e18c7b0508
Will fix an issue with users receiving wrong mails, e.g. during password resets ONLY IF smarty cache is enabled. Please update ASAP if you have smarty caches enabled! This is a very big issue. By default smarty caches are disabled and not recommended to be used. See configuration file. Fixes #899 once merged.
86 lines
3.2 KiB
PHP
86 lines
3.2 KiB
PHP
<?php
|
|
|
|
// Make sure we are called from index.php
|
|
if (!defined('SECURITY'))
|
|
die('Hacking attempt');
|
|
|
|
class Mail extends Base {
|
|
/**
|
|
* Mail form contact site admin
|
|
* @param senderName string senderName
|
|
* @param senderEmail string senderEmail
|
|
* @param senderSubject string senderSubject
|
|
* @param senderMessage string senderMessage
|
|
* @param email string config Email address
|
|
* @param subject string header subject
|
|
* @return bool
|
|
**/
|
|
public function contactform($senderName, $senderEmail, $senderSubject, $senderMessage) {
|
|
$this->debug->append("STA " . __METHOD__, 4);
|
|
if (preg_match('/[^a-z_\.\!\?\-0-9\\s ]/i', $senderName)) {
|
|
$this->setErrorMessage($this->getErrorMsg('E0024'));
|
|
return false;
|
|
}
|
|
if (empty($senderEmail) || !filter_var($senderEmail, FILTER_VALIDATE_EMAIL)) {
|
|
$this->setErrorMessage($this->getErrorMsg('E0023'));
|
|
return false;
|
|
}
|
|
if (preg_match('/[^a-z_\.\!\?\-0-9\\s ]/i', $senderSubject)) {
|
|
$this->setErrorMessage($this->getErrorMsg('E0034'));
|
|
return false;
|
|
}
|
|
if (strlen(strip_tags($senderMessage)) < strlen($senderMessage)) {
|
|
$this->setErrorMessage($this->getErrorMsg('E0024'));
|
|
return false;
|
|
}
|
|
$aData['senderName'] = $senderName;
|
|
$aData['senderEmail'] = $senderEmail;
|
|
$aData['senderSubject'] = $senderSubject;
|
|
$aData['senderMessage'] = $senderMessage;
|
|
$aData['email'] = $this->setting->getValue('website_email');
|
|
$aData['subject'] = 'Contact From';
|
|
if ($this->sendMail('contactform/body', $aData)) {
|
|
return true;
|
|
} else {
|
|
$this->setErrorMessage( 'Unable to send email' );
|
|
return false;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Send a mail with templating via Smarty
|
|
* @param template string Template name within the mail folder, no extension
|
|
* @param aData array Data array with some required fields
|
|
* SUBJECT : Mail Subject
|
|
* email : Destination address
|
|
**/
|
|
public function sendMail($template, $aData) {
|
|
// Make sure we don't load a cached filed
|
|
$this->smarty->clearCache(BASEPATH . 'templates/mail/' . $template . '.tpl');
|
|
$this->smarty->clearCache(BASEPATH . 'templates/mail/subject.tpl');
|
|
$this->smarty->assign('WEBSITENAME', $this->setting->getValue('website_name'));
|
|
$this->smarty->assign('SUBJECT', $aData['subject']);
|
|
$this->smarty->assign('DATA', $aData);
|
|
$headers = 'From: Website Administration <' . $this->setting->getValue('website_email') . ">\n";
|
|
$headers .= "MIME-Version: 1.0\n";
|
|
$headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";
|
|
if (strlen(@$aData['senderName']) > 0 && @strlen($aData['senderEmail']) > 0 )
|
|
$headers .= 'Reply-To: ' . $aData['senderName'] . ' <' . $aData['senderEmail'] . ">\n";
|
|
if (mail($aData['email'], $this->smarty->fetch(BASEPATH . 'templates/mail/subject.tpl'), $this->smarty->fetch(BASEPATH . 'templates/mail/' . $template . '.tpl'), $headers))
|
|
return true;
|
|
$this->setErrorMessage($this->sqlError('E0031'));
|
|
return false;
|
|
}
|
|
}
|
|
|
|
// Make our class available automatically
|
|
$mail = new Mail ();
|
|
$mail->setDebug($debug);
|
|
$mail->setMysql($mysqli);
|
|
$mail->setSmarty($smarty);
|
|
$mail->setConfig($config);
|
|
$mail->setSetting($setting);
|
|
$mail->setErrorCodes($aErrorCodes);
|
|
?>
|