multipart/alternative email

designer02

The situation is as follows:

I am trying to send out multipart/alternative email in plaintext and html with no attachments. I have everything working just fine except for opening the file containing html and php (in this case named .php to pass variables using include()), passing the variables, and then formatting as plaintext (stripping out HTML, and PHP tags). This is the first time around trying to send out multipart/alternative and not wishing to use any external classes. So far I have the following:

below is the file being opened using fopen at "templates/email.php"

<html>
<head>
</head>
<body>
<h3 style="color:#d31e47;">Password Reset</h3>
<p>You received this e-mail because you reset your password for our website.</p>
<p>Your login information is:<br>
Email: <strong><?PHP echo $to; ?></strong><br>
Temporary Password: <strong><?PHP echo $p; ?></strong></p>
<p>To log in to our ftp site, click on the following link:<br>
<a href="http://somesite.com/" target="_blank">somesite.com</a></p>
<p>Thank You,</p>
<p>Some Company</p>
</body>
</html>

$html = 'templates/email.php';
$search = array ('@<script[^>]*?>.*?</script>@si', // Strip out javascript
                 '@<[\/\!]*?[^<>]*?>@si',          // Strip out HTML tags
                 '@([\r\n])[\s]+@',                // Strip out white space
                 '@&(quot|#34);@i',                // Replace HTML entities
                 '@&(amp|#38);@i',
                 '@&(lt|#60);@i',
                 '@&(gt|#62);@i',
                 '@&(nbsp|#160);@i',
                 '@&(iexcl|#161);@i',
                 '@&(cent|#162);@i',
                 '@&(pound|#163);@i',
                 '@&(copy|#169);@i',
                 '@&#(\d+);@e');                    // evaluate as php

$replace = array ('',
             '',
             '\1',
             '"',
             '&',
             '<',
             '>',
             ' ',
             chr(161),
             chr(162),
             chr(163),
             chr(169),
            'chr(\1)');

ob_start();
$file = @fopen($html, 'rb');
$text = fread($file, filesize($html));
$code = str_replace('<?php', '<?', $text);
$code = '?>' .$text. '<?';
$temp = eval($code);
$temp = preg_replace($search, $replace, $temp);
$temp = ob_get_contents();

$body .= "{$temp}\n\n";
fclose($file);
$temp = NULL;
ob_end_clean();

The code is outputting the contents of the php file with variables eval'd but not stripping any tags. I have tried removing $temp = ob_get_contents() and it sends nothing.

If anyone could shed any light on this it is extremely appreciated. Thanks.

NogDog

$temp = eval($code);

$temp is probably ending up being set either to NULL or FALSE at that point. Note that, as per the [man]eval/man page:

Return Values

As of PHP 4, eval() returns NULL unless return is called in the evaluated code, in which case the value passed to return is returned. If there is a parse error in the evaluated code, eval() returns FALSE and execution of the following code continues normally.

So assuming nothing is return()ed by the eval()ed code, $temp would have no useful value at that point.

Pna

In the regular expressions above I can see "@" in the beginning and end:

'@<script[^{>]?>.?</script>@si'}

In php.net guide to preg_replace they do not use "@":
http://dk.php.net/manual/en/function.preg-replace.php

Instead they use "/" in the begining and end.

What is the difference between using "@" and "/" ?
Could you show me a URL where I can read about it?

Thanks,
Peter.

NogDog

http://www.php.net/manual/en/intro.pcre.php

While the "/" is sort of the "traditional" pattern delimiter, it is often useful to use one of the other possibilities since in the web domain the "/" is used a lot (closing tags), and by using another delimiter you then do not have to worry about escaping literal "/" characters in your pattern.