"); if ($start != -1) { $start+=2; $msg = substr($msg, $start); $parts = split("[<>]", $msg); $to_agent = $parts[12]; $db->execute("insert into offline_msgs (uuid, message) values ('" . mysql_escape_string($to_agent) . "', '" . mysql_escape_string($msg) . "')"); echo "true"; } else { echo "false"; } exit; } if ($method == "/RetrieveMessages/") { $parms = $HTTP_RAW_POST_DATA; $parts = split("[<>]", $parms); $agent_id = $parts[6]; $result = $db->query("select * from offline_msgs where uuid='" . mysql_escape_string($agent_id) . "'"); echo ""; while(($row = mysql_fetch_assoc($result))) { echo $row["message"]; } echo ""; $db->execute("delete from offline_msgs where uuid='" . mysql_escape_string($agent_id) . "'"); exit; } ?>