1'" : '';
if(!$pmid) {
if($pmids = implode_ids( $delete )) {
$db->query("DELETE FROM $table_pms WHERE pmid IN ($pmids) $checkadd");
}
showmessage('pm_delete_succeed', "pm.php?action=admin");
}
