Download PMs to File (for all 2.x.x versions)"

HACK UPDATED NOV 27TH 2001 - WORKS WITH ALL 2.X.X VERSIONS!

Since I was asked to make this available, here's my hack for downloading Private Messages (as many as you select) at once into a local txt file.

This is helpful if you need to clear out your PM folder(s) due to quota limitation, but don't want to lose those messages.

In effect, it works like an e-mail RFC archive.

Installation Instructions:

1. Open private.php.

Find:

  if ($delete!="") {
    $what="delete";
  }

Immediately AFTER it put:

PHP Code:

  if ($download!="") {
    $what="download";
  } 


Find:

}

// ############################### start delete ###############################

Immediately ABOVE it (make sure you put it ABOVE the } ) put:

PHP Code:

if ($what=="download") {
    if (is_array($privatemessage)) {
        header("Content-disposition: filename=messages.txt");
        header("Content-type: application/octet-stream");
        header("Pragma: no-cache");
        header("Expires: 0");

          while(list($key,$val)=each($privatemessage)) {
            $downloads=$DB_site->query_first("SELECT touserid,fromuserid,dateline,title,message FROM privatemessage WHERE privatemessageid='$key' AND userid=$bbuserinfo[userid]");
            $tousername=$DB_site->query_first("SELECT username FROM user WHERE userid='$downloads[touserid]'");
            $fromusername=$DB_site->query_first("SELECT username FROM user WHERE userid='$downloads[fromuserid]'");
            $msgdt = vbdate($dateformat,$downloads[dateline]);
            $msgtm = vbdate($timeformat,$downloads[dateline]);
            $wordwrap = wordwrap($downloads[message],75,"\r\n");
            
            print("Date/Time Sent: $msgdt, $msgtm\r\n");
            print("From: $fromusername[username]\r\n");
            print("To: $tousername[username]\r\n");
            print("Subject: $downloads[title]\r\n\r\n");
            print("$wordwrap\r\n");
            print("==========================================================================\r\n\r\n\r\n");


        } //end while
    
    } else {
      eval("standarderror(\"".gettemplate("error_pmnoselected")."\");");
      exit;
   }
} 


Note for Foreign Users: replace the words 'Date/Time Sent', 'From', 'To', 'Subject' in the above code with whatever wording in your language that suits you.

Save file and upload.

2. Edit template privfolder.

Find:

$massforwardlink

Immediately after OR before it (it does not matter), put:

or <input type="submit" class="bginput2" name="download" value="Download" style="background-color:#606096;color:#FFF788;font-size:10px;font-weight:bold">

Note for Foreign Users: replace the word "or" and the value "Download" with whatever wording in your language that suits you.


That's it!

Usage: select one or more messages in one of your Private Messages folder and click on "Download". You will be prompted to save messages.txt on your hard drive (a Windows filename & folder selection dialogue will pop up).

Cheers,

Bira

[bart]

I changed the script a little:

if ($what=="download") {
   if (is_array($privatemessage)) {
//	        header("Content-disposition: filename=messages.txt");
//	        header("Content-type: application/octet-stream");
//	        header("Pragma: no-cache");
//	        header("Expires: 0");
	
     while(list($key,$val)=each($privatemessage)) {
            $downloads=$DB_site->query_first("SELECT touserid,fromuserid,dateline,title,message FROM privatemessage WHERE privatemessageid='$key' AND userid=$bbuserinfo[userid]");
            $tousername=$DB_site->query_first("SELECT username FROM user WHERE userid='$downloads[touserid]'");
            $fromusername=$DB_site->query_first("SELECT username FROM user WHERE userid='$downloads[fromuserid]'");
            $msgdt = vbdate($dateformat,$downloads[dateline]);
            $msgtm = vbdate($timeformat,$downloads[dateline]);
            $wordwrap = wordwrap($downloads[message],75,"\r\n");
	            
   $dump .= "\r\nDate/Time Sent: $msgdt, $msgtm\r\n";
   $dump .= "from: $fromusername[username]\r\n"; 
   $dump .= "To: $tousername[username]\r\n";
   $dump .= "Subject: $downloads[title]\r\n\r\n";
   $dump .= "$wordwrap\r\n";
   $dump .= "\r\n==========================================================================\r\n";

} //end while

  mail("$bbuserinfo[email]","Download Private Messages","$dump","From: Title of your board <no_reply_emailaddress>");

  eval("standarderror(\"".gettemplate("pm_download_complete")."\");");
 exit;
	    
} else {
  eval("standarderror(\"".gettemplate("error_pmnoselected")."\");");
  exit;
  }
}

Now the messages are send to the users emailaddress. In the template "pm_download_complete" you can warn them to check the email before deleting the messages.

[LouChipher]

@ bart, search the bug...
every user can see and download all pns...

[bart]

Guess you're right, Lou. Thanks for your warning (though less for making it a puzzle).

Does this solve it?

	if ($what=="download") {
	    if (is_array($privatemessage)) {
			$pms = implode(",",array_keys($privatemessage));
			$downloads=$DB_site->query("SELECT touserid,fromuserid,dateline,title,message FROM privatemessage WHERE privatemessageid IN ($pms) AND userid=$bbuserinfo[userid]");
			while ($pm = mysql_fetch_array($downloads)) {
			    $tousername=$DB_site->query_first("SELECT username FROM user WHERE userid='$pm[touserid]'");
			    $fromusername=$DB_site->query_first("SELECT username FROM user WHERE userid='$pm[fromuserid]'");
			    $msgdt = vbdate($dateformat,$downloads[dateline]);
			    $msgtm = vbdate($timeformat,$downloads[dateline]);
			    $wordwrap = wordwrap($pm[message],75,"\r\n");
			    
			    $dump .= "\r\nDate/Time Sent: $msgdt, $msgtm\r\n";
			    $dump .= "From: $fromusername[username]\r\n";
			    $dump .= "To: $tousername[username]\r\n";
			    $dump .= "Subject: $pm[title]\r\n\r\n";
			    $dump .= "$wordwrap\r\n";
			    $dump .= "\r\n==========================================================================\r\n";
			} //end while
			mail("$bbuserinfo[email]","Download Private Messages","$dump","From: BOARD-TITLE <EMAILADDRESS>");
		   eval("standarderror(\"".gettemplate("pm_download_complete")."\");");
		   exit;    
	    } else {
	      eval("standarderror(\"".gettemplate("error_pmnoselected")."\");");
	      exit;
	   }
	}

[LouChipher]

looks bad... one of my moderators tell u what's wrong. btw he release a secure template version (save pms as a html file) in a few days.

lou

[Cano2]

Hi,
sorry forposting so late... didn't have much time


The most importent rule in web-programming is "never trust user input". But this rule is ignored here, so injection of SQL statements is possible...

[detailed description removed]

I have postet a very simmilar hack with enhanced functionality (templates...), which should be safe (uses verifyid() ) here: https://vborg.vbsupport.ru/showthrea...threadid=37172

[bart]

Oops.

Thanks for your reply Cano. I'll switch to your version soon as I have the time.

I couldn't do what you suggest is possible, but the thought of it maybe being possible is more then enough.

Maybe you should remove your post to not give someone a bad idea.

[Boofo]

Thanks zarkov, that fixed it. :-)

[Boofo]

Thanks for the great hack, bira! I am in the process of getting the board ready to go up and this will be a great addition and surprise for everyone. Keep up the great work!

[Dark Shogun]

I got a error. Does anyone know how to fix this? I have Ver. 2.2.6.

PHP Code:

Parse error: parse error, unexpected $ in /home/blarg/public_html/forum/member.php on line 1638 


Dark Shogun

[Boofo]

Show us the code a few lines up and a few lines after the error and we'll see if we can spot the problem.

Originally posted by Dark Shogun
I got a error. Does anyone know how to fix this? I have Ver. 2.2.6.

PHP Code:

Parse error: parse error, unexpected $ in /home/blarg/public_html/forum/member.php on line 1638 


Dark Shogun