torrentpier/library/includes/ucp/email.php

<?php
/**
 * TorrentPier – Bull-powered BitTorrent tracker engine
 *
 * @copyright Copyright (c) 2005-2024 TorrentPier (https://torrentpier.com)
 * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
 * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
 */

if (!defined('BB_ROOT')) {
    die(basename(__FILE__));
}

// Is send through board enabled? No, return to index
if (!$bb_cfg['board_email_form']) {
    redirect('index.php');
}

set_die_append_msg();

if (!empty($_GET[POST_USERS_URL]) || !empty($_POST[POST_USERS_URL])) {
    $user_id = (!empty($_GET[POST_USERS_URL])) ? (int)$_GET[POST_USERS_URL] : (int)$_POST[POST_USERS_URL];
} else {
    bb_die($lang['NO_USER_SPECIFIED']);
}

if (IS_GUEST) {
    redirect(LOGIN_URL . "?redirect=profile.php&mode=email&" . POST_USERS_URL . "=$user_id");
}

$errors = [];

$sql = "SELECT username, user_id, user_rank, user_email, user_lang
	FROM " . BB_USERS . "
	WHERE user_id = $user_id
";

if ($row = DB()->fetch_row($sql)) {
    $username = $row['username'];
    $user_email = $row['user_email'];
    $user_lang = $row['user_lang'];

    if (isset($_POST['submit'])) {
        $subject = trim(html_entity_decode($_POST['subject']));
        $message = trim(html_entity_decode($_POST['message']));

        if (!$subject) {
            $errors[] = $lang['EMPTY_SUBJECT_EMAIL'];
        }
        if (!$message) {
            $errors[] = $lang['EMPTY_MESSAGE_EMAIL'];
        }

        if (!$errors) {
            // Sending email
            $emailer = new TorrentPier\Emailer();

            $emailer->set_to($user_email, $username);
            $emailer->set_subject($subject);

            $emailer->set_template('profile_send_email', $user_lang);
            $emailer->assign_vars([
                'FROM_USERNAME' => $userdata['username'],
                'TO_USERNAME' => $username,
                'MESSAGE' => $message
            ]);

            $emailer->send();

            bb_die($lang['EMAIL_SENT']);
        }
    }

    $template->assign_vars([
        'USERNAME' => profile_url($row),
        'S_HIDDEN_FIELDS' => '',
        'S_POST_ACTION' => "profile.php?mode=email&amp;" . POST_USERS_URL . "=$user_id",
        'ERROR_MESSAGE' => ($errors) ? implode('<br />', array_unique($errors)) : ''
    ]);

    print_page('usercp_email.tpl');

} else {
    bb_die($lang['USER_NOT_EXIST']);
}