Search options (Page 1 of 2)

if (isset($_POST['delete_messages']) || isset($_POST['delete_messages_comply']))
{
    if (isset($_POST['delete_messages_comply']))
    {
        // Check this is legit
        if ($pun_user['g_id'] < PUN_GUEST)
            confirm_referrer('message_list.php');

        if (@preg_match('/[^0-9,]/', $_POST['messages']))
            message($lang_common['Bad request']);

        // Delete messages
        $db->query('DELETE FROM '.$db->prefix.'messages WHERE id IN('.$_POST['messages'].') AND owner='.$pun_user['id']) or error('Unable to delete messages.', __FILE__, __LINE__, $db->error());

        redirect('message_list.php?box='.intval($_POST['box']), $lang_pms['Deleted redirect']);
    }
    else
    {
        $page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / '.$lang_pms['Multidelete'];
        $idlist = is_array($_POST['delete_messages']) ? array_map("intval", $_POST['delete_messages']) : array();

// Delete multiple messages
if (isset($_POST['delete_messages']) || isset($_POST['delete_messages_comply']))
{
    if (isset($_POST['delete_messages_comply']))
    {
        // Check this is legit
        if ($pun_user['g_id'] < PUN_GUEST)
            confirm_referrer('message_list.php');

        if (@preg_match('/[^0-9,]/', $_POST['messages']))
            message($lang_common['Bad request']);

        // Delete messages
        $db->query('DELETE FROM '.$db->prefix.'messages WHERE id IN('.$_POST['messages'].') AND owner='.$pun_user['id']) or error('Unable to delete messages.', __FILE__, __LINE__, $db->error());

        redirect('message_list.php?box='.intval($_POST['box']), $lang_pms['Deleted redirect']);
    }
    else
    {
        $page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / '.$lang_pms['Multidelete'];
        $idlist = is_array($_POST['delete_messages']) ? array_map("intval", $_POST['delete_messages']) : array();
        require PUN_ROOT.'header.php';
?>
<div class="blockform">
    <h2><span><?php echo $lang_pms['Multidelete'] ?></span></h2>
    <div class="box">
        <form method="post" action="message_list.php">
            <div class="inform">
                <input type="hidden" name="messages" value="<?php echo implode(',', array_values($idlist)) ?>" />
                <input type="hidden" name="box" value="<?php echo intval($_POST['box']) ?>" />
                <fieldset>
                    <div class="infldset">
                        <p class="warntext"><strong><?php echo $lang_pms['Delete messages comply'] ?></strong></p>
                    </div>
                </fieldset>
            </div>
            <p><input type="submit" name="delete_messages_comply" value="<?php echo $lang_pms['Delete'] ?>" /><a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>
        </form>
    </div>
</div>