Skip to content

Instantly share code, notes, and snippets.

@richp10 richp10/bugRepMailer.php
Last active Feb 4, 2018

Embed
What would you like to do?
<?php
declare(strict_types=1);
// ***************************************************************
// bugRepMailer.php version: 1.2 · date: 2012-05-06
// -------------------------------------------------------------
// exception handling
// -------------------------------------------------------------
// Copyright (C) 1999 - 2012 www.madshi.net, All Rights Reserved
// ***************************************************************
// 2018-02-04 1.3 php 7 and latest phpmailer compatability fixes
// 2012-05-06 1.2 (1) added "Basic" and "Digest" authentication scheme
// (2) added download link to recommended phpmailer version
// 2006-09-06 1.1 (1) added "MailFrom" field evaluation
// (2) added failure indication, if mailing failed
// 2006-09-02 1.0 initial version donated by David Perkins (thank you!)
// Install latest phpmailer using composer.
// CAUTION: authentication can be troublesome, see here for tips:
// http://www.besthostratings.com/articles/http-auth-php-cgi.html
// ***************************************************************
// enter your email address here
// it's hard coded so the script can't be misused by anyone for spamming
$send_to = 'your@email.com';
// choose the authentication user/password
$user = 'user';
$password = 'password';
// the following fields should be overwritten by madExcept
// but you can still initialize them, just in case
$subject = 'bug report';
$body = 'please find the bug report attached';
$from_email = 'sender@email.com';
$from_name = 'sender name';
$SMTP_USER = 'smtpusername';
$SMTP_PASSW = 'smtppassword';
$SMTP_HOST = 'smtphost';
$SMTP_PORT = 587; // adjust to your needs
// ***************************************************************
// latest php mailer installed using composer..
// composer require phpmailer/phpmailer
// or in composer.json
require_once 'vendor/autoload.php';
// ***************************************************************
$realm = 'madExcept upload script';
// ***************************************************************
if (($user !== '') && (($_SERVER['PHP_AUTH_USER'] !== $user) || ($_SERVER['PHP_AUTH_PW'] !== $password))) {
// read the Digest response
$needed_parts = ['nonce' => 1, 'nc' => 1, 'cnonce' => 1, 'qop' => 1, 'username' => 1, 'uri' => 1, 'response' => 1];
$data = [];
$keys = implode('|', array_keys($needed_parts));
$matches = [];
if ($_SERVER['PHP_AUTH_DIGEST'] !== null) {
preg_match_all('@(' . $keys . ')=(?:([\'"])([^\2]+?)\2|([^\s,]+))@', $_SERVER['PHP_AUTH_DIGEST'], $matches, PREG_SET_ORDER);
}
foreach ($matches as $m) {
$data[$m[1]] = $m[3] ?: $m[4];
unset($needed_parts[$m[1]]);
}
// generate the valid response
$A1 = md5($user . ':' . $realm . ':' . $password);
$A2 = md5($_SERVER['REQUEST_METHOD'] . ':' . $data['uri']);
$valid_response = md5($A1 . ':' . $data['nonce'] . ':' . $data['nc'] . ':' . $data['cnonce'] . ':' . $data['qop'] . ':' . $A2);
// compare the response
if ($needed_parts || ($data['username'] !== $user) || ($data['response'] !== $valid_response)) {
header('WWW-Authenticate: Digest realm="' . $realm .
'",qop="auth",nonce="' . uniqid('', true) . '",opaque="' . md5($realm) . '"');
header('HTTP/1.0 401 Unauthorized');
exit;
}
}
// setup a new PHPMailer instance and fill all needed fields
$mailer = new PHPMailer\PHPMailer\PHPMailer();
$mailer->isSMTP();
$mailer->SMTPAuth = true;
$mailer->SMTPSecure = 'tls';
$mailer->Host = $SMTP_HOST;
$mailer->Mailer = 'smtp';
$mailer->Port = $SMTP_PORT;
$mailer->Username = $SMTP_USER;
$mailer->Password = $SMTP_PASSW;
try {
$mailer->setFrom($from_email, $from_name, 0); //notice the third parameter
} catch (\Exception $e) {
// Maybe Log this
echo $e->getMessage();
}
$mailer->addAddress($send_to);
$mailer->Subject = $subject;
$mailer->Body = $body;
if (isset($_POST['MailSubject'])) {
$mailer->Subject = $_POST['MailSubject'];
}
if (isset($_POST['MailBody'])) {
$mailer->Body = $_POST['MailBody'];
}
// let's parse a couple of fields which madExcept should have set
if (isset($_POST['MailFrom'])) {
$mailFrom = $_POST['MailFrom'];
$i1 = strpos($mailFrom, '<');
$i2 = strrpos($mailFrom, '>');
if (!(($i1 === false) || ($i2 === false) || ($i1 >= $i2))) {
$mailer->FromName = trim(substr($mailFrom, 0, $i1));
$mailer->addReplyTo(trim(substr($mailFrom, $i1 + 1, $i2 - $i1 - 1)), $mailer->FromName);
} else {
// assume only address without name is passed (ME bug as of 4.0.15)
$mailer->addReplyTo(trim($mailFrom));
}
}
// add all attachments to the mail
$found = false;
foreach ($_FILES as $arr) {
try {
$mailer->addAttachment($arr['tmp_name'], $arr['name']);
} catch (\Exception $e) {
// Maybe Log this
echo $e->getMessage();
}
$found = true;
}
if ($found || isset($_POST['MailSubject']) || isset($_POST['MailBody'])) {
// we've found an attachment, or at least the mail subject or body was set
// so we send the email
try {
if (!$mailer->send()) {
echo $mailer->ErrorInfo;
header('HTTP/1.0 500 Mailing failed');
} else {
// Maybe log Success here..
echo 'Failed to send';
}
} catch (\Exception $e) {
// Maybe log this..
echo $e->getMessage();
exit;
}
} else {
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
header('HTTP/1.0 500 Bad request method');
} else {
header('HTTP/1.0 500 No report received');
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.