sql_query("SELECT * FROM ".UN_TABLENAME_USERS." WHERE user_id='".$cookie[0]."'");
$row = $db->sql_fetchrow($result);
$db->sql_freeresult($result);
if ($row['name'] != "") {
$sender_name = $row['name'];
} else {
$sender_name = $row['username'];
}
$sender_email = $row['user_email'];
} elseif ($opis != "dsbw") {
$sender_email = "";
}
// name, username, user_email
title("BLASSENweb ");
# END - COPYRIGHT LINES ENDS HERE - THANKS!
OpenTable();
require_once("modules/BW_Mailing/includes/config.php");
if (file_exists("modules/$module_name/copyright.php")) {
echo ""._BW_COPY." "._discopy." "._BW_YOUR_IP.": $ip
"._discopy." ";
CloseTable();
if (is_admin($admin)) {
echo ""._BW_ADMIN." "._BW_SHOW." "._BW_SECURITY_SURVEY." "._BW_IMPOSSIBLE_ADDRESS." "._BW_ENTERNAME." "._BW_ENTEREMAIL." "._BW_ENTERINVALIDEMAIL." "._BW_ENTERMESSAGE." "._BW_SECCODEERROR." "._BW_PLAY.": "._BW_SENDERNAME.": ".un_htmlspecialchars($b_l_e).""._BW_SENDEREMAIL.": $sender_email"._BW_SUBJECT.": ".un_htmlspecialchars($b_l_a).""._BW_MESSAGE.": Jméno: $b_l_e Datum: ".$cas." Ip adresa: ".$ip." Název stroje: ".$hostnm."
"._BW_ERROR1." ');
$subject = "".un_htmlspecialchars($b_l_a)." ($sitename)";
$from = "$sender_name <$sender_email>";
$teext = ""._BW_SENTPAGE.": $nukeurl - $module_name \n"._BW_URL.": " . $_SERVER['HTTP_REFERER'] . "\r\n"._BW_SUB3.""._BW_SENDERNAME.": $sender_name\n"._BW_SENDEREMAIL.": $sender_email\n"._BW_1.""._BW_2.""._BW_3.""._BW_4.""._BW_5.""._BW_6.""._BW_IP.": $ip - $hostnm\n\n"._BW_MESSAGE.":\n $mess\n\n";
while (list($name, $value) = each($_POST)) {
if ($name == 'MAX_FILE_SIZE' || $name == 'charset' || $name == 'submitter') {
}
elseif (gettype($value) == 'array') {
$cnt = count($value);
for ($i=0; $i < $cnt; $i++) {
$message .= "$name: $value[$i]r\\n";
}
}
else {
$message .= "$name: $value\r\n";
}
}
$valid = 1;
$file_size = $_FILES['fileatt']['size'];
$file_name = $_FILES['fileatt']['name'];
$file_type = $_FILES['fileatt']['type'];
if ($file_size > 0) $att_present = true;
$messageX .= ""._BW_SENTPAGE.": $nukeurl - $module_name \n"._BW_URL.": " . $_SERVER['HTTP_REFERER'] . "\r\n"._BW_SUB3.""._BW_SENDERNAME.": $sender_name\n"._BW_SENDEREMAIL.": $sender_email\n"._BW_1.""._BW_2.""._BW_3.""._BW_4.""._BW_5.""._BW_6.""._BW_IP.": $ip - $hostnm\n\n"._BW_MESSAGE.":\n $mess\n\n~~~~~~~~~~~~~~~~~~~~~~~~~~\n"._BW_MAXATT.": $file_size "._BW_BYTES."\r\n\n";
if($att_present) {
if($file_size > $max_att) {
$valid = 0;
$err_msg .= ""._BW_BIGMAX." ".CoolSize($filesize)."";//$max_att
}
if (
$file_type != 'text/plain' // TXT
&& $file_type != 'text/html' // HTM
&& $file_type != 'text/html' // HTML
&& $file_type != 'image/gif' // GIF
&& $file_type != 'image/x-jpeg' // JPG JPEG
&& $file_type != 'image/jpeg' // JPG JPEG
&& $file_type != 'image/pjpeg' // JPG JPEG
&& $file_type != 'image/png' // PNG
&& $file_type != 'image/x-png' // PNG
&& $file_type != 'image/bmp' // BMP
&& $file_type != 'image/x-icon' // ICO
&& $file_type != 'application/msword' // DOC
&& $file_type != 'application/excel' // XLS
&& $file_type != 'application/rtf' // RTF
&& $file_type != 'application/octet-stream' // DOC
&& $file_type != 'application/x-zip-compressed' // ZIP
&& $file_type != 'application/pdf' // PDF
) {
$valid = 0;
$err_msg .= "
"._BW_NOFILETYPE.": $file_type";
}
$dots = substr_count($file_name,'.');
if($dots != 1) {
$valid = 0;
$err_msg .= "
"._BW_MAXEXT.": $dots";
}
$extension = strtolower(strstr($file_name,'.'));
if (
$extension != ".txt"
&& $extension != ".htm"
&& $extension != ".html"
&& $extension != ".gif"
&& $extension != ".jpg"
&& $extension != ".jpeg"
&& $extension != ".png"
&& $extension != ".bmp"
&& $extension != ".ico"
&& $extension != ".doc"
&& $extension != ".xls"
&& $extension != ".rtf"
&& $extension != ".zip"
&& $extension != ".pdf"
) {
$valid = 0;
$err_msg .= "
"._BW_NOEXT.": $extension";
}
$p = strlen($extension);
if($p != 4 && $p != 5) {
$valid = 0;
$err_msg .= "
"._BW_LONGEXT.": $p ";
}
if($valid == 1){
$fileatt = $_FILES['fileatt']['tmp_name'];
$headers = "From: $from";
if(is_uploaded_file($fileatt)) {
$file = fopen($fileatt,'rb');
$data = fread($file,filesize($fileatt));
fclose($file);
$semi_rand = md5(time());
$mime_boundary = "==Multipart_Boundary_x{$semi_rand}x";
$headers .= "\nMIME-Version: 1.0\n" .
"Content-Type: multipart/mixed;\n" .
" boundary=\"{$mime_boundary}\"";
$message = "This is a multi-part message in MIME format.\n\n" .
"--{$mime_boundary}\n" .
"Content-Type: text/plain; charset=$chrset\n" .
"Content-Transfer-Encoding: 7bit\n\n" .
$messageX ."\n\n";
$data = chunk_split(base64_encode($data));
$message .= "--{$mime_boundary}\n" .
"Content-Type: {$file_type};\n" .
" name=\"{$file_name}\"\n" .
"Content-Transfer-Encoding: base64\n\n" .
$data . "\n\n" .
"--{$mime_boundary}--\n";
}
$message = StripSlashes($message);
$sent = @mail($to, $subject, $message, $headers);
/***/
if($mailuser == 1){
mail($sender_email,$subjectuser,$messageuser,"From: $adminmail\nX-Mailer: PHP/" . phpversion());
}
/***/
if($sent) { echo "
"._BW_MAILSENT." "._BW_PLAYER."
";
header("Refresh: 10; url=".$nukeurl."/modules.php?name=".$module_name);
} else { echo ""._BW_ERROR3." "._BW_ERROR2." $err_msg";
echo ""._BW_CLICK."
"._BW_MAILSENT." "._BW_PLAYER."
";
header("Refresh: 10; url=".$nukeurl."/modules.php?name=".$module_name);
} else { echo ""._BW_ERROR3." "._BW_ERROR2."