prepare("
SELECT m.*, u.email as sender_email
FROM messages m
JOIN users u ON m.sender_user_id = u.id
WHERE m.id = ?
");
$stmt->execute([$message_id]);
$message = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$message || ($message['recipient_user_id'] != $_SESSION['user_id'] && $message['sender_user_id'] != $_SESSION['user_id'])) {
// Message not found or user is not part of the conversation
$redirect_url = 'resident_dashboard.php';
if ($user_role === 'staff') {
$redirect_url = 'staff_dashboard.php';
} elseif ($user_role === 'partner') {
$redirect_url = 'partner_dashboard.php';
}
header("Location: " . $redirect_url . "?error=not_found");
exit;
}
// Mark as read if the current user is the recipient
if ($message['recipient_user_id'] == $_SESSION['user_id'] && !$message['read_at']) {
$pdo->prepare("UPDATE messages SET read_at = NOW() WHERE id = ?")->execute([$message_id]);
}
$back_link = 'messages.php';
if ($user_role === 'staff') {
$back_link = 'staff_dashboard.php';
} elseif ($user_role === 'partner') {
$back_link = 'partner_dashboard.php';
}
?>
View Message - Continuum Nexus