From 0e5530b1397802b21deeba1514934f14ddc42c63 Mon Sep 17 00:00:00 2001
From: Borgal <mueller.lars@online.de>
Date: Mon, 2 Feb 2026 12:51:20 +0100
Subject: [PATCH] =?UTF-8?q?v1.4.0=20-=20Mailer=20hinzugef=C3=BCgt?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 mail.php | 155 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 155 insertions(+)
 create mode 100755 mail.php

diff --git a/mail.php b/mail.php
new file mode 100755
index 0000000..a571373
--- /dev/null
+++ b/mail.php
@@ -0,0 +1,155 @@
+<?php
+include('inc/check_login.php');
+require_once('inc/db.php');
+
+// Nur Admins dürfen Mails senden
+if ($_SESSION['role'] !== 'admin') {
+    header("Location: index.php");
+    exit();
+}
+
+define('APP_URL', 'https://domili.borgal.de');
+
+$message = '';
+$message_type = '';
+
+function get_all_users($conn)
+{
+    $stmt = mysqli_prepare($conn, "SELECT id, username FROM users ORDER BY username");
+    mysqli_stmt_execute($stmt);
+    $result = mysqli_stmt_get_result($stmt);
+    $users = [];
+    while ($row = mysqli_fetch_assoc($result)) {
+        $users[] = $row;
+    }
+    mysqli_stmt_close($stmt);
+    return $users;
+}
+
+// --- MAIL SENDEN ---
+if ($_SERVER["REQUEST_METHOD"] === "POST") {
+    if (!file_exists(__DIR__ . '/vendor/autoload.php')) {
+        $message = "PHPMailer nicht verfügbar.";
+        $message_type = 'danger';
+    } else {
+        require_once __DIR__ . '/vendor/autoload.php';
+
+        $subject = trim($_POST['subject'] ?? '');
+        $body = trim($_POST['body'] ?? '');
+        $recipient_ids = $_POST['recipients'] ?? [];
+
+        if (empty($subject) || empty($body)) {
+            $message = "Betreff und Nachricht sind erforderlich.";
+            $message_type = 'danger';
+        } else {
+            $all_users = get_all_users($conn);
+            if (in_array('all', $recipient_ids)) {
+                $recipient_ids = array_column($all_users, 'id');
+            } else {
+                $recipient_ids = array_filter(array_map('intval', $recipient_ids));
+            }
+
+            if (empty($recipient_ids)) {
+                $message = "Keine Empfänger ausgewählt.";
+                $message_type = 'warning';
+            } else {
+                $placeholders = str_repeat('?,', count($recipient_ids) - 1) . '?';
+                $stmt = mysqli_prepare($conn, "SELECT id, username, email FROM users WHERE id IN ($placeholders) AND email IS NOT NULL AND email != ''");
+                mysqli_stmt_bind_param($stmt, str_repeat('i', count($recipient_ids)), ...$recipient_ids);
+                mysqli_stmt_execute($stmt);
+                $recipients = mysqli_fetch_all(mysqli_stmt_get_result($stmt), MYSQLI_ASSOC);
+                mysqli_stmt_close($stmt);
+
+                if (empty($recipients)) {
+                    $message = "Keine gültigen Empfänger mit E-Mail gefunden.";
+                    $message_type = 'warning';
+                } else {
+                    foreach ($recipients as $r) {
+                        try {
+                            $mail = new \PHPMailer\PHPMailer\PHPMailer(true);
+                            $mail->CharSet = 'UTF-8';
+                            $mail->isSMTP();
+                            $mail->Host       = SMTP_HOST;
+                            $mail->SMTPAuth   = true;
+                            $mail->Username   = SMTP_USERNAME;
+                            $mail->Password   = SMTP_PASSWORD;
+                            $mail->SMTPSecure = SMTP_ENCRYPTION;
+                            $mail->Port       = SMTP_PORT;
+                            $mail->setFrom(MAIL_FROM_ADDRESS, MAIL_FROM_NAME);
+
+                            $html_body = "<p>Hallo <strong>" . htmlspecialchars($r['username']) . "</strong>,</p>\n<p>" . nl2br(htmlspecialchars($body)) . "</p>\n<p><em>Dein DoMiLi-Admin</em></p>";
+                            $text_body = "Hallo " . $r['username'] . ",\n\n" . $body . "\n\nDein DoMiLi-Admin";
+
+                            $mail->isHTML(true);
+                            $mail->Subject = $subject;
+                            $mail->Body    = $html_body;
+                            $mail->AltBody = $text_body;
+                            $mail->addAddress($r['email']);
+                            $mail->send();
+                        } catch (Exception $e) {
+                            error_log("Mail-Fehler an {$r['email']}: " . $mail->ErrorInfo);
+                        }
+                    }
+                    $message = "E-Mail wurde an " . count($recipients) . " Empfänger gesendet.";
+                    $message_type = 'success';
+                }
+            }
+        }
+    }
+}
+
+$all_users = get_all_users($conn);
+
+require_once('inc/header.php');
+?>
+
+<div class="container mt-5 mb-4">
+    <?php if ($message): ?>
+        <div class="alert alert-<?= htmlspecialchars($message_type) ?> alert-dismissible fade show" role="alert">
+            <?= htmlspecialchars($message) ?>
+            <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
+        </div>
+    <?php endif; ?>
+
+    <h2 class="mb-4">📧 Nachricht senden</h2>
+
+    <div class="card shadow">
+        <div class="card-body">
+            <form method="POST">
+                <div class="mb-3">
+                    <label class="form-label">Empfänger</label>
+                    <div class="form-check mb-2">
+                        <input class="form-check-input" type="checkbox" id="select_all" onchange="document.querySelectorAll('.recipient').forEach(el => el.checked = this.checked)">
+                        <label class="form-check-label" for="select_all">Alle auswählen</label>
+                    </div>
+                    <div style="max-height: 150px; overflow-y: auto; border: 1px solid #ddd; padding: 0.5em; border-radius: 0.375rem;">
+                        <?php foreach ($all_users as $u): ?>
+                            <div class="form-check">
+                                <input class="form-check-input recipient" type="checkbox" name="recipients[]" value="<?= $u['id'] ?>" id="rec_<?= $u['id'] ?>">
+                                <label class="form-check-label" for="rec_<?= $u['id'] ?>"><?= htmlspecialchars($u['username']) ?></label>
+                            </div>
+                        <?php endforeach; ?>
+                    </div>
+                </div>
+                <div class="mb-3">
+                    <label class="form-label">Betreff</label>
+                    <input type="text" class="form-control" name="subject" required>
+                </div>
+                <div class="mb-3">
+                    <label class="form-label">Nachricht</label>
+                    <textarea class="form-control" name="body" rows="5" required></textarea>
+                </div>
+                <button type="submit" class="btn btn-primary">E-Mail senden</button>
+                <a href="javascript:history.back()" class="btn btn-outline-secondary ms-2">Zurück</a>
+            </form>
+        </div>
+    </div>
+</div>
+
+<script>
+    document.getElementById('select_all').addEventListener('change', function() {
+        document.querySelectorAll('.recipient').forEach(cb => cb.checked = this.checked);
+    });
+</script>
+
+<?php include('inc/footer.php'); ?>
\ No newline at end of file