<?php
define('_IN_JOHNCMS', 1);
$rootpath = '';
require('incfiles/core.php');
if(!$user_id)
{
	header("HTTP/1.0 404 Not Found");
    exit;
}
if (isset($_POST['msg'])) {
   $msg = isset($_POST['msg']) ? functions::checkin(mb_substr(trim($_POST['msg']), 0, 100)) : '';
        $from = $user_id ? $login : '';
   $error = array();
        $flood = FALSE;
        if (!$user_id)
            $error[] = $lng['error_empty_name'];
        if (empty($msg) || strlen($msg) < 3)
            $error[] = $lng['error_empty_message'];
        if ($ban['1'] || $ban['13'])
            $error[] = $lng['access_forbidden'];
   $flood = functions::antiflood();
   if ($ban['1'] || $ban['13'])
       $error[] = $lng['access_forbidden'];

   if ($flood)
       $error = $lng['error_flood'] . ' ' . $flood . '&#160;' . $lng['seconds'];
   if (!$error) {
       $req = mysql_query("SELECT * FROM `guest` WHERE `user_id` = '$user_id' ORDER BY `time` DESC");
       $res = mysql_fetch_array($req);
       if ($res['text'] == $msg) {
           $error[] = 'error';
       }
	   else if(time() - $res['time'] < 10)
	   {
			$error[] = 'error';
	   }
	   $numberDel = $res['id']-18;
	   mysql_query("DELETE FROM `guest` WHERE `id` <  $numberDel");
   }
   if (!$error) {
       mysql_query("INSERT INTO `guest` SET
            `adm` = '$admset',
            `time` = '" . time() . "',
            `user_id` = '$user_id',
            `name` = '$from',
            `text` = '" . mysql_real_escape_string($msg) . "',
            `ip` = '" . core::$ip . "',
            `browser` = '" . mysql_real_escape_string($agn) . "'
       ");
echo '<div class="menu" style="text-align:center;border-bottom:0px;"><b><i class="fa fa-check-circle-o"></i> Đã gửi</b></div>';

   }else{
        echo "<script>
            var no = '<div id=check>".print_r($error)."</div>';
            var t = setTimeout(function(){
                $(\"#CheckSend\").html(no);
                setTimeout('$(\"#check\").remove()', 1500);
            }, 700);
function stopCount() {
                $(\"#check\").remove();
}
        </script>";
    }
}
$totalchat = mysql_result(mysql_query("SELECT COUNT(*) FROM `guest` WHERE `adm`='0'"), 0);
  if ($totalchat) {
    
       $req = mysql_query("SELECT `guest`.*, `guest`.`id` AS `gid`, `users`.`lastdate`, `users`.`id`, `users`.`rights`, `users`.`name`
                    FROM `guest` LEFT JOIN `users` ON `guest`.`user_id` = `users`.`id`
                    WHERE `guest`.`adm`='0' ORDER BY `time` DESC LIMIT 5");
 

        while ($gres = mysql_fetch_assoc($req)) {
        $post = functions::checkout_chat($gres['text'], 1, 1);
        if ($set_user['smileys'])
        $post = functions::smileys($post, $gres['rights'] ? 1 : 0);
?>
         <div class="menu"><?php echo (time() > $gres['lastdate'] + 300 ? ''.functions::image('user/off.png', array('class' => 'icon-r3')).'' : ''.functions::image('user/on.png', array('class' => 'icon-r3')).''); ?>
<?php
                if ($user_id && $user_id != $gres['id']) {
                    echo '<a href="/users/profile.php?user=' . $gres['id'] . '"><b>' . functions::nickcolor($gres['id']) . '</b></a>: ';
                } else {
                    echo '<b>' . functions::nickcolor($gres['id']) . '</b>: ';
                }
				echo $post;
                echo ' - <span style="font-size: 10px; color: gray; margin: -1px 0px 1px 1px;">'.functions::display_date($gres['time']).'</span>';
?>

</div>
<?php
          ++$i;
 
        }       
     if($totalchat > 10){
          echo '<div style="text-align: right;"><a href="/pages/chatbox.php" class="select_item">Xem thêm...</a></div>';
      }
  }
?>