WB 2.11.0

<?php

/**

 *

 * @category        framework

 * @package         frontend

 * @author          Ryan Djurovich, WebsiteBaker Project

 * @copyright       WebsiteBaker Org. e.V.

 * @link            http://websitebaker.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.3

 * @requirements    PHP 5.3.6 and higher

 * @version         $Id$

 * @filesource      $HeadURL$

 * @lastmodified    $Date$

 *

 */

/* -------------------------------------------------------- */

// Must include code to stop this file being accessed directly

if (defined('WB_PATH') == false) { die("Cannot access this file directly"); }

/* -------------------------------------------------------- */

// Include depending classes if needed

if (!class_exists('Template', false))              { require(WB_PATH.'/include/phplib/template.inc'); }

if (!class_exists('database', false))              { require(__DIR__.'/class.database.php'); }

if (!class_exists('wbmailer', false))              { require(__DIR__.'/class.wbmailer.php'); }

if (!class_exists('SecureTokens', false))          { require(__DIR__.'/SecureTokens.php'); }

if (!class_exists('SecureTokensInterface', false)) { require(__DIR__.'/SecureTokensInterface.php'); }

if (!class_exists('Sanitize', false )) { include __DIR__.'/Sanitize.php'; }

class wb extends SecureTokensInterface

{

  /**

   @var object instance of the database object */

  protected $_oDb = null;

  protected $oDb = null;

  /**

   @var object instance holds several values from the application global scope */

  protected $_oReg = null;

  /**

   @var object instance holds all of the translations */

  protected $_oTrans = null;

  protected $oTrans = null;

//    public $password_chars = 'a-zA-Z0-9\_\-\!\#\*\+\@\$\&\:';    // General initialization function

    public $password_chars = '[\w!#$%&*+\-.:=?@\|]';    // General initialization function

    public function  __construct($mode = 0) {

        parent::__construct();

        $this->oDb = $this->_oDb    = $GLOBALS['database'];

        $this->oTrans = $this->_oTrans = $GLOBALS['oTrans'];

    }

/**

 *

 *

 * @return comma separate list of first visible languages

 *

 */

    public function getLanguagesInUsed()

    {

        $aRetval = [];

        $sql = 'SELECT DISTINCT `language`, `page_id` '

             . 'FROM `'.$this->oDb->sTablePrefix.'pages` '

             . 'WHERE `level`=0 AND `visibility` NOT IN(\'none\', \'hidden\') '

             . 'ORDER BY `language`, `position`';

        if (($oResult = $this->oDb->query($sql))) {

            while ( $aRow = $oResult->fetchRow( MYSQLI_ASSOC)) {

                if( !$this->isPageVisible($aRow['page_id'])) { continue; }

                $aRetval[] = $aRow['language'];

            }

        }

        return implode(',', array_unique($aRetval));

    }

  /**

   * Created parse_url utf-8 compatible function

   *

   * @param string $url The string to decode

   * @return array Associative array containing the different components

   *

   */

    public function mb_parse_url( $url)

    {

      $encodedUrl = preg_replace_callback( '%[^:/?#&=\.]+%usD', create_function( '$aMatches',

        ';return urlencode($aMatches[0]);'), /*                                   'urlencode(\'$0\')', */ $url);

      $components = parse_url( $encodedUrl);

      foreach ( $components as &$component) $component = urldecode( $component);

      return $components;

    }

/* ****************

 * check if one or more group_ids are in both group_lists

 *

 * @access public

 * @param mixed $groups_list1: an array or a coma seperated list of group-ids

 * @param mixed $groups_list2: an array or a coma seperated list of group-ids

 * @param array &$matches: an array-var whitch will return possible matches

 * @return bool: true there is a match, otherwise false

 */

    public function is_group_match($mGroupsList1 = '', $mGroupsList2 = '', &$matches = null)

    {

        if ($mGroupsList1 == '' || $mGroupsList2 == '') { return false; }

        if (!is_array($mGroupsList1)) {

            $mGroupsList1 = preg_split('/[\s,=+\-\;\:\.\|]+/', $mGroupsList1, -1, PREG_SPLIT_NO_EMPTY);

        }

        if (!is_array($mGroupsList2)) {

            $mGroupsList2 = preg_split('/[\s,=+\-\;\:\.\|]+/', $mGroupsList2, -1, PREG_SPLIT_NO_EMPTY);

        }

        $matches = array_intersect($mGroupsList1, $mGroupsList2);

        return (sizeof($matches) != 0);

    }

/**

 * @param mixed $groups_list is an array or a coma seperated list of group-ids

 * @return bool: true if current user is member of one of this groups or its the superadmin

 */

    public function ami_group_member( $groups_list = '' )

    {

        return ($this->get_user_id() == 1) || $this->is_group_match( $groups_list, $this->get_groups_id());

    }

/**

 * Alias for isPageVisible()

 * @param mixed $mPage  can be a integer (PageId) or an array

 * @return bool

 * @deprecated since 2.10.0

 */

    public function page_is_visible($mPage)

    {

        // get PageId from array or object

        if (is_array($mPage)) {

            $iPageId = (int) $mPage['page_id'];

        } elseif (is_integer($mPage)) {

            $iPageId = $mPage;

        } else {

            $iPageId = 0;

        }

        return $this->isPageVisible($iPageId);

    }

/**

 * isViewingPageAllowed

 * @param int $iPageId

 * @param int $iOtherUserId  (optional) test for other then current user

 * @return bool

 * @description if current user has permission to see this page

 *   the visibility logic follows this scheme:

 *   false : ([none] | [deleted])

 *   false : ([private] | [registered]) and [not authenticated]

 *   true  : ([private] | [registered]) and [authenticated]

 *   true  : [public] | [hidden]

 */

    public function isPageVisible($iPageId, $iOtherUserId = null)

    {

        try {

            // sanitize optional user_id

            if (version_compare(PHP_VERSION, '7.0.0', '>=')) {

                $iUserId = (int) ($iOtherUserId ?? $this->get_user_id());

            } else {

                $iUserId = (int) (isset($iOtherUserId) ? $iOtherUserId : $this->get_user_id());

            }

            // get this page record

            $sql = 'SELECT * FROM `'.$this->oDb->sTablePrefix.'pages` '

                 . 'WHERE `page_id`='.$iPageId;

            $oRecords = $this->oDb->query($sql);

            if (!($oPage = $oRecords->fetchObject())) {

                throw new InvalidArgumentException('request not existing PageId ['.$iPageId.']');

            }

            //

            switch ($oPage->visibility) {

                case 'hidden':

                case 'public':

                    $bRetval = true;

                    break;

                case 'private':

                case 'registered':

                    if (($bRetval = $this->is_authenticated())) {

                        $bRetval = (

                            $this->ami_group_member($oPage->viewing_groups) ||

                            $this->is_group_match($iUserId, $oPage->viewing_users)

                        );

                    }

                    break;

                default:

                    $bRetval = false;

                    break;

            }

        } catch(Exception $e) {

            $bRetval = false;

        }

        return $bRetval;

    }

/**

 * Alias for isPageActive()

 * @param mixed $mPage  can be a integer (PageId) or an array

 * @return bool  true if at least one active section is found

 * @deprecated since 2.10.0

 */

    public function page_is_active($mPage)

    {

        // get PageId from array

        if (is_array($mPage)) {

            $iPageId = $mPage['page_id'];

        } elseif (is_integer($mPage)) {

            $iPageId = $mPage;

        } else {

            $iPageId = 0;

        }

        return $this->isPageActive($iPageId);

    }

/**

 * Check if there is at least one active section on this page

 * @param int $iPageId

 * @return bool  true if at least one active section is found

 */

    public function isPageActive($iPageId)

    {

        try {

            // seach for active sections in this page

            $iNow = time();

            $sql = 'SELECT COUNT(*) FROM `'.$this->oDb->sTablePrefix.'sections` '

                 . 'WHERE `page_id`='.(int) $iPageId.' AND '

                 .       '('.$iNow.' BETWEEN `publ_start` AND `publ_end`) OR '

                 .       '('.$iNow.' > `publ_start` AND `publ_end`=0) ';

            $bRetval = (bool) $this->oDb->get_one($sql);

        } catch (Exception $e) {

            $bRetval = false;

        }

        return $bRetval;

    }

    // Check whether we should show a page or not (for front-end)

    public function show_page($mPage)

    {

        $retval = ($this->page_is_visible($mPage) && $this->page_is_active($mPage));

        return $retval;

    }

    // Check if the user is already authenticated or not

    public function is_authenticated() {

        $retval = (

            isset($_SESSION['USER_ID']) AND

            $_SESSION['USER_ID'] != "" AND

            is_numeric($_SESSION['USER_ID'])

        );

        return (bool) $retval;

    }

    // Modified addslashes function which takes into account magic_quotes

    public function add_slashes($input) {

        if( get_magic_quotes_gpc() || (!is_string($input)) ) {

            return $input;

        }

        return addslashes($input);

    }

    // Ditto for stripslashes

    // Attn: this is _not_ the counterpart to $this->add_slashes() !

    // Use stripslashes() to undo a preliminarily done $this->add_slashes()

    // The purpose of $this->strip_slashes() is to undo the effects of magic_quotes_gpc==On

    public function strip_slashes($input) {

        if ( !get_magic_quotes_gpc() || ( !is_string($input) ) ) {

            return $input;

        }

        return stripslashes($input);

    }

    // Escape backslashes for use with mySQL LIKE strings

    public function escape_backslashes($input) {

        return str_replace("\\","\\\\",$input);

    }

    public function page_link($link){

        // Check for :// in the link (used in URL's) as well as mailto:

        if(strstr($link, '://') == '' AND substr($link, 0, 7) != 'mailto:') {

            return WB_URL.PAGES_DIRECTORY.$link.PAGE_EXTENSION;

        } else {

            return $link;

        }

    }

    // Get POST data

    public function get_post($field) {

        return (isset($_POST[$field]) ? $_POST[$field] : null);

    }

    // Get POST data and escape it

    public function get_post_escaped($field) {

        $result = $this->get_post($field);

        return (is_null($result)) ? null : $this->add_slashes($result);

    }

    // Get GET data

    public function get_get($field) {

        return (isset($_GET[$field]) ? $_GET[$field] : null);

    }

    // Get SESSION data

    public function get_session($field) {

        return (isset($_SESSION[$field]) ? $_SESSION[$field] : null);

    }

    // Get SERVER data

    public function get_server($field) {

        return (isset($_SERVER[$field]) ? $_SERVER[$field] : null);

    }

    // Get the current users id

    public function get_user_id() {

        return $this->get_session('USER_ID');

    }

    // Get the current users group id

    public function get_group_id() {

        return $this->get_session('GROUP_ID');

    }

    // Get the current users group ids

    public function get_groups_id() {

        return explode(",", $this->get_session('GROUPS_ID'));

    }

    // Get the current users group name

    public function get_group_name() {

        return implode(",", $this->get_session('GROUP_NAME'));

    }

    // Get the current users group name

    public function get_groups_name() {

        return $this->get_session('GROUP_NAME');

    }

    // Get the current users username

    public function get_username() {

        return $this->get_session('USERNAME');

    }

    // Get the current users display name

    public function get_display_name() {

        return $this->get_session('DISPLAY_NAME');

    }

    // Get the current users email address

    public function get_email() {

        return $this->get_session('EMAIL');

    }

    // Get the current users home folder

    public function get_home_folder() {

        return $this->get_session('HOME_FOLDER');

    }

    // Get the current users timezone

    public function get_timezone() {

        return (isset($_SESSION['USE_DEFAULT_TIMEZONE']) ? '-72000' : $_SESSION['TIMEZONE']);

    }

    // Validate supplied email address

    public function validate_email($email) {

        if(function_exists('idn_to_ascii')){ /* use pear if available */

            $email = idn_to_ascii($email);

        }else {

            require_once(WB_PATH.'/include/idna_convert/idna_convert.class.php');

            $IDN = new idna_convert();

            $email = $IDN->encode($email);

            unset($IDN);

        }

        // regex from NorHei 2011-01-11

        $retval = preg_match("/^((([!#$%&'*+\\-\/\=?^_`{|}~\w])|([!#$%&'*+\\-\/\=?^_`{|}~\w][!#$%&'*+\\-\/\=?^_`{|}~\.\w]{0,}[!#$%&'*+\\-\/\=?^_`{|}~\w]))[@]\w+(([-.]|\-\-)\w+)*\.\w+(([-.]|\-\-)\w+)*)$/", $email);

        return ($retval != false);

    }

  /**

   * replace header('Location:...  with new method

   * if header send failed you get a manuell redirected link, so script don't break

   *

   * @param string $location, redirected url

   * @return void

   */

    public function send_header( $location)

    {

      if( !headers_sent()) {

        header( 'Location: '.$location);

        exit( 0);

      } else {

        //            $aDebugBacktrace = debug_backtrace();

        //            array_walk( $aDebugBacktrace, create_function( '$a,$b', 'print "<br /><b>". basename( $a[\'file\'] ). "</b> &nbsp; <font color=\"red\">{$a[\'line\']}</font> &nbsp; <font color=\"green\">{$a[\'function\']} ()</font> &nbsp; -- ". dirname( $a[\'file\'] ). "/";' ) );

        $msg = "<div style=\"text-align:center;\"><h2>An error has occurred</h2><p>The <strong>Redirect</strong> could not be start automatically.\n".

          "Please click <a style=\"font-weight:bold;\" "."href=\"".$location."\">on this link</a> to continue!</p></div>\n";

        throw new Exception( $msg);

      }

    }

/* ****************

 * set one or more bit in a integer value

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2set: the bitmask witch shall be added to value

 * @return void

 */

    public function bit_set( &$value, $bits2set )

    {

        $value |= $bits2set;

    }

/* ****************

 * reset one or more bit from a integer value

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2reset: the bitmask witch shall be removed from value

 * @return void

 */

    public function bit_reset( &$value, $bits2reset)

    {

        $value &= ~$bits2reset;

    }

/* ****************

 * check if one or more bit in a integer value are set

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2set: the bitmask witch shall be added to value

 * @return void

 */

    public function bit_isset( $value, $bits2test )

    {

        return (($value & $bits2test) == $bits2test);

    }

    // Print a success message which then automatically redirects the user to another page

    public function print_success( $message, $redirect = 'index.php' ) {

        global $TEXT;

        if(is_array($message)) {

           $message = implode ('<br />',$message);

        }

        // fetch redirect timer for sucess messages from settings table

        $redirect_timer = ((defined( 'REDIRECT_TIMER' )) && (REDIRECT_TIMER <= 10000)) ? REDIRECT_TIMER : 0;

        // add template variables

        // Setup template object, parse vars to it, then parse it

        $tpl = new Template(dirname($this->correct_theme_source('success.htt')));

        $tpl->set_file( 'page', 'success.htt' );

        $tpl->set_block( 'page', 'main_block', 'main' );

        $tpl->set_block( 'main_block', 'show_redirect_block', 'show_redirect' );

        $tpl->set_var( 'MESSAGE', $message );

        $tpl->set_var( 'REDIRECT', $redirect );

        $tpl->set_var( 'REDIRECT_TIMER', $redirect_timer );

        $tpl->set_var( 'NEXT', $TEXT['NEXT'] );

        $tpl->set_var( 'BACK', $TEXT['BACK'] );

        if ($redirect_timer == -1) {

            $tpl->set_block( 'show_redirect', '' );

        }

        else {

            $tpl->parse( 'show_redirect', 'show_redirect_block', true );

        }

        $tpl->parse( 'main', 'main_block', false );

        $tpl->pparse( 'output', 'page' );

    }

    // Print an error message

    public function print_error($message, $link = 'index.php', $auto_footer = true) {

        global $TEXT;

        if(is_array($message)) {

           $message = implode ('<br />',$message);

        }

        // Setup template object, parse vars to it, then parse it

        $success_template = new Template(dirname($this->correct_theme_source('error.htt')));

        $success_template->set_file('page', 'error.htt');

        $success_template->set_block('page', 'main_block', 'main');

        $success_template->set_var('MESSAGE', $message);

        $success_template->set_var('LINK', $link);

        $success_template->set_var('BACK', $TEXT['BACK']);

        $success_template->parse('main', 'main_block', false);

        $success_template->pparse('output', 'page');

        if ( $auto_footer == true ) {

            if ( method_exists($this, "print_footer") ) {

                $this->print_footer();

            }

        }

        exit();

    }

  /*

  * @param string $message: the message to format

  * @param string $status:  ('ok' / 'error' / '') status defines the apereance of the box

  * @return string: the html-formatted message (using template 'message.htt')

  */

  public function format_message( $message, $status = 'ok')

  {

    $retval = '';

//    if ( ($message == '') ) { return $retval; }

    $id = uniqid( 'x');

    $tpl = new Template( dirname( $this->correct_theme_source( 'message.htt')));

    $tpl->set_file( 'page', 'message.htt');

    $tpl->set_block( 'page', 'main_block', 'main');

    $tpl->set_var( 'MESSAGE', $message);

    $tpl->set_var( 'THEME_URL', THEME_URL);

    $tpl->set_var( 'ID', $id);

    if( $status == 'ok' || $status == 'error' || $status = 'warning') {

      $tpl->set_var( 'BOX_STATUS', ' box-'.$status);

    } else {

      $tpl->set_var( 'BOX_STATUS', '');

    }

    $tpl->set_var( 'STATUS', $status);

    if( !defined( 'REDIRECT_TIMER')) {

      define( 'REDIRECT_TIMER', -1);

    }

    if( $status != 'error') {

      switch ( REDIRECT_TIMER):

        case 0: // do not show message

          unset( $tpl);

          break;

        case - 1: // show message permanently

          $tpl->parse( 'main', 'main_block', false);

          $retval = $tpl->finish( $tpl->parse( 'output', 'page', false));

          unset( $tpl);

          break;

        default: // hide message after REDIRECTOR_TIMER milliseconds

          $retval = '<script type="text/javascript">/* <![CDATA[ */ function '.$id.'_hide() {'.

            'document.getElementById(\''.$id.'\').style.display = \'none\';}'.'window.setTimeout(\''.$id.

            '_hide()\', '.REDIRECT_TIMER.');/* ]]> */ </script>';

          $tpl->parse( 'main', 'main_block', false);

          $retval = $tpl->finish( $tpl->parse( 'output', 'page', false)).$retval;

          unset( $tpl);

      endswitch;

    } else {

      $tpl->parse( 'main', 'main_block', false);

      $retval = $tpl->finish( $tpl->parse( 'output', 'page', false)).$retval;

      unset( $tpl);

    }

    return $retval;

  }

  /*

  * @param string $type: 'locked'(default)  or 'new'

  * @return void: terminates application

  * @description: 'locked' >> Show maintenance screen and terminate, if system is locked

  *               'new' >> Show 'new site under construction'(former print_under_construction)

  */

  public function ShowMaintainScreen( $type = 'locked')

  {

    global $database, $MESSAGE;

    $LANGUAGE = strtolower( ( isset( $_SESSION['LANGUAGE']) ? $_SESSION['LANGUAGE'] : LANGUAGE));

    $PAGE_TITLE = $MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'];

    $PAGE_ICON = 'negative';

    $show_screen = false;

    if( $type == 'locked') {

      $curr_user = ( intval( isset( $_SESSION['USER_ID']) ? $_SESSION['USER_ID'] : 0));

      if( ( defined( 'SYSTEM_LOCKED') && ( int)SYSTEM_LOCKED == 1) && ( $curr_user != 1)) {

        header( $_SERVER['SERVER_PROTOCOL'].' 503 Service Unavailable');

        // first kick logged users out of the system

        // delete all remember keys from table 'user' except user_id=1

        $sql = 'UPDATE `'.TABLE_PREFIX.'users` SET `remember_key`=\'\' ';

        $sql .= 'WHERE `user_id`<>1';

        $database->query( $sql);

        // delete remember key-cookie if set

        if( isset( $_COOKIE['REMEMBER_KEY'])) {

          setcookie( 'REMEMBER_KEY', '', time() - 3600, '/');

        }

        // overwrite session array

        $_SESSION = array();

        // delete session cookie if set

        if( ini_get( "session.use_cookies")) {

          $params = session_get_cookie_params();

          setcookie( session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"],

            $params["httponly"]);

        }

        // delete the session itself

        session_destroy();

        $PAGE_TITLE = $MESSAGE['GENERIC_WEBSITE_LOCKED'];

        $PAGE_ICON = 'system';

        $show_screen = true;

      }

    } else {

      header( $_SERVER['SERVER_PROTOCOL'].' 503 Service Unavailable');

      $show_screen = true;

    }

    if( $show_screen) {

      $sMaintanceFile = $this->correct_theme_source( 'maintenance.htt');

      if( file_exists( $sMaintanceFile)) {

        $tpl = new Template( dirname( $sMaintanceFile));

        $tpl->set_file( 'page', 'maintenance.htt');

        $tpl->set_block( 'page', 'main_block', 'main');

        if( defined( 'DEFAULT_CHARSET')) {

          $charset = DEFAULT_CHARSET;

        } else {

          $charset = 'utf-8';

        }

        $tpl->set_var( 'PAGE_TITLE', $PAGE_TITLE);

        $tpl->set_var( 'CHECK_BACK', $MESSAGE['GENERIC_PLEASE_CHECK_BACK_SOON']);

        $tpl->set_var( 'CHARSET', $charset);

        $tpl->set_var( 'WB_URL', WB_URL);

        $tpl->set_var( 'BE_PATIENT', $MESSAGE['GENERIC_BE_PATIENT']);

        $tpl->set_var( 'THEME_URL', THEME_URL);

        $tpl->set_var( 'PAGE_ICON', $PAGE_ICON);

        $tpl->set_var( 'LANGUAGE', $LANGUAGE);

        $tpl->parse( 'main', 'main_block', false);

        $tpl->pparse( 'output', 'page');

        exit();

      } else {

        require_once ( WB_PATH.'/languages/'.DEFAULT_LANGUAGE.'.php');

        echo '<!DOCTYPE html PUBLIC "-W3CDTD XHTML 1.0 TransitionalEN" "http:www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

            <head><title>'.$MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'].'</title>

            <style type="text/css"><!-- body{ font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 12px; background-image: url("'.

          WB_URL.'/templates/'.DEFAULT_THEME.

          '/images/background.png");background-repeat: repeat-x; background-color: #A8BCCB; text-align: center; }

            h1 { margin: 0; padding: 0; font-size: 18px; color: #000; text-transform: uppercase;}--></style></head><body>

            <br /><h1>'.$MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'].'</h1><br />

            '.$MESSAGE['GENERIC_PLEASE_CHECK_BACK_SOON'].'</body></html>';

      }

      flush();

      exit();

    }

  }

    /**

     * wb::mail()

     *

     * @param string $sFromAddress

     * @param string $toAddress, comma sepated list of adresses

     * @param string $sSubject

     * @param string $sMessage

     * @param string $sFromname

     * @param string $toName

     * @param string $sReplyTo

     * @param string $sReplyToName

     * @param string $sMessagePath

     * @param array  $aAttachment=array (

     *                            'File to the attachment',

     *                             )

     * @return

     */

    public function mail(

                    $sFromAddress,

                    $toAddress,

                    $sSubject,

                    $sMessage,

                    $sFromname='',

                    $toName='',

                    $sReplyToAddress='',

                    $sReplyToName='',

                    $sMessagePath='',

                    $aAttachment=null

                    ) {

        $aParameters      = array();

        $aFromAddress     = array();

        $aToAddress       = array();

        $aReplyToAddress  = array();

        // Strip breaks and trim

        if ($sFromname!='') {

            $sFromname    = preg_replace( "/[^a-z0-9 !?:;,.\/_\-=+@#$&\*\(\)]/im", "", $sFromname );

            $sFromname    = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $sFromname );

        }

        $sFromAddress     = trim(preg_replace('/[\r\n]/', '', $sFromAddress));

        if ($toName!='') {

            $toName       = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $toName );

        }

        $toAddress        = trim(preg_replace('/[\r\n]/', '', $toAddress));

        if ($sReplyToName!='') {

            $sReplyToName = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $sReplyToName );

        }

        //Set who the message is to be sent from

        $sReplyToAddress  = trim(preg_replace('/[\r\n]/', '', $sReplyToAddress));

        $sReplyToAddress  = ( ($sReplyToAddress=='')?$toAddress:$sReplyToAddress );

        $sSubject         = trim(preg_replace('/[\r\n]/', '', $sSubject));

        // sanitize parameter to prevent injection

        $sMessage         = preg_replace( "/(content-type:|bcc:|cc:|to:|from:)/im", "", $sMessage );

        // create PHPMailer object and define default settings

        $myMail = new wbmailer(true);

        try {

            $html   =  preg_replace('/[\n\r]/', '',nl2br($this->StripCodeFromText($sMessage)));

            $plain  = $myMail->html2text($html);

            // convert commaseperated toAdresses List to an array

            $aToAddress = $myMail->parseAddresses( $toAddress, false );

            if ($sFromAddress!='') {

            // set user defined from address

                $myMail->setFrom($sFromAddress, $sFromname);

            // set user defined to address

                $myMail->AddAddress($toAddress, $toName);

            // set user defined to ReplyTo

                if ($sReplyToAddress!='') {$myMail->addReplyTo($sReplyToAddress, $sReplyToName);}

            }

    //Set the subject line

            $myMail->Subject = $sSubject;

            $myMail->wrapText($html, 80);

    //Read an HTML message body from an external file, convert referenced images to embedded,

    //convert HTML into a basic plain-text alternative body

            $myMail->msgHTML( $html, $sMessagePath, true);