function sendUserEmail($option, $toId, $fromId, $emailName, $emailAddress, $subject, $message)
{
global $ueConfig, $_CB_framework, $_POST, $_PLUGINS;
$allowPublic = isset($ueConfig['allow_email_public']) ? (int) $ueConfig['allow_email_public'] : 0;
// simple spoof check:
cbSpoofCheck('emailuser');
$errorMsg = cbAntiSpamCheck(false, $allowPublic);
if ($_CB_framework->myId() == 0 && (!$allowPublic || $allowPublic && !$emailAddress) || $_CB_framework->myId() != $fromId || !$toId || $ueConfig['allow_email_display'] != 1 && $ueConfig['allow_email_display'] != 3 || !CBuser::getMyInstance()->authoriseView('profile', $toId)) {
cbNotAuth(true);
return;
}
$_PLUGINS->loadPluginGroup('user');
$rowFrom = new UserTable();
$rowFrom->load((int) $fromId);
$rowTo = new UserTable();
$rowTo->load((int) $toId);
$emailName = stripslashes($emailName);
// remove slashes added by cbGetParam
$emailAddress = stripslashes($emailAddress);
// remove slashes added by cbGetParam
$subject = stripslashes($subject);
// remove slashes added by cbGetParam
$message = stripslashes($message);
// remove slashes added by cbGetParam
if (!$errorMsg) {
$errorMsg = CBTxt::Th('UE_SESSIONTIMEOUT', 'Session timed out.') . ' ' . CBTxt::Th('UE_SENTEMAILFAILED', 'Your email failed to send! Please try again.');
if (isset($_POST['protect'])) {
$parts = explode('_', cbGetParam($_POST, 'protect', ''));
if (count($parts) == 3 && $parts[0] == 'cbmv1' && strlen($parts[2]) == 16 && $parts[1] == md5($parts[2] . $rowTo->id . $rowTo->password . $rowTo->lastvisitDate . $rowFrom->password . $rowFrom->lastvisitDate)) {
$errorMsg = null;
$_PLUGINS->trigger('onBeforeEmailUser', array(&$rowFrom, &$rowTo, 1, &$emailName, &$emailAddress, &$subject, &$message));
//$ui=1
if ($_PLUGINS->is_errors()) {
$errorMsg = $_PLUGINS->getErrorMSG('<br />');
} else {
$spamCheck = cbSpamProtect($_CB_framework->myId(), true, $allowPublic);
if ($spamCheck) {
$errorMsg = $spamCheck;
} else {
$cbNotification = new cbNotification();
if ($_CB_framework->myId()) {
$res = $cbNotification->sendUserEmail($toId, $fromId, $subject, $message, true);
} else {
$res = $cbNotification->sendUserEmailFromEmail($toId, $emailName, $emailAddress, $subject, $message, true);
}
if ($res) {
cbRedirectToProfile($rowTo->id, CBTxt::Th('UE_SENTEMAILSUCCESS', 'Your email was sent successfully!'));
return;
} else {
$errorMsg = CBTxt::Th('UE_SENTEMAILFAILED', 'Your email failed to send! Please try again.');
}
}
}
}
}
}
if ($errorMsg) {
$_CB_framework->enqueueMessage($errorMsg, 'error');
}
HTML_comprofiler::emailUser($option, $rowFrom, $rowTo, $allowPublic, $emailName, $emailAddress, $subject, $message);
}