<?
##########################################################################
##########################  Script © by       ############################
##########################  www.usolved.net   ############################
##########################################################################

set_time_limit(0);


	@session_start();

		if($_POST['export_start'])
		{
			include(dirname(__FILE__)."/settings/connect.php");
            $filename="usolved_nletter.sql";
            $fp=fopen(dirname(__FILE__)."/settings/".$filename,"w+");


            ########### SQL Dump ###########

			$date=date("Y-m-d H:i:s");
$data.="
#
# www.usolved.net
# NLetter - Database Backup
# Date: $date
# Database: $db
#
";

            $result=mysql_query("SHOW TABLES LIKE '{$prefix}_entries'");
            while($row=mysql_fetch_row($result))
            {

                ##### INSERTS #####

                $get_list_content=mysql_query("SELECT * FROM $row[0]");
                while($aus_list_content=mysql_fetch_array($get_list_content))
                {
                $i=1;
                $j=1;
$data.="INSERT INTO $row[0] (";

                    $get_db_tab_n=mysql_query("SHOW COLUMNS FROM $row[0]");
                    while($aus_tab_n=mysql_fetch_row($get_db_tab_n))
                    {
                        if($aus_tab_n[0]!="id")
                        {
                            if($i!=1)$data.=",";
                            $data.=$aus_tab_n[0];
                            $i++;
                        }
                    }

$data.=") VALUES (";

                    $get_db_tab=mysql_query("SHOW COLUMNS FROM $row[0]");
                    while($aus_tab=mysql_fetch_row($get_db_tab))
                    {
                        if($aus_tab[0]!="id")
                        {
                            if($j!=1)$data.=",";
                            $content=str_replace("\n","\\n",$aus_list_content[$aus_tab[0]]);
        $data.="'".$content."'";
                            $j++;
    					}
                    }
$data.=");
";
                }

$data.="

";
			unset($data_temp);
			}

$data.="


";

            $result=mysql_query("SHOW TABLES LIKE '{$prefix}_group_def'");
            while($row=mysql_fetch_row($result))
            {

                ##### INSERTS #####

                $get_list_content=mysql_query("SELECT * FROM $row[0]");
                while($aus_list_content=mysql_fetch_array($get_list_content))
                {
                $i=1;
                $j=1;
$data.="INSERT INTO $row[0] (";

                    $get_db_tab_n=mysql_query("SHOW COLUMNS FROM $row[0]");
                    while($aus_tab_n=mysql_fetch_row($get_db_tab_n))
                    {
                        if($aus_tab_n[0]!="id")
                        {
                            if($i!=1)$data.=",";
                            $data.=$aus_tab_n[0];
                            $i++;
                        }
                    }

$data.=") VALUES (";

                    $get_db_tab=mysql_query("SHOW COLUMNS FROM $row[0]");
                    while($aus_tab=mysql_fetch_row($get_db_tab))
                    {
                        if($aus_tab[0]!="id")
                        {
                            if($j!=1)$data.=",";
                            $content=str_replace("\n","\\n",$aus_list_content[$aus_tab[0]]);
        $data.="'".$content."'";
                            $j++;
    					}
                    }
$data.=");
";
                }

$data.="

";
			unset($data_temp);
			}

            ########### SQL Dump ###########


            fwrite($fp,$data);
            fclose($fp);

            header("Content-Disposition: atachment; filename=$filename");
            header("Content-Type: application/octet-stream");
            header("Content-Length: ".filesize(dirname(__FILE__)."/settings/".$filename));
            header("Pragma: no-cache");
            header("Expires: 0");

            $fp=fopen(dirname(__FILE__)."/settings/".$filename,"r");
            print fread($fp,filesize(dirname(__FILE__)."/settings/".$filename));
            fclose($fp);

            unlink(dirname(__FILE__)."/settings/".$filename);
            exit();
		}


	###############################################################
	###############################################################


$logout=$_GET['logout'];
if($logout=="ok")
{
    include(dirname(__FILE__)."/settings/connect.php");
    $get_settings=mysql_query("SELECT * FROM $prefix"."_settings");
    $aus_settings=mysql_fetch_object($get_settings);

    if($aus_settings->loginsave=="0")
    {
    session_start();
    session_destroy();
    }
    else
    {
    setcookie("usolved_nletter", "", time() - 3600);
    header("location: ".$file_root."/admin.php");
    }
}


include(dirname(__FILE__)."/settings/connect.php");
require(dirname(__FILE__)."/inc/user_check.php");
include(dirname(__FILE__)."/inc/functions.php");

if(empty($inclusion_path))
{
$inclusion_path=$file_root."/admin.php?";
}


################### Login Methode ändern ####################

$c_login=$_GET['c_login'];
if($c_login=="ok")
{
$c_into=$_GET['c_into'];

    $get_axxs=mysql_query("SELECT id,userlevel FROM $prefix"."_intern_users WHERE user='$user'");
    $aus_axxs=mysql_fetch_object($get_axxs);

    if($aus_axxs->userlevel=="1")
    {
    mysql_query("UPDATE $prefix"."_settings SET loginsave='$c_into'");

    	if($c_into=="0")
    	{
    	mysql_query("DELETE FROM $prefix"."_intern_login WHERE user='$user'");
		setcookie("usolved_nletter", "", time() - 36000);
		header("location: ".$file_root."/admin.php");
    	}
    	else
    	{
    	mysql_query("DELETE FROM $prefix"."_intern_login WHERE user='$user'");
    	session_start();
		session_destroy();
		header("location: ".$file_root."/admin.php");
    	}
    }
}


############# Newsletter Script deinstallieren ##############

$deinstall=$_GET['deinstall'];
if($deinstall=="ok")
{
    $get_axxs=mysql_query("SELECT id,userlevel FROM $prefix"."_intern_users WHERE user='$user'");
    $aus_axxs=mysql_fetch_object($get_axxs);

    if($aus_axxs->userlevel=="1")
    {
    mysql_query("DROP TABLE $prefix"."_intern_login");
    mysql_query("DROP TABLE $prefix"."_intern_users");
    mysql_query("DROP TABLE $prefix"."_entries");
    mysql_query("DROP TABLE $prefix"."_entries_temp");
    mysql_query("DROP TABLE $prefix"."_archiv");
    mysql_query("DROP TABLE $prefix"."_settings");
    mysql_query("DROP TABLE $prefix"."_plugin_cron");

    header("location: ".$file_root."/inc/deinstall_info.php");
	}
}

#############################################################
/* Adressen exportieren*/


if(isset($_POST['dl_file']))
{
    $get_mails=mysql_query("SELECT mail FROM $prefix"."_entries ORDER BY mail");
    while($aus_mails=mysql_fetch_object($get_mails))
    {
    $data.=$aus_mails->mail."\r\n";
    }

    header("Content-Disposition: atachment; filename=nletter_mails.bak");
    header("Content-Type: text/text");
    header("Pragma: no-cache");
    header("Expires: 0");
    echo $data;

    exit();
}

#############################################################


echo "<html>";
echo "<head>";
echo "<title>NLetter - Admin</title>";
echo "<link rel=\"stylesheet\" href=\"".$file_root."/settings/styles.css\" type=\"text/css\">";
?>
<script language="JavaScript">
<!--
function archiv(url)
         {
          open(url, 'archiv', "toolbar=0,scrollbars=1,location=0,status=0,menubar=0,resizable=0,width=400px,height=300px");
          href = url;
         }
function groupedit(url)
         {
          open(url, 'groupedit', "toolbar=0,scrollbars=1,location=0,status=0,menubar=0,resizable=0,width=250px,height=250px");
          href = url;
         }
function blacklist(url)
         {
          open(url, 'blacklist', "toolbar=0,scrollbars=1,location=0,status=0,menubar=0,resizable=0,width=250px,height=250px");
          href = url;
         }
function dropdown(targ,selObj,restore)
{
	eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
    if(restore)
    {
    selObj.selectedIndex=0;
    }
}

//-->
</script>
<?
echo "<script language=\"javascript\" src=\"".$file_root."/inc/js/tooltip.js\"></script>";
echo "<script language=\"javascript\" src=\"".$file_root."/inc/js/htmlcode.js\"></script>";
echo "</head>";
echo "<body bgcolor=\"#E7EBEE\">";
include(dirname(__FILE__)."/inc/admin_tooltips.php");

################################################

if($_GET['groupedit_id'])
{
	echo "<form action=\"$php_self\" method=\"post\">";

	if($_POST['editgroup_ok'])
	{
		$id_user=$_POST['id_user'];
		$radio_check=$_POST['radio_check'];

        $get_groupname=mysql_query("SELECT * FROM $prefix"."_groups WHERE groupname<>'Standard' ORDER BY groupname");
        while($aus_groupname=mysql_fetch_object($get_groupname))
        {
    		$get_group_check=mysql_query("SELECT * FROM $prefix"."_group_def WHERE id_user='".$id_user."' AND id_group='".$aus_groupname->id."'");
    		if(mysql_num_rows($get_group_check)==0 && $radio_check[$aus_groupname->id]==1)
    		{
    			mysql_query("INSERT INTO $prefix"."_group_def (id_user,id_group) VALUES ('".$id_user."','".$aus_groupname->id."')");
    		}
    		else
    		{
    			if($radio_check[$aus_groupname->id]==0)
    			mysql_query("DELETE FROM $prefix"."_group_def WHERE id_user='".$id_user."' AND id_group='".$aus_groupname->id."'");
    		}
    	}

	}

	########################################

    $groupedit_id=$_GET['groupedit_id'];
    $get_mail=mysql_query("SELECT * FROM $prefix"."_entries WHERE id='".$groupedit_id."'");
    $aus_mail=mysql_fetch_object($get_mail);

	echo "<table>";
	echo "<tr><td><b>Mail:</b></td><td>".$aus_mail->mail."</td></tr>";
	echo "<tr><td height=\"10\"></td></tr>";
	echo "</table>";

	echo "<table>";
	echo "<tr><td width=\"130\"><b>Gruppenname:</b></td><td><b>Zugewiesen:</b></td></tr>";
    $get_groupname=mysql_query("SELECT * FROM $prefix"."_groups WHERE groupname<>'Standard' ORDER BY groupname");
    while($aus_groupname=mysql_fetch_object($get_groupname))
    {
    	echo "<tr><td>".$aus_groupname->groupname."</td><td>";

    		$get_group_check=mysql_query("SELECT * FROM $prefix"."_group_def WHERE id_user='".$groupedit_id."' AND id_group='".$aus_groupname->id."'");
    		if(mysql_num_rows($get_group_check)==0)
    		echo "<input type=\"checkbox\" name=\"radio_check[".$aus_groupname->id."]\" value=\"1\">";
    		else
    		echo "<input type=\"checkbox\" name=\"radio_check[".$aus_groupname->id."]\" value=\"1\" checked>";

    	echo "</td></tr>";
    }
    echo "<tr><td height=\"14\"></td></tr>";
    echo "<tr><td><input type=\"hidden\" name=\"id_user\" value=\"".$groupedit_id."\"><input type=\"submit\" name=\"editgroup_ok\" value=\"Editieren\" style=\"width:120;\"></td></tr>";
    echo "</table>";

	echo "</form>";

echo "</body></html>";
exit;
}

###################################

if($_GET['blacklist']=="ok")
{
	if($_GET['delid'])
	{
		$delid=$_GET['delid'];
		mysql_query("DELETE FROM $prefix"."_blacklist WHERE id='".$delid."'");
	}
	if($_GET['delall'])
	{
		mysql_query("DELETE FROM $prefix"."_blacklist");

	}
	echo "<table>";
	echo "<tr><td><b>Gesperrte Mail Adressen:</b></td></tr>";
    $get_bl=mysql_query("SELECT * FROM $prefix"."_blacklist ORDER BY mail");
    if(mysql_num_rows($get_bl)!=0)
    {
    $near_9="#E7EBEE";
    $near_0="#F1F1F1";

        while($aus_bl=mysql_fetch_object($get_bl))
        {
            echo "<tr bgcolor=\"$near_9\" onmouseover=\"javascript:this.bgColor='$near_0';\" onmouseout=\"javascript:this.bgColor='$near_9';status='';return true;\"><td>".$aus_bl->mail."</td><td><a href=\"".$file_root."/admin.php?s=$s&blacklist=".$_GET['blacklist']."&delid=".$aus_bl->id."\" onClick=\"return confirm('Sind Sie sich sicher?')\"><img src=\"".$file_root."/images/delicon_s.gif\" border=\"0\" title=\"L&ouml;schen\"></a></td></tr>";
        }

	echo "<tr><td height=\"10\"></td></tr>";
	echo "<tr><td><a href=\"".$file_root."/admin.php?s=$s&blacklist=".$_GET['blacklist']."&delall=ok\" onClick=\"return confirm('Sind Sie sich sicher?')\">Alle Adressen l&ouml;schen</a></td></tr>";
    }
    else
    {
    	echo "<tr><td>Biser keine</td></tr>";
    }
    echo "</table>";
exit;
}

###################################

$archivid=$_GET['archivid'];
if($archivid)
{

    $get_archiv=mysql_query("SELECT id,id_group,absender,betreff,msg,empf,date_format(date, '%d.%m.%Y') as date FROM $prefix"."_archiv WHERE id='$archivid'");
    $aus_archiv=mysql_fetch_object($get_archiv);

    $get_groupname=mysql_query("SELECT groupname FROM $prefix"."_groups WHERE id='$aus_archiv->id_group'");
    $aus_groupname=mysql_fetch_object($get_groupname);

	$text=str_replace("<br>", "\n", $aus_archiv->msg);
	echo "<table>";
    echo "<tr><td width=\"80\"><b>Absender:</b></td><td>$aus_archiv->absender</td></tr>";
    echo "<tr><td><b>Betreff:</b></td><td>$aus_archiv->betreff</td></tr>";
    echo "<tr><td><b>Datum:</b></td><td>$aus_archiv->date</td></tr>";
    echo "<tr><td valign=\"top\"><b>Text:</b></td><td>$text</td></tr>";
	echo "</table>";
	echo "<br>";
	echo "<table>";
    echo "<tr><td>Wurde an $aus_archiv->empf Empf&auml;nger der Gruppe $aus_groupname->groupname gesendet!</td></tr>";
	echo "</table>";

echo "</body></html>";
exit;
}

################################################

echo "<center>";

echo "<table cellpadding=\"0\" cellspacing=\"0\"border=\"0\">";
echo "<tr align=\"right\"><td height=\"16\"></td></tr>";
echo "</table>";


echo "<table cellpadding=\"0\" cellspacing=\"0\" align=\"center\" border=\"0\" width=\"700\">";
echo "<tr align=\"right\">";

echo "<td width=\"412\"></td>";
echo "<td background=\"".$file_root."/images/icon_above.gif\">
<a href=\"".substr($inclusion_path,0,-1)."\"><img src=\"".$file_root."/images/icon_adminindex.gif\" border=\"0\"></a>
<a href=\"".$inclusion_path."nletter_preview=ok\"><img src=\"".$file_root."/images/icon_newsletterindex.gif\" border=\"0\"></a>
<a href=\"".$inclusion_path."sendin_preview=ok\"><img src=\"".$file_root."/images/icon_sendinindex.gif\" border=\"0\"></a>
</td>";


echo "</tr>";
echo "</table>";

echo "<table cellpadding=\"0\" cellspacing=\"1\" align=\"center\" border=\"0\" bgcolor=\"#000000\" width=\"700\">";
echo "<tr><td>";

echo "<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\"  bgcolor=\"#FFFFFF\">";
echo "<tr><td>";

//--------------------------

echo "<table cellpadding=\"0\" cellspacing=\"0\"><tr align=\"right\">";
echo "<td>";

/* MODULE LOADED */
if(empty($_GET['module']))echo "<img src=\"".$file_root."/images/logo.jpg\">";
else echo "<img src=\"images/tab_o0.jpg\">";
/*###############*/

echo "</td><td background=\"".$file_root."/images/tab_o1.jpg\" width=\"532\">
<a href=\"".$inclusion_path."s=newsletter\"><img src=\"".$file_root."/images/icon_newsletter.gif\" border=\"0\"></a>&nbsp;&nbsp;&nbsp;
<a href=\"".$inclusion_path."s=sendin\">";


	$view_ids=explode(",",$user_viewed);

	$z=0;
    $get_ids=mysql_query("SELECT id FROM $prefix"."_send_in ORDER BY id");
    while($aus_ids=mysql_fetch_object($get_ids))
    {
    $all_ids[$z]=$aus_ids->id;
    $z++;
    }


	$get_send_in=mysql_query("SELECT count(id) AS send_in_id FROM {$prefix}_send_in");
	$aus_send_in=mysql_fetch_object($get_send_in);

	$view_ids=explode(",",$user_viewed);
	$new_msgs=$aus_send_in->send_in_id-(count($view_ids)-1);

    if($new_msgs>0)
    echo "<img src=\"".$file_root."/images/icon_sendin_new.gif\" border=\"0\">";
    else
    echo "<img src=\"".$file_root."/images/icon_sendin.gif\" border=\"0\">";


echo "</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
<a href=\"".$inclusion_path."s=setuser\"><img src=\"".$file_root."/images/icon_setuser.gif\"border=\"0\"></a>&nbsp;&nbsp;&nbsp;
<a href=\"".$inclusion_path."s=set\"><img src=\"".$file_root."/images/icon_settings.gif\" border=\"0\"></a>&nbsp;&nbsp;&nbsp;
<a href=\"".$inclusion_path."s=import\"><img src=\"".$file_root."/images/icon_ex_import.gif\" border=\"0\"></a>&nbsp;&nbsp;&nbsp";
echo "</td>";
echo "</tr></table>";

echo "<table cellpadding=\"8\" width=\"100%\"><tr><td>";


	$s=$_GET['s'];

	if(!empty($_GET['nletter_preview']))
	{
		echo "<table width=\"100%\"><tr><td><center><b>Ausgabe vom Newsletterformular...</b></center></td></tr></table>";
	}
	elseif(!empty($_GET['sendin_preview']))
	{
		echo "<table width=\"100%\"><tr><td><center><b>Ausgabe vom Kontaktformular...</b></center></td></tr></table>";
	}
	else
	{

        ## 2.1 #########################################################################
        //------------------------ Überprüfen der Angaben -----------------------------

        include(dirname(__FILE__)."/inc/admin_sendmails.php");


        ## 2.0 #########################################################################
        //------------------------- Start -----------------------------

        if(!$s)
        {

        include(dirname(__FILE__)."/inc/admin_start.php");

        }

        ################################################################################
        ## 3.0 #########################################################################
        //-------------------------- Formular zum Absenden ------------------------------

        if($s=="newsletter")
        {

        include(dirname(__FILE__)."/inc/admin_sendform.php");

        }

        ## 4.0 #########################################################################
        //------------------------- Formular zum Absenden -----------------------------

        if($s=="sendin")
        {

        include(dirname(__FILE__)."/inc/admin_sendin.php");

        }

        ################################################################################
        ## 5.0 #########################################################################
        //-------------------------- Benutzer Verwaltung ------------------------------

        if($s=="setuser")
        {

        include(dirname(__FILE__)."/inc/admin_setuser.php");

        }


        ################################################################################
        ## 6.0 #########################################################################
        //----------------------------- Einstellungen ---------------------------------

        if($s=="set")
        {

        include(dirname(__FILE__)."/inc/admin_settings.php");

        }


        ################################################################################
        ## 7.0 #########################################################################
        //----------------------------- Importieren ---------------------------------

        if($s=="import")
        {

        include(dirname(__FILE__)."/inc/admin_ex_import.php");

        }

	}


echo "<br></td></tr></table>";


echo "</td></tr></table>";
echo "</td></tr></table>";

################################################################################

    if(!empty($_GET['nletter_preview']))
    {

    echo "<br><br>";
    echo "<iframe src=\"".$file_root."/newsletter.php\" width=\"698\" height=\"300\" marginheight=\"10\" marginwidth=\"10\" align=\"center\" style=\"border: 1px solid #000000; background:#FFFFFF;\">";
    echo "</iframe>";
    echo "<br>";
    }
    elseif(!empty($_GET['sendin_preview']))
    {

    echo "<br><br>";
    echo "<iframe src=\"".$file_root."/sendin.php\" width=\"698\" height=\"300\" marginheight=\"10\" marginwidth=\"10\" align=\"center\" style=\"border: 1px solid #000000; background:#FFFFFF;\">";
    echo "</iframe>";
    echo "<br>";
    }
echo "<br>";

    $get_axxs=mysql_query("SELECT id,userlevel FROM $prefix"."_intern_users WHERE user='$user'");
    $aus_axxs=mysql_fetch_object($get_axxs);

    if($aus_axxs->userlevel=="1")
    {
    echo "<a href=\"".$inclusion_path."deinstall=ok\" onClick=\"return confirm('Damit wird das komplette Newsletter Script unbrauchbar und s&auml;mtliche Inhalte dessen in der Datenbank gel&ouml;scht. Dies sollten sie nur tun wenn sie das Newsletter Script nicht mehr brauchen. Sind Sie sich sicher das sie das Newsletter Script l&ouml;schen wollen?')\">Deinstallieren</a> | ";
    if($aus_settings->loginsave=="0"){echo "<a href=\"".$inclusion_path."c_login=ok&c_into=1\">Login Methode in Cookies";}
    else{echo "<a href=\"".$inclusion_path."c_login=ok&c_into=0\">Login Methode in Sessions";}
    echo " &auml;ndern</a> | ";
	}

echo "<a href=\"".$inclusion_path."logout=ok\">Logout</a>";
echo "<br>NLetter v1.7 &copy by <a href=\"http://www.usolved.net\" target=\"_blank\">usolved.net</a>";
echo "</center>";

echo "</body>";
echo "</html>";

?>