[ Avaa Bypassed ]

<?php
// print '<p>'.$GLOBALS['I18N']->get('Select Message to view').'</p>';
verifyCsrfGetToken();

if (isset($_GET['id'])) {
    $id = sprintf('%d', $_GET['id']);
} else {
    $id = 0;
}

$start = 0;
$limit = ' limit 10';
if (isset($_GET['start'])) {
    $start = sprintf('%d', $_GET['start']);
    $limit = ' limit '.$start.', 10';
}

$status = '';
$access = accessLevel('statsoverview');
$ownership = '';
$subselect = '';
$paging = '';

//print "Access Level: $access";
switch ($access) {
    case 'owner':
        $ownership = sprintf(' and owner = %d ', $_SESSION['logindetails']['id']);
        if ($id) {
            $allow = Sql_Fetch_Row_query(sprintf('select owner from %s where id = %d %s', $GLOBALS['tables']['message'],
                $id, $ownership));
            if ($allow[0] != $_SESSION['logindetails']['id']) {
                $status .= $GLOBALS['I18N']->get('You do not have access to this page');

                return;
            }
        }
        $addcomparison = 1;
        break;
    case 'all':
        break;
    case 'none':
    default:
        $ownership = ' and msg.id = 0';
        $status .= $GLOBALS['I18N']->get('You do not have access to this page');

        return;
        break;
}

$download = !empty($_GET['dl']);
if ($download) {
    ob_end_clean();
//  header("Content-type: text/plain");
    header('Content-type: text/csv');
    if (!$id) {
        header('Content-disposition:  attachment; filename="phpList Campaign statistics.csv"');
    }
    ob_start();
}

if (empty($start)) {
    $status .= '<div class="actions">'.PageLinkButton('pageaction&action=statsoverview&dl=true',
            $GLOBALS['I18N']->get('Download as CSV file')).'</div>';
}
if (!empty($_SESSION['LoadDelay'])) {
    sleep($_SESSION['LoadDelay']);
}
$timerange = ' and msg.entered > date_sub(now(),interval 12 month)';
$timerange = '';

$query = sprintf('select msg.owner,msg.id as messageid,  
    subject,date_format(sent,"%%e %%b %%Y") as sent,
    bouncecount as bounced from %s msg where msg.status = "sent" %s %s %s
    group by msg.id order by msg.entered desc',
    $GLOBALS['tables']['message'], $subselect, $timerange, $ownership);
$req = Sql_Query($query);
$total = Sql_Num_Rows($req);
if ($total > 10) {
    //print Paging(PageUrl2('statsoverview'),$start,$total,10);
    $paging = simplePaging('statsoverview', $start, $total, 10);
    if ($download) {
        $limit = ' limit 25';
    }

    $query .= $limit;
    $req = Sql_Query($query);
}

if (!Sql_Affected_Rows()) {
    $status .= '<p class="information">'.$GLOBALS['I18N']->get('There are currently no campaigns to view').'</p>';
}

$ls = new WebblerListing('');
$ls->usePanel($paging);
while ($row = Sql_Fetch_Array($req)) {
    //  $element = '<!--'.$row['messageid'].'-->'.shortenTextDisplay($row['subject'],30);
    $messagedata = loadMessageData($row['messageid']);
    if ($messagedata['subject'] != $messagedata['campaigntitle']) {
        $element = '<!--'.$row['messageid'].'-->'.stripslashes($messagedata['campaigntitle']).'<br/><strong>'.shortenTextDisplay($messagedata['subject'],
                30).'</strong>';
    } else {
        $element = '<!--'.$row['messageid'].'-->'.shortenTextDisplay($messagedata['subject'], 30);
    }

    $fwded = Sql_Fetch_Row_Query(sprintf('select count(id) from %s where message = %d',
        $GLOBALS['tables']['user_message_forward'], $row['messageid']));
    $views = Sql_Fetch_Row_Query(sprintf('select count(viewed) from %s where messageid = %d 
	       and status = "sent"',
        $GLOBALS['tables']['usermessage'], $row['messageid']));
    $totls = Sql_Fetch_Row_Query(sprintf('select count(status) from %s where messageid = %d 
	       and status = "sent"',
        $GLOBALS['tables']['usermessage'], $row['messageid']));

    $ls->addElement($element,
        PageURL2('statsoverview&amp;id='.$row['messageid'])); //,PageURL2('message&amp;id='.$row['messageid']));
    $ls->setElementHeading($GLOBALS['I18N']->get('Campaign'));
    $ls->setClass($element, 'row1');
    //   $ls->addColumn($element,$GLOBALS['I18N']->get('owner'),$row['owner']);
    $ls->addColumn($element, $GLOBALS['I18N']->get('sent'), $totls[0]);
    $ls->addColumn($element, $GLOBALS['I18N']->get('bncs'), $row['bounced']);
    $ls->addColumn($element, $GLOBALS['I18N']->get('fwds'), sprintf('%d', $fwded[0]));
    $ls->addColumn($element, $GLOBALS['I18N']->get('views'), $views[0],
        $views[0] ? PageURL2('mviews&amp;id='.$row['messageid']) : '');
    $perc = sprintf('%0.2f', ($views[0] / ($totls[0] - $row['bounced']) * 100));

    $totalclicked = Sql_Fetch_Row_Query(sprintf('select count(distinct userid) from %s where messageid = %d',
        $GLOBALS['tables']['linktrack_uml_click'], $row['messageid']));
    $ls->addColumn($element, $GLOBALS['I18N']->get('clicks'), $totalclicked[0],
        $totalclicked[0] ? PageURL2('mclicks&id='.$row['messageid']) : '');

    $ls->addRow($element, '',
        "<div class='content listingsmall fright gray'>".$GLOBALS['I18N']->get('rate').': '.$perc.' %'.'</div>'.
        "<div class='content listingsmall fright gray'>".$GLOBALS['I18N']->get('date').': '.$row['sent'].'</div>');
}
//# needs reviewing
if (false && $addcomparison) {
    $total = Sql_Fetch_Array_Query(sprintf('select count(entered) as total from %s um where um.status = "sent"',
        $GLOBALS['tables']['usermessage']));
    $viewed = Sql_Fetch_Array_Query(sprintf('select count(viewed) as viewed from %s um where um.status = "sent"',
        $GLOBALS['tables']['usermessage']));
    $overall = $GLOBALS['I18N']->get('Comparison to other admins');
    $ls->addElement($overall);
    $ls->addColumn($overall, $GLOBALS['I18N']->get('views'), $viewed['viewed']);
    $perc = sprintf('%0.2f', ($viewed['viewed'] / $total['total'] * 100));
    $ls->addColumn($overall, $GLOBALS['I18N']->get('rate'), $perc.' %');
}
if ($download) {
    ob_end_clean();
    $status .= $ls->tabDelimited();
}

$status .= $ls->display();