@@ -77,7 +77,117 @@ $sects = array("main", "submissions", "sitesettings", "display", "reviews", "use

 //if(!isset($_GET['sect'])) $sect = "main";

 //else $sect = $_GET['sect'];

 $sect = isset($_GET['sect']) ? $_GET['sect'] : "main";

-if(isset($_POST['submit'])) {

+if(isset($_POST['testsmtp']) && $sect == "email") {

+	// SMTP connection test. Runs only on POST (the Test button), never via a GET

+	// parameter. It verifies the SAVED settings loaded from fanfiction_settings

+	// (via header.php) -- NOT the unsaved form values -- by opening a real SMTP

+	// connection and reporting each step. It never sends an email and never writes

+	// to the database, so it must not touch $result or advance $sects.

+	$output .= "<h2>"._TESTSMTP_HEADER."</h2>";

+	if(empty($smtp_host)) {

+		$output .= write_error(_TESTSMTP_NOHOST);

+	}

+	else {

+		// Effective values MUST mirror the real sending behaviour of sendemail():

+		// PHPMailer's default port is 25, and 'ssl' uses an ssl:// transport prefix.

+		$port   = !empty($smtp_port) ? (int) $smtp_port : 25;

+		$secure = !empty($smtp_secure) ? $smtp_secure : '';

+		$host   = ($secure === 'ssl') ? 'ssl://'.$smtp_host : $smtp_host;

+

+		$output .= write_message(sprintf(_TESTSMTP_PORTNOTE, htmlspecialchars((string) $port), htmlspecialchars($secure !== '' ? $secure : '(none)')));

+		// If encryption is requested but no port is saved, warn about the usual port

+		// -- but still run the test on the effective values, since that is what real

+		// sending will do.

+		if(empty($smtp_port) && $secure === 'ssl') $output .= write_message(_TESTSMTP_SSLPORTWARN);

+		if(empty($smtp_port) && $secure === 'tls') $output .= write_message(_TESTSMTP_TLSPORTWARN);

+

+		// Load the SMTP class the same way emailer.php loads PHPMailer, via the

+		// autoloader -- NOT by requiring class.smtp.php directly. After the planned

+		// PHPMailer 6.x upgrade the autoload file becomes a shim and this must keep

+		// working (that upgrade must alias the SMTP class name; see issue #2).

+		require_once(_BASEDIR."includes/PHPMailerAutoload.php");

+

+		$steps = "";

+		ob_start();

+		$smtp = new SMTP;

+		$smtp->do_debug = 2;

+		try {

+			if(!$smtp->connect($host, $port, 10)) {

+				$steps .= write_error(sprintf(_TESTSMTP_CONNECTFAIL, htmlspecialchars($host), htmlspecialchars((string) $port)));

+			}

+			else {

+				$steps .= write_message(sprintf(_TESTSMTP_CONNECTOK, htmlspecialchars($host), htmlspecialchars((string) $port)));

+				if(!$smtp->hello(gethostname())) {

+					$err = $smtp->getError();

+					$steps .= write_error(sprintf(_TESTSMTP_HELOFAIL, htmlspecialchars(!empty($err['error']) ? $err['error'] : '')));

+				}

+				else {

+					$steps .= write_message(_TESTSMTP_HELOOK);

+					$ext = $smtp->getServerExtList();

+					$hasStartTls = is_array($ext) && array_key_exists('STARTTLS', $ext);

+					if($hasStartTls) {

+						$steps .= write_message(_TESTSMTP_STARTTLSOK);

+						if($secure === 'tls') {

+							if(!$smtp->startTLS()) {

+								$err = $smtp->getError();

+								$steps .= write_error(sprintf(_TESTSMTP_STARTTLSFAIL, htmlspecialchars(!empty($err['error']) ? $err['error'] : '')));

+							}

+							else {

+								// Re-issue EHLO over the now-encrypted channel and refresh caps.

+								$smtp->hello(gethostname());

+								$ext = $smtp->getServerExtList();

+							}

+						}

+					}

+					else if($secure === 'tls') {

+						$steps .= write_error(_TESTSMTP_STARTTLSMISSING);

+					}

+					$hasAuth = is_array($ext) && array_key_exists('AUTH', $ext);

+					if($hasAuth) {

+						if(!empty($smtp_username)) {

+							if(!$smtp->authenticate($smtp_username, $smtp_password)) {

+								// NOTE: never include the password in this message.

+								$err = $smtp->getError();

+								$steps .= write_error(sprintf(_TESTSMTP_AUTHFAIL, htmlspecialchars(!empty($err['error']) ? $err['error'] : '')));

+							}

+							else {

+								$steps .= write_message(_TESTSMTP_AUTHOK);

+							}

+						}

+						else {

+							$steps .= write_message(_TESTSMTP_AUTHSKIP);

+						}

+					}

+					else {

+						$steps .= write_message(_TESTSMTP_NOAUTH);

+					}

+				}

+			}

+		} catch (Exception $e) {

+			$steps .= write_error(htmlspecialchars($e->getMessage()));

+		}

+		// Always close the connection, even if we stopped early above.

+		$smtp->quit(true);

+		$debug = ob_get_clean();

+

+		// SECURITY: the debug transcript at level 2 echoes client commands, which

+		// during AUTH include the base64-encoded credentials. Redact every form of

+		// the password before it is ever shown so it is never printed anywhere.

+		if(!empty($smtp_password)) {

+			$secrets = array(

+				$smtp_password,

+				base64_encode($smtp_password),

+				base64_encode("\0".$smtp_username."\0".$smtp_password), // AUTH PLAIN

+			);

+			$debug = str_replace($secrets, "***REDACTED***", $debug);

+		}

+

+		$output .= $steps;

+		// Server banners are untrusted input -> escape the whole transcript (XSS).

+		$output .= "<h3>"._TESTSMTP_TRANSCRIPT."</h3><pre style='text-align:left; overflow:auto; background-color: rgba(0, 0, 0, .6); margin-top: 10px; color: #fff; padding: 8px;'>".htmlspecialchars($debug)."</pre>";

+	}

+}

+else if(isset($_POST['submit'])) {

 	if($sect == "main") {

 		if(!preg_match("!^[a-z0-9_]{3,30}$!i", $_POST['newsitekey'])) $output .= write_error(_BADSITEKEY);

 		else {

@@ -164,21 +274,29 @@ if(isset($_POST['submit'])) {

 		$result = dbquery("UPDATE ".$settingsprefix."fanfiction_settings SET alertson = '$alertson', disablepopups = '$disablepopups', agestatement = '$agestatement', pwdsetting = '$pwdsetting' WHERE sitekey ='".SITEKEY."'");

 	}

 	else if($sect == "email") {

-		$smtp_host = $_POST['newsmtp_host'];

-		$smtp_username = $_POST['newsmtp_username'];

-		$smtp_password = $_POST['newsmtp_password'];

-		$result = dbquery("UPDATE ".$settingsprefix."fanfiction_settings SET smtp_host = '$smtp_host', smtp_username = '$smtp_username', smtp_password = '$smtp_password' WHERE sitekey ='".SITEKEY."'");

+		$smtp_host = escapestring(descript(strip_tags($_POST['newsmtp_host'])));

+		$smtp_username = escapestring(descript(strip_tags($_POST['newsmtp_username'])));

+		$smtp_password = escapestring(descript(strip_tags($_POST['newsmtp_password'])));

+		$smtp_port = !empty($_POST['newsmtp_port']) ? (int) $_POST['newsmtp_port'] : '';

+		$smtp_secure = in_array($_POST['newsmtp_secure'], array('', 'tls', 'ssl'), true) ? $_POST['newsmtp_secure'] : '';

+		$result = dbquery("UPDATE ".$settingsprefix."fanfiction_settings SET smtp_host = '$smtp_host', smtp_username = '$smtp_username', smtp_password = '$smtp_password', smtp_port = '$smtp_port', smtp_secure = '$smtp_secure' WHERE sitekey ='".SITEKEY."'");

 	}

 	if ($result) {

 		$output .= write_message(_ACTIONSUCCESSFUL);

-		

-		$idx = array_search($sect, $sects);

-		if ($idx !== false) {

-			$next_idx = $idx + 1;

-			if ($next_idx >= count($sects)) {

-				$next_idx = 0;

+		// The section-advance wizard is for the INSTALLER only (install/install.php

+		// includes this file and steps through sections). In admin, "email" is the

+		// last entry in $sects, so advancing would wrap to 0 and jump back to the

+		// first tab while the URL still says sect=email. $action is undefined in the

+		// installer include context, so guard with isset() to avoid a PHP 8 warning.

+		if (!isset($action) || $action != "settings") {

+			$idx = array_search($sect, $sects);

+			if ($idx !== false) {

+				$next_idx = $idx + 1;

+				if ($next_idx >= count($sects)) {

+					$next_idx = 0;

+				}

+				$sect = $sects[$next_idx];

 			}

-			$sect = $sects[$next_idx];

 		}

 	} else {

 		$output .= write_error(_ERROR);

@@ -190,8 +308,9 @@ if(isset($_POST['submit'])) {

 		if(is_NULL($val)) $val = '';

 		$$var = stripslashes($val );

 	}

+	}

-	$output .= "<form method='POST' class='tblborder' style='' enctype='multipart/form-data' action='".($action == "settings" ? "admin.php?action=settings" : $_SERVER['PHP_SELF']."?step=".$_GET['step'])."&amp;sect=$sect'>";

+	$output .= "<form method='POST' class='tblborder' style='' enctype='multipart/form-data' action='".((isset($action) && $action == "settings") ? "admin.php?action=settings" : $_SERVER['PHP_SELF']."?step=".$_GET['step'])."&amp;sect=$sect'>";

 	if($sect == "main") {

 		$output .= "<h2>"._SITEINFO."</h2>

 		<table class='acp'>

@@ -488,8 +607,32 @@ if(isset($_POST['submit'])) {

 				<td><label for='newsmtp_username'>"._SMTPUSER.":</label></td><td><input name='newsmtp_username' type='text' value='$smtp_username'> <a href='#' class='pophelp'>[?]<span>"._HELP_SMTPUSER."</span></a></td>

 		</tr>

 		<tr>

-				<td><label for='newsmtp_password'>"._SMTPPASS.":</label></td><td><input name='newsmtp_password' type='password' value='$smtp_password'> <a href='#' class='pophelp'>[?]<span>"._HELP_SMTPPWD."</span></a></td></tr>";		

+				<td><label for='newsmtp_password'>"._SMTPPASS.":</label></td><td><input name='newsmtp_password' type='password' value='$smtp_password'> <a href='#' class='pophelp'>[?]<span>"._HELP_SMTPPWD."</span></a></td></tr>

+		<tr>

+				<td><label for='newsmtp_port'>"._SMTPPORT.":</label></td><td><input name='newsmtp_port' type='text' value='".((isset($smtp_port) && $smtp_port !== '') ? $smtp_port : '')."'> <a href='#' class='pophelp'>[?]<span>"._HELP_SMTPPORT."</span></a></td>

+		</tr>

+		<tr>

+				<td><label for='newsmtp_secure'>"._SMTPSECURE.":</label></td><td><select name='newsmtp_secure'>

+					<option value=''".((!isset($smtp_secure) || $smtp_secure === '') ? " selected" : "").">(none)</option>

+					<option value='tls'".((isset($smtp_secure) && $smtp_secure == 'tls') ? " selected" : "").">STARTTLS / 587</option>

+					<option value='ssl'".((isset($smtp_secure) && $smtp_secure == 'ssl') ? " selected" : "").">SSL / 465</option>

+				</select> <a href='#' class='pophelp'>[?]<span>"._HELP_SMTPSECURE."</span></a></td></tr>";

 		$output .= 	write_message(_SMTPOFF);

 	}

 	$output .= "<tr><td colspan='2'><div align='center'><input type='submit' id='submit' class='button' name='submit' value='"._SUBMIT."'></div></form></td></tr></table>";

+	// The SMTP test button lives OUTSIDE the main settings form (nested forms are

+	// invalid HTML). It is its own POST mini-form -- a submit button, not a GET

+	// link -- so the outbound SMTP connection can't be triggered by a plain link

+	// or a browser prefetch. The existing testsmtp handler posts to the same URL.

+	if($sect == "email") {

+		$output .= "<h2>"._TESTSMTP_HEADER."</h2>

+		<ul>

+			<li>

+				<form method='POST' action='admin.php?action=settings&amp;sect=email' style='display:inline'>

+					<input type='submit' class='button' name='testsmtp' value='"._TESTSMTP."'>

+				</form>

+				<a href='#' class='pophelp'>[?]<span>"._HELP_TESTSMTP."</span></a>

+			</li>

+		</ul>";

+	}

 ?>

@@ -29,7 +29,7 @@ if(!defined("_CHARSET")) exit( );

 function sendemail($to_name,$to_email,$from_name,$from_email,$subject,$message,$type="plain",$cc="",$bcc="") {

-	global $language, $smtp_host, $smtp_username, $smtp_password, $siteemail;     

+	global $language, $smtp_host, $smtp_username, $smtp_password, $smtp_port, $smtp_secure, $smtp_debug, $siteemail;

 	// Check for hackers and spammers and bad input

 	if(!isset($_SERVER['HTTP_USER_AGENT'])) return false;

@@ -64,12 +64,22 @@ function sendemail($to_name,$to_email,$from_name,$from_email,$subject,$message,$

 	if(!$smtp_host) {

 		$mail->IsMail( );

 	}

-	else { 

+	else {

 		$mail->IsSMTP( );

 		$mail->Host = $smtp_host;

 		$mail->SMTPAuth = true;

 		$mail->Username = $smtp_username;

 		$mail->Password = $smtp_password;

+		// Apply transport settings only when configured; otherwise leave PHPMailer

+		// defaults (and SMTPAutoTLS) in place. !empty() avoids 8.x warnings on

+		// not-yet-migrated installs where these globals are undefined.

+		if (!empty($smtp_port))   $mail->Port = (int) $smtp_port;

+		if (!empty($smtp_secure)) $mail->SMTPSecure = $smtp_secure;   // '', 'tls', 'ssl'

+		// Optional handshake debugging, off unless $smtp_debug is set. Routed to the PHP error log.

+		if(!empty($smtp_debug)) {

+			$mail->SMTPDebug = 2;

+			$mail->Debugoutput = function($str, $level) { error_log("eFiction SMTP debug [$level]: ".trim($str)); };

+		}

 	}

 	$mail->CharSet = _CHARSET;

 	$mail->From = $siteemail;

@@ -97,10 +107,11 @@ function sendemail($to_name,$to_email,$from_name,$from_email,$subject,$message,$

 	$mail->Subject = $subject;

 	$mail->Body = $message;

 	if(!$mail->Send()) {

-		$mail->ErrorInfo;

+		$errorinfo = $mail->ErrorInfo;

+		error_log("eFiction sendemail failed for ".$to_email.": ".$errorinfo);

 		$mail->ClearAllRecipients();

 		$mail->ClearReplyTos();

-		return $mail->ErrorInfo;

+		return false;

 	} else {

 		$mail->ClearAllRecipients(); 

 		$mail->ClearReplyTos();

new file mode 100644

new file mode 100644

@@ -0,0 +1,23 @@

+<?php

+/**

+ * PHPMailer language file.  

+ * English Version

+ */

+

+$PHPMAILER_LANG = array();

+

+$PHPMAILER_LANG["provide_address"] = 'You must provide at least one ' .

+                                     'recipient email address.';

+$PHPMAILER_LANG["mailer_not_supported"] = ' mailer is not supported.';

+$PHPMAILER_LANG["execute"] = 'Could not execute: ';

+$PHPMAILER_LANG["instantiate"] = 'Could not instantiate mail function.';

+$PHPMAILER_LANG["authenticate"] = 'SMTP Error: Could not authenticate.';

+$PHPMAILER_LANG["from_failed"] = 'The following From address failed: ';

+$PHPMAILER_LANG["recipients_failed"] = 'SMTP Error: The following ' .

+                                       'recipients failed: ';

+$PHPMAILER_LANG["data_not_accepted"] = 'SMTP Error: Data not accepted.';

+$PHPMAILER_LANG["connect_host"] = 'SMTP Error: Could not connect to SMTP host.';

+$PHPMAILER_LANG["file_access"] = 'Could not access file: ';

+$PHPMAILER_LANG["file_open"] = 'File Error: Could not open file: ';

+$PHPMAILER_LANG["encoding"] = 'Unknown encoding: ';

+?>

new file mode 100644

@@ -0,0 +1,70 @@

+<?php

+

+// Some DB functions 

+

+if(!function_exists("dbconnect")) { // just in case.  Some people seemed to be having an issue and this was the easiest fix.

+

+function dbconnect($dbhost, $dbuser, $dbpass, $dbname ) {

+	$mysql_access = mysql_connect($dbhost, $dbuser, $dbpass);

+	if(!$mysql_access) {

+		include(_BASEDIR."languages/en.php");

+		die(_FATALERROR." "._NOTCONNECTED);

+	}

+	mysql_select_db($dbname, $mysql_access);

+	mysql_query("SET SESSION sql_mode = 'MYSQL40'");

+	return $mysql_access;

+}

+

+

+function dbquery($query) {

+	global $debug, $headerSent, $dbconnect;

+	if($debug  && $headerSent) echo "<!-- $query -->\n";

+	$result = mysql_query($query, $dbconnect) or accessDenied( _FATALERROR.(isADMIN ? "Query: ".$query."<br />Error: (".mysql_errno( ).") ".mysql_error( ) : ""));

+	return $result;

+}

+

+function dbnumrows($query) {

+	global $debug, $dbconnect;

+	if ($query === false && mysql_errno( ) > 0 && $debug) {

+		echo "<!-- dbnumrows ".mysql_error( )." -->\n";

+	}

+	$query = mysql_num_rows($query);

+	return $query;

+}

+

+function dbassoc($query) {

+	global $debug, $dbconnect;

+	if ($query === false && mysql_errno( ) > 0 && $debug) {

+		echo "<!-- dbassoc ".mysql_error( )." -->\n";

+	}

+	$query = mysql_fetch_assoc($query);

+	return $query;

+}

+

+function dbinsertid($tablename = 0) {

+	return mysql_insert_id( );

+}

+

+function dbrow($query) {

+	global $debug, $dbconnect;

+	if ($query === false && mysql_errno( ) > 0 && $debug) {

+		if($error) echo "<!-- dbrow ".mysql_error( )." -->\n";

+	}

+	$query = mysql_fetch_row($query);

+	return $query;

+}

+

+// Used to escape text being put into the database.

+function escapestring($str) {

+   if (!is_array($str)) return mysql_real_escape_string($str);

+   else return array_map('escapestring', $str);

+}

+

+function dbclose( ) {

+	global $dbconnect;

+	mysql_close($dbconnect);

+

+}

+// End DB functions

+}

+?>

\ No newline at end of file

new file mode 100644

@@ -0,0 +1,1501 @@

+<?php

+if(!defined("_CHARSET")) exit( );

+////////////////////////////////////////////////////

+// PHPMailer - PHP email class

+//

+// Class for sending email using either

+// sendmail, PHP mail(), or SMTP.  Methods are

+// based upon the standard AspEmail(tm) classes.

+//

+// Copyright (C) 2001 - 2003  Brent R. Matzelle

+//

+// License: LGPL, see LICENSE

+////////////////////////////////////////////////////

+

+/**

+ * PHPMailer - PHP email transport class

+ * @package PHPMailer

+ * @author Brent R. Matzelle

+ * @copyright 2001 - 2003 Brent R. Matzelle

+ */

+class PHPMailer

+{

+

+    /////////////////////////////////////////////////

+    // PUBLIC VARIABLES

+    /////////////////////////////////////////////////

+

+    /**

+     * Email priority (1 = High, 3 = Normal, 5 = low).

+     * @var int

+     */

+    var $Priority          = 3;

+

+    /**

+     * Sets the CharSet of the message.

+     * @var string

+     */

+    var $CharSet           = "iso-8859-1";

+

+    /**

+     * Sets the Content-type of the message.

+     * @var string

+     */

+    var $ContentType        = "text/plain";

+

+    /**

+     * Sets the Encoding of the message. Options for this are "8bit",

+     * "7bit", "binary", "base64", and "quoted-printable".

+     * @var string

+     */

+    var $Encoding          = "8bit";

+

+    /**

+     * Holds the most recent mailer error message.

+     * @var string

+     */

+    var $ErrorInfo         = "";

+

+    /**

+     * Sets the From email address for the message.

+     * @var string

+     */

+    var $From               = "root@localhost";

+

+    /**

+     * Sets the From name of the message.

+     * @var string

+     */

+    var $FromName           = "Root User";

+

+    /**

+     * Sets the Sender email (Return-Path) of the message.  If not empty,

+     * will be sent via -f to sendmail or as 'MAIL FROM' in smtp mode.

+     * @var string

+     */

+    var $Sender            = "";

+

+    /**

+     * Sets the Subject of the message.

+     * @var string

+     */

+    var $Subject           = "";

+

+    /**

+     * Sets the Body of the message.  This can be either an HTML or text body.

+     * If HTML then run IsHTML(true).

+     * @var string

+     */

+    var $Body               = "";

+

+    /**

+     * Sets the text-only body of the message.  This automatically sets the

+     * email to multipart/alternative.  This body can be read by mail

+     * clients that do not have HTML email capability such as mutt. Clients

+     * that can read HTML will view the normal Body.

+     * @var string

+     */

+    var $AltBody           = "";

+

+    /**

+     * Sets word wrapping on the body of the message to a given number of 

+     * characters.

+     * @var int

+     */

+    var $WordWrap          = 0;

+

+    /**

+     * Method to send mail: ("mail", "sendmail", or "smtp").

+     * @var string

+     */

+    var $Mailer            = "mail";

+

+    /**

+     * Sets the path of the sendmail program.

+     * @var string

+     */

+    var $Sendmail          = "/usr/sbin/sendmail";

+    

+    /**

+     * Path to PHPMailer plugins.  This is now only useful if the SMTP class 

+     * is in a different directory than the PHP include path.  

+     * @var string

+     */

+    var $PluginDir         = "";

+

+    /**

+     *  Holds PHPMailer version.

+     *  @var string

+     */

+    var $Version           = "1.73";

+

+    /**

+     * Sets the email address that a reading confirmation will be sent.

+     * @var string

+     */

+    var $ConfirmReadingTo  = "";

+

+    /**

+     *  Sets the hostname to use in Message-Id and Received headers

+     *  and as default HELO string. If empty, the value returned

+     *  by SERVER_NAME is used or 'localhost.localdomain'.

+     *  @var string

+     */

+    var $Hostname          = "";

+

+    /////////////////////////////////////////////////

+    // SMTP VARIABLES

+    /////////////////////////////////////////////////

+

+    /**

+     *  Sets the SMTP hosts.  All hosts must be separated by a

+     *  semicolon.  You can also specify a different port

+     *  for each host by using this format: [hostname:port]

+     *  (e.g. "smtp1.example.com:25;smtp2.example.com").

+     *  Hosts will be tried in order.

+     *  @var string

+     */

+    var $Host        = "localhost";

+

+    /**

+     *  Sets the default SMTP server port.

+     *  @var int

+     */

+    var $Port        = 25;

+

+    /**

+     *  Sets the SMTP HELO of the message (Default is $Hostname).

+     *  @var string

+     */

+    var $Helo        = "";

+

+    /**

+     *  Sets SMTP authentication. Utilizes the Username and Password variables.

+     *  @var bool

+     */

+    var $SMTPAuth     = false;

+

+    /**

+     *  Sets SMTP username.

+     *  @var string

+     */

+    var $Username     = "";

+

+    /**

+     *  Sets SMTP password.

+     *  @var string

+     */

+    var $Password     = "";

+

+    /**

+     *  Sets the SMTP server timeout in seconds. This function will not 

+     *  work with the win32 version.

+     *  @var int

+     */

+    var $Timeout      = 10;

+

+    /**

+     *  Sets SMTP class debugging on or off.

+     *  @var bool

+     */

+    var $SMTPDebug    = false;

+

+    /**

+     * Prevents the SMTP connection from being closed after each mail 

+     * sending.  If this is set to true then to close the connection 

+     * requires an explicit call to SmtpClose(). 

+     * @var bool

+     */

+    var $SMTPKeepAlive = false;

+

+    /**#@+

+     * @access private

+     */

+    var $smtp            = NULL;

+    var $to              = array();

+    var $cc              = array();

+    var $bcc             = array();

+    var $ReplyTo         = array();

+    var $attachment      = array();

+    var $CustomHeader    = array();

+    var $message_type    = "";

+    var $boundary        = array();

+    var $language        = array();

+    var $error_count     = 0;

+    var $LE              = "\n";

+    /**#@-*/

+    

+    /////////////////////////////////////////////////

+    // VARIABLE METHODS

+    /////////////////////////////////////////////////

+

+    /**

+     * Sets message type to HTML.  

+     * @param bool $bool

+     * @return void

+     */

+    function IsHTML($bool) {

+        if($bool == true)

+            $this->ContentType = "text/html";

+        else

+            $this->ContentType = "text/plain";

+    }

+

+    /**

+     * Sets Mailer to send message using SMTP.

+     * @return void

+     */

+    function IsSMTP() {

+        $this->Mailer = "smtp";

+    }

+

+    /**

+     * Sets Mailer to send message using PHP mail() function.

+     * @return void

+     */

+    function IsMail() {

+        $this->Mailer = "mail";

+    }

+

+    /**

+     * Sets Mailer to send message using the $Sendmail program.

+     * @return void

+     */

+    function IsSendmail() {

+        $this->Mailer = "sendmail";

+    }

+

+    /**

+     * Sets Mailer to send message using the qmail MTA. 

+     * @return void

+     */

+    function IsQmail() {

+        $this->Sendmail = "/var/qmail/bin/sendmail";

+        $this->Mailer = "sendmail";

+    }

+

+

+    /////////////////////////////////////////////////

+    // RECIPIENT METHODS

+    /////////////////////////////////////////////////

+

+    /**

+     * Adds a "To" address.  

+     * @param string $address

+     * @param string $name

+     * @return void

+     */

+    function AddAddress($address, $name = "") {

+        $cur = count($this->to);

+        $this->to[$cur][0] = trim($address);

+        $this->to[$cur][1] = $name;

+    }

+

+    /**

+     * Adds a "Cc" address. Note: this function works

+     * with the SMTP mailer on win32, not with the "mail"

+     * mailer.  

+     * @param string $address

+     * @param string $name

+     * @return void

+    */

+    function AddCC($address, $name = "") {

+        $cur = count($this->cc);

+        $this->cc[$cur][0] = trim($address);

+        $this->cc[$cur][1] = $name;

+    }

+

+    /**

+     * Adds a "Bcc" address. Note: this function works

+     * with the SMTP mailer on win32, not with the "mail"

+     * mailer.  

+     * @param string $address

+     * @param string $name

+     * @return void

+     */

+    function AddBCC($address, $name = "") {

+        $cur = count($this->bcc);

+        $this->bcc[$cur][0] = trim($address);

+        $this->bcc[$cur][1] = $name;

+    }

+

+    /**

+     * Adds a "Reply-to" address.  

+     * @param string $address

+     * @param string $name

+     * @return void

+     */

+    function AddReplyTo($address, $name = "") {

+        $cur = count($this->ReplyTo);

+        $this->ReplyTo[$cur][0] = trim($address);

+        $this->ReplyTo[$cur][1] = $name;

+    }

+

+

+    /////////////////////////////////////////////////

+    // MAIL SENDING METHODS

+    /////////////////////////////////////////////////

+

+    /**

+     * Creates message and assigns Mailer. If the message is

+     * not sent successfully then it returns false.  Use the ErrorInfo

+     * variable to view description of the error.  

+     * @return bool

+     */

+    function Send() {

+        $header = "";

+        $body = "";

+        $result = true;

+

+        if((count($this->to) + count($this->cc) + count($this->bcc)) < 1)

+        {

+            $this->SetError($this->Lang("provide_address"));

+            return false;

+        }

+

+        // Set whether the message is multipart/alternative

+        if(!empty($this->AltBody))

+            $this->ContentType = "multipart/alternative";

+

+        $this->error_count = 0; // reset errors

+        $this->SetMessageType();

+        $header .= $this->CreateHeader();

+        $body = $this->CreateBody();

+

+        if($body == "") { return false; }

+

+        // Choose the mailer

+        switch($this->Mailer)

+        {

+            case "sendmail":

+                $result = $this->SendmailSend($header, $body);

+                break;

+            case "mail":

+                $result = $this->MailSend($header, $body);

+                break;

+            case "smtp":

+                $result = $this->SmtpSend($header, $body);

+                break;

+            default:

+            $this->SetError($this->Mailer . $this->Lang("mailer_not_supported"));

+                $result = false;

+                break;

+        }

+

+        return $result;

+    }

+    

+    /**

+     * Sends mail using the $Sendmail program.  

+     * @access private

+     * @return bool

+     */

+    function SendmailSend($header, $body) {

+        if ($this->Sender != "")

+            $sendmail = sprintf("%s -oi -f %s -t", $this->Sendmail, $this->Sender);

+        else

+            $sendmail = sprintf("%s -oi -t", $this->Sendmail);

+

+        if(!@$mail = popen($sendmail, "w"))

+        {

+            $this->SetError($this->Lang("execute") . $this->Sendmail);

+            return false;

+        }

+

+        fputs($mail, $header);

+        fputs($mail, $body);

+        

+        $result = pclose($mail) >> 8 & 0xFF;

+        if($result != 0)

+        {

+            $this->SetError($this->Lang("execute") . $this->Sendmail);

+            return false;

+        }

+

+        return true;

+    }

+

+    /**

+     * Sends mail using the PHP mail() function.  

+     * @access private

+     * @return bool

+     */

+    function MailSend($header, $body) {

+        $to = "";

+        for($i = 0; $i < count($this->to); $i++)

+        {

+            if($i != 0) { $to .= ", "; }

+            $to .= $this->to[$i][0];

+        }

+

+        if ($this->Sender != "" && strlen(ini_get("safe_mode"))< 1)

+        {

+            $old_from = ini_get("sendmail_from");

+            ini_set("sendmail_from", $this->Sender);

+            $params = sprintf("-oi -f %s", $this->Sender);

+            $rt = @mail($to, $this->EncodeHeader($this->Subject), $body, 

+                        $header, $params);

+        }

+        else

+            $rt = @mail($to, $this->EncodeHeader($this->Subject), $body, $header);

+

+        if (isset($old_from))

+            ini_set("sendmail_from", $old_from);

+

+        if(!$rt)

+        {

+            $this->SetError($this->Lang("instantiate"));

+            return false;

+        }

+

+        return true;

+    }

+

+    /**

+     * Sends mail via SMTP using PhpSMTP (Author:

+     * Chris Ryan).  Returns bool.  Returns false if there is a

+     * bad MAIL FROM, RCPT, or DATA input.

+     * @access private

+     * @return bool

+     */

+    function SmtpSend($header, $body) {

+        include_once(_BASEDIR."includes/smtp_include.php");

+        $error = "";

+        $bad_rcpt = array();

+

+        if(!$this->SmtpConnect())

+            return false;

+

+        $smtp_from = ($this->Sender == "") ? $this->From : $this->Sender;

+        if(!$this->smtp->Mail($smtp_from))

+        {

+            $error = $this->Lang("from_failed") . $smtp_from;

+            $this->SetError($error);

+            $this->smtp->Reset();

+            return false;

+        }

+

+        // Attempt to send attach all recipients

+        for($i = 0; $i < count($this->to); $i++)

+        {

+            if(!$this->smtp->Recipient($this->to[$i][0]))

+                $bad_rcpt[] = $this->to[$i][0];

+        }

+        for($i = 0; $i < count($this->cc); $i++)

+        {

+            if(!$this->smtp->Recipient($this->cc[$i][0]))

+                $bad_rcpt[] = $this->cc[$i][0];

+        }

+        for($i = 0; $i < count($this->bcc); $i++)

+        {

+            if(!$this->smtp->Recipient($this->bcc[$i][0]))

+                $bad_rcpt[] = $this->bcc[$i][0];

+        }

+

+        if(count($bad_rcpt) > 0) // Create error message

+        {

+            for($i = 0; $i < count($bad_rcpt); $i++)

+            {

+                if($i != 0) { $error .= ", "; }

+                $error .= $bad_rcpt[$i];

+            }

+            $error = $this->Lang("recipients_failed") . $error;

+            $this->SetError($error);

+            $this->smtp->Reset();

+            return false;

+        }

+

+        if(!$this->smtp->Data($header . $body))

+        {

+            $this->SetError($this->Lang("data_not_accepted"));

+            $this->smtp->Reset();

+            return false;

+        }

+        if($this->SMTPKeepAlive == true)

+            $this->smtp->Reset();

+        else

+            $this->SmtpClose();

+

+        return true;

+    }