YourWBB

 if(!isset($_POST['preview'])) {
   $error="";
   if(!$subject || !$recipient || !$message) eval ("\$error .= \"".$tpl->get("newthread_error1")."\";");
   if($recipient) {
    $result=$db->query_first("SELECT userid, username, email, ignorelist, receivepm, emailonpm, pmpopup FROM bb".$n."_users WHERE username='".addslashes(htmlspecialchars($recipient))."'");
    $recipient = htmlspecialchars($recipient);
	if(!$result['userid']) eval ("\$error .= \"".$tpl->get("pms_newpm_error1")."\";");
    else {
     if($result['receivepm']==0) eval ("\$error .= \"".$tpl->get("pms_newpm_error2")."\";");
     elseif(add2list($result['ignorelist'],$wbbuserdata['userid'])==-1) eval ("\$error .= \"".$tpl->get("pms_newpm_error3")."\";");
     else {
      list($countpms)=$db->query_first("SELECT COUNT(*) FROM bb".$n."_privatemessage WHERE recipientid='$result[userid]' AND deletepm<>1");
      if($countpms>=$maxpms) eval ("\$error .= \"".$tpl->get("pms_newpm_error4")."\";");
     }
    }
   }
   if($error) eval ("\$pm_error = \"".$tpl->get("newthread_error")."\";");
   else {
    if($_POST['parseurl']==1) $message=parseURL($message);
    $db->unbuffered_query("INSERT INTO bb".$n."_privatemessage (privatemessageid,senderid,recipientid,subject,message,sendtime,showsmilies,showsignature,iconid,deletepm) VALUES (NULL,'$wbbuserdata[userid]','$result[userid]','".addslashes(htmlspecialchars($subject))."','".addslashes($message)."','".time()."','".(1-intval($_POST['disablesmilies']))."','".intval($_POST['showsignature'])."','$iconid','".ifelse($_POST['savecopy']==1,0,2)."')",1);
        	//Guthaben-Hack BEGIN
	$guthaben_hack=$db->query_first("SELECT pn_onoff, pn_wert FROM bb".$n."_guthaben_config");
	If ($guthaben_hack['pn_onoff']==1){
		$db->unbuffered_query("UPDATE bb".$n."_users SET guthaben=guthaben-".$guthaben_hack[pn_wert]." WHERE userid='$wbbuserdata[userid]'",1);
   $db->query("INSERT INTO bb".$n."_guthaben_konto (userid,begruendung,wieviel,date) VALUES ($wbbuserdata[userid], 'Erstellung einer Privaten Nachricht', '$guthaben_hack[ pn_wert]','".time()."')");
	}
	//Guthaben Hack END
    if($result['pmpopup']==1) $db->unbuffered_query("UPDATE bb".$n."_users SET pmpopup=2 WHERE userid='$result[userid]'",1);

    if($result['emailonpm']==1) {
     eval ("\$mail_text = \"".$tpl->get("mt_newpm")."\";");
     eval ("\$mail_subject = \"".$tpl->get("ms_newpm")."\";");
     mailer($result['email'],$mail_subject,$mail_text);
    }

    if($_REQUEST['action']=="replypm") $db->unbuffered_query("UPDATE bb".$n."_privatemessage SET reply=1 WHERE privatemessageid='$pmid' AND recipientid='$wbbuserdata[userid]'",1);
    if($_REQUEST['action']=="forwardpm") $db->unbuffered_query("UPDATE bb".$n."_privatemessage SET forward=1 WHERE privatemessageid='$pmid' AND recipientid='$wbbuserdata[userid]'",1);
    header("Location: pms.php?sid=$session[hash]");
    exit();
   }
  }
  else {
   $allowsmilies=1-intval($_POST['disablesmilies']);
   $parse = new parse($docensor,75,$allowsmilies*$pm_allowsmilies,$pm_allowbbcode,$wbbuserdata['showimages'],$usecode);
   $preview_subject=$parse->textwrap(htmlspecialchars($subject),30);
   $preview_message=$parse->doparse(ifelse($_POST['parseurl']==1,parseURL($message),$message),$allowsmilies*$pm_allowsmilies,$pm_allowhtml,$pm_allowbbcode,$pm_allowimages);
   if($iconid) {
    $result = $db->query_first("SELECT * FROM bb".$n."_icons WHERE iconid = '$iconid'");
    $preview_posticon=makeimgtag($result['iconpath'],$result['icontitle']);
   }