ucast.upm.edu.my ~ Shell I

Editing file /var/www/tellafriend.php (0775)

<?php

///////////////////////////////////////////////////////////////////////////////////////
// PHPmotion                                                http://www.phpmotion.com //
///////////////////////////////////////////////////////////////////////////////////////
// License: You are not to sell or distribute this software without permission       //
// Main Author: Brian Shawa -  bshawa@gmail.com                                      //
// Help and support please visit http://www.phpmotion.com                            //
// Copyright reserved                                                                //
///////////////////////////////////////////////////////////////////////////////////////

include_once ("classes/config.php");
include_once ('classes/menu.php');
include_once ('classes/sessions.php');

$vid = mysql_real_escape_string($_GET['vid']);

//try get $vid from post

if ($vid == ''){
	
	$vid = $_POST['vid'];
	}
	
$color = $config['color_tellafriend'];
$word_send = $config['word_send'];

//////////////////////////////
//check if user is logged in
//////////////////////////////

if ($user_id == ""){
echo '<p align="center"><font color="#FF4242" face="Arial" size="2"><b>'.$config["must_login"].'</b></font>';
die();
}

//check if video id has been sent
if ( $vid == ''){
echo '<p align="center"><font color="#FF4242" face="Arial" size="2"><b>'.$config["error_26"].'</b></font>';	//error 
	die();
}

/////////////////////////
//CHECK IF FORM SUBMITTED
/////////////////////////
if($_POST['submitted'] == 'yes'){
	
$friends_email = $_POST['friends_email'];

//check if email is filled in
////////////////////////////
if ($friends_email == ''){
echo '&nbsp;'; //seems ajax function wont work without some ourput first ?? 	
$form_error = '<p align="center"><font color="#FF0000">'.$config["invite_send_error"].'</font></p>';
show_form();

}
//check if email is valid
/////////////////////////
if (!eregi("^[_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-z]{2,3})$", $friends_email)) {

//SHOW FORM WITH ERRROR
echo '&nbsp;'; //seems ajax function wont work without some ourput first ?? 
$form_error = '<p align="center"><font color="#FF0000">'.$config["invalid_email_format"].'</font></p>';
show_form();

}

//send out email
////////////////

//get members (me) real name for use in email
                ////////////////////////////////////////

$sql_1 = "SELECT * FROM member_profile WHERE user_id = $user_id";
                $result_1 = @mysql_fetch_array(@mysql_query($sql_1));
                $my_real_name = $result_1['first_name'];
                //if the member has not yet updated their profile to show real name then use their username and email instead
                if ($my_real_name == "") {

$my_real_name = $user_name . ' (' . $result_1['email_address'] . ')';//this will create something like: inmotion (me@gmail.com)
                }

$video_link = $config["site_base_url"].'/play.php?vid='.$vid;

//send email --------resuable------------------------------------->>
        //>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
        $email_template = 'email_templates/tellafriend.htm';
        $subject = $config["tellafriend_email_subject"];
        $to = $friends_email;
        $from = $config['notifications_from_email'];

//send email template to TBS for rendering of variable inside
        $template = $email_template;
        $TBS = new clsTinyButStrong;
        $TBS->NoErr = true;// no more error message displayed.
        $TBS->LoadTemplate("$template");
        $TBS->tbs_show(TBS_NOTHING);
        $message = $TBS->Source;

//load postage.php
        include ('postage.php');
        //>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
		//success//
echo '<p align="center"><font color="#009933" face="Arial" size="2"><b>'.$config["error_25"].'</b></font>';	//success 
die();
			
	
	}

//SHOW FORM
///////////
echo '&nbsp;'; //seems ajax function wont work without some ourput first ?? 
show_form();

//Functions
function show_form(){
global 	$color, $word_send, $form_error, $vid;

echo '
<div align="center">
  <table border="0" cellpadding="0" cellspacing="0" width="100%" bgcolor="'.$color.'" height="64">
    <tr>
      <td width="100%" height="64">
  <form id="tellafriend" action="javascript:ahahscript.likeSubmit(\'tellafriend.php\', \'post\', \'tellafriend\', \'playlist_ajaxdiv\');">
'.$form_error.'
<p align="center">Friends Email: <input type="text" name="friends_email" size="38">&nbsp;
    <input type="hidden" name="submitted" value="yes" />
    <input type="hidden" name="vid" value="'.$vid.'" />
<input type="submit" value="'.$word_send.'" name="submit"></p>
</form></td>
    </tr>
  </table>
</div>';

die();
}