<?php

$user_id = intval($_GET["user_id"]);
$message = clean($_GET['message']);
$sticker_id = clean($_GET['sticker_id']);
$access_token = clean($_GET['access_token']);

//запросы для проверки токена
$row_token = mysqli_fetch_assoc(mysqli_query($dbConnect, "SELECT user_id, access_token FROM `api_token` WHERE access_token = '$access_token' "));

$row_user = mysqli_fetch_array(mysqli_query($dbConnect, "SELECT id, ban FROM `users` WHERE id = '$user_id' LIMIT 1 "));

$row_chat = mysqli_fetch_array(mysqli_query($dbConnect, "SELECT id, prof, friend FROM `chat` WHERE ( prof = '$row_token[user_id]' AND friend = '$user_id' ) OR (  prof = '$user_id' AND friend = '$row_token[user_id]' ) LIMIT 1 "));

if(!$row_chat) {
	mysqli_query($dbConnect, "INSERT INTO chat (prof, friend) VALUES ('$row_token[user_id]', '$user_id')" );
}

$chat_id = $row_chat['id'];

$date = time();

$sticker = explode(',', $sticker_id, 2);
$sticker_pack = intval($sticker[0]);
$sticker_index = intval($sticker[1]);

if($access_token) {

	if($access_token == $row_token['access_token']) {

		if($user_id) {

			if($user_id == $row_user['id']) {

				if($row_user['ban'] == 0) {

					if ($message OR $sticker_id) {

						if ($message) {

							mysqli_query($dbConnect, "INSERT INTO `dialogues` SET chat_id = '$chat_id', prof = '$row_token[user_id]', friend = '$user_id', text = '$message', img = '0', img_small = '', img_medium = '', img_big = '', sticker = '0', sticker_pack = '0', sticker_index = '0', gif = '', audios = '', videos = '', sendtime = '$date', viewtime = '0', prof_hide = '0', friend_hide = '0' ");

						} else if ($sticker_id) {

							mysqli_query($dbConnect, "INSERT INTO `dialogues` SET chat_id = '$chat_id', prof = '$row_token[user_id]', friend = '$user_id', text = '', img = '0', img_small = '', img_medium = '', img_big = '', sticker = '1', sticker_pack = '$sticker_pack', sticker_index = '$sticker_index', gif = '', audios = '', videos = '', sendtime = '$date', viewtime = '0', prof_hide = '0', friend_hide = '0' ");

						}

						$row_dialogues = mysqli_fetch_array(mysqli_query($dbConnect, "SELECT id FROM `dialogues` WHERE chat_id = '$chat_id' AND sendtime = '$date' "));
						mysqli_query($dbConnect, "UPDATE `chat` SET `count` = `count` + 1, date = '$date' WHERE prof = '$row_token[user_id]' AND friend = '$user_id' ");

						$response = array( 'response' => $row_dialogues['id'] );
						echo json_encode_cyr($response);

					} else {
						error(4, 'not found message');
					}

				} else {
					error(0, 'user was deleted or banned');
				}

			} else {
				error(2, 'invalid user - '.$user_id);
			}

		} else {
			error(1, 'not found user_id');
		}

	} else {
		error(3, 'invalid peer_id');
	}

} else {
	error(4, 'not found peer_id');
}

?>