[ Avaa Bypassed ]

<?php
verifyCsrfGetToken();

# generate text content
$msgid = sprintf('%d',$_GET['id']);
$messagedata = loadMessageData($msgid);

//sleep(10); // to test the busy image

if (preg_match('/\[URL:(.+)\]/',$messagedata['message'],$regs)) {
  $content = fetchUrl($regs[1]);
#  $textversion = 'Fetched '.$regs[1];
  $textversion = HTML2Text($content);
} else {
  $textversion = HTML2Text($messagedata['message']);
}
setMessageData($msgid,'textmessage',$textversion);

## convert to feedback in the textarea
## @@FIXME this fails when the text is large, or contains £
$textversion = trim($textversion);
$textversion = preg_replace("/\n/","\\n",$textversion);
$textversion = preg_replace("/\r/","",$textversion);
$textversion = htmlentities($textversion,ENT_IGNORE,'UTF-8',true);

$status =  '<script type="text/javascript">

$("#textmessage").html("'.str_replace('"','&quot;',$textversion).'");
//$("#textmessage").load("./?page=pageaction&action=messagedata&field=textmessage&id='.$msgid.'");
$("#generatetextversion").hide();

</script>
';