<?php
define('_IN_JOHNCMS', 1);
$rootpath = '';
require('incfiles/core.php');
if(!$user_id)
{
	header("HTTP/1.0 404 Not Found");
    exit;
}
if (isset($_POST['msg'])) {
   $msg = isset($_POST['msg']) ? functions::checkin(mb_substr(trim($_POST['msg']), 0, 100)) : '';
        $from = $user_id ? $login : '';
   $error = array();
        $flood = FALSE;
        if (!isset($_POST['token']) || !isset($_SESSION['token']) || $_POST['token'] != $_SESSION['token']) {
            $error[] = $lng['error_wrong_data'];
        }
        if (!$user_id)
            $error[] = $lng['error_empty_name'];
        if (empty($msg) || strlen($msg) < 3)
            $error[] = $lng['error_empty_message'];
        if ($ban['1'] || $ban['13'])
            $error[] = $lng['access_forbidden'];
   $flood = functions::antiflood();
   if ($ban['1'] || $ban['13'])
       $error[] = $lng['access_forbidden'];

   if ($flood)
       $error = $lng['error_flood'] . ' ' . $flood . '&#160;' . $lng['seconds'];
   if (!$error) {
       $req = mysql_query("SELECT `id`,`text`,`time` FROM `guest` WHERE `user_id` = '$user_id' ORDER BY `time` DESC");
       $res = mysql_fetch_assoc($req);
       if ($res['text'] == $msg) {
           $error[] = 'error';
       }
	   else if(time() - $res['time'] < 10)
	   {
			$error[] = 'error';
	   }
	   $numberDel = $res['id']-10;
	   mysql_query("DELETE FROM `guest` WHERE `id` <  $numberDel");
   }
   if (!$error) {
       mysql_query("INSERT INTO `guest` SET
            `adm` = '$admset',
            `time` = '" . time() . "',
            `user_id` = '$user_id',
            `name` = '$from',
            `text` = '" . mysql_real_escape_string($msg) . "',
            `ip` = '" . core::$ip . "',
            `browser` = '" . mysql_real_escape_string($agn) . "'
       ");
	   
        echo '<div class="menu" style="text-align:center;border-bottom:0px;"><b><i class="fa fa-check-circle-o"></i> Đã gửi</b></div>';

   }else{
        echo "<script>
            var no = '<div id=check><img src=/images/del.png></div>';
            var t = setTimeout(function(){
                $(\"#CheckSend\").html(no);
                setTimeout('$(\"#check\").remove()', 1500);
            }, 700);
function stopCount() {
                $(\"#check\").remove();
}
        </script>";
    }
}
$totalchat = mysql_result(mysql_query("SELECT COUNT(*) FROM `guest` WHERE `adm`='0'"), 0);
  if ($totalchat) {
    
       $req = mysql_query("SELECT `guest`.*, `guest`.`id` AS `gid`, `users`.`lastdate`, `users`.`id`, `users`.`rights`, `users`.`name`
                    FROM `guest` LEFT JOIN `users` ON `guest`.`user_id` = `users`.`id`
                    WHERE `guest`.`adm`='0' ORDER BY `time` DESC LIMIT $start,$kmess");
 

        while ($gres = mysql_fetch_assoc($req)) {
        $post = functions::checkout_chat($gres['text'], 1, 1);
        if ($set_user['smileys'])
        $post = functions::smileys($post, $gres['rights'] ? 1 : 0);

          $outputhtml .= '<div class="menu">'. (time() > $gres['lastdate'] + 300 ? ''.functions::image('user/off.png', array('class' => 'icon-r3')).'' : ''.functions::image('user/on.png', array('class' => 'icon-r3')).'').($user_id && $user_id != $gres['id'] ? '<a href="/users/profile.php?user=' . $gres['id'] . '"><b>' . functions::nickcolor($gres['id']) . '</b></a>' : '<b>' . functions::nickcolor($gres['id']) . '</b>').' <span class="gray" style="font-size: 12px;">('.functions::display_date($gres['time']).')</span><br />'.$post.'</div>';


          ++$i;
 
        }
       $outputhtml .= '<div class="phdr">' . $lng['total'] . ': ' . $totalchat . '</div>';
 if($totalchat > $kmess){
              $outputhtml .= '<div class="topmenu">' . functions::display_pagination('chatbox.php?', $start, $totalchat, $kmess) . '</div>';   }   
      echo $outputhtml;
  }
?>