Server : ApacheSystem : Linux sh00666.bluehost.com 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64 User : ndkhermy ( 1200) PHP Version : 8.5.12 Disable Function : NONE Directory : /home1/ndkhermy/www/website_7c8ed5ef/admin/manage_subscriber/ |
Upload File : |
<?php
error_reporting(0);
include("../function.php");
if($_SESSION['admin_id']==""){
header('location:../login.php');
}
$login_tbl=mysqli_fetch_array(mysqli_query($conn,"SELECT * FROM admin WHERE admin_id='".$_SESSION['admin_id']."'"));
// Sidebar strat
include('../include/sidebar.php');
// Sidebar wrap
$send_id = $_GET['send'];
$all_email = $_GET['all_email'];
// Include PHPMailer classes
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\SMTP;
use PHPMailer\PHPMailer\Exception;
// Require the PHPMailer files
require '../../PHPMailer/src/Exception.php';
require '../../PHPMailer/src/PHPMailer.php';
require '../../PHPMailer/src/SMTP.php';
ini_set('display_errors', 0);
ini_set('display_startup_errors', 0);
error_reporting(E_ALL);
if (isset($_POST['send'])) {
$message = $_POST['message'];
$file = $_FILES['file']['name'];
$file_tmp = $_FILES['file']['tmp_name'];
$email_config = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM email_setting WHERE id=1"));
$host = $email_config['host'];
$port = $email_config['port'];
$username = $email_config['email'];
$password = $email_config['password'];
$mail = new PHPMailer(true);
$mail->SMTPDebug = 2;
$mail->isSMTP();
$mail->Host = '' . $host . '';
$mail->SMTPAuth = true;
$mail->Username = '' . $username . '';
$mail->Password = '' . $password . '';
$mail->Port = $port;
$mail->SMTPSecure = 'tls';
//PHPMailer::ENCRYPTION_SMTPS;
$mail->setFrom($username, 'Rfo Official');
$mail->addAddress($username);
// Add recipients from the database if $all_email is set
if (isset($all_email) && !empty($all_email)) {
$all_email = implode(',', array_map('intval', explode(',', $all_email))); // Sanitize
$updateQry = mysqli_query($conn, "SELECT * FROM `subscribe` WHERE `id` IN ($all_email)") or die(mysqli_error($conn));
while ($fetQuery = mysqli_fetch_array($updateQry)) {
if (filter_var($fetQuery['email'], FILTER_VALIDATE_EMAIL)) {
$mail->addAddress(trim($fetQuery['email'])); // Add valid email addresses
}
}
} else {
// Sanitize send_id and check for valid email
$send_id = intval($send_id);
$updateQry = mysqli_query($conn, "SELECT * FROM `subscribe` WHERE `id` = '$send_id'") or die(mysqli_error($conn));
if ($fetQuery = mysqli_fetch_array($updateQry)) {
if (filter_var($fetQuery['email'], FILTER_VALIDATE_EMAIL)) {
$mail->addAddress(trim($fetQuery['email']));
}
}
}
$mail->isHTML(true);
$mail->Subject = "Rfo official";
$mail->Body = $message;
$mail->addAttachment($file_tmp, $file);
$mail->SMTPOptions = array(
"ssl" => array(
"verify_peer" => true,
"verify_peer_name" => true,
"allow_self_signed" => false,
),
);
// Send the email and handle success or failure
if ($mail->send()) {
// Update subscription status if the email is sent successfully
$statusUpdateSuccess = false;
if (isset($all_email) && !empty($all_email)) {
$all_email = implode(',', array_map('intval', explode(',', $all_email))); // Sanitize
$updateQry = mysqli_query($conn, "UPDATE `subscribe` SET `status` = '1' WHERE `id` IN ($all_email)") or die(mysqli_error($conn));
$statusUpdateSuccess = $updateQry;
} else {
$send_id = intval($send_id);
$updateQry = mysqli_query($conn, "UPDATE `subscribe` SET `status` = '1' WHERE `id` = '$send_id'") or die(mysqli_error($conn));
$statusUpdateSuccess = $updateQry;
}
// Redirect if the status update was successful
if ($statusUpdateSuccess) {
$_SESSION['message'] = 'Message has been sent successfully!';
echo "<script>window.location.href='subs.php?page=subs';</script>";
}
}
}
?>
<!-- [ Main Content ] start -->
<section class="pcoded-main-container">
<div class="pcoded-content">
<!-- [ breadcrumb ] start -->
<div class="page-header">
<div class="page-block">
<div class="row align-items-center">
<div class="col-md-12">
<div class="page-header-title">
<div class="card-header d-flex justify-content-between">
<button class="btn btn-light text-white fw-bold btn-sm btn-round has-ripple"><i class="feather icon-edit"></i> Add | Edit | Product Category </button>
</div>
</div>
</div>
</div>
</div>
</div>
<!-- [ breadcrumb ] end -->
<!-- [ Main Content ] start -->
<div class="row">
<div class="col-md-12">
<div class="card">
<!-- <div class="card-header d-flex justify-content-between">
</div> -->
<div class="card-body">
<?php if(isset($_SESSION['img_error'])){
echo '<div class="alert alert-danger alert-dismissible fade show" role="alert">
<i class="feather icon-alert-triangle text-danger"></i> <strong class="text-dark">'.$_SESSION['img_error'].'</strong>
<button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close">
</button>
</div>';
}
unset($_SESSION['img_error']);
?>
<?php
$email_config = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM email_setting WHERE id=1"));
?>
<form method="post" action="" enctype="multipart/form-data" autocomplete="off">
<div class="row">
<?php
if (isset($all_email) && !empty($all_email)) {
?>
<div class="col-md-12">
<div class="form-group">
<label class="form-label" for="email">Admin Email Address</label>
<input type="email" class="form-control" name="email" value="<?=$email_config['email']?>" readonly>
</div>
</div>
<div class="col-md-12">
<div class="form-group">
<label class="form-label" for="email">User Email Address</label>
<textarea class="form-control" rows="3" name="email" readonly>
<?php
$updateQry = mysqli_query($conn, "SELECT * FROM `subscribe` WHERE `id` IN ($all_email)");
$emails = [];
while ($fetQuery = mysqli_fetch_array($updateQry)) {
$emails[] = $fetQuery['email'];
}
echo implode(' , ', $emails);
?>
</textarea>
</div>
</div>
<?php
}else{
$updateQry=mysqli_query($conn,"SELECT * FROM `subscribe` WHERE `id` = '$send_id'")or die(mysqli_error($conn));
$fetQuery = mysqli_fetch_array($updateQry);
?>
<div class="col-md-6">
<div class="form-group">
<label class="form-label" for="email">Admin Email Address</label>
<input type="email" class="form-control" name="email" value="<?=$email_config['email']?>" readonly>
</div>
</div>
<div class="col-md-6">
<div class="form-group">
<label class="form-label" for="email">User Email Address</label>
<input type="email" class="form-control" name="email" value="<?=$fetQuery['email']?>" readonly>
</div>
</div>
<?php } ?>
<div class="col-md-12 mt-4">
<div class="form-group">
<label class="form-label" for="Message">Send Message</label>
<textarea class="form-control" rows="5" name="message" placeholder="Please type your message"></textarea>
</div>
</div>
<div class="col-md-12 mt-4">
<div class="form-group">
<label class="form-label" for="Message">Send Document</label>
<input type="file" class="form-control" name="file" accept=".pdf,.doc,.docx,.txt,.jpg,.jpeg,.png,.gif">
</div>
</div>
<div class="row">
<div class="col-md-6 mt-4">
<input type="submit" name="send" class="btn btn-danger" id="send" value="Send">
<a class="btn btn-secondary" href="show.php?page=subs">Back</a>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</section>
<?php include('../include/footer.php'); ?>
<!-- Update user data wrap --->