email.php

<?php
/* changes by ejkv
If site SAFE mode = on? =>> Pear::(mail) using the 5th mail parameter causes error by sending mail - added by ejkv
If SAFE_mode_ON is set true (inc.config.php), in email.php no CC: will be sent, nor will CC: selection be showed in UI
*/
include_once("includes/inc.global.php");
$p->site_section = SECTION_EMAIL;
$p->page_title = _("Email a Member");

$cUser->MustBeLoggedOn();

include("includes/inc.forms.php");

//
// First, we define the form
//

$form->addElement("hidden", "email_to", $_REQUEST["email_to"]);
$form->addElement("hidden", "member_to", $_REQUEST["member_to"]);
$member_to = new cMember;
$member_to->LoadMember($_REQUEST["member_to"]);
$form->addElement("static", null, _("To").": <I>". $_REQUEST["email_to"] . " (". $member_to->member_id .")</I>");
$form->addElement("text", "subject", _("Subject").": ", array('size' => 35, 'maxlength' => 100));
if (!SAFE_MODE_ON) $form->addElement("select", "cc", _("Would you like to receive a copy?"), array("Y"=>_("Yes"), "N"=>_("No"))); // - changed by ejkv
// $form->addElement("select", "cc", _("Would you like to receive a copy?"), array("Y"=>_("Yes"), "N"=>_("No")));

/*  The following code should work, and works on my server, but not on Open Access.  Bug?
$cc[] =& HTML_QuickForm::createElement('radio',null,null,'<FONT SIZE=2>Yes</FONT>','Y');
$cc[] =& HTML_QuickForm::createElement('radio',null,null,'<FONT SIZE=2>No</FONT>','N');
$form->addGroup($cc, "cc", 'Would you like to recieve a copy?');
*/

$form->addElement("static", null, null, null);
$form->addElement("textarea", "message", _("Your Message"), array("cols"=>65, "rows"=>10, "wrap"=>"soft"));

$form->addElement("static", null, null, null);
$form->addElement("submit", "btnSubmit", _("Send"));

//
// Define form rules
//
$form->addRule("message", _("Enter your message"), "required");

if ($form->validate()) { // Form is validated so processes the data
   $form->freeze();
 	$form->process("process_data", false);
} else {  // Display the form
	if (!SAFE_MODE_ON) $form->setDefaults(array("cc"=>"Y")); // - changed by ejkv
	// $form->setDefaults(array("cc"=>"Y"));
	$p->DisplayPage($form->toHtml());
}

//
// The form has been submitted with valid data, so process it   
//
function process_data ($values) {
	global $p, $cUser;

	$headers = "From:". $cUser->person[0]->email ."\nContent-type: text/plain; charset=UTF-8";
	$body = wordwrap($values["message"], 64);

	if($values["cc"] == "Y") {
		$headers .= "\r\nCc: ". $cUser->person[0]->email;
	}

    if(known_email_addressp($_REQUEST["email_to"])) {
	// added SAFE_MODE check, and removed 5th parameter, if safe mode = ON - by ejkv
	    if (SAFE_MODE_ON) {
			$mailed = mail($_REQUEST["email_to"], SITE_SHORT_TITLE .": ". $values["subject"], $body, $headers);
		}
		else {
			$mailed = mail($_REQUEST["email_to"], SITE_SHORT_TITLE .": ". $values["subject"], $body, $headers, $cUser->person[0]->email);
		}
    }
    else {
        $mailed = false;
    }

	if($mailed) {
		$output = _("Your message has been sent.");
    }
	else {
		$output = _("There was a problem sending the email.")." "._("Please try again later.");	
    }

	$p->DisplayPage($output);
}


/**
 * Checks whether the given email address exists in the database.
 */
function known_email_addressp($email) {
    global $cDB;

    $email = $cDB->EscTxt($email);
    $sql = "SELECT person_id FROM " . DATABASE_PERSONS .
                                                 " WHERE email = $email";
    $r = $cDB->Query($sql);
    if($row = mysql_fetch_array($r)) {
        return true;
    }
    else {
        return false;
    }
}

?>