Stuff

<?php
session_start();
?>
<html>
<head>
<title>MGN: The PokNav</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">

<style type="text/css">
<!--
.style1 {font-size: 12px; font-family: Verdana, Arial, Helvetica, sans-serif; color: #000000; }
.style2 {
	color: #FFFFFF;
	font-size: 12px;
	font-family: Verdana, Arial, Helvetica, sans-serif;
}
.style3 {font-size: 18px; font-family: Verdana, Arial, Helvetica, sans-serif; color: #000000; }

A:link { text-decoration: none; color:000000; }
A:visited { text-decoration: none; color:000000; }
A:hover { text-decoration: none; color:b4b4b4; }
-->
</style>


<script language="JavaScript" type="text/JavaScript">
function onload_fn(){
    MM_preloadImages('dp2.png','br2.png');
    display_username();
}
function display_username(){
    user = document.mail.user.value;
    user_txtfield = getElementbyId('usr');
    user_txtfield.innerHTML(user);
}
    
<!--
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</script>
<link rel="SHORTCUT ICON" href="http://www.evosdev.com/board/esds.ico"/>
</head>

<body bgcolor=ff0000 onLoad="onload_fn()">
<center>
<img src="Untitled-1.png">
<table width="804">
  <tr bgcolor=ffffff> 
    <td>
<p>&nbsp; </p>

<center>
          <p><a href="index.php" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('home','','home2.png',1)"><img name="home" border="0" src="home1.png"></a><a href="ds.php" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image5','','dp2.png',1)"><img src="dp1.png" name="Image5" width="100" height="40" border="0"></a><a href="wii.php" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image6','','br2.png',1)"><img src="br1.png" name="Image6" width="100" height="40" border="0"></a><a href="add.php" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('add','','add2.png',1)"><img name="add" border="0" src="add1.png"></a> 
          </p>
          <p>&nbsp;</p>
          
        </center>



<center>

<p class=style1><b>PokeNav's Mail Client</b></p>
 <p>&nbsp;</p>

<table align=center width=500 class=style1>



<?php
error_reporting (E_ALL);
ini_set('display_errors','1');
include('common.php');
include('libs/vcode/vcode_engine.php');
myconnect();
$action = isset($_REQUEST['action'])?trim($_REQUEST['action']):"0";
$vcode = isset($_REQUEST['vcode'])?mysql_real_escape_string(trim($_REQUEST['vcode'])):"";
$name = isset($_REQUEST['name'])?mysql_real_escape_string(trim($_REQUEST['name'])):"";
$code1 = isset($_REQUEST['code1'])?trim($_REQUEST['code1']):"";
$code2 = isset($_REQUEST['code2'])?trim($_REQUEST['code2']):"";
$code3 = isset($_REQUEST['code3'])?trim($_REQUEST['code3']):"";
$msg = isset($_REQUEST['msg'])?mysql_real_escape_string(trim($_REQUEST['msg'])):"";
$id = isset($_REQUEST['id'])?mysql_real_escape_string(trim($_REQUEST['id'])):"";
$t = isset($_REQUEST['t'])?mysql_real_escape_string(trim($_REQUEST['t'])):"";
// Seleccting tables

if ($t==1)
{	$table="`table1`";	}
if ($t==2)
{	$table="`table2`";	}

$vcode_engine = new vcode_engine;

if ($action=="1"){
//----------list-----------
$sql_query = "SELECT * FROM $table WHERE id='$id'";
$result = mysql_query($sql_query ) or die (mysql_error());
$list = mysql_fetch_array($result);
$to = "{$list['contact']}";
$message = $msg."\n\n".$name."\n".$code1." ".$code2." ".$code3;
// In case any of our lines are larger than 70 characters, we should use wordwrap()
$message = wordwrap($message, 70);

// Send

if ($vcode == $_SESSION['validation_image']){
echo preg_replace("/\s+/", "", $msg); 

die();
    mail($to, 'PokeNav Mail Service', $message);
    echo "<META HTTP-EQUIV=Refresh CONTENT='1;URL=index.php'>";
    echo " Sending Mail...";
}else{
    echo "<META HTTP-EQUIV=Refresh CONTENT='1;URL=mail.php?id=$id&t=$t'>";
    echo " Error! Invalid vcode entered.";
}
}
if ($action == "0"){

//----------list-----------
$sql_query = "SELECT * FROM $table WHERE id=$id";
$result = mysql_query($sql_query ) or die (mysql_error());

$list = mysql_fetch_array($result);
echo "<tr align=left>";
echo "<td><b>To:</b> {$list['name']} ({$list['contact']})</td></tr>\n";
echo "<tr align=left><td><b>Friend Code:</b> {$list['code1']} {$list['code2']} {$list['code3']}</td></tr>\n";

echo "<tr>";
echo "<form name=\"mail\" action=\"mail.php?id={$list['id']}&t=".$t."\" method=\"post\">";
}
?>

<?php if($action =="0"){?>
  <td valign="top"><b>From:</b> <input name="name" type="text" size="30" maxlength="30" /></td>
</tr>
<tr>
  <td valign="top"><b>Your Friend Code:</b> <input name="code1" type="text" size="4" maxlength="4"/> <input name="code2" type="text" size="4" maxlength="4"/> <input name="code3" type="text"   size="4" maxlength="4"/></td>
</tr>
<tr>
  <td><br>
  <pre><textarea name="msg" cols="50" rows="10">Hey <?php echo $list['name'];?>,

  I have just added your Friend Code. Lets battle with each other some time!</textarea></pre>
  </td>
</tr>
<tr>
    <td> Spam Protection: Please enter the validation code below.</td>
</tr>
<tr>
    <td style="vertical-align:top;text-algin:center;"><?php $vcode_engine->image_validation();?><input type="textfield" name="vcode" maxlength="6"></td>
</tr>
<tr>
  <td align=center><br>
    <input name="submit" type="submit" id="submit" value="Submit" />
    <input type="reset" name="Reset" value="Reset" />
  <td>
</tr>
<input type="hidden" name="action" value="1">
<input type="hidden" name="t" value="<?php echo $t?>">
<input type="hidden" name="id" value="<?php echo $id?>">
</form>

</table>

<p>&nbsp; </p>
<p>&nbsp; </p>
<p>&nbsp; </p>
<p>&nbsp; </p>
<p>&nbsp; </p>



</center>

</td>
  </tr>
  <tr>
  <td style="color:white;font-family: Verdana, Arial, Helvetica, sans-serif; font-size:12px;">&#169; 2007 <a style="text-decoration:underline;color:white;font-family: Verdana, Arial, Helvetica, sans-serif; font-size:12px;" href="http://www.evosdev.com/">Evolution software Developement Studios</a></td>
  </tr>
</table>
</center>

<?php } ?>
</body>
</html>

############## OUTPUT ####################
Heytest,\r\n\r\nIhavejustaddedyourFriendCode.Letsbattlewitheachothersometime!