I was similarly irritated by reply not grabbing a title and I accidentally stumbled upon this. I felt the need to change one thing, though - a devious and clever user could theoretically go through message IDs and read things not meant for them.
PHP Code:
$message = new PrivateMessage;
// CHANGES START HERE
$title = "(no subject)"; // this way it'll never be blank
if($mysidia->input->get("id")){ // if there's an get value
$where = trim($mysidia->input->get("id")); // trim the value
if (!ctype_digit($where)) { // if its not numeric only
$user = $where; // create a message to this user
} else if (ctype_digit($where)){ // if it IS numeric only then it's a reply, so pull data
$oldMessage = new PrivateMessage($where);
//my little paranoid change is here:
if($mysidia->user->username == $oldMessage->fromuser) {
$js = "<script>$('.content h2').text('Reply To Message');</script>"; // optional
$user = $oldMessage->fromuser;
$title = "RE: ".$oldMessage->messagetitle;
$msg = "› {$user} wrote: ".$oldMessage->messagetext;
}
}
}
// CHANGES END HERE
$editor = $message->getEditor();
12-23-2015, 11:59 AM
Linear Mode
