Gazelle/sections/inbox/takeedit.php

<?
authorize();

$UserID = $LoggedUser['ID'];
$ConvID = $_POST['convid'];

$DB->query("
  SELECT UserID
  FROM pm_conversations_users
  WHERE UserID = ? AND ConvID = ?", $UserID, $ConvID);
if (!$DB->has_results()) {
  error(403);
}

if (isset($_POST['delete'])) {
  $DB->query("
    UPDATE pm_conversations_users
    SET
      InInbox = '0',
      InSentbox = '0',
      Sticky = '0'
    WHERE ConvID = ? AND UserID = ?", $ConvID, $UserID);
} else {
  if (isset($_POST['sticky'])) {
    $DB->query("
      UPDATE pm_conversations_users
      SET Sticky = '1'
      WHERE ConvID = ? AND UserID = ?", $ConvID, $UserID);
  } else {
    $DB->query("
      UPDATE pm_conversations_users
      SET Sticky = '0'
      WHERE ConvID = ? AND UserID = ?", $ConvID, $UserID);
  }
  if (isset($_POST['mark_unread'])) {
    $DB->query("
      UPDATE pm_conversations_users
      SET Unread = '1'
      WHERE ConvID = ?
      AND InInbox = '1'
      AND UserID = ?", $ConvID, $UserID);
    $Cache->increment('inbox_new_'.$UserID);
  }
}
header('Location: ' . Inbox::get_inbox_link());
?>