|
|
|
@ -15,8 +15,9 @@ if (api_is_anonymous()) { |
|
|
|
|
$user_id = intval($_POST['user_id']); |
|
|
|
|
$panel_id = intval($_POST['panel_id']); |
|
|
|
|
|
|
|
|
|
$content_message = Security::remove_XSS($_POST['txt_content'],COURSEMANAGERLOWSECURITY); //check this is filtered on output |
|
|
|
|
$subject_message = Security::remove_XSS($_POST['txt_subject']); //check this is filtered on output |
|
|
|
|
$content_message = ($_POST['txt_content']); //check this is filtered on output |
|
|
|
|
$subject_message = ($_POST['txt_subject']); //check this is filtered on output |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
$user_info = array(); |
|
|
|
|
$user_info = api_get_user_info($user_id); |
|
|
|
@ -62,6 +63,9 @@ if ($panel_id == 2 || $panel_id == 4 ) { |
|
|
|
|
</div> |
|
|
|
|
<?php |
|
|
|
|
} |
|
|
|
|
$subject_message = utf8_decode($subject_message); |
|
|
|
|
$content_message = utf8_decode($content_message); |
|
|
|
|
|
|
|
|
|
if ($panel_id==4 && !empty($content_message)) { |
|
|
|
|
if ($subject_message=='clear') { |
|
|
|
|
$subject_message=null; |
|
|
|
|