1:    2:    3:    4:    5:    6:    7:    8:    9:   10:   11:   12:   13:   14:   15:   16:   17:   18:   19:   20:   21:   22:   23:   24:   25:   26:   27:   28:   29:   30:   31:   32:   33:   34:   35:   36:   37:   38:   39:   40:   41:   42:   43:   44:   45:   46:   47:   48:   49:   50:   51:   52:   53:   54:   55:   56:   57:   58:   59:   60:   61:   62:   63:   64:   65:   66:   67:   68:   69:   70:   71:   72:   73:   74:   75:   76:   77:   78:   79:   80:   81:   82:   83:   84:   85:   86:   87:   88:   89:   90:   91:   92:   93:   94:   95:   96:   97:   98:   99:  100:  101:  102:  103:  104:  105:  106:  107:  108:  109:  110:  111:  112:  113:  114:  115:  116:  117:  118:  119:  120:  121:  122:  123:  124:  125:  126:  127:  128:  129:  130:  131:  132:  133:  134:  135:  136:  137:  138:  139:  140:  141:  142:  143:  144:  145:  146:  147:  148:  149:  150:  151:  152:  153:  154:  155:  156:  157:  158:  159:  160:  161:  162:  163:  164:  165:  166:  167:  168:  169:  170:  171:  172:  173:  174:  175:  176:  177:  178:  179:  180:  181:  182:  183:  184:  185:  186:  187:  188:  189:  190:  191:  192:  193:  194:  195:  196:  197:  198:  199:  200:  201:  202:  203:  204:  205:  206:  207:  208:  209:  210:  211:  212:  213:  214:  215:  216:  217:  218:  219:  220:  221:  222:  223:  224:  225:  226:  227:  228:  229:  230:  231:  232:  233:  234:  235:  236:  237:  238:  239:  240:  241:  242:  243:  244:  245:  246:  247:  248:  249:  250:  251:  252:  253:  254:  255:  256:  257:  258:  259:  260:  261:  262:  263:  264:  265:  266:  267:  268:  269:  270:  271:  272:  273:  274:  275:  276:  277:  278:  279:  280:  281:  282:  283:  284:  285:  286:  287:  288:  289:  290:  291:  292:  293:  294:  295:  296:  297:  298:  299:  300:  301:  302:  303:  304:  305:  306:  307:  308:  309:  310:  311:  312:  313:  314:  315:  316:  317:  318:  319:  320:  321:  322:  323:  324:  325:  326:  327:  328:  329:  330:  331:  332:  333:  334:  335:  336:  337:  338:  339:  340:  341:  342:  343:  344:  345:  346:  347:  348:  349:  350:  351:  352:  353:  354:  355:  356:  357:  358:  359:  360:  361:  362:  363:  364:  365:  366:  367:  368:  369:  370:  371:  372:  373:  374:  375:  376:  377:  378:  379:  380:  381:  382:  383:  384:  385:  386:  387:  388:  389:  390:  391:  392:  393:  394:  395:  396:  397:  398:  399:  400:  401:  402:  403:  404:  405:  406:  407:  408:  409:  410:  411:  412:  413:  414:  415:  416:  417:  418:  419:  420:  421:  422:  423:  424:  425:  426:  427:  428:  429:  430:  431:  432:  433:  434:  435:  436:  437:  438:  439:  440:  441:  442:  443:  444:  445:  446:  447:  448:  449:  450:  451:  452:  453:  454:  455:  456:  457:  458:  459:  460:  461:  462:  463:  464:  465:  466:  467:  468:  469:  470:  471:  472:  473:  474:  475:  476:  477:  478:  479:  480:  481:  482:  483:  484:  485:  486:  487:  488:  489:  490:  491:  492:  493:  494:  495:  496:  497:  498:  499:  500:  501:  502:  503:  504:  505:  506:  507:  508:  509:  510:  511:  512:  513:  514:  515:  516:  517:  518:  519:  520:  521:  522:  523:  524:  525:  526:  527:  528:  529:  530:  531:  532:  533:  534:  535:  536:  537:  538:  539:  540:  541:  542:  543:  544:  545:  546:  547:  548:  549:  550:  551:  552:  553:  554:  555:  556:  557:  558:  559:  560:  561:  562:  563:  564:  565:  566:  567:  568:  569:  570:  571:  572:  573:  574:  575:  576:  577:  578:  579:  580:  581:  582:  583:  584:  585:  586:  587:  588:  589:  590:  591:  592:  593:  594:  595:  596:  597:  598:  599:  600:  601:  602:  603:  604:  605:  606:  607:  608:  609:  610:  611:  612:  613:  614:  615:  616:  617:  618:  619:  620:  621:  622:  623:  624:  625:  626:  627:  628:  629:  630:  631:  632:  633:  634:  635:  636:  637:  638:  639:  640:  641:  642:  643:  644:  645:  646:  647:  648:  649:  650:  651:  652:  653:  654:  655:  656:  657:  658:  659:  660:  661:  662:  663:  664:  665:  666:  667:  668:  669:  670:  671:  672:  673:  674:  675:  676:  677:  678:  679:  680:  681:  682:  683:  684:  685:  686:  687:  688:  689:  690:  691:  692:  693:  694:  695:  696:  697:  698:  699:  700:  701:  702:  703:  704:  705:  706:  707:  708:  709:  710:  711:  712:  713:  714:  715:  716:  717:  718:  719:  720:  721:  722:  723:  724:  725:  726:  727:  728:  729:  730:  731:  732:  733:  734:  735:  736:  737:  738:  739:  740:  741:  742:  743:  744:  745:  746:  747:  748:  749:  750:  751:  752:  753:  754:  755:  756:  757:  758:  759:  760:  761:  762:  763:  764:  765:  766:  767:  768:  769:  770:  771:  772:  773:  774:  775:  776:  777:  778:  779:  780:  781:  782:  783:  784:  785:  786:  787:  788:  789:  790:  791:  792:  793:  794:  795:  796:  797:  798:  799:  800:  801:  802:  803:  804:  805:  806:  807:  808:  809:  810:  811:  812:  813:  814:  815:  816:  817:  818:  819:  820:  821:  822:  823:  824:  825:  826:  827:  828:  829:  830:  831:  832:  833:  834:  835:  836:  837:  838:  839:  840:  841:  842:  843:  844:  845:  846:  847:  848:  849:  850:  851:  852:  853:  854:  855:  856:  857:  858:  859:  860:  861:  862:  863:  864:  865:  866:  867:  868:  869:  870:  871:  872:  873:  874:  875:  876:  877:  878:  879:  880:  881:  882:  883:  884:  885:  886:  887:  888:  889:  890:  891:  892:  893:  894:  895:  896:  897:  898:  899:  900:  901:  902:  903:  904:  905:  906:  907:  908:  909:  910:  911:  912:  913:  914:  915:  916:  917:  918:  919:  920:  921:  922:  923:  924:  925:  926:  927:  928:  929:  930:  931:  932:  933:  934:  935:  936:  937:  938:  939:  940:  941:  942:  943:  944:  945:  946:  947:  948:  949:  950:  951:  952:  953:  954:  955:  956:  957:  958:  959:  960:  961:  962:  963:  964:  965:  966:  967:  968:  969:  970:  971:  972:  973:  974:  975:  976:  977:  978:  979:  980:  981:  982:  983:  984:  985:  986:  987:  988:  989:  990:  991:  992:  993:  994:  995:  996:  997:  998:  999: 1000: 1001: 1002: 1003: 1004: 1005: 1006: 1007: 1008: 1009: 1010: 1011: 1012: 1013: 1014: 1015: 1016: 1017: 1018: 1019: 1020: 1021: 1022: 1023: 1024: 1025: 1026: 1027: 1028: 1029: 1030: 1031: 1032: 1033: 1034: 1035: 1036: 1037: 1038: 1039: 1040: 1041: 1042: 1043: 1044: 1045: 1046: 1047: 1048: 1049: 1050: 1051: 1052: 1053: 1054: 1055: 1056: 1057: 1058: 1059: 1060: 1061: 1062: 1063: 1064: 1065: 1066: 1067: 1068: 1069: 1070: 1071: 1072: 1073: 1074: 1075: 1076: 1077: 1078: 1079: 1080: 1081: 1082: 1083: 1084: 1085: 1086: 1087: 1088: 1089: 1090: 1091: 1092: 1093: 1094: 1095: 1096: 1097: 1098: 1099: 1100: 1101: 1102: 1103: 1104: 1105: 1106: 1107: 1108: 1109: 1110: 1111: 1112: 1113: 1114: 1115: 1116: 

<?php

/**
 * This file manages... the news. :P
 *
 * Simple Machines Forum (SMF)
 *
 * @package SMF
 * @author Simple Machines https://www.simplemachines.org
 * @copyright 2020 Simple Machines and individual contributors
 * @license https://www.simplemachines.org/about/smf/license.php BSD
 *
 * @version 2.1 RC2
 */

if (!defined('SMF'))
    die('No direct access...');

/**
 * The news dispatcher; doesn't do anything, just delegates.
 * This is the entrance point for all News and Newsletter screens.
 * Called by ?action=admin;area=news.
 * It does the permission checks, and calls the appropriate function
 * based on the requested sub-action.
 */
function ManageNews()
{
    global $context, $txt;

    // First, let's do a quick permissions check for the best error message possible.
    isAllowedTo(array('edit_news', 'send_mail', 'admin_forum'));

    loadTemplate('ManageNews');

    // Format: 'sub-action' => array('function', 'permission')
    $subActions = array(
        'editnews' => array('EditNews', 'edit_news'),
        'mailingmembers' => array('SelectMailingMembers', 'send_mail'),
        'mailingcompose' => array('ComposeMailing', 'send_mail'),
        'mailingsend' => array('SendMailing', 'send_mail'),
        'settings' => array('ModifyNewsSettings', 'admin_forum'),
    );

    call_integration_hook('integrate_manage_news', array(&$subActions));

    // Default to sub action 'main' or 'settings' depending on permissions.
    $_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : (allowedTo('edit_news') ? 'editnews' : (allowedTo('send_mail') ? 'mailingmembers' : 'settings'));

    // Have you got the proper permissions?
    isAllowedTo($subActions[$_REQUEST['sa']][1]);

    // Create the tabs for the template.
    $context[$context['admin_menu_name']]['tab_data'] = array(
        'title' => $txt['news_title'],
        'help' => 'edit_news',
        'description' => $txt['admin_news_desc'],
        'tabs' => array(
            'editnews' => array(
            ),
            'mailingmembers' => array(
                'description' => $txt['news_mailing_desc'],
            ),
            'settings' => array(
                'description' => $txt['news_settings_desc'],
            ),
        ),
    );

    // Force the right area...
    if (substr($_REQUEST['sa'], 0, 7) == 'mailing')
        $context[$context['admin_menu_name']]['current_subsection'] = 'mailingmembers';

    call_helper($subActions[$_REQUEST['sa']][0]);
}

/**
 * Let the administrator(s) edit the news items for the forum.
 * It writes an entry into the moderation log.
 * This function uses the edit_news administration area.
 * Called by ?action=admin;area=news.
 * Requires the edit_news permission.
 * Can be accessed with ?action=admin;sa=editnews.
 *
 * @uses ManageNews template, edit_news sub template.
 */
function EditNews()
{
    global $txt, $modSettings, $context, $sourcedir, $scripturl;
    global $smcFunc;

    require_once($sourcedir . '/Subs-Post.php');

    // The 'remove selected' button was pressed.
    if (!empty($_POST['delete_selection']) && !empty($_POST['remove']))
    {
        checkSession();

        // Store the news temporarily in this array.
        $temp_news = explode("\n", $modSettings['news']);

        // Remove the items that were selected.
        foreach ($temp_news as $i => $news)
            if (in_array($i, $_POST['remove']))
                unset($temp_news[$i]);

        // Update the database.
        updateSettings(array('news' => implode("\n", $temp_news)));

        $context['saved_successful'] = true;

        logAction('news');
    }
    // The 'Save' button was pressed.
    elseif (!empty($_POST['save_items']))
    {
        checkSession();

        foreach ($_POST['news'] as $i => $news)
        {
            if (trim($news) == '')
                unset($_POST['news'][$i]);
            else
            {
                $_POST['news'][$i] = $smcFunc['htmlspecialchars']($_POST['news'][$i], ENT_QUOTES);
                preparsecode($_POST['news'][$i]);
            }
        }

        // Send the new news to the database.
        updateSettings(array('news' => implode("\n", $_POST['news'])));

        $context['saved_successful'] = true;

        // Log this into the moderation log.
        logAction('news');
    }

    // We're going to want this for making our list.
    require_once($sourcedir . '/Subs-List.php');

    $context['page_title'] = $txt['admin_edit_news'];

    // Use the standard templates for showing this.
    $listOptions = array(
        'id' => 'news_lists',
        'get_items' => array(
            'function' => 'list_getNews',
        ),
        'columns' => array(
            'news' => array(
                'header' => array(
                    'value' => $txt['admin_edit_news'],
                    'class' => 'half_table',
                ),
                'data' => array(
                    'function' => function($news)
                    {
                        if (is_numeric($news['id']))
                            return '
                                <textarea id="data_' . $news['id'] . '" rows="3" cols="50" name="news[]" class="padding block">' . $news['unparsed'] . '</textarea>
                                <div class="floatleft" id="preview_' . $news['id'] . '"></div>';
                        else
                            return $news['unparsed'];
                    },
                    'class' => 'half_table',
                ),
            ),
            'preview' => array(
                'header' => array(
                    'value' => $txt['preview'],
                    'class' => 'half_table',
                ),
                'data' => array(
                    'function' => function($news)
                    {
                        return '<div id="box_preview_' . $news['id'] . '" style="overflow: auto; width: 100%; height: 10ex;">' . $news['parsed'] . '</div>';
                    },
                    'class' => 'half_table',
                ),
            ),
            'check' => array(
                'header' => array(
                    'value' => '<input type="checkbox" onclick="invertAll(this, this.form);">',
                    'class' => 'centercol icon',
                ),
                'data' => array(
                    'function' => function($news)
                    {
                        if (is_numeric($news['id']))
                            return '<input type="checkbox" name="remove[]" value="' . $news['id'] . '">';
                        else
                            return '';
                    },
                    'class' => 'centercol icon',
                ),
            ),
        ),
        'form' => array(
            'href' => $scripturl . '?action=admin;area=news;sa=editnews',
            'hidden_fields' => array(
                $context['session_var'] => $context['session_id'],
            ),
        ),
        'additional_rows' => array(
            array(
                'position' => 'bottom_of_list',
                'value' => '
                <span id="moreNewsItems_link" class="floatleft" style="display: none;">
                    <a class="button" href="javascript:void(0);" onclick="addNewsItem(); return false;">' . $txt['editnews_clickadd'] . '</a>
                </span>
                <input type="submit" name="save_items" value="' . $txt['save'] . '" class="button">
                <input type="submit" name="delete_selection" value="' . $txt['editnews_remove_selected'] . '" data-confirm="' . $txt['editnews_remove_confirm'] . '" class="button you_sure">',
            ),
        ),
        'javascript' => '
                    document.getElementById(\'list_news_lists_last\').style.display = "none";
                    document.getElementById("moreNewsItems_link").style.display = "";
                    var last_preview = 0;

                    $(document).ready(function () {
                        $("div[id ^= \'preview_\']").each(function () {
                            var preview_id = $(this).attr(\'id\').split(\'_\')[1];
                            if (last_preview < preview_id)
                                last_preview = preview_id;
                            make_preview_btn(preview_id);
                        });
                    });

                    function make_preview_btn (preview_id)
                    {
                        $("#preview_" + preview_id).addClass("button");
                        $("#preview_" + preview_id).text(\'' . $txt['preview'] . '\').click(function () {
                            $.ajax({
                                type: "POST",
                                url: "' . $scripturl . '?action=xmlhttp;sa=previews;xml",
                                data: {item: "newspreview", news: $("#data_" + preview_id).val()},
                                context: document.body,
                                success: function(request){
                                    if ($(request).find("error").text() == \'\')
                                        $(document).find("#box_preview_" + preview_id).html($(request).text());
                                    else
                                        $(document).find("#box_preview_" + preview_id).text(\'' . $txt['news_error_no_news'] . '\');
                                },
                            });
                        });
                    }

                    function addNewsItem ()
                    {
                        last_preview++;
                        $("#list_news_lists_last").before(' . javaScriptEscape('
                        <tr class="windowbg') . ' + (last_preview % 2 == 0 ? \'\' : \'2\') + ' . javaScriptEscape('">
                            <td style="width: 50%;">
                                    <textarea id="data_') . ' + last_preview + ' . javaScriptEscape('" rows="3" cols="65" name="news[]" style="width: 95%;"></textarea>
                                    <br>
                                    <div class="floatleft" id="preview_') . ' + last_preview + ' . javaScriptEscape('"></div>
                            </td>
                            <td style="width: 45%;">
                                <div id="box_preview_') . ' + last_preview + ' . javaScriptEscape('" style="overflow: auto; width: 100%; height: 10ex;"></div>
                            </td>
                            <td></td>
                        </tr>') . ');
                        make_preview_btn(last_preview);
                    }',
    );

    // Create the request list.
    createList($listOptions);

    // And go!
    loadTemplate('ManageNews');
    $context['sub_template'] = 'news_lists';
}

/**
 * Prepares an array of the forum news items for display in the template
 *
 * @return array An array of information about the news items
 */
function list_getNews()
{
    global $modSettings;

    $admin_current_news = array();
    // Ready the current news.
    foreach (explode("\n", $modSettings['news']) as $id => $line)
        $admin_current_news[$id] = array(
            'id' => $id,
            'unparsed' => un_preparsecode($line),
            'parsed' => preg_replace('~<([/]?)form[^>]*?[>]*>~i', '<em class="smalltext">&lt;$1form&gt;</em>', parse_bbc($line)),
        );

    $admin_current_news['last'] = array(
        'id' => 'last',
        'unparsed' => '<div id="moreNewsItems"></div>
        <noscript><textarea rows="3" cols="65" name="news[]" style="width: 85%;"></textarea></noscript>',
        'parsed' => '<div id="moreNewsItems_preview"></div>',
    );

    return $admin_current_news;
}

/**
 * This function allows a user to select the membergroups to send their
 * mailing to.
 * Called by ?action=admin;area=news;sa=mailingmembers.
 * Requires the send_mail permission.
 * Form is submitted to ?action=admin;area=news;mailingcompose.
 *
 * @uses the ManageNews template and email_members sub template.
 */
function SelectMailingMembers()
{
    global $txt, $context, $modSettings, $smcFunc;

    // Is there any confirm message?
    $context['newsletter_sent'] = isset($_SESSION['newsletter_sent']) ? $_SESSION['newsletter_sent'] : '';

    $context['page_title'] = $txt['admin_newsletters'];

    $context['sub_template'] = 'email_members';

    $context['groups'] = array();
    $postGroups = array();
    $normalGroups = array();

    // If we have post groups disabled then we need to give a "ungrouped members" option.
    if (empty($modSettings['permission_enable_postgroups']))
    {
        $context['groups'][0] = array(
            'id' => 0,
            'name' => $txt['membergroups_members'],
            'member_count' => 0,
        );
        $normalGroups[0] = 0;
    }

    // Get all the extra groups as well as Administrator and Global Moderator.
    $request = $smcFunc['db_query']('', '
        SELECT mg.id_group, mg.group_name, mg.min_posts
        FROM {db_prefix}membergroups AS mg' . (empty($modSettings['permission_enable_postgroups']) ? '
        WHERE mg.min_posts = {int:min_posts}' : '') . '
        GROUP BY mg.id_group, mg.min_posts, mg.group_name
        ORDER BY mg.min_posts, CASE WHEN mg.id_group < {int:newbie_group} THEN mg.id_group ELSE 4 END, mg.group_name',
        array(
            'min_posts' => -1,
            'newbie_group' => 4,
        )
    );
    while ($row = $smcFunc['db_fetch_assoc']($request))
    {
        $context['groups'][$row['id_group']] = array(
            'id' => $row['id_group'],
            'name' => $row['group_name'],
            'member_count' => 0,
        );

        if ($row['min_posts'] == -1)
            $normalGroups[$row['id_group']] = $row['id_group'];
        else
            $postGroups[$row['id_group']] = $row['id_group'];
    }
    $smcFunc['db_free_result']($request);

    // If we have post groups, let's count the number of members...
    if (!empty($postGroups))
    {
        $query = $smcFunc['db_query']('', '
            SELECT mem.id_post_group AS id_group, COUNT(*) AS member_count
            FROM {db_prefix}members AS mem
            WHERE mem.id_post_group IN ({array_int:post_group_list})
            GROUP BY mem.id_post_group',
            array(
                'post_group_list' => $postGroups,
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($query))
            $context['groups'][$row['id_group']]['member_count'] += $row['member_count'];
        $smcFunc['db_free_result']($query);
    }

    if (!empty($normalGroups))
    {
        // Find people who are members of this group...
        $query = $smcFunc['db_query']('', '
            SELECT id_group, COUNT(*) AS member_count
            FROM {db_prefix}members
            WHERE id_group IN ({array_int:normal_group_list})
            GROUP BY id_group',
            array(
                'normal_group_list' => $normalGroups,
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($query))
            $context['groups'][$row['id_group']]['member_count'] += $row['member_count'];
        $smcFunc['db_free_result']($query);

        // Also do those who have it as an additional membergroup - this ones more yucky...
        $query = $smcFunc['db_query']('', '
            SELECT mg.id_group, COUNT(*) AS member_count
            FROM {db_prefix}membergroups AS mg
                INNER JOIN {db_prefix}members AS mem ON (mem.additional_groups != {string:blank_string}
                    AND mem.id_group != mg.id_group
                    AND FIND_IN_SET(mg.id_group, mem.additional_groups) != 0)
            WHERE mg.id_group IN ({array_int:normal_group_list})
            GROUP BY mg.id_group',
            array(
                'normal_group_list' => $normalGroups,
                'blank_string' => '',
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($query))
            $context['groups'][$row['id_group']]['member_count'] += $row['member_count'];
        $smcFunc['db_free_result']($query);
    }

    // Any moderators?
    $request = $smcFunc['db_query']('', '
        SELECT COUNT(DISTINCT id_member) AS num_distinct_mods
        FROM {db_prefix}moderators
        LIMIT 1',
        array(
        )
    );
    list ($context['groups'][3]['member_count']) = $smcFunc['db_fetch_row']($request);
    $smcFunc['db_free_result']($request);

    $context['can_send_pm'] = allowedTo('pm_send');

    loadJavaScriptFile('suggest.js', array('defer' => false, 'minimize' => true), 'smf_suggest');
}

/**
 * Prepare subject and message of an email for the preview box
 * Used in ComposeMailing and RetrievePreview (Xml.php)
 */
function prepareMailingForPreview()
{
    global $context, $modSettings, $scripturl, $user_info, $txt;
    loadLanguage('Errors');

    $processing = array('preview_subject' => 'subject', 'preview_message' => 'message');

    // Use the default time format.
    $user_info['time_format'] = $modSettings['time_format'];

    $variables = array(
        '{$board_url}',
        '{$current_time}',
        '{$latest_member.link}',
        '{$latest_member.id}',
        '{$latest_member.name}'
    );

    $html = $context['send_html'];

    // We might need this in a bit
    $cleanLatestMember = empty($context['send_html']) || $context['send_pm'] ? un_htmlspecialchars($modSettings['latestRealName']) : $modSettings['latestRealName'];

    foreach ($processing as $key => $post)
    {
        $context[$key] = !empty($_REQUEST[$post]) ? $_REQUEST[$post] : '';

        if (empty($context[$key]) && empty($_REQUEST['xml']))
            $context['post_error']['messages'][] = $txt['error_no_' . $post];
        elseif (!empty($_REQUEST['xml']))
            continue;

        preparsecode($context[$key]);
        if ($html)
        {
            $enablePostHTML = $modSettings['enablePostHTML'];
            $modSettings['enablePostHTML'] = $context['send_html'];
            $context[$key] = parse_bbc($context[$key]);
            $modSettings['enablePostHTML'] = $enablePostHTML;
        }

        // Replace in all the standard things.
        $context[$key] = str_replace($variables,
            array(
                !empty($context['send_html']) ? '<a href="' . $scripturl . '">' . $scripturl . '</a>' : $scripturl,
                timeformat(forum_time(), false),
                !empty($context['send_html']) ? '<a href="' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . '">' . $cleanLatestMember . '</a>' : ($context['send_pm'] ? '[url=' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . ']' . $cleanLatestMember . '[/url]' : $cleanLatestMember),
                $modSettings['latestMember'],
                $cleanLatestMember
            ), $context[$key]);
    }
}

/**
 * Shows a form to edit a forum mailing and its recipients.
 * Called by ?action=admin;area=news;sa=mailingcompose.
 * Requires the send_mail permission.
 * Form is submitted to ?action=admin;area=news;sa=mailingsend.
 *
 * @uses ManageNews template, email_members_compose sub-template.
 */
function ComposeMailing()
{
    global $txt, $sourcedir, $context, $smcFunc;

    // Setup the template!
    $context['page_title'] = $txt['admin_newsletters'];
    $context['sub_template'] = 'email_members_compose';

    $context['subject'] = !empty($_POST['subject']) ? $_POST['subject'] : $smcFunc['htmlspecialchars']($context['forum_name'] . ': ' . $txt['subject']);
    $context['message'] = !empty($_POST['message']) ? $_POST['message'] : $smcFunc['htmlspecialchars']($txt['message'] . "\n\n" . $txt['regards_team'] . "\n\n" . '{$board_url}');

    // Needed for the WYSIWYG editor.
    require_once($sourcedir . '/Subs-Editor.php');

    // Now create the editor.
    $editorOptions = array(
        'id' => 'message',
        'value' => $context['message'],
        'height' => '150px',
        'width' => '100%',
        'labels' => array(
            'post_button' => $txt['sendtopic_send'],
        ),
        'preview_type' => 2,
        'required' => true,
    );
    create_control_richedit($editorOptions);
    // Store the ID for old compatibility.
    $context['post_box_name'] = $editorOptions['id'];

    if (isset($context['preview']))
    {
        require_once($sourcedir . '/Subs-Post.php');
        $context['recipients']['members'] = !empty($_POST['members']) ? explode(',', $_POST['members']) : array();
        $context['recipients']['exclude_members'] = !empty($_POST['exclude_members']) ? explode(',', $_POST['exclude_members']) : array();
        $context['recipients']['groups'] = !empty($_POST['groups']) ? explode(',', $_POST['groups']) : array();
        $context['recipients']['exclude_groups'] = !empty($_POST['exclude_groups']) ? explode(',', $_POST['exclude_groups']) : array();
        $context['recipients']['emails'] = !empty($_POST['emails']) ? explode(';', $_POST['emails']) : array();
        $context['email_force'] = !empty($_POST['email_force']) ? 1 : 0;
        $context['total_emails'] = !empty($_POST['total_emails']) ? (int) $_POST['total_emails'] : 0;
        $context['send_pm'] = !empty($_POST['send_pm']) ? 1 : 0;
        $context['send_html'] = !empty($_POST['send_html']) ? '1' : '0';

        return prepareMailingForPreview();
    }

    // Start by finding any members!
    $toClean = array();
    if (!empty($_POST['members']))
        $toClean[] = 'members';
    if (!empty($_POST['exclude_members']))
        $toClean[] = 'exclude_members';
    if (!empty($toClean))
    {
        require_once($sourcedir . '/Subs-Auth.php');
        foreach ($toClean as $type)
        {
            // Remove the quotes.
            $_POST[$type] = strtr($_POST[$type], array('\\"' => '"'));

            preg_match_all('~"([^"]+)"~', $_POST[$type], $matches);
            $_POST[$type] = array_unique(array_merge($matches[1], explode(',', preg_replace('~"[^"]+"~', '', $_POST[$type]))));

            foreach ($_POST[$type] as $index => $member)
                if (strlen(trim($member)) > 0)
                    $_POST[$type][$index] = $smcFunc['htmlspecialchars']($smcFunc['strtolower'](trim($member)));
                else
                    unset($_POST[$type][$index]);

            // Find the members
            $_POST[$type] = implode(',', array_keys(findMembers($_POST[$type])));
        }
    }

    if (isset($_POST['member_list']) && is_array($_POST['member_list']))
    {
        $members = array();
        foreach ($_POST['member_list'] as $member_id)
            $members[] = (int) $member_id;
        $_POST['members'] = implode(',', $members);
    }

    if (isset($_POST['exclude_member_list']) && is_array($_POST['exclude_member_list']))
    {
        $members = array();
        foreach ($_POST['exclude_member_list'] as $member_id)
            $members[] = (int) $member_id;
        $_POST['exclude_members'] = implode(',', $members);
    }

    // Clean the other vars.
    SendMailing(true);

    // We need a couple strings from the email template file
    loadLanguage('EmailTemplates');

    // Get a list of all full banned users.  Use their Username and email to find them.  Only get the ones that can't login to turn off notification.
    $request = $smcFunc['db_query']('', '
        SELECT DISTINCT mem.id_member
        FROM {db_prefix}ban_groups AS bg
            INNER JOIN {db_prefix}ban_items AS bi ON (bg.id_ban_group = bi.id_ban_group)
            INNER JOIN {db_prefix}members AS mem ON (bi.id_member = mem.id_member)
        WHERE (bg.cannot_access = {int:cannot_access} OR bg.cannot_login = {int:cannot_login})
            AND (bg.expire_time IS NULL OR bg.expire_time > {int:current_time})',
        array(
            'cannot_access' => 1,
            'cannot_login' => 1,
            'current_time' => time(),
        )
    );
    while ($row = $smcFunc['db_fetch_assoc']($request))
        $context['recipients']['exclude_members'][] = $row['id_member'];
    $smcFunc['db_free_result']($request);

    $request = $smcFunc['db_query']('', '
        SELECT DISTINCT bi.email_address
        FROM {db_prefix}ban_items AS bi
            INNER JOIN {db_prefix}ban_groups AS bg ON (bg.id_ban_group = bi.id_ban_group)
        WHERE (bg.cannot_access = {int:cannot_access} OR bg.cannot_login = {int:cannot_login})
            AND (bg.expire_time IS NULL OR bg.expire_time > {int:current_time})
            AND bi.email_address != {string:blank_string}',
        array(
            'cannot_access' => 1,
            'cannot_login' => 1,
            'current_time' => time(),
            'blank_string' => '',
        )
    );
    $condition_array = array();
    $condition_array_params = array();
    $count = 0;
    while ($row = $smcFunc['db_fetch_assoc']($request))
    {
        $condition_array[] = '{string:email_' . $count . '}';
        $condition_array_params['email_' . $count++] = $row['email_address'];
    }
    $smcFunc['db_free_result']($request);

    if (!empty($condition_array))
    {
        $request = $smcFunc['db_query']('', '
            SELECT id_member
            FROM {db_prefix}members
            WHERE email_address IN(' . implode(', ', $condition_array) . ')',
            $condition_array_params
        );
        while ($row = $smcFunc['db_fetch_assoc']($request))
            $context['recipients']['exclude_members'][] = $row['id_member'];
        $smcFunc['db_free_result']($request);
    }

    // Did they select moderators - if so add them as specific members...
    if ((!empty($context['recipients']['groups']) && in_array(3, $context['recipients']['groups'])) || (!empty($context['recipients']['exclude_groups']) && in_array(3, $context['recipients']['exclude_groups'])))
    {
        $request = $smcFunc['db_query']('', '
            SELECT DISTINCT mem.id_member AS identifier
            FROM {db_prefix}members AS mem
                INNER JOIN {db_prefix}moderators AS mods ON (mods.id_member = mem.id_member)
            WHERE mem.is_activated = {int:is_activated}',
            array(
                'is_activated' => 1,
            )
        );
        while ($row = $smcFunc['db_fetch_assoc']($request))
        {
            if (in_array(3, $context['recipients']))
                $context['recipients']['exclude_members'][] = $row['identifier'];
            else
                $context['recipients']['members'][] = $row['identifier'];
        }
        $smcFunc['db_free_result']($request);
    }

    // For progress bar!
    $context['total_emails'] = count($context['recipients']['emails']);
    $request = $smcFunc['db_query']('', '
        SELECT COUNT(*)
        FROM {db_prefix}members',
        array(
        )
    );
    list ($context['total_members']) = $smcFunc['db_fetch_row']($request);
    $smcFunc['db_free_result']($request);

    // Clean up the arrays.
    $context['recipients']['members'] = array_unique($context['recipients']['members']);
    $context['recipients']['exclude_members'] = array_unique($context['recipients']['exclude_members']);
}

/**
 * Handles the sending of the forum mailing in batches.
 * Called by ?action=admin;area=news;sa=mailingsend
 * Requires the send_mail permission.
 * Redirects to itself when more batches need to be sent.
 * Redirects to ?action=admin;area=news;sa=mailingmembers after everything has been sent.
 *
 * @param bool $clean_only If set, it will only clean the variables, put them in context, then return.
 * @uses the ManageNews template and email_members_send sub template.
 */
function SendMailing($clean_only = false)
{
    global $txt, $sourcedir, $context, $smcFunc;
    global $scripturl, $modSettings, $user_info;

    if (isset($_POST['preview']))
    {
        $context['preview'] = true;
        return ComposeMailing();
    }

    // How many to send at once? Quantity depends on whether we are queueing or not.
    // @todo Might need an interface? (used in Post.php too with different limits)
    $num_at_once = 1000;

    // If by PM's I suggest we half the above number.
    if (!empty($_POST['send_pm']))
        $num_at_once /= 2;

    checkSession();

    // Where are we actually to?
    $context['start'] = isset($_REQUEST['start']) ? (int) $_REQUEST['start'] : 0;
    $context['email_force'] = !empty($_POST['email_force']) ? 1 : 0;
    $context['send_pm'] = !empty($_POST['send_pm']) ? 1 : 0;
    $context['total_emails'] = !empty($_POST['total_emails']) ? (int) $_POST['total_emails'] : 0;
    $context['send_html'] = !empty($_POST['send_html']) ? '1' : '0';
    $context['parse_html'] = !empty($_POST['parse_html']) ? '1' : '0';

    //One can't simply nullify things around
    if (empty($_REQUEST['total_members']))
    {
        $request = $smcFunc['db_query']('', '
            SELECT COUNT(*)
            FROM {db_prefix}members',
            array(
            )
        );
        list ($context['total_members']) = $smcFunc['db_fetch_row']($request);
        $smcFunc['db_free_result']($request);
    }
    else
    {
        $context['total_members'] = (int) $_REQUEST['total_members'];
    }

    // Create our main context.
    $context['recipients'] = array(
        'groups' => array(),
        'exclude_groups' => array(),
        'members' => array(),
        'exclude_members' => array(),
        'emails' => array(),
    );

    // Have we any excluded members?
    if (!empty($_POST['exclude_members']))
    {
        $members = explode(',', $_POST['exclude_members']);
        foreach ($members as $member)
            if ($member >= $context['start'])
                $context['recipients']['exclude_members'][] = (int) $member;
    }

    // What about members we *must* do?
    if (!empty($_POST['members']))
    {
        $members = explode(',', $_POST['members']);
        foreach ($members as $member)
            if ($member >= $context['start'])
                $context['recipients']['members'][] = (int) $member;
    }
    // Cleaning groups is simple - although deal with both checkbox and commas.
    if (isset($_POST['groups']))
    {
        if (is_array($_POST['groups']))
        {
            foreach ($_POST['groups'] as $group => $dummy)
                $context['recipients']['groups'][] = (int) $group;
        }
        else
        {
            $groups = explode(',', $_POST['groups']);
            foreach ($groups as $group)
                $context['recipients']['groups'][] = (int) $group;
        }
    }
    // Same for excluded groups
    if (isset($_POST['exclude_groups']))
    {
        if (is_array($_POST['exclude_groups']))
        {
            foreach ($_POST['exclude_groups'] as $group => $dummy)
                $context['recipients']['exclude_groups'][] = (int) $group;
        }
        // Ignore an empty string - we don't want to exclude "Regular Members" unless it's specifically selected
        elseif ($_POST['exclude_groups'] != '')
        {
            $groups = explode(',', $_POST['exclude_groups']);
            foreach ($groups as $group)
                $context['recipients']['exclude_groups'][] = (int) $group;
        }
    }
    // Finally - emails!
    if (!empty($_POST['emails']))
    {
        $addressed = array_unique(explode(';', strtr($_POST['emails'], array("\n" => ';', "\r" => ';', ',' => ';'))));
        foreach ($addressed as $curmem)
        {
            $curmem = trim($curmem);
            if ($curmem != '' && filter_var($curmem, FILTER_VALIDATE_EMAIL))
                $context['recipients']['emails'][$curmem] = $curmem;
        }
    }

    // If we're only cleaning drop out here.
    if ($clean_only)
        return;

    require_once($sourcedir . '/Subs-Post.php');

    // We are relying too much on writing to superglobals...
    $_POST['subject'] = !empty($_POST['subject']) ? $_POST['subject'] : '';
    $_POST['message'] = !empty($_POST['message']) ? $_POST['message'] : '';

    // Save the message and its subject in $context
    $context['subject'] = $smcFunc['htmlspecialchars']($_POST['subject'], ENT_QUOTES);
    $context['message'] = $smcFunc['htmlspecialchars']($_POST['message'], ENT_QUOTES);

    // Prepare the message for sending it as HTML
    if (!$context['send_pm'] && !empty($_POST['send_html']))
    {
        // Prepare the message for HTML.
        if (!empty($_POST['parse_html']))
            $_POST['message'] = str_replace(array("\n", '  '), array('<br>' . "\n", '&nbsp; '), $_POST['message']);

        // This is here to prevent spam filters from tagging this as spam.
        if (preg_match('~\<html~i', $_POST['message']) == 0)
        {
            if (preg_match('~\<body~i', $_POST['message']) == 0)
                $_POST['message'] = '<html><head><title>' . $_POST['subject'] . '</title></head>' . "\n" . '<body>' . $_POST['message'] . '</body></html>';
            else
                $_POST['message'] = '<html>' . $_POST['message'] . '</html>';
        }
    }

    if (empty($_POST['message']) || empty($_POST['subject']))
    {
        $context['preview'] = true;
        return ComposeMailing();
    }

    // Use the default time format.
    $user_info['time_format'] = $modSettings['time_format'];

    $variables = array(
        '{$board_url}',
        '{$current_time}',
        '{$latest_member.link}',
        '{$latest_member.id}',
        '{$latest_member.name}'
    );

    // We might need this in a bit
    $cleanLatestMember = empty($_POST['send_html']) || $context['send_pm'] ? un_htmlspecialchars($modSettings['latestRealName']) : $modSettings['latestRealName'];

    // Replace in all the standard things.
    $_POST['message'] = str_replace($variables,
        array(
            !empty($_POST['send_html']) ? '<a href="' . $scripturl . '">' . $scripturl . '</a>' : $scripturl,
            timeformat(forum_time(), false),
            !empty($_POST['send_html']) ? '<a href="' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . '">' . $cleanLatestMember . '</a>' : ($context['send_pm'] ? '[url=' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . ']' . $cleanLatestMember . '[/url]' : $scripturl . '?action=profile;u=' . $modSettings['latestMember']),
            $modSettings['latestMember'],
            $cleanLatestMember
        ), $_POST['message']);
    $_POST['subject'] = str_replace($variables,
        array(
            $scripturl,
            timeformat(forum_time(), false),
            $modSettings['latestRealName'],
            $modSettings['latestMember'],
            $modSettings['latestRealName']
        ), $_POST['subject']);

    $from_member = array(
        '{$member.email}',
        '{$member.link}',
        '{$member.id}',
        '{$member.name}'
    );

    // If we still have emails, do them first!
    $i = 0;
    foreach ($context['recipients']['emails'] as $k => $email)
    {
        // Done as many as we can?
        if ($i >= $num_at_once)
            break;

        // Don't sent it twice!
        unset($context['recipients']['emails'][$k]);

        // Dammit - can't PM emails!
        if ($context['send_pm'])
            continue;

        $to_member = array(
            $email,
            !empty($_POST['send_html']) ? '<a href="mailto:' . $email . '">' . $email . '</a>' : $email,
            '??',
            $email
        );

        sendmail($email, str_replace($from_member, $to_member, $_POST['subject']), str_replace($from_member, $to_member, $_POST['message']), null, 'news', !empty($_POST['send_html']), 5);

        // Done another...
        $i++;
    }

    if ($i < $num_at_once)
    {
        // Need to build quite a query!
        $sendQuery = '(';
        $sendParams = array();
        if (!empty($context['recipients']['groups']))
        {
            // Take the long route...
            $queryBuild = array();
            foreach ($context['recipients']['groups'] as $group)
            {
                $sendParams['group_' . $group] = $group;
                $queryBuild[] = 'mem.id_group = {int:group_' . $group . '}';
                if (!empty($group))
                {
                    $queryBuild[] = 'FIND_IN_SET({int:group_' . $group . '}, mem.additional_groups) != 0';
                    $queryBuild[] = 'mem.id_post_group = {int:group_' . $group . '}';
                }
            }
            if (!empty($queryBuild))
                $sendQuery .= implode(' OR ', $queryBuild);
        }
        if (!empty($context['recipients']['members']))
        {
            $sendQuery .= ($sendQuery == '(' ? '' : ' OR ') . 'mem.id_member IN ({array_int:members})';
            $sendParams['members'] = $context['recipients']['members'];
        }

        $sendQuery .= ')';

        // If we've not got a query then we must be done!
        if ($sendQuery == '()')
        {
            // Set a confirmation message.
            $_SESSION['newsletter_sent'] = 'queue_done';
            redirectexit('action=admin;area=news;sa=mailingmembers');
        }

        // Anything to exclude?
        if (!empty($context['recipients']['exclude_groups']) && in_array(0, $context['recipients']['exclude_groups']))
            $sendQuery .= ' AND mem.id_group != {int:regular_group}';
        if (!empty($context['recipients']['exclude_members']))
        {
            $sendQuery .= ' AND mem.id_member NOT IN ({array_int:exclude_members})';
            $sendParams['exclude_members'] = $context['recipients']['exclude_members'];
        }

        // Get the smelly people - note we respect the id_member range as it gives us a quicker query.
        $result = $smcFunc['db_query']('', '
            SELECT mem.id_member, mem.email_address, mem.real_name, mem.id_group, mem.additional_groups, mem.id_post_group
            FROM {db_prefix}members AS mem
            WHERE ' . $sendQuery . '
                AND mem.is_activated = {int:is_activated}
            ORDER BY mem.id_member ASC
            LIMIT {int:start}, {int:atonce}',
            array_merge($sendParams, array(
                'start' => $context['start'],
                'atonce' => $num_at_once,
                'regular_group' => 0,
                'is_activated' => 1,
            ))
        );
        $rows = array();
        while ($row = $smcFunc['db_fetch_assoc']($result))
        {
            $rows[$row['id_member']] = $row;
        }
        $smcFunc['db_free_result']($result);

        // Load their alert preferences
        require_once($sourcedir . '/Subs-Notify.php');
        $prefs = getNotifyPrefs(array_keys($rows), 'announcements', true);

        foreach ($rows as $row)
        {
            // Force them to have it?
            if (empty($context['email_force']) && empty($prefs[$row['id_member']]['announcements']) && !empty($modSettings['allow_disableAnnounce']))
                continue;

            // What groups are we looking at here?
            if (empty($row['additional_groups']))
                $groups = array($row['id_group'], $row['id_post_group']);
            else
                $groups = array_merge(
                    array($row['id_group'], $row['id_post_group']),
                    explode(',', $row['additional_groups'])
                );

            // Excluded groups?
            if (array_intersect($groups, $context['recipients']['exclude_groups']))
                continue;

            // We might need this
            $cleanMemberName = empty($_POST['send_html']) || $context['send_pm'] ? un_htmlspecialchars($row['real_name']) : $row['real_name'];

            // Replace the member-dependant variables
            $message = str_replace($from_member,
                array(
                    $row['email_address'],
                    !empty($_POST['send_html']) ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $cleanMemberName . '</a>' : ($context['send_pm'] ? '[url=' . $scripturl . '?action=profile;u=' . $row['id_member'] . ']' . $cleanMemberName . '[/url]' : $scripturl . '?action=profile;u=' . $row['id_member']),
                    $row['id_member'],
                    $cleanMemberName,
                ), $_POST['message']);

            $subject = str_replace($from_member,
                array(
                    $row['email_address'],
                    $row['real_name'],
                    $row['id_member'],
                    $row['real_name'],
                ), $_POST['subject']);

            // Send the actual email - or a PM!
            if (!$context['send_pm'])
                sendmail($row['email_address'], $subject, $message, null, 'news', !empty($_POST['send_html']), 5);
            else
                sendpm(array('to' => array($row['id_member']), 'bcc' => array()), $subject, $message);
        }
    }

    $context['start'] = $context['start'] + $num_at_once;
    if (empty($context['recipients']['emails']) && ($context['start'] >= $context['total_members']))
    {
        // Log this into the admin log.
        logAction('newsletter', array(), 'admin');
        $_SESSION['newsletter_sent'] = 'queue_done';
        redirectexit('action=admin;area=news;sa=mailingmembers');
    }

    // Working out progress is a black art of sorts.
    $percentEmails = $context['total_emails'] == 0 ? 0 : ((count($context['recipients']['emails']) / $context['total_emails']) * ($context['total_emails'] / ($context['total_emails'] + $context['total_members'])));
    $percentMembers = ($context['start'] / $context['total_members']) * ($context['total_members'] / ($context['total_emails'] + $context['total_members']));
    $context['percentage_done'] = round(($percentEmails + $percentMembers) * 100, 2);

    $context['page_title'] = $txt['admin_newsletters'];
    $context['sub_template'] = 'email_members_send';
}

/**
 * Set general news and newsletter settings and permissions.
 * Called by ?action=admin;area=news;sa=settings.
 * Requires the forum_admin permission.
 *
 * @uses ManageNews template, news_settings sub-template.
 * @param bool $return_config Whether or not to return the config_vars array (used for admin search)
 * @return void|array Returns nothing or returns the config_vars array if $return_config is true
 */
function ModifyNewsSettings($return_config = false)
{
    global $context, $sourcedir, $txt, $scripturl;

    $config_vars = array(
        array('title', 'settings'),
        // Inline permissions.
        array('permissions', 'edit_news', 'help' => ''),
        array('permissions', 'send_mail'),
        '',

        // Just the remaining settings.
        array('check', 'xmlnews_enable', 'onclick' => 'document.getElementById(\'xmlnews_maxlen\').disabled = !this.checked;'),
        array('int', 'xmlnews_maxlen', 'subtext' => $txt['xmlnews_maxlen_note'], 10),
        array('check', 'xmlnews_attachments', 'subtext' => $txt['xmlnews_attachments_note']),
    );

    call_integration_hook('integrate_modify_news_settings', array(&$config_vars));

    if ($return_config)
        return $config_vars;

    $context['page_title'] = $txt['admin_edit_news'] . ' - ' . $txt['settings'];
    $context['sub_template'] = 'show_settings';

    // Needed for the settings template.
    require_once($sourcedir . '/ManageServer.php');

    // Wrap it all up nice and warm...
    $context['post_url'] = $scripturl . '?action=admin;area=news;save;sa=settings';

    // Add some javascript at the bottom...
    addInlineJavaScript('
    document.getElementById("xmlnews_maxlen").disabled = !document.getElementById("xmlnews_enable").checked;', true);

    // Saving the settings?
    if (isset($_GET['save']))
    {
        checkSession();

        call_integration_hook('integrate_save_news_settings');

        saveDBSettings($config_vars);
        $_SESSION['adm-save'] = true;
        redirectexit('action=admin;area=news;sa=settings');
    }

    // We need this for the in-line permissions
    createToken('admin-mp');

    prepareDBSettingContext($config_vars);
}

?>