Unnamed

<?phprequire_once("phpinclude/prepend.php");$db = GetDB("Grid");$method = $_SERVER["PATH_INFO"];if ($method == "/SaveMessage/"){    $msg = $HTTP_RAW_POST_DATA;    $start = strpos($msg, "?>");    if ($start != -1)    {        $start+=2;        $msg = substr($msg, $start);        $parts = split("[<>]", $msg);        $to_agent = $parts[12];        $db->execute("insert into offline_msgs (uuid, message) values ('" .                mysql_escape_string($to_agent) . "', '" .                mysql_escape_string($msg) . "')");        echo "<?xml version=\"1.0\" encoding=\"utf-8\"?><boolean>true</boolean>";    }    else    {        echo "<?xml version=\"1.0\" encoding=\"utf-8\"?><boolean>false</boolean>";    }    exit;}if ($method == "/RetrieveMessages/"){    $parms = $HTTP_RAW_POST_DATA;    $parts = split("[<>]", $parms);    $agent_id = $parts[6];    $result = $db->query("select * from offline_msgs where uuid='" .            mysql_escape_string($agent_id) . "'");    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?><ArrayOfGridInstantMessage xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\">";    while(($row = mysql_fetch_assoc($result)))    {        echo $row["message"];    }    echo "</ArrayOfGridInstantMessage>";    $db->execute("delete from offline_msgs where uuid='" .            mysql_escape_string($agent_id) . "'");    exit;}?>