<?php
/**
 * This source file is part of the open source project
 * ExpressionEngine (https://expressionengine.com)
 *
 * @link      https://expressionengine.com/
 * @copyright Copyright (c) 2003-2022, Packet Tide, LLC (https://www.packettide.com)
 * @license   https://expressionengine.com/license Licensed under Apache License, Version 2.0
 */

/**
 * Core Private Messaging
 */
class EE_Messages
{
    // URL Writing
    public $allegiance = 'cp';				// Side of the divide: cp or user
    public $messages_cp = false;			// CP Object
    public $base_url = '';				// Base URL used throughout
    public $form_url = '';				// For CP Forms, since Rick was a doofus and changed how they work
    public $path = 'member/';		// User Side Path
    public $request = 'inbox';			// User Side Request
    public $cur_id = '';				// User Side ID, if any
    public $theme_class = 'profile_theme';
    public $images_folder = '';				// Location of Forum Images

    // Member Specific
    public $member_id = '';
    public $private_messages = '0';				// Number of unread private messages
    public $block_tracking = 'n';				// Block Sender Tracking

    // Member Group Specific
    public $allow_pm = 'y';				// Allowed to PM?
    public $attach_allowed = 'y';				// Attachments allowed?

    // Private Message Preferences
    public $storage_limit = 60;				// Limit for messages to store per user (does not count deleted)
    public $send_limit = 20;				// Limit for messages sent a day
    public $upload_path = '';				// Upload path for files
    public $attach_maxsize = 250;				// Max size for attachments (KB)
    public $attach_total = 100;				// Maximum amount for all PM attachments (MB)
    public $html_format = 'safe';			// HTML Formatting?
    public $auto_links = 'y';				// Auto convert URLs to links
    public $max_chars = 6000;				// Maximum number of characters in a messages
    public $max_attachments = 1;				// Maximum number of attachments per message

    // User Data Variables
    public $total_messages = '';				// Total Store Messages for User
    public $current_folder = '1';				// If any...
    public $folders = array();			// Folders for User
    public $hide_preview = false;			// Whether to show the Preview of Message
    public $attachments = array();			// Attachments for current message
    public $baddies = array();			// Blocked List; IDs only
    public $goodies = array();			// Buddies List; IDs only
    public $blocked = false;			// Blocked List
    public $buddies = false;			// Buddies List
    public $invalid_name = false;			// Invalid name submitted?

    // Menu Content
    public $menu_items = array();			// Abstracted data for creating menu
    public $menu = '';				// Menu fully formed

    // Processing and Returned Data
    public $title = '';				// Title of Page
    public $crumb = '';				// Crumb text for page
    public $return_data = '';				// Output data
    public $header_javascript = '';				// User Side Header JavaScript
    public $error = '';				// Submission Error
    public $single_parts = array();			// Parts of a page: text, form, images, content
    public $conditionals = array();			// Conditionals
    public $mimes = '';

    // Changeable Class Variables
    public $default_folders = array('Inbox', 'Sent');
    public $max_folders = 10;				// Maximum number of folders per user
    public $per_page = 5;				// Messages on a Folder's Page
    public $graph_width = '300';			// Width of Total Messages Graph
    public $emoticons_per_row = 5;				// Number of Images Per Table Row
    public $delete_expiration = 30;				// Erase deleted messages after X days
    public $disable_emoticons = 'n';				// Disable the showing of emoticons
    public $spellcheck_enabled = true;				// Enabled Spellcheck?

    /** -----------------------------------
    /**  Constructor
    /** -----------------------------------*/
    public function __construct()
    {
        /** -----------------------------------
        /**  A Few Things to Define, Batman
        /** -----------------------------------*/
        $this->member_id = ee()->session->userdata['member_id'];

        $this->allow_pm = self::can_send_pm() ? 'y' : 'n';

        $this->attach_allowed = (ee()->config->item('prv_msg_allow_attachments') == 'y'
            && ee('Permission')->can('attach_in_private_messages')) ? 'y' : 'n';

        $this->storage_limit = (ee('Permission')->isSuperAdmin()) ? 0 : ee()->session->userdata['prv_msg_storage_limit'];
        $this->send_limit = ee()->session->userdata['prv_msg_send_limit'];

        if (! defined('AMP')) {
            define('AMP', '&amp;');
        }
        if (! defined('BR')) {
            define('BR', '<br />');
        }
        if (! defined('NL')) {
            define('NL', "\n");
        }
        if (! defined('NBS')) {
            define('NBS', "&nbsp;");
        }

        $prefs = array('prv_msg_attach_maxsize',
            'prv_msg_attach_total',
            'prv_msg_html_format',
            'prv_msg_auto_links',
            'prv_msg_max_chars',
            'prv_msg_max_attachments'
        );

        for ($i = 0, $t = count($prefs); $i < $t; ++$i) {
            if (false !== ($value = ee()->config->item($prefs[$i]))) {
                $name = str_replace('prv_msg_', '', $prefs[$i]);

                $this->{$name} = $value;
            }
        }

        $this->upload_path = ee()->config->slash_item('prv_msg_upload_path');

        // -----------------------------------
        //  Nearly every page requires this,
        //  so just load it for all of them
        // -----------------------------------

        ee()->lang->loadfile('messages');

        $this->title = ee()->lang->line('private_messages');
        $this->crumb = ee()->lang->line('private_messages');

        $this->images_folder = URL_THEMES . '/asset/img/';
        $this->single_parts['path']['image_url'] = $this->images_folder;

        /** -----------------------------------
        /**  Maintenance
        /** -----------------------------------*/
        srand(time());

        if ((rand() % 100) < 5 && ee()->config->item('prv_msg_enabled') == 'y') {
            $this->maintenance();
        }
    }

    /**
     * Determines if the current user can send private messages, static
     * method so Messages does not have to be instantiated
     *
     * @return bool
     */
    public static function can_send_pm()
    {
        if (ee()->config->item('prv_msg_enabled') != 'y' or
                (! ee('Permission')->can('send_private_messages') &&
                    ! ee('Permission')->isSuperAdmin()) or
            ee()->session->userdata('accept_messages') != 'y') {
            return false;
        }

        return true;
    }

    /** -----------------------------------
    /**  Determine request
    /** -----------------------------------*/
    public function _determine_request()
    {
        if ($this->allegiance == 'cp') {
            $this->base_url = BASE . AMP . 'C=myaccount' . AMP . 'M=messages' . AMP . 'P=';
            $this->form_url = 'C=myaccount' . AMP . 'M=messages' . AMP . 'P=';
            $this->request = (ee()->input->get_post('P') !== false) ? ee()->input->get_post('P') : 'inbox';
        } else {
            $this->form_url = $this->base_url;
        }
    }

    /** -----------------------------------
    /**  Create Path
    /** -----------------------------------*/
    public function _create_path($uri = '', $hidden = '')
    {
        if ($this->allegiance == 'user') {
            return reduce_double_slashes($this->base_url . '/' . $uri);
        } else {
            return reduce_double_slashes($this->base_url . '/' . $uri . $hidden);
        }
    }

    // -----------------------------------
    //  Process Page :
    //  Convert and Template into Content
    // -----------------------------------

    public function _process_template($template, $data = '')
    {
        /** -------------------------------
        /**  Process Conditionals
        /** -------------------------------*/
        if (count($this->conditionals) > 0) {
            foreach ($this->conditionals as $key => $value) {
                if ($value == 'y') {
                    $template = preg_replace("/\{if\s+" . $key . "\}(.+?)\{\/if\}/si", "\\1", $template);
                    $template = preg_replace("/\{if\s+not_" . $key . "\}(.+?)\{\/if\}/si", '', $template);
                } else {
                    $template = preg_replace("/\{if\s+" . $key . "\}.+?\{\/if\}/si", '', $template);
                    $template = preg_replace("/\{if\s+not_" . $key . "\}(.+?)\{\/if\}/si", "\\1", $template);
                }
            }
        }

        /** --------------------------
        /**  Process any sent data
        /** --------------------------*/
        if (is_array($data) && count($data) > 0) {
            foreach ($data as $key => $value) {
                $value = ee()->functions->encode_ee_tags($value, true);
                $template = str_replace(LD . $key . RD, $value, $template);
            }
        }

        /** -----------------------------
        /**  Process any universal data
        /** -----------------------------*/
        if (count($this->single_parts) > 0) {
            foreach ($this->single_parts as $key => $value) {
                if (is_array($value) && count($value) > 0) {
                    foreach ($value as $key2 => $value2) {
                        if (is_array($value2) && count($value2) > 0) {
                            foreach ($value2 as $key3 => $value3) {
                                $template = str_replace(
                                    LD . $key . ':' . $key2 . ':' . $key3 . RD,
                                    $value3,
                                    $template
                                );
                            }
                        } else {
                            $user_input = array('subject', 'body', 'menu_items', 'current_folders', 'folder_name');

                            if ($key == 'input' && $key2 != 'body' && $key2 != 'folder_name') {
                                $value2 = htmlspecialchars($value2, ENT_QUOTES);
                            }

                            if (in_array($key2, $user_input)) {
                                $value2 = ee()->functions->encode_ee_tags($value2, true);
                            }

                            $template = str_replace(LD . $key . ':' . $key2 . RD, $value2, $template);
                        }
                    }
                } elseif (! is_array($value)) {
                    $user_input = array('member_description');

                    if (in_array($key, $user_input)) {
                        $value = ee()->functions->encode_ee_tags($value, true);
                    } elseif ($key != 'title' && ! stristr($value, '<option')) {
                        // {title} is link title for message menu
                        $value = htmlspecialchars($value, ENT_QUOTES);
                    }

                    $template = str_replace(LD . $key . RD, $value, $template);
                }
            }
        }

        /** -------------------------------------
        /**  Finally, process all language text
        /** -------------------------------------*/
        if (isset(ee()->lang->language) && is_array(ee()->lang->language) && count(ee()->lang->language) > 0) {
            foreach (ee()->lang->language as $key => $value) {
                $template = str_replace(LD . 'lang:' . $key . RD, $value, $template);
            }
        }

        return $template;
    }

    /** -----------------------------------
    /**  Manage Request
    /** -----------------------------------*/
    public function manager()
    {
        if ($this->allow_pm != 'y') {
            return;
        }

        $this->_determine_request();

        if (count($this->folders) == 0) {
            $this->fetch_folders();
        }

        if ($this->disable_emoticons == 'y') {
            ee()->config->set_item('enable_emoticons', 'n');
        }

        /** -----------------------------------
        /**  Call request
        /** -----------------------------------*/
        if (method_exists($this, $this->request)) {
            $this->{$this->request}();
        } else {
            $this->inbox();
        }

        /* -----------------------------------
        /*  Member Module - Fixeroo
        /*  - Rick has some legacy code in the member module that converts
        /*  certain path variables automatically.  We, however, do not want that
        /*  in our most precious Private Messages, and so we do a bit of conversion
        /* -----------------------------------*/

        $this->return_data = preg_replace("/" . LD . "\s*path=(.*?)" . RD . "/", '&#123;path=\\1}', $this->return_data);
        $this->return_data = preg_replace("#" . LD . "\s*(profile_path\s*=.*?)" . RD . "#", '&#123;\\1}', $this->return_data);

        /** -----------------------------------
        /**  Name to ID in Form Switch - Fixeroo
        /** -----------------------------------*/
        $this->return_data = str_replace('opener.document.submit_message.', "opener.document.getElementById('submit_message').", $this->return_data);
    }

    /** -----------------------------------
    /**  Fetch Buddy and Block Lists
    /** -----------------------------------*/
    public function fetch_lists($which = '')
    {
        if ($which == 'buddy') {
            $this->goodies = array();
            $this->buddies = array();
        } elseif ($which == 'blocked') {
            $this->baddies = array();
            $this->blocked = array();
        } else {
            $this->goodies = array();
            $this->buddies = array();
            $this->baddies = array();
            $this->blocked = array();
        }

        $extra = ($which != '') ? "AND l.listed_type = '{$which}'" : '';

        $query = ee()->db->query("SELECT l.*, m.username, m.screen_name, m.member_id
							 FROM exp_message_listed l, exp_members m
							 WHERE l.listed_member = m.member_id
							 AND l.member_id = '{$this->member_id}'
							 $extra");

        if ($query->num_rows() > 0) {
            foreach ($query->result_array() as $row) {
                if (empty($row['username'])) {
                    continue;
                }

                if ($row['listed_type'] == 'buddy') {
                    $this->buddies[] = array($row['listed_member'], $row['username'], $row['screen_name'], ee('Security/XSS')->clean($row['listed_description']), $row['listed_id'], $row['member_id']);
                    $this->goodies[] = $row['listed_member'];
                } else {
                    $this->blocked[] = array($row['listed_member'], $row['username'], $row['screen_name'], ee('Security/XSS')->clean($row['listed_description']), $row['listed_id'], $row['member_id']);
                    $this->baddies[] = $row['listed_member'];
                }
            }
        }
    }

    /** -----------------------------------
    /**  Determine Folders for this User
    /** -----------------------------------*/
    public function fetch_folders()
    {
        $this->folders = array();

        $query = ee()->db->query("SELECT * FROM exp_message_folders WHERE member_id = '{$this->member_id}'");

        if ($query->num_rows() == 0) {
            ee()->db->query(ee()->db->insert_string('exp_message_folders', array('member_id' => $this->member_id)));

            $this->folders['1'] = array($this->default_folders['0'], '0');
            $this->folders['2'] = array($this->default_folders['1'], '0');
        } else {
            $required = array(
                '1' => array(ee('Format')->make('Text', $query->row('folder1_name'))->attributeEscape(), '0'),
                '2' => array(ee('Format')->make('Text', $query->row('folder2_name'))->attributeEscape(), '0')
            );

            for ($i = 3; $i <= $this->max_folders; $i++) {
                $this->folders[$i] = ee('Format')->make('Text', $query->row('folder' . $i . '_name'))->attributeEscape();
            }

            asort($this->folders);

            foreach ($this->folders as $key => $value) {
                $this->folders[$key] = array($value, '0');
            }

            $this->folders = $required + $this->folders;

            $results = ee()->db->query("SELECT COUNT(*) AS count, message_folder FROM exp_message_copies
									WHERE recipient_id = '{$this->member_id}'
									AND message_deleted = 'n'
									GROUP BY message_folder");

            if ($results->num_rows() > 0) {
                foreach ($results->result_array() as $row) {
                    $this->folders[$row['message_folder']]['1'] = $row['count'];
                }
            }
        }
    }

    /** -----------------------------------
    /**  Edit Folders
    /** -----------------------------------*/
    public function folders()
    {
        $template = $this->retrieve_template('message_edit_folders');
        $rows = $this->retrieve_template('message_edit_folders_row');

        $form_details = array('action' => $this->base_url . 'edit_folders',
            'id' => 'edit_folders',
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['edit_folders'] = ee()->functions->form_declaration($form_details);
        $this->single_parts['include']['current_folders'] = '';
        $this->single_parts['include']['new_folder'] = '';

        if (! isset($this->single_parts['include']['success_message'])) {
            $this->single_parts['include']['success_message'] = '';
        }

        /** -----------------------------------------
        /**  Create Folder Rows
        /** -----------------------------------------*/
        $t = 1;

        foreach ($this->folders as $key => $value) {
            if ($value['0'] == '') {
                continue;
            }

            $t++;
            $this->single_parts['lang']['required'] = ($key < 3) ? ee()->lang->line('folder_required') : '';
            $this->single_parts['input']['folder_name'] = ee('Security/XSS')->clean($value['0']);
            $this->single_parts['input']['folder_id'] = $key;
            $this->single_parts['style'] = ($t % 2) ? 'tableCellOne' : 'tableCellTwo';

            $this->single_parts['include']['current_folders'] .= $this->_process_template($rows);
        }

        /** -----------------------------------------
        /**  Create New Folder Row, If Allowed
        /** -----------------------------------------*/
        if ($t <= $this->max_folders) {
            $t++;
            $this->single_parts['lang']['required'] = '';
            $this->single_parts['input']['folder_name'] = '';
            $this->single_parts['input']['folder_id'] = 'new';
            $this->single_parts['style'] = ($t % 2) ? 'tableCellOne' : 'tableCellTwo';

            $this->single_parts['include']['new_folder'] = $this->_process_template($rows);
        }

        /** ----------------------------------------
        /**  Return the Folder's Contents
        /** ----------------------------------------*/
        $this->title = ee()->lang->line('edit_folders');
        $this->crumb = ee()->lang->line('edit_folders');
        $this->return_data = $this->_process_template($template);
    }

    /** -----------------------------------
    /**  Edit Folders
    /** -----------------------------------*/
    public function edit_folders()
    {
        /** -----------------------------------
        /**  Check Required
        /** -----------------------------------*/
        if (! isset($_POST['folder_1']) or ! isset($_POST['folder_2']) or $_POST['folder_1'] == '' or $_POST['folder_2'] == '') {
            return $this->_error_page('missing_required_field');
        }

        /** -----------------------------------
        /**  Get Our Modified Data
        /** -----------------------------------*/
        for ($i = 1, $data = array(); $i <= $this->max_folders; $i++) {
            if (! isset($_POST['folder_' . $i]) or $_POST['folder_' . $i] == '') {
                $data['folder' . $i . '_name'] = '';
                ee()->db->query("UPDATE exp_message_copies SET message_deleted = 'y'
							WHERE recipient_id = '{$this->member_id}' AND message_folder = '{$i}'");

                if (! isset($empty)) {
                    $empty = 'folder' . $i . '_name';
                }
            } else {
                $data['folder' . $i . '_name'] = ee()->input->post('folder_' . $i, true);
            }
        }

        /** -----------------------------------
        /**  Get Our New Folder
        /** -----------------------------------*/
        if (isset($_POST['folder_new']) && $_POST['folder_new'] != '' && isset($empty)) {
            $data[$empty] = ee()->input->post('folder_new', true);
        }

        ee()->db->query(ee()->db->update_string('exp_message_folders', $data, "member_id = '{$this->member_id}'"));

        $this->fetch_folders();

        /** -----------------------------------
        /**  Success Message
        /** -----------------------------------*/
        $this->single_parts['lang']['message'] = ee()->lang->line('folders_updated');
        $this->single_parts['include']['success_message'] = $this->_process_template($this->retrieve_template('message_success'));

        /** ----------------------------------------
        /**  Return us back to Oz
        /** ----------------------------------------*/

        return $this->folders();
    }

    /** -----------------------------------
    /**  Abstracted Default Menu
    /** -----------------------------------*/
    public function abstract_menu()
    {
        /** ------------------------------
        /**  Bulletin Board
        /** ------------------------------*/
        $style = (ee()->session->userdata['last_view_bulletins'] <= ee()->session->userdata['last_bulletin_date']) ? 'defaultBold' : '';

        $this->menu_items['single_items']['bulletin_board'] = array('text' => ee()->lang->line('bulletin_board'),
            'link' => $this->_create_path('bulletin_board'),
            'image' => '',
            'style' => $style);

        /** ------------------------
        /**  Compose New Message
        /** ------------------------*/
        $this->menu_items['single_items']['compose_message'] = array('text' => ee()->lang->line('compose_message'),
            'link' => $this->_create_path('compose'),
            'image' => '',
            'style' => 'defaultBold');

        /** ------------------------
        /**  Drafts Folder
        /** ------------------------*/
        $query = ee()->db->query("SELECT COUNT(*) AS count FROM exp_message_data
							 WHERE sender_id = '{$this->member_id}'
							 AND message_status = 'draft'");

        if ($query->row('count') > 0) {
            $this->menu_items['repeat_items']['folders'][] = array('text' => ee()->lang->line('draft_messages') . ' (' . $query->row('count') . ')',
                'link' => $this->_create_path('drafts'),
                'image' => '',
                'style' => '');
        }

        /** -------------------------------
        /**  User Folders
        /** -------------------------------*/
        if (count($this->folders) == 0) {
            $this->fetch_folders();
        }

        foreach ($this->folders as $key => $value) {
            if ($value['0'] != '') {
                if ($this->allegiance == 'user') {
                    $url = $this->base_url . '/' . 'view_folder/' . $key . '/';
                } else {
                    $url = $this->base_url . 'view_folder' . AMP . 'folder=' . $key;
                }

                $this->menu_items['repeat_items']['folders'][] = array('text' => ' - ' . $value['0'] . ' (' . $value['1'] . ')',
                    'link' => $url,
                    'image' => '',
                    'style' => '');
            }
        }

        /** ------------------------
        /**  Deleted Folder
        /** ------------------------*/
        $query = ee()->db->query("SELECT COUNT(*) AS count FROM exp_message_copies
							 WHERE recipient_id = '{$this->member_id}'
							 AND message_deleted = 'y'");

        $this->menu_items['repeat_items']['folders'][] = array('text' => ee()->lang->line('deleted_messages') . ' (' . $query->row('count') . ')',
            'link' => $this->_create_path('deleted'),
            'image' => '',
            'style' => '');

        /* ------------------------
        // Message Tracking
        // ------------------------

        $this->menu_items['single_items']['track_messages'] = array('text' => ee()->lang->line('track_messages'),
                                                                    'link' => $this->_create_path('track'),
                                                                    'image' => '',
                                                                    'style' => '');
        */
        /** ------------------------
        /**  Edit Message Folders
        /** ------------------------*/
        $this->menu_items['single_items']['edit_folders'] = array('text' => ee()->lang->line('edit_folders'),
            'link' => $this->_create_path('folders'),
            'image' => '',
            'style' => '');

        /** ------------------------
        /**  Buddy List
        /** ------------------------*/
        $this->menu_items['single_items']['buddy_list'] = array('text' => ee()->lang->line('buddy_list'),
            'link' => $this->_create_path('buddies'),
            'image' => '',
            'style' => '');

        /** ------------------------
        /**  Block List
        /** ------------------------*/
        $this->menu_items['single_items']['block_list'] = array('text' => ee()->lang->line('blocked_list'),
            'link' => $this->_create_path('blocked'),
            'image' => '',
            'style' => '');
    }

    public function menu_array()
    {
        if ($this->allow_pm == 'n') {
            return;
        }

        $this->_determine_request();
        $this->abstract_menu();

        return $this->menu_items;
    }

    /** -----------------------------------
    /**  Create Messages Menu
    /** -----------------------------------*/
    public function create_menu()
    {
        if ($this->allow_pm == 'n') {
            return;
        }

        $this->_determine_request();

        $this->abstract_menu();

        /** --------------------------------
        /**  Open/Close JavaScript
        /** --------------------------------*/
        if (ee()->input->cookie('myaccount_messages') !== false && ee()->input->cookie('myaccount_messages') == 'on') {
            $text = '[-]';
            $hidden_style = '';
        } else {
            $text = '[+]';
            $hidden_style = 'display: none; padding:0;';
        }

        $hidden_link = '<a href="javascript:void(0);" id="extLink1" class="altLinks" onclick="showHide(1,this);return false;">' . $text . '</a>';

        /** --------------------------------
        /**  Create Menu
        /** --------------------------------*/
        $map = array('bulletin_board', 'compose_message', 'folders', 'edit_folders', 'buddy_list', 'block_list');

        $template = $this->retrieve_template('message_menu');
        $rows = $this->retrieve_template('message_menu_rows');

        $this->single_parts['include']['hide_menu_style'] = $hidden_style;
        $this->single_parts['include']['hide_menu_link'] = $hidden_link;
        $this->single_parts['include']['hide_menu_js'] = $this->showhide_js();
        $this->single_parts['include']['menu_items'] = '';

        foreach ($map as $item) {
            if (isset($this->menu_items['repeat_items'][$item])) {
                foreach ($this->menu_items['repeat_items'][$item] as $item_member) {
                    $this->single_parts['title'] = $item_member['text'];
                    $this->single_parts['link'] = $item_member['link'];
                    $this->single_parts['include']['menu_items'] .= $this->_process_template($rows);
                }
            } else {
                $this->single_parts['title'] = $this->menu_items['single_items'][$item]['text'];
                $this->single_parts['link'] = $this->menu_items['single_items'][$item]['link'];
                $this->single_parts['include']['menu_items'] .= $this->_process_template($rows);
            }
        }

        $this->menu = $this->_process_template($template);
    }

    // -----------------------------------
    //  Inbox
    //  This function is kind of superfluous, but I find it comforting
    //  to know that there is an inbox function for a messaging system.
    //  Besides, it makes it a tad easier to understand certain parts
    //  of the code to have this function called opposed to what is
    //  really being calling. That is all, move along now...
    // -----------------------------------

    public function inbox()
    {
        $this->view_folder('1');
    }

    /** -----------------------------------
    /**  Deleted Messages
    /** -----------------------------------*/
    public function deleted()
    {
        $this->view_folder('0');
    }

    /** -----------------------------------
    /**  View Folder Contents
    /** -----------------------------------*/
    public function drafts()
    {
        $this->single_parts['lang']['folder_id'] = '1';
        $this->single_parts['lang']['folder_name'] = ee()->lang->line('draft_messages');

        $this->conditionals['drafts_folder'] = 'y';
        $this->conditionals['sent_folder'] = 'n';
        $this->conditionals['trash_folder'] = 'n';
        $this->conditionals['regular_folder'] = 'n';

        /** ---------------------------------------
        /**  Retrieve Folder Contents Query
        /** ---------------------------------------*/
        $dql = "SELECT
				exp_message_data.sender_id,
				exp_message_data.message_date,
				exp_message_data.message_id,
				exp_message_data.message_subject,
				exp_message_data.message_recipients,
				exp_message_data.message_cc,
				exp_message_data.message_attachments,
				exp_members.screen_name as sender,
				exp_members.username as sender_username ";

        $sql = "FROM exp_message_data
				LEFT JOIN exp_members ON exp_members.member_id = exp_message_data.sender_id
				WHERE exp_message_data.message_status = 'draft'
				AND exp_message_data.sender_id = '{$this->member_id}'
				ORDER BY exp_message_data.message_date ";

        /** ----------------------------------------
        /**  Run "count" query for pagination
        /** ----------------------------------------*/
        $query = ee()->db->query("SELECT COUNT(exp_message_data.message_id) AS count " . $sql);

        /** ----------------------------------------
        /**  Handle Pagination
        /** ----------------------------------------*/
        $template = $this->retrieve_template('message_folder');

        // Check to see if the old style pagination exists
        // @deprecated 2.8
        if (stripos($template, LD . 'if paginate' . RD) !== false) {
            $template = preg_replace("/{if paginate}(.*?){\/if}/uis", "{paginate}$1{/paginate}", $template);
            ee()->load->library('logger');
            ee()->logger->developer('{if paginate} has been deprecated, use normal {paginate} tags in your message folder template.', true, 604800);
        }
        if (stripos($template, LD . 'include:pagination_link' . RD) !== false) {
            $template = str_replace('{include:pagination_link}', '{pagination_links}', $template);
            ee()->load->library('logger');
            ee()->logger->developer('{include:pagination_link} has been deprecated, use the {pagination_links} tag in your message folder template.', true, 604800);
        }

        // Load up pagination and start parsing
        ee()->load->library('pagination');
        $pagination = ee()->pagination->create();
        $pagination->position = 'inline';
        $template = $pagination->prepare($template);

        if ($query->row('count') > $this->per_page) {
            $pagination->build($query->row('count'), $this->per_page);
            $sql .= " LIMIT " . $pagination->offset . ", " . $pagination->per_page;
        }

        /** ----------------------------------------
        /**  If No Messages, we say so.
        /** ----------------------------------------*/
        if ($query->row('count') == 0) {
            $this->title = ee()->lang->line('draft_messages');
            $this->crumb = ee()->lang->line('draft_messages');

            $this->single_parts['include']['folder_rows'] = $this->retrieve_template('message_no_folder_rows');
            $this->single_parts['form']['form_declaration']['modify_messages'] = '';

            return $this->return_data = $this->folder_wrapper(
                $pagination->render($template),
                ($folder_id == '0') ? 'n' : 'y'
            );
        }

        /** ----------------------------------------
        /**  Retrieve Folder Contents
        /** ----------------------------------------*/
        $folder_rows_template = $this->retrieve_template('message_folder_rows');
        $r = '';
        $i = 0;
        $censor = bool_config_item('enable_censoring');

        $query = ee()->db->query($dql . $sql);

        foreach ($query->result_array() as $row) {
            ++$i;
            $data = $row;
            $data['msg_id'] = 'd' . $row['message_id'];
            $data['message_date'] = ee()->localize->human_time($data['message_date']);
            $data['style'] = ($i % 2) ? 'tableCellTwo' : 'tableCellOne';
            $data['message_subject'] = ($censor === false) ? $data['message_subject'] : ee('Format')->make('Text', $data['message_subject'])->censor();

            if ($this->allegiance == 'user') {
                $data['message_url'] = $this->base_url . 'compose/' . $row['message_id'] . '/';
            } else {
                $data['message_url'] = $this->base_url . 'compose' . AMP . 'msg=' . $row['message_id'];
            }

            $data['message_status'] = '';

            // This Requires Extra Queries and Processing
            // So We Only Do It When Those Variables Are Found

            if (stristr($folder_rows_template, '{recipients}') !== false) {
                $data['recipients'] = htmlspecialchars($this->convert_recipients($row['message_recipients']), ENT_QUOTES);
            }

            if (stristr($folder_rows_template, '{cc}') !== false) {
                $data['cc'] = htmlspecialchars($this->convert_recipients($row['message_cc']), ENT_QUOTES);
            }

            $r .= $this->_process_template($folder_rows_template, $data);
        }

        $this->single_parts['include']['folder_rows'] = $r;

        /** ----------------------------------------
        /**  Return the Folder's Contents
        /** ----------------------------------------*/
        $this->title = ee()->lang->line('draft_messages');
        $this->crumb = ee()->lang->line('draft_messages');

        $template = $pagination->render($template);
        $this->return_data = $this->folder_wrapper($template, 'y', 'n', 'n');
    }

    /** -----------------------------------
    /**  View Folder Contents
    /** -----------------------------------*/
    public function view_folder($folder_id = '')
    {
        // ---------------------------------
        // Find Requested Folder ID
        // ee()->uri->query_string - User
        // ee()->input->get_post('folder') - CP
        // ---------------------------------

        if ($folder_id == '') {
            if ($this->allegiance == 'user') {
                // Unknown, probably will have to do something similar to
                // the list of members where we have to create
                // a pseudo-query string in one of the URI segments
                // folder_pagenum : 1_1

                if ($this->cur_id == '') {
                    $folder_id = 1;
                } else {
                    $x = explode('_', $this->cur_id);

                    $folder_id = (! is_numeric($x['0'])) ? 1 : $x['0'];
                }
            } else {
                $folder_id = (ee()->input->get_post('folder') === false) ? '1' : ee()->input->get_post('folder');
            }
        }

        if (! is_numeric($folder_id) or $folder_id > $this->max_folders) {
            $folder_id = '1';
        }

        /** ---------------------------------------
        /**  Retrieve Folder Name for User
        /** ---------------------------------------*/
        if ($folder_id == '0') {
            $folder_name = ee()->lang->line('deleted_messages');
        } elseif (! isset($this->folders[$folder_id]['0']) or $this->folders[$folder_id]['0'] == '') {
            if ($this->allegiance == 'cp') {
                show_error($this->lang->line('unauthorized_access'));
            } else {
                return ee()->output->show_user_error('general', array(ee()->lang->line('not_authorized')));
            }
        } else {
            $folder_name = $this->folders[$folder_id]['0'];
        }

        $this->single_parts['lang']['folder_name'] = ee()->lang->line('messages_folder') . ' - ' . $folder_name;
        $this->single_parts['lang']['folder_id'] = $folder_id;
        $this->current_folder = $folder_id;

        /** -----------------------------------
        /**  Folder Conditionals
        /** -----------------------------------*/
        $this->conditionals['drafts_folder'] = 'n';
        $this->conditionals['sent_folder'] = 'n';
        $this->conditionals['trash_folder'] = 'n';
        $this->conditionals['regular_folder'] = 'n';

        if ($folder_id == '0') {
            $this->conditionals['trash_folder'] = 'y';
        } elseif ($folder_id == '2') {
            $this->conditionals['sent_folder'] = 'y';
        } else {
            $this->conditionals['regular_folder'] = 'y';
        }

        /** ---------------------------------------
        /**  Retrieve Folder Contents Query
        /** ---------------------------------------*/
        $dql = "SELECT
				exp_message_copies.message_status,
				exp_message_copies.message_id,
				exp_message_copies.message_read,
				exp_message_copies.copy_id as msg_id,
				exp_message_data.sender_id,
				exp_message_data.message_date,
				exp_message_data.message_subject,
				exp_message_data.message_recipients,
				exp_message_data.message_cc,
				exp_message_data.message_attachments,
				exp_members.screen_name as sender,
				exp_members.username as sender_username ";

        $sql = "FROM exp_message_copies
				LEFT JOIN exp_message_data ON exp_message_data.message_id = exp_message_copies.message_id
				LEFT JOIN exp_members ON exp_members.member_id = exp_message_copies.sender_id
				WHERE exp_message_copies.recipient_id = '{$this->member_id}' ";

        if ($folder_id == '0') {
            $sql .= "AND exp_message_copies.message_deleted = 'y' ";
        } else {
            $sql .= "AND exp_message_copies.message_folder = '{$folder_id}'
					 AND exp_message_copies.message_deleted = 'n' ";
        }

        $sql .= "AND exp_message_data.message_status = 'sent'
				 ORDER BY exp_message_data.message_date desc";

        /** ----------------------------------------
        /**  Run "count" query for pagination
        /** ----------------------------------------*/
        $query = ee()->db->query("SELECT COUNT(exp_message_copies.copy_id) AS count " . $sql);

        /** ----------------------------------------
        /**  Handle Pagination
        /** ----------------------------------------*/
        $template = $this->retrieve_template('message_folder');

        // Check to see if the old style pagination exists
        // @deprecated 2.8
        if (stripos($template, LD . 'if paginate' . RD) !== false) {
            $template = preg_replace("/{if paginate}(.*?){\/if}/uis", "{paginate}$1{/paginate}", $template);
            ee()->load->library('logger');
            ee()->logger->developer('{if paginate} has been deprecated, use normal {paginate} tags in your message folder template.', true, 604800);
        }
        if (stripos($template, LD . 'include:pagination_link' . RD) !== false) {
            $template = str_replace('{include:pagination_link}', '{pagination_links}', $template);
            ee()->load->library('logger');
            ee()->logger->developer('{include:pagination_link} has been deprecated, use the {pagination_links} tag in your message folder template.', true, 604800);
        }

        // Load up pagination and start parsing
        ee()->load->library('pagination');
        $pagination = ee()->pagination->create();
        $pagination->position = 'inline';
        $template = $pagination->prepare($template);

        if ($query->row('count') > $this->per_page) {
            $pagination->build($query->row('count'), $this->per_page);
            $sql .= " LIMIT " . $pagination->offset . ", " . $pagination->per_page;
        }

        /** ----------------------------------------
        /**  If No Messages, we say so.
        /** ----------------------------------------*/
        if ($query->row('count') == 0) {
            $this->title = $folder_name;
            $this->crumb = $folder_name;

            $this->single_parts['include']['folder_rows'] = $this->retrieve_template('message_no_folder_rows');
            $this->single_parts['form']['form_declaration']['modify_messages'] = '';

            return $this->return_data = $this->folder_wrapper(
                $pagination->render($template),
                ($folder_id == '0') ? 'n' : 'y'
            );
        }

        /** ----------------------------------------
        /**  Retrieve Folder Contents
        /** ----------------------------------------*/
        $message_ids = array();
        $folder_rows_template = $this->retrieve_template('message_folder_rows');
        $i = 0;
        $r = '';
        $censor = bool_config_item('enable_censoring');

        $query = ee()->db->query($dql . $sql);

        foreach ($query->result_array() as $row) {
            $i++;
            $data = $row;
            $message_ids[] = $row['message_id'];

            $data['message_subject'] = htmlentities($data['message_subject'], ENT_QUOTES, 'UTF-8');
            $data['msg_id'] = ($row['message_read'] == 'n') ? 'u' . $row['msg_id'] : $row['msg_id'];
            $data['message_date'] = ee()->localize->human_time($data['message_date']);
            $data['style'] = ($i % 2) ? 'tableCellTwo' : 'tableCellOne';
            $data['message_subject'] = ($censor === false) ? $data['message_subject'] : ee('Format')->make('Text', $data['message_subject'])->censor();

            if ($this->allegiance == 'user') {
                $data['message_url'] = $this->base_url . 'view_message/' . $row['msg_id'] . '/';
            } else {
                $data['message_url'] = $this->base_url . 'view_message' . AMP . 'msg=' . $row['msg_id'];
            }

            // --------------------------------
            //  Message Status Entities:
            //  &bull; - unread
            //  &rarr; - forwarded
            //  &crarr; - Reply
            // --------------------------------

            if ($row['message_status'] == 'replied') {
                $data['message_status'] = '&crarr;';
            } elseif ($row['message_status'] == 'forwarded') {
                $data['message_status'] = '&rarr;';
            } elseif ($row['message_read'] == 'y') {
                $data['message_status'] = '';
            } elseif ($row['message_read'] == 'n') {
                $data['message_status'] = '&bull;';
            }

            // This Requires Extra Queries and Processing
            // So We Only Do It When Those Variables Are Found

            if (stristr($folder_rows_template, '{recipients}') !== false) {
                $data['recipients'] = htmlspecialchars($this->convert_recipients($row['message_recipients']), ENT_QUOTES);
            }

            if (stristr($folder_rows_template, '{cc}') !== false) {
                $data['cc'] = htmlspecialchars($this->convert_recipients($row['message_cc']), ENT_QUOTES);
            }

            $r .= $this->_process_template($folder_rows_template, $data);
        }

        $this->single_parts['include']['folder_rows'] = $r;

        /** ----------------------------------------
        /**  If Displayed, Messages are Received (not read)
        /** ----------------------------------------*/
        if (count($message_ids) > 0 && $this->block_tracking == 'n') {
            ee()->db->query("UPDATE exp_message_copies SET message_received = 'y'
						WHERE recipient_id = '{$this->member_id}'
						AND message_id IN ('" . implode("','", $message_ids) . "')");
        }

        /** ----------------------------------------
        /**  Return the Folder's Contents
        /** ----------------------------------------*/
        $this->title = $folder_name;
        $this->crumb = $folder_name;

        $this->return_data = $this->folder_wrapper(
            $pagination->render($template),
            ($folder_id == '0') ? 'n' : 'y'
        );
    }

    /** ----------------------------------------
    /**  Wrapper for a Folder and its Contents
    /** ----------------------------------------*/
    public function folder_wrapper($folder_template, $deleted = 'y', $moved = 'y', $copied = 'y')
    {
        $this->folders_pulldown();

        $this->single_parts['include']['hidden_js'] = $this->hidden_js();
        $this->single_parts['include']['toggle_js'] = $this->toggle_js();
        $this->single_parts['path']['compose_message'] = $this->_create_path('compose');
        $this->single_parts['path']['erase_messages'] = $this->_create_path('erase');

        $details = array(
            'hidden_fields' => array('this_folder' => $this->single_parts['lang']['folder_id'], 'daction' => ''),
            'action' => $this->_create_path('modify_messages'),
            'id' => 'target',
            'enctype' => 'multi',
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['modify_messages'] = ee()->functions->form_declaration($details);

        /** ---------------------------------
        /**  Move, Copy, Delete Buttons
        /** ---------------------------------*/
        $this->_buttons($deleted, $moved, $copied);

        /** -------------------------------
        /**  Storage Graph
        /** -------------------------------*/
        if (! isset($this->single_parts['image']['messages_graph'])) {
            $this->storage_graph();
        }

        return $this->_process_template($folder_template);
    }

    /** ----------------------------------------
    /**  Buttons for Various Pages
    /** ----------------------------------------*/
    public function _buttons($deleted = 'y', $moved = 'y', $copied = 'y')
    {
        $style = 'buttons';

        /** ---------------------------------
        /**  Move, Copy, Delete Buttons
        /** ---------------------------------*/
        if ($deleted == 'n') {
            $this->single_parts['form']['delete_button'] = '';
        } else {
            $this->single_parts['form']['delete_button'] = "<button type='submit' id='delete' name='delete' value='delete' " .
                                                            "class='{$style}' title='{lang:delete_selected}' " .
                                                            "onclick='dynamic_action(\"delete\");'>" .
                                                            "{lang:messages_delete}</button> ";
        }

        if ($moved == 'n') {
            $this->single_parts['form']['move_button'] = '';
        } else {
            $this->single_parts['form']['move_button'] = "<button type='submit' id='move' name='move' value='move' " .
                                                          "class='{$style}' title='{lang:move_selected}' " .
                                                          "onclick='dynamic_move();return false;'>" .
                                                          "{lang:messages_move}</button>" . NBS . NBS;
        }

        if ($copied == 'n') {
            $this->single_parts['form']['copy_button'] = '';
        } else {
            $this->single_parts['form']['copy_button'] = "<button type='submit' id='copy' name='copy' value='copy' " .
                                                          "class='{$style}' title='{lang:copy_selected}' " .
                                                          "onclick='dynamic_copy();return false;'>" .
                                                          "{lang:messages_copy}</button>" . NBS . NBS;
        }

        $this->single_parts['form']['forward_button'] = "<button type='submit' id='forward' name='forward' value='forward' " .
                                                         "class='{$style}' title='{lang:messages_forward}' " .
                                                         "onclick='dynamic_action(\"forward\");'>" .
                                                         "{lang:messages_forward}</button>" . NBS . NBS;

        $this->single_parts['form']['reply_button'] = "<button type='submit' id='reply' name='reply' value='reply' " .
                                                          "class='{$style}' title='{lang:messages_reply}' " .
                                                          "onclick='dynamic_action(\"reply\");'>" .
                                                          "{lang:messages_reply}</button>" . NBS . NBS;

        $this->single_parts['form']['reply_all_button'] = "<button type='submit' id='reply_all' name='reply_all' value='reply_all' " .
                                                          "class='{$style}' title='{lang:messages_reply_all}' " .
                                                          "onclick='dynamic_action(\"reply_all\");'>" .
                                                          "{lang:messages_reply_all}</button>" . NBS . NBS;

        $this->single_parts['form']['add_button'] = $this->list_js() .
                                                      "<button type='submit' id='add' name='add' value='add' " .
                                                      "class='{$style}' title='{lang:add_member}' " .
                                                      "onclick='list_addition();return false;'>" .
                                                      "{lang:add_member}</button>" . NBS . NBS;
    }

    /** ----------------------------------------
    /**  Retrieve a Template for Processing
    /** ----------------------------------------*/
    public function retrieve_template($which = '')
    {
        if ($which == '') {
            $which = 'message_folder';
        }

        /** ----------------------------------
        /**  CP Templates - Quick, Easy
        /** ----------------------------------*/
        if ($this->allegiance == 'cp') {
            if (! class_exists('Messages_mcp')) {
                require APPPATH . 'cp/cp.messages.php';
                $this->messages_cp = new Messages_mcp();
            }

            $which = $which . '_cp';

            return $this->messages_cp->{$which}();
        }

        /** ----------------------------------
        /**  User Templates - Slow, Painful
        /** ----------------------------------*/
        //$debug = debug_backtrace();
        //echo '<pre>';print_r($debug[1]);echo'</pre>';exit;
        if ($this->theme_path == '') {
            $theme = (ee()->config->item('member_theme') == '') ? 'default' : ee()->config->item('member_theme');
            $this->theme_path = ee('Theme')->getPath('member/' . $theme);
        }

        if (! file_exists($this->theme_path . '/' . $which . '.html')) {
            $data = array('title' => ee()->lang->line('error'),
                'heading' => ee()->lang->line('general_error'),
                'content' => ee()->lang->line('nonexistent_page'),
                'redirect' => '',
                'link' => array(ee()->config->item('site_url'), stripslashes(ee()->config->item('site_name')))
            );

            return ee()->output->show_message($data, 0);
        }

        return $this->MS->_prep_element(trim(file_get_contents($this->theme_path . '/' . $which . '.html')));
    }

    /** -----------------------------------
    /**  Folders Pulldown Menu
    /** -----------------------------------*/
    public function folders_pulldown()
    {
        $str = NL;
        $str2 = NL;

        foreach ($this->folders as $key => $value) {
            if ($value['0'] != '') {
                if ($this->allegiance == 'user') {
                    $url = $this->base_url . 'view_folder/' . $key . '/';
                } else {
                    $url = $this->base_url . 'view_folder' . AMP . 'folder=' . $key;
                }

                $selected = ($key == $this->current_folder) ? ' selected="selected"' : '';

                $name = ee()->functions->encode_ee_tags($value['0'], true);
                $str .= '<option value="' . $url . '"' . $selected . '>' . $name . '</option>' . NL;
                $str2 .= '<option value="' . $key . '"' . $selected . '>' . $name . '</option>' . NL;
            }
        }

        $str .= '</select>' . NL;
        $str2 .= '</select>' . NL;

        $yoffset = ($this->allegiance == 'cp') ? 30 : 20;

        $move_js = <<<DOH
<script type="text/javascript">
//<![CDATA[

var movepopup = new PopupWindow("movemenu");
movepopup.offsetY={$yoffset};
movepopup.autoHide();

//]]>
</script>
DOH;

        $copy_js = <<<DOH
<script type="text/javascript">
//<![CDATA[

var copypopup = new PopupWindow("copymenu");
copypopup.offsetY={$yoffset};
copypopup.autoHide();

//]]>
</script>
DOH;

        $this->single_parts['include']['folder_pulldown']['change'] = '<select name="change_folder" class="select" onchange="location.href=this.value">' . $str;

        $this->single_parts['include']['folder_pulldown']['move'] = '<div id="movemenu" class="tableCellOne" style="border: 1px solid #666; position:absolute;visibility:hidden;">' .
            '<select name="moveto" class="select" onchange="this.form.submit();">' .
            '<option value="none">' . ee()->lang->line('choose_folder') . '</option>' . NL .
            $str2 .
            '</div>' . NL .
            $move_js;

        $this->single_parts['include']['folder_pulldown']['copy'] = '<div id="copymenu" class="tableCellOne" style="border: 1px solid #666; position:absolute;visibility:hidden;">' .
            '<select name="copyto" class="select" onchange="this.form.submit();">' .
            '<option value="none">' . ee()->lang->line('choose_folder') . '</option>' . NL .
            $str2 .
            '</div>' . NL .
            $copy_js;
    }

    /**
     * Determines which field to use from a list of valid fields defaults to
     * 'recipients'.
     *
     * @param string $input The requested field
     * @param string $default The default value if the $input is invalid
     * @return string One of the valid fields
     */
    private function which_field($input, $default = 'recipients')
    {
        $valid_fields = array('recipients', 'cc');
        $default = (in_array($default, $valid_fields)) ? $default : 'recipients';

        return (in_array($input, $valid_fields)) ? $input : $default;
    }

    /** -----------------------------------
    /**  Member Search Popup
    /** -----------------------------------*/
    public function member_search($message = '')
    {
        $this->title = '';
        $this->crumb = '';

        if ($this->allegiance == 'cp') {
            $which_field = $this->which_field(ee()->input->get_post('field'));
        } else {
            $which_field = ($this->cur_id != '') ? $this->cur_id : 'recipients';
        }

        $form_details = array('hidden_fields' => array('which_field' => $which_field),
            'action' => $this->_create_path('do_member_search', AMP . 'Z=1'),
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['do_member_search'] = ee()->functions->form_declaration($form_details);
        $this->single_parts['include']['message'] = $message;

        $this->conditionals['message'] = ($message != '') ? 'y' : 'n';

        // Member group select list

        $this->single_parts['include']['member_group_options'] = '';

        $role_settings = ee('Model')->get('RoleSetting')
            ->with('Role')
            ->filter('include_in_memberlist', 'y')
            ->filter('site_id', ee()->config->item('site_id'))
            ->order('Role.name')
            ->all();

        foreach ($role_settings as $role_setting) {
            $this->single_parts['include']['member_group_options'] .= '<option value="' . $role_setting->Role->getId() . '">' . $role_setting->Role->name . '</option>';
        }

        $this->return_data = $this->_process_template($this->retrieve_template('search_members'));
    }

    /** -----------------------------
    /**  Perform Member search
    /** -----------------------------*/
    public function do_member_search()
    {
        $this->title = '';
        $this->crumb = '';

        $which_field = $this->which_field(ee()->input->get_post('which_field'));

        if ($this->allegiance == 'cp') {
            $redirect_url = ee()->config->item('cp_url', false) . '?S=' . ee()->session->session_id() .
                            AMP . 'C=myaccount' .
                            AMP . 'M=messages' .
                            AMP . 'P=member_search' .
                            AMP . 'field=' . $which_field .
                            AMP . 'Z=1';
        } else {
            $redirect_url = $this->_create_path('member_search') . '/' . $which_field . '/';
        }

        $this->single_parts['path']['new_search_url'] = $redirect_url;
        $this->single_parts['which_field'] = $which_field;

        /** --------------------------------
        /**  Parse the POST request
        /** --------------------------------*/
        if ($_POST['screen_name'] == '' &&
            $_POST['email'] == ''
            ) {
            ee()->functions->redirect($redirect_url);
        }

        $search_query = array();

        foreach ($_POST as $key => $val) {
            if ($key == 'group_id') {
                if ($val != 'any') {
                    $role = ee('Model')->get('Role', $_POST['group_id'])
                        ->with('RoleSettings')
                        ->filter('RoleSettings.include_in_memberlist', 'y')
                        ->filter('RoleSettings.site_id', ee()->config->item('site_id'))
                        ->first();

                    if ($role) {
                        $search_query[] = " member_id IN (" . implode(',', $role->Members->pluck('member_id')) . ")";
                    }
                }
            } elseif ($key == 'screen_name' || $key == 'email') {
                if (!empty($val)) {
                    $search_query[] = $key . " LIKE '%" . ee()->db->escape_like_str($val) . "%'";
                }
            } else {
                //not valid input.
                continue;
            }
        }

        if (count($search_query) < 1) {
            ee()->functions->redirect($redirect_url);
        }

        $Q = implode(" AND ", $search_query);

        $sql = "SELECT DISTINCT exp_members.screen_name FROM exp_members
				WHERE " . $Q;

        $query = ee()->db->query($sql);

        $total_count = $query->num_rows;

        if ($total_count == 0) {
            return $this->member_search(ee()->lang->line('no_search_results'));
        }

        $this->single_parts['include']['search_results'] = '';

        foreach ($query->result_array() as $row) {
            // Changed this from htmlentities to htmlspecialchars because of problems with foreign characters, specifically persian ones
            $value = htmlspecialchars(str_replace(array('(', ')', "'", '"'), array('\(', '\)', "\'", '\"'), '<' . $row['screen_name']) . '>', ENT_QUOTES);

            $this->single_parts['include']['search_results'] .= $this->_process_template($this->retrieve_template('member_results_row'), array('item' => '<a href="#" onclick="insert_name(\'' . $value . '\');return false;">' . $row['screen_name'] . '</a>'));
        }

        $this->return_data = $this->_process_template($this->retrieve_template('member_results'));
    }

    /** -----------------------------------
    /**  Buddy Search Popup
    /** -----------------------------------*/
    public function buddy_search($message = '')
    {
        $this->title = '';
        $this->crumb = '';

        if ($this->allegiance == 'cp') {
            $which = (! ee()->input->get_post('which')) ? 'buddy' : ee()->input->get_post('which');
        } else {
            $which = ($this->cur_id != '') ? $this->cur_id : 'buddy';
        }

        $form_details = array('hidden_fields' => array('which' => $which),
            'action' => $this->_create_path('do_buddy_search', AMP . 'Z=1'),
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['do_member_search'] = ee()->functions->form_declaration($form_details);
        $this->single_parts['include']['message'] = $message;

        $this->conditionals['message'] = ($message != '') ? 'y' : 'n';

        // Member group select list

        $this->single_parts['include']['member_group_options'] = '';

        $role_settings = ee('Model')->get('RoleSetting')
            ->with('Role')
            ->filter('include_in_memberlist', 'y')
            ->filter('site_id', ee()->config->item('site_id'))
            ->order('Role.name')
            ->all();

        foreach ($role_settings as $role_setting) {
            $this->single_parts['include']['member_group_options'] .= '<option value="' . $role_setting->Role->getId() . '">' . $role_setting->Role->name . '</option>';
        }

        $this->return_data = $this->_process_template($this->retrieve_template('search_members'));
    }

    /** -----------------------------
    /**  Perform Buddy search
    /** -----------------------------*/
    public function do_buddy_search()
    {
        $this->title = '';
        $this->crumb = '';

        $which = (! ee()->input->get_post('which')) ? 'buddy' : ee()->input->get_post('which');

        if (!in_array($which, array('buddy', 'blocked'))) {
            $which = 'buddy';
        }

        if ($this->allegiance == 'cp') {
            $redirect_url = ee()->config->item('cp_url', false) . '?S=' . ee()->session->session_id() .
                            AMP . 'C=myaccount' .
                            AMP . 'M=messages' .
                            AMP . 'P=buddy_search' .
                            AMP . 'which=' . $which .
                            AMP . 'Z=1';
        } else {
            $redirect_url = $this->_create_path('buddy_search') . '/' . $which . '/';
        }

        $this->single_parts['path']['new_search_url'] = $redirect_url;
        $this->single_parts['which_field'] = $which;  // For the results

        /** --------------------------------
        /**  Parse the POST request
        /** --------------------------------*/
        if ($_POST['screen_name'] == '' &&
            $_POST['email'] == ''
            ) {
            ee()->functions->redirect($redirect_url);
        }

        $search_query = array();

        foreach ($_POST as $key => $val) {
            if ($key == 'which' || $key == 'site_id') {
                continue;
            }
            if ($key == 'group_id') {
                if ($val != 'any') {
                    $role = ee('Model')->get('Role', $_POST['group_id'])
                        ->with('RoleSettings')
                        ->filter('RoleSettings.include_in_memberlist', 'y')
                        ->filter('RoleSettings.site_id', ee()->config->item('site_id'))
                        ->first();

                    if ($role) {
                        $search_query[] = " member_id IN (" . implode(',', $role->Members->pluck('member_id')) . ")";
                    }
                }
            }
            //screen_name, email, group_id
            elseif (in_array($key, array('screen_name', 'email', 'group_id')) && !empty($val)) {
                $search_query[] = $key . " LIKE '%" . ee()->db->escape_like_str($val) . "%'";
            }
        }

        if (count($search_query) < 1) {
            ee()->functions->redirect($redirect_url);
        }

        $Q = implode(" AND ", $search_query);

        $sql = "SELECT DISTINCT exp_members.member_id, exp_members.screen_name FROM exp_members
				WHERE " . $Q;

        $query = ee()->db->query($sql);

        $total_count = $query->num_rows;

        if ($total_count == 0) {
            return $this->buddy_search(ee()->lang->line('no_search_results'));
        }

        $r = '';

        foreach ($query->result_array() as $row) {
            $link = ($which == 'blocked') ? $this->_create_path('add_block') : $this->_create_path('add_buddy');

            $link .= ($this->allegiance == 'cp') ? '&mid=' . $row['member_id'] : '/' . $row['member_id'] . '/';

            $r .= $this->_process_template($this->retrieve_template('member_results_row'), array('item' => '<a href="#" onclick="window.opener.location.href=\'' . $link . '\';return false;">' . $row['screen_name'] . '</a>'));
        }

        $this->single_parts['include']['search_results'] = $r;

        $this->return_data = $this->_process_template($this->retrieve_template('member_results'));
    }

    /** -----------------------------------
    /**  Current Storage Usage
    /** -----------------------------------*/
    public function storage_usage()
    {
        $sql = "SELECT COUNT(exp_message_copies.copy_id) AS count
				FROM exp_message_copies
				WHERE exp_message_copies.recipient_id = '{$this->member_id}'
				AND exp_message_copies.message_deleted = 'n'";

        $tql = "SELECT COUNT(exp_message_data.message_id) AS count
				FROM exp_message_data
				WHERE exp_message_data.sender_id = '{$this->member_id}'
				AND exp_message_data.message_status = 'draft'";

        $query = ee()->db->query($sql);
        $results = ee()->db->query($tql);

        $this->total_messages = $query->row('count') ;
        + $results->row('count') ;
    }

    /** -----------------------------------
    /**  Current Storage Graph
    /** -----------------------------------*/
    public function storage_graph()
    {
        if ($this->total_messages == '') {
            $this->storage_usage();
        }

        /** ----------------------
        /**  Default
        /** ----------------------*/
        $this->single_parts['lang']['total_messages'] = $this->total_messages;
        $this->single_parts['lang']['max_messages'] = ($this->storage_limit == '0') ? ee()->lang->line('unlimited_messages') : $this->storage_limit;
        $this->single_parts['lang']['usage_percent'] = '0';

        $this->single_parts['image']['messages_graph']['width'] = '1';
        $this->single_parts['image']['messages_graph']['height'] = '11';

        /** ----------------------
        /**  Calculate
        /** ----------------------*/
        if ($this->total_messages > 0 && $this->storage_limit > 0) {
            $this->single_parts['lang']['usage_percent'] = round(($this->total_messages / $this->storage_limit) * 100, 1);
            $this->single_parts['image']['messages_graph']['width'] = ceil(($this->total_messages / $this->storage_limit) * $this->graph_width);

            /* We are subtracting some pixels to take into account CSS padding (~6px) */

            if ($this->single_parts['image']['messages_graph']['width'] > 7) {
                $this->single_parts['image']['messages_graph']['width'] -= 6;
            }

            if ($this->single_parts['image']['messages_graph']['width'] > $this->graph_width) {
                $this->single_parts['image']['messages_graph']['width'] = $this->graph_width;
            }
        }

        $this->single_parts['lang']['storage_status'] = str_replace(array('%x', '%y'), array($this->single_parts['lang']['total_messages'], $this->single_parts['lang']['max_messages']), ee()->lang->line('storage_status'));

        $this->single_parts['lang']['storage_percentage'] = str_replace('%x', $this->single_parts['lang']['usage_percent'], ee()->lang->line('storage_percentage'));
    }

    /** -----------------------------------
    /**  Modify Messages Request
    /** -----------------------------------*/
    public function modify_messages()
    {
        if (! ee()->input->post('toggle')) {
            $folder_id = (! ee()->input->get_post('this_folder')) ? 1 : ee()->input->get_post('this_folder');

            return $this->view_folder($folder_id);
        }

        foreach ($_POST['toggle'] as $key => $val) {
            $unread = false;

            if ($val[0] == 'u') {
                $unread = true;
                $val = substr($val, 1);
            }

            if (ee()->input->post('daction') == 'delete') {
                if (substr($val, 0, 1) == 'd') {
                    // We're deleting a draft
                    ee()->db->query("DELETE FROM exp_message_data
								WHERE sender_id = '{$this->member_id}'
								AND message_id = '" . ee()->db->escape_str(substr($val, 1)) . "'
								AND message_status = 'draft'");
                } else {
                    ee()->db->query("UPDATE exp_message_copies SET message_deleted = 'y', message_read = 'y'
								WHERE recipient_id = '{$this->member_id}'
								AND copy_id = '" . ee()->db->escape_str($val) . "'");

                    /** ----------------------------------
                    /**  Reduce exp_members.private_messages
                    /** ----------------------------------*/

                    // quick sanity check juuuuust in case
                    if (ee()->session->userdata['private_messages'] > 0 && $unread === true) {
                        ee()->db->query("UPDATE exp_members SET private_messages = private_messages - 1
											WHERE member_id = '{$this->member_id}'");

                        ee()->session->userdata['private_messages']--;
                    }
                }
            } elseif (ee()->input->post('daction') == 'reply') {
                $this->hide_preview = true;

                return $this->compose($val);
            } elseif (ee()->input->post('daction') == 'reply_all') {
                $this->hide_preview = true;

                return $this->compose($val);
            } elseif (ee()->input->post('daction') == 'forward') {
                $this->hide_preview = true;

                return $this->compose($val);
            } elseif (ee()->input->post('moveto') && ee()->input->get_post('moveto') != 'none') {
                $folder_id = ee()->input->post('moveto');

                if (is_numeric($folder_id) && $folder_id <= $this->max_folders && isset($this->folders[$folder_id])) {
                    ee()->db->query("UPDATE exp_message_copies
								SET message_deleted = 'n',
								message_folder = '" . ee()->db->escape_str($folder_id) . "'
								WHERE recipient_id = '{$this->member_id}'
								AND copy_id = '" . ee()->db->escape_str($val) . "'");
                }
            } elseif (ee()->input->post('copyto') && ee()->input->get_post('copyto') != 'none') {
                $folder_id = ee()->input->post('copyto');

                if (is_numeric($folder_id) && $folder_id <= $this->max_folders && isset($this->folders[$folder_id])) {
                    $query = ee()->db->query("SELECT * FROM exp_message_copies
										 WHERE recipient_id = '{$this->member_id}'
										 AND copy_id = '" . ee()->db->escape_str($val) . "'");

                    $row = $query->row_array();

                    $row['copy_id'] = '';
                    $row['message_folder'] = ee()->db->escape_str($folder_id);
                    $row['message_deleted'] = 'n';

                    ee()->db->query(ee()->db->insert_string('exp_message_copies', $row), true);
                }
            }
        }

        $which = (ee()->input->post('this_folder') === false) ? '1' : ee()->input->post('this_folder');

        if ($this->allegiance == 'user') {
            $url = $this->base_url . 'view_folder/' . $which . '/';
        } else {
            $url = $this->base_url . 'view_folder' . AMP . 'folder=' . $which;
        }

        ee()->functions->redirect($url);
    }

    /** -----------------------------------
    /**  Erase Messages
    /** -----------------------------------*/
    public function erase($delete = '')
    {
        // -------------------------------------------
        //  If this is the last copy of a message,
        //  then perhaps we should erase the
        //  exp_message_data too, no?
        // -------------------------------------------

        if (is_array($delete) && count($delete) > 0) {
            $query = ee()->db->query("SELECT message_id, copy_id FROM exp_message_copies
								 WHERE recipient_id = '{$this->member_id}'
								 AND copy_id IN ('" . implode("','", $delete) . "')");
        } else {
            $query = ee()->db->query("SELECT message_id, copy_id FROM exp_message_copies
								 WHERE recipient_id = '{$this->member_id}'
								 AND message_deleted = 'y'");
        }

        if ($query->num_rows() > 0) {
            $copy_ids = array();
            $message_ids = array();

            foreach ($query->result_array() as $row) {
                $copy_ids[] = $row['copy_id'];

                /*  The reason we are using an implode on the $copy_ids array
                    is because there is a very small possibility that through
                    the copy and move commands that a single member might have
                    the last two remaining copies of a message and delete them
                    at the same time.  Thus, a normal copy_id != $row['copy_id']
                    would not work effectively in this query to detemine if the
                    exp_message_data table should have this message removed.
                */

                $results = ee()->db->query("SELECT COUNT(*) AS count FROM exp_message_copies
										WHERE message_id = '" . ee()->db->escape_str($row['message_id']) . "'
										AND copy_id NOT IN ('" . implode("','", $copy_ids) . "')");

                if ($results->row('count') == 0) {
                    $message_ids[] = $row['message_id'];
                }
            }

            if (count($message_ids) > 0) {
                ee()->db->query("DELETE FROM exp_message_data WHERE message_id IN ('" . implode("','", $message_ids) . "')");

                // Remove any attachments as well

                $query = ee()->db->query("SELECT attachment_location FROM exp_message_attachments WHERE message_id IN ('" . implode("','", $message_ids) . "')");

                if ($query->num_rows() > 0) {
                    foreach ($query->result_array() as $row) {
                        // No trailing double slashes
                        $base_path = rtrim(ee()->config->item('prv_msg_upload_path'), '/') . '/';

                        @unlink($base_path . $row['attachment_location']);
                    }

                    ee()->db->query("DELETE FROM exp_message_attachments WHERE message_id IN ('" . implode("','", $message_ids) . "')");
                }
            }

            ee()->db->query("DELETE FROM exp_message_copies WHERE copy_id IN ('" . implode("','", $copy_ids) . "')");
        }

        /** ---------------------------------------
        /**  UPDATE Unread Message Count
        /** ---------------------------------------*/
        $query = ee()->db->query("SELECT COUNT(*) AS count FROM exp_message_copies
							 WHERE recipient_id = '{$this->member_id}'
							 AND message_read = 'n'");

        $results = ee()->db->query("UPDATE exp_members SET private_messages = '" . ee()->db->escape_str($query->row('count')) . "'
								WHERE member_id = '{$this->member_id}'");

        if (is_array($delete) && count($delete) > 0) {
            return;
        }

        /** ----------------------------------------
        /**  Redirect Back to Inbox
        /** ----------------------------------------*/
        ee()->functions->redirect($this->_create_path('inbox'));
    }

    /**  Convert Recipients to Valid List
    /** -----------------------------------*/
    public function convert_recipients($str, $type = 'string', $by = 'screen_name')
    {
        /** -------------------------------------
        /**  Retrieve Protected Names
        /** -------------------------------------*/
        $protected = array();

        if (preg_match_all("/\<(.*?)\>/", $str, $matches)) {
            for ($i = 0, $s = count($matches['1']); $i < $s; ++$i) {
                $protected[] = $matches['1'][$i];
                $str = str_replace($matches['0'][$i], '', $str);
            }
        }

        /** -------------------------------------
        /**  Clean Up Remaining and Combine
        /** -------------------------------------*/
        $str = str_replace('|', ',', $str);
        $str = str_replace(',,', ',', $str);
        $str = preg_replace("/\s*,\s*/", ',', $str);

        if (substr($str, -1) == ',') {
            $str = substr($str, 0, -1);
        }

        if (substr($str, 0, 1) == ',') {
            $str = substr($str, 1);
        }

        $temp_list = array_merge(explode(',', $str), $protected);
        $list = array();

        for ($i = 0, $s = count($temp_list); $i < $s; ++$i) {
            if (trim($temp_list[$i]) != '') {
                $list[] = ee()->db->escape_str($temp_list[$i]);
            }
        }

        if (count($list) == 0) {
            if ($type == 'array') {
                return array();
            } else {
                $str = '';

                return $str;
            }
        }

        /** -------------------------------------
        /**  Check for matches in the database
        /** -------------------------------------*/
        if (! is_numeric($list['0'])) {
            $query = ee()->db->query("SELECT {$by} FROM exp_members
								 WHERE screen_name IN ('" . implode("','", $list) . "')");
        } else {
            $query = ee()->db->query("SELECT {$by} FROM exp_members
								 WHERE member_id IN ('" . implode("','", $list) . "')");

            if ($query->num_rows() == 0) {
                $query = ee()->db->query("SELECT {$by} FROM exp_members
								 WHERE screen_name IN ('" . implode("','", $list) . "')");
            }
        }

        $array = array();

        if ($query->num_rows() > 0) {
            foreach ($query->result_array() as $row) {
                $array[] = ($by == 'screen_name') ? '<' . $row[$by] . '>' : $row[$by];
            }

            $array = array_unique($array);
            sort($array);
        }

        // ----------------------------------
        //  Do we have as many returned as we had in our initial list?
        //  If not, we will be outputting an error in the send_message() function
        // ----------------------------------

        if (count($list) != count($array)) {
            $this->invalid_name = true;
        }

        if ($type == 'array') {
            return $array;
        } else {
            $str = implode(', ', $array);

            return $str;
        }
    }

    /** -------------------------------------
    /**  Check if User is Over Storage Amount
    /** -------------------------------------*/
    public function _check_overflow($id)
    {
        /** ---------------------------------
        /**  Check Member Group Permissions
        /** ---------------------------------*/
        $member = ee('Model')->get('Member', $id)->first();

        if (! $member) {
            return false;
        }

        if ($member->isSuperAdmin() && $member->accept_messages) {
            return true;
        } elseif (! $member->can('send_private_messages') && ! $member->accept_messages) {
            return false;
        }

        /** -------------------------------
        /**  Check Message Count
        /** -------------------------------*/
        $role_settings = ee('Model')->get('RoleSetting')
            ->filter('role_id', $member->role_id)
            ->filter('site_id', ee()->config->item('site_id'))
            ->first();

        $user_storage_limit = $role_settings->prv_msg_storage_limit;

        if ($user_storage_limit == 0) {
            return true;
        }

        $sql = "SELECT COUNT(exp_message_copies.copy_id) AS count
				FROM exp_message_copies
				WHERE exp_message_copies.recipient_id = '{$id}'
				AND exp_message_copies.message_deleted = 'n'";

        $query = ee()->db->query($sql);

        if ($query->row('count') >= $user_storage_limit) {
            return false;
        }

        return true;
    }

    /** -----------------------------------
    /**  Compose to Member
    /** -----------------------------------*/
    public function pm()
    {
        if ($this->allegiance == 'cp' && ee()->input->get_post('mid') !== false && is_numeric(ee()->input->get_post('mid'))) {
            $_GET['recipients'] = ee()->input->get_post('mid');
        } elseif ($this->allegiance == 'user' && $this->cur_id != '' && is_numeric($this->cur_id)) {
            $_GET['recipients'] = $this->cur_id;
            $this->cur_id = '';
        }

        $this->compose();
    }

    /** -----------------------------------
    /**  Compose New Message Form
    /** -----------------------------------*/
    public function compose($id = '', $errors = '')
    {
        if ($id == '') {
            if ($this->allegiance == 'cp' && ee()->input->get_post('msg') !== false && is_numeric(ee()->input->get_post('msg'))) {
                $id = ee()->input->get_post('msg');
                $this->hide_preview = true;
            } elseif ($this->allegiance == 'user' && $this->cur_id != '' && is_numeric($this->cur_id)) {
                $id = $this->cur_id;
                $this->hide_preview = true;
            }
        }

        $template = $this->retrieve_template('message_compose');

        /** --------------------------------
        /**  Form Declaration and Hidden Form Fields
        /** --------------------------------*/
        $hidden = array();

        if ($id != '' && ee()->input->get_post('daction') != 'forward' && ee()->input->get_post('daction') != 'reply' && ee()->input->get_post('daction') != 'reply_all') {
            $hidden['message_id'] = $id;
        }

        if (ee()->input->get_post('daction') == 'forward') {
            $hidden['create_attach'] = 'y';
        }

        if (ee()->input->get_post('daction') == 'forward' or ee()->input->get_post('forwarding') !== false) {
            $hidden['forwarding'] = (ee()->input->get_post('daction') == 'forward') ? $id : ee()->input->get_post('forwarding');
        }

        if (ee()->input->get_post('daction') == 'reply_all' or ee()->input->get_post('daction') == 'reply' or ee()->input->get_post('replying') !== false) {
            $hidden['replying'] = (ee()->input->get_post('daction') == 'reply' or ee()->input->get_post('daction') == 'reply_all') ? $id : ee()->input->get_post('replying');
        }

        $details = array('action' => $this->_create_path('send_message'),
            'id' => 'submit_message',
            'enctype' => 'multi',
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        /** -------------------------------------
        /**  Default Values for Form
        /** -------------------------------------*/
        $this->single_parts['include']['emoticons'] = $this->emoticons();
        $this->single_parts['include']['hidden_js'] = $this->hidden_js();

        $this->single_parts['image']['search_glass'] = '<img src="' . $this->images_folder . 'search_glass.gif" style="border: 0px" width="12" height="12" alt="' . ee()->lang->line('search_glass') . '" />';
        $this->single_parts['include']['search']['recipients'] = '<a href="#" title="{lang:member_search}" onclick="perform_search(1); return false;">' . $this->single_parts['image']['search_glass'] . '</a>';
        $this->single_parts['include']['search']['cc'] = '<a href="#" title="{lang:member_search}" onclick="perform_search(2); return false;">' . $this->single_parts['image']['search_glass'] . '</a>';
        $this->single_parts['include']['search_js'] = $this->search_js();
        $this->single_parts['include']['text_counter_js'] = $this->text_counter_js();

        $this->conditionals['attachments_allowed'] = $this->attach_allowed;
        $this->conditionals['attachments_exist'] = 'n';
        $this->single_parts['include']['attachments'] = '';
        $this->single_parts['lang']['max_file_size'] = $this->attach_maxsize;
        $this->single_parts['lang']['max_chars'] = $this->max_chars;

        $this->single_parts['input']['tracking_checked'] = "";
        $this->single_parts['input']['sent_copy_checked'] = '';
        $this->single_parts['input']['hide_cc_checked'] = '';

        $this->single_parts['include']['compose_header_js'] = $this->compose_header_js();
        $this->single_parts['include']['dynamic_address_book'] = $this->dynamic_address_book();
        $this->single_parts['include']['submission_error'] = '';

        $this->header_javascript .= $this->compose_header_js();

        /** -------------------------------------
        /**  Spell Check Related Values
        /** -------------------------------------*/
        $this->single_parts['include']['spellcheck_js'] = ($this->spellcheck_enabled !== true) ? '' : $this->spellcheck_js(); // goes first for enabled check
        $this->single_parts['path']['spellcheck_iframe'] = ($this->spellcheck_enabled !== true) ? '' : $this->_create_path('spellcheck_iframe');
        $this->conditionals['spellcheck'] = ($this->spellcheck_enabled !== true) ? 'n' : 'y';

        /** -------------------------------------
        /**  Create the HTML formatting buttons
        /** -------------------------------------*/
        $this->single_parts['include']['html_formatting_buttons'] = '';

        if (! class_exists('Html_buttons')) {
            if (include_once(APPPATH . 'libraries/Html_buttons.php')) {
                $BUTT = new EE_Html_buttons();
                $button_include = $BUTT->create_buttons();

                if ($this->allegiance == 'cp') {
                    $button_include = str_replace('htmlButtonOff', 'htmlButtonA', $button_include);
                    $button_include = str_replace('htmlButtonOn', 'htmlButtonB', $button_include);
                }

                /** -------------------------------
                /**  Fixes a small problem with single and double quotes
                /** -------------------------------*/
                $this->single_parts['include']['html_formatting_buttons'] = str_replace(
                    "document.getElementById('submit_post').",
                    "document.getElementById('submit_message').",
                    $button_include
                );
            }
        }

        /** ----------------------------------------
        /**  Preview, Reply, Forward or New Entry?
        /** ----------------------------------------*/
        if ($id != '' && is_numeric($id)) {
            if (ee()->input->post('daction') !== false && (ee()->input->get_post('daction') == 'reply' or ee()->input->get_post('daction') == 'reply_all' or ee()->input->get_post('daction') == 'forward')) {
                $data = $this->_message_data($id, '', $this->member_id);

                if (bool_config_item('enable_censoring')) {
                    $subject = ($data === false) ? '' : ee('Format')->make('Text', $data['subject'])->censor();
                    $body = ($data === false) ? '' : ee('Format')->make('Text', $data['body'])->censor();
                } else {
                    $subject = ($data === false) ? '' : $data['subject'];
                    $body = ($data === false) ? '' : $data['body'];
                }

                $booger['hidden_fields'] = array('message_id' => $data['id'], 'forward' => 'y');

                $prefix = (ee()->input->post('daction') == 'forward') ? 'forward_prefix' : 'reply_prefix';
                $prefix = lang($prefix);

                // Ensure only one prefix
                $prefix = (substr($data['subject'], 0, strlen($prefix)) == $prefix) ? '' : $prefix;

                $this->single_parts['input']['subject'] = ($data === false) ? '' : $prefix . $subject;
                $this->single_parts['input']['body'] = '';

                if ($data !== false) {
                    if (ee()->input->post('daction') == 'forward') {
                        $forward_message = NL . NL . NL . ee()->lang->line('forward_header') . NL;
                        $forward_message .= ee()->lang->line('forward_from') . $data['sender'] . NL;
                        $forward_message .= ee()->lang->line('forward_date') . $data['date'] . NL;
                        $forward_message .= ee()->lang->line('forward_subject') . $data['subject'];

                        $this->single_parts['input']['body'] .= $forward_message;
                    }

                    $this->single_parts['input']['body'] .= NL . NL . NL . '[quote]' . NL . $body . NL . '[/quote]';
                }

                $this->single_parts['input']['recipients'] = ($data === false or ee()->input->post('daction') == 'forward') ? '' : $this->convert_recipients($data['sender_id']);

                if ($data === false or ee()->input->post('daction') != 'reply_all') {
                    $this->single_parts['input']['cc'] = '';
                } else {
                    $cc = $this->convert_recipients($data['recipients'] . ',' . $data['cc']);
                    $x = explode(', ', $cc);
                    $y = explode(', ', $this->single_parts['input']['recipients']);

                    // Make sure CC does not contain members in Recipients
                    $cc = array_diff($x, $y);

                    $this->single_parts['input']['cc'] = implode(', ', $cc);
                }

                $this->single_parts['include']['preview_message'] = '';

                if (ee()->input->post('daction') == 'forward' && $data !== false && count($data['attachments']) > 0) {
                    $this->conditionals['attachments_allowed'] = (count($data['attachments']) >= $this->max_attachments) ? 'n' : 'y';
                    $this->conditionals['attachments_exist'] = 'y';
                    $this->single_parts['include']['attachments'] = $this->_display_attachments($data['attachments']);

                    $hidden['attach'] = implode('|', $data['attach']);
                }
            } else {
                $data = $this->_message_data($id, $this->member_id);

                if (bool_config_item('enable_censoring')) {
                    $subject = ($data === false) ? '' : ee('Format')->make('Text', $data['subject'])->censor();
                    $body = ($data === false) ? '' : ee('Format')->make('Text', $data['body'])->censor();
                } else {
                    $subject = ($data === false) ? '' : $data['subject'];
                    $body = ($data === false) ? '' : $data['body'];
                }

                $this->single_parts['input']['subject'] = $subject;
                $this->single_parts['input']['body'] = $body;
                $this->single_parts['input']['recipients'] = ($data === false) ? '' : $this->convert_recipients($data['recipients']);
                $this->single_parts['input']['cc'] = ($data === false) ? '' : $this->convert_recipients($data['cc']);
                $this->single_parts['include']['preview_message'] = ($data === false or $this->hide_preview === true) ? '' : $data['preview'];

                $this->single_parts['input']['tracking_checked'] = ($data === false or $data['tracking'] == 'n') ? '' : "checked='checked'";
                $this->single_parts['input']['sent_copy_checked'] = ($data === false or $data['sent_copy'] == 'n') ? '' : "checked='checked'";
                $this->single_parts['input']['hide_cc_checked'] = ($data === false or $data['hide_cc'] == 'n') ? '' : "checked='checked'";

                if ($data !== false && count($data['attachments']) > 0) {
                    $this->conditionals['attachments_allowed'] = (count($data['attachments']) >= $this->max_attachments) ? 'n' : 'y';
                    $this->conditionals['attachments_exist'] = 'y';
                    $this->single_parts['include']['attachments'] = $this->_display_attachments($data['attachments']);

                    $hidden['attach'] = implode('|', $data['attach']);
                }
            }
        } else {
            $this->single_parts['input']['subject'] = (! ee()->input->get_post('subject')) ? '' : ee()->input->get_post('subject', true);
            $this->single_parts['input']['body'] = (! ee()->input->get_post('body')) ? '' : ee()->input->get_post('body', true);
            $this->single_parts['input']['cc'] = '';
            $this->single_parts['input']['recipients'] = (! ee()->input->get_post('recipients')) ? '' : $this->convert_recipients(ee()->input->get_post('recipients'));
            $this->single_parts['include']['preview_message'] = '';
        }

        $details['hidden_fields'] = $hidden;

        $this->single_parts['form']['form_declaration']['messages'] = ee()->functions->form_declaration($details);

        // --------------------------------------------
        //  If upload path is not specified we
        //  override all attachment related settings
        // --------------------------------------------

        if ($this->upload_path == '') {
            $this->conditionals['attachments_allowed'] = 'n';
            $this->conditionals['attachments_exist'] = 'n';
            $this->single_parts['include']['attachments'] = '';
        }

        /** ---------------------------------------
        /**  Error Message Displaying, if any
        /** ---------------------------------------*/
        if (is_array($errors) && count($errors) > 0) {
            $this->single_parts['lang']['error_message'] = implode(BR, $errors);

            $this->single_parts['include']['submission_error'] = $this->_process_template($this->retrieve_template('message_submission_error'));
        }

        /** ----------------------------------------
        /**  Return the Compose Form Contents
        /** ----------------------------------------*/
        $this->title = ee()->lang->line('compose_message');
        $this->crumb = ee()->lang->line('compose_message');
        $this->return_data = $this->_process_template($template);
    }

    //----------------------------------------
    // 	Fetch Message Data
    //  Massage that message data, si vous plait
    //----------------------------------------

    public function _message_data($id, $sender = '', $recipient = '')
    {
        $data = array();

        // ------------------------------------------
        //  If $recipient is set, this is a message
        //  being viewed. So, $id is actually the copy_id
        //  in the exp_message_copies table.
        // -----------------------------------------

        if ($recipient != '' && is_numeric($recipient)) {
            $query = ee()->db->query("SELECT message_id, message_folder, message_read FROM exp_message_copies
								 WHERE copy_id = '" . ee()->db->escape_str($id) . "'
								 AND recipient_id = '" . ee()->db->escape_str($recipient) . "'");

            if ($query->num_rows() == 0) {
                return false;
            }

            $mid = $query->row('message_id') ;
            $data['folder_id'] = $query->row('message_folder') ;
            $data['message_read'] = $query->row('message_read') ;
        } else {
            $mid = $id;
        }

        $sql = "SELECT * FROM exp_message_data WHERE message_id = '" . ee()->db->escape_str($mid) . "'";

        if ($sender != '' && is_numeric($sender)) {
            $sql .= " AND sender_id = '" . ee()->db->escape_str($sender) . "'";
        }

        $query = ee()->db->query($sql);

        if ($query->num_rows() == 0) {
            return false;
        }

        /** ---------------------------------
        /**  Do a Little Data Work
        /** ---------------------------------*/
        foreach ($query->row_array() as $key => $value) {
            $data[str_replace('message_', '', $key)] = $value;
        }

        $data = str_replace('message_', '', $data);

        $data['recipients'] = str_replace('|', ', ', $data['recipients']);
        $data['cc'] = str_replace('|', ', ', $data['cc']);
        $data['attachments'] = array();
        $data['date'] = ee()->localize->human_time($data['date']);

        $results = ee()->db->query("SELECT screen_name FROM exp_members WHERE member_id = '" . ee()->db->escape_str($data['sender_id']) . "'");

        $data['sender'] = $results->row('screen_name') ;

        /** ---------------------------------
        /**  Create Preview of Message
        /** ---------------------------------*/
        ee()->load->library('typography');
        ee()->typography->initialize(
            array(
                'highlight_code' => true)
        );

        $this->single_parts['include']['parsed_message'] = ee()->typography->parse_type(
            stripslashes($data['body']),
            array(
                'text_format' => 'xhtml',
                'html_format' => $this->html_format,
                'auto_links' => $this->auto_links,
                'allow_img_url' => 'n'
            )
        );

        $data['preview'] = $this->_process_template($this->retrieve_template('preview_message'));

        /** ---------------------------------
        /**  Fetch Attachment Information
        /** ---------------------------------*/
        if ($query->row('message_attachments') == 'y') {
            $results = ee()->db->query("SELECT attachment_name, attachment_id, attachment_size, attachment_hash
									FROM exp_message_attachments
									WHERE message_id = '" . ee()->db->escape_str($mid) . "'");

            if ($results->num_rows() > 0) {
                $data['attach'] = array();

                foreach ($results->result_array() as $row) {
                    $data['attachments'][] = $row;
                    $data['attach'][] = $row['attachment_id'];
                }
            }
        }

        return $data;
    }

    //----------------------------------------
    // 	Output the displaying of attachments
    //  for the Compose Page
    //----------------------------------------

    public function _display_attachments($data)
    {
        $main = $this->retrieve_template('message_attachments');
        $rows = $this->retrieve_template('message_attachment_rows');

        $this->single_parts['include']['attachment_rows'] = '';

        for ($i = 0, $l = count($data); $i < $l; $i++) {
            foreach ($data[$i] as $key => $value) {
                $this->single_parts['input'][$key] = $value;
            }

            $this->single_parts['include']['attachment_rows'] .= $this->_process_template($rows);
        }

        return $this->_process_template($main);
    }

    //----------------------------------------
    // 	Output the displaying of attachments
    //  for the viewing of a message
    //----------------------------------------

    public function _attachment_links($data)
    {
        $rows = $this->retrieve_template('message_attachment_link');

        if ($this->allegiance == 'user') {
            $url = $this->base_url . 'attachment/';
        } else {
            $url = $this->base_url . 'attachment' . AMP . 'aid=';
        }

        $r = '';

        for ($i = 0, $l = count($data); $i < $l; $i++) {
            foreach ($data[$i] as $key => $value) {
                $this->single_parts['input'][$key] = $value;
            }

            $this->single_parts['path']['download_link'] = ($this->allegiance == 'user') ? $url . $data[$i]['attachment_hash'] . '/' : $url . $data[$i]['attachment_hash'];

            $r .= $this->_process_template($rows);
        }

        return $r;
    }

    /** -----------------------------------
    /**  Send Message
    /** -----------------------------------*/
    public function send_message()
    {
        if (! class_exists('EE_Messages_send')) {
            require APPPATH . 'libraries/Messages_send.php';
        }

        $MS = new EE_Messages_send();

        foreach (get_object_vars($this) as $key => $value) {
            $MS->{$key} = $value;
        }

        $MS->send_message();
        $this->return_data = $MS->return_data;
    }

    /** -----------------------------------
    /**  View a Single Message
    /** -----------------------------------*/
    public function view_message($copy_id = '')
    {
        /** -----------------------------------
        /**  What Private Message?
        /** -----------------------------------*/
        if ($copy_id == '') {
            if ($this->allegiance == 'cp' && ee()->input->get_post('msg') !== false && is_numeric(ee()->input->get_post('msg'))) {
                $copy_id = ee()->input->get_post('msg');
            } elseif ($this->allegiance == 'user' && $this->cur_id != '' && is_numeric($this->cur_id)) {
                $copy_id = $this->cur_id;
            }
        }

        /** -----------------------------------
        /**  Retrieve Data
        /** -----------------------------------*/
        $data = $this->_message_data($copy_id, '', $this->member_id);

        if ($data === false) {
            return $this->_error_page('invalid_message');
        }

        if (bool_config_item('enable_censoring')) {
            $data['subject'] = ee('Format')->make('Text', $data['subject'])->censor();
            $data['body'] = ee('Format')->make('Text', $data['body'])->censor();
        }

        // Load the XML Helper
        ee()->load->helper('xml');

        $this->single_parts['include']['subject'] = htmlentities($data['subject'], ENT_QUOTES, 'UTF-8');
        $this->single_parts['include']['body'] = $data['body'];
        $this->single_parts['include']['recipients'] = xml_convert($this->convert_recipients($data['recipients'], 'string', 'screen_name'));
        $this->single_parts['include']['cc'] = ($data['cc'] == '') ? '' : xml_convert($this->convert_recipients($data['cc'], 'string', 'screen_name'));
        $this->single_parts['include']['sender'] = $data['sender'];
        $this->single_parts['include']['date'] = $data['date'];
        $this->conditionals['attachments_exist'] = 'n';

        if ($data['sender'] == ee()->session->userdata['screen_name'] && isset($data['folder_id']) && $data['folder_id'] == 2) {
            $this->conditionals['show_cc'] = 'y';
        } elseif (in_array($this->member_id, explode(', ', $data['cc']))) {
            $this->conditionals['show_cc'] = 'y';
            $this->single_parts['include']['cc'] = ee()->session->userdata['screen_name'];
        } elseif ($data['hide_cc'] == 'y' or $data['cc'] == '') {
            $this->conditionals['show_cc'] = 'n';
        } else {
            $this->conditionals['show_cc'] = 'y';
        }

        /** -----------------------------------
        /**  Prepare Attachments for Display
        /** -----------------------------------*/
        $this->conditionals['attachments_exist'] = (count($data['attachments']) > 0) ? 'y' : 'n';
        $this->single_parts['include']['attachment_links'] = (count($data['attachments']) > 0) ? $this->_attachment_links($data['attachments']) : '';

        // -----------------------------------
        //  Form Declaration
        //
        //  NOTE: $data['id'] = $message_id
        // -----------------------------------

        $details = array('hidden_fields' => array('message_id' => $copy_id, 'toggle[]' => $copy_id, 'daction' => ''),
            'action' => $this->_create_path('modify_messages'),
            'id' => 'target',
            'enctype' => 'multi',
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['view_message'] = ee()->functions->form_declaration($details);

        /** -----------------------------------
        /**  Various Components
        /** -----------------------------------*/
        $this->current_folder = (! isset($data['folder_id'])) ? 'n' : $data['folder_id'];
        $this->folders_pulldown();
        $this->_buttons();
        $this->single_parts['include']['hidden_js'] = $this->hidden_js();

        /** ----------------------------------
        /**  Reduce exp_members.private_messages
        /** ----------------------------------*/
        if ($data['message_read'] == 'n' && ee()->session->userdata['private_messages'] > 0) {
            ee()->db->query("UPDATE exp_members SET private_messages = private_messages - 1
						WHERE member_id = '{$this->member_id}'");
            ee()->session->userdata['private_messages']--;
        }

        /** -----------------------------------
        /**  Tracking and Status
        /** -----------------------------------*/
        if ($data['message_read'] == 'n') {
            $udata = array('message_read' => 'y', 'message_time_read' => ee()->localize->now);
            ee()->db->query(ee()->db->update_string('exp_message_copies', $udata, "copy_id = {$copy_id}"));
        }

        /** ----------------------------------------
        /**  Return the Compose Form Contents
        /** ----------------------------------------*/
        $this->title = ee()->lang->line('private_message') . ' - ' . ee()->functions->word_limiter($data['subject'], 10);
        $this->crumb = ee()->lang->line('private_message');
        $this->return_data = $this->_process_template($this->retrieve_template('view_message'));
    }

    /** --------------------------------
    /**  Show Attachment
    /** --------------------------------*/
    public function attachment()
    {
        if ($this->allegiance == 'cp') {
            $attach_hash = ee()->input->get_post('aid');
        } else {
            $attach_hash = $this->cur_id;
        }

        /** ---------------------------
        /**  Valid ID?
        /** ---------------------------*/
        ee()->db->select('attachment_location, attachment_name, attachment_extension, message_id');
        ee()->db->where('attachment_hash', $attach_hash);
        $query = ee()->db->get('message_attachments');

        if ($query->num_rows() == 0) {
            ee()->output->show_user_error('submission', ee()->lang->line('not_authorized'));
        }

        /** ---------------------------
        /**  Attachment for User?
        /** ---------------------------*/
        ee()->db->select('COUNT(*) as count');
        ee()->db->where('message_id', $query->row('message_id'));
        ee()->db->where('recipient_id', $this->member_id);
        $results = ee()->db->get('message_copies');

        if ($results->row('count') == 0) {
            ee()->output->show_user_error('submission', ee()->lang->line('not_authorized'));
        }

        // No trailing double slashes
        $base_path = rtrim(ee()->config->item('prv_msg_upload_path'), '/') . '/';

        $filepath = $base_path . $query->row('attachment_location') ;

        try {
            $mime = ee('MimeType')->ofFile($filepath);
        }catch(\Exception $e){
            show_error(sprintf(lang('file_not_found'), $filepath));
        }

        if (! file_exists($filepath) or ! isset($mime)) {
            ee()->output->show_user_error('submission', ee()->lang->line('not_authorized'));
        }

        ee()->db->set('attachment_downloaded = "y"');
        ee()->db->where('message_id', $query->row('message_id'));
        ee()->db->where('recipient_id', $this->member_id);
        ee()->db->update('message_copies');

        header('Content-Disposition: filename="' . $query->row('attachment_name') . '"');
        header('Content-Type: ' . $mime);
        header('Content-Transfer-Encoding: binary');
        header('Content-Length: ' . filesize($filepath));
        header('Last-Modified: ' . gmdate('D, d M Y H:i:s', ee()->localize->now) . ' GMT');

        if (! $fp = @fopen($filepath, FOPEN_READ)) {
            ee()->output->show_user_error('submission', ee()->lang->line('not_authorized'));
        }

        fpassthru($fp);
        @fclose($fp);
        exit;
    }

    /** -----------------------------------
    /**  Buddies List
    /** -----------------------------------*/
    public function buddies($message = '')
    {
        $template = $this->retrieve_template('buddies_block_list');

        $form_details = array('hidden_fields' => array('name' => '','description' => '', 'which' => 'buddy', 'daction' => ''),
            'action' => $this->_create_path('edit_list'),
            'id' => 'target',
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['list'] = ee()->functions->form_declaration($form_details);
        $this->single_parts['lang']['list_title'] = ee()->lang->line('buddy_list');
        $this->single_parts['include']['toggle_js'] = $this->toggle_js();
        $this->single_parts['include']['buddy_search_js'] = $this->buddy_search_js();
        $this->single_parts['image']['search_glass'] = '<img src="' . $this->images_folder . 'search_glass.gif" style="border: 0px" width="12" height="12" alt="' . ee()->lang->line('search_glass') . '" />';
        $this->single_parts['include']['member_search'] = '<a href="#" title="{lang:member_search}" onclick="buddy_search(1); return false;">' . $this->single_parts['image']['search_glass'] . '</a>';

        $this->single_parts['include']['list_rows'] = '';

        $this->_buttons('y', 'n', 'n');

        /** ----------------------------------------
        /**  Retrieve and Output List
        /** ----------------------------------------*/
        if ($this->buddies === false) {
            $this->fetch_lists('buddy');
        }

        $list_size = count($this->buddies);

        if ($list_size == 0) {
            $this->single_parts['include']['list_rows'] .= $this->_process_template($this->retrieve_template('empty_list'));
        } else {
            $rows = $this->retrieve_template('buddies_block_row');

            for ($i = 0; $i < $list_size; ++$i) {
                $this->single_parts['style'] = ($i % 2) ? 'tableCellOne' : 'tableCellTwo';
                $this->single_parts['screen_name'] = $this->buddies[$i]['2'];
                $this->single_parts['member_description'] = $this->buddies[$i]['3'];
                $this->single_parts['listed_id'] = $this->buddies[$i]['4'];

                if ($this->allegiance == 'user') {
                    $this->single_parts['path']['send_pm'] = $this->_create_path('pm') . '/' . $this->buddies[$i]['5'] . '/';
                } else {
                    $this->single_parts['path']['send_pm'] = $this->_create_path('pm') . AMP . 'mid=' . $this->buddies[$i]['5'];
                }

                $this->single_parts['include']['list_rows'] .= $this->_process_template($rows);
            }
        }

        /** ----------------------------------------
        /**  Return the Trackable Messages
        /** ----------------------------------------*/
        $this->title = ee()->lang->line('buddy_list');
        $this->crumb = ee()->lang->line('buddy_list');
        $this->return_data = $this->_process_template($template);
    }

    /** -----------------------------------
    /**  Bulletin Board
    /** -----------------------------------*/
    public function bulletin_board($message = '')
    {
        ee()->db->query("UPDATE exp_members SET last_view_bulletins = '" . ee()->localize->now . "' WHERE member_id = '{$this->member_id}'");

        $this->title = ee()->lang->line('bulletin_board');
        $this->crumb = ee()->lang->line('bulletin_board');

        $this->conditionals['bulletins'] = 'n';
        $this->conditionals['no_bulletins'] = 'y';
        $this->conditionals['can_post_bulletin'] = (ee('Permission')->can('send_bulletins')) ? 'y' : 'n';

        $this->single_parts['include']['message'] = $message;

        $this->conditionals['message'] = ($message != '') ? 'y' : 'n';

        $this->single_parts['path']['send_bulletin'] = $this->_create_path('send_bulletin');

        /** ---------------------------------------
        /**  Retrieve Bulletins
        /** ---------------------------------------*/
        $dql = "SELECT m.screen_name, b.sender_id, b.bulletin_message, b.bulletin_date, b.bulletin_id ";

        $sql = "FROM exp_member_bulletin_board b, exp_members m
				 WHERE b.sender_id = m.member_id
				 AND b.bulletin_group = " . ee()->db->escape_str(ee()->session->userdata('role_id')) . "
				 AND bulletin_date < " . ee()->localize->now . "
				 AND
				 (
					b.bulletin_expires > " . ee()->localize->now . "
					OR
					b.bulletin_expires = 0
				 )
				 ORDER BY b.bulletin_date DESC";

        /** ----------------------------------------
        /**  Handle Pagination
        /** ----------------------------------------*/
        $template = $this->retrieve_template('bulletin_board');

        // Check to see if the old style pagination exists
        // @deprecated 2.8
        if (stripos($template, LD . 'if paginate' . RD) !== false) {
            $template = preg_replace("/{if paginate}(.*?){\/if}/uis", "{paginate}$1{/paginate}", $template);
            ee()->load->library('logger');
            ee()->logger->developer('{if paginate} has been deprecated, use normal {paginate} tags in your bulletin board template.', true, 604800);
        }

        if (stripos($template, LD . 'include:pagination_link' . RD) !== false) {
            $template = str_replace('{include:pagination_link}', '{pagination_links}', $template);
            ee()->load->library('logger');
            ee()->logger->developer('{include:pagination_link} has been deprecated, use the {pagination_links} tag in your bulletin board template.', true, 604800);
        }

        // Load up pagination and start parsing
        ee()->load->library('pagination');
        $pagination = ee()->pagination->create();
        $pagination->position = 'inline';
        $template = $pagination->prepare($template);

        /** ----------------------------------------
        /**  Run "count" query for pagination
        /** ----------------------------------------*/
        $query = ee()->db->query("SELECT COUNT(b.bulletin_id) AS count " . $sql);

        // Limit the pagination
        if ($query->row('count') > $this->per_page) {
            $pagination->build($query->row('count'), $this->per_page);
            $sql .= " LIMIT " . $pagination->offset . ", " . $pagination->per_page;
        }

        // Pagination template must be rendered to remove pagination marker when
        // the page is not actually paginated
        $template = $pagination->render($template);

        /** ----------------------------------------
        /**  If No Messages, we say so.
        /** ----------------------------------------*/
        if ($query->row('count') == 0) {
            $this->single_parts['include']['bulletins'] = ee()->lang->line('message_no_bulletins');
            $this->return_data = $this->_process_template($template);

            return;
        }

        /** ----------------------------------------
        /**  Create Bulletins
        /** ----------------------------------------*/
        $this->conditionals['bulletins'] = 'y';
        $this->conditionals['no_bulletins'] = 'n';

        $folder_rows_template = $this->retrieve_template('bulletin');
        $i = 0;
        $r = '';
        $censor = bool_config_item('enable_censoring');

        $query = ee()->db->query($dql . $sql);

        if ($query->row('bulletin_date') != ee()->session->userdata['last_bulletin_date']) {
            ee()->db->query(ee()->db->update_string('exp_members', array('last_bulletin_date' => $query->row('bulletin_date')), "role_id = '" . ee()->db->escape_str(ee()->session->userdata('role_id')) . "'"));
        }

        foreach ($query->result_array() as $row) {
            ++$i;
            $data = $row;

            $this->conditionals['can_delete_bulletin'] = (ee('Permission')->isSuperAdmin() or $row['sender_id'] == ee()->session->userdata['member_id']) ? 'y' : 'n';

            if ($this->allegiance == 'cp') {
                $this->single_parts['path']['delete_bulletin'] = $this->_create_path('delete_bulletin', AMP . 'bulletin_id=' . $row['bulletin_id']);
            } else {
                $this->single_parts['path']['delete_bulletin'] = $this->_create_path('delete_bulletin') . '/' . $row['bulletin_id'];
            }

            $data['bulletin_message'] = ($censor === false) ? $data['bulletin_message'] : ee('Format')->make('Text', $data['bulletin_message'])->censor();
            $data['bulletin_sender'] = $row['screen_name'];
            $data['bulletin_date'] = ee()->localize->human_time($row['bulletin_date']);
            $data['style'] = ($i % 2) ? 'tableCellTwo' : 'tableCellOne';

            $r .= $this->_process_template($folder_rows_template, $data);
        }

        $this->single_parts['include']['bulletins'] = $r;

        /** ----------------------------------------
        /**  Return the Folder's Contents
        /** ----------------------------------------*/
        $this->return_data = $this->_process_template($template);
    }

    /** -----------------------------------
    /**  Delete a Bulletin
    /** -----------------------------------*/
    public function delete_bulletin()
    {
        if ($this->allegiance == 'cp') {
            if (ee()->input->get_post('bulletin_id') === false) {
                return $this->bulletin_board();
            }

            $this->cur_id = ee()->input->get_post('bulletin_id');
        }

        $sql = "SELECT b.sender_id, b.bulletin_id, b.hash
					FROM exp_member_bulletin_board b
				WHERE b.bulletin_id = '" . ee()->db->escape_str($this->cur_id) . "'";

        $query = ee()->db->query($sql);

        if ($query->num_rows() == 0) {
            return $this->bulletin_board();
        } elseif (! ee('Permission')->isSuperAdmin() && $query->row('sender_id') != ee()->session->userdata['member_id']) {
            return $this->bulletin_board();
        }

        ee()->db->query("DELETE FROM exp_member_bulletin_board WHERE hash = '" . ee()->db->escape_str($query->row('hash')) . "'");

        return $this->bulletin_board(ee()->lang->line('bulletin_deleted'));
    }

    /** -----------------------------------
    /**  Send a Bulletin Form for Admins
    /** -----------------------------------*/
    public function send_bulletin($message = '')
    {
        /** -----------------------------------
        /**  Nasty Little Hobbits! No Sending!
        /** -----------------------------------*/
        if (! ee('Permission')->can('send_bulletins')) {
            return false;
        }

        $this->title = ee()->lang->line('send_bulletin');
        $this->crumb = ee()->lang->line('send_bulletin');

        /** ----------------------------------------
        /**  Some Form Data
        /** ----------------------------------------*/
        $form_details = array('action' => $this->base_url . 'sending_bulletin',
            'id' => 'sending_bulletin',
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['sending_bulletin'] = ee()->functions->form_declaration($form_details);

        $this->single_parts['input']['bulletin_date'] = ee()->localize->human_time(ee()->localize->now);
        $this->single_parts['input']['bulletin_expires'] = ee()->localize->human_time(ee()->localize->now + 30 * 24 * 60 * 60);

        $this->single_parts['include']['message'] = $message;

        $this->conditionals['message'] = ($message != '') ? 'y' : 'n';

        // Member Group IDs

        $english = array('Members', 'Super Admins');

        $excluded = [2, 3, 4];

        if (! ee('Permission')->isSuperAdmin()) {
            $excluded[] = 1;
        }

        $role_settings = ee('Model')->get('RoleSetting')
            ->with('Role')
            ->filter('include_in_memberlist', 'y')
            ->filter('site_id', ee()->config->item('site_id'))
            ->filter('role_id', 'NOT IN', $excluded)
            ->order('Role.name')
            ->all();

        $menu = "<option value='0'>" . ee()->lang->line('mbr_all_member_groups') . "</option>\n";

        foreach ($role_settings as $role_setting) {
            $group_title = $role_setting->Role->name;

            if (in_array($group_title, $english)) {
                $group_title = ee()->lang->line(strtolower(str_replace(" ", "_", $group_title)));
            }

            $menu .= "<option value='" . $role_setting->Role->getId() . "'>" . $group_title . "</option>\n";
        }

        $this->single_parts['group_id_options'] = $menu;

        /** ----------------------------------------
        /**  Return the Parsed Template
        /** ----------------------------------------*/
        $this->return_data = $this->_process_template($this->retrieve_template('bulletin_form'));
    }

    /** -----------------------------------
    /**  Send a Bulletin to Member Group
    /** -----------------------------------*/
    public function sending_bulletin()
    {
        /** -----------------------------------
        /**  Nasty Little Hobbits! No Sending!
        /** -----------------------------------*/
        if (! ee('Permission')->can('send_bulletins')) {
            return false;
        }

        if (! isset($_POST['group_id']) or ! is_numeric($_POST['group_id'])) {
            return false;
        }

        if (! isset($_POST['bulletin_message']) or trim($_POST['bulletin_message']) == '') {
            return $this->send_bulletin();
        }

        /** ----------------------------------------
        /**  Valid Member Groups for User
        /** ----------------------------------------*/
        $excluded = [2, 3, 4];

        if (! ee('Permission')->isSuperAdmin()) {
            $excluded[] = 1;
        }

        $role_settings = ee('Model')->get('RoleSetting')
            ->with('Role')
            ->filter('include_in_memberlist', 'y')
            ->filter('site_id', ee()->config->item('site_id'))
            ->filter('role_id', 'NOT IN', $excluded)
            ->order('Role.name')
            ->all();

        $group = array();

        foreach ($role_settings as $role_setting) {
            if ($_POST['group_id'] == '0' or $_POST['group_id'] == $role_setting->Role->getId()) {
                $groups[] = $role_setting->Role->getId();
            }
        }

        /** ------------------------------
        /**  Suspicious use of non-valid group
        /** ------------------------------*/
        if (count($groups) == 0) {
            return $this->send_bulletin();
        }

        $begins = ee()->localize->string_to_timestamp($_POST['bulletin_date'], true, ee()->localize->get_date_format());
        $expires = ee()->localize->string_to_timestamp($_POST['bulletin_expires'], true, ee()->localize->get_date_format());

        if ($begins == 0) {
            $begins = ee()->localize->now;
        }

        if ($expires == 0) {
            $expires = ee()->localize->now + 30 * 24 * 60 * 60;
        }

        $data = array('sender_id' => $this->member_id,
            'bulletin_date' => $begins,
            'hash' => ee()->functions->random('alnum', 10),
            'bulletin_expires' => $expires,
            'bulletin_message' => ee()->input->post('bulletin_message', true)
        );

        foreach ($groups as $group_id) {
            $data['bulletin_group'] = $group_id;

            ee()->db->query(ee()->db->insert_string('exp_member_bulletin_board', $data));

            if (ee()->localize->now >= $begins) {
                ee()->db->query(ee()->db->update_string('exp_members', array('last_bulletin_date' => ee()->localize->now), "role_id = '" . ee()->db->escape_str($group_id) . "'"));
            }
        }

        /** ----------------------------------------
        /**  Return with Success Message
        /** ----------------------------------------*/
        $this->send_bulletin(ee()->lang->line('bulletin_success'));
    }

    /** -----------------------------------
    /**  Edit Buddies and Block Lists
    /** -----------------------------------*/
    public function edit_list()
    {
        if (ee()->input->get_post('which') === false or ee()->input->get_post('which') == 'buddy') {
            $which = 'buddy';
        } else {
            $which = 'blocked';
        }

        /** -----------------------------------
        /**  Add to List
        /** -----------------------------------*/
        if (! ee()->input->post('toggle')) {
            if (ee()->input->get_post('name') === false or ee()->input->get_post('description') === false or ee()->input->get_post('name') == '') {
                if ($which == 'blocked') {
                    return $this->_error_page('missing_required_field');
                } else {
                    return $this->_error_page('missing_required_field');
                }
            }

            $person = $this->convert_recipients(ee()->input->get_post('name'), 'array', 'member_id');

            if (count($person) == 0) {
                if ($which == 'blocked') {
                    return $this->_error_page('invalid_username');
                } else {
                    return $this->_error_page('invalid_username');
                }
            }

            $data = array('member_id' => $this->member_id,
                'listed_description' => ee('Security/XSS')->clean(ee()->functions->char_limiter($_POST['description'], 50)),
                'listed_type' => $which);

            for ($i = 0, $s = count($person); $i < $s; ++$i) {
                if ($this->member_id == $person[$i]) {
                    return $this->_error_page('invalid_username');
                } elseif ($which == 'buddy' && count($this->goodies) > 0 && in_array($person[$i], $this->goodies)) {
                    return $this->_error_page('invalid_username');
                } elseif ($which == 'blocked' && count($this->baddies) > 0 && in_array($person[$i], $this->baddies)) {
                    return $this->_error_page('invalid_username');
                }

                $data['listed_member'] = $person[$i];
                ee()->db->query(ee()->db->insert_string('exp_message_listed', $data));

                if ($which == 'blocked') {
                    ee()->db->query("DELETE FROM exp_message_copies
								WHERE sender_id = '" . ee()->db->escape_str($person[$i]) . "'
								AND recipient_id = '{$this->member_id}'");
                }
            }

            $this->fetch_lists($which);

            if ($which == 'blocked') {
                return $this->blocked();
            } else {
                return $this->buddies();
            }
        }

        /** -----------------------------------
        /**  Delete From List
        /** -----------------------------------*/
        foreach ($_POST['toggle'] as $key => $val) {
            if (ee()->input->post('daction') == 'delete') {
                ee()->db->query("DELETE FROM exp_message_listed
							WHERE member_id = '{$this->member_id}'
							AND listed_id = '" . ee()->db->escape_str($val) . "'");
            }
        }

        if ($which == 'blocked') {
            return $this->blocked();
        } else {
            return $this->buddies();
        }
    }

    /** -----------------------------------
    /**  Add Buddy
    /** -----------------------------------*/
    public function add_buddy()
    {
        if ($this->buddies === false) {
            $this->fetch_lists('buddy');
        }

        return $this->add_list_member('buddy', ($this->allegiance == 'user') ? $this->cur_id : ee()->input->get_post('mid'));
    }

    /** -----------------------------------
    /**  Add Naughty, Poo-poo head
    /** -----------------------------------*/
    public function add_block()
    {
        if ($this->blocked === false) {
            $this->fetch_lists('blocked');
        }

        return $this->add_list_member('blocked', ($this->allegiance == 'user') ? $this->cur_id : ee()->input->get_post('mid'));
    }

    /** -----------------------------------
    /**  Add to Buddy or Block List
    /** -----------------------------------*/
    public function add_list_member($which = 'buddy', $id = '')
    {
        /** -----------------------------------
        /**  Add to List
        /** -----------------------------------*/
        if (empty($id)) {
            if ($which == 'blocked') {
                return $this->blocked();
            } else {
                return $this->buddies();
            }
        }

        $person = $this->convert_recipients($id, 'array', 'member_id');

        if (count($person) == 0) {
            if ($which == 'blocked') {
                return $this->blocked();
            } else {
                return $this->buddies();
            }
        }

        $data = array('member_id' => $this->member_id,
            'listed_description' => '',
            'listed_type' => $which);

        for ($i = 0, $s = count($person); $i < $s; ++$i) {
            if ($this->member_id == $person[$i]) {
                continue;
            } elseif ($which == 'buddy' && count($this->goodies) > 0 && in_array($person[$i], $this->goodies)) {
                continue;
            } elseif ($which == 'blocked' && count($this->baddies) > 0 && in_array($person[$i], $this->baddies)) {
                continue;
            }

            $data['listed_member'] = $person[$i];
            ee()->db->query(ee()->db->insert_string('exp_message_listed', $data));

            if ($which == 'blocked') {
                ee()->db->query("DELETE FROM exp_message_copies
							WHERE sender_id = '" . ee()->db->escape_str($person[$i]) . "'
							AND recipient_id = '{$this->member_id}'");
            }
        }

        $this->fetch_lists($which);

        if ($which == 'blocked') {
            return $this->blocked();
        } else {
            return $this->buddies();
        }
    }

    /** -----------------------------------
    /**  Edit Block List
    /** -----------------------------------*/
    public function blocked()
    {
        $template = $this->retrieve_template('buddies_block_list');

        $form_details = array('hidden_fields' => array('name' => '','description' => '', 'which' => 'blocked', 'daction' => ''),
            'action' => $this->_create_path('edit_list'),
            'id' => 'target',
            'secure' => ($this->allegiance == 'cp') ? false : true
        );

        $this->single_parts['form']['form_declaration']['list'] = ee()->functions->form_declaration($form_details);
        $this->single_parts['lang']['list_title'] = ee()->lang->line('blocked_list');
        $this->single_parts['include']['toggle_js'] = $this->toggle_js();
        $this->single_parts['include']['buddy_search_js'] = $this->buddy_search_js();
        $this->single_parts['image']['search_glass'] = '<img src="' . $this->images_folder . 'search_glass.gif" style="border: 0px" width="12" height="12" alt="' . ee()->lang->line('search_glass') . '" />';
        $this->single_parts['include']['member_search'] = '<a href="#" title="{lang:member_search}" onclick="buddy_search(2); return false;">' . $this->single_parts['image']['search_glass'] . '</a>';

        $this->single_parts['include']['list_rows'] = '';

        $this->_buttons('y', 'n', 'n');

        /** ----------------------------------------
        /**  Retrieve and Output List
        /** ----------------------------------------*/
        if ($this->blocked === false) {
            $this->fetch_lists('blocked');
        }

        $list_size = count($this->blocked);

        if ($list_size == 0) {
            $this->single_parts['include']['list_rows'] .= $this->_process_template($this->retrieve_template('empty_list'));
        } else {
            $rows = $this->retrieve_template('buddies_block_row');

            for ($i = 0; $i < $list_size; ++$i) {
                $this->single_parts['style'] = ($i % 2) ? 'tableCellOne' : 'tableCellTwo';
                $this->single_parts['screen_name'] = $this->blocked[$i]['2'];
                $this->single_parts['member_description'] = $this->blocked[$i]['3'];
                $this->single_parts['listed_id'] = $this->blocked[$i]['4'];

                if ($this->allegiance == 'user') {
                    $this->single_parts['path']['send_pm'] = $this->_create_path('pm') . '/' . $this->blocked[$i]['5'];
                } else {
                    $this->single_parts['path']['send_pm'] = $this->_create_path('pm') . AMP . 'mid=' . $this->blocked[$i]['5'];
                }

                $this->single_parts['include']['list_rows'] .= $this->_process_template($rows);
            }
        }

        /** ----------------------------------------
        /**  Return the Trackable Messages
        /** ----------------------------------------*/
        $this->title = ee()->lang->line('blocked_list');
        $this->crumb = ee()->lang->line('blocked_list');
        $this->return_data = $this->_process_template($template);
    }

    /** --------------------------------
    /**  Generate Error Page
    /** --------------------------------*/
    public function _error_page($msg = 'not_authorized', $replace = array())
    {
        $error = (! isset(ee()->lang->language[$msg])) ? $msg : ee()->lang->line($msg);

        if (count($replace) > 0) {
            foreach ($replace as $key => $value) {
                $error = str_replace($key, $value, $error);
            }
        }

        $this->single_parts['lang']['heading'] = ee()->lang->line('error');
        $this->single_parts['lang']['message'] = $error;

        $this->title = ee()->lang->line('error');
        $this->crumb = ee()->lang->line('error');

        $this->return_data = $this->_process_template($this->retrieve_template('message_error'));

        return;
    }

    // -----------------------------------
    //  Maintenance
    //  This is where we do some automatic
    //  stuff such as erasing old and deleted messages
    // -----------------------------------

    public function maintenance()
    {
        $deletion_time = ee()->localize->now - ($this->delete_expiration * 24 * 60 * 60);

        // Erase old deleted messages

        $query = ee()->db->query("SELECT copy_id FROM exp_message_copies
							 WHERE recipient_id = '{$this->member_id}'
							 AND message_deleted = 'y'
							 AND message_time_read < $deletion_time");

        if ($query->num_rows() > 0) {
            $delete = array();

            foreach ($query->result_array() as $row) {
                $delete[] = $row['copy_id'];
            }

            $this->erase($delete);
        }

        // Erase old, unused sent messages

        $query = ee()->db->query("SELECT d.message_id FROM exp_message_data d
							 LEFT JOIN exp_message_copies c ON (d.message_id = c.message_id)
							 WHERE d.sender_id = '{$this->member_id}'
							 AND d.message_status = 'sent'
							 AND d.message_date < $deletion_time
							 AND c.message_id IS NULL");

        if ($query->num_rows() > 0) {
            $delete = array();

            foreach ($query->result_array() as $row) {
                $delete[] = $row['message_id'];
            }

            if (count($delete) > 0) {
                ee()->db->query("DELETE FROM exp_message_data WHERE message_id IN ('" . implode("','", $delete) . "')");
            }
        }
    }

    /** -----------------------------------
    /**  JavaScript for Move Button
    /** -----------------------------------*/
    public function hidden_js()
    {
        $str = <<<MRT

<script type="text/javascript">
//<![CDATA[
// ===================================================================
// Author: Matt Kruse <matt@mattkruse.com>
// WWW: http://www.mattkruse.com/
//
// NOTICE: You may use this code for any purpose, commercial or
// private, without any further permission from the author. You may
// remove this notice from your final code if you wish, however it is
// appreciated by the author if at least my web site address is kept.
//
// You may *NOT* re-distribute this code in any way except through its
// use. That means, you can include it in your product, or your web
// site, or any other form where the code is actually being used. You
// may not put the plain javascript up on your site for download or
// include it in your javascript libraries for download.
// If you wish to share this code with others, please just point them
// to the URL instead.
// Please DO NOT link directly to my .js files from your site. Copy
// the files to your server and use them there. Thank you.
// ===================================================================


/* SOURCE FILE: AnchorPosition.js */
/*
AnchorPosition.js
Author: Matt Kruse
Last modified: 10/11/02

DESCRIPTION: These functions find the position of an <A> tag in a document,
so other elements can be positioned relative to it.

COMPATABILITY: Netscape 4.x,6.x,Mozilla, IE 5.x,6.x on Windows. Some small
positioning errors - usually with Window positioning - occur on the
Macintosh platform.

FUNCTIONS:
getAnchorPosition(anchorname)
  Returns an Object() having .x and .y properties of the pixel coordinates
  of the upper-left corner of the anchor. Position is relative to the PAGE.

getAnchorWindowPosition(anchorname)
  Returns an Object() having .x and .y properties of the pixel coordinates
  of the upper-left corner of the anchor, relative to the WHOLE SCREEN.

NOTES:

1) For popping up separate browser windows, use getAnchorWindowPosition.
	Otherwise, use getAnchorPosition

2) Your anchor tag MUST contain both NAME and ID attributes which are the
	same. For example:
	<A NAME="test" ID="test"> </A>

3) There must be at least a space between <A> </A> for IE5.5 to see the
	anchor tag correctly. Do not do <A></A> with no space.
*/

// getAnchorPosition(anchorname)
//	This function returns an object having .x and .y properties which are the coordinates
//	of the named anchor, relative to the page.
function getAnchorPosition(anchorname) {
	// This function will return an Object with x and y properties
	var useWindow=false;
	var coordinates=new Object();
	var x=0,y=0;
	// Browser capability sniffing
	var use_gebi=false, use_css=false, use_layers=false;
	if (document.getElementById) { use_gebi=true; }
	else if (document.all) { use_css=true; }
	else if (document.layers) { use_layers=true; }
	// Logic to find position
	if (use_gebi && document.all) {
		x=AnchorPosition_getPageOffsetLeft(document.all[anchorname]);
		y=AnchorPosition_getPageOffsetTop(document.all[anchorname]);
		}
	else if (use_gebi) {
		var o=document.getElementById(anchorname);
		x=AnchorPosition_getPageOffsetLeft(o);
		y=AnchorPosition_getPageOffsetTop(o);
		}
	else if (use_css) {
		x=AnchorPosition_getPageOffsetLeft(document.all[anchorname]);
		y=AnchorPosition_getPageOffsetTop(document.all[anchorname]);
		}
	else if (use_layers) {
		var found=0;
		for (var i=0; i<document.anchors.length; i++) {
			if (document.anchors[i].name==anchorname) { found=1; break; }
			}
		if (found==0) {
			coordinates.x=0; coordinates.y=0; return coordinates;
			}
		x=document.anchors[i].x;
		y=document.anchors[i].y;
		}
	else {
		coordinates.x=0; coordinates.y=0; return coordinates;
		}
	coordinates.x=x;
	coordinates.y=y;
	return coordinates;
	}

// getAnchorWindowPosition(anchorname)
//	This function returns an object having .x and .y properties which are the coordinates
//	of the named anchor, relative to the window
function getAnchorWindowPosition(anchorname) {
	var coordinates=getAnchorPosition(anchorname);
	var x=0;
	var y=0;
	if (document.getElementById) {
		if (isNaN(window.screenX)) {
			x=coordinates.x-document.body.scrollLeft+window.screenLeft;
			y=coordinates.y-document.body.scrollTop+window.screenTop;
			}
		else {
			x=coordinates.x+window.screenX+(window.outerWidth-window.innerWidth)-window.pageXOffset;
			y=coordinates.y+window.screenY+(window.outerHeight-24-window.innerHeight)-window.pageYOffset;
			}
		}
	else if (document.all) {
		x=coordinates.x-document.body.scrollLeft+window.screenLeft;
		y=coordinates.y-document.body.scrollTop+window.screenTop;
		}
	else if (document.layers) {
		x=coordinates.x+window.screenX+(window.outerWidth-window.innerWidth)-window.pageXOffset;
		y=coordinates.y+window.screenY+(window.outerHeight-24-window.innerHeight)-window.pageYOffset;
		}
	coordinates.x=x;
	coordinates.y=y;
	return coordinates;
	}

// Functions for IE to get position of an object
function AnchorPosition_getPageOffsetLeft (el) {
	var ol=el.offsetLeft;
	while ((el=el.offsetParent) != null) { ol += el.offsetLeft; }
	return ol;
	}
function AnchorPosition_getWindowOffsetLeft (el) {
	return AnchorPosition_getPageOffsetLeft(el)-document.body.scrollLeft;
	}
function AnchorPosition_getPageOffsetTop (el) {
	var ot=el.offsetTop;
	while((el=el.offsetParent) != null) { ot += el.offsetTop; }
	return ot;
	}
function AnchorPosition_getWindowOffsetTop (el) {
	return AnchorPosition_getPageOffsetTop(el)-document.body.scrollTop;
	}

/* SOURCE FILE: PopupWindow.js */
/*
PopupWindow.js
Author: Matt Kruse
Last modified: 02/16/04

DESCRIPTION: This object allows you to easily and quickly popup a window
in a certain place. The window can either be a DIV or a separate browser
window.

COMPATABILITY: Works with Netscape 4.x, 6.x, IE 5.x on Windows. Some small
positioning errors - usually with Window positioning - occur on the
Macintosh platform. Due to bugs in Netscape 4.x, populating the popup
window with <STYLE> tags may cause errors.

USAGE:
// Create an object for a WINDOW popup
var win = new PopupWindow();

// Create an object for a DIV window using the DIV named 'mydiv'
var win = new PopupWindow('mydiv');

// Set the window to automatically hide itself when the user clicks
// anywhere else on the page except the popup
win.autoHide();

// Show the window relative to the anchor name passed in
win.showPopup(anchorname);

// Hide the popup
win.hidePopup();

// Set the size of the popup window (only applies to WINDOW popups
win.setSize(width,height);

// Populate the contents of the popup window that will be shown. If you
// change the contents while it is displayed, you will need to refresh()
win.populate(string);

// set the URL of the window, rather than populating its contents
// manually
win.setUrl("http://www.site.com/");

// Refresh the contents of the popup
win.refresh();

// Specify how many pixels to the right of the anchor the popup will appear
win.offsetX = 50;

// Specify how many pixels below the anchor the popup will appear
win.offsetY = 100;

NOTES:
1) Requires the functions in AnchorPosition.js

2) Your anchor tag MUST contain both NAME and ID attributes which are the
	same. For example:
	<A NAME="test" ID="test"> </A>

3) There must be at least a space between <A> </A> for IE5.5 to see the
	anchor tag correctly. Do not do <A></A> with no space.

4) When a PopupWindow object is created, a handler for 'onmouseup' is
	attached to any event handler you may have already defined. Do NOT define
	an event handler for 'onmouseup' after you define a PopupWindow object or
	the autoHide() will not work correctly.
*/

// Set the position of the popup window based on the anchor
function PopupWindow_getXYPosition(anchorname) {
	var coordinates;
	if (this.type == "WINDOW") {
		coordinates = getAnchorWindowPosition(anchorname);
		}
	else {
		coordinates = getAnchorPosition(anchorname);
		}
	this.x = coordinates.x;
	this.y = coordinates.y;
	}
// Set width/height of DIV/popup window
function PopupWindow_setSize(width,height) {
	this.width = width;
	this.height = height;
	}
// Fill the window with contents
function PopupWindow_populate(contents) {
	this.contents = contents;
	this.populated = false;
	}
// Set the URL to go to
function PopupWindow_setUrl(url) {
	this.url = url;
	}
// Set the window popup properties
function PopupWindow_setWindowProperties(props) {
	this.windowProperties = props;
	}
// Refresh the displayed contents of the popup
function PopupWindow_refresh() {
	if (this.divName != null) {
		// refresh the DIV object
		if (this.use_gebi) {
			document.getElementById(this.divName).innerHTML = this.contents;
			}
		else if (this.use_css) {
			document.all[this.divName].innerHTML = this.contents;
			}
		else if (this.use_layers) {
			var d = document.layers[this.divName];
			d.document.open();
			d.document.writeln(this.contents);
			d.document.close();
			}
		}
	else {
		if (this.popupWindow != null && ! this.popupWindow.closed) {
			if (this.url!="") {
				this.popupWindow.location.href=this.url;
				}
			else {
				this.popupWindow.document.open();
				this.popupWindow.document.writeln(this.contents);
				this.popupWindow.document.close();
			}
			this.popupWindow.focus();
			}
		}
	}
// Position and show the popup, relative to an anchor object
function PopupWindow_showPopup(anchorname) {
	this.getXYPosition(anchorname);
	this.x += this.offsetX;
	this.y += this.offsetY;
	if ( ! this.populated && (this.contents != "")) {
		this.populated = true;
		this.refresh();
		}
	if (this.divName != null) {
		// Show the DIV object
		if (this.use_gebi) {
			document.getElementById(this.divName).style.left = this.x + "px";
			document.getElementById(this.divName).style.top = this.y + "px";
			document.getElementById(this.divName).style.visibility = "visible";
			}
		else if (this.use_css) {
			document.all[this.divName].style.left = this.x;
			document.all[this.divName].style.top = this.y;
			document.all[this.divName].style.visibility = "visible";
			}
		else if (this.use_layers) {
			document.layers[this.divName].left = this.x;
			document.layers[this.divName].top = this.y;
			document.layers[this.divName].visibility = "visible";
			}
		}
	else {
		if (this.popupWindow == null || this.popupWindow.closed) {
			// If the popup window will go off-screen, move it so it doesn't
			if (this.x<0) { this.x=0; }
			if (this.y<0) { this.y=0; }
			if (screen && screen.availHeight) {
				if ((this.y + this.height) > screen.availHeight) {
					this.y = screen.availHeight - this.height;
					}
				}
			if (screen && screen.availWidth) {
				if ((this.x + this.width) > screen.availWidth) {
					this.x = screen.availWidth - this.width;
					}
				}
			var avoidAboutBlank = window.opera || ( document.layers && ! navigator.mimeTypes['*'] ) || navigator.vendor == 'KDE' || ( document.childNodes && ! document.all && ! navigator.taintEnabled );
			this.popupWindow = window.open(avoidAboutBlank?"":"about:blank","window_"+anchorname,this.windowProperties+",width="+this.width+",height="+this.height+",screenX="+this.x+",left="+this.x+",screenY="+this.y+",top="+this.y+"");
			}
		this.refresh();
		}
	}
// Hide the popup
function PopupWindow_hidePopup() {
	if (this.divName != null) {
		if (this.use_gebi) {
			document.getElementById(this.divName).style.visibility = "hidden";
			}
		else if (this.use_css) {
			document.all[this.divName].style.visibility = "hidden";
			}
		else if (this.use_layers) {
			document.layers[this.divName].visibility = "hidden";
			}
		}
	else {
		if (this.popupWindow && ! this.popupWindow.closed) {
			this.popupWindow.close();
			this.popupWindow = null;
			}
		}
	}
// Pass an event and return whether or not it was the popup DIV that was clicked
function PopupWindow_isClicked(e) {
	if (this.divName != null) {
		if (this.use_layers) {
			var clickX = e.pageX;
			var clickY = e.pageY;
			var t = document.layers[this.divName];
			if ((clickX > t.left) && (clickX < t.left+t.clip.width) && (clickY > t.top) && (clickY < t.top+t.clip.height)) {
				return true;
				}
			else { return false; }
			}
		else if (document.all) { // Need to hard-code this to trap IE for error-handling
			var t = window.event.srcElement;
			while (t.parentElement != null) {
				if (t.id==this.divName) {
					return true;
					}
				t = t.parentElement;
				}
			return false;
			}
		else if (this.use_gebi && e) {
			var t = e.originalTarget;
			try {while (t.parentNode != null) {
				if (t.id==this.divName) {
					return true;
					}
				t = t.parentNode;
				} } catch(g) {}
			return false;
			}
		return false;
		}
	return false;
	}

// Check an onmouseDown event to see if we should hide
function PopupWindow_hideIfNotClicked(e) {
	if (this.autoHideEnabled && ! this.isClicked(e)) {
		this.hidePopup();
		}
	}
// Call this to make the DIV disable automatically when mouse is clicked outside it
function PopupWindow_autoHide() {
	this.autoHideEnabled = true;
	}
// This global function checks all PopupWindow objects onmouseup to see if they should be hidden
function PopupWindow_hidePopupWindows(e) {
	for (var i=0; i<popupWindowObjects.length; i++) {
		if (popupWindowObjects[i] != null) {
			var p = popupWindowObjects[i];
			p.hideIfNotClicked(e);
			}
		}
	}
// Run this immediately to attach the event listener
function PopupWindow_attachListener() {
	if (document.layers) {
		document.captureEvents(Event.MOUSEUP);
		}
	window.popupWindowOldEventListener = document.onmouseup;
	if (window.popupWindowOldEventListener != null) {
		document.onmouseup = new Function("window.popupWindowOldEventListener(); PopupWindow_hidePopupWindows();");
		}
	else {
		document.onmouseup = PopupWindow_hidePopupWindows;
		}
	}
// CONSTRUCTOR for the PopupWindow object
// Pass it a DIV name to use a DHTML popup, otherwise will default to window popup
function PopupWindow() {
	if ( ! window.popupWindowIndex) { window.popupWindowIndex = 0; }
	if ( ! window.popupWindowObjects) { window.popupWindowObjects = new Array(); }
	if ( ! window.listenerAttached) {
		window.listenerAttached = true;
		PopupWindow_attachListener();
		}
	this.index = popupWindowIndex++;
	popupWindowObjects[this.index] = this;
	this.divName = null;
	this.popupWindow = null;
	this.width=0;
	this.height=0;
	this.populated = false;
	this.visible = false;
	this.autoHideEnabled = false;

	this.contents = "";
	this.url="";
	this.windowProperties="toolbar=no,location=no,status=no,menubar=no,scrollbars=auto,resizable,alwaysRaised,dependent,titlebar=no";
	if (arguments.length>0) {
		this.type="DIV";
		this.divName = arguments[0];
		}
	else {
		this.type="WINDOW";
		}
	this.use_gebi = false;
	this.use_css = false;
	this.use_layers = false;
	if (document.getElementById) { this.use_gebi = true; }
	else if (document.all) { this.use_css = true; }
	else if (document.layers) { this.use_layers = true; }
	else { this.type = "WINDOW"; }
	this.offsetX = 0;
	this.offsetY = 0;
	// Method mappings
	this.getXYPosition = PopupWindow_getXYPosition;
	this.populate = PopupWindow_populate;
	this.setUrl = PopupWindow_setUrl;
	this.setWindowProperties = PopupWindow_setWindowProperties;
	this.refresh = PopupWindow_refresh;
	this.showPopup = PopupWindow_showPopup;
	this.hidePopup = PopupWindow_hidePopup;
	this.setSize = PopupWindow_setSize;
	this.isClicked = PopupWindow_isClicked;
	this.autoHide = PopupWindow_autoHide;
	this.hideIfNotClicked = PopupWindow_hideIfNotClicked;
	}

//]]>
</script>

<script type="text/javascript">
//<![CDATA[

var move_visible = 'n';
var copy_visible = 'n';

function dynamic_move()
{
	if (move_visible == 'y')
	{
		move_visible = 'n';
		movepopup.hidePopup();
	}
	else
	{
		copypopup.hidePopup();
		copy_visible = 'n';
		document.getElementById('target').copyto.options['0'].selected = 'none';
		movepopup.showPopup('move');
		move_visible = 'y';
	}

	dynamic_action('move');
}

function dynamic_copy()
{
	if (copy_visible == 'y')
	{
		copy_visible = 'n';
		copypopup.hidePopup();
	}
	else
	{
		movepopup.hidePopup();
		move_visible = 'n';
		document.getElementById('target').moveto.options['0'].selected = 'none';
		copypopup.showPopup('copy');
		copy_visible = 'y';
	}

	dynamic_action('copy');
}

function dynamic_action(which)
{
	if (document.getElementById('target').daction)
	{
		document.getElementById('target').daction.value = which;
	}
}


function dynamic_emoticons()
{
	emoticonspopup.showPopup('emoticons');
}

//]]>
</script>


MRT;

        return $str;
    }

    /** -----------------------------------
    /**  Show Hide JS
    /** -----------------------------------*/
    public function showhide_js()
    {
        $prefix = (! ee()->config->item('cookie_prefix')) ? 'exp_' : ee()->config->item('cookie_prefix') . '_';
        $path = (! ee()->config->item('cookie_path')) ? '/' : ee()->config->item('cookie_path');
        $domain = (! ee()->config->item('cookie_domain')) ? '' : ee()->config->item('cookie_domain');
        $domain = ($domain == '') ? '' : 'domain=' . $domain;

        $str = <<<EOT
<script type="text/javascript">
//<![CDATA[
function showHide(entryID, htmlObj)
{
	extTextDivID = ('extText' + (entryID));
	extLinkDivID = ('extLink' + (entryID));

	if (document.getElementById(extTextDivID).style.display == 'none')
	{
		document.getElementById(extTextDivID).style.display = "block";
		document.getElementById(extLinkDivID).innerHTML = "[-]";
		document.cookie = "{$prefix}myaccount_messages=on;{$domain};path={$path};";
	}
	else
	{
		document.getElementById(extTextDivID).style.display = "none";
		document.getElementById(extLinkDivID).innerHTML = "[+]";
		document.cookie = "{$prefix}myaccount_messages=off;{$domain};path={$path};";
	}
}

//]]>
</script>
EOT;

        return $str;
    }

    /** -----------------------------------------------------------
    /**  Emoticons
    /** -----------------------------------------------------------*/
    public function emoticons()
    {
        $r = '';

        if (! is_file(PATH_ADDONS . 'emoticon/emoticons.php')) {
            return $r;
        } else {
            require PATH_ADDONS . 'emoticon/emoticons.php';
        }

        if (! is_array($smileys)) {
            return $r;
        }

        $path = ee()->config->slash_item('emoticon_url');

        $i = 1;

        $dups = array();

        foreach ($smileys as $key => $val) {
            if ($i == 1 and substr($r, -5) != "<tr>\n") {
                $r .= "<tr>\n";
            }

            if (in_array($smileys[$key]['0'], $dups)) {
                continue;
            }

            $r .= "<td><a href=\"javascript:void(0);\" onclick=\"return add_smiley('" . $key . "');return false;\"><img src=\"" . $path . $smileys[$key]['0'] . "\" width=\"" . $smileys[$key]['1'] . "\" height=\"" . $smileys[$key]['2'] . "\" alt=\"" . $smileys[$key]['3'] . "\" style=\"border: 0px;\" /></a></td>\n";

            $dups[] = $smileys[$key]['0'];

            if ($i == $this->emoticons_per_row) {
                $r .= "</tr>\n";

                $i = 1;
            } else {
                $i++;
            }
        }

        $r = rtrim($r);

        if (substr($r, -5) != "</tr>") {
            $r .= "</tr>\n";
        }

        return $r;
    }

    /** -----------------------------------------
    /**  Base IFRAME for Spell Check
    /** -----------------------------------------*/
    public function spellcheck_iframe()
    {
        if (! class_exists('EE_Spellcheck')) {
            require APPPATH . 'libraries/Spellcheck.php';
        }

        return EE_Spellcheck::iframe();
    }

    /** -----------------------------------------
    /**  Spell Check for Textareas
    /** -----------------------------------------*/
    public function spellcheck()
    {
        if (! class_exists('EE_Spellcheck')) {
            require APPPATH . 'libraries/Spellcheck.php';
        }

        return EE_Spellcheck::check();
    }

    /** --------------------------------
    /**  SpellCheck - JS
    /** --------------------------------*/
    public function spellcheck_js()
    {
        if (! class_exists('EE_Spellcheck')) {
            require APPPATH . 'libraries/Spellcheck.php';
        }

        $SPELL = new EE_Spellcheck();

        $this->spellcheck_enabled = $SPELL->enabled;

        return $SPELL->JavaScript($this->_create_path('spellcheck'), true);
    }

    /** --------------------------------
    /**  Submit Member to List - JS
    /** --------------------------------*/
    public function list_js()
    {
        return <<<EWOK

<script type="text/javascript">
//<![CDATA[
function list_addition()
{
	var member_text = '{lang:member_usernames}';
	var member_description = '{lang:member_description} {lang:description_charlimit}';

	var Name = prompt(member_text, '');

	 if ( ! Name || Name == null)
	 {
		return;
	 }

	 var Description = prompt(member_description, '');

	 if ( ! Name || Name == null)
	 {
		return;
	 }

	 document.getElementById('target').name.value = Name;
	 document.getElementById('target').description.value = Description;
	 document.getElementById('target').submit();
}

function dynamic_action(which)
{
	if (document.getElementById('target').daction)
	{
		document.getElementById('target').daction.value = which;
	}
}


//]]>
</script>
EWOK;
    }

    // -----------------------------------
    //  JavaScript for Recipients and
    //  CC Field Member Search for Composing
    // -----------------------------------

    public function search_js()
    {
        if ($this->allegiance == 'cp') {
            $url = ee()->config->item('cp_url', false) . '?S=' . ee()->session->session_id() . '&C=myaccount&M=messages&P=member_search&Z=1';
            $field = "&field='+which_field";
        } else {
            $url = $this->base_url . 'member_search/';
            $field = "'+which_field";
        }

        $str = <<<MRI

<script type="text/javascript">
//<![CDATA[
function perform_search(field)
{
	if (field == 2)
	{
		var which_field = 'cc';
	}
	else
	{
		var which_field = 'recipients';
	}

	var popWin = window.open('{$url}{$field}, '_blank', 'width=700,height=460,scrollbars=yes,status=yes,screenx=0,screeny=0,resizable=yes');
}

//]]>
</script>

MRI;

        return $str;
    }

    // -----------------------------------
    //  JavaScript for Member Search for
    //  Buddy and Block Lists
    // -----------------------------------

    public function buddy_search_js()
    {
        if ($this->allegiance == 'cp') {
            $url = ee()->config->item('cp_url', false) . '?S=' . ee()->session->session_id() . '&C=myaccount&M=messages&P=buddy_search&Z=1';
            $which = "&which='+which";
        } else {
            $url = $this->base_url . 'buddy_search/';
            $which = "'+which";
        }

        $str = <<<MRI

<script type="text/javascript">
//<![CDATA[
function buddy_search(which)
{
	if (which == 2)
	{
		var which = 'blocked';
	}
	else
	{
		var which = 'buddy';
	}

	var popWin = window.open('{$url}{$which}, '_blank', 'width=450,height=480,scrollbars=yes,status=yes,screenx=0,screeny=0,resizable=yes');
}

//]]>
</script>

MRI;

        return $str;
    }

    /** -----------------------------------
    /**  Counter for Counting Text, duh!
    /** -----------------------------------*/
    public function text_counter_js()
    {
        $str = <<<MRI

<script type="text/javascript">
//<![CDATA[
function text_counter(field)
{
	var max		= {$this->max_chars};
	var base	= document.forms.submit_message;
	var cur		= base.body.value.length;

	if (cur > max)
	{
		base.body.value = base.body.value.substring(0, max);
	}
	else
	{
		base.charsleft.value = max - cur
	}
}

//]]>
</script>

MRI;

        return $str;
    }

    /** ----------------------------------------
    /**  Toggle JavaScript used everywhere!
    /** ----------------------------------------*/
    public function toggle_js()
    {
        $str = <<<EOT

<script type="text/javascript">
//<![CDATA[

function toggle(thebutton)
{
	if (thebutton.checked)
	{
		val = true;
	}
	else
	{
		val = false;
	}

	if (document.target)
	{
		var theForm = document.target;
	}
	else if (document.getElementById('target'))
	{
		var theForm = document.getElementById('target');
	}
	else
	{
		return false;
	}

	var len = theForm.elements.length;

	for (var i = 0; i < len; i++)
	{
		var button = theForm.elements[i];

		var name_array = button.name.split("[");

		if (name_array[0] == "toggle")
		{
			button.checked = val;
		}
	}

	theForm.toggleflag.checked = val;
}
//]]>
</script>

EOT;

        return trim($str);
    }

    // --------------------------------
    //  Headers for Compose Page
    //  Allows the Dynamic Address Book
    // --------------------------------

    public function compose_header_js()
    {
        return <<<DOD

<script type="text/javascript">
//<![CDATA[

var buddy_div = 'address_book';

var agent = navigator.userAgent.toLowerCase();
var Opera = agent.indexOf("opera") != -1;
var MSIE = agent.indexOf("msie") != -1 && (document.all && !Opera);
var Konq = agent.indexOf("konqueror") != -1;
var Safari = agent.indexOf("safari") != -1 || Konq;
var Moz = !MSIE && (!Safari && (agent.indexOf("mozilla") != -1 || Opera));

var matches = new Array();
var current = 0;

function getChar(e) {

	if (document.getElementById(buddy_div).innerHTML == '') return;
	if (matches.length == 0) return;

	if (window.event)
	{
		e = window.event;
	}

	// IE and Firefox
	// tab => 9
	// return => 13
	// up => 38
	// down => 40

	var charCode = ( ! e.which || e.which == 0) ? e.keyCode : e.which;
	var action	 = 'next';

	switch(charCode)
	{
		case 38:
			action = 'previous';
			current--;
		break;
		case 40:
			action = 'next';
			current++;
		break;
		default:
			return true;
	}

	if (current < 0) current = 0;
	if (current > matches.length - 1) current = matches.length - 1;

	for (var p=0, str=""; p < matches.length; p++)
	{
		if (p == current)
		{
			str += "<div style='padding: 3px; background-color:#aaffaa'><a href='#' onclick='add_email(this.innerHTML); return false;'>" + matches[p] + "<"+"/a></div>";
		}
		else
		{
			str += "<div style='padding: 3px;'><a href='#' onclick='add_email(this.innerHTML); return false;'>" + matches[p] + "<"+"/a></div>";
		}
	}

	document.getElementById(buddy_div).innerHTML = str;
	return false;
}

function getCharTab(e) {

	if (document.getElementById(buddy_div).innerHTML == '') return;
	if (matches.length == 0) return;

	if (window.event)
	{
		e = window.event;
	}

	var charCode = ( ! e.which || e.which == 0) ? e.keyCode : e.which;
	var action	 = 'next';

	switch(charCode)
	{
		case 9:
			action = 'insert';
		break;
		case 13:
			action = 'insert';
		break;
		default:
			return true;
	}

	setTimeout("add_email('"+matches[current]+"')", 0);
	buddypopup.hidePopup();
	document.getElementById(buddy_div).innerHTML = '';
	current = 0;
	matches = new Array();
	return false;
}



document.onkeydown = getCharTab;
document.onkeyup = getChar;

//]]>
</script>

DOD;
    }

    /** --------------------------------
    /**  Dynamic Address Book DIV & Javascript
    /** --------------------------------*/
    public function dynamic_address_book()
    {
        if ($this->buddies === false) {
            $this->fetch_lists('buddy');
        }

        $str = '';

        for ($i = 0, $s = count($this->buddies); $i < $s; $i++) {
            $str .= NL . "\tbuddies_email[{$i}] = ['" . htmlspecialchars($this->buddies[$i]['2'], ENT_QUOTES) . "'];" . NL;
        }

        return <<<DIRT

<div id="address_book" class="tableCellOne" style="border: 1px solid #666; padding: 1px;position:absolute;visibility:hidden;"></div>

<script type="text/javascript">
//<![CDATA[

if (document.getElementById(buddy_div))
{
	var buddypopup = new PopupWindow(buddy_div);
	buddypopup.offsetY=0;
	buddypopup.offsetX=0;
	buddypopup.autoHide();
}

var selectedField = 'recipients';
var lastString = '';

function buddy_list(which)
{
	selectedField = which;

	matches		  = new Array();
	buddies_email = new Array();

	{$str}

	if (buddies_email.length == 0)
	{
		buddypopup.hidePopup();
		document.getElementById(buddy_div).innerHTML = '';
		return;
	}

	currentString = eval("document.getElementById('submit_message')." + which + ".value");

	if (currentString == '')
	{
		buddypopup.hidePopup();
		document.getElementById(buddy_div).innerHTML = '';
		return;
	}

	if (lastString == currentString)
	{
		return;
	}

	splitString = currentString.split(',');

	checkString = splitString[splitString.length - 1];
	checkString = checkString.toLowerCase();
	checkString = checkString.replace(/^\s*/, '').replace(/\s*$/, '');

	if (checkString.length == 0)
	{
		buddypopup.hidePopup();
		document.getElementById(buddy_div).innerHTML = '';
		return;
	}

	compareString = eval("/^" + checkString + "/gi");

	for(var i=0, email='', t=0; i < buddies_email.length; i++, name='', email='')
	{
		if (buddies_email[i][0].toLowerCase().substr('0',checkString.length).indexOf(checkString) > -1)
		{
			replaceString = buddies_email[i][0].slice(0, checkString.length);
			email = buddies_email[i][0].replace(compareString, replaceString.bold());
		}

		if(email != '')
		{
			matches[t] = email; t++;
		}

		if(matches.length > 25)
		{
			break;
		}
	}

	if (matches.length == 0)
	{
		buddypopup.hidePopup();
		document.getElementById(buddy_div).innerHTML = '';
		return;
	}

	for (var p=0, str=""; p < matches.length; p++)
	{
		if (p == 0)
		{
			str += "<div style='padding: 3px; background-color:#aaffaa'><a href='#' onclick='add_email(this.innerHTML); return false;'>" + matches[p] + "<"+"/a></div>";
		}
		else
		{
			str += "<div style='padding: 3px;'><a href='#' onclick='add_email(this.innerHTML); return false;'>" + matches[p] + "<"+"/a></div>";
		}
	}

	buddypopup.showPopup(which+'_buddies');
	document.getElementById(buddy_div).innerHTML = str;
}


function add_email(replaceString)
{
	curField = eval("document.getElementById('submit_message')." + selectedField);
	replaceString = replaceString.replace(/^ /,'').replace(/ $/,'');
	replaceString = replaceString.replace(/<B>/gi,'').replace(/<\/B>/gi,'');

	splitString = curField.value.split(',');

	for (i=0, newText=''; i < (splitString.length - 1); i++)
	{
		newText += splitString[i].replace(/^ /,'').replace(/ $/,'') + ', ';
	}

	buddypopup.hidePopup();

	newText += replaceString + ', ';

	curField.value = newText;

	curField.blur();
	curField.focus();
}

//]]>
</script>
DIRT;
    }

    /*
                                          ,.   '\'\    ,---.
         Quiet, Paul, I'm pondering.     | \\  l\\l_ //    |
                _              _         |  \\/ `/  `.|    |   Err...right, Rick! Narf!
              / \\   \        //\        | Y |   |   ||  Y |
              |  \\   \      //  |       |  \|   |   |\ /  |   /
              [   ||        ||   ]       \   |  o|o  | >  /   /
             ]    ||        ||    [       \___\_--_ /_/__/
             |  \_|l,------.l|_/  |       /.-\(____) /--.\
             |   >'          `<   |       `--(______)----'
             \  (/~'--____--'~\)  /           U// U / \
              `-_>-__________-<_-'            / \  / /|
                  /(_*(__)*_)\               ( .) / / ]
                  \___/__\___/                `.`' /   [
                   /__`--'__\                  |`-'    |
                /\(__,>-~~ __)                 |       |__
             /\//\\\        /                 _l       |--:.
             '\/  <^\      /^>               |  `    ( |   \\
                  _\ >-__-< /_             ,-\  ,-~~->. \   `:.___,/
                 (___\    /___)           (____/    (____)    `---'


                        SRKmHWgK         6HP
                       WRWWQWm              yQgX
                    zWQQqRRWT                 rqQqB
                  gqQqRtWR          fbXn16hs    XXRQq0
                gXkQ8X           pkSb     b04     RQQXXK
              QXXQkQ7          aDahC      XSO      RbXQQRQ
            R88kXXQ          PZFwX       kkk        bQkQkRQLt
           QdXkkdXt        rYOZ4Vt     4bd6          qXk8X8QR
          gQQQd8kp        G6TuTy     3khP            tXQQQQRQa
          Q888Xdb2        1TuL6    pkS       Q        RX8QQRQH
          Kb88kSd8        YZZZ6yF6         4h        zk888RQR
           QQQ8bdbV       ywyn            k          X8b8RRg
            uQXb8Qb6      zFDD          X4          XQbQXbQ
              gRb8Qkh      apX        wQ          t8QXQQW
                bR8QbE      hSF    1bA          bQbR8W
                  zBXQRa      zDDf2         KqQRqRbgy
                    tGEgQh                aQRRqXXW
                        CmWQ             KRRQgqQ
                             wqC       HmQpYj

    */
}

// EOF
