private function run()
{
global $Conf, $Opt, $Me, $Error, $subjectPrefix, $mailer_options;
$subject = trim(defval($_REQUEST, "subject", ""));
if (substr($subject, 0, strlen($subjectPrefix)) != $subjectPrefix) {
$subject = $subjectPrefix . $subject;
}
$emailBody = $_REQUEST["emailBody"];
$template = array("subject" => $subject, "body" => $emailBody);
$rest = array("cc" => $_REQUEST["cc"], "reply-to" => $_REQUEST["replyto"], "no_error_quit" => true);
$rest = array_merge($rest, $mailer_options);
// test whether this mail is paper-sensitive
$mailer = new HotCRPMailer($Me, null, $rest);
$prep = $mailer->make_preparation($template, $rest);
$paper_sensitive = preg_match('/%[A-Z0-9]+[(%]/', $prep->subject . $prep->body);
$q = $this->recip->query($paper_sensitive);
if (!$q) {
return Conf::msg_error("Bad recipients value");
}
$result = $Conf->qe($q);
if (!$result) {
return;
}
$recipients = defval($_REQUEST, "recipients", "");
if ($this->sending) {
$q = "recipients='" . sqlq($recipients) . "', cc='" . sqlq($_REQUEST["cc"]) . "', replyto='" . sqlq($_REQUEST["replyto"]) . "', subject='" . sqlq($_REQUEST["subject"]) . "', emailBody='" . sqlq($_REQUEST["emailBody"]) . "'";
if ($Conf->sversion >= 79) {
$q .= ", q='" . sqlq($_REQUEST["q"]) . "', t='" . sqlq($_REQUEST["t"]) . "'";
}
if ($log_result = Dbl::query_raw("insert into MailLog set {$q}")) {
$this->mailid_text = " #" . $log_result->insert_id;
}
$Me->log_activity("Sending mail{$this->mailid_text} \"{$subject}\"");
} else {
$rest["no_send"] = true;
}
$mailer = new HotCRPMailer();
$mailer->combination_type = $this->recip->combination_type($paper_sensitive);
$fake_prep = new HotCRPMailPreparation();
$fake_prep->fake = true;
$last_prep = $fake_prep;
$nrows_done = 0;
$nrows_left = edb_nrows($result);
$nwarnings = 0;
$preperrors = array();
$revinform = $recipients == "newpcrev" ? array() : null;
while ($row = PaperInfo::fetch($result, $Me)) {
++$nrows_done;
$contact = new Contact($row);
$rest["newrev_since"] = $this->recip->newrev_since;
$mailer->reset($contact, $row, $rest);
$prep = $mailer->make_preparation($template, $rest);
if ($prep->errors) {
foreach ($prep->errors as $lcfield => $hline) {
$reqfield = $lcfield == "reply-to" ? "replyto" : $lcfield;
$Error[$reqfield] = true;
$emsg = Mailer::$email_fields[$lcfield] . " destination isn’t a valid email list: <blockquote><tt>" . htmlspecialchars($hline) . "</tt></blockquote> Make sure email address are separated by commas; put names in \"quotes\" and email addresses in <angle brackets>.";
if (!isset($preperrors[$emsg])) {
Conf::msg_error($emsg);
}
$preperrors[$emsg] = true;
}
} else {
if ($this->process_prep($prep, $last_prep, $row)) {
if ((!$Me->privChair || @$Opt["chairHidePasswords"]) && !@$last_prep->sensitive) {
$srest = array_merge($rest, array("sensitivity" => "display"));
$mailer->reset($contact, $row, $srest);
$last_prep->sensitive = $mailer->make_preparation($template, $srest);
}
}
}
if ($nwarnings != $mailer->nwarnings() || $nrows_done % 5 == 0) {
$this->echo_mailinfo($nrows_done, $nrows_left);
}
if ($nwarnings != $mailer->nwarnings()) {
$this->echo_prologue();
$nwarnings = $mailer->nwarnings();
echo "<div id='foldmailwarn{$nwarnings}' class='hidden'><div class='warning'>", join("<br />", $mailer->warnings()), "</div></div>";
$Conf->echoScript("\$\$('mailwarnings').innerHTML = \$\$('foldmailwarn{$nwarnings}').innerHTML;");
}
if ($this->sending && $revinform !== null) {
$revinform[] = "(paperId={$row->paperId} and contactId={$row->contactId})";
}
}
$this->process_prep($fake_prep, $last_prep, (object) array("paperId" => -1));
$this->echo_mailinfo($nrows_done, $nrows_left);
if (!$this->started && !count($preperrors)) {
return Conf::msg_error("No users match “" . $this->recip->unparse() . "” for that search.");
} else {
if (!$this->started) {
return false;
} else {
if (!$this->sending) {
$this->echo_actions();
}
}
}
if ($revinform) {
$Conf->qe("update PaperReview set timeRequestNotified=" . time() . " where " . join(" or ", $revinform));
}
echo "</div></form>";
$Conf->echoScript("fold('mail', null);");
$Conf->footer();
exit;
}
function save_user($cj, $user_status, $Acct, $allow_modification)
{
global $Conf, $Me, $Opt, $OK, $newProfile;
if ($newProfile) {
$Acct = null;
}
// check for missing fields
UserStatus::normalize_name($cj);
if ($newProfile && !isset($cj->email)) {
$user_status->set_error("email", "Email address required.");
return false;
}
// check email
if ($newProfile || $cj->email != $Acct->email) {
if ($new_acct = Contact::find_by_email($cj->email)) {
if ($allow_modification) {
$cj->id = $new_acct->contactId;
} else {
$msg = "Email address “" . htmlspecialchars($cj->email) . "” is already in use.";
if ($Me->privChair) {
$msg = str_replace("an account", "<a href=\"" . hoturl("profile", "u=" . urlencode($cj->email)) . "\">an account</a>", $msg);
}
if (!$newProfile) {
$msg .= " You may want to <a href=\"" . hoturl("mergeaccounts") . "\">merge these accounts</a>.";
}
return $user_status->set_error("email", $msg);
}
} else {
if (Contact::external_login()) {
if ($cj->email === "") {
return $user_status->set_error("email", "Not a valid username.");
}
} else {
if ($cj->email === "") {
return $user_status->set_error("email", "You must supply an email address.");
} else {
if (!validate_email($cj->email)) {
return $user_status->set_error("email", "“" . htmlspecialchars($cj->email) . "” is not a valid email address.");
}
}
}
}
if (!$newProfile && !$Me->privChair) {
$old_preferredEmail = $Acct->preferredEmail;
$Acct->preferredEmail = $cj->email;
$capmgr = $Conf->capability_manager();
$rest = array("capability" => $capmgr->create(CAPTYPE_CHANGEEMAIL, array("user" => $Acct, "timeExpires" => time() + 259200, "data" => json_encode(array("uemail" => $cj->email)))));
$mailer = new HotCRPMailer($Acct, null, $rest);
$prep = $mailer->make_preparation("@changeemail", $rest);
if ($prep->sendable) {
Mailer::send_preparation($prep);
$Conf->warnMsg("Mail has been sent to " . htmlspecialchars($cj->email) . ". Use the link it contains to confirm your email change request.");
} else {
Conf::msg_error("Mail cannot be sent to " . htmlspecialchars($cj->email) . " at this time. Your email address was unchanged.");
}
// Save changes *except* for new email, by restoring old email.
$cj->email = $Acct->email;
$Acct->preferredEmail = $old_preferredEmail;
}
}
// save account
return $user_status->save($cj, $Acct, $Me);
}
function sendAccountInfo($sendtype, $sensitive)
{
global $Conf, $Opt;
assert(!$this->disabled);
$rest = array();
if ($sendtype == "create" && $this->prefer_contactdb_password()) {
$template = "@activateaccount";
} else {
if ($sendtype == "create") {
$template = "@createaccount";
} else {
if ($this->plaintext_password() && ($Opt["safePasswords"] <= 1 || $sendtype != "forgot")) {
$template = "@accountinfo";
} else {
if ($this->contactDbId && $this->prefer_contactdb_password()) {
$capmgr = $Conf->capability_manager("U");
} else {
$capmgr = $Conf->capability_manager();
}
$rest["capability"] = $capmgr->create(CAPTYPE_RESETPASSWORD, array("user" => $this, "timeExpires" => time() + 259200));
$Conf->log("Created password reset " . substr($rest["capability"], 0, 8) . "...", $this);
$template = "@resetpassword";
}
}
}
$mailer = new HotCRPMailer($this, null, $rest);
$prep = $mailer->make_preparation($template, $rest);
if ($prep->sendable || !$sensitive || get($Opt, "debugShowSensitiveEmail")) {
Mailer::send_preparation($prep);
return $template;
} else {
Conf::msg_error("Mail cannot be sent to " . htmlspecialchars($this->email) . " at this time.");
return false;
}
}
static function prepare_to($recipient, $template, $row, $rest = array())
{
if (defval($recipient, "disabled")) {
return null;
}
$mailer = new HotCRPMailer($recipient, $row, $rest);
if (($checkf = get($rest, "check_function")) && !call_user_func($checkf, $recipient, $mailer->row, $mailer->rrow)) {
return null;
}
return $mailer->make_preparation($template, $rest);
}
