47 lines
1.7 KiB
PHP
47 lines
1.7 KiB
PHP
<?php require $_SERVER['DOCUMENT_ROOT'].'/api/private/core.php';
|
|
|
|
api::initialize(["method" => "POST", "logged_in" => true, "secure" => true]);
|
|
Polygon::ImportClass("Messages");
|
|
|
|
$isReply = false;
|
|
|
|
|
|
$messageId = $_POST["messageId"] ?? false;
|
|
|
|
if($messageId)
|
|
$isReply = true;
|
|
|
|
if($isReply) {
|
|
$replyInfo = Messages::getMessageInfoFromId($messageId);
|
|
if(!$replyInfo) api::respond(400, false, "Invalid Request");
|
|
}
|
|
|
|
|
|
if(!isset($_POST["subject"]) && !$isReply || !isset($_POST["body"]) || !isset($_POST["recipientId"])) api::respond(400, false, "Invalid Request");
|
|
|
|
|
|
if(!$isReply) {
|
|
if(!trim($_POST["subject"])) api::respond(400, false, "You cannot leave the subject empty");
|
|
if(strlen($_POST["subject"] > 128) || strlen($_POST["subject"]) < 2) api::respond(400, false, "Message subject must be under 2-128 characters long.");
|
|
}
|
|
|
|
if(!trim($_POST["body"])) api::respond(400, false, "You cannot leave the body empty");
|
|
if(strlen($_POST["body"] > 768) || strlen($_POST["body"]) < 3) api::respond(400, false, "Message body must be under 3-768 characters long.");
|
|
|
|
$RecipientId = $_POST["recipientId"];
|
|
$UserId = SESSION["userId"];
|
|
$RecipientInfo = Users::GetInfoFromID($RecipientId);
|
|
if(!$RecipientInfo) api::respond(400, false, "Invalid Request");
|
|
|
|
if($isReply) {
|
|
$Subject = htmlspecialchars("RE: " . $replyInfo->Subject);
|
|
} else {
|
|
$Subject = htmlspecialchars($_POST["subject"]);
|
|
}
|
|
|
|
$Body = htmlspecialchars($_POST["body"]);
|
|
|
|
db::run("INSERT INTO messages (SenderID, ReceiverID, Subject, Body, TimeSent, TimeArchived, TimeRead) VALUES (:sid, :rid, :sub, :body, UNIX_TIMESTAMP(), 0, 0)",
|
|
[":sid" => $UserId, ":rid" => $RecipientId, ":sub" => $Subject, ":body" => $Body]);
|
|
|
|
api::respond(200, true, "Message sent.");
|