diff --git a/admin_mail_queue.php b/admin_mail_queue.php index a06c621d..8d0e6364 100644 --- a/admin_mail_queue.php +++ b/admin_mail_queue.php @@ -6,14 +6,6 @@ $order = "DESC"; require_once "inc_all_admin.php"; - -//Initialize the HTML Purifier to prevent XSS -require "plugins/htmlpurifier/HTMLPurifier.standalone.php"; - -$purifier_config = HTMLPurifier_Config::createDefault(); -$purifier_config->set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); -$purifier = new HTMLPurifier($purifier_config); - //Rebuild URL $url_query_strings_sort = http_build_query($get_copy); @@ -104,7 +96,6 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); $email_recipient = nullable_htmlentities($row['email_recipient']); $email_recipient_name = nullable_htmlentities($row['email_recipient_name']); $email_subject = nullable_htmlentities($row['email_subject']); - $email_content = $purifier->purify($row['email_content']); $email_attempts = intval($row['email_attempts']); $email_queued_at = nullable_htmlentities($row['email_queued_at']); $email_failed_at = nullable_htmlentities($row['email_failed_at']); @@ -131,7 +122,9 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); - + + + 3) { ?> @@ -146,22 +139,6 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); - - diff --git a/admin_mail_queue_message_view.php b/admin_mail_queue_message_view.php new file mode 100644 index 00000000..ce44cd9e --- /dev/null +++ b/admin_mail_queue_message_view.php @@ -0,0 +1,77 @@ +set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); +$purifier = new HTMLPurifier($purifier_config); + +if (isset($_GET['email_id'])) { + $email_id = intval($_GET['email_id']); +} else { + echo "You dont belong here"; + exit(); +} + +$sql = mysqli_query($mysqli, "SELECT * FROM email_queue WHERE email_id = $email_id"); + +$row = mysqli_fetch_array($sql); + +$email_from = nullable_htmlentities($row['email_from']); +$email_from_name = nullable_htmlentities($row['email_from_name']); +$email_recipient = nullable_htmlentities($row['email_recipient']); +$email_recipient_name = nullable_htmlentities($row['email_recipient_name']); +$email_subject = nullable_htmlentities($row['email_subject']); +$email_content = $purifier->purify($row['email_content']); +$email_attempts = intval($row['email_attempts']); +$email_queued_at = nullable_htmlentities($row['email_queued_at']); +$email_failed_at = nullable_htmlentities($row['email_failed_at']); +$email_sent_at = nullable_htmlentities($row['email_sent_at']); +$email_status = intval($row['email_status']); +if ($email_status == 0) { + $email_status_display = "
Queued
"; +} elseif($email_status == 1) { + $email_status_display = "
Sending
"; +} elseif($email_status == 2) { + $email_status_display = "
Failed
$email_failed_at"; +} else { + $email_status_display = "
Sent
$email_sent_at"; +} + +?> + + + +
+ +
+
+
+
From: ($email_from)"; ?>
+
To: ($email_recipient)"; ?>
+
Subject:
+
+
+ +
+
+
+ +
+ + + +MAINTENANCE