<?php
/*
 $Id: wishlist_email.php,v 2.0  2004/08/11

  osCommerce, Open Source E-Commerce Solutions
  http://www.oscommerce.com

  Copyright (c) 2003 osCommerce

  Released under the GNU General Public License
*/

  require('includes/application_top.php');
  require(DIR_WS_LANGUAGES . $language . '/' . FILENAME_WISHLIST_SEND);
  require(DIR_WS_FUNCTIONS . 'visual_verify_code.php');

//check for valid product
   $valid_product = "false";

  $wish_products_id = isset($_GET['products_id']) ? (int)$_GET['products_id'] : 0;
  $friends_email_id = (isset($_GET['send_to']) && $_GET['send_to'] != '') ? $_GET['send_to'] : '';
  
  
  $wishlist_query_raw = "select tab2.products_id, tab1.products_name from " . TABLE_WISHLIST . " as tab2, " . TABLE_PRODUCTS_DESCRIPTION . " as tab1 WHERE tab2.customers_id='" . (int)$_SESSION['customer_id'] . "' and tab1.products_id = tab2.products_id and tab1.language_id = '" . (int)$languages_id . "' order by products_name";
  $wishlist_query = tep_db_query($wishlist_query_raw);
  if (!isset($wishliststring)) {
    $wishliststring = '';
  }
while ($resultarray=mysql_fetch_row($wishlist_query)) {
$wishliststring .=" "."<a href=\"".HTTP_SERVER . DIR_WS_CATALOG ."product_info.php?products_id=".$resultarray[0] ."\">".$resultarray[1]."</a><br>"."";
//$wishliststring .= $resultarray[1]."\n" . HTTP_SERVER . DIR_WS_CATALOG ."product_info.php?products_id=".$resultarray[0] . "\n\n";
}


  if ( !isset($_SESSION['customer_id']) && (ALLOW_GUEST_TO_TELL_A_FRIEND == 'false')) {
    $navigation->set_snapshot();
    tep_redirect(tep_href_link(FILENAME_LOGIN, '', 'SSL'));
  } elseif ( isset($_SESSION['customer_id']) ) {
    $account_query = tep_db_query("select customers_firstname, customers_lastname, customers_email_address from " . TABLE_CUSTOMERS . " where customers_id = '" . (int)$_SESSION['customer_id'] . "'");
    $account = tep_db_fetch_array($account_query);
    $from_name = $account['customers_firstname'] . ' ' . $account['customers_lastname'];
    $from_email_address = $account['customers_email_address'];
  }

$product_info_query = tep_db_query("select pd.products_name from " . TABLE_PRODUCTS . " p, " . TABLE_PRODUCTS_DESCRIPTION . " pd where p.products_status = '1' and p.products_id = '" . (isset($_GET['products_id']) ? (int)$_GET['products_id'] : 0) . "' and p.products_id = pd.products_id and pd.language_id = '" . (int)$languages_id . "'");
    if (tep_db_num_rows($product_info_query)) {
      $valid_product = "true";
      $product_info = tep_db_fetch_array($product_info_query);
    } else{
     $valid_product = "false";
//  tep_redirect(tep_href_link(FILENAME_WISHLIST));
   }

//VISUAL VERIFY CODE start  
  $vccCheckOk="True"; 
    $code_query = tep_db_query("select code from visual_verify_code where oscsid = '" . tep_session_id() . "'");
    $code_array = tep_db_fetch_array($code_query);
    $code = $code_array['code'];

    tep_db_query("DELETE FROM " . TABLE_VISUAL_VERIFY_CODE . " WHERE oscsid='" . tep_session_id() . "'"); //remove the visual verify code associated with this session to clean database and ensure new results

    $user_entered_code = isset($_POST['visual_verify_code']) ? $_POST['visual_verify_code'] : '';
    if (!(strcasecmp($user_entered_code, $code) == 0)) {    //make the check case insensitive
        $error = true;
        
    if((isset($_GET['action']) && $_GET['action'] == 'process')) {
      $messageStack->add('friend', VISUAL_VERIFY_CODE_ENTRY_ERROR);
    }
    
    $vccCheckOk="False";    
    }
    
 
if (isset($_GET['action']) && ($_GET['action'] == 'process') && $vccCheckOk=="True") 
  {   
    $error = "false";
    $_POST['to_email_address'] = preg_replace( "/\n/", " ", $_POST['to_email_address'] );
    $_POST['to_name'] = preg_replace( "/\n/", " ", $_POST['to_name'] );
    $_POST['to_email_address'] = preg_replace( "/\r/", " ", $_POST['to_email_address'] );
    $_POST['to_name'] = preg_replace( "/\r/", " ", $_POST['to_name'] );
    $_POST['to_email_address'] = str_replace("Content-Type:","",$_POST['to_email_address']);
    $_POST['to_name'] = str_replace("Content-Type:","",$_POST['to_name']);
    
    $to_email_address = strtolower(tep_db_prepare_input($_POST['to_email_address']));
    $to_name = tep_db_prepare_input($_POST['to_name']);
    $from_email_address = strtolower(tep_db_prepare_input($_POST['from_email_address']));
    $from_name = tep_db_prepare_input($_POST['from_name']);
    $message = tep_db_prepare_input($_POST['message']);
    
       if (empty($from_name)) {
          $error = "true";
          $messageStack->add('friend', ERROR_FROM_NAME);
        }

        if (!tep_validate_email($from_email_address)) {
          $error = "true";
          $messageStack->add('friend', ERROR_FROM_ADDRESS);
        }
    
        if (empty($to_name)) {
          $error = "true";
          $messageStack->add('friend', ERROR_TO_NAME);
        }
    
        if (!tep_validate_email($to_email_address)) {
          $error = "true";
          $messageStack->add('friend', ERROR_TO_ADDRESS);
        }

  $email_subject = sprintf(TEXT_EMAIL_SUBJECT, $from_name, STORE_NAME);
  $email_body = sprintf(TEXT_EMAIL_INTRO, $to_name, $from_name, STORE_NAME) . "\n\n";
      if (tep_not_null($message)) {
         $email_body .= $message . "\n\n";
        }
     if (WISH_EMAIL_USE_HTML == "false") {
            $email_body .= TEXT_EMAIL_LINK_TEXT . FORM_FIELD_TEXT_AREA ;
            $email_body .= $wishliststring ;
      $email_body .= TEXT_EMAIL_SIGNATURE . STORE_NAME . "\n" . '<a href="' . HTTP_SERVER  . DIR_WS_CATALOG .'">' .  HTTP_SERVER  . DIR_WS_CATALOG . '</a>';
 
    }else{ 
            $email_body .= TEXT_EMAIL_LINK . FORM_FIELD_TEXT_AREA;
            $email_body .= $wishliststring ;
      $email_body .= TEXT_EMAIL_SIGNATURE. STORE_NAME . "\n" . '<a href="' . HTTP_SERVER  . DIR_WS_CATALOG .'">' .  HTTP_SERVER  . DIR_WS_CATALOG . '</a>';
      
                }
                
         $mimemessage = new email(array('X-Mailer: osCommerce bulk mailer'));
  
 
          if (WISH_EMAIL_USE_HTML == "false") {
              $mimemessage->add_text($email_body);
           } else {
              $mimemessage->add_html($email_body);
           }                
  
            $mimemessage->build_message();
            $mimemessage->send($to_name, $to_email_address, $from_name, $from_email_address, $email_subject);

      $messageStack->add_session('header', sprintf(TEXT_EMAIL_SUCCESSFUL_SENT, $product_info['products_name'], tep_output_string_protected($to_name)), 'success');
     tep_redirect(tep_href_link(FILENAME_WISHLIST));

}         

  $breadcrumb->add(NAVBAR_TITLE, tep_href_link(FILENAME_WISHLIST_SEND, '', 'NONSSL'));

$content = CONTENT_WISHLIST_SEND;

  require(DIR_WS_TEMPLATES . TEMPLATE_NAME . '/' . TEMPLATENAME_MAIN_PAGE);

  require(DIR_WS_INCLUDES . 'application_bottom.php');
?>
