View X Last Private Messages In AdminCP 1.1

Hack Built By: FatalBreeze
Version: 1.1
Date: 10/7/2005
Name Of Hack: View X Last Private Messages In AdminCP.

THE ENTIRE HACK IS BUILT IN ENGLISH!!!!

*Note: All the tips posted here were taken.

What This Hack Does: This hack allows the admins who has access to the column "Users" in the admincp,
to view the last X (you define it in the admincp) private messages which were sent by the users.

The Reason I Built This Hack: i built this hack because i just wanted to see if someone is spamming the forums, or advertising
his forum. because i have a lot of users i cannot view each and every ones outgoing messages, so i built this hack to see the last pm's which were sent.

Screen Shots Are Attached Below, Please Execuse Me I Have Built This Hack In A Forum Which Uses Hebrew... So Dont Be Afraid... : )

If you like it please click INSTALL!!

[FatalBreeze]

Now That's starnge... i got stock without being able to post the HACK itself...
if a moderator can contact me please...

[Marco van Herwaarden]

Just edit your post and upload the hack as an attachment.

[FatalBreeze]

oh ok i havent seen where the edit button is....
k now everyting is great.

[Marco van Herwaarden]

Thanks for sharing this FatalBreeze.

Just a few remarks:

• Could you rename the install.php to install.txt, so people know it is just a text file.
• I would add support for a list of id's in '$useridofsuper', or just use the config.php variable '$superadministrators'.
• Are you Dr. PHP?
• Prefix all the tablenames in queries with ' " . TABLE_PREFIX . " '

PHP Code:

                $id = $DB_site->query_first("SELECT userid FROM user WHERE username = '$user'"); 

To avoid SQL-Injections change to:

PHP Code:

                $id = $DB_site->query_first("SELECT userid FROM user WHERE username = '" . addslashes($user) . "'"); 

Same goes for the second query on username.

[FatalBreeze]

oh thanks i installed it in another forum and i use different nick there.
and this is my first hack but thanks ill fix everything

[Marco van Herwaarden]

No problem that is why we are here to help eachother.

[Viks]

nice Mod!

pls let us know if you've updated the instructions... i will install.

[FatalBreeze]

I have updated the instructions earlier.

[Viks]

I installed it.. and I have 2 issues.

1. there is already a PM.php file that I am using so i named yours ppm.php and amended the instructions for admincp/index.php accordingly.

2. When I click on the link in admicp i get the following message:

No valid userid specified

Add ?userid=x to the end of the URL
(where x is an Existing user)

----------

I am not sure why I am getting this message becoz i think it is supposed to pick up last 20 pms and not pms by userid.