WB 2.11.0

<?php

/**

 *

 * @category        framework

 * @package         frontend

 * @author          Ryan Djurovich, WebsiteBaker Project

 * @copyright       WebsiteBaker Org. e.V.

 * @link            http://websitebaker.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.3

 * @requirements    PHP 5.3.6 and higher

 * @version         $Id: class.wb.php 2 2017-07-02 15:14:29Z Manuela $

 * @filesource      $HeadURL: svn://isteam.dynxs.de/wb/2.10.x/branches/main/framework/class.wb.php $

 * @lastmodified    $Date: 2017-07-02 17:14:29 +0200 (Sun, 02 Jul 2017) $

 *

 */

/* -------------------------------------------------------- */

// Must include code to stop this file being accessed directly

if (defined('WB_PATH') == false) { die("Cannot access this file directly"); }

/* -------------------------------------------------------- */

// Include depending classes if needed

if (!class_exists('Template', false))              { require(WB_PATH.'/include/phplib/template.inc'); }

if (!class_exists('database', false))              { require(__DIR__.'/class.database.php'); }

if (!class_exists('wbmailer', false))              { require(__DIR__.'/class.wbmailer.php'); }

if (!class_exists('SecureTokens', false))          { require(__DIR__.'/SecureTokens.php'); }

if (!class_exists('SecureTokensInterface', false)) { require(__DIR__.'/SecureTokensInterface.php'); }

if (!class_exists('Sanitize', false )) { include __DIR__.'/Sanitize.php'; }

class wb extends SecureTokensInterface

{

  /**

   @var object instance of the database object */

  protected $_oDb = null;

  protected $oDb = null;

  /**

   @var object instance holds several values from the application global scope */

  protected $_oReg = null;

  /**

   @var object instance holds all of the translations */

  protected $_oTrans = null;

  protected $oTrans = null;

//    public $password_chars = 'a-zA-Z0-9\_\-\!\#\*\+\@\$\&\:';    // General initialization function

    public $password_chars = '[\w!#$%&*+\-.:=?@\|]';    // General initialization function

    public function  __construct($mode = 0) {

        parent::__construct();

        $this->oDb = $this->_oDb    = $GLOBALS['database'];

        $this->oTrans = $this->_oTrans = $GLOBALS['oTrans'];

    }

/**

 *

 *

 * @return comma separate list of first visible languages

 *

 */

    public function getLanguagesInUsed()

    {

        $aRetval = [];

        $sql = 'SELECT DISTINCT `language`, `page_id` '

             . 'FROM `'.$this->oDb->sTablePrefix.'pages` '

             . 'WHERE `level`=0 AND `visibility` NOT IN(\'none\', \'hidden\') '

             . 'ORDER BY `language`, `position`';

        if (($oResult = $this->oDb->query($sql))) {

            while ( $aRow = $oResult->fetchRow( MYSQLI_ASSOC)) {

                if( !$this->isPageVisible($aRow['page_id'])) { continue; }

                $aRetval[] = $aRow['language'];

            }

        }

        return implode(',', array_unique($aRetval));

    }

  /**

   * Created parse_url utf-8 compatible function

   *

   * @param string $url The string to decode

   * @return array Associative array containing the different components

   *

   */

    public function mb_parse_url( $url)

    {

      $encodedUrl = preg_replace_callback( '%[^:/?#&=\.]+%usD', create_function( '$aMatches',

        ';return urlencode($aMatches[0]);'), /*                                   'urlencode(\'$0\')', */ $url);

      $components = parse_url( $encodedUrl);

      foreach ( $components as &$component) $component = urldecode( $component);

      return $components;

    }

/* ****************

 * check if one or more group_ids are in both group_lists

 *

 * @access public

 * @param mixed $groups_list1: an array or a coma seperated list of group-ids

 * @param mixed $groups_list2: an array or a coma seperated list of group-ids

 * @param array &$matches: an array-var whitch will return possible matches

 * @return bool: true there is a match, otherwise false

 */

    public function is_group_match($mGroupsList1 = '', $mGroupsList2 = '', &$matches = null)

    {

        if ($mGroupsList1 == '' || $mGroupsList2 == '') { return false; }

        if (!is_array($mGroupsList1)) {

            $mGroupsList1 = preg_split('/[\s,=+\-\;\:\.\|]+/', $mGroupsList1, -1, PREG_SPLIT_NO_EMPTY);

        }

        if (!is_array($mGroupsList2)) {

            $mGroupsList2 = preg_split('/[\s,=+\-\;\:\.\|]+/', $mGroupsList2, -1, PREG_SPLIT_NO_EMPTY);

        }

        $matches = array_intersect($mGroupsList1, $mGroupsList2);

        return (sizeof($matches) != 0);

    }

/**

 * @param mixed $groups_list is an array or a coma seperated list of group-ids

 * @return bool: true if current user is member of one of this groups or its the superadmin

 */

    public function ami_group_member( $groups_list = '' )

    {

        return ($this->get_user_id() == 1) || $this->is_group_match( $groups_list, $this->get_groups_id());

    }

/**

 * Alias for isPageVisible()

 * @param mixed $mPage  can be a integer (PageId) or an array

 * @return bool

 * @deprecated since 2.10.0

 */

    public function page_is_visible($mPage)

    {

        // get PageId from array or object

        if (is_array($mPage)) {

            $iPageId = (int) $mPage['page_id'];

        } elseif (is_integer($mPage)) {

            $iPageId = $mPage;

        } else {

            $iPageId = 0;

        }

        return $this->isPageVisible($iPageId);

    }

/**

 * isViewingPageAllowed

 * @param int $iPageId

 * @param int $iOtherUserId  (optional) test for other then current user

 * @return bool

 * @description if current user has permission to see this page

 *   the visibility logic follows this scheme:

 *   false : ([none] | [deleted])

 *   false : ([private] | [registered]) and [not authenticated]

 *   true  : ([private] | [registered]) and [authenticated]

 *   true  : [public] | [hidden]

 */

    public function isPageVisible($iPageId, $iOtherUserId = null)

    {

        try {

            // sanitize optional user_id

            if (version_compare(PHP_VERSION, '7.0.0', '>=')) {

                $iUserId = (int) ($iOtherUserId ?? $this->get_user_id());

            } else {

                $iUserId = (int) (isset($iOtherUserId) ? $iOtherUserId : $this->get_user_id());

            }

            // get this page record

            $sql = 'SELECT * FROM `'.$this->oDb->sTablePrefix.'pages` '

                 . 'WHERE `page_id`='.$iPageId;

            $oRecords = $this->oDb->query($sql);

            if (!($oPage = $oRecords->fetchObject())) {

                throw new InvalidArgumentException('request not existing PageId ['.$iPageId.']');

            }

            //

            switch ($oPage->visibility) {

                case 'hidden':

                case 'public':

                    $bRetval = true;

                    break;

                case 'private':

                case 'registered':

                    if (($bRetval = $this->is_authenticated())) {

                        $bRetval = (

                            $this->ami_group_member($oPage->viewing_groups) ||

                            $this->is_group_match($iUserId, $oPage->viewing_users)

                        );

                    }

                    break;

                default:

                    $bRetval = false;

                    break;

            }

        } catch(Exception $e) {

            $bRetval = false;

        }

        return $bRetval;

    }

/**

 * Alias for isPageActive()

 * @param mixed $mPage  can be a integer (PageId) or an array

 * @return bool  true if at least one active section is found

 * @deprecated since 2.10.0

 */

    public function page_is_active($mPage)

    {

        // get PageId from array

        if (is_array($mPage)) {

            $iPageId = $mPage['page_id'];

        } elseif (is_integer($mPage)) {

            $iPageId = $mPage;

        } else {

            $iPageId = 0;

        }

        return $this->isPageActive($iPageId);

    }

/**

 * Check if there is at least one active section on this page

 * @param int $iPageId

 * @return bool  true if at least one active section is found

 */

    public function isPageActive($iPageId)

    {

        try {

            // seach for active sections in this page

            $iNow = time();

            $sql = 'SELECT COUNT(*) FROM `'.$this->oDb->sTablePrefix.'sections` '

                 . 'WHERE `page_id`='.(int) $iPageId.' AND '

                 .       '('.$iNow.' BETWEEN `publ_start` AND `publ_end`) OR '

                 .       '('.$iNow.' > `publ_start` AND `publ_end`=0) ';

            $bRetval = (bool) $this->oDb->get_one($sql);

        } catch (Exception $e) {

            $bRetval = false;

        }

        return $bRetval;

    }

    // Check whether we should show a page or not (for front-end)

    public function show_page($mPage)

    {

        $retval = ($this->page_is_visible($mPage) && $this->page_is_active($mPage));

        return $retval;

    }

    // Check if the user is already authenticated or not

    public function is_authenticated() {

        $retval = (

            isset($_SESSION['USER_ID']) AND

            $_SESSION['USER_ID'] != "" AND

            is_numeric($_SESSION['USER_ID'])

        );

        return (bool) $retval;

    }

    // Modified addslashes function which takes into account magic_quotes

    public function add_slashes($input) {

        if( get_magic_quotes_gpc() || (!is_string($input)) ) {

            return $input;

        }

        return addslashes($input);

    }

    // Ditto for stripslashes

    // Attn: this is _not_ the counterpart to $this->add_slashes() !

    // Use stripslashes() to undo a preliminarily done $this->add_slashes()

    // The purpose of $this->strip_slashes() is to undo the effects of magic_quotes_gpc==On

    public function strip_slashes($input) {

        if ( !get_magic_quotes_gpc() || ( !is_string($input) ) ) {

            return $input;

        }

        return stripslashes($input);

    }

    // Escape backslashes for use with mySQL LIKE strings

    public function escape_backslashes($input) {

        return str_replace("\\","\\\\",$input);

    }

    public function page_link($link){

        // Check for :// in the link (used in URL's) as well as mailto:

        if(strstr($link, '://') == '' AND substr($link, 0, 7) != 'mailto:') {

            return WB_URL.PAGES_DIRECTORY.$link.PAGE_EXTENSION;

        } else {

            return $link;

        }

    }

    // Get POST data

    public function get_post($field) {

        return (isset($_POST[$field]) ? $_POST[$field] : null);

    }

    // Get POST data and escape it

    public function get_post_escaped($field) {

        $result = $this->get_post($field);

        return (is_null($result)) ? null : $this->add_slashes($result);

    }

    // Get GET data

    public function get_get($field) {

        return (isset($_GET[$field]) ? $_GET[$field] : null);

    }

    // Get SESSION data

    public function get_session($field) {

        return (isset($_SESSION[$field]) ? $_SESSION[$field] : null);

    }

    // Get SERVER data

    public function get_server($field) {

        return (isset($_SERVER[$field]) ? $_SERVER[$field] : null);

    }

    // Get the current users id

    public function get_user_id() {

        return $this->get_session('USER_ID');

    }

    // Get the current users group id

    public function get_group_id() {

        return $this->get_session('GROUP_ID');

    }

    // Get the current users group ids

    public function get_groups_id() {

        return explode(",", $this->get_session('GROUPS_ID'));

    }

    // Get the current users group name

    public function get_group_name() {

        return implode(",", $this->get_session('GROUP_NAME'));

    }

    // Get the current users group name

    public function get_groups_name() {

        return $this->get_session('GROUP_NAME');

    }

    // Get the current users username

    public function get_username() {

        return $this->get_session('USERNAME');

    }

    // Get the current users display name

    public function get_display_name() {

        return $this->get_session('DISPLAY_NAME');

    }

    // Get the current users email address

    public function get_email() {

        return $this->get_session('EMAIL');

    }

    // Get the current users home folder

    public function get_home_folder() {

        return $this->get_session('HOME_FOLDER');

    }

    // Get the current users timezone

    public function get_timezone() {

        return (isset($_SESSION['USE_DEFAULT_TIMEZONE']) ? '-72000' : $_SESSION['TIMEZONE']);

    }

    // Validate supplied email address

    public function validate_email($email) {

        if(function_exists('idn_to_ascii')){ /* use pear if available */

            $email = idn_to_ascii($email);

        }else {

            require_once(WB_PATH.'/include/idna_convert/idna_convert.class.php');

            $IDN = new idna_convert();

            $email = $IDN->encode($email);

            unset($IDN);

        }

        // regex from NorHei 2011-01-11

        $retval = preg_match("/^((([!#$%&'*+\\-\/\=?^_`{|}~\w])|([!#$%&'*+\\-\/\=?^_`{|}~\w][!#$%&'*+\\-\/\=?^_`{|}~\.\w]{0,}[!#$%&'*+\\-\/\=?^_`{|}~\w]))[@]\w+(([-.]|\-\-)\w+)*\.\w+(([-.]|\-\-)\w+)*)$/", $email);

        return ($retval != false);

    }

  /**

   * replace header('Location:...  with new method

   * if header send failed you get a manuell redirected link, so script don't break

   *

   * @param string $location, redirected url

   * @return void

   */

    public function send_header( $location)

    {

      if( !headers_sent()) {

        header( 'Location: '.$location);

        exit( 0);

      } else {

        //            $aDebugBacktrace = debug_backtrace();

        //            array_walk( $aDebugBacktrace, create_function( '$a,$b', 'print "<br /><b>". basename( $a[\'file\'] ). "</b> &nbsp; <font color=\"red\">{$a[\'line\']}</font> &nbsp; <font color=\"green\">{$a[\'function\']} ()</font> &nbsp; -- ". dirname( $a[\'file\'] ). "/";' ) );

        $msg = "<div style=\"text-align:center;\"><h2>An error has occurred</h2><p>The <strong>Redirect</strong> could not be start automatically.\n".

          "Please click <a style=\"font-weight:bold;\" "."href=\"".$location."\">on this link</a> to continue!</p></div>\n";

        throw new Exception( $msg);

      }

    }

/* ****************

 * set one or more bit in a integer value

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2set: the bitmask witch shall be added to value

 * @return void

 */

    public function bit_set( &$value, $bits2set )

    {

        $value |= $bits2set;

    }

/* ****************

 * reset one or more bit from a integer value

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2reset: the bitmask witch shall be removed from value

 * @return void

 */

    public function bit_reset( &$value, $bits2reset)

    {

        $value &= ~$bits2reset;

    }

/* ****************

 * check if one or more bit in a integer value are set

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2set: the bitmask witch shall be added to value

 * @return void

 */

    public function bit_isset( $value, $bits2test )

    {

        return (($value & $bits2test) == $bits2test);

    }

    // Print a success message which then automatically redirects the user to another page

    public function print_success( $message, $redirect = 'index.php' ) {

        global $TEXT;

        if(is_array($message)) {

           $message = implode ('<br />',$message);

        }

        // fetch redirect timer for sucess messages from settings table

        $redirect_timer = ((defined( 'REDIRECT_TIMER' )) && (REDIRECT_TIMER <= 10000)) ? REDIRECT_TIMER : 0;

        // add template variables

        // Setup template object, parse vars to it, then parse it

        $tpl = new Template(dirname($this->correct_theme_source('success.htt')));

        $tpl->set_file( 'page', 'success.htt' );

        $tpl->set_block( 'page', 'main_block', 'main' );

        $tpl->set_block( 'main_block', 'show_redirect_block', 'show_redirect' );

        $tpl->set_var( 'MESSAGE', $message );

        $tpl->set_var( 'REDIRECT', $redirect );

        $tpl->set_var( 'REDIRECT_TIMER', $redirect_timer );

        $tpl->set_var( 'NEXT', $TEXT['NEXT'] );

        $tpl->set_var( 'BACK', $TEXT['BACK'] );

        if ($redirect_timer == -1) {

            $tpl->set_block( 'show_redirect', '' );

        }

        else {

            $tpl->parse( 'show_redirect', 'show_redirect_block', true );

        }

        $tpl->parse( 'main', 'main_block', false );

        $tpl->pparse( 'output', 'page' );

    }

    // Print an error message

    public function print_error($message, $link = 'index.php', $auto_footer = true) {

        global $TEXT;

        if(is_array($message)) {

           $message = implode ('<br />',$message);

        }

        // Setup template object, parse vars to it, then parse it

        $success_template = new Template(dirname($this->correct_theme_source('error.htt')));

        $success_template->set_file('page', 'error.htt');

        $success_template->set_block('page', 'main_block', 'main');

        $success_template->set_var('MESSAGE', $message);

        $success_template->set_var('LINK', $link);

        $success_template->set_var('BACK', $TEXT['BACK']);

        $success_template->parse('main', 'main_block', false);

        $success_template->pparse('output', 'page');

        if ( $auto_footer == true ) {

            if ( method_exists($this, "print_footer") ) {

                $this->print_footer();

            }

        }

        exit();

    }

  /*

  * @param string $message: the message to format

  * @param string $status:  ('ok' / 'error' / '') status defines the apereance of the box

  * @return string: the html-formatted message (using template 'message.htt')

  */

  public function format_message( $message, $status = 'ok')

  {

    $retval = '';

//    if ( ($message == '') ) { return $retval; }

    $id = uniqid( 'x');

    $tpl = new Template( dirname( $this->correct_theme_source( 'message.htt')));

    $tpl->set_file( 'page', 'message.htt');

    $tpl->set_block( 'page', 'main_block', 'main');

    $tpl->set_var( 'MESSAGE', $message);

    $tpl->set_var( 'THEME_URL', THEME_URL);

    $tpl->set_var( 'ID', $id);

    if( $status == 'ok' || $status == 'error' || $status = 'warning') {

      $tpl->set_var( 'BOX_STATUS', ' box-'.$status);

    } else {

      $tpl->set_var( 'BOX_STATUS', '');

    }

    $tpl->set_var( 'STATUS', $status);

    if( !defined( 'REDIRECT_TIMER')) {

      define( 'REDIRECT_TIMER', -1);

    }

    if( $status != 'error') {

      switch ( REDIRECT_TIMER):

        case 0: // do not show message

          unset( $tpl);

          break;

        case - 1: // show message permanently

          $tpl->parse( 'main', 'main_block', false);

          $retval = $tpl->finish( $tpl->parse( 'output', 'page', false));

          unset( $tpl);

          break;

        default: // hide message after REDIRECTOR_TIMER milliseconds

          $retval = '<script type="text/javascript">/* <![CDATA[ */ function '.$id.'_hide() {'.

            'document.getElementById(\''.$id.'\').style.display = \'none\';}'.'window.setTimeout(\''.$id.

            '_hide()\', '.REDIRECT_TIMER.');/* ]]> */ </script>';

          $tpl->parse( 'main', 'main_block', false);

          $retval = $tpl->finish( $tpl->parse( 'output', 'page', false)).$retval;

          unset( $tpl);

      endswitch;

    } else {

      $tpl->parse( 'main', 'main_block', false);

      $retval = $tpl->finish( $tpl->parse( 'output', 'page', false)).$retval;

      unset( $tpl);

    }

    return $retval;

  }

  /*

  * @param string $type: 'locked'(default)  or 'new'

  * @return void: terminates application

  * @description: 'locked' >> Show maintenance screen and terminate, if system is locked

  *               'new' >> Show 'new site under construction'(former print_under_construction)

  */

  public function ShowMaintainScreen( $type = 'locked')

  {

    global $database, $MESSAGE;

    $LANGUAGE = strtolower( ( isset( $_SESSION['LANGUAGE']) ? $_SESSION['LANGUAGE'] : LANGUAGE));

    $PAGE_TITLE = $MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'];

    $PAGE_ICON = 'negative';

    $show_screen = false;

    if( $type == 'locked') {

      $curr_user = ( intval( isset( $_SESSION['USER_ID']) ? $_SESSION['USER_ID'] : 0));

      if( ( defined( 'SYSTEM_LOCKED') && ( int)SYSTEM_LOCKED == 1) && ( $curr_user != 1)) {

        header( $_SERVER['SERVER_PROTOCOL'].' 503 Service Unavailable');

        // first kick logged users out of the system

        // delete all remember keys from table 'user' except user_id=1

        $sql = 'UPDATE `'.TABLE_PREFIX.'users` SET `remember_key`=\'\' ';

        $sql .= 'WHERE `user_id`<>1';

        $database->query( $sql);

        // delete remember key-cookie if set

        if( isset( $_COOKIE['REMEMBER_KEY'])) {

          setcookie( 'REMEMBER_KEY', '', time() - 3600, '/');

        }

        // overwrite session array

        $_SESSION = array();

        // delete session cookie if set

        if( ini_get( "session.use_cookies")) {

          $params = session_get_cookie_params();

          setcookie( session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"],

            $params["httponly"]);

        }

        // delete the session itself

        session_destroy();

        $PAGE_TITLE = $MESSAGE['GENERIC_WEBSITE_LOCKED'];

        $PAGE_ICON = 'system';

        $show_screen = true;

      }

    } else {

      header( $_SERVER['SERVER_PROTOCOL'].' 503 Service Unavailable');

      $show_screen = true;

    }

    if( $show_screen) {

      $sMaintanceFile = $this->correct_theme_source( 'maintenance.htt');

      if( file_exists( $sMaintanceFile)) {

        $tpl = new Template( dirname( $sMaintanceFile));

        $tpl->set_file( 'page', 'maintenance.htt');

        $tpl->set_block( 'page', 'main_block', 'main');

        if( defined( 'DEFAULT_CHARSET')) {

          $charset = DEFAULT_CHARSET;

        } else {

          $charset = 'utf-8';

        }

        $tpl->set_var( 'PAGE_TITLE', $PAGE_TITLE);

        $tpl->set_var( 'CHECK_BACK', $MESSAGE['GENERIC_PLEASE_CHECK_BACK_SOON']);

        $tpl->set_var( 'CHARSET', $charset);

        $tpl->set_var( 'WB_URL', WB_URL);

        $tpl->set_var( 'BE_PATIENT', $MESSAGE['GENERIC_BE_PATIENT']);

        $tpl->set_var( 'THEME_URL', THEME_URL);

        $tpl->set_var( 'PAGE_ICON', $PAGE_ICON);

        $tpl->set_var( 'LANGUAGE', $LANGUAGE);

        $tpl->parse( 'main', 'main_block', false);

        $tpl->pparse( 'output', 'page');

        exit();

      } else {

        require_once ( WB_PATH.'/languages/'.DEFAULT_LANGUAGE.'.php');

        echo '<!DOCTYPE html PUBLIC "-W3CDTD XHTML 1.0 TransitionalEN" "http:www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

            <head><title>'.$MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'].'</title>

            <style type="text/css"><!-- body{ font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 12px; background-image: url("'.

          WB_URL.'/templates/'.DEFAULT_THEME.

          '/images/background.png");background-repeat: repeat-x; background-color: #A8BCCB; text-align: center; }

            h1 { margin: 0; padding: 0; font-size: 18px; color: #000; text-transform: uppercase;}--></style></head><body>

            <br /><h1>'.$MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'].'</h1><br />

            '.$MESSAGE['GENERIC_PLEASE_CHECK_BACK_SOON'].'</body></html>';

      }

      flush();

      exit();

    }

  }

    /**

     * wb::mail()

     *

     * @param string $sFromAddress

     * @param string $toAddress, comma sepated list of adresses

     * @param string $sSubject

     * @param string $sMessage

     * @param string $sFromname

     * @param string $toName

     * @param string $sReplyTo

     * @param string $sReplyToName

     * @param string $sMessagePath

     * @param array  $aAttachment=array (

     *                            'File to the attachment',

     *                             )

     * @return

     */

    public function mail(

                    $sFromAddress,

                    $toAddress,

                    $sSubject,

                    $sMessage,

                    $sFromname='',

                    $toName='',

                    $sReplyToAddress='',

                    $sReplyToName='',

                    $sMessagePath='',

                    $aAttachment=null

                    ) {

        $aParameters      = array();

        $aFromAddress     = array();

        $aToAddress       = array();

        $aReplyToAddress  = array();

        // Strip breaks and trim

        if ($sFromname!='') {

            $sFromname    = preg_replace( "/[^a-z0-9 !?:;,.\/_\-=+@#$&\*\(\)]/im", "", $sFromname );

            $sFromname    = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $sFromname );

        }

        $sFromAddress     = trim(preg_replace('/[\r\n]/', '', $sFromAddress));

        if ($toName!='') {

            $toName       = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $toName );

        }

        $toAddress        = trim(preg_replace('/[\r\n]/', '', $toAddress));

        if ($sReplyToName!='') {

            $sReplyToName = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $sReplyToName );

        }

        //Set who the message is to be sent from

        $sReplyToAddress  = trim(preg_replace('/[\r\n]/', '', $sReplyToAddress));

        $sReplyToAddress  = ( ($sReplyToAddress=='')?$toAddress:$sReplyToAddress );

        $sSubject         = trim(preg_replace('/[\r\n]/', '', $sSubject));

        // sanitize parameter to prevent injection

        $sMessage         = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $sMessage );

        // create PHPMailer object and define default settings

        $myMail = new wbmailer(true);

        try {

            $html   =  preg_replace('/[\n\r]/', '',nl2br($this->StripCodeFromText($sMessage)));

            $plain  = $myMail->html2text($html);

            // convert commaseperated toAdresses List to an array

            $aToAddress = $myMail->parseAddresses( $toAddress, false );

            if ($sFromAddress!='') {

            // set user defined from address

                $myMail->setFrom($sFromAddress, $sFromname);

            // set user defined to address

                $myMail->AddAddress($toAddress, $toName);

            // set user defined to ReplyTo

                if ($sReplyToAddress!='') {$myMail->addReplyTo($sReplyToAddress, $sReplyToName);}

            }

    //Set the subject line

            $myMail->Subject = $sSubject;

            $myMail->wrapText($html, 80);

    //Read an HTML message body from an external file, convert referenced images to embedded,

    //convert HTML into a basic plain-text alternative body

            $myMail->msgHTML( $html, $sMessagePath, true);

            if( is_array( $aAttachment )) {

                foreach($aAttachment as $sFile) {

                    $myMail->AddAttachment( $sFile );

                }

            }

            if( $myMail->getReplyToAddresses() ) { }

    //send the message, check for errors

            $myMail->Send();

            return true;

        } catch (phpmailerException $e) {

            echo $e->errorMessage(); //Pretty error messages from PHPMailer

        } catch (Exception $e) {

            echo $e->getMessage(); //Boring error messages from anything else!

        }

    }

/*--------------------------------------------------------------------------------------------*/

    // Validate send email

    public function _mail($fromaddress, $toaddress, $subject, $message, $fromname='') {

/*

    INTEGRATED OPEN SOURCE PHPMAILER CLASS FOR SMTP SUPPORT AND MORE

    SOME SERVICE PROVIDERS DO NOT SUPPORT SENDING MAIL VIA PHP AS IT DOES NOT PROVIDE SMTP AUTHENTICATION

    NEW WBMAILER CLASS IS ABLE TO SEND OUT MESSAGES USING SMTP WHICH RESOLVE THESE ISSUE (C. Sommer)

    NOTE:

    To use SMTP for sending out mails, you have to specify the SMTP host of your domain

    via the Settings panel in the backend of Website Baker

*/

        $fromaddress = preg_replace('/[\r\n]/', '', $fromaddress);

        $toaddress = preg_replace('/[\r\n]/', '', $toaddress);

        $subject = preg_replace('/[\r\n]/', '', $subject);

        // $message_alt = $message;

        // $message = preg_replace('/[\r\n]/', '<br \>', $message);

        // create PHPMailer object and define default settings

        $myMail = new wbmailer();

        // set user defined from address

        if ($fromaddress!='') {

            if($fromname!='') $myMail->FromName = $fromname;  // FROM-NAME

            $myMail->From = $fromaddress;                     // FROM:

            $myMail->AddReplyTo($fromaddress);                // REPLY TO:

        }

        // define recepient and information to send out

        $myMail->AddAddress($toaddress);                      // TO:

        $myMail->Subject = $subject;                          // SUBJECT

        $myMail->Body = nl2br($message);                      // CONTENT (HTML)

        $myMail->AltBody = strip_tags($message);              // CONTENT (TEXT)

        // check if there are any send mail errors, otherwise say successful

        if (!$myMail->Send()) {

            return false;

        } else {

            return true;

        }

    }

 /**

  * checks if there is an alternative Theme template

  *

  * @param string $sThemeFile set the template.htt

  * @return string the relative theme path

  *

  */

    public function correct_theme_source($sThemeFile = 'start.htt') {

    $sRetval = $sThemeFile;

    if (file_exists(THEME_PATH.'/templates/'.$sThemeFile )) {

        $sRetval = THEME_PATH.'/templates/'.$sThemeFile;

    } else {

        if (is_readable(ADMIN_PATH.'/themes/templates/'.$sThemeFile )) {

        $sRetval = ADMIN_PATH.'/themes/templates/'.$sThemeFile;

        } else {

            throw new InvalidArgumentException('missing template file '.$sThemeFile);

        }

    }

    return $sRetval;

    }

    /**

     * Check if a foldername doesn't have invalid characters

     *

     * @param String $str to check

     * @return Bool

     */

    public function checkFolderName($str){

        return !( preg_match('#\^|\\\|\/|\.|\?|\*|"|\'|\<|\>|\:|\|#i', $str) ? TRUE : FALSE );

    }

    /**

     * Check the given path to make sure current path is within given basedir

     * normally document root

     *

     * @param String $sCurrentPath

     * @param String $sBaseDir

     * @return $sCurrentPath or FALSE

     */

    public function checkpath($sCurrentPath, $sBaseDir = WB_PATH){

        // Clean the cuurent path

        $sCurrentPath = rawurldecode($sCurrentPath);

        $sCurrentPath = realpath($sCurrentPath);

        $sBaseDir = realpath($sBaseDir);

        // $sBaseDir needs to exist in the $sCurrentPath

        $pos = stripos ($sCurrentPath, $sBaseDir );

        if ( $pos === FALSE ){

            return false;

        } elseif( $pos == 0 ) {

            return $sCurrentPath;

        } else {

            return false;

        }

    }

/**

 * remove <?php code ?>, [[text]], link, script, scriptblock and styleblock from a given string

 * and return the cleaned string

 *

 * @param string $sValue

 * @returns

 *    false: if @param is not a string

 *    string: cleaned string

 */

    public function StripCodeFromText($mText, $iFlags = Sanitize::REMOVE_DEFAULT )

    {

        if (!class_exists('Sanitize')) { include __DIR__.'/Sanitize.php'; }

        return Sanitize::StripFromText($mText, $iFlags);

    }

  /**

   * ReplaceAbsoluteMediaUrl

   * @param string $sContent

   * @return string

   * @description Replace URLs witch are pointing into MEDIA_DIRECTORY with an URL

   *              independend placeholder

   */

/*

  public function ReplaceAbsoluteMediaUrl( $sContent)

  {

//    $oReg = WbAdaptor::getInstance();

    if( ini_get( 'magic_quotes_gpc') == true) {

      $sContent = $this->strip_slashes( $sContent);

    }

    if( is_string( $sContent)) {

      $sRelUrl = preg_replace('/^https?:\/\/[^\/]+(.*)/is', '\1', WB_URL);

      $sDocumentRootUrl = str_replace($sRelUrl, '', WB_URL);

      $sMediaUrl = WB_URL.MEDIA_DIRECTORY.'/';

      $aSearchfor = array(

          '@(<[^>]*=\s*")('.preg_quote($sMediaUrl).

          ')([^">]*".*>)@siU', '@(<[^>]*=\s*")('.preg_quote( WB_URL.'/').')([^">]*".*>)@siU',

          '/(<[^>]*?=\s*\")(\/+)([^\"]*?\"[^>]*?)/is',

          '/(<[^>]*=\s*")('.preg_quote($sMediaUrl, '/').')([^">]*".*>)/siU'

          );

      $aReplacements = array( '$1{SYSVAR:AppUrl.MediaDir}$3', '$1{SYSVAR:AppUrl}$3','\1'.$sDocumentRootUrl.'/\3','$1{SYSVAR:MEDIA_REL}$3' );

      $sContent = preg_replace( $aSearchfor, $aReplacements, $sContent);

    }

    return $sContent;

  }

  public function OldReplaceAbsoluteMediaUrl( $sContent)

  {

    $sRelUrl = preg_replace('/^https?:\/\/[^\/]+(.*)/is', '\1', WB_URL);

    $sDocumentRootUrl = str_replace($sRelUrl, '', WB_URL);

    $sMediaUrl = WB_URL.MEDIA_DIRECTORY;

    $aPatterns = array(

        '/(<[^>]*?=\s*\")(\/+)([^\"]*?\"[^>]*?)/is',

        '/(<[^>]*=\s*")('.preg_quote($sMediaUrl, '/').')([^">]*".*>)/siU'

    );

    $aReplacements = array(

        '\1'.$sDocumentRootUrl.'/\3',

        '$1{SYSVAR:MEDIA_REL}$3'

    );

    $content = preg_replace($aPatterns, $aReplacements, $content);

    return $sContent;

  }

*/

/**

 * get all defined variables from an info.php file

 * @param string $sFilePath  full path and filename