

<?php 
session_start();
 if(!isset($_SESSION['email']))
  { $_SESSION['email'] = $_POST['email']; }
if(!isset($_SESSION['password'])) 
{ $_SESSION['password'] = $_POST['password']; } ?>
<html>
<head>
<title>The Science Network</title>

<link rel="stylesheet" type="text/css" href="style.css" />
</head>
	<body style="background-color:#E8E8E8">
    	<center>
    	<table width="768" border="0" style="background-color:#666666;">
  <tr>
    <td colspan="2"><img src="./logo2.gif" width="763" height="108" alt="logo"></td>
    </tr>
   <tr>
    <td colspan="2" valign="middle" style="background-color:#666;">
   
    </td>
    </tr>
   <tr>
    <td width="585" style="background-color:#FFF; vertical-align:top; text-align:center">
    <?php		        
		
$db = mysql_connect("localhost","root","mysql");           /* start connection with database */

echo "<br>";
if (!$db)                                                       /* conditional statement */
{
die('Connection to Database down: '. mysql_error());            /* print if connection is not established */
}

mysql_select_db("ScientistNet", $db); 
$email =$_SESSION['email']; 
	
 $recipient2 = $_POST['to'] ; 
 $recipient =  $rsql;
 $subject = $_POST['subject'] ;  
 $body = $_POST['body'] ; //
 //$From = "1";     //later change to session $_SESSION['sender']
 $ssql =mysql_query("SELECT id
FROM Scientist 
WHERE email='$email'"
) 
                     or die(mysql_error());

 $rsql =mysql_query("SELECT id
FROM Scientist 
WHERE email='$recipient2'
") 
                     or die(mysql_error());					 
 $From= $ssql;
 $sent = mail($recipient, $subject, $body, $headers) ; 

 $open = 'F';
 // store into data

 if ($_FILES["file"]["error"] > 0)
  {  
 $sql =mysql_query("INSERT INTO Mail (id  , recipient , sender , subject , body  , opened)
VALUES ('$id' ,'$From' , '$recipient', '$subject' , '$body' , '$open')") 
                     or die(mysql_error());
  }
else    // upload file
  {
  echo "Upload: " . $_FILES["file"]["name"] . "<br />";
  echo "Type: " . $_FILES["file"]["type"] . "<br />";
  echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
  echo "Stored in: " . $_FILES["file"]["tmp_name"];
  $filename  = $_FILES["file"]["name"];
  
  // store uploading file into upload folder
      move_uploaded_file($_FILES["file"]["tmp_name"],
      "upload/" . $_FILES["file"]["name"]);
      echo "Stored in: " . "upload/" . $_FILES["file"]["name"];
       
	    $filepath = "upload/" . $_FILES["file"]["name"];
// store into data

$sql =mysql_query("INSERT INTO Mail (id  , recipient , sender , subject , body  , opened ,fileName , path)
VALUES ('$id' ,'$From' , '$recipient', '$subject' , '$body' , '$open' ,'$filename' , '$filepath')") 
                     or die(mysql_error());
					 
  }
 // check is a messge sent correctly!
 if($sent) 
 {print "Message Sent!"; }
 else 
 {print "Message not sent, please try againl"; }
 
	
	mysql_close($db);
 ?>
       </p>
    </td>
    <td width="173" align="center" valign="middle" class="sidebar" style="background-color:#CCC">
    <a href="./mail.php">Close</a>
    </td>
  </tr>
  <tr>
    <td colspan="2" align="center" valign="middle" style="background-color:#666; color:#FFF;">The Science Network, 2012&copy;</td>
    </tr>
</table>

	</body>
</html>
