ManageNews.php 36 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084
  1. <?php
  2. /**
  3. * This file manages... the news. :P
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2012 Simple Machines
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('Hacking attempt...');
  16. /**
  17. * The news dispatcher; doesn't do anything, just delegates.
  18. * This is the entrance point for all News and Newsletter screens.
  19. * Called by ?action=admin;area=news.
  20. * It does the permission checks, and calls the appropriate function
  21. * based on the requested sub-action.
  22. */
  23. function ManageNews()
  24. {
  25. global $context, $txt, $scripturl;
  26. // First, let's do a quick permissions check for the best error message possible.
  27. isAllowedTo(array('edit_news', 'send_mail', 'admin_forum'));
  28. loadTemplate('ManageNews');
  29. // Format: 'sub-action' => array('function', 'permission')
  30. $subActions = array(
  31. 'editnews' => array('EditNews', 'edit_news'),
  32. 'mailingmembers' => array('SelectMailingMembers', 'send_mail'),
  33. 'mailingcompose' => array('ComposeMailing', 'send_mail'),
  34. 'mailingsend' => array('SendMailing', 'send_mail'),
  35. 'settings' => array('ModifyNewsSettings', 'admin_forum'),
  36. );
  37. call_integration_hook('integrate_manage_news', array(&$subActions));
  38. // Default to sub action 'main' or 'settings' depending on permissions.
  39. $_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : (allowedTo('edit_news') ? 'editnews' : (allowedTo('send_mail') ? 'mailingmembers' : 'settings'));
  40. // Have you got the proper permissions?
  41. isAllowedTo($subActions[$_REQUEST['sa']][1]);
  42. // Create the tabs for the template.
  43. $context[$context['admin_menu_name']]['tab_data'] = array(
  44. 'title' => $txt['news_title'],
  45. 'help' => 'edit_news',
  46. 'description' => $txt['admin_news_desc'],
  47. 'tabs' => array(
  48. 'editnews' => array(
  49. ),
  50. 'mailingmembers' => array(
  51. 'description' => $txt['news_mailing_desc'],
  52. ),
  53. 'settings' => array(
  54. 'description' => $txt['news_settings_desc'],
  55. ),
  56. ),
  57. );
  58. // Force the right area...
  59. if (substr($_REQUEST['sa'], 0, 7) == 'mailing')
  60. $context[$context['admin_menu_name']]['current_subsection'] = 'mailingmembers';
  61. $subActions[$_REQUEST['sa']][0]();
  62. }
  63. /**
  64. * Let the administrator(s) edit the news items for the forum.
  65. * It writes an entry into the moderation log.
  66. * This function uses the edit_news administration area.
  67. * Called by ?action=admin;area=news.
  68. * Requires the edit_news permission.
  69. * Can be accessed with ?action=admin;sa=editnews.
  70. *
  71. * @uses ManageNews template, edit_news sub template.
  72. */
  73. function EditNews()
  74. {
  75. global $txt, $modSettings, $context, $sourcedir, $user_info, $scripturl;
  76. global $smcFunc;
  77. require_once($sourcedir . '/Subs-Post.php');
  78. // The 'remove selected' button was pressed.
  79. if (!empty($_POST['delete_selection']) && !empty($_POST['remove']))
  80. {
  81. checkSession();
  82. // Store the news temporarily in this array.
  83. $temp_news = explode("\n", $modSettings['news']);
  84. // Remove the items that were selected.
  85. foreach ($temp_news as $i => $news)
  86. if (in_array($i, $_POST['remove']))
  87. unset($temp_news[$i]);
  88. // Update the database.
  89. updateSettings(array('news' => implode("\n", $temp_news)));
  90. logAction('news');
  91. }
  92. // The 'Save' button was pressed.
  93. elseif (!empty($_POST['save_items']))
  94. {
  95. checkSession();
  96. foreach ($_POST['news'] as $i => $news)
  97. {
  98. if (trim($news) == '')
  99. unset($_POST['news'][$i]);
  100. else
  101. {
  102. $_POST['news'][$i] = $smcFunc['htmlspecialchars']($_POST['news'][$i], ENT_QUOTES);
  103. preparsecode($_POST['news'][$i]);
  104. }
  105. }
  106. // Send the new news to the database.
  107. updateSettings(array('news' => implode("\n", $_POST['news'])));
  108. // Log this into the moderation log.
  109. logAction('news');
  110. }
  111. // We're going to want this for making our list.
  112. require_once($sourcedir . '/Subs-List.php');
  113. $context['page_title'] = $txt['admin_edit_news'];
  114. // Use the standard templates for showing this.
  115. $listOptions = array(
  116. 'id' => 'news_lists',
  117. 'get_items' => array(
  118. 'function' => 'list_getNews',
  119. ),
  120. 'columns' => array(
  121. 'news' => array(
  122. 'header' => array(
  123. 'value' => $txt['admin_edit_news'],
  124. ),
  125. 'data' => array(
  126. 'function' => create_function('$news', '
  127. if (is_numeric($news[\'id\']))
  128. return \'<textarea id="data_\' . $news[\'id\'] . \'" rows="3" cols="50" name="news[]" style="\' . (isBrowser(\'is_ie8\') ? \'width: 635px; max-width: 85%; min-width: 85%\' : \'width 100%;margin 0 5em\') . \';">\' . $news[\'unparsed\'] . \'</textarea>
  129. <br />
  130. <div class="floatleft" id="preview_\' . $news[\'id\'] . \'"></div>\';
  131. else
  132. return $news[\'unparsed\'];
  133. '),
  134. 'style' => 'width: 50%;',
  135. ),
  136. ),
  137. 'preview' => array(
  138. 'header' => array(
  139. 'value' => $txt['preview'],
  140. ),
  141. 'data' => array(
  142. 'function' => create_function('$news', '
  143. return \'<div id="box_preview_\' . $news[\'id\'] . \'" style="overflow: auto; width: 100%; height: 10ex;">\' . $news[\'parsed\'] . \'</div>\';
  144. '),
  145. 'style' => 'width: 45%;',
  146. ),
  147. ),
  148. 'check' => array(
  149. 'header' => array(
  150. 'value' => '<input type="checkbox" onclick="invertAll(this, this.form);" class="input_check" />',
  151. ),
  152. 'data' => array(
  153. 'function' => create_function('$news', '
  154. if (is_numeric($news[\'id\']))
  155. return \'<input type="checkbox" name="remove[]" value="\' . $news[\'id\'] . \'" class="input_check" />\';
  156. else
  157. return \'\';
  158. '),
  159. 'style' => 'text-align: center',
  160. ),
  161. ),
  162. ),
  163. 'form' => array(
  164. 'href' => $scripturl . '?action=admin;area=news;sa=editnews',
  165. 'hidden_fields' => array(
  166. $context['session_var'] => $context['session_id'],
  167. ),
  168. ),
  169. 'additional_rows' => array(
  170. array(
  171. 'position' => 'bottom_of_list',
  172. 'value' => '
  173. <span id="moreNewsItems_link" class="floatleft" style="display: none;">
  174. <a class="button_link" href="javascript:void(0);" onclick="addNewsItem(); return false;">' . $txt['editnews_clickadd'] . '</a>
  175. </span>
  176. <input type="submit" name="save_items" value="' . $txt['save'] . '" class="button_submit" />
  177. <input type="submit" name="delete_selection" value="' . $txt['editnews_remove_selected'] . '" onclick="return confirm(\'' . $txt['editnews_remove_confirm'] . '\');" class="button_submit" />',
  178. ),
  179. ),
  180. 'javascript' => '
  181. document.getElementById(\'list_news_lists_last\').style.display = "none";
  182. document.getElementById("moreNewsItems_link").style.display = "";
  183. var last_preview = 0;
  184. $(document).ready(function () {
  185. $("div[id ^= \'preview_\']").each(function () {
  186. var preview_id = $(this).attr(\'id\').split(\'_\')[1];
  187. if (last_preview < preview_id)
  188. last_preview = preview_id;
  189. make_preview_btn(preview_id);
  190. });
  191. });
  192. function make_preview_btn (preview_id)
  193. {
  194. $("#preview_" + preview_id).addClass("button_link");
  195. $("#preview_" + preview_id).text(\'' . $txt['preview'] . '\').click(function () {
  196. $.ajax({
  197. type: "POST",
  198. url: "' . $scripturl . '?action=xmlhttp;sa=previews;xml",
  199. data: {item: "newspreview", news: $("#data_" + preview_id).val()},
  200. context: document.body,
  201. success: function(request){
  202. if ($(request).find("error").text() == \'\')
  203. $(document).find("#box_preview_" + preview_id).html($(request).text());
  204. else
  205. $(document).find("#box_preview_" + preview_id).text(\'' . $txt['news_error_no_news'] . '\');
  206. },
  207. });
  208. });
  209. }
  210. function addNewsItem ()
  211. {
  212. last_preview++;
  213. $("#list_news_lists_last").before(' . javaScriptEscape('
  214. <tr class="windowbg') . ' + (last_preview % 2 == 0 ? \'\' : \'2\') + ' . javaScriptEscape('">
  215. <td style="width: 50%;">
  216. <textarea id="data_') . ' + last_preview + ' . javaScriptEscape('" rows="3" cols="65" name="news[]" style="' . (isBrowser('is_ie8') ? 'width: 635px; max-width: 85%; min-width: 85%' : 'width: 95%') . ';"></textarea>
  217. <br />
  218. <div class="floatleft" id="preview_') . ' + last_preview + ' . javaScriptEscape('"></div>
  219. </td>
  220. <td style="width: 45%;">
  221. <div id="box_preview_') . ' + last_preview + ' . javaScriptEscape('" style="overflow: auto; width: 100%; height: 10ex;"></div>
  222. </td>
  223. <td></td>
  224. </tr>') . ');
  225. make_preview_btn(last_preview);
  226. }',
  227. );
  228. // Create the request list.
  229. createList($listOptions);
  230. $context['sub_template'] = 'show_list';
  231. $context['default_list'] = 'news_lists';
  232. }
  233. function list_getNews()
  234. {
  235. global $modSettings;
  236. $admin_current_news = array();
  237. // Ready the current news.
  238. foreach (explode("\n", $modSettings['news']) as $id => $line)
  239. $admin_current_news[$id] = array(
  240. 'id' => $id,
  241. 'unparsed' => un_preparsecode($line),
  242. 'parsed' => preg_replace('~<([/]?)form[^>]*?[>]*>~i', '<em class="smalltext">&lt;$1form&gt;</em>', parse_bbc($line)),
  243. );
  244. $admin_current_news['last'] = array(
  245. 'id' => 'last',
  246. 'unparsed' => '<div id="moreNewsItems"></div>
  247. <noscript><textarea rows="3" cols="65" name="news[]" style="' . (isBrowser('is_ie8') ? 'width: 635px; max-width: 85%; min-width: 85%' : 'width: 85%') . ';"></textarea></noscript>',
  248. 'parsed' => '<div id="moreNewsItems_preview"></div>',
  249. );
  250. return $admin_current_news;
  251. }
  252. /**
  253. * This function allows a user to select the membergroups to send their
  254. * mailing to.
  255. * Called by ?action=admin;area=news;sa=mailingmembers.
  256. * Requires the send_mail permission.
  257. * Form is submitted to ?action=admin;area=news;mailingcompose.
  258. *
  259. * @uses the ManageNews template and email_members sub template.
  260. */
  261. function SelectMailingMembers()
  262. {
  263. global $txt, $context, $modSettings, $smcFunc;
  264. $context['page_title'] = $txt['admin_newsletters'];
  265. $context['sub_template'] = 'email_members';
  266. $context['groups'] = array();
  267. $postGroups = array();
  268. $normalGroups = array();
  269. // If we have post groups disabled then we need to give a "ungrouped members" option.
  270. if (empty($modSettings['permission_enable_postgroups']))
  271. {
  272. $context['groups'][0] = array(
  273. 'id' => 0,
  274. 'name' => $txt['membergroups_members'],
  275. 'member_count' => 0,
  276. );
  277. $normalGroups[0] = 0;
  278. }
  279. // Get all the extra groups as well as Administrator and Global Moderator.
  280. $request = $smcFunc['db_query']('', '
  281. SELECT mg.id_group, mg.group_name, mg.min_posts
  282. FROM {db_prefix}membergroups AS mg' . (empty($modSettings['permission_enable_postgroups']) ? '
  283. WHERE mg.min_posts = {int:min_posts}' : '') . '
  284. GROUP BY mg.id_group, mg.min_posts, mg.group_name
  285. ORDER BY mg.min_posts, CASE WHEN mg.id_group < {int:newbie_group} THEN mg.id_group ELSE 4 END, mg.group_name',
  286. array(
  287. 'min_posts' => -1,
  288. 'newbie_group' => 4,
  289. )
  290. );
  291. while ($row = $smcFunc['db_fetch_assoc']($request))
  292. {
  293. $context['groups'][$row['id_group']] = array(
  294. 'id' => $row['id_group'],
  295. 'name' => $row['group_name'],
  296. 'member_count' => 0,
  297. );
  298. if ($row['min_posts'] == -1)
  299. $normalGroups[$row['id_group']] = $row['id_group'];
  300. else
  301. $postGroups[$row['id_group']] = $row['id_group'];
  302. }
  303. $smcFunc['db_free_result']($request);
  304. // If we have post groups, let's count the number of members...
  305. if (!empty($postGroups))
  306. {
  307. $query = $smcFunc['db_query']('', '
  308. SELECT mem.id_post_group AS id_group, COUNT(*) AS member_count
  309. FROM {db_prefix}members AS mem
  310. WHERE mem.id_post_group IN ({array_int:post_group_list})
  311. GROUP BY mem.id_post_group',
  312. array(
  313. 'post_group_list' => $postGroups,
  314. )
  315. );
  316. while ($row = $smcFunc['db_fetch_assoc']($query))
  317. $context['groups'][$row['id_group']]['member_count'] += $row['member_count'];
  318. $smcFunc['db_free_result']($query);
  319. }
  320. if (!empty($normalGroups))
  321. {
  322. // Find people who are members of this group...
  323. $query = $smcFunc['db_query']('', '
  324. SELECT id_group, COUNT(*) AS member_count
  325. FROM {db_prefix}members
  326. WHERE id_group IN ({array_int:normal_group_list})
  327. GROUP BY id_group',
  328. array(
  329. 'normal_group_list' => $normalGroups,
  330. )
  331. );
  332. while ($row = $smcFunc['db_fetch_assoc']($query))
  333. $context['groups'][$row['id_group']]['member_count'] += $row['member_count'];
  334. $smcFunc['db_free_result']($query);
  335. // Also do those who have it as an additional membergroup - this ones more yucky...
  336. $query = $smcFunc['db_query']('', '
  337. SELECT mg.id_group, COUNT(*) AS member_count
  338. FROM {db_prefix}membergroups AS mg
  339. INNER JOIN {db_prefix}members AS mem ON (mem.additional_groups != {string:blank_string}
  340. AND mem.id_group != mg.id_group
  341. AND FIND_IN_SET(mg.id_group, mem.additional_groups) != 0)
  342. WHERE mg.id_group IN ({array_int:normal_group_list})
  343. GROUP BY mg.id_group',
  344. array(
  345. 'normal_group_list' => $normalGroups,
  346. 'blank_string' => '',
  347. )
  348. );
  349. while ($row = $smcFunc['db_fetch_assoc']($query))
  350. $context['groups'][$row['id_group']]['member_count'] += $row['member_count'];
  351. $smcFunc['db_free_result']($query);
  352. }
  353. // Any moderators?
  354. $request = $smcFunc['db_query']('', '
  355. SELECT COUNT(DISTINCT id_member) AS num_distinct_mods
  356. FROM {db_prefix}moderators
  357. LIMIT 1',
  358. array(
  359. )
  360. );
  361. list ($context['groups'][3]['member_count']) = $smcFunc['db_fetch_row']($request);
  362. $smcFunc['db_free_result']($request);
  363. $context['can_send_pm'] = allowedTo('pm_send');
  364. }
  365. /**
  366. * Prepare subject and message of an email for the preview box
  367. * Used in ComposeMailing and RetrievePreview (Xml.php)
  368. */
  369. function prepareMailingForPreview ()
  370. {
  371. global $context, $smcFunc, $modSettings, $scripturl, $user_info, $txt;
  372. loadLanguage('Errors');
  373. $processing = array('preview_subject' => 'subject', 'preview_message' => 'message');
  374. // Use the default time format.
  375. $user_info['time_format'] = $modSettings['time_format'];
  376. $variables = array(
  377. '{$board_url}',
  378. '{$current_time}',
  379. '{$latest_member.link}',
  380. '{$latest_member.id}',
  381. '{$latest_member.name}'
  382. );
  383. $html = $context['send_html'];
  384. // We might need this in a bit
  385. $cleanLatestMember = empty($context['send_html']) || $context['send_pm'] ? un_htmlspecialchars($modSettings['latestRealName']) : $modSettings['latestRealName'];
  386. foreach ($processing as $key => $post)
  387. {
  388. $context[$key] = !empty($_REQUEST[$post]) ? $_REQUEST[$post] : '';
  389. if (empty($context[$key]) && empty($_REQUEST['xml']))
  390. $context['post_error']['messages'][] = $txt['error_no_' . $post];
  391. elseif (!empty($_REQUEST['xml']))
  392. continue;
  393. preparsecode($context[$key]);
  394. if ($html)
  395. {
  396. $enablePostHTML = $modSettings['enablePostHTML'];
  397. $modSettings['enablePostHTML'] = $context['send_html'];
  398. $context[$key] = parse_bbc($context[$key]);
  399. $modSettings['enablePostHTML'] = $enablePostHTML;
  400. }
  401. // Replace in all the standard things.
  402. $context[$key] = str_replace($variables,
  403. array(
  404. !empty($context['send_html']) ? '<a href="' . $scripturl . '">' . $scripturl . '</a>' : $scripturl,
  405. timeformat(forum_time(), false),
  406. !empty($context['send_html']) ? '<a href="' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . '">' . $cleanLatestMember . '</a>' : ($context['send_pm'] ? '[url=' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . ']' . $cleanLatestMember . '[/url]' : $cleanLatestMember),
  407. $modSettings['latestMember'],
  408. $cleanLatestMember
  409. ), $context[$key]);
  410. }
  411. }
  412. /**
  413. * Shows a form to edit a forum mailing and its recipients.
  414. * Called by ?action=admin;area=news;sa=mailingcompose.
  415. * Requires the send_mail permission.
  416. * Form is submitted to ?action=admin;area=news;sa=mailingsend.
  417. *
  418. * @uses ManageNews template, email_members_compose sub-template.
  419. */
  420. function ComposeMailing()
  421. {
  422. global $txt, $sourcedir, $context, $smcFunc, $scripturl, $modSettings;
  423. // Setup the template!
  424. $context['page_title'] = $txt['admin_newsletters'];
  425. $context['sub_template'] = 'email_members_compose';
  426. $context['subject'] = !empty($_POST['subject']) ? $_POST['subject'] : htmlspecialchars($context['forum_name'] . ': ' . $txt['subject']);
  427. $context['message'] = !empty($_POST['message']) ? $_POST['message'] : htmlspecialchars($txt['message'] . "\n\n" . $txt['regards_team'] . "\n\n" . '{$board_url}');
  428. // Needed for the WYSIWYG editor.
  429. require_once($sourcedir . '/Subs-Editor.php');
  430. // Now create the editor.
  431. $editorOptions = array(
  432. 'id' => 'message',
  433. 'value' => $context['message'],
  434. 'height' => '175px',
  435. 'width' => '100%',
  436. 'labels' => array(
  437. 'post_button' => $txt['sendtopic_send'],
  438. ),
  439. 'preview_type' => 2,
  440. );
  441. create_control_richedit($editorOptions);
  442. // Store the ID for old compatibility.
  443. $context['post_box_name'] = $editorOptions['id'];
  444. if (isset($context['preview']))
  445. {
  446. require_once($sourcedir . '/Subs-Post.php');
  447. $context['recipients']['members'] = !empty($_POST['members']) ? explode(',', $_POST['members']) : array();
  448. $context['recipients']['exclude_members'] = !empty($_POST['exclude_members']) ? explode(',', $_POST['exclude_members']) : array();
  449. $context['recipients']['groups'] = !empty($_POST['groups']) ? explode(',', $_POST['groups']) : array();
  450. $context['recipients']['exclude_groups'] = !empty($_POST['exclude_groups']) ? explode(',', $_POST['exclude_groups']) : array();
  451. $context['recipients']['emails'] = !empty($_POST['emails']) ? explode(';', $_POST['emails']) : array();
  452. $context['email_force'] = !empty($_POST['email_force']) ? 1 : 0;
  453. $context['total_emails'] = !empty($_POST['total_emails']) ? (int) $_POST['total_emails'] : 0;
  454. $context['max_id_member'] = !empty($_POST['max_id_member']) ? (int) $_POST['max_id_member'] : 0;
  455. $context['send_pm'] = !empty($_POST['send_pm']) ? 1 : 0;
  456. $context['send_html'] = !empty($_POST['send_html']) ? '1' : '0';
  457. return prepareMailingForPreview();
  458. }
  459. // Start by finding any members!
  460. $toClean = array();
  461. if (!empty($_POST['members']))
  462. $toClean[] = 'members';
  463. if (!empty($_POST['exclude_members']))
  464. $toClean[] = 'exclude_members';
  465. if (!empty($toClean))
  466. {
  467. require_once($sourcedir . '/Subs-Auth.php');
  468. foreach ($toClean as $type)
  469. {
  470. // Remove the quotes.
  471. $_POST[$type] = strtr($_POST[$type], array('\\"' => '"'));
  472. preg_match_all('~"([^"]+)"~', $_POST[$type], $matches);
  473. $_POST[$type] = array_unique(array_merge($matches[1], explode(',', preg_replace('~"[^"]+"~', '', $_POST[$type]))));
  474. foreach ($_POST[$type] as $index => $member)
  475. if (strlen(trim($member)) > 0)
  476. $_POST[$type][$index] = $smcFunc['htmlspecialchars']($smcFunc['strtolower'](trim($member)));
  477. else
  478. unset($_POST[$type][$index]);
  479. // Find the members
  480. $_POST[$type] = implode(',', array_keys(findMembers($_POST[$type])));
  481. }
  482. }
  483. if (isset($_POST['member_list']) && is_array($_POST['member_list']))
  484. {
  485. $members = array();
  486. foreach ($_POST['member_list'] as $member_id)
  487. $members[] = (int) $member_id;
  488. $_POST['members'] = implode(',', $members);
  489. }
  490. if (isset($_POST['exclude_member_list']) && is_array($_POST['exclude_member_list']))
  491. {
  492. $members = array();
  493. foreach ($_POST['exclude_member_list'] as $member_id)
  494. $members[] = (int) $member_id;
  495. $_POST['exclude_members'] = implode(',', $members);
  496. }
  497. // Clean the other vars.
  498. SendMailing(true);
  499. // We need a couple strings from the email template file
  500. loadLanguage('EmailTemplates');
  501. // Get a list of all full banned users. Use their Username and email to find them. Only get the ones that can't login to turn off notification.
  502. $request = $smcFunc['db_query']('', '
  503. SELECT DISTINCT mem.id_member
  504. FROM {db_prefix}ban_groups AS bg
  505. INNER JOIN {db_prefix}ban_items AS bi ON (bg.id_ban_group = bi.id_ban_group)
  506. INNER JOIN {db_prefix}members AS mem ON (bi.id_member = mem.id_member)
  507. WHERE (bg.cannot_access = {int:cannot_access} OR bg.cannot_login = {int:cannot_login})
  508. AND (bg.expire_time IS NULL OR bg.expire_time > {int:current_time})',
  509. array(
  510. 'cannot_access' => 1,
  511. 'cannot_login' => 1,
  512. 'current_time' => time(),
  513. )
  514. );
  515. while ($row = $smcFunc['db_fetch_assoc']($request))
  516. $context['recipients']['exclude_members'][] = $row['id_member'];
  517. $smcFunc['db_free_result']($request);
  518. $request = $smcFunc['db_query']('', '
  519. SELECT DISTINCT bi.email_address
  520. FROM {db_prefix}ban_items AS bi
  521. INNER JOIN {db_prefix}ban_groups AS bg ON (bg.id_ban_group = bi.id_ban_group)
  522. WHERE (bg.cannot_access = {int:cannot_access} OR bg.cannot_login = {int:cannot_login})
  523. AND (COALESCE(bg.expire_time, 1=1) OR bg.expire_time > {int:current_time})
  524. AND bi.email_address != {string:blank_string}',
  525. array(
  526. 'cannot_access' => 1,
  527. 'cannot_login' => 1,
  528. 'current_time' => time(),
  529. 'blank_string' => '',
  530. )
  531. );
  532. $condition_array = array();
  533. $condition_array_params = array();
  534. $count = 0;
  535. while ($row = $smcFunc['db_fetch_assoc']($request))
  536. {
  537. $condition_array[] = '{string:email_' . $count . '}';
  538. $condition_array_params['email_' . $count++] = $row['email_address'];
  539. }
  540. $smcFunc['db_free_result']($request);
  541. if (!empty($condition_array))
  542. {
  543. $request = $smcFunc['db_query']('', '
  544. SELECT id_member
  545. FROM {db_prefix}members
  546. WHERE email_address IN(' . implode(', ', $condition_array) .')',
  547. $condition_array_params
  548. );
  549. while ($row = $smcFunc['db_fetch_assoc']($request))
  550. $context['recipients']['exclude_members'][] = $row['id_member'];
  551. $smcFunc['db_free_result']($request);
  552. }
  553. // Did they select moderators - if so add them as specific members...
  554. if ((!empty($context['recipients']['groups']) && in_array(3, $context['recipients']['groups'])) || (!empty($context['recipients']['exclude_groups']) && in_array(3, $context['recipients']['exclude_groups'])))
  555. {
  556. $request = $smcFunc['db_query']('', '
  557. SELECT DISTINCT mem.id_member AS identifier
  558. FROM {db_prefix}members AS mem
  559. INNER JOIN {db_prefix}moderators AS mods ON (mods.id_member = mem.id_member)
  560. WHERE mem.is_activated = {int:is_activated}',
  561. array(
  562. 'is_activated' => 1,
  563. )
  564. );
  565. while ($row = $smcFunc['db_fetch_assoc']($request))
  566. {
  567. if (in_array(3, $context['recipients']))
  568. $context['recipients']['exclude_members'][] = $row['identifier'];
  569. else
  570. $context['recipients']['members'][] = $row['identifier'];
  571. }
  572. $smcFunc['db_free_result']($request);
  573. }
  574. // For progress bar!
  575. $context['total_emails'] = count($context['recipients']['emails']);
  576. $request = $smcFunc['db_query']('', '
  577. SELECT MAX(id_member)
  578. FROM {db_prefix}members',
  579. array(
  580. )
  581. );
  582. list ($context['max_id_member']) = $smcFunc['db_fetch_row']($request);
  583. $smcFunc['db_free_result']($request);
  584. // Clean up the arrays.
  585. $context['recipients']['members'] = array_unique($context['recipients']['members']);
  586. $context['recipients']['exclude_members'] = array_unique($context['recipients']['exclude_members']);
  587. }
  588. /**
  589. * Handles the sending of the forum mailing in batches.
  590. * Called by ?action=admin;area=news;sa=mailingsend
  591. * Requires the send_mail permission.
  592. * Redirects to itself when more batches need to be sent.
  593. * Redirects to ?action=admin after everything has been sent.
  594. *
  595. * @param bool $clean_only = false; if set, it will only clean the variables, put them in context, then return.
  596. * @uses the ManageNews template and email_members_send sub template.
  597. */
  598. function SendMailing($clean_only = false)
  599. {
  600. global $txt, $sourcedir, $context, $smcFunc;
  601. global $scripturl, $modSettings, $user_info;
  602. if (isset($_POST['preview']))
  603. {
  604. $context['preview'] = true;
  605. return ComposeMailing();
  606. }
  607. // How many to send at once? Quantity depends on whether we are queueing or not.
  608. // @todo Might need an interface? (used in Post.php too with different limits)
  609. $num_at_once = empty($modSettings['mail_queue']) ? 60 : 1000;
  610. // If by PM's I suggest we half the above number.
  611. if (!empty($_POST['send_pm']))
  612. $num_at_once /= 2;
  613. checkSession();
  614. // Where are we actually to?
  615. $context['start'] = isset($_REQUEST['start']) ? $_REQUEST['start'] : 0;
  616. $context['email_force'] = !empty($_POST['email_force']) ? 1 : 0;
  617. $context['send_pm'] = !empty($_POST['send_pm']) ? 1 : 0;
  618. $context['total_emails'] = !empty($_POST['total_emails']) ? (int) $_POST['total_emails'] : 0;
  619. $context['max_id_member'] = !empty($_POST['max_id_member']) ? (int) $_POST['max_id_member'] : 0;
  620. $context['send_html'] = !empty($_POST['send_html']) ? '1' : '0';
  621. $context['parse_html'] = !empty($_POST['parse_html']) ? '1' : '0';
  622. // Create our main context.
  623. $context['recipients'] = array(
  624. 'groups' => array(),
  625. 'exclude_groups' => array(),
  626. 'members' => array(),
  627. 'exclude_members' => array(),
  628. 'emails' => array(),
  629. );
  630. // Have we any excluded members?
  631. if (!empty($_POST['exclude_members']))
  632. {
  633. $members = explode(',', $_POST['exclude_members']);
  634. foreach ($members as $member)
  635. if ($member >= $context['start'])
  636. $context['recipients']['exclude_members'][] = (int) $member;
  637. }
  638. // What about members we *must* do?
  639. if (!empty($_POST['members']))
  640. {
  641. $members = explode(',', $_POST['members']);
  642. foreach ($members as $member)
  643. if ($member >= $context['start'])
  644. $context['recipients']['members'][] = (int) $member;
  645. }
  646. // Cleaning groups is simple - although deal with both checkbox and commas.
  647. if (!empty($_POST['groups']))
  648. {
  649. if (is_array($_POST['groups']))
  650. {
  651. foreach ($_POST['groups'] as $group => $dummy)
  652. $context['recipients']['groups'][] = (int) $group;
  653. }
  654. else
  655. {
  656. $groups = explode(',', $_POST['groups']);
  657. foreach ($groups as $group)
  658. $context['recipients']['groups'][] = (int) $group;
  659. }
  660. }
  661. // Same for excluded groups
  662. if (!empty($_POST['exclude_groups']))
  663. {
  664. if (is_array($_POST['exclude_groups']))
  665. {
  666. foreach ($_POST['exclude_groups'] as $group => $dummy)
  667. $context['recipients']['exclude_groups'][] = (int) $group;
  668. }
  669. else
  670. {
  671. $groups = explode(',', $_POST['exclude_groups']);
  672. foreach ($groups as $group)
  673. $context['recipients']['exclude_groups'][] = (int) $group;
  674. }
  675. }
  676. // Finally - emails!
  677. if (!empty($_POST['emails']))
  678. {
  679. $addressed = array_unique(explode(';', strtr($_POST['emails'], array("\n" => ';', "\r" => ';', ',' => ';'))));
  680. foreach ($addressed as $curmem)
  681. {
  682. $curmem = trim($curmem);
  683. if ($curmem != '')
  684. $context['recipients']['emails'][$curmem] = $curmem;
  685. }
  686. }
  687. // If we're only cleaning drop out here.
  688. if ($clean_only)
  689. return;
  690. require_once($sourcedir . '/Subs-Post.php');
  691. // We are relying too much on writing to superglobals...
  692. $_POST['subject'] = !empty($_POST['subject']) ? $_POST['subject'] : '';
  693. $_POST['message'] = !empty($_POST['message']) ? $_POST['message'] : '';
  694. // Save the message and its subject in $context
  695. $context['subject'] = htmlspecialchars($_POST['subject']);
  696. $context['message'] = htmlspecialchars($_POST['message']);
  697. // Prepare the message for sending it as HTML
  698. if (!$context['send_pm'] && !empty($_POST['send_html']))
  699. {
  700. // Prepare the message for HTML.
  701. if (!empty($_POST['parse_html']))
  702. $_POST['message'] = str_replace(array("\n", ' '), array('<br />' . "\n", '&nbsp; '), $_POST['message']);
  703. // This is here to prevent spam filters from tagging this as spam.
  704. if (preg_match('~\<html~i', $_POST['message']) == 0)
  705. {
  706. if (preg_match('~\<body~i', $_POST['message']) == 0)
  707. $_POST['message'] = '<html><head><title>' . $_POST['subject'] . '</title></head>' . "\n" . '<body>' . $_POST['message'] . '</body></html>';
  708. else
  709. $_POST['message'] = '<html>' . $_POST['message'] . '</html>';
  710. }
  711. }
  712. if (empty($_POST['message']) || empty($_POST['subject']))
  713. {
  714. $context['preview'] = true;
  715. return ComposeMailing();
  716. }
  717. // Use the default time format.
  718. $user_info['time_format'] = $modSettings['time_format'];
  719. $variables = array(
  720. '{$board_url}',
  721. '{$current_time}',
  722. '{$latest_member.link}',
  723. '{$latest_member.id}',
  724. '{$latest_member.name}'
  725. );
  726. // We might need this in a bit
  727. $cleanLatestMember = empty($_POST['send_html']) || $context['send_pm'] ? un_htmlspecialchars($modSettings['latestRealName']) : $modSettings['latestRealName'];
  728. // Replace in all the standard things.
  729. $_POST['message'] = str_replace($variables,
  730. array(
  731. !empty($_POST['send_html']) ? '<a href="' . $scripturl . '">' . $scripturl . '</a>' : $scripturl,
  732. timeformat(forum_time(), false),
  733. !empty($_POST['send_html']) ? '<a href="' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . '">' . $cleanLatestMember . '</a>' : ($context['send_pm'] ? '[url=' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . ']' . $cleanLatestMember . '[/url]' : $cleanLatestMember),
  734. $modSettings['latestMember'],
  735. $cleanLatestMember
  736. ), $_POST['message']);
  737. $_POST['subject'] = str_replace($variables,
  738. array(
  739. $scripturl,
  740. timeformat(forum_time(), false),
  741. $modSettings['latestRealName'],
  742. $modSettings['latestMember'],
  743. $modSettings['latestRealName']
  744. ), $_POST['subject']);
  745. $from_member = array(
  746. '{$member.email}',
  747. '{$member.link}',
  748. '{$member.id}',
  749. '{$member.name}'
  750. );
  751. // If we still have emails, do them first!
  752. $i = 0;
  753. foreach ($context['recipients']['emails'] as $k => $email)
  754. {
  755. // Done as many as we can?
  756. if ($i >= $num_at_once)
  757. break;
  758. // Don't sent it twice!
  759. unset($context['recipients']['emails'][$k]);
  760. // Dammit - can't PM emails!
  761. if ($context['send_pm'])
  762. continue;
  763. $to_member = array(
  764. $email,
  765. !empty($_POST['send_html']) ? '<a href="mailto:' . $email . '">' . $email . '</a>' : $email,
  766. '??',
  767. $email
  768. );
  769. sendmail($email, str_replace($from_member, $to_member, $_POST['subject']), str_replace($from_member, $to_member, $_POST['message']), null, null, !empty($_POST['send_html']), 5);
  770. // Done another...
  771. $i++;
  772. }
  773. // Got some more to send this batch?
  774. $last_id_member = 0;
  775. if ($i < $num_at_once)
  776. {
  777. // Need to build quite a query!
  778. $sendQuery = '(';
  779. $sendParams = array();
  780. if (!empty($context['recipients']['groups']))
  781. {
  782. // Take the long route...
  783. $queryBuild = array();
  784. foreach ($context['recipients']['groups'] as $group)
  785. {
  786. $sendParams['group_' . $group] = $group;
  787. $queryBuild[] = 'mem.id_group = {int:group_' . $group . '}';
  788. if (!empty($group))
  789. {
  790. $queryBuild[] = 'FIND_IN_SET({int:group_' . $group . '}, mem.additional_groups) != 0';
  791. $queryBuild[] = 'mem.id_post_group = {int:group_' . $group . '}';
  792. }
  793. }
  794. if (!empty($queryBuild))
  795. $sendQuery .= implode(' OR ', $queryBuild);
  796. }
  797. if (!empty($context['recipients']['members']))
  798. {
  799. $sendQuery .= ($sendQuery == '(' ? '' : ' OR ') . 'mem.id_member IN ({array_int:members})';
  800. $sendParams['members'] = $context['recipients']['members'];
  801. }
  802. $sendQuery .= ')';
  803. // If we've not got a query then we must be done!
  804. if ($sendQuery == '()')
  805. redirectexit('action=admin');
  806. // Anything to exclude?
  807. if (!empty($context['recipients']['exclude_groups']) && in_array(0, $context['recipients']['exclude_groups']))
  808. $sendQuery .= ' AND mem.id_group != {int:regular_group}';
  809. if (!empty($context['recipients']['exclude_members']))
  810. {
  811. $sendQuery .= ' AND mem.id_member NOT IN ({array_int:exclude_members})';
  812. $sendParams['exclude_members'] = $context['recipients']['exclude_members'];
  813. }
  814. // Force them to have it?
  815. if (empty($context['email_force']))
  816. $sendQuery .= ' AND mem.notify_announcements = {int:notify_announcements}';
  817. // Get the smelly people - note we respect the id_member range as it gives us a quicker query.
  818. $result = $smcFunc['db_query']('', '
  819. SELECT mem.id_member, mem.email_address, mem.real_name, mem.id_group, mem.additional_groups, mem.id_post_group
  820. FROM {db_prefix}members AS mem
  821. WHERE mem.id_member > {int:min_id_member}
  822. AND mem.id_member < {int:max_id_member}
  823. AND ' . $sendQuery . '
  824. AND mem.is_activated = {int:is_activated}
  825. ORDER BY mem.id_member ASC
  826. LIMIT {int:atonce}',
  827. array_merge($sendParams, array(
  828. 'min_id_member' => $context['start'],
  829. 'max_id_member' => $context['start'] + $num_at_once - $i,
  830. 'atonce' => $num_at_once - $i,
  831. 'regular_group' => 0,
  832. 'notify_announcements' => 1,
  833. 'is_activated' => 1,
  834. ))
  835. );
  836. while ($row = $smcFunc['db_fetch_assoc']($result))
  837. {
  838. $last_id_member = $row['id_member'];
  839. // What groups are we looking at here?
  840. if (empty($row['additional_groups']))
  841. $groups = array($row['id_group'], $row['id_post_group']);
  842. else
  843. $groups = array_merge(
  844. array($row['id_group'], $row['id_post_group']),
  845. explode(',', $row['additional_groups'])
  846. );
  847. // Excluded groups?
  848. if (array_intersect($groups, $context['recipients']['exclude_groups']))
  849. continue;
  850. // We might need this
  851. $cleanMemberName = empty($_POST['send_html']) || $context['send_pm'] ? un_htmlspecialchars($row['real_name']) : $row['real_name'];
  852. // Replace the member-dependant variables
  853. $message = str_replace($from_member,
  854. array(
  855. $row['email_address'],
  856. !empty($_POST['send_html']) ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $cleanMemberName . '</a>' : ($context['send_pm'] ? '[url=' . $scripturl . '?action=profile;u=' . $row['id_member'] . ']' . $cleanMemberName . '[/url]' : $cleanMemberName),
  857. $row['id_member'],
  858. $cleanMemberName,
  859. ), $_POST['message']);
  860. $subject = str_replace($from_member,
  861. array(
  862. $row['email_address'],
  863. $row['real_name'],
  864. $row['id_member'],
  865. $row['real_name'],
  866. ), $_POST['subject']);
  867. // Send the actual email - or a PM!
  868. if (!$context['send_pm'])
  869. sendmail($row['email_address'], $subject, $message, null, null, !empty($_POST['send_html']), 5);
  870. else
  871. sendpm(array('to' => array($row['id_member']), 'bcc' => array()), $subject, $message);
  872. }
  873. $smcFunc['db_free_result']($result);
  874. }
  875. // If used our batch assume we still have a member.
  876. if ($i >= $num_at_once)
  877. $last_id_member = $context['start'];
  878. // Or we didn't have one in range?
  879. elseif (empty($last_id_member) && $context['start'] + $num_at_once < $context['max_id_member'])
  880. $last_id_member = $context['start'] + $num_at_once;
  881. // If we have no id_member then we're done.
  882. elseif (empty($last_id_member) && empty($context['recipients']['emails']))
  883. {
  884. // Log this into the admin log.
  885. logAction('newsletter', array(), 'admin');
  886. redirectexit('action=admin');
  887. }
  888. $context['start'] = $last_id_member;
  889. // Working out progress is a black art of sorts.
  890. $percentEmails = $context['total_emails'] == 0 ? 0 : ((count($context['recipients']['emails']) / $context['total_emails']) * ($context['total_emails'] / ($context['total_emails'] + $context['max_id_member'])));
  891. $percentMembers = ($context['start'] / $context['max_id_member']) * ($context['max_id_member'] / ($context['total_emails'] + $context['max_id_member']));
  892. $context['percentage_done'] = round(($percentEmails + $percentMembers) * 100, 2);
  893. $context['page_title'] = $txt['admin_newsletters'];
  894. $context['sub_template'] = 'email_members_send';
  895. }
  896. /**
  897. * Set general news and newsletter settings and permissions.
  898. * Called by ?action=admin;area=news;sa=settings.
  899. * Requires the forum_admin permission.
  900. *
  901. * @uses ManageNews template, news_settings sub-template.
  902. * @param bool $return_config = false
  903. */
  904. function ModifyNewsSettings($return_config = false)
  905. {
  906. global $context, $sourcedir, $modSettings, $txt, $scripturl;
  907. $config_vars = array(
  908. array('title', 'settings'),
  909. // Inline permissions.
  910. array('permissions', 'edit_news', 'help' => ''),
  911. array('permissions', 'send_mail'),
  912. '',
  913. // Just the remaining settings.
  914. array('check', 'xmlnews_enable', 'onclick' => 'document.getElementById(\'xmlnews_maxlen\').disabled = !this.checked;'),
  915. array('text', 'xmlnews_maxlen', 'subtext' => $txt['xmlnews_maxlen_note'], 10),
  916. array('text', 'rss_limit', 'subtext' => $txt['rss_limit_note'], 10),
  917. );
  918. call_integration_hook('integrate_modify_news_settings', array(&$config_vars));
  919. if ($return_config)
  920. return $config_vars;
  921. $context['page_title'] = $txt['admin_edit_news'] . ' - ' . $txt['settings'];
  922. $context['sub_template'] = 'show_settings';
  923. // Needed for the settings template.
  924. require_once($sourcedir . '/ManageServer.php');
  925. // Wrap it all up nice and warm...
  926. $context['post_url'] = $scripturl . '?action=admin;area=news;save;sa=settings';
  927. $context['permissions_excluded'] = array(-1);
  928. // Add some javascript at the bottom...
  929. $context['settings_insert_below'] = '
  930. <script type="text/javascript"><!-- // --><![CDATA[
  931. document.getElementById("xmlnews_maxlen").disabled = !document.getElementById("xmlnews_enable").checked;
  932. // ]]></script>';
  933. // Saving the settings?
  934. if (isset($_GET['save']))
  935. {
  936. checkSession();
  937. call_integration_hook('integrate_save_news_settings');
  938. saveDBSettings($config_vars);
  939. redirectexit('action=admin;area=news;sa=settings');
  940. }
  941. // We need this for the in-line permissions
  942. createToken('admin-mp');
  943. prepareDBSettingContext($config_vars);
  944. }
  945. ?>