real_escape_string($_POST['mesrec']);
$subjectm = $conn->real_escape_string($_POST['messub']);
$message = ($_POST['message']);
// CHECK IF ANY FIELDS ARE EMPTY
if (($subjectm == NULL) OR ($recipientm == NULL) OR($message == NULL)){
// ERROR
print'Error!You must fill in all fields
';
} else {
// CONTINUE
// CHECK IF RECIPIENT ID IS NUMERIC
if (!is_numeric($recipientm)){
print'Error! Recipient ID must be numeric
';
} else {
// CONTINUE
// CHECK FOR A DUPLICATE MESSAGE
$checkmess = $conn->query("SELECT id FROM messages WHERE subject='$subjectm' AND message = '$message' AND owner = '$recipientm'");
if ($checkmess->num_rows != NULL){
print'Error! You have already sent this message
';
} else {
// SEND MESSAGE
$cluster = "0";
$newmess = $conn->prepare("INSERT INTO messages(owner, subject, message, sender, date) VALUES (?,?,?,?,?)");
$newmess->bind_param("issis",$recipientm,$subjectm,$message,$_SESSION[id],$today);
$newmess->execute();
$newmess->close();
// NOW UPDATE THE CLUSTER TO THE LAST ID INSERTED
$glid = $conn->query("SELECT id FROM messages ORDER BY id DESC LIMIT 0,1");
$lastd = mysqli_fetch_assoc($glid);
$insid = $conn->query("UPDATE messages SET cluster = $lastd[id] WHERE id = $lastd[id]");
print'Success! Message successfully sent
';
$subsub = ($conn->real_escape_string("New Message!"));
$submes = ($conn->real_escape_string("You have received a new Message from $userfo[username]"));
$newme = $conn->query("INSERT INTO alerts(owner, subject, message, date) VALUES ('$recipientm','$subsub','$submes','$today')");
include("footer.php"); die();
}}}}
?>