Should at least apply De Morgan here and make it `else if (!$auth->acl_get('u_pm_reply') && !$auth->acl_get('u_sendpm'))`