[ Avaa Bypassed ]

<?php

if (!$GLOBALS['commandline']) {
    $id = 0;
    if (!empty($_GET['id'])) {
        $id = sprintf('%d', $_GET['id']);
    }
}

if (!$id) {
    return;
}

if (isset($_POST['sendmethod']) && $_POST['sendmethod'] == 'inputhere') {
    $_POST['sendurl'] = '';
}

if (!empty($_POST['sendurl'])) {
    //# hard overwrite the message content, wipe all that was there.
    //# check there's a protocol
    //# @@@ do we want to allow other than http and https? Can't imagine, ppl would want to use ftp or something

    if ($_POST['sendurl'] == 'e.g. https://www.phplist.com/testcampaign.html') {
        $_POST['sendurl'] = '';
    } else {
        if (!preg_match('/^https?:\/\//i', $_POST['sendurl']) && !preg_match('/testcampaign/i',
                $_POST['sendurl'])
        ) {
            $_POST['sendurl'] = 'http://'.$_POST['sendurl'];
        }

        $_POST['message'] = '[URL:'.$_POST['sendurl'].']';
    }
}

//# checkboxes cannot be detected when unchecked, so they need registering in the "cb" array
//# to be identified as listed, but not checked
//# find the "cb" array and uncheck all checkboxes in it
//# then the processing below will re-check them, if they were
if (isset($_POST['cb']) && is_array($_POST['cb'])) {
    foreach ($_POST['cb'] as $cbname => $cbval) {
        //# $cbval is a dummy
        setMessageData($id, $cbname, '0');
    }
}
//# remember all data entered
foreach ($_POST as $key => $val) { //#17566 - we are only interested in POST data, not all in REQUEST
    /*
      print $key .' '.$val;
    */
    setMessageData($id, $key, $val);
    $messagedata[$key] = $val;
}
unset($GLOBALS['MD']);

$messagedata = loadMessageData($id);

/*
if (!empty($_REQUEST["criteria_attribute"])) {
  include dirname(__FILE__).'/addcriterion.php';
}
*/

/*
print '<hr/>';
var_dump($messagedata);
#exit;
*/

$status = 'OK';