_mailing) { return FALSE; } // check for visibility, if visibility is Public Pages and they have the permission // return true if ($this->_mailing->visibility == 'Public Pages' && CRM_Core_Permission::check('view public CiviMail content') ) { return TRUE; } // if user is an admin, return true if (CRM_Core_Permission::check('administer CiviCRM') || CRM_Core_Permission::check('approve mailings') || CRM_Core_Permission::check('access CiviMail') ) { return TRUE; } return FALSE; } /** * Run this page (figure out the action needed and perform it). * * @param int $id * @param int $contactID * @param bool $print * @param bool $allowID * * @return null|string * Not really sure if anything should be returned - parent doesn't */ public function run($id = NULL, $contactID = NULL, $print = TRUE, $allowID = FALSE) { if (is_numeric($id)) { $this->_mailingID = $id; } else { $print = TRUE; $this->_mailingID = CRM_Utils_Request::retrieve('id', 'String', CRM_Core_DAO::$_nullObject, TRUE); } // # CRM-7651 // override contactID from the function level if passed in if (isset($contactID) && is_numeric($contactID) ) { $this->_contactID = $contactID; } else { $this->_contactID = CRM_Core_Session::getLoggedInContactID(); } // mailing key check if (Civi::settings()->get('hash_mailing_url')) { $this->_mailing = new CRM_Mailing_BAO_Mailing(); if (!is_numeric($this->_mailingID)) { $this->_mailing->hash = $this->_mailingID; } elseif (is_numeric($this->_mailingID)) { $this->_mailing->id = $this->_mailingID; // if mailing is present and associated hash is present // while 'hash' is not been used for mailing view : throw 'permissionDenied' if ($this->_mailing->find() && CRM_Core_DAO::getFieldValue('CRM_Mailing_BAO_Mailing', $this->_mailingID, 'hash', 'id') && !$allowID ) { CRM_Utils_System::permissionDenied(); return NULL; } } } else { $this->_mailing = new CRM_Mailing_BAO_Mailing(); $this->_mailing->id = $this->_mailingID; } if (!$this->_mailing->find(TRUE) || !$this->checkPermission() ) { CRM_Utils_System::permissionDenied(); return NULL; } $contactId = isset($this->_contactID) ? $this->_contactID : 0; $result = civicrm_api3('Mailing', 'preview', [ 'id' => $this->_mailingID, 'contact_id' => $contactId, ]); $mailing = \CRM_Utils_Array::value('values', $result); $title = NULL; if (isset($mailing['body_html']) && empty($_GET['text'])) { $header = 'text/html; charset=utf-8'; $content = $mailing['body_html']; if (strpos($content, '') === FALSE && strpos($content, '') === FALSE) { $title = '<head><title>' . $mailing['subject'] . ''; } } else { $header = 'text/plain; charset=utf-8'; $content = $mailing['body_text']; } CRM_Utils_System::setTitle($mailing['subject']); if (CRM_Utils_Array::value('snippet', $_GET) === 'json') { CRM_Core_Page_AJAX::returnJsonResponse($content); } if ($print) { CRM_Utils_System::setHttpHeader('Content-Type', $header); print $title; print $content; CRM_Utils_System::civiExit(); } else { return $content; } } }