| 
<?php
 function bb_add_comment_on_profile_page()
 {
 
 $username=isset(Configs::$_['user_data']['user_id'])?Configs::$_['user_data']['user_id']:'';
 
 $content=strip_tags_blacklist(addslashes(getPost('content')),['iframe']);
 $target_user_id=addslashes(getPost('target_user_id'));
 $target_username=addslashes(getPost('target_username'));
 $captcha_answer=trim(addslashes(getPost('captcha_answer','')));
 if(!isset($content[2]))
 {
 return 'Content not allow blank';
 }
 
 if(!isset($target_user_id[2]))
 {
 return 'Receiver not valid!';
 }
 
 if(!isset($target_username[2]))
 {
 return 'Receiver not valid!';
 }
 
 
 if((int)Configs::$_['bb_enable_captcha_when_send_wall_message']==1)
 {
 if(strlen($captcha_answer)==0)
 {
 return 'You must type captcha characters!';
 }
 }
 
 
 $insertData=array(
 'message_id'=>newID(22),
 'author_id'=>Configs::$_['user_data']['user_id'],
 'wall_user_id'=>$target_user_id,
 'content'=>$content,
 );
 
 $queryStr=arrayToInsertStr('bb_user_wall_comment_data',$insertData);
 $db=new Database();
 
 
 // Captcha process
 if((int)Configs::$_['bb_enable_captcha_when_send_wall_message']==1)
 {
 $result=$db->query("select answer from bb_captcha_session_data where session_id='".Configs::$_['visitor_data']['session_id']."'");
 
 if($captcha_answer!=$result[0]['answer'])
 {
 return 'Your captcha answer is wrong!';
 }
 }
 
 $db->nonquery($queryStr);
 
 saveActivities('bb_user_wall_comment_add','Add comment on  '.$target_username,$username);
 
 //    EmailSystem::prepare_send_newuser($insertData);
 
 return 'OK';
 }
 |