diff --git a/inbox.php b/inbox.php
new file mode 100644
index 0000000..0bfeb8e
--- /dev/null
+++ b/inbox.php
@@ -0,0 +1,42 @@
+<?php
+
+ 
+/*
+*   smzint/* (c) schmamazon.com 2025
+*/
+
+include('../Auth/index.php');
+
+$conn = new mysqli($dbservername, $dbusername, $dbpassword, $dbname);
+  if ($conn->connect_error) {
+    die("Connection failed: " . $conn->connect_error);
+  }
+
+  $sql = "SELECT * FROM smz_messages_metadata WHERE receiver='$uid' ORDER BY smz_messages_metadata.datetime DESC";
+  $result = $conn->query($sql);
+  $conn->close();
+  if ($result->num_rows > 0) {
+    include ('search.php');
+    echo "<table>";
+    while($row = $result->fetch_assoc()) {
+      echo "<tr><td><b>Absender:</b><br><abbr title='ID: ".$row["sender"]."'>".uid($row["sender"])."</abbr></td><td><b>Zeit:</b><br>".$row["datetime"]."</td><td><br><form action='read.php' method='POST'><input type='hidden' id='id' name='id' value='".$row["message"]."'><input type='hidden' id='upass' name='upass'><input type='submit' value='Öffnen'></form></td></tr>";
+    }
+    echo "</table>";
+  } else {
+    echo "Keine Nachrichten";
+  }
+
+?>
+
+<script>
+    let pass = prompt("Bitte geben Sie Ihr Passwort an");
+    if(pass == null || pass == ""){
+        alert("Eingabe abgebrochen.")
+    }
+    else{
+        var field = document.getElementsByName("upass");
+        for (var i = 0; i<field.length; i++){
+            field[i].value = pass;
+        }
+    }
+</script>
\ No newline at end of file