if ($CONF['generate_password'] == "YES") { $tMessage .= " / {$fPassword})</br />"; } else { if ($CONF['show_password'] == "YES") { $tMessage .= " / {$fPassword})</br />"; } else { $tMessage .= ")</br />"; } } $tQuota = $CONF['maxquota']; if ($fMail == "on") { $fTo = $fUsername; $fFrom = $SESSID_USERNAME; $fHeaders = "To: " . $fTo . "\n"; $fHeaders .= "From: " . $fFrom . "\n"; $fHeaders .= "Subject: " . encode_header($PALANG['pSendmail_subject_text']) . "\n"; $fHeaders .= "MIME-Version: 1.0\n"; $fHeaders .= "Content-Type: text/plain; charset=utf-8\n"; $fHeaders .= "Content-Transfer-Encoding: 8bit\n"; $fHeaders .= $CONF['welcome_text']; if (!smtp_mail($fTo, $fFrom, $fHeaders)) { $tMessage .= "<br />" . $PALANG['pSendmail_result_error'] . "<br />"; } else { $tMessage .= "<br />" . $PALANG['pSendmail_result_success'] . "<br />"; } } if (create_mailbox_subfolders($fUsername, $fPassword)) { $tMessage = $PALANG['pCreate_mailbox_result_success'] . "<br />({$fUsername}"; } else { $tMessage = $PALANG['pCreate_mailbox_result_succes_nosubfolders'] . "<br />({$fUsername}"; }
function cforms_submitcomment($content) { global $wpdb, $subID, $styles, $smtpsettings, $track, $Ajaxpid, $AjaxURL, $wp_locale; $isAjaxWPcomment = strpos($content, '***'); // WP comment feature $content = explode('***', $content); $content = $content[0]; $content = explode('+++', $content); // Added special fields $Ajaxpid = $content[1]; $AjaxURL = $content[2]; $segments = explode('$#$', $content[0]); $params = array(); $sep = strpos(__FILE__, '/') === false ? '\\' : '/'; $WPpluggable = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), 'wp-content')) . 'wp-includes' . $sep . 'pluggable.php'; if (file_exists($WPpluggable)) { require_once $WPpluggable; } $CFfunctions = dirname(__FILE__) . $sep . 'my-functions.php'; if (file_exists($CFfunctions)) { include_once $CFfunctions; } if (function_exists('wp_get_current_user')) { $user = wp_get_current_user(); } for ($i = 1; $i <= sizeof($segments); $i++) { $params['field_' . $i] = $segments[$i]; } // fix reference to first form if ($segments[0] == '1') { $params['id'] = $no = ''; } else { $params['id'] = $no = $segments[0]; } // user filter ? if (function_exists('my_cforms_ajax_filter')) { $params = my_cforms_ajax_filter($params); } // init variables $formdata = ''; $htmlformdata = ''; $track = array(); $trackinstance = array(); $to_one = "-1"; $ccme = false; $field_email = ''; $off = 0; $fieldsetnr = 1; $taf_youremail = false; $taf_friendsemail = false; // form limit reached if (get_option('cforms' . $no . '_maxentries') != '' && get_cforms_submission_left($no) == 0) { $pre = $segments[0] . '*$#' . substr(get_option('cforms' . $no . '_popup'), 0, 1); return $pre . preg_replace('|\\r\\n|', '<br />', stripslashes(get_option('cforms' . $no . '_limittxt'))) . $hide; } //space for pre formatted text layout $customspace = (int) (get_option('cforms' . $no . '_space') > 0) ? get_option('cforms' . $no . '_space') : 30; for ($i = 1; $i <= sizeof($params) - 2; $i++) { $field_stat = explode('$#$', get_option('cforms' . $no . '_count_field_' . ((int) $i + (int) $off))); // filter non input fields while (in_array($field_stat[1], array('fieldsetstart', 'fieldsetend', 'textonly'))) { if ($field_stat[1] != 'textonly') { // include and make only fieldsets pretty! //just for email looks $space = '-'; $n = ($customspace * 2 + 2 - strlen($field_stat[0])) / 2; $n = $n < 0 ? 0 : $n; if (strlen($field_stat[0]) < $customspace * 2 - 2) { $space = str_repeat("-", $n); } $formdata .= substr("\n{$space}" . stripslashes($field_stat[0]) . "{$space}", 0, $customspace * 2) . "\n\n"; $htmlformdata .= '<tr><td class=3D"fs-td" colspan=3D"2">' . $field_stat[0] . '</td></tr>'; if ($field_stat[1] == 'fieldsetstart') { $track['$$$' . ((int) $i + (int) $off)] = 'Fieldset' . $fieldsetnr; $track['Fieldset' . $fieldsetnr++] = $field_stat[0]; } } //get next in line... $off++; $field_stat = explode('$#$', get_option('cforms' . $no . '_count_field_' . ((int) $i + (int) $off))); if ($field_stat[1] == '') { break 2; } // all fields searched, break both while & for } // filter all redundant WP comment fields if user is logged in while (in_array($field_stat[1], array('cauthor', 'email', 'url')) && $user->ID) { switch ($field_stat[1]) { case 'cauthor': $track['cauthor'] = $user->display_name; $track['$$$' . ((int) $i + (int) $off)] = 'cauthor'; break; case 'email': $track['email'] = $field_email = $user->user_email; $track['$$$' . ((int) $i + (int) $off)] = 'email'; break; case 'url': $track['url'] = $user->user_url; $track['$$$' . ((int) $i + (int) $off)] = 'url'; break; } $formdata .= stripslashes($field_stat[1]) . ': ' . $space . $track[$field_stat[1]] . "\n"; $htmlformdata .= '<tr><td class=3D"data-td">' . $field_stat[1] . '</td><td>' . $track[$field_stat[1]] . '</td></tr>'; $off++; $field_stat = explode('$#$', get_option('cforms' . $no . '_count_field_' . ((int) $i + (int) $off))); if ($field_stat[1] == '') { break 2; } // all fields searched, break both while & for } $field_name = $field_stat[0]; $field_type = $field_stat[1]; ### remove [id: ] first if (strpos($field_name, '[id:') !== false) { $idPartA = strpos($field_name, '[id:'); $idPartB = strpos($field_name, ']', $idPartA); $customTrackingID = substr($field_name, $idPartA + 4, $idPartB - $idPartA - 4); $field_name = substr_replace($field_name, '', $idPartA, $idPartB - $idPartA + 1); } else { $customTrackingID = ''; } // check if fields needs to be cleared $obj = explode('|', $field_name, 3); $defaultval = stripslashes($obj[1]); if ($params['field_' . $i] == $defaultval && $field_stat[4] == '1') { $params['field_' . $i] = ''; } // strip out default value $field_name = $obj[0]; // special WP comment fields if (in_array($field_stat[1], array('cauthor', 'email', 'url', 'comment', 'send2author'))) { $field_name = $field_stat[1]; if ($field_stat[1] == 'email') { $field_email = $params['field_' . $i]; } } // special Tell-A-Friend fields if ($taf_friendsemail == '' && $field_type == 'friendsemail' && $field_stat[3] == '1') { $field_email = $taf_friendsemail = $params['field_' . $i]; } if ($taf_youremail == '' && $field_type == 'youremail' && $field_stat[3] == '1') { $taf_youremail = $params['field_' . $i]; } if ($field_type == 'friendsname') { $taf_friendsname = $params['field_' . $i]; } if ($field_type == 'yourname') { $taf_yourname = $params['field_' . $i]; } // lets find an email field ("Is Email") and that's not empty! if ($field_email == '' && $field_stat[3] == '1') { $field_email = $params['field_' . $i]; } // special case: select & radio if ($field_type == "multiselectbox" || $field_type == "selectbox" || $field_type == "radiobuttons" || $field_type == "checkboxgroup") { $field_name = explode('#', $field_name); $field_name = $field_name[0]; } // special case: check box if ($field_type == "checkbox" || $field_type == "ccbox") { $field_name = explode('#', $field_name); $field_name = $field_name[1] == '' ? $field_name[0] : $field_name[1]; $field_name = explode('|', $field_name); $field_name = $field_name[0]; // if ccbox & checked if ($field_type == "ccbox" && $params['field_' . $i] != "-") { $ccme = true; } } if ($field_type == "emailtobox") { //special case where the value needs to bet get from the DB! $field_name = explode('#', $field_stat[0]); //can't use field_name, since '|' check earlier $to_one = $params['field_' . $i]; $offset = strpos($field_name[1], '|') === false ? 1 : 2; // names come usually right after the label $value = $field_name[(int) $to_one + $offset]; // values start from 0 or after! $field_name = $field_name[0]; } else { if (strtoupper(get_option('blog_charset')) != 'UTF-8' && function_exists('mb_convert_encoding')) { $value = mb_convert_encoding(utf8_decode(stripslashes($params['field_' . $i])), get_option('blog_charset')); } else { $value = stripslashes($params['field_' . $i]); } } //only if hidden! if ($field_type == 'hidden') { $value = rawurldecode($value); } // Q&A verification if ($field_type == "verification") { $field_name = __('Q&A', 'cforms'); } //for db tracking $inc = ''; $trackname = trim($field_name); if (array_key_exists($trackname, $track)) { if ($trackinstance[$trackname] == '') { $trackinstance[$trackname] = 2; } $inc = '___' . $trackinstance[$trackname]++; } $track['$$$' . (int) ($i + $off)] = $trackname . $inc; $track[$trackname . $inc] = $value; if ($customTrackingID != '') { $track['$$$' . $customTrackingID] = $trackname . $inc; } //for all equal except textareas! $htmlvalue = str_replace("=", "=3D", $value); $htmlfield_name = $field_name; // just for looks: break for textarea if ($field_type == "textarea" || $field_type == "comment") { $field_name = "\n" . $field_name; $htmlvalue = str_replace(array("=", "\n"), array("=3D", "<br />\n"), $value); $value = "\n" . $value . "\n"; } // just for looks:rest $space = ''; if (strlen(stripslashes($field_name)) < $customspace) { // don't count ->\" sometimes adds more spaces?!? $space = str_repeat(" ", $customspace - strlen(stripslashes($field_name))); } // create formdata block for email if ($field_stat[1] != 'verification' && $field_stat[1] != 'captcha') { $formdata .= stripslashes($field_name) . ': ' . $space . $value . "\n"; $htmlformdata .= '<tr><td class=3D"data-td">' . $htmlfield_name . '</td><td>' . $htmlvalue . '</td></tr>'; } } // for // assemble html formdata $htmlformdata = '<div class=3D"datablock"><table width=3D"100%" cellpadding=3D"2">' . stripslashes($htmlformdata) . '</table></div><span class=3D"cforms">powered by <a href=3D"http://www.deliciousdays.com/cforms-plugin">cformsII</a></span>'; // // allow the user to use form data for other apps // $trackf['id'] = $no; $trackf['data'] = $track; if (function_exists('my_cforms_action')) { my_cforms_action($trackf); } // Catch WP-Comment function if ($isAjaxWPcomment !== false && $track['send2author'] == '0') { require_once dirname(__FILE__) . '/lib_WPcomment.php'; if ($WPsuccess) { $hide = ''; // redirect to a different page on suceess? if (get_option('cforms' . $no . '_redirect') == 1) { return get_option('cforms' . $no . '_redirect_page'); } else { if (get_option('cforms' . $no . '_redirect') == 2) { $hide = '|~~~'; } } $pre = $segments[0] . '*$#' . substr(get_option('cforms' . $no . '_popup'), 0, 1); return $pre . $WPresp . $hide; } else { $pre = $segments[0] . '*$#' . substr(get_option('cforms' . $no . '_popup'), 1, 1); return $pre . $WPresp . '|---'; } } // //reply to all email recipients // $replyto = preg_replace(array('/;|#|\\|/'), array(','), stripslashes(get_option('cforms' . $no . '_email'))); // multiple recipients? and to whom is the email sent? to_one = picked recip. if ($isAjaxWPcomment !== false && $track['send2author'] == '1') { $to = $wpdb->get_results("SELECT U.user_email FROM {$wpdb->users} as U, {$wpdb->posts} as P WHERE P.ID = {$Ajaxpid} AND U.ID=P.post_author"); $to = $replyto = $to[0]->user_email != '' ? $to[0]->user_email : $replyto; } else { if ($to_one != "-1") { $all_to_email = explode(',', $replyto); $replyto = $to = $all_to_email[$to_one]; } else { $to = $replyto; } } // T-A-F override? if ($taf_youremail && $taf_friendsemail && substr(get_option('cforms' . $no . '_tellafriend'), 0, 1) == '1') { $replyto = "\"{$taf_yourname}\" <{$taf_youremail}>"; } // // FIRST write into the cforms tables! // $subID = write_tracking_record($no, $field_email); // // ready to send email // email header // $html_show = substr(get_option('cforms' . $no . '_formdata'), 2, 1) == '1' ? true : false; $fmessage = ''; $eol = "\n"; if (($frommail = stripslashes(get_option('cforms' . $no . '_fromemail'))) == '') { $frommail = '"' . get_option('blogname') . '" <wordpress@' . preg_replace('#^www\\.#', '', strtolower($_SERVER['SERVER_NAME'])) . '>'; } $headers = "From: " . $frommail . $eol; $headers .= "Reply-To: " . $field_email . $eol; if (($tempBcc = stripslashes(get_option('cforms' . $no . '_bcc'))) != "") { $headers .= "Bcc: " . $tempBcc . $eol; } $headers .= "MIME-Version: 1.0" . $eol; if ($html_show) { $headers .= "Content-Type: multipart/alternative; boundary=\"----MIME_BOUNDRY_main_message\""; $fmessage = "This is a multi-part message in MIME format." . $eol; $fmessage .= "------MIME_BOUNDRY_main_message" . $eol; $fmessage .= "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"" . $eol; $fmessage .= "Content-Transfer-Encoding: quoted-printable" . $eol . $eol; } else { $headers .= "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\""; } // prep message text, replace variables $message = get_option('cforms' . $no . '_header'); $message = check_default_vars($message, $no); $message = stripslashes(check_cust_vars($message, $track, $no)); // text text $fmessage .= $message . $eol; // need to add form data summary or is all in the header anyway? if (substr(get_option('cforms' . $no . '_formdata'), 0, 1) == '1') { $fmessage .= $eol . $formdata . $eol; } // HTML text if ($html_show) { // actual user message $htmlmessage = get_option('cforms' . $no . '_header_html'); $htmlmessage = check_default_vars($htmlmessage, $no); $htmlmessage = str_replace(array("=", "\n"), array("=3D", "<br />\n"), stripslashes(check_cust_vars($htmlmessage, $track, $no))); $fmessage .= "------MIME_BOUNDRY_main_message" . $eol; $fmessage .= "Content-Type: text/html; charset=\"" . get_option('blog_charset') . "\"" . $eol; $fmessage .= "Content-Transfer-Encoding: quoted-printable" . $eol . $eol; $fmessage .= "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">" . $eol; $fmessage .= "<HTML>" . $eol; $fmessage .= $styles; $fmessage .= "<BODY>" . $eol; $fmessage .= $htmlmessage; // need to add form data summary or is all in the header anyway? if (substr(get_option('cforms' . $no . '_formdata'), 1, 1) == '1') { $fmessage .= $eol . $htmlformdata; } $fmessage .= "</BODY></HTML>" . $eol . $eol; } //either use configured subject or user determined $vsubject = get_option('cforms' . $no . '_subject'); $vsubject = check_default_vars($vsubject, $no); $vsubject = stripslashes(check_cust_vars($vsubject, $track, $no)); // SMTP server or native PHP mail() ? if ($smtpsettings[0] == '1') { $sentadmin = cforms_phpmailer($no, $frommail, $field_email, $to, $vsubject, $message, $formdata, $htmlmessage, $htmlformdata); } else { $sentadmin = @mail($to, encode_header($vsubject), $fmessage, $headers); } if ($sentadmin == 1) { // send copy or notification? if (get_option('cforms' . $no . '_confirm') == '1' && $field_email != '' || $ccme) { if (($frommail = stripslashes(get_option('cforms' . $no . '_fromemail'))) == '') { $frommail = '"' . get_option('blogname') . '" <wordpress@' . preg_replace('#^www\\.#', '', strtolower($_SERVER['SERVER_NAME'])) . '>'; } // HTML message part? $html_show_ac = substr(get_option('cforms' . $no . '_formdata'), 3, 1) == '1' ? true : false; $automessage = ''; $headers2 = "From: " . $frommail . $eol; $headers2 .= "Reply-To: " . $replyto . $eol; if (substr(get_option('cforms' . $no . '_tellafriend'), 0, 1) == '1') { //TAF: add CC $headers2 .= "CC: " . $replyto . $eol; } $headers2 .= "MIME-Version: 1.0" . $eol; if ($html_show_ac || $html_show && $ccme) { $headers2 .= "Content-Type: multipart/alternative; boundary=\"----MIME_BOUNDRY_main_message\""; $automessage = "This is a multi-part message in MIME format." . $eol; $automessage .= "------MIME_BOUNDRY_main_message" . $eol; $automessage .= "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"" . $eol; $automessage .= "Content-Transfer-Encoding: quoted-printable" . $eol . $eol; } else { $headers2 .= "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\""; } // actual user message $cmsg = get_option('cforms' . $no . '_cmsg'); $cmsg = check_default_vars($cmsg, $no); $cmsg = check_cust_vars($cmsg, $track, $no); // text text $automessage .= $cmsg . $eol; // HTML text if ($html_show_ac) { // actual user message $cmsghtml = get_option('cforms' . $no . '_cmsg_html'); $cmsghtml = check_default_vars($cmsghtml, $no); $cmsghtml = str_replace(array("=", "\n"), array("=3D", "<br />\n"), check_cust_vars($cmsghtml, $track, $no)); $automessage .= "------MIME_BOUNDRY_main_message" . $eol; $automessage .= "Content-Type: text/html; charset=\"" . get_option('blog_charset') . "\"" . $eol; $automessage .= "Content-Transfer-Encoding: quoted-printable" . $eol . $eol; $automessage .= "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">" . $eol; $automessage .= "<HTML><BODY>" . $eol; $automessage .= $cmsghtml; $automessage .= "</BODY></HTML>" . $eol . $eol; } // replace variables $subject2 = get_option('cforms' . $no . '_csubject'); $subject2 = check_default_vars($subject2, $no); $subject2 = check_cust_vars($subject2, $track, $no); // different cc & ac subjects? $t = explode('$#$', $subject2); $t[1] = $t[1] != '' ? $t[1] : $t[0]; // email tracking via 3rd party? $field_email = get_option('cforms' . $no . '_tracking') != '' ? $field_email . get_option('cforms' . $no . '_tracking') : $field_email; // if in Tell-A-Friend Mode, then overwrite header stuff... if ($taf_youremail && $taf_friendsemail && substr(get_option('cforms' . $no . '_tellafriend'), 0, 1) == '1') { $field_email = "\"{$taf_friendsname}\" <{$taf_friendsemail}>"; } if ($ccme) { if ($smtpsettings[0] == '1') { $sent = cforms_phpmailer($no, $frommail, $replyto, $field_email, stripslashes($t[1]), $message, $formdata, $htmlmessage, $htmlformdata, 'ac'); } else { $sent = @mail($field_email, encode_header(stripslashes($t[1])), $fmessage, $headers2); } //takes $message!! } else { if ($smtpsettings[0] == '1') { $sent = cforms_phpmailer($no, $frommail, $replyto, $field_email, stripslashes($t[0]), $cmsg, '', $cmsghtml, '', 'ac'); } else { $sent = @mail($field_email, encode_header(stripslashes($t[0])), stripslashes($automessage), $headers2); } } if ($sent != '1') { $err = __('Error occurred while sending the auto confirmation message: ', 'cforms') . ($smtpsettings[0] ? " ({$sent})" : ''); $pre = $segments[0] . '*$#' . substr(get_option('cforms' . $no . '_popup'), 1, 1); return $pre . $err . '|!!!'; } } // cc $hide = ''; // redirect to a different page on suceess? if (get_option('cforms' . $no . '_redirect') == 1) { return get_option('cforms' . $no . '_redirect_page'); } else { if (get_option('cforms' . $no . '_redirect') == 2 || get_cforms_submission_left($no) == 0) { $hide = '|~~~'; } } // return success msg $pre = $segments[0] . '*$#' . substr(get_option('cforms' . $no . '_popup'), 0, 1); $successMsg = check_default_vars(stripslashes(get_option('cforms' . $no . '_success')), $no); $successMsg = check_cust_vars($successMsg, $track, $no); return $pre . preg_replace('|\\r\\n|', '<br />', $successMsg) . $hide; } else { // return error msg $err = __('Error occurred while sending the message: ', 'cforms') . ($smtpsettings[0] ? '<br />' . $sentadmin : ''); $pre = $segments[0] . '*$#' . substr(get_option('cforms' . $no . '_popup'), 1, 1); return $pre . $err . '|!!!'; } }
// if in Tell-A-Friend Mode, then overwrite header stuff... if ($taf_youremail && $taf_friendsemail && substr(get_option('cforms' . $no . '_tellafriend'), 0, 1) == '1') { $field_email = "\"{$taf_friendsname}\" <{$taf_friendsemail}>"; } if ($ccme) { if ($smtpsettings[0] == '1') { $sent = cforms_phpmailer($no, $frommail, $replyto, $field_email, stripslashes($t[1]), $message, $formdata, $htmlmessage, $htmlformdata, 'ac'); } else { $sent = @mail($field_email, encode_header(stripslashes($t[1])), $fmessage, $headers2); } //the admin one } else { if ($smtpsettings[0] == '1') { $sent = cforms_phpmailer($no, $frommail, $replyto, $field_email, stripslashes($t[0]), $cmsg, '', $cmsghtml, '', 'ac'); } else { $sent = @mail($field_email, encode_header(stripslashes($t[0])), stripslashes($automsg), $headers2); } //takes the above } if ($sent != '1') { $usermessage_text = __('Error occurred while sending the auto confirmation message: ', 'cforms') . " ({$sent})"; } } // redirect to a different page on suceess? if (get_option('cforms' . $no . '_redirect') == 1) { ?> <script type="text/javascript"> location.href = '<?php echo get_option('cforms' . $no . '_redirect_page'); ?> ';
/** * smtp_mail * Action: Send email * Call: smtp_mail (string to, string from, string subject, string body]) - or - * Call: smtp_mail (string to, string from, string data) - DEPRECATED * @param String - To: * @param String - From: * @param String - Subject: (if called with 4 parameters) or full mail body (if called with 3 parameters) * @param String (optional, but recommended) - mail body * @return bool - true on success, otherwise false * TODO: Replace this with something decent like PEAR::Mail or Zend_Mail. */ function smtp_mail($to, $from, $data, $body = "") { global $CONF; $smtpd_server = $CONF['smtp_server']; $smtpd_port = $CONF['smtp_port']; //$smtp_server = $_SERVER["SERVER_NAME"]; $smtp_server = php_uname("n"); $errno = "0"; $errstr = "0"; $timeout = "30"; if ($body != "") { $maildata = "To: " . $to . "\n" . "From: " . $from . "\n" . "Subject: " . encode_header($data) . "\n" . "MIME-Version: 1.0\n" . "Content-Type: text/plain; charset=utf-8\n" . "Content-Transfer-Encoding: 8bit\n" . "\n" . $body; } else { $maildata = $data; } $fh = @fsockopen($smtpd_server, $smtpd_port, $errno, $errstr, $timeout); if (!$fh) { error_log("fsockopen failed - errno: {$errno} - errstr: {$errstr}"); return false; } else { $res = smtp_get_response($fh); fputs($fh, "EHLO {$smtp_server}\r\n"); $res = smtp_get_response($fh); fputs($fh, "MAIL FROM:<{$from}>\r\n"); $res = smtp_get_response($fh); fputs($fh, "RCPT TO:<{$to}>\r\n"); $res = smtp_get_response($fh); fputs($fh, "DATA\r\n"); $res = smtp_get_response($fh); fputs($fh, "{$maildata}\r\n.\r\n"); $res = smtp_get_response($fh); fputs($fh, "QUIT\r\n"); $res = smtp_get_response($fh); fclose($fh); } return true; }
* Form POST \ GET Variables: * * fTo * fSubject * fBody */ require_once 'common.php'; authentication_require_role('admin'); $CONF['sendmail'] == 'NO' ? header("Location: " . $CONF['postfix_admin_url'] . "/main.php") && exit : '1'; $SESSID_USERNAME = authentication_get_username(); if ($_SERVER['REQUEST_METHOD'] == "POST") { $fTo = safepost('fTo'); $fFrom = $SESSID_USERNAME; $fHeaders = "To: " . $fTo . "\n"; $fHeaders .= "From: " . $fFrom . "\n"; $fHeaders .= "Subject: " . encode_header(safepost('fSubject')) . "\n"; $fHeaders .= "MIME-Version: 1.0\n"; $fHeaders .= "Content-Type: text/plain; charset=utf-8\n"; $fHeaders .= "Content-Transfer-Encoding: 8bit\n"; $fHeaders .= escape_string($_POST['fBody']); if (empty($fTo) or !check_email($fTo)) { $error = 1; $tTo = escape_string($_POST['fTo']); $tSubject = escape_string($_POST['fSubject']); $tBody = escape_string($_POST['fBody']); $tMessage = $PALANG['pSendmail_to_text_error']; } if ($error != 1) { if (!smtp_mail($fTo, $fFrom, $fHeaders)) { $tMessage .= $PALANG['pSendmail_result_error']; } else {