root/buddyloo/files/lib/form/InvitationEditForm.class.php

<?php
require_once(WCF_DIR.'lib/form/AbstractForm.class.php');
require_once(WCF_DIR.'lib/system/session/UserSession.class.php');
require_once(WCF_DIR.'lib/system/exception/IllegalLinkException.class.php');
require_once(WCF_DIR.'lib/page/util/menu/UserCPMenu.class.php');
require_once(WCF_DIR.'lib/util/UserRegistrationUtil.class.php');

/**
 * invitation edit form
 * 
 * @author      Torben Brodt
 * @package     de.easy-coding.wcf.buddyloo
 * @license     GNU General Public License <http://opensource.org/licenses/gpl-3.0.html>
 */
class InvitationEditForm extends AbstractForm {
        public $input = '';
        public $body = '';
        public $inputArray = array();
        public $emails = array();
        public $templateName = 'buddylooInvitationEdit';
        
        protected $flag = false;
        
        /**
         * @see Page::readParameters()
         */
        public function readParameters() {
                parent::readParameters();
                
                if (isset($_GET['remove'])) {
                        // delete invitation
                        $sql = "DELETE FROM     wcf".WCF_N."_buddyloo_invitation
                                WHERE           userID = ".WCF::getUser()->userID."
                                                AND email = '".escapeString($_GET['remove'])."'";
                        WCF::getDB()->sendQuery($sql);

                        // show success message
                        WCF::getTPL()->assign(array(
                                'success' => 'remove',
                                'changedEmails' => $_GET['remove']
                        ));
                }
                else if (isset($_GET['add'])) {
                        $this->submit();
                }
        }
        
        /**
         * @see Form::readFormParameters()
         */
        public function readFormParameters() {
                parent::readFormParameters();
                
                if (isset($_POST['input'])) $this->input = StringUtil::trim($_POST['input']);
                if (isset($_POST['body'])) $this->body = StringUtil::trim($_POST['body']);
        }
        
        /**
         * @see Form::validate()
         */
        public function validate() {
                parent::validate();
                
                if (count($this->inputArray) == 0) {
                        $this->readInvitations();
                        if (empty($this->input)) {
                                throw new UserInputException('input');
                        }
                        $this->validateEmails();
                }
        }
        
        /**
         * @see Form::save()
         */
        public function save() {
                parent::save();
                
                // save user
                $inserts = '';
                foreach ($this->inputArray as $email) {
                        if (!empty($inserts)) $inserts .= ',';
                        $inserts .= "(".WCF::getUser()->userID.", '".escapeString($email)."')";
                        $this->emails[] = $email;
                }
                
                if (!empty($inserts)) {
                        $sql = "INSERT IGNORE INTO      wcf".WCF_N."_buddyloo_invitation
                                                        (userID, email)
                                VALUES                  ".$inserts;
                        WCF::getDB()->sendQuery($sql);
                }
                
                $this->saved();
                $this->sendNotification();

                // show success message
                WCF::getTPL()->assign(array(
                        'success' => 'add',
                        'changedEmails' => $this->input
                ));

                // reset input field
                $this->input = '';
                $this->body = '';
        }
        
        /**
         *
         */
        protected function readInvitations() {
                if($this->flag) return;
                $this->flag = true;
                
                $sql = "SELECT          email
                        FROM            wcf".WCF_N."_buddyloo_invitation
                        WHERE           userID = ".WCF::getUser()->userID;
                $result = WCF::getDB()->sendQuery($sql);
                while ($row = WCF::getDB()->fetchArray($result)) {
                        $this->emails[] = $row['email'];
                }
        }

        /**
         * @see Page::readData()
         */
        public function readData() {
                parent::readData();
                $this->readInvitations();
        }
        
        /**
         * @see Page::assignVariables()
         */
        public function assignVariables() {
                parent::assignVariables();
                
                WCF::getTPL()->assign(array(
                        'input' => $this->input,
                        'emails' => $this->emails,
                        'body' => $this->body,
                ));
        }

        /**
         * @see Page::show()
         */
        public function show() {
                if (!WCF::getUser()->userID) {
                        require_once(WCF_DIR.'lib/system/exception/PermissionDeniedException.class.php');
                        throw new PermissionDeniedException();
                }
                
                // set active tab
                UserCPMenu::getInstance()->setActiveMenuItem('wcf.user.usercp.menu.link.management.invitation');
                
                // show form
                parent::show();
        }
        
        /**
         * Checks the given emails.
         */
        protected function validateEmails() {
                // explode multiple usernames to an array
                $emailArray = explode(',', $this->input);
                $error = array();
                $in = array();
                
                // loop through recipients and check if the email is valid
                foreach ($emailArray as $email) {
                        $email = StringUtil::trim($email);
                        $in[] = "'$email'";
                        if (empty($email)) continue;
                        
                        if(in_array($email, $this->emails)) {
                                $error[] = array('type' => 'duplicate', 'email' => $email);
                        } else if (UserRegistrationUtil::isValidEmail($email)) {
                                $this->inputArray[] = $email;
                        } else {
                                $error[] = array('type' => 'invalid', 'email' => $email);
                        }
                }
                
                // search for already registered users
                $sql = "SELECT          email
                        FROM            wcf".WCF_N."_user
                        WHERE           email IN (".implode(',',$in).")";
                $result = WCF::getDB()->sendQuery($sql);
                while ($row = WCF::getDB()->fetchArray($result)) {
                        $error[] = array('type' => 'duplicate', 'email' => $row['email']);
                }
                
                if (count($error)) {
                        throw new UserInputException('usernames', $error);
                }
        }
        
        /**
         * Sends the email notification for recipients.
         */
        protected function sendNotification() {
                require_once(WCF_DIR.'lib/data/mail/Mail.class.php');
                
                // send notifications
                foreach ($this->inputArray as $recipient) {
                        // send mail
                        $subjectData = array(
                                '$author' => WCF::getUser()->username,
                                'PAGE_TITLE' => PAGE_TITLE
                        );
                        $messageData = array(
                                'PAGE_TITLE' => PAGE_TITLE,
                                '$recipient' => $recipient,
                                '$author' => WCF::getUser()->username,
                                '$pageurl' => FileUtil::addTrailingSlash(PAGE_URL),
                                '$notice' => (REGISTER_INVITATIONS ? WCF::getLanguage()->get('wcf.buddyloo.invitation.register_invitation') : ""),
                                '$body' => $this->body
                        );

                        $mail = new Mail(array($recipient), WCF::getLanguage()->get('wcf.buddyloo.invitation.mail.subject', $subjectData), WCF::getLanguage()->get('wcf.buddyloo.invitation.mail.body', $messageData));
                        $mail->send();
                }
        }
}
?>