HoloText($_POST['ownerId']); $message = $input->FilterText($_POST['message']); $scope = $input->HoloText($_POST['scope']); $query = $input->HoloText($_POST['query']); $widgetid = $input->HoloText($_POST['widgetId']); if(!is_numeric($widgetid)){ exit; } $widgetrow = $db->fetch_row($db->query("SELECT id,location,ownerid,variable FROM ".PREFIX."homes WHERE ".PREFIX."homes.id = '".$widgetid."' LIMIT 1")); $widgetrow[1] = str_replace('-','',$widgetrow[1]); if($widgetrow[1] == "0" || $widgetrow[1] == "2"){ $type = "user"; $ownerid = $widgetrow[2]; }else{ $type = "group"; $ownerid = $widgetrow[1]; } if($type == "user"){ $isfriend = $data->select4($user->id,$ownerid); if($db->num_rows($isfriend) > 0){ $isfriend = true; }else{ $isfriend = false; } if($ownerid == $user->id){ $isfriend = true; } if($user->id == 0){ exit; } if($widgetrow[3] != "private" || ($widgetrow[3] == "private" && $isfriend == true)){ $db->query("INSERT INTO ".PREFIX."guestbook (message,time,userid,ownerid,owner) VALUES ('".$message."','".time()."','".$user->id."','".$ownerid."','user')"); }else{ exit; } }else{ $memberrow = $db->fetch_row($data->select15($user->id,$ownerid)); if($memberrow[2] != ""){ $ismember = true; }else{ $ismember = false; } if($widgetrow[3] != "private" || ($widgetrow[3] == "private" && $ismember == true)){ $db->query("INSERT INTO ".PREFIX."guestbook (message,time,userid,ownerid,owner) VALUES ('".$message."','".time()."','".$user->id."','".$ownerid."','group')"); }else{ exit; } } $row = $db->fetch_assoc($db->query("SELECT * FROM ".PREFIX."guestbook WHERE ownerid = '".$ownerid."' AND owner = '".$type."' AND userid = '".$user->id."' ORDER BY id DESC LIMIT 1")); ?>
  • " alt="HoloText($user->name); ?>" title="HoloText($user->name); ?>"/>

    IsUserOnline("self"); if($online == true){ $online = "online"; }else{ $online = "offline"; } ?>
    HoloText($user->name); ?>

    bbcode_format($input->HoloText($row['message'])); ?>