modifymailinglist.php

一个页面界面的邮件程序

<?php
require_once("../inc/constants.inc.php");
require_once("../inc/properties.inc.php");
require_once("../inc/tools.inc.php");
require_once("../inc/db.inc.php");

header('Content-type: text/xml;');

if (!isset($_SESSION['user'])) {
	die();
}

if (isset($_POST['id']))
	$param = $_POST;
else if (isset($_GET['id']))
	$param = $_GET;
else
	die("Attribute 'id' not found ! Can't modify mailing-list");

$id = prepSqlValue($param['id']);
$name = prepSqlValue($param['name']);
$dest = prepSqlValue($param['dest']);
$emails = explode(",", $param['emails']);

$sql = "UPDATE `mailing_list` SET name=$name, dest = $dest WHERE iduser = ". $_SESSION['user'] . " AND id = ". $id;
$result = mysql_query($sql) or die("Error in SQL : " . $sql);

$sql = "DELETE FROM `mailing_list_contact` WHERE idmailinglist = " . $id;
$result = mysql_query($sql) or die("Error in SQL : " . $sql);

for($i = 0; $i < sizeof($emails); $i++) {
	$sql = "INSERT INTO `mailing_list_contact` (idmailinglist, idcontact) VALUES ($id, ". prepSqlValue($emails[$i]) . ")";
	$result = mysql_query($sql) or die("Error in SQL : " . $sql);
}

$dom = new DOMDocument('1.0', ENCODING);
$root = $dom->appendChild(new DOMElement('response'));

addEmailForMailingList($root);

$sql = 	"SELECT M.*, count(C.idcontact) as nb FROM `mailing_list` M LEFT JOIN `mailing_list_contact` C ON (C.idmailinglist = M.id) " .
				"WHERE M.iduser = '". $_SESSION['user'] ."' AND M.id = $id" .
				"GROUP BY M.id " .
				"ORDER BY M.name";

$result = mysql_query($sql);

$root->setAttribute("sql", prepShowValue($sql));

$root->setAttribute("modifiedMailingList", "true");

if ($result && mysql_num_rows($result) > 0) {
	while ($line = mysql_fetch_assoc($result)) {
		addMailingListNodeToXml($root, $line);
	}
}

echo $dom->saveXML();
?>