OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	11/18/2021 10:11:21 AM	rwxr-xr-x
📄 calculate-totals.php	3.55 KB	11/18/2021 09:43:18 AM	rw-r--r--
📄 delete-attachment.php	819 bytes	11/18/2021 09:43:18 AM	rw-r--r--
📄 main.php	6.47 KB	11/18/2021 09:43:18 AM	rw-r--r--
📄 save-campaign.php	6.72 KB	11/18/2021 09:43:18 AM	rw-r--r--
📄 send-later.php	2.69 KB	11/18/2021 09:43:18 AM	rw-r--r--
📄 send-now.php	34.98 KB	11/18/2021 09:43:18 AM	rw-r--r--
📄 test-send.php	10.7 KB	11/18/2021 09:43:18 AM	rw-r--r--
📄 timezone.php	22.25 KB	11/18/2021 09:43:18 AM	rw-r--r--
📄 toggle-wysiwyg.php	596 bytes	11/18/2021 09:43:18 AM	rw-r--r--
📄 upload.php	2.32 KB	11/18/2021 09:43:18 AM	rw-r--r--

Editing: send-now.php

<?php include('../functions.php');?>
<?php include('../login/auth.php');?>
<?php include('../helpers/PHPMailerAutoload.php');?>
<?php include('../helpers/short.php');?>
<?php include('../helpers/integrations/zapier/triggers/functions.php');?>
<?php include('../helpers/integrations/rules.php');?>
<?php include('../helpers/subscription.php');?>
<?php
	
//variables
$campaign_id = (int)mysqli_real_escape_string($mysqli, $_POST['campaign_id']);
$app = isset($_POST['app']) && is_numeric($_POST['app']) ? mysqli_real_escape_string($mysqli, (int)$_POST['app']) : exit;
$offset = isset($_POST['offset']) ? mysqli_real_escape_string($mysqli, $_POST['offset']) : '';
$cron = $_POST['cron'];
$email_list = $_POST['email_list']!='' ? mysqli_real_escape_string($mysqli, $_POST['email_list']): 0;
$email_list_excl = $_POST['email_list_exclude']!='' ? mysqli_real_escape_string($mysqli, $_POST['email_list_exclude']) : 0;
$email_lists_segs = $_POST['email_lists_segs']!='' ? mysqli_real_escape_string($mysqli, $_POST['email_lists_segs']) : 0;
$email_lists_segs_excl = $_POST['email_lists_segs_excl']!='' ? mysqli_real_escape_string($mysqli, $_POST['email_lists_segs_excl']) : 0;
$total_recipients = isset($_POST['total_recipients']) && is_numeric($_POST['total_recipients']) ? mysqli_real_escape_string($mysqli, $_POST['total_recipients']) : 0;
$time = time();

//Remove ONLY_FULL_GROUP_BY from sql_mode
$q = 'SET SESSION sql_mode = ""';
$r = mysqli_query($mysqli, $q);
if (!$r)
{
	show_error(_('Unable to set sql_mode'), '<p>'.mysqli_error($mysqli).'</p>', true);
	error_log("[Unable to set sql_mode]".mysqli_error($mysqli).': in '.__FILE__.' on line '.__LINE__);
	exit;
}

//get user details
$q = 'SELECT send_rate, timezone FROM login WHERE id = '.get_app_info('main_userID');
$r = mysqli_query($mysqli, $q);
if ($r)
{
    while($row = mysqli_fetch_array($r))
    {
		$send_rate = $row['send_rate'];
		$user_timezone = $row['timezone'];
    }  
}

//get smtp settings
$q = 'SELECT smtp_host, smtp_port, smtp_ssl, smtp_username, smtp_password, allocated_quota, gdpr_only, custom_domain, custom_domain_protocol, custom_domain_enabled FROM apps WHERE id = '.$app.' AND userID = '.get_app_info('main_userID');
$r = mysqli_query($mysqli, $q);
if ($r && mysqli_num_rows($r) > 0)
{
    while($row = mysqli_fetch_array($r))
    {
		$smtp_host = $row['smtp_host'];
		$smtp_port = $row['smtp_port'];
		$smtp_ssl = $row['smtp_ssl'];
		$smtp_username = $row['smtp_username'];
		$smtp_password = $row['smtp_password'];
		$allocated_quota = $row['allocated_quota'];
		$gdpr_line = $row['gdpr_only'] ? 'AND gdpr = 1 ' : '';
		$custom_domain = $row['custom_domain'];
		$custom_domain_protocol = $row['custom_domain_protocol'];
		$custom_domain_enabled = $row['custom_domain_enabled'];
		if($custom_domain!='' && $custom_domain_enabled)
		{
			$parse = parse_url(APP_PATH);
			$domain = $parse['host'];
			$protocol = $parse['scheme'];
			$app_path = str_replace($domain, $custom_domain, APP_PATH);
			$app_path = str_replace($protocol, $custom_domain_protocol, $app_path);
		}
		else $app_path = APP_PATH;
    }  
}

//Format sent date and web version for Zapier and Rules
$sent_formatted = strftime("%a, %b %d, %Y, %I:%M%p", $time);
$web_version = $app_path.'/w/'.encrypt_val($campaign_id);

//Include main list query
$main_query = $email_list == 0 ? '' : 'subscribers.list in ('.$email_list.') ';

//Include segmentation query
$seg_query = $main_query != '' && $email_lists_segs != 0 ? 'OR ' : '';
$seg_query .= $email_lists_segs == 0 ? '' : '(subscribers_seg.seg_id IN ('.$email_lists_segs.')) ';

//Exclude list query
$exclude_query = $email_list_excl == 0 ? '' : 'subscribers.email NOT IN (SELECT email FROM subscribers WHERE list IN ('.$email_list_excl.')) ';

//Exclude segmentation query
$exclude_seg_query = $exclude_query != '' && $email_lists_segs_excl != 0 ? 'AND ' : ''; 
$exclude_seg_query .= $email_lists_segs_excl == 0 ? '' : 'subscribers.email NOT IN (SELECT subscribers.email FROM subscribers LEFT JOIN subscribers_seg ON (subscribers.id = subscribers_seg.subscriber_id) WHERE subscribers_seg.seg_id IN ('.$email_lists_segs_excl.'))';

//Check if monthly quota needs to be updated
$q = 'SELECT allocated_quota, current_quota FROM apps WHERE id = '.$app;
$r = mysqli_query($mysqli, $q);
if($r) 
{
	while($row = mysqli_fetch_array($r)) 
	{
		$allocated_quota = $row['allocated_quota'];
		$current_quota = $row['current_quota'];
		$updated_quota = $current_quota + $total_recipients;
	}
}
//Update quota if a monthly limit was set
if($allocated_quota!=-1)
{
	//if so, update quota
	$q = 'UPDATE apps SET current_quota = '.$updated_quota.' WHERE id = '.$app;
	mysqli_query($mysqli, $q);
}

//if CRON is setup, schedule email to send in the next 5 mins
if($cron)
{
	$the_date = '0';
	$timezone = '0';
	
	//Get number of recipients to send to
	$to_send = $total_recipients;
	
	//schedule email to send in the next 5 mins
	$q = 'UPDATE campaigns SET sent = "'.$time.'", to_send = '.$to_send.', send_date = "'.$the_date.'", lists = "'.$email_list.'", lists_excl = "'.$email_list_excl.'", segs = "'.$email_lists_segs.'", segs_excl = "'.$email_lists_segs_excl.'", timezone = "'.$timezone.'" WHERE id = '.$campaign_id;
	$r = mysqli_query($mysqli, $q);
	if ($r)
	{
		echo 'cron_send';
		exit;
	}
}
else
{
	ignore_user_abort(true);
	header("Content-Length: 0");
	header("Connection: close");
	flush();
	echo true;
}

//check if user wants to continue sending to the rest of the recipients because sending was incomplete
if($offset!='')
{
	//get currently unsubscribed
	$uc = 'SELECT id FROM subscribers WHERE unsubscribed = 1 AND last_campaign = '.$campaign_id;
    $currently_unsubscribed = mysqli_num_rows(mysqli_query($mysqli, $uc));
    //get currently bounced
	$bc = 'SELECT id FROM subscribers WHERE bounced = 1 AND last_campaign = '.$campaign_id;
    $currently_bounced = mysqli_num_rows(mysqli_query($mysqli, $bc));
    //get currently complaint
	$cc = 'SELECT id FROM subscribers WHERE complaint = 1 AND last_campaign = '.$campaign_id;
    $currently_complaint = mysqli_num_rows(mysqli_query($mysqli, $cc));
	//calculate offset (offset should exclude currently unsubscribed, bounced or complaint)
	$the_offset = ' OFFSET '.($offset-($currently_unsubscribed+$currently_bounced+$currently_complaint));
	$email_list = $_POST['email_list'];
}
else $the_offset = '';

//select campaign to send email
$q = 'SELECT from_name, from_email, reply_to, title, label, plain_text, html_text, query_string, to_send, recipients, opens_tracking, links_tracking, timezone FROM campaigns WHERE id = '.$campaign_id.' AND userID = '.get_app_info('main_userID');
$r = mysqli_query($mysqli, $q);
if ($r && mysqli_num_rows($r) > 0)
{
    while($row = mysqli_fetch_array($r))
    {
	    $timezone = $row['timezone'];
    	$from_name = stripslashes($row['from_name']);
    	$from_email = stripslashes($row['from_email']);
    	$reply_to = stripslashes($row['reply_to']);
		$title = stripslashes($row['title']);
		$campaign_title = $row['label']=='' ? $title : stripslashes(htmlentities($row['label'],ENT_QUOTES,"UTF-8"));
		$plain_text = stripslashes($row['plain_text']);
		$html = stripslashes($row['html_text']);
		$query_string = stripslashes($row['query_string']);
		$to_send = stripslashes($row['to_send']);
		$current_recipient_count = $row['recipients'];
		$opens_tracking = $row['opens_tracking'];
		$links_tracking = $row['links_tracking'];
    }  
}

//convert date tags
date_default_timezone_set($timezone!='' ? $timezone : $user_timezone);
$today = time();
$day_word = array(_('Sunday'), _('Monday'), _('Tuesday'), _('Wednesday'), _('Thursday'), _('Friday'), _('Saturday'));
$month_word = array('', _('January'), _('February'), _('March'), _('April'), _('May'), _('June'), _('July'), _('August'), _('September'), _('October'), _('November'), _('December'));
$currentdaynumber = strftime('%d', $today);
$currentday = $day_word[strftime('%w', $today)];
$currentmonthnumber = strftime('%m', $today);
$currentmonth = $currentmonthnumber==10 ? $month_word[$currentmonthnumber] : $month_word[str_replace('0', '', $currentmonthnumber)];
$currentyear = strftime('%Y', $today);
$unconverted_date = array('[currentdaynumber]', '[currentday]', '[currentmonthnumber]', '[currentmonth]', '[currentyear]');
$converted_date = array($currentdaynumber, $currentday, $currentmonthnumber, $currentmonth, $currentyear);

//if sending campaign for the first time (not resend)
if($offset=='')
{	
	//If links tracking is enabled, insert links into database
	if($links_tracking)
	{
		//Insert web version link
		if(strpos($html, '</webversion>')==true || strpos($html, '[webversion]')==true)
			mysqli_query($mysqli, 'INSERT INTO links (campaign_id, link) VALUES ('.$campaign_id.', "'.$app_path.'/w/'.encrypt_val($campaign_id).'")');
		
		//Insert reconsent link
		if(strpos($html, '[reconsent]')==true)
			mysqli_query($mysqli, 'INSERT INTO links (campaign_id, link) VALUES ('.$campaign_id.', "'.$app_path.'/r?c='.encrypt_val($campaign_id).'")');
	
		//Insert into links
		$links = array();
		//extract all links from HTML
		preg_match_all('/href=["\']([^"\']+)["\']/i', $html, $matches, PREG_PATTERN_ORDER);
		$matches = array_unique($matches[1]);
		foreach($matches as $var)
		{			
			//If a query_string is set
			if($query_string!='')
			{								
				$var_array = explode('#', $var);
				$url_part_1 = $var_array[0];
				$url_part_2 = $var_array[1];
				$anchor = strpos($var,'#') !== false ? '#' : '';
				if(strpos($var,'?') !== false) $var = $url_part_1.'&'.$query_string.$anchor.$url_part_2;
				else $var = $url_part_1.'?'.$query_string.$anchor.$url_part_2;
			}
			
			if(substr($var, 0, 1)!="#" && substr($var, 0, 6)!="mailto" && substr($var, 0, 3)!="ftp" && substr($var, 0, 3)!="tel" && substr($var, 0, 3)!="sms" && substr($var, 0, 13)!="[unsubscribe]" && substr($var, 0, 12)!="[webversion]" && substr($var, 0, 11)!="[reconsent]" && !strpos($var, 'fonts.googleapis.com') && !strpos($var, 'use.typekit.net') && !strpos($var, 'use.fontawesome.com'))
			{
				$var = str_replace($unconverted_date, $converted_date, $var);
		    	array_push($links, $var);
		    }
		}
		//extract unique links
		for($i=0;$i<count($links);$i++)
		{
		    $q = 'INSERT INTO links (campaign_id, link) VALUES ('.$campaign_id.', "'.$links[$i].'")';
		    $r = mysqli_query($mysqli, $q);
		    if ($r){}
		}
	}
	
	//Get and update number of recipients to send to
	$q2  = 'SELECT 1 FROM subscribers';
	$q2 .= $email_lists_segs==0 && $email_lists_segs_excl==0 ? ' ' : ' LEFT JOIN subscribers_seg ON (subscribers.id = subscribers_seg.subscriber_id) ';
	$q2 .= 'WHERE ('.$main_query.$seg_query.') ';
	$q2 .= $exclude_query != '' || $exclude_seg_query != '' ? 'AND ('.$exclude_query.$exclude_seg_query.') ' : '';
	$q2 .= 'AND subscribers.unsubscribed = 0 AND subscribers.bounced = 0 AND subscribers.complaint = 0 AND subscribers.confirmed = 1 '.$gdpr_line.'
		   GROUP BY subscribers.email 
		   ORDER BY subscribers.id ASC 
		   LIMIT 18446744073709551615'.$the_offset;
	$r2 = mysqli_query($mysqli, $q2);
	if ($r2)
	{
	    $to_send = mysqli_num_rows($r2);	
		$q3 = 'UPDATE campaigns SET to_send = '.$to_send.', to_send_lists = "'.$email_list.'", sent = "'.$time.'", lists = "'.$email_list.'", lists_excl = "'.$email_list_excl.'", segs = "'.$email_lists_segs.'", segs_excl = "'.$email_lists_segs_excl.'" WHERE id = '.$campaign_id;
		$r3 = mysqli_query($mysqli, $q3);
		if ($r3){} 
	}
	
	//Run rules
	$rules_data = array(
	    'trigger' => 'campaign_sending',
	    'campaign_title' => $campaign_title,
	    'subject' => $title,
	    'from_name' => $from_name,
	    'from_email' => $from_email,
	    'reply_to' => $reply_to,
	    'sent' => $sent_formatted,
	    'no_of_recipients' => $to_send,
	    'webversion' => $web_version,
	    'brand_id' => $app,
	    'campaign_id' => $campaign_id,
	    'report_url' => "$app_path/report?i=$app&c=$campaign_id"
    );
    
    //Run rules
	run_rule($rules_data);
}
else
{
	//Reset timeout_check in case user clicks "Resume" button even though cron was used to send this campaign.
	//This should remove possibility of sending an email multiple times to the same recipient(s).
	mysqli_query($mysqli, 'UPDATE campaigns SET timeout_check = NULL WHERE id = '.$campaign_id.' AND userID = '.get_app_info('main_userID'));
}

//Replace links in newsletter and put tracking image
$q  = 'SELECT subscribers.id, subscribers.name, subscribers.email, subscribers.list, subscribers.custom_fields FROM subscribers';
$q .= $email_lists_segs==0 && $email_lists_segs_excl==0 ? ' ' : ' LEFT JOIN subscribers_seg ON (subscribers.id = subscribers_seg.subscriber_id) ';
$q .= 'WHERE ('.$main_query.$seg_query.') ';	
$q .= $exclude_query != '' || $exclude_seg_query != '' ? 'AND ('.$exclude_query.$exclude_seg_query.') ' : '';
$q .= 'AND subscribers.unsubscribed = 0 AND subscribers.bounced = 0 AND subscribers.complaint = 0 AND subscribers.confirmed = 1 '.$gdpr_line.'
	   AND userID = '.get_app_info('main_userID').' 
	   GROUP BY subscribers.email 
	   ORDER BY subscribers.id ASC 
	   LIMIT 18446744073709551615'.$the_offset;
	   
$r = mysqli_query($mysqli, $q);
if ($r && mysqli_num_rows($r) > 0)
{
	$subscriber_id = '';
	$email = '';
	$subscriber_list = '';
	
    while($row = mysqli_fetch_array($r))
    {
    	//prevent execution timeout
    	set_time_limit(0);
    	
    	$subscriber_id = $row['id'];
		$name = trim($row['name']);
		$email = trim($row['email']);
		$subscriber_list = $row['list'];
		$custom_values = $row['custom_fields'];
		
		$html_treated = str_replace($unconverted_date, $converted_date, $html);
		$plain_treated = str_replace($unconverted_date, $converted_date, $plain_text);
		$title_treated = str_replace($unconverted_date, $converted_date, $title);
		
		//replace new links on HTML code
		$q2 = 'SELECT id, link FROM links WHERE campaign_id = '.$campaign_id;
		$r2 = mysqli_query($mysqli, $q2);
		if ($r2 && mysqli_num_rows($r2) > 0)
		{			
		    while($row2 = mysqli_fetch_array($r2))
		    {
		    	$linkID = $row2['id'];
				if($query_string!='')
		    	{
			    	$link = (strpos($row2['link'],'?'.$query_string) !== false) ? str_replace('?'.$query_string, '', $row2['link']) : str_replace('&'.$query_string, '', $row2['link']);
		    	}
		    	else $link = $row2['link'];
				
				//If link tracking is enabled, replace links with trackable links
				if($links_tracking)
				{
					//replace new links on HTML code
			    	$html_treated = str_replace('href="'.$link.'"', 'href="'.$app_path.'/l/'.encrypt_val($subscriber_id).'/'.encrypt_val($linkID).'/'.encrypt_val($campaign_id).'"', $html_treated);
			    	$html_treated = str_replace('href=\''.$link.'\'', 'href="'.$app_path.'/l/'.encrypt_val($subscriber_id).'/'.encrypt_val($linkID).'/'.encrypt_val($campaign_id).'"', $html_treated);
			    	
			    	//replace new links on Plain Text code
			    	$plain_treated = str_replace($link, $app_path.'/l/'.encrypt_val($subscriber_id).'/'.encrypt_val($linkID).'/'.encrypt_val($campaign_id), $plain_treated);
			    }
		    }  
		}
		
		//tags for subject
		preg_match_all('/\[([a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+),\s*fallback=/i', $title_treated, $matches_var, PREG_PATTERN_ORDER);
		preg_match_all('/,\s*fallback=([a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*)\]/i', $title_treated, $matches_val, PREG_PATTERN_ORDER);
		preg_match_all('/(\[[a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+,\s*fallback=[a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*\])/i', $title_treated, $matches_all, PREG_PATTERN_ORDER);
		preg_match_all('/\[([^\]]+),\s*fallback=/i', $title_treated, $matches_var, PREG_PATTERN_ORDER);
		preg_match_all('/,\s*fallback=([^\]]*)\]/i', $title_treated, $matches_val, PREG_PATTERN_ORDER);
		preg_match_all('/(\[[^\]]+,\s*fallback=[^\]]*\])/i', $title_treated, $matches_all, PREG_PATTERN_ORDER);
		$matches_var = $matches_var[1];
		$matches_val = $matches_val[1];
		$matches_all = $matches_all[1];
		for($i=0;$i<count($matches_var);$i++)
		{   
			$field = $matches_var[$i];
			$fallback = $matches_val[$i];
			$tag = $matches_all[$i];
			
			//if tag is Name
			if($field=='Name')
			{
				if($name=='')
					$title_treated = str_replace($tag, $fallback, $title_treated);
				else
					$title_treated = str_replace($tag, $row[strtolower($field)], $title_treated);
			}
			else //if not 'Name', it's a custom field
			{
				//if subscriber has no custom fields, use fallback
				if($custom_values=='')
					$title_treated = str_replace($tag, $fallback, $title_treated);
				//otherwise, replace custom field tag
				else
				{					
					$q5 = 'SELECT custom_fields FROM lists WHERE id = '.$subscriber_list;
					$r5 = mysqli_query($mysqli, $q5);
					if ($r5)
					{
					    while($row2 = mysqli_fetch_array($r5)) $custom_fields = $row2['custom_fields'];
					    $custom_fields_array = explode('%s%', $custom_fields);
					    $custom_values_array = explode('%s%', $custom_values);
					    $cf_count = count($custom_fields_array);
					    $k = 0;
					    
					    for($j=0;$j<$cf_count;$j++)
					    {
						    $cf_array = explode(':', $custom_fields_array[$j]);
						    $key = str_replace(' ', '', $cf_array[0]);
						    
						    //if tag matches a custom field
						    if($field==$key)
						    {
						    	//if custom field is empty, use fallback
						    	if($custom_values_array[$j]=='')
							    	$title_treated = str_replace($tag, $fallback, $title_treated);
						    	//otherwise, use the custom field value
						    	else
						    	{
						    		//if custom field is of 'Date' type, format the date
						    		if($cf_array[1]=='Date')
							    		$title_treated = str_replace($tag, strftime("%a, %b %d, %Y", $custom_values_array[$j]), $title_treated);
						    		//otherwise just replace tag with custom field value
						    		else
								    	$title_treated = str_replace($tag, $custom_values_array[$j], $title_treated);
						    	}
						    }
						    else
						    	$k++;
					    }
					    if($k==$cf_count)
					    	$title_treated = str_replace($tag, $fallback, $title_treated);
					}
				}
			}
		}
		
		//tags for HTML
		preg_match_all('/\[([a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+),\s*fallback=/i', $html_treated, $matches_var, PREG_PATTERN_ORDER);
		preg_match_all('/,\s*fallback=([a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*)\]/i', $html_treated, $matches_val, PREG_PATTERN_ORDER);
		preg_match_all('/(\[[a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+,\s*fallback=[a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*\])/i', $html_treated, $matches_all, PREG_PATTERN_ORDER);
		preg_match_all('/\[([^\]]+),\s*fallback=/i', $html_treated, $matches_var, PREG_PATTERN_ORDER);
		preg_match_all('/,\s*fallback=([^\]]*)\]/i', $html_treated, $matches_val, PREG_PATTERN_ORDER);
		preg_match_all('/(\[[^\]]+,\s*fallback=[^\]]*\])/i', $html_treated, $matches_all, PREG_PATTERN_ORDER);
		$matches_var = $matches_var[1];
		$matches_val = $matches_val[1];
		$matches_all = $matches_all[1];
		for($i=0;$i<count($matches_var);$i++)
		{   
			$field = $matches_var[$i];
			$fallback = $matches_val[$i];
			$tag = $matches_all[$i];
			
			//if tag is Name
			if($field=='Name')
			{
				if($name=='')
					$html_treated = str_replace($tag, $fallback, $html_treated);
				else
					$html_treated = str_replace($tag, $row[strtolower($field)], $html_treated);
			}
			else //if not 'Name', it's a custom field
			{
				//if subscriber has no custom fields, use fallback
				if($custom_values=='')
					$html_treated = str_replace($tag, $fallback, $html_treated);
				//otherwise, replace custom field tag
				else
				{					
					$q5 = 'SELECT custom_fields FROM lists WHERE id = '.$subscriber_list;
					$r5 = mysqli_query($mysqli, $q5);
					if ($r5)
					{
					    while($row2 = mysqli_fetch_array($r5)) $custom_fields = $row2['custom_fields'];
					    $custom_fields_array = explode('%s%', $custom_fields);
					    $custom_values_array = explode('%s%', $custom_values);
					    $cf_count = count($custom_fields_array);
					    $k = 0;
					    
					    for($j=0;$j<$cf_count;$j++)
					    {
						    $cf_array = explode(':', $custom_fields_array[$j]);
						    $key = str_replace(' ', '', $cf_array[0]);
						    
						    //if tag matches a custom field
						    if($field==$key)
						    {
						    	//if custom field is empty, use fallback
						    	if($custom_values_array[$j]=='')
							    	$html_treated = str_replace($tag, $fallback, $html_treated);
						    	//otherwise, use the custom field value
						    	else
						    	{
						    		//if custom field is of 'Date' type, format the date
						    		if($cf_array[1]=='Date')
							    		$html_treated = str_replace($tag, strftime("%a, %b %d, %Y", $custom_values_array[$j]), $html_treated);
						    		//otherwise just replace tag with custom field value
						    		else
								    	$html_treated = str_replace($tag, $custom_values_array[$j], $html_treated);
						    	}
						    }
						    else
						    	$k++;
					    }
					    if($k==$cf_count)
					    	$html_treated = str_replace($tag, $fallback, $html_treated);
					}
				}
			}
		}
		//tags for Plain text
		preg_match_all('/\[([a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+),\s*fallback=/i', $plain_treated, $matches_var, PREG_PATTERN_ORDER);
		preg_match_all('/,\s*fallback=([a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*)\]/i', $plain_treated, $matches_val, PREG_PATTERN_ORDER);
		preg_match_all('/(\[[a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+,\s*fallback=[a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*\])/i', $plain_treated, $matches_all, PREG_PATTERN_ORDER);
		preg_match_all('/\[([^\]]+),\s*fallback=/i', $plain_treated, $matches_var, PREG_PATTERN_ORDER);
		preg_match_all('/,\s*fallback=([^\]]*)\]/i', $plain_treated, $matches_val, PREG_PATTERN_ORDER);
		preg_match_all('/(\[[^\]]+,\s*fallback=[^\]]*\])/i', $plain_treated, $matches_all, PREG_PATTERN_ORDER);
		$matches_var = $matches_var[1];
		$matches_val = $matches_val[1];
		$matches_all = $matches_all[1];
		for($i=0;$i<count($matches_var);$i++)
		{   
			$field = $matches_var[$i];
			$fallback = $matches_val[$i];
			$tag = $matches_all[$i];
			
			//if tag is Name
			if($field=='Name')
			{
				if($name=='')
					$plain_treated = str_replace($tag, $fallback, $plain_treated);
				else
					$plain_treated = str_replace($tag, $row[strtolower($field)], $plain_treated);
			}
			else //if not 'Name', it's a custom field
			{
				//if subscriber has no custom fields, use fallback
				if($custom_values=='')
					$plain_treated = str_replace($tag, $fallback, $plain_treated);
				//otherwise, replace custom field tag
				else
				{					
					$q5 = 'SELECT custom_fields FROM lists WHERE id = '.$subscriber_list;
					$r5 = mysqli_query($mysqli, $q5);
					if ($r5)
					{
					    while($row2 = mysqli_fetch_array($r5)) $custom_fields = $row2['custom_fields'];
					    $custom_fields_array = explode('%s%', $custom_fields);
					    $custom_values_array = explode('%s%', $custom_values);
					    $cf_count = count($custom_fields_array);
					    $k = 0;
					    
					    for($j=0;$j<$cf_count;$j++)
					    {
						    $cf_array = explode(':', $custom_fields_array[$j]);
						    $key = str_replace(' ', '', $cf_array[0]);
						    
						    //if tag matches a custom field
						    if($field==$key)
						    {
						    	//if custom field is empty, use fallback
						    	if($custom_values_array[$j]=='')
									$plain_treated = str_replace($tag, $fallback, $plain_treated);
						    	//otherwise, use the custom field value
						    	else
						    	{
						    		//if custom field is of 'Date' type, format the date
						    		if($cf_array[1]=='Date')
										$plain_treated = str_replace($tag, strftime("%a, %b %d, %Y", $custom_values_array[$j]), $plain_treated);
						    		//otherwise just replace tag with custom field value
						    		else
										$plain_treated = str_replace($tag, $custom_values_array[$j], $plain_treated);
						    	}
						    }
						    else
						    	$k++;
					    }
					    if($k==$cf_count)
					    	$plain_treated = str_replace($tag, $fallback, $plain_treated);
					}
				}
			}
		}
		
		//set web version links
    	$html_treated = str_replace('<webversion', '<a href="'.$app_path.'/w/'.encrypt_val($subscriber_id).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id).'" ', $html_treated);
    	$html_treated = str_replace('</webversion>', '</a>', $html_treated);
    	$html_treated = str_replace('[webversion]', $app_path.'/w/'.encrypt_val($subscriber_id).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id), $html_treated);
    	$plain_treated = str_replace('[webversion]', $app_path.'/w/'.encrypt_val($subscriber_id).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id), $plain_treated);
    	
    	//set unsubscribe links
    	$html_treated = str_replace('<unsubscribe', '<a href="'.$app_path.'/unsubscribe/'.encrypt_val($email).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id).'" ', $html_treated);
    	$html_treated = str_replace('</unsubscribe>', '</a>', $html_treated);
    	$html_treated = str_replace('[unsubscribe]', $app_path.'/unsubscribe/'.encrypt_val($email).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id), $html_treated);
    	$plain_treated = str_replace('[unsubscribe]', $app_path.'/unsubscribe/'.encrypt_val($email).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id), $plain_treated);
    	
    	//Name tag
		$html_treated = str_replace('[Name]', $name, $html_treated);
		$plain_treated = str_replace('[Name]', $name, $plain_treated);
		$title_treated = str_replace('[Name]', $name, $title_treated);
    	
    	//Email tag
		$html_treated = str_replace('[Email]', $email, $html_treated);
		$plain_treated = str_replace('[Email]', $email, $plain_treated);
		$title_treated = str_replace('[Email]', $email, $title_treated);
		
		//set reconsent links
    	$html_treated = str_replace('[reconsent]', APP_PATH.'/r?e='.encrypt_val($email).'&a='.encrypt_val($app).'&w='.encrypt_val($subscriber_id).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id), $html_treated);
    	$plain_treated = str_replace('[reconsent]', APP_PATH.'/r?e='.encrypt_val($email).'&a='.encrypt_val($app).'&w='.encrypt_val($subscriber_id).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id), $plain_treated);
    	
    	//If opens tracking is enabled, add 1 x 1 px tracking image
    	if($opens_tracking)
    	{
	    	//add tracking 1 by 1px image
			$html_treated .= '<img src="'.$app_path.'/t/'.encrypt_val($campaign_id).'/'.encrypt_val($subscriber_id).'" alt="" style="width:1px;height:1px;"/>';
		}
		
		//send email
		$mail = new PHPMailer();
		if(get_app_info('s3_key')!='' && get_app_info('s3_secret')!='')
		{
			//if there is an attachment, don't use curl_multi
			if(file_exists('../../uploads/attachments/'.$campaign_id))
				$mail->IsAmazonSES(false, $campaign_id, $subscriber_id, get_app_info('timezone'));
			//otherwise send with curl_multi
			else
				$mail->IsAmazonSES(true, $campaign_id, $subscriber_id, get_app_info('timezone'), $send_rate);
			$mail->AddAmazonSESKey(get_app_info('s3_key'), get_app_info('s3_secret'));
		}
		else if($smtp_host!='' && $smtp_port!='' && $smtp_username!='' && $smtp_password!='')
		{
			$mail->IsSMTP();
			$mail->SMTPDebug = 0;
			$mail->SMTPAuth = true;
			$mail->SMTPSecure = $smtp_ssl;
			$mail->Host = $smtp_host;
			$mail->Port = $smtp_port; 
			$mail->Username = $smtp_username;  
			$mail->Password = $smtp_password;
		}
		$mail->CharSet	  =	"UTF-8";
		$mail->From       = $from_email;
		$mail->FromName   = $from_name;
		$mail->Subject = $title_treated;
		$mail->AltBody = $plain_treated;
		$mail->Body = $html_treated;
		$mail->IsHTML(true);
		$mail->AddAddress($email, $name);
		$mail->AddReplyTo($reply_to, $from_name);
		$mail->AddCustomHeader('List-Unsubscribe: <'.APP_PATH.'/unsubscribe/'.encrypt_val($email).'/'.encrypt_val($subscriber_list).'/'.encrypt_val($campaign_id).'>');
		//check if attachments are available for this campaign to attach
		if(file_exists('../../uploads/attachments/'.$campaign_id))
		{
			foreach(glob('../../uploads/attachments/'.$campaign_id.'/*') as $attachment){
				if(file_exists($attachment))
				    $mail->AddAttachment($attachment);
			}
		}
		$mail->Send();
		
		//increment recipient count if not using AWS or SMTP
		if(get_app_info('s3_key')=='' && get_app_info('s3_secret')=='')
		{
			//increment recipients number in campaigns table
			$q5 = 'UPDATE campaigns SET recipients = recipients+1 WHERE id = '.$campaign_id;
			mysqli_query($mysqli, $q5);
		}
    }  
    
    //====================== Send remaining in queue ======================//	
    
    $q4 = 'SELECT id, query_str, http_headers, subscriber_id FROM queue WHERE campaign_id = '.$campaign_id.' AND sent = 0';
    $r4 = mysqli_query($mysqli, $q4);
    if ($r4 && mysqli_num_rows($r4) > 0)
    {
        while($row = mysqli_fetch_array($r4))
        {
        	$request_url = 'https://'.get_app_info('ses_endpoint');
    		$queue_id = $row['id'];
    		$query_str = $row['query_str'];
    		$http_headers = explode("\n", $row['http_headers']);
    		$subscriber_id = $row['subscriber_id'];
    		
    		//Get server path
			$server_path_array = explode('includes/create/send-now.php', $_SERVER['SCRIPT_FILENAME']);
		    $server_path = $server_path_array[0];
    		
    		//send remaining in queue
	        $cr = curl_init();
	        curl_setopt($cr, CURLOPT_URL, $request_url);
	        curl_setopt($cr, CURLOPT_POST, $query_str);
	        curl_setopt($cr, CURLOPT_POSTFIELDS, $query_str);
	        curl_setopt($cr, CURLOPT_HTTPHEADER, $http_headers);
	        curl_setopt($cr, CURLOPT_HEADER, true);
	        curl_setopt($cr, CURLOPT_RETURNTRANSFER, true);
	        curl_setopt($cr, CURLOPT_SSL_VERIFYHOST, 2);
			curl_setopt($cr, CURLOPT_SSL_VERIFYPEER, 1);
			curl_setopt($cr, CURLOPT_CAINFO, $server_path.'certs/cacert.pem');
	
	        // Make the request and fetch response.
	        $response = curl_exec($cr);
	        
	        //Get message ID from response
	        $messageIDArray = explode('<MessageId>', $response);
	        $messageIDArray2 = explode('</MessageId>', $messageIDArray[1]);
	        $messageID = $messageIDArray2[0];
	        
	        $response_http_status_code = curl_getinfo($cr, CURLINFO_HTTP_CODE);
	        
	        if ($response_http_status_code !== 200)
	        {
		        $q7 = 'SELECT errors FROM campaigns WHERE id = '.$campaign_id;
	        	$r7 = mysqli_query($mysqli, $q7);
	        	if ($r7)
	        	{
	        	    while($row = mysqli_fetch_array($r7))
	        	    {
	        			$errors = $row['errors'];
	        			
	        			if($errors=='')
							$val = $subscriber_id.':'.$response_http_status_code;
						else
						{
							$errors .= ','.$subscriber_id.':'.$response_http_status_code;
							$val = $errors;
						}
	        	    }  
	        	}
	
		        //update campaigns' errors column
		        $q6 = 'UPDATE campaigns SET errors = "'.$val.'" WHERE id = '.$campaign_id;
				mysqli_query($mysqli, $q6);
	        }
	        else
	        {
	        	//increment recipients number in campaigns table
				$q6 = 'UPDATE campaigns SET recipients = recipients+1 WHERE recipients < to_send AND id = '.$campaign_id;
				mysqli_query($mysqli, $q6);
				
		        $q5 = 'UPDATE queue SET sent = 1, query_str = NULL WHERE id = '.$queue_id;
				mysqli_query($mysqli, $q5);
				
				//update messageID of subscriber
				$q14 = 'UPDATE subscribers SET messageID = "'.$messageID.'" WHERE id = '.$subscriber_id;
				mysqli_query($mysqli, $q14);
	        }
        }  
    }
    else
	{
		$q12 = 'UPDATE campaigns SET to_send = (SELECT recipients) WHERE id = '.$campaign_id;
		$r12 = mysqli_query($mysqli, $q12);
		if ($r12) 
		{
			$q13 = 'SELECT recipients FROM campaigns WHERE id = '.$campaign_id;
			$r13 = mysqli_query($mysqli, $q13);
			if ($r13) while($row = mysqli_fetch_array($r13)) $current_recipient_count = $row['recipients'];
			$to_send = $current_recipient_count;
		}
	}
    //======================= /Send remaining in queue ======================//    
}
else
{
	$q12 = 'UPDATE campaigns SET to_send = '.$current_recipient_count.' WHERE id = '.$campaign_id;
	$r12 = mysqli_query($mysqli, $q12);
	if ($r12) $to_send = $current_recipient_count;
}

//=========================== Post processing ===========================//
$q8 = 'SELECT recipients FROM campaigns where id = '.$campaign_id;
$r8 = mysqli_query($mysqli, $q8);
if ($r8) while($row = mysqli_fetch_array($r8)) $no_of_recipients = $row['recipients'];
if($no_of_recipients >= $to_send)
{
    //tags for subject to me
	preg_match_all('/\[([a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+),\s*fallback=/i', $title, $matches_var, PREG_PATTERN_ORDER);
	preg_match_all('/,\s*fallback=([a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*)\]/i', $title, $matches_val, PREG_PATTERN_ORDER);
	preg_match_all('/(\[[a-zA-Z0-9!#%^&*()+=$@._\-\:|\/?<>~`"\'\s]+,\s*fallback=[a-zA-Z0-9!,#%^&*()+=$@._\-\:|\/?<>~`"\'\s]*\])/i', $title, $matches_all, PREG_PATTERN_ORDER);
	preg_match_all('/\[([^\]]+),\s*fallback=/i', $title, $matches_var, PREG_PATTERN_ORDER);
	preg_match_all('/,\s*fallback=([^\]]*)\]/i', $title, $matches_val, PREG_PATTERN_ORDER);
	preg_match_all('/(\[[^\]]+,\s*fallback=[^\]]*\])/i', $title, $matches_all, PREG_PATTERN_ORDER);
	$matches_var = $matches_var[1];
	$matches_val = $matches_val[1];
	$matches_all = $matches_all[1];
	for($i=0;$i<count($matches_var);$i++)
	{		
		$field = $matches_var[$i];
		$fallback = $matches_val[$i];
		$tag = $matches_all[$i];
		//for each match, replace tag with fallback
		$title = str_replace($tag, $fallback, $title);
	}
	$title = str_replace('[Name]', $from_name, $title);
	$title = str_replace('[Email]', $from_email, $title);
	$title = str_replace($unconverted_date, $converted_date, $title);
	
	$q4 = 'UPDATE campaigns SET recipients = '.$to_send.' WHERE id = '.$campaign_id.' AND userID = '.get_app_info('main_userID');
	mysqli_query($mysqli, $q4);
	
	$q9 = 'DELETE FROM queue WHERE campaign_id = '.$campaign_id;
	mysqli_query($mysqli, $q9);
	
	$q11 = 'SELECT errors, to_send_lists FROM campaigns WHERE id = '.$campaign_id;
	$r11 = mysqli_query($mysqli, $q11);
	if ($r11) 
	{
		while($row = mysqli_fetch_array($r11))
		{
			$error_recipients_ids = $row['errors'];
			$tsl = $row['to_send_lists'];
		}
		
		if($error_recipients_ids=='')
		{
			$q10 = 'UPDATE subscribers SET bounce_soft = 0 WHERE list IN ('.$tsl.')';
			mysqli_query($mysqli, $q10);
		}
		else
		{
			$error_recipients_ids_array = explode(',', $error_recipients_ids);
			$eid_array = array();
			foreach($error_recipients_ids_array as $id_val)
			{
				$id_val_array = explode(':', $id_val);
				array_push($eid_array, $id_val_array[0]);
			}
			$error_recipients_ids = implode(',', $eid_array);
			$q10 = 'UPDATE subscribers SET bounce_soft = 0 WHERE list IN ('.$tsl.') AND id NOT IN ('.$error_recipients_ids.')';
			mysqli_query($mysqli, $q10);
		}
	}
	
	//sent timestamp
	$sent_formatted = strftime("%a, %b %d, %Y, %I:%M%p", time());

//Zapier Trigger 'new_campaign_sent' event
	zapier_trigger_new_campaign_sent($title_treated, $from_name, $from_email, $reply_to, $sent_formatted, $web_version, $app);

//Run rules
	$rules_data = array(
	    'trigger' => 'campaign_sent',
	    'campaign_title' => $campaign_title,
	    'subject' => $title_treated,
	    'from_name' => $from_name,
	    'from_email' => $from_email,
	    'reply_to' => $reply_to,
	    'sent' => $sent_formatted,
	    'no_of_recipients' => $no_of_recipients,
	    'webversion' => $web_version,
	    'brand_id' => $app,
	    'campaign_id' => $campaign_id,
	    'report_url' => "$app_path/report?i=$app&c=$campaign_id"
    );
    
    //Run rules
	run_rule($rules_data);
	
	//quit
	exit;
}

//========================== /Post processing ===========================//