[ Avaa Bypassed ]

<?php

require_once dirname(__FILE__).'/accesscheck.php';

$subselect = $where = '';
$action_result = '';
$access = accessLevel('messages');

$messageSortOptions = array(
  'default' => s('Sort by'),
  'subjectasc' => s('Subject'). ' - '.s('Ascending'),
  'subjectdesc' => s('Subject'). ' - '.s('Descending'),
  'enteredasc' => s('Entered'). ' - '.s('Ascending'),
  'entereddesc' => s('Entered'). ' - '.s('Descending'),
  'embargoasc' => s('Embargo'). ' - '.s('Ascending'),
  'embargodesc' => s('Embargo'). ' - '.s('Descending'),
  'sentasc' => s('Sent'). ' - '.s('Ascending'),
  'sentdesc' => s('Sent'). ' - '.s('Descending'),
);  

if( !$GLOBALS["require_login"] || $_SESSION["logindetails"]['superuser'] || $access == 'all'){
  $ownerselect_and = '';
  $ownerselect_where = '';
} else {
  $ownerselect_where = ' where owner = ' . $_SESSION["logindetails"]['id'];
  $ownerselect_and = ' and owner = ' . $_SESSION["logindetails"]['id'];
}
if (isset($_GET['start'])) {
  $start = sprintf('%d',$_GET['start']);
} else {
  unset($start);
}

if (!isset($_SESSION['messagefilter'])) {
  $_SESSION['messagefilter'] = '';
}
if (!empty($_POST['clear'])) {
  $_SESSION['messagefilter'] = '';
  $_SESSION['messagesortby'] = '';
  $_SESSION['messagenumpp'] = MAX_MSG_PP;
  unset($_POST['filter']);
  unset($_POST['numPP']); 
  unset($_POST['sortBy']);
}
if (isset($_POST['filter'])) {
  $_SESSION['messagefilter'] = removeXSS($_POST['filter']);
  if ($_SESSION['messagefilter'] == ' --- filter --- ') {
    $_SESSION['messagefilter'] = '';
  }
}
if (!isset($_SESSION['messagenumpp'])) {
  $_SESSION['messagenumpp'] = MAX_MSG_PP;
}
if (isset($_POST['numPP'])) {
  $_SESSION['messagenumpp'] = sprintf('%d',$_POST['numPP']);
  if ($_SESSION['messagenumpp'] <= 0) {
    $_SESSION['messagenumpp'] = MAX_MSG_PP;
  }
}
# remember last one listed
if (!isset($_GET["tab"]) && !empty($_SESSION["lastmessagetype"])) {
  $_GET["tab"] = $_SESSION["lastmessagetype"];
} elseif (isset($_GET["tab"])) {
  $_SESSION["lastmessagetype"] = $_GET["tab"];
}

if (!isset($_SESSION['messagesortby'])) {
  $_SESSION['messagesortby'] = '';
}
if (isset($_POST['sortBy'])) {
  if (in_array($_POST['sortBy'],array_keys($messageSortOptions))) {
    $_SESSION['messagesortby'] = $_POST['sortBy'];
  }
}

print '<div class="actions"><div class="fright">';
print PageLinkActionButton('send&amp;new=1',$GLOBALS['I18N']->get('Start a new campaign'));
print '</div><div class="clear"></div></div>';

### Print tabs
$tabs = new WebblerTabs();
$tabs->addTab($GLOBALS['I18N']->get("sent"),PageUrl2("messages&amp;tab=sent"),'sent');
$tabs->addTab($GLOBALS['I18N']->get("active"),PageUrl2("messages&amp;tab=active"),'active');
$tabs->addTab($GLOBALS['I18N']->get("draft"),PageUrl2("messages&amp;tab=draft"),'draft');
#$tabs->addTab($GLOBALS['I18N']->get("queued"),PageUrl2("messages&amp;tab=queued"));#
if (USE_PREPARE) {
  $tabs->addTab($GLOBALS['I18N']->get("static"),PageUrl2("messages&amp;tab=static"),'static');
}
//obsolete, moved to rssmanager plugin
#if (ENABLE_RSS) {
#  $tabs->addTab("rss",PageUrl2("messages&amp;tab=rss"));
#}
if (!empty($_GET['tab'])) {
  $tabs->setCurrent($_GET["tab"]);
} else {
  $_GET['tab'] = 'sent';
  $tabs->setCurrent('sent');
}

print '<div class="minitabs">';
print $tabs->display();
print '</div>';

$filterDisplay = $_SESSION['messagefilter'];
if ($filterDisplay == '') {
  $filterDisplay = ' --- filter --- ';
}
print '<div id="messagefilter" class="filterdiv fright">';
print formStart(' id="messagefilterform" ');
print '<div><input type="text" name="filter" value="'.htmlspecialchars($filterDisplay).'" id="filtertext" />';

print '<select name="numPP" class="numppOptions">';
foreach (array(5,10,15,20,50,100) as $numppOption) {
  if ($numppOption == $_SESSION['messagenumpp']) {
    print '<option selected="selected">'. $numppOption. '</option>';
  } else {
    print '<option>'. $numppOption. '</option>';
  }
}
print '</select>';
print '<select name="sortBy" class="sortby">';
foreach ($messageSortOptions as $sortOption => $sortOptionLabel) {
  if ($sortOption == $_SESSION['messagesortby']) {
    print '<option selected="selected" value="'.$sortOption.'">'. $sortOptionLabel. '</option>';
  } else {
    print '<option value="'.$sortOption.'">'. $sortOptionLabel. '</option>';
  }
}
print '</select>';
print '<button type="submit" name="go" id="filterbutton" >'.s('Go').'</button> <button type="submit" name="clear" id="filterclearbutton" value="1">'.s('Clear').'</button></div>';
print '</form></div>';

### Process 'Action' requests
if (!empty($_GET["delete"])) {
  verifyCsrfGetToken();
  $todelete = array();
  if ($_GET["delete"] == "draft") {
    $req = Sql_Query(sprintf('select id from %s where status = "draft" and (subject = "" or subject = "(no subject)") %s',$GLOBALS['tables']["message"],$ownerselect_and));
    while ($row = Sql_Fetch_Row($req)) {
      array_push($todelete,$row[0]);
    }
  } else {
    array_push($todelete,sprintf('%d',$_GET["delete"]));
  }
  foreach ($todelete as $delete) {
    $action_result .= $GLOBALS['I18N']->get("Deleting")." $delete ...";
    $del = deleteMessage($delete);
    if ($del)
      $action_result .= "... ".$GLOBALS['I18N']->get("Done");
    else
      $action_result .= "... ".$GLOBALS['I18N']->get("failed");
    $action_result .= '<br/>';
  }
  $action_result .= "<hr /><br />\n";
}

if (isset($_GET['resend'])) {
  verifyCsrfGetToken();
  $resend = sprintf('%d',$_GET['resend']);
  # requeue the message in $resend
  $action_result .=  $GLOBALS['I18N']->get("Requeuing")." $resend ..";
  $result = Sql_Query("update ${tables['message']} set status = 'submitted', sendstart = null where id = $resend");
  $suc6 = Sql_Affected_Rows();
  # only send it again to users, if we are testing, otherwise only to new users
  if (TEST) {
    $result = Sql_query("delete from ${tables['usermessage']} where messageid = $resend");
  }
  if ($suc6) {
    $action_result .=  "... ".$GLOBALS['I18N']->get("Done");
    foreach ($GLOBALS['plugins'] as $pluginname => $plugin) {
      $plugin->messageReQueued($resend);
    }
    Sql_Query(sprintf('delete from %s where id = %d and (name = "start_notified" or name = "end_notified")',$tables['messagedata'],$resend));
    $messagedata = loadMessageData($resend);
    $finishSending = mktime($messagedata['finishsending']['hour'],$messagedata['finishsending']['minute'],0,
      $messagedata['finishsending']['month'],$messagedata['finishsending']['day'],$messagedata['finishsending']['year']);
    if ($finishSending < time()) {
      $action_result .= '<br />'.s('This campaign is scheduled to stop sending in the past. No mails will be sent.');
      $action_result .= '<br />'.PageLinkButton('send&amp;id='.$messagedata['id'].'&amp;tab=Scheduling',s('Review Scheduling'));
    }
    if (getConfig('pqchoice') == 'phplistdotcom') {
      $action_result .= activateRemoteQueue();
    }
    
  } else {
    $action_result .=  "... ".$GLOBALS['I18N']->get("failed");
  }
  $action_result .=  '<br />';
}

if (isset($_GET['suspend'])) {
  verifyCsrfGetToken();
  $suspend = sprintf('%d',$_GET['suspend']);
  $action_result .=  $GLOBALS['I18N']->get('Suspending')." $suspend ..";
  $result = Sql_query(sprintf('update %s set status = "suspended" where id = %d and (status = "inprocess" or status = "submitted") %s',$tables["message"],$suspend,$ownerselect_and));
  $suc6 = Sql_Affected_Rows();
  if ($suc6)
    $action_result .=  "... ".$GLOBALS['I18N']->get("Done");
  else
    $action_result .=  "... ".$GLOBALS['I18N']->get("failed");
  $action_result .= '<br /><hr /><br />';
}
#0012081: Add new 'Mark as sent' button
if (isset($_GET['markSent'])) {
  verifyCsrfGetToken();
  $markSent = sprintf('%d',$_GET['markSent']);
  $action_result .=  $GLOBALS['I18N']->get('Marking as sent ')." $markSent ..";
  $result = Sql_query(sprintf('update %s set status = "sent" where id = %d and (status = "suspended") %s',$tables["message"],$markSent,$ownerselect_and));
  $suc6 = Sql_Affected_Rows();
  if ($suc6)
    $action_result .=  "... ".$GLOBALS['I18N']->get("Done");
  else
    $action_result .=  "... ".$GLOBALS['I18N']->get("Failed");
  $action_result .=  '<br /><hr /><br />';
}

if (isset($_GET['action'])) {
  verifyCsrfGetToken();
  switch ($_GET['action']) {
    case 'suspall':
      $action_result .=  $GLOBALS['I18N']->get('Suspending all')." ..";
      $result = Sql_query(sprintf('update %s set status = "suspended" where (status = "inprocess" or status = "submitted") %s',$tables["message"],$ownerselect_and));
      $suc6 = Sql_Affected_Rows();
      if ($suc6)
        $action_result .=  "... $suc6 ".$GLOBALS['I18N']->get("Done");
      else
        $action_result .=  "... ".$GLOBALS['I18N']->get("Failed");
      $action_result .= '<br /><hr /><br />';
      break;
    case 'markallsent':
      $action_result .=  $GLOBALS['I18N']->get('Marking all as sent ')."  ..";
      $result = Sql_query(sprintf('update %s set status = "sent" where (status = "suspended") %s',$tables["message"],$markSent,$ownerselect_and));
      $suc6 = Sql_Affected_Rows();
      if ($suc6)
        $action_result .=  "... $suc6 ".$GLOBALS['I18N']->get("Done");
      else
        $action_result .=  "... ".$GLOBALS['I18N']->get("Failed");
      $action_result .=  '<br /><hr /><br />';
      break;
  }
}

  if (!empty($action_result)) {
    #print ActionResult($action_result);
    $_SESSION['action_result'] = $action_result;
    Redirect('messages');
    exit;
  }

$cond = array();
### Switch tab
switch ($_GET["tab"]) {
  case "queued":
#    $subselect = ' status in ("submitted") and (rsstemplate is NULL or rsstemplate = "") ';
    $cond[] = " status in ('submitted', 'suspended') ";
    $url_keep = '&amp;tab=queued';
    break;
  case "static":
    $cond[] = " status in ('prepared') ";
    $url_keep = '&amp;tab=static';
    break;
#  case "rss":
#    $subselect = ' rsstemplate != ""';
#    $url_keep = '&amp;tab=sent';
#    break;
  case "draft":
    $cond[] = " status in ('draft') ";
    $url_keep = '&amp;tab=draft';
    break;
  case "active":
    $cond[] = " status in ('inprocess','submitted', 'suspended') ";
    $url_keep = '&amp;tab=active';
    break;
  case "sent":
  default:
    $cond[] = " status in ('sent') ";
    $url_keep = '&amp;tab=sent';
    break;
}

if (!empty($_SESSION['messagefilter'])) {
  $cond[] = ' subject like "%'.sql_escape($_SESSION['messagefilter']).'%" ';
}

### Query messages from db
if ($GLOBALS['require_login'] && !$_SESSION['logindetails']['superuser'] || $access != 'all') {
  $cond[] = ' owner = ' . $_SESSION['logindetails']['id'];
}
$where = ' where ' . join(' and ', $cond);

$sortBySql = 'order by entered desc';
switch ($_SESSION['messagesortby']) {
  case 'sentasc': $sortBySql = 'order by sent asc'; break;
  case 'sentdesc': $sortBySql = 'order by sent desc'; break;
  case 'subjectasc': $sortBySql = 'order by subject asc'; break;
  case 'subjectdesc': $sortBySql = 'order by subject desc'; break;
  case 'enteredasc': $sortBySql = 'order by entered asc'; break;
  case 'entereddesc': $sortBySql = 'order by entered desc'; break;
  case 'embargoasc': $sortBySql = 'order by embargo asc'; break;
  case 'embargodesc': $sortBySql = 'order by embargo desc'; break;
  default: 
    $sortBySql = 'order by embargo desc, entered desc';
}

$req = Sql_query('select count(*) from ' . $tables['message']. $where .' '.$sortBySql);
$total_req = Sql_Fetch_Row($req);
$total = $total_req[0];

## Browse buttons table
$limit = $_SESSION['messagenumpp'];
$offset = 0;
if (isset($start) && $start > 0) {
  $offset = $start;
} else {
  $start = 0;
}

$paging = '';
if ($total > $_SESSION['messagenumpp']) {
  $paging = simplePaging("messages$url_keep",$start,$total,$_SESSION['messagenumpp'],$GLOBALS['I18N']->get("Campaigns"));
}
  
$ls = new WebblerListing(s('Campaigns'));
$ls->usePanel($paging);

## messages table
if ($total) {
  $result = Sql_query("SELECT * FROM ".$tables["message"]." $where $sortBySql limit $limit offset $offset");
  while ($msg = Sql_fetch_array($result)) {
    $editlink = '';
    $listingelement = '<!--'.$msg['id'].'-->'.stripslashes($msg["subject"]);
    if ($msg['status'] == 'draft') {
      $editlink = PageUrl2("send&id=".$msg["id"]);
    }
    
    $ls->addElement($listingelement,$editlink);
    $ls->setClass($listingelement,'row1');
    $uniqueviews = Sql_Fetch_Row_Query("select count(userid) from {$tables["usermessage"]} where viewed is not null and status = 'sent' and messageid = ".$msg["id"]);

    $clicks = Sql_Fetch_Row_Query("select sum(clicked) from {$tables["linktrack_ml"]} where messageid = ".$msg["id"]);
#    $clicks = array(0);

    $messagedata = loadMessageData($msg['id']);

/*
    foreach ($messagedata as $key => $val) {
      $ls->addColumn($listingelement,$key,$val);
    }
    
*/
    $ls->addColumn($listingelement,$GLOBALS['I18N']->get("Entered"), formatDateTime($msg["entered"]));

    $_GET['id'] = $msg['id'];
    $statusdiv = '<div id="messagestatus'.$msg['id'].'">';
    include 'actions/msgstatus.php';
    $statusdiv .= $status;
    $statusdiv .= '</div>';
    $GLOBALS['pagefooter']['statusupdate'.$msg['id']] = '<script type="text/javascript">
      updateMessages.push('.$msg['id'].');</script>';
    $GLOBALS['pagefooter']['statusupdate'] = '<script type="text/javascript">window.setInterval("messagesStatusUpdate()",5000);</script>';
    if ($msg['status'] == 'sent') {
      $statusdiv = $GLOBALS['I18N']->get("Sent").": ".$msg['sent'];
    }
    $ls->addColumn($listingelement,$GLOBALS['I18N']->get("Status"),$statusdiv);

    if ($msg['status'] != 'draft') {
#    $ls->addColumn($listingelement,$GLOBALS['I18N']->get("total"), $msg['astext'] + $msg['ashtml'] + $msg['astextandhtml'] + $msg['aspdf'] + $msg['astextandpdf']);
#    $ls->addColumn($listingelement,$GLOBALS['I18N']->get("text"), $msg['astext']);
#    $ls->addColumn($listingelement,$GLOBALS['I18N']->get("html"), $msg["ashtml"] + $msg["astextandhtml"]);
#    if (!empty($msg['aspdf'])) {
#      $ls->addColumn($listingelement,$GLOBALS['I18N']->get("PDF"), $msg['aspdf']);
#    }
#    if (!empty($msg["astextandpdf"])) {
#      $ls->addColumn($listingelement,$GLOBALS['I18N']->get("both"), $msg["astextandpdf"]);
#    }
      $resultStats = '<table class="messagesendstats">
      <tr><td>'.s('Viewed').'</td><td>'.$msg['viewed'].'</td></tr>
      <tr><td>'.s('Unique Views').'</td><td>'.$uniqueviews[0].'</td></tr>';
      if ($clicks[0]) {
        $resultStats .= '
           <tr><td>'.s('Clicks').'</td><td>'.$clicks[0].'</td></tr>';
      }
      $resultStats .= '
         <tr><td>'.s('Bounced').'</td><td>'.$msg['bouncecount'].'</td></tr>';
      $resultStats .= '</table>';
      
//      $ls->addColumn($listingelement,s('Results'),$resultStats);


      //$ls->addColumn($listingelement,$GLOBALS['I18N']->get("Viewed"), $msg["viewed"]);
      //$ls->addColumn($listingelement,$GLOBALS['I18N']->get("Unique Views"), $uniqueviews[0]);
      //if ($clicks[0]) {
        //$ls->addColumn($listingelement,$GLOBALS['I18N']->get("Clicks"), $clicks[0]);
      //}
      //$ls->addColumn($listingelement,$GLOBALS['I18N']->get("Bounced"), $msg["bouncecount"]);
    } 

    if ($msg['status'] == 'sent') {
      $timetosend = $GLOBALS['I18N']->get("Time to send").': '.timeDiff($msg["sendstart"],$msg["sent"]);
    } else {
      $timetosend = '';
    }

    $colspan = 3;
    if (!empty($msg['aspdf'])) $colspan++;
    if (!empty($msg['astextandpdf'])) $colspan++;
    $clicksrow = $bouncedrow = '';

    //if ($clicks[0]) {
      //$clicksrow = sprintf('<tr><td colspan="%d">%s</td><td>%d</td></tr>',
        //$colspan-1,$GLOBALS['I18N']->get("Clicks"),$clicks[0]);
    //}
    //if ($msg["bouncecount"]) {
      //$bouncedrow = sprintf('<tr><td colspan="%d">%s</td><td>%d</td></tr>',
        //$colspan-1,$GLOBALS['I18N']->get("Bounced"),$msg["bouncecount"]);
    //}
    
    $sendstats =
      sprintf('<table class="messagesendstats">
      %s
      <tr><td>'.$GLOBALS['I18N']->get("total").'</td><td>'.$GLOBALS['I18N']->get("text").'</td><td>'.$GLOBALS['I18N']->get("html").'</td>
        %s%s
      </tr>
      <tr><td><b>%d</b></td><td><b>%d</b></td><td><b>%d</b></td>
        %s %s %s %s
      </tr>
      </table>',
      !empty($timetosend) ? '<tr><td colspan="'.$colspan.'">'.$timetosend.'</td></tr>' : '',
      !empty($msg['aspdf']) ? '<td>'.$GLOBALS['I18N']->get("PDF").'</td>':'',
      !empty($msg['astextandpdf']) ? '<td>'.$GLOBALS['I18N']->get("both").'</td>':'',
      $msg['astext'] + $msg['ashtml'] + $msg['astextandhtml'] + $msg['aspdf'] + $msg['astextandpdf'],
      $msg["astext"],
      $msg["ashtml"] + $msg["astextandhtml"], //bug 0009687
      !empty($msg['aspdf']) ?  '<td><b>'.$msg["aspdf"].'</b></td>':'',
      !empty($msg['astextandpdf']) ? '<td><b>'.$msg["astextandpdf"].'</b></td>':'',
      $clicksrow,$bouncedrow
    );
    if ($msg['status'] != 'draft') {
      $ls->addRow($listingelement,'', $resultStats.$sendstats);
    }

    $actionbuttons = '';
    if ($msg['status'] == 'inprocess' || $msg['status'] == 'submitted') {
      $actionbuttons .= '<span class="suspend">'.PageLinkButton('messages&suspend='.$msg['id'],$GLOBALS['I18N']->get('Suspend'), '', '', s('Suspend')).'</span>';
    } elseif ($msg['status'] != 'draft') {
      $actionbuttons .= '<span class="resend">'.PageLinkButton("messages",$GLOBALS['I18N']->get("Requeue"),"resend=".$msg["id"], '', s('Requeue')).'</span>';
    }
    #0012081: Add new 'Mark as sent' button
    if ($msg['status'] == 'suspended') {
      $actionbuttons .= '<span class="marksent">'.PageLinkButton('messages&amp;markSent='.$msg['id'],$GLOBALS['I18N']->get('Mark&nbsp;sent'), '', '', s('Mark sent')).'</span>';
      $actionbuttons .= '<span class="edit">'.PageLinkButton("send",$GLOBALS['I18N']->get("Edit"),"id=".$msg["id"], '', s('Edit')).'</span>'; 
    } elseif ($msg['status'] == 'draft' || !empty($messagedata['istestcampaign'])) {
      ## only draft messages should be deletable, the rest isn't

    $deletebutton = new ConfirmButton(
       s('Are you sure you want to delete this campaign?'),
       PageURL2("messages$url_keep&delete=".$msg["id"]),
       s('delete this campaign'));

#      $actionbuttons .= sprintf('<span class="delete"><a href="javascript:deleteRec(\'%s\');" class="button" title="'.$GLOBALS['I18N']->get("delete").'">'.$GLOBALS['I18N']->get("delete").'</a></span>',PageURL2("messages$url_keep","","delete=".$msg["id"]));
      $actionbuttons .= '<span class="delete">'.$deletebutton->show().'</span>';
      $actionbuttons .= '<span class="edit">'.PageLinkButton("send",$GLOBALS['I18N']->get("Edit"),"id=".$msg["id"], '', s('Edit')).'</span>'; 
    }
    $actionbuttons .= '<span class="view">'.PageLinkButton("message",$GLOBALS['I18N']->get("View"),"id=".$msg["id"], '', s('View')).'</span>';

    if ($clicks[0] && CLICKTRACK) {
      $actionbuttons .= '<span class="stats">'.PageLinkButton("statsoverview",$GLOBALS['I18N']->get("statistics"),"id=".$msg["id"], '', s('Statistics')).'</span>';
    }

    $ls->addColumn($listingelement,$GLOBALS['I18N']->get("Action"), '<div class="messageactions">'.$actionbuttons.'</div>');


  }
}

print $ls->display();

if ($total > 5 && $_GET['tab'] == 'active') {
  print PageLinkButton("messages",$GLOBALS['I18N']->get("Suspend All"),"action=suspall");
  print PageLinkButton("messages",$GLOBALS['I18N']->get("Mark All Sent"),"action=markallsent");
}