diff options
| author | arf20 <aruizfernandez05@gmail.com> | 2024-04-28 04:30:56 +0200 |
|---|---|---|
| committer | arf20 <aruizfernandez05@gmail.com> | 2024-04-28 04:30:56 +0200 |
| commit | 9f20c90c320140dbcaa9acfa6a58fea3e40f6806 (patch) | |
| tree | 090b80fc2fb946245a3f8bbfb6ff119208deca78 /publishannouncement.php | |
| parent | 006c02b6b9e96f09f69d94d016f5405a3f3f0abe (diff) | |
| download | arfnet2-cstims-9f20c90c320140dbcaa9acfa6a58fea3e40f6806.tar.gz arfnet2-cstims-9f20c90c320140dbcaa9acfa6a58fea3e40f6806.zip | |
Add PHP script for mailing list announcement
Diffstat (limited to 'publishannouncement.php')
| -rw-r--r-- | publishannouncement.php | 95 |
1 files changed, 95 insertions, 0 deletions
diff --git a/publishannouncement.php b/publishannouncement.php new file mode 100644 index 0000000..76c934a --- /dev/null +++ b/publishannouncement.php @@ -0,0 +1,95 @@ +<?php + +session_start(); + +if(!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true){ + header("location: /login.php"); + exit; +} + +$username = $_SESSION["username"]; +$type = $_SESSION["type"]; +$id = $_SESSION["id"]; + +if ($type != "admin") die("Permission denied."); + +require_once "config.php"; + +// Get users +$sql = "SELECT id, username, type, email FROM users"; +$stmt = mysqli_prepare($link, $sql); +mysqli_stmt_execute($stmt); +$result = mysqli_stmt_get_result($stmt); +$users = $result->fetch_all(MYSQLI_ASSOC); + +/* + * Announce to + * - mailing list (hereby the announcement archive at lists.arf20.com) + * - discord webhook + * - irc (bridged) announcement notice + * - NNTP? + * - phpBB? + * - another, custom, archive ARFNET-ly + */ + +// POST actions +if ($_SERVER["REQUEST_METHOD"] == "POST") { + /* Send email */ + $mailer->addAddress(MAIL_ANNOUNCE_ADDRESS); + $mailer->addReplyTo(getuserbyid($id)["email"]); + $mailer->Subject = "[ARFNET Announcement] ".$_POST["subject"]; + $mailer->Body = $_POST["body"]; + + if (!$mailer->send()) { + echo 'Mailer Error [ask arf20]: ' . $mailer->ErrorInfo; + } else header("location: ".$_SERVER['SCRIPT_NAME']); +} + + +function getuserbyid($id) { + global $users; + foreach ($users as $user) { + if ($user["id"] == $id) { + return $user; + } + } +} + +?> + +<!doctype html> +<html> + <head> + <meta charset="UTF-8"> + <link rel="stylesheet" type="text/css" href="/style.css"> + <title>ARFNET CSTIMS</title> + </head> + <body> + <header><a href="https://arf20.com/"> + <img src="arfnet_logo.png" width="64"><span class="title"><strong>ARFNET</strong></span> + </a></header> + <hr> + <main> + <div class="row"> + <div class="col8"> + <h2 class="center">ARFNET Client Service Ticket and Invoice Management System</h2> + <h3><?php echo strtoupper($type[0]).substr($type, 1); ?> panel</h3> + <h3>Publish announcement</h3> + <form action="<?php echo $_SERVER["SCRIPT_NAME"]; ?>" method="post"> + <label><b>Subject</b></label><br> + <input type="text" name="subject"><br> + <br><label><b>Body</b></label><br> + <textarea name="body" rows="10" cols="80"></textarea><br> + <br><input type="submit" value="Publish"> + </form> + </div> + <div class="col2"> + <h3>Logged as <?php echo $username; ?></h3> + <h3><a href="/logout.php">Logout</a></h2> + <h3><a href="/admin.php">Back to admin panel</a></h2> + </div> + </div> + </main> + </body> +</html> + |