<?php
session_start();
$nuser=$_SESSION['user'];
$auser=$_SESSION['admin'];

if($nuser){
$userfinal=$nuser;
}elseif($auser){
$userfinal=$auser;
}  
if(isset($userfinal)){
require "database.php";
$username = $_GET['messageid'];
$user = mysql_query("SELECT * FROM messages WHERE message_id = '$username'");
$user=mysql_fetch_assoc($user);
if($user['to_user'] != $userfinal){
die("You are trying to view another users posts! Thats impossible!");
}else{
if($user['message_read'] == 0){
mysql_query("UPDATE messages SET message_read='1' WHERE message_id='$username'");
}
echo "<h1>Title: ".$user['message_title']."</h1><br><br>";
echo "<h3>From: ".$user['from_user']."<br><br></h3>";
echo "<h3>Message: <br>".$user['message_contents']."<br></h3>";

echo '<form name="backfrm" method="post" action="inbox.php">';
echo '<input type="submit" value="Back to Inbox">';
echo '</form>';
}}else{ echo"You must be logged in to view this page!";
}
?>