Your IP : 216.73.217.79
<?php
include_once("/usr/www/users/saacea/ccmadmin/phpmailer/class.phpmailer.php");
function maill($to, $subject, $message, $uploadfile1) {
$mail = new PHPMailer();
$mail->IsMail(); // use PHP mail function
$mail->From = "webmaster@cesa.co.za";
$mail->FromName = "MentaNet";
$mail->AddAddress($to);
$mail->Subject=$subject;
$mail->IsHtml(false);
$mail->Body=$message;
if (!empty($uploadfile1)) {
$mail->AddAttachment($uploadfile1, basename($uploadfile1));
}
$mail->Send();
}
if (!isset($sSubject) || empty($sSubject)) $sSubject = $_POST["subject"];
if (!isset($sMessage) || empty($sMessage)) $sMessage = $_POST["message"];
if (!isset($sFrom) || empty($sFrom)) die();
$sSentTo = "";
$arrEmails = array();
$uploaddir = '/usr/www/users/saacea/ccmadmin/msgattach/';
$uploadfilename1="";
$uploadfile1="";
if (isset($attachmentfile)) {
$uploadfilename1 = $attachmentfile;
$uploadfile1 = $uploaddir . $uploadfilename1;
} else {
if (isset($_FILES['file1'])) {
$uploadfilename1 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES['file1']['name']))));
$uploadfile1 = $uploaddir . $uploadfilename1;
$ifilenum=1;
while (file_exists($uploadfile1) && !empty($uploadfilename1)) {
$uploadfile1 = $uploaddir . $ifilenum."_".$uploadfilename1;
$ifilenum++;
}
move_uploaded_file($_FILES['file1']['tmp_name'], $uploadfile1);
}
}
for ($i=0; $i < count($arrSendTo); $i++) {
if ($arrSendTo[$i] == "CESA") {
$sSentTo .= "CETA Programme Coordinator, ";
} elseif ($arrSendTo[$i] == "SAll") {
$sSentTo .= "All Candidates, ";
} elseif (substr($arrSendTo[$i],0,1)=="S") {
$sql = "SELECT CCMStudentID, FirstName, Surname, EmailAddress FROM CCMStudents WHERE CCMStudentID=".substr($arrSendTo[$i],1);
$rec = mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) {
$sSentTo .= $row["FirstName"]." ".$row["Surname"].", ";
}
mysql_free_result($rec);
} elseif ($arrSendTo[$i] == "MAll") {
$sSentTo .= "All Mentors, ";
} elseif (substr($arrSendTo[$i],0,1)=="M") {
$sql = "SELECT CCMMentorID, FirstName, Surname, EmailAddress FROM CCMMentors WHERE CCMMentorID=".substr($arrSendTo[$i],1);
$rec = mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) {
$sSentTo .= $row["FirstName"]." ".$row["Surname"].", ";
}
mysql_free_result($rec);
} elseif ($arrSendTo[$i] == "EAll") {
$sSentTo .= "All Coordinators, ";
} elseif (substr($arrSendTo[$i],0,1)=="E") {
$sql = "SELECT CCMEmployerID, FirstName, Surname, EmailAddress FROM CCMEmployers WHERE CCMEmployerID=".substr($arrSendTo[$i],1);
$rec = mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) {
$sSentTo .= $row["FirstName"]." ".$row["Surname"].", ";
}
mysql_free_result($rec);
}
}
$sSendMessage = "You have received the following MentaNet message (please reply through MentaNet, and NOT to this email):
From: ".$sFrom."
Subject: ".$sSubject."
".$sMessage."
";
$sStudentFooter = "Please login to MentaNet to read the message and respond: www.cesa.co.za/mentanet";
if (!isset($SentByStudentID)) $SentByStudentID="NULL";
if (!isset($SentByMentorID)) $SentByMentorID="NULL";
$sql = "INSERT INTO CCMMessages (SentByName, SentTo, SentDateTime, MessageSubject, MessageText, SentByStudentID, SentByFacilitatorID, MessageFile)
VALUES ('".$sFrom."', '".$sSentTo."', '".date("Y-m-d H:i:s")."', '".addslashes(stripslashes($sSubject))."', '".addslashes(stripslashes($sMessage))."',
".$SentByStudentID.", ".$SentByMentorID.", '".$uploadfilename1."')";
// mail("julia@xe.co.za", "MentaNetMessage", $sql);
mysql_query($sql);
// die($sql);
$CCMMessageID = mysql_insert_id();
// var_dump($arrSendTo);
for ($i=0; $i < count($arrSendTo); $i++) {
// echo $arrSendTo[$i];
if ($arrSendTo[$i] == "CESA") {
maill("mentanet@cesa.co.za", "MentaNet Message Received", $sSendMessage, $uploadfile1);
} elseif ($arrSendTo[$i] == "EAll") {
$sql = "SELECT CCMEmployerID, EmailAddress FROM CCMEmployers WHERE Archived=0";
$rec = mysql_query($sql);
while ($row=mysql_fetch_assoc($rec)) {
maill($row["EmailAddress"], "MentaNet Message Received", $sSendMessage.$sStudentFooter, $uploadfile1);
$arrEmails[] = $row["EmailAddress"];
mysql_query("INSERT INTO CCMMessagesSentTo (CCMMessageID, SentType, SentID) VALUES ('".$CCMMessageID."', 'Coordinator', '".$row["CCMEmployerID"]."')");
}
mysql_free_result($rec);
} elseif ($arrSendTo[$i] == "MAll") {
$sql = "SELECT CCMMentorID, EmailAddress FROM CCMMentors WHERE Archived=0";
$rec = mysql_query($sql);
while ($row=mysql_fetch_assoc($rec)) {
maill($row["EmailAddress"], "MentaNet Message Received", $sSendMessage.$sStudentFooter, $uploadfile1);
$arrEmails[] = $row["EmailAddress"];
mysql_query("INSERT INTO CCMMessagesSentTo (CCMMessageID, SentType, SentID) VALUES ('".$CCMMessageID."', 'Mentor', '".$row["CCMMentorID"]."')");
}
mysql_free_result($rec);
} elseif ($arrSendTo[$i] == "SAll") {
$sql = "SELECT CCMStudentID, EmailAddress FROM CCMStudents WHERE BlockAccess='n' AND Archived=0";
$rec = mysql_query($sql);
while ($row=mysql_fetch_assoc($rec)) {
maill($row["EmailAddress"], "MentaNet Message Received", $sSendMessage.$sStudentFooter, $uploadfile1);
$arrEmails[] = $row["EmailAddress"];
mysql_query("INSERT INTO CCMMessagesSentTo (CCMMessageID, SentType, SentID) VALUES ('".$CCMMessageID."', 'Student', '".$row["CCMStudentID"]."')");
}
mysql_free_result($rec);
} elseif (substr($arrSendTo[$i],0,1)=="E") {
$sql = "SELECT CCMEmployerID, FirstName, Surname, EmailAddress FROM CCMEmployers WHERE CCMEmployerID=".substr($arrSendTo[$i],1);
$rec = mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) {
if (!in_array($row["EmailAddress"], $arrEmails)) {
maill($row["EmailAddress"], "MentaNet Message Received", $sSendMessage.$sStudentFooter, $uploadfile1);
$arrEmails[] = $row["EmailAddress"];
mysql_query("INSERT INTO CCMMessagesSentTo (CCMMessageID, SentType, SentID) VALUES ('".$CCMMessageID."', 'Coordinator', '".$row["CCMEmployerID"]."')");
}
}
mysql_free_result($rec);
} elseif (substr($arrSendTo[$i],0,1)=="M") {
$sql = "SELECT CCMMentorID, FirstName, Surname, EmailAddress FROM CCMMentors WHERE CCMMentorID=".substr($arrSendTo[$i],1);
$rec = mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) {
if (!in_array($row["EmailAddress"], $arrEmails)) {
maill($row["EmailAddress"], "MentaNet Message Received", $sSendMessage.$sStudentFooter, $uploadfile1);
$arrEmails[] = $row["EmailAddress"];
mysql_query("INSERT INTO CCMMessagesSentTo (CCMMessageID, SentType, SentID) VALUES ('".$CCMMessageID."', 'Mentor', '".$row["CCMMentorID"]."')");
}
}
mysql_free_result($rec);
} elseif (substr($arrSendTo[$i],0,1)=="S") {
$sql = "SELECT CCMStudentID, FirstName, Surname, EmailAddress FROM CCMStudents WHERE CCMStudentID=".substr($arrSendTo[$i],1);
$rec = mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) {
if (!in_array($row["EmailAddress"], $arrEmails)) {
maill($row["EmailAddress"], "MentaNet Message Received", $sSendMessage.$sStudentFooter, $uploadfile1);
$arrEmails[] = $row["EmailAddress"];
mysql_query("INSERT INTO CCMMessagesSentTo (CCMMessageID, SentType, SentID) VALUES ('".$CCMMessageID."', 'Student', '".$row["CCMStudentID"]."')");
}
}
mysql_free_result($rec);
}
}
echo "<p><b>Your message has been sent!</b></p>";
?>