Linux, Apache, MySQL, PHP

[08-Apr-2023 15:57:03 UTC] PHP Warning:  Undefined array key "m" in message.php on line 88
[08-Apr-2023 15:57:03 UTC] PHP Fatal error:  Uncaught mysqli_sql_exception: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'AND receiver_id=36376) OR (sender_id =36376 AND receiver_id=) ORDER BY `date_...' at line 1 in message.php:89
Stack trace:
#0 message.php(101): mysqli_query(Object(mysqli), 'SELECT * FROM p...')
#1 {main}
  thrown in message.php on line 89
[08-Apr-2023 15:57:25 UTC] PHP Warning:  Undefined array key "id" in inbox.php on line 13
[08-Apr-2023 15:57:25 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at inbox.php:13) in inbox.php on line 13

$query = "SELECT * FROM ".C_MYSQL_MESSAGES." WHERE (sender_id =".$_SESSION['m']." AND receiver_id=". (int)$_GET['id'].") OR (sender_id =".(int)$_GET['id']." AND receiver_id=".$_SESSION['m'].") ORDER BY `date_added` ASC";
$result = mysqli_query($conn,$query) or die();

<?php
@session_start();
$error = "";

include_once 'include/config.inc.php';
include_once 'include/options.inc.php';
include_once 'include/security.inc.php';
include_once 'include/functions.inc.php';
$from_name = "";
$from_id ="";
if(isset($_GET['id']) && $_GET['id'] != "")
{
	
	$receiver_id = (int)$_GET['id'];
	
	$tmp=mysqli_query($conn,"SELECT id,fname,lname FROM ".C_MYSQL_MEMBERS." WHERE id=".$receiver_id." AND status >= '7'");

    $count=mysqli_num_rows($tmp);
    $row=mysqli_fetch_array($tmp);

	$from_name=$row['fname'].' '.$row['lname'];
	$from_id = $row['id'];
	if($count == '0') {
	 $error = 1;
	  }
}
else
{
	$error = 1;
}
if($error == 1)
{
	header('location: '.C_URL.'/inbox.php');
	die();
}
if(!isset($_SESSION['m']) || $_SESSION['m'] == '')
{
	header('location: '.C_URL.'/login.php?redirect_url='.C_URL.'/message.php?id='. (int)$_GET['id']);
}
include_once 'templates/'.C_TEMP.'/config.php';
include_once 'templates/'.C_TEMP.'/header.php';
 ?>
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
<style>
p.msgtext{
	width: 80%;
	clear: both;
	padding: 10px 5px;
    border-radius: 5px;
}
.left{
    background-color: #edf9f9;
    float: left;
	text-align: left;
}
.right{
    background-color: #f3f3f3;
    float: right;
	text-align: right;
}
.date_left
{
	float: left;
    font-size: 11px;
    padding: 14px 1px 0px;
    color: #adadad;
}
.date_right
{
	float: right;
    font-size: 11px;
    padding: 14px 1px 0px;
    color: #adadad;
}
</style>
<br>
<div class="row">
<br/><br/>
</div>
<div class="col-md-12" style="padding-top: 10px;">
      <div class="panel panel-default">
	   <div class="panel-heading" style=" background-color: <?php echo COLORH ?>"><?php echo $from_name ?>  [<a href="<?php echo C_URL ?>/view.php?l=default&id=<?php echo $from_id ?>"><?php echo $from_id ?></a>]</div>
        <div class="panel-body"  style=" background-color: <?php echo COLOR1 ?>">
		<div id="messages">
   <?php
        if(isset($_GET['id']) && $_GET['id'] != "")
		{
			 $query = "SELECT * FROM ".C_MYSQL_MESSAGES." WHERE (sender_id =".$_SESSION['m']." AND receiver_id=". (int)$_GET['id'].") OR (sender_id =".(int)$_GET['id']." AND receiver_id=".$_SESSION['m'].") ORDER BY `date_added` ASC";
			 $result = mysqli_query($conn,$query) or die();

		     while($j = mysqli_fetch_array($result))
			{
				$c = mysqli_query($conn,"UPDATE ".C_MYSQL_MESSAGES." SET status=1 WHERE id=".$j['id']);
				
				$class = "";
				$date_class = "";
				if($j['sender_id'] == $_SESSION['m'])
				{
					$class = "right";
					$date_class = "date_left";
				}
				else
				{
					$class = "left";
					$date_class = "date_right";
				}
					
				echo '<p class="msgtext '.$class.'">'.$j['date_added'].''.$j['message'].'</p>';	
			}
		}
   
  ?>
</div>
<div class="col-md-6" style="float: none;margin: auto;">
 <form method="post" onsubmit="return false;" id="send_message" action="send_message.php">
    <input  type="hidden" name="sender_id" value="<?php if(isset($_SESSION['m']))echo $_SESSION['m'] ?>" />
	<input  type="hidden" name="receiver_id" value="<?php echo $receiver_id ?>" />
	<textarea class="form-control" id="message_box" name="message"></textarea>
	<br/>
	<a class="btn btn-success" style="float:right;color: white" id="send_message_btn" href="javascript:;">Send</a>
	
 </form>
</div>
</div>
</div>

<!-- jQuery library -->
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
<script>

$('#send_message_btn').click(function(){
	
	var url = "send_message.php"; 

    $.ajax({
           type: "POST",
           url: url,
           data: $("#send_message").serialize(), // serializes the form's elements.
           success: function(data)
           {
			   if(data.trim() == '1')
			   {
				   $('#message_box').val('');
			   }
               // show response from the php script.
           }
         });

   
	
});
function load_messages()
{
	$.ajax({
           type: "POST",
           url: "load_messages.php",
           data: {id: <?php echo $receiver_id ?>}, // serializes the form's elements.
           success: function(data)
           {
			   if(data.trim() != '')
			   {
				   $('#messages').append(data);
			   }
			   
           }
         });
}
setInterval(function(){ 
    load_messages();
}, 3000);

</script>
<?php include_once 'templates/'.C_TEMP.'/footer.php'; ?>

header('location: '.C_URL.'/login.php?redirect_url='.C_URL.'/inbox.php'.$_GET['id']);

<?php
@session_start();
$error = "";

include_once 'include/config.inc.php';
include_once 'include/options.inc.php';
include_once 'include/security.inc.php';
include_once 'include/functions.inc.php';
include_once 'templates/'.C_TEMP.'/config.php';

if(!isset($_SESSION['m']) || $_SESSION['m'] == '')
{
	header('location: '.C_URL.'/login.php?redirect_url='.C_URL.'/inbox.php'.$_GET['id']);
	exit;
}

include_once 'templates/'.C_TEMP.'/header.php';
 ?>

<?php 
    $unsubscribe_token = '';
    $user = [];
    $tmp=mysqli_query($conn,"SELECT id, purposes, gender, country, email, email_subscription FROM ".C_MYSQL_MEMBERS." WHERE id='".$_SESSION['m']."' AND status >= '7'");
        if($tmp) {
            $user=mysqli_fetch_array($tmp);

	        $unsubscribe_token = $user['id'].'-'.$user['gender'].'-'.$user['purposes'].'-'.$user['country'];   
        }
	    
	   
 ?>
<!--<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">-->
<style>
p.msgtext{
	clear: both;
	padding: 10px 5px;
	margin-bottom: 2px;
	cursor: pointer;
	background-color: #f3f3f3;
}
.name_class{   
    float: left;
    font-weight: 600;
    color: #131312;
    margin-right: 20px;
}

.date_class
{
	float: right;
    font-size: 12px;
    color: #adadad;
}
</style>
<br>
<div id="messages" class="col-md-12" style="padding-top: 10px;">
 <div class="panel panel-default">
	   <div class="panel-heading" style=" background-color: <?php echo COLORH ?>"><?php echo $w[585] ?></div>
        <div class="panel-body"  style=" background-color: <?php echo COLOR1 ?>">
   <?php 
   
   if($conn == null) {
       $conn = mysqli_connect(C_HOST,C_USER,C_PASS,C_BASE) or die($w[113]);
   }
   $query = "SELECT pro_messages.*,sender.fname as sender_fname,receiver.fname as receiver_fname,sender.lname as sender_lname,receiver.lname as receiver_lname FROM ".C_MYSQL_MESSAGES." INNER JOIN ".C_MYSQL_MEMBERS." sender ON sender.id=pro_messages.sender_id INNER JOIN ".C_MYSQL_MEMBERS." receiver ON receiver.id=pro_messages.receiver_id WHERE sender_id =".$_SESSION['m']." OR receiver_id=".$_SESSION['m']." ORDER BY `date_added` desc";
            
			 $result = mysqli_query($conn,$query);
             $temp = array();
			 $num = 1;
			 
			 
             while($j = mysqli_fetch_array($result))
			{	
				$name = "";
				$id="";
				if($j['receiver_id'] == $_SESSION['m'])
				{
					    if(!in_array($j['sender_id'], $temp))
						{
						   $temp[] = $j['sender_id'];
						}
						else
							continue;
						$id = $j['sender_id'];
						$name = $j['sender_fname'].' '. $j['sender_lname'];
				}
				elseif($j['sender_id'] == $_SESSION['m'])
				{
					    if(!in_array($j['receiver_id'], $temp))
						{
						   $temp[] = $j['receiver_id'];
						}
						else
							continue;
					$id = $j['receiver_id'];
					$name = $j['receiver_fname'].' '. $j['receiver_lname'];
				}
					
				echo '<p class="msgtext"> <a style="color: black;font-size: 16px;" href="message.php?id='.$id.'">'.$num.') '.$name.''.$j['message'].'</a>'.$j['date_added'].'</p>';	
			    $num++;
			}
			
	if(!empty($user)) {
        $action = $user['email_subscription'] == 1 ? 'unsubscribe': 'subscribe';
  ?>
   
   <a href="<?php echo C_URL ?>/email_subscription.php?token=<?php echo $unsubscribe_token ?>&action=<?php echo $action ?>"><?php echo $user['email_subscription'] == 1 ? 'Unsubscribe': 'Subscribe' ?> to Email Updates</a>
   <?php } ?>
   </div>
</div>
<?php include_once 'templates/'.C_TEMP.'/footer.php'; ?>

printm($str.$sendid);

<?php
include_once 'include/config.inc.php';
include_once 'include/options.inc.php';
include_once 'include/functions.inc.php';
include_once 'include/security.inc.php';
include_once 'templates/'.C_TEMP.'/config.php';
include_once 'templates/'.C_TEMP.'/header.php';

// if(!isset($id)||!isset($code)||!is_numeric($id)||!ereg('^[0-9A-Za-z]',$code)) {
if(!isset($id)||!isset($code)||!is_numeric($id)||!preg_match('/^[0-9A-Za-z]/',$code)) {  
// Code must content only chars and numbers :)
   printm($w[1].'3');
   }
 
/// Check for users with code expired and remove these users
$temp = mysqli_query($conn,"SELECT id FROM ".C_MYSQL_TEMP." WHERE date < DATE_SUB(NOW(), INTERVAL ".C_REG_DAYS." DAY)");
while ($i = mysqli_fetch_array($temp))
{
  $tmp = mysqli_query($conn,"SELECT pic1, pic2, pic3 FROM ".C_MYSQL_MEMBERS." WHERE id='".$i['id']."' and status = '0'");
  while ($j = mysqli_fetch_array($tmp))
  {
    for($k = 1; $k <= 3; $k++) 
  	{
			$tmpm = 'pic'.$k;
     	if (($j[$tmpm] != '') && (is_file(C_PATH.'/members/uploads/'.$j[$tmpm]))) 
			{
		 		@unlink (C_PATH.'/members/uploads/'.$j[$tmpm]);
			}	
    }
 		@mysqli_query($conn,"DELETE FROM ".C_MYSQL_MEMBERS." WHERE id='".$i['id']."' and status = '0'");
	}	
	@mysqli_query($conn,"DELETE FROM ".C_MYSQL_TEMP." WHERE id='".$i['id']."'");
}
/////////////


  
$temp=mysqli_query($conn,"SELECT count(*) as total FROM ".C_MYSQL_TEMP." WHERE id='".$id."' AND code='".$code."' AND date > DATE_SUB(NOW(), INTERVAL ".C_REG_DAYS." DAY)");
$row=mysqli_fetch_array($temp);
$count = $row['total'];
if($count != '0') {
   mysqli_query($conn,"DELETE FROM ".C_MYSQL_TEMP." WHERE id='".$id."' AND code='".$code."'");
   if(C_CHECK_REGISTER == '3') {
      $status='1';
      $str=$w[159];
   } 
   else {
      $status='7';
      $str = $w[46];
   } 
mysqli_query($conn,"UPDATE ".C_MYSQL_MEMBERS." SET status='".$status."' WHERE id='".$id."'");
$result = mysqli_query($conn,'SELECT email, password FROM '.C_MYSQL_MEMBERS.' WHERE id = \''.$id.'\'');
   while($i=mysqli_fetch_array($result) && $status == "7") {
$tm=array(C_SNAME);
$subject=template($w[195],$tm);
switch (C_ID) {
  
  case '2':
    $sendid=$i['email'];
  break;
  default: 
    $sendid=$id;
  break;
  }
  
$tm=array($sendid,'____',C_SNAME);
$message=template($w[588],$tm);
sendmail(C_FROMM,$i['email'],$subject,$message,'text');
}
printm($str.$sendid);
}

else {
     unset($id);
     printm($w[161]);
}
include_once 'templates/'.C_TEMP.'/footer.php';
 ?>

if(!$conn) $conn = mysqli_connect(C_HOST,C_USER,C_PASS,C_BASE) or die($w[113]);

function all_online_users()
{
    if(!$conn) $conn = mysqli_connect(C_HOST,C_USER,C_PASS,C_BASE) or die($w[113]);
    
  $sec = 300;
  //exit;
	if(isset($_SESSION['m']))
	{
		$user = is_numeric($_SESSION['m']) ? $_SESSION['m'] : 0;
		$MyAccess = 0;
       
	}
	else
	{
		$user = 0;
		$MyAccess = -1;
	}
	$ip = ($user == 0) ? ip2int(ip()) : 0;
  mysqli_query($conn,"DELETE FROM ".C_MYSQL_ONLINE_USERS." WHERE (time < DATE_SUB(NOW(), INTERVAL ".$sec." SECOND) AND NOW() > ".$sec.") or time > NOW()");
  $result = @mysqli_query($conn,"SELECT * FROM ".C_MYSQL_ONLINE_USERS);
	$cnt=array();$adduser=1;$addguest=1;$users=0;
	while($result && $i = mysqli_fetch_array($result))
	{
		$cnt[$i['usertype']] = (isset($cnt[$i['usertype']])) ? $cnt[$i['usertype']] + 1 : 1;
		If(($MyAccess >= 0) && ($user == $i['user'])) 
		{
			$adduser=$addguest=0;
		}
		If(($MyAccess < 0) && ($ip == $i['ip'])) 
		{
			$adduser=$addguest=0;
		}
	}
	if($adduser || $addguest)
	{
	    mysqli_query($conn,"INSERT INTO ".C_MYSQL_ONLINE_USERS." VALUES (NOW(),".$user.",'".$MyAccess."','".$ip."')");
		$cnt[$MyAccess] = (isset($cnt[$MyAccess])) ? $cnt[$MyAccess] + 1 : 1;
	}
	$k=0;while(isset($cnt[$k]))
	{
		$users = $cnt[$k] + $users;
		$k++;
	}
	if(isset($cnt['-1'])) define('ONLINE_GUESTS',$cnt['-1']);
	else define('ONLINE_GUESTS','0');
	define('ONLINE_USERS',$users);
}

all_online_users();

$total += count($row[0]);

if (!defined("_COMMON_")) {echo "stop";exit;}
include_once($ld_engine_path."inc_connect.php");
$m_result = mysqli_query($conn,"select new_mails from ".$mysql_table_prefix."users where id=$is_regist") or die("database error<br>".mysqli_error($conn));
if (mysqli_num_rows($m_result))
	list($new_board_messages) = mysqli_fetch_array($m_result, MYSQLI_NUM);
if (!isset($new_board_messages)) $new_board_messages = "0";
mysqli_free_result($m_result);

$m_result = mysqli_query($conn,"select concat(subject,body) from ".$mysql_table_prefix."board where user_id=$is_regist") or die("database error: cannot retrieve mail-messages<br>".mysqli_error($conn));
$total = 0;
while ($row = mysqli_fetch_array($m_result, MYSQLI_NUM))
	$total += count($row[0]); // This line is not working on PHP 8.1

$percentage = round($total / $max_mailbox_size *100);
mysqli_free_result($m_result);

if($message_id == "") {

require_once("inc_common.php");
include($engine_path."users_get_list.php");
set_variable("message_id");
set_variable("send_to");
set_variable("send_to_id");
$send_to_id = intval($send_to_id);
if (!$exists)  {
	$error_text = "$w_no_user";
	include($file_path."designes/".$design."/error_page.php");
	exit;
}

$u_ids = array();
$u_names = array();
$tmp_body = "";
$tmp_subject = "";

$info_message = "";

if($message_id == "") {
	if ($send_to!="") {
		$user_to_search = $send_to;
		include($ld_engine_path."users_search.php");
		if (!count($u_ids)) $info_message = "".str_replace("~",""".htmlspecialchars($send_to).""",$w_search_no_found)."<br>";
	}
	if ($send_to_id!="") {
		include("inc_user_class.php");
		$ttt = $is_regist;
		$is_regist = $send_to_id; #fake again :(
		include($ld_engine_path."users_get_object.php");
		$u_ids[] = $is_regist;
		$is_regist = $ttt;
		$u_names[] = $current_user->nickname;
	}
}
else {
	$board_operation = "reply";
	$id = $message_id;
	include($ld_engine_path."board_process_message.php");
	$u_ids[] = $board_message["from_id"];
	$u_names[] = $board_message["from"];
	$tmp_body =  str_replace("<br>","\n",$board_message["body"]);
	$tmp_body  = "\n\n_______ ".str_replace("~", $board_message["from"], $w_user_wrote)." ______\n$tmp_body";
	$tmp_subject = str_replace("\"",""","Re: ".$board_message["subject"]);
}

include($file_path."designes/".$design."/board_send.php");

if ($error != "") echo "<script>alert('".str_replace("<br>","\\n",str_replace("\n","\\n",str_replace("\r","",str_replace("'","\'",$error_text))))."');</script>";