1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
<?php
/**
* Send an Email Message Page
*
* Copyright 1999-2001 (c) VA Linux Systems
* The rest Copyright 2002-2004 (c) GForge Team
* http://gforge.org/
*
* @version $Id: sendmessage.php 4817 2005-10-21 20:02:11Z danper $
*
* This file is part of GForge.
*
* GForge is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* GForge is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with GForge; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
require_once('pre.php');
if (!$toaddress && !$touser) {
exit_error($Language->getText('general','error'),$Language->getText('sendmessage','error_variables'));
}
if ($touser) {
/*
check to see if that user even exists
Get their name and email if it does
*/
$result=db_query("SELECT email,user_name FROM users WHERE user_id='$touser'");
if (!$result || db_numrows($result) < 1) {
exit_error($Language->getText('general','error'),$Language->getText('sendmessage','error_user_not_exist'));
}
}
if ($toaddress && !eregi($GLOBALS['sys_default_domain'],$toaddress)) {
exit_error($Language->getText('general','error'),$Language->getText('sendmessage','email_only_to')." @".$GLOBALS['sys_default_domain']);
}
if ($send_mail) {
if (!$subject || !$body || !$name || !$email) {
/*
force them to enter all vars
*/
exit_missing_param();
}
// we remove the CRLF in all thoses vars. This is to make sure that there will be no CRLF Injection
$name = util_remove_CRLF($name);
// Really don't see what wrong could happen with CRLF in message body
//$email = util_remove_CRLF($email);
$subject = util_remove_CRLF($subject);
if ($toaddress) {
/*
send it to the toaddress
*/
$to=eregi_replace('_maillink_','@',$toaddress);
$to = util_remove_CRLF($to);
util_send_message($to,stripslashes($subject),stripslashes($body),$email,'',$name);
$HTML->header(array('title'=>$GLOBALS['sys_name'].' ' .$Language->getText('sendmessage','contact') ,'pagename'=>'sendmessage','titlevals'=>array($to)));
echo '<p>'.$Language->getText('sendmessage','message_sent').'.</p>';
$HTML->footer(array());
exit;
} else if ($touser) {
/*
figure out the user's email and send it there
*/
$to=db_result($result,0,'email');
$to = util_remove_CRLF($to);
util_send_message($to,stripslashes($subject),stripslashes($body),$email,'',$name);
$HTML->header(array('title'=>$GLOBALS['sys_name'].' '.$Language->getText('sendmessage','contact'),'pagename'=>'sendmessage','titlevals'=>array($touser)));
echo '<p>'.$Language->getText('sendmessage','message_sent').'</p>';
$HTML->footer(array());
exit;
}
}
if ($toaddress) {
$titleaddress = $toaddress;
} else {
$titleaddress = db_result($result,0,'user_name');
}
$HTML->header(array('title'=>$GLOBALS['sys_name'].' Staff','pagename'=>'sendmessage','titlevals'=>array($titleaddress)));
?>
<p />
<?php echo $Language->getText('sendmessage', 'about_blurb'); ?>
<p />
<form action="<?php echo $PHP_SELF; ?>" method="post">
<input type="hidden" name="toaddress" value="<?php echo $toaddress; ?>" />
<input type="hidden" name="touser" value="<?php echo $touser; ?>" />
<strong><?php echo $Language->getText('sendmessage','email') ?>:</strong><br />
<input type="text" name="email" size="30" maxlength="255" value="" />
<p />
<strong><?php echo $Language->getText('sendmessage', 'name') ?>:</strong><br />
<input type="text" name="name" size="30" maxlength="40" value="" />
<p />
<strong><?php echo $Language->getText('sendmessage', 'subject') ?>:</strong><br />
<input type="text" name="subject" size="30" maxlength="255" value="<?php echo $subject; ?>" />
<p />
<strong><?php echo $Language->getText('sendmessage', 'message') ?>:</strong><br />
<textarea name="body" rows="15" cols="60"></textarea>
<p />
<div align="center">
<input type="submit" name="send_mail" value="<?php echo $Language->getText('sendmessage','send') ?>" />
</div>
</form>
<?php
$HTML->footer(array());
?>
|
