uf/includes/pms/pms_write.php

<?php

$msg ='';

if ((isset($_POST['textedit'])) and (isset($_POST['nmsg'])) and (isset($_POST['username'])))
{
	if (($_POST['textedit'] != '') and ($_POST['nmsg']!='') and ($_POST['username']!='') and (strlen($_POST['textedit'])>10) and (strlen($_POST['nmsg'])>5))
	{
		$nick = strip_tags($_POST['username']);
		$sql = "SELECT * FROM `".USERS_TABLE."` WHERE `nick`='$nick'";
		$result = DataBase::fetch(DataBase::sql_query($sql, CRITICAL,'Could not obtain user information.'));
		if ($result['u_id']!='')
		{
			$cntu = Pms::PMCnt($result['u_id']);
			if ($cntu[0] < $forum_config['pm_inbox_max'])
			{		
				//antiflood lock
				if (isset($_COOKIE['antiflood_time']))
				{
					if ($_COOKIE['antiflood_time']>time())
					{
						message_forum($lng['antiflood_enabled'],$_SERVER['REQUEST_URI']);
					}
				}
				else
				{
					setcookie('antiflood_time',(time() + $forum_config['time_antiflood']));
					$_POST['textedit'] = Secure::TagsReplace($_POST['textedit']);
					$_POST['nmsg'] = strip_tags($_POST['nmsg']);
					Pms::SendMessage($_POST['textedit'],$_POST['nmsg'], $_POST['username']);
					message_forum($lng['post_is_saved'],'pms.php');
				}
			}
			else
			{
	   			$message =  $lng['pm_inbox_full'];
				$msg = './skins/'.$default_skin.'/post_error_body.tpl';
			}
		}
		else
		{
			$message =  $lng['no_user'];
			$msg = './skins/'.$default_skin.'/post_error_body.tpl';
		}
	}
	else
	{
		$message =  $lng['perror_1'];
		$msg = './skins/'.$default_skin.'/post_error_body.tpl';
	}
}
else
{
	if (isset($_GET['id']))
	{
		Secure::user_exists(intval($_GET['id']));
		$_POST['username'] = User::UserInformation(intval($_GET['id']), 'nick');
	}
	else
	{
		$_POST['username'] = '';
	}
	$_POST['nmsg']='';
	$_POST['textedit']='';
}
$cnt = Pms::PMCnt();
//add skin variables
$skin = array(
'smiles'=>Post::SmilesShow(),
//labels
'luser'=>$lng['user'],
'lsmiles'=>$lng['smiles'],
'lmsgname'=>$lng['msgname'],
'lmsg'=>$lng['message'],
'lsave'=>$lng['save'],
'lreset'=>$lng['reset'],
'lwritemsg'=>$lng['write_pm'],
'action'=>$_SERVER['REQUEST_URI'],
'lsentbox_full'=>($cnt[1]==$forum_config['pm_sentbox_max']) ? $lng['pm_sentbox_full'] : ''
);

$skin = array_push_assoc($skin, GenerateHeader($lng['lpm'].': '.$lng['write_pm'], '</a>&gt;<a href="pms.php" class="navigator">'.$lng['lpm'].'</a> &gt; <a href="'.$_SERVER['REQUEST_URI'].'" class="navigator">'.$lng['write_pm']));

if ($msg=='')
{
	$msg='./skins/'.$default_skin.'/blank.tpl';
}

//do it!
include('./skins/'.$default_skin.'/overall_header.tpl');
include('./skins/'.$default_skin.'/pms_new_body.tpl');

if(RANK=='2')
{
	$skin['pa_link']='<a href="admin/index.php" class="fsmall"><b>'.$lng['pa_link'].'</b></a>';
}
else
{
	$skin['pa_link']='';
}

$stop = TimeGeneration();
$skin['queries'] =  ShowQueries($start, $stop);
include('./skins/'.$default_skin.'/overall_footer.tpl'); 

?>