function send_invitations() {
+ # CSRF protection
+ $token = $this->trimmed('token');
+ if (!$token || $token != common_session_token()) {
+ $this->show_form(_('There was a problem with your session token. Try again, please.'));
+ return;
+ }
+
$user = common_current_user();
$profile = $user->getProfile();
}
} else {
$sent[] = $email;
- $this->send_invitation($email, $user);
+ $this->send_invitation($email, $user, $personal);
}
}
common_element_start('form', array('method' => 'post',
'id' => 'invite',
'action' => common_local_url('invite')));
+ common_hidden('token', common_session_token());
common_textarea('addresses', _('Email addresses'),
$this->trimmed('addresses'),
$this->trimmed('personal'),
_('Optionally add a personal message to the invitation.'));
- common_submit('preview', _('Preview'));
+ common_submit('send', _('Send'));
common_element_end('form');
common_show_footer();
}
- function send_invitation($email, $user) {
+ function send_invitation($email, $user, $personal) {
+
+ $profile = $user->getProfile();
+ $bestname = $profile->getBestName();
+
+ $sitename = common_config('site', 'name');
$invite = new Invitation();
$headers['From'] = mail_notify_from();
$headers['To'] = $email;
- $headers['Subject'] = sprintf(_('%1s has invited you to join them on %2s'), $bestname, $sitename);
-
- $body = sprintf(_("%1$s has invited you to join them on %2$s (%3$s).\n\n".
- "%2$s is a micro-blogging service that lets you keep up-to-date with people you know and people who interest you.\n\n".
- "You can also share news about yourself, your thoughts, or your life online with people who know about you.\n\n".
- "%1$s said:\n\n%4$s\n\n".
- "You can see %1$s's profile page on %2$s here:\n\n".
- "%5$s\n\n".
+ $headers['Subject'] = sprintf(_('%1$s has invited you to join them on %2$s'), $bestname, $sitename);
+
+ $body = sprintf(_("%1\$s has invited you to join them on %2\$s (%3\$s).\n\n".
+ "%2\$s is a micro-blogging service that lets you keep up-to-date with people you know and people who interest you.\n\n".
+ "You can also share news about yourself, your thoughts, or your life online with people who know about you. ".
+ "It's also great for meeting new people who share your interests.\n\n".
+ "%1\$s said:\n\n%4\$s\n\n".
+ "You can see %1\$s's profile page on %2\$s here:\n\n".
+ "%5\$s\n\n".
"If you'd like to try the service, click on the link below to accept the invitation.\n\n".
- "%6$s\n\n".
+ "%6\$s\n\n".
"If not, you can ignore this message. Thanks for your patience and your time.\n\n".
- "Sincerely, %2$s\n"),
- $bestname, $sitename, common_root_url(),
+ "Sincerely, %2\$s\n"),
+ $bestname,
+ $sitename,
+ common_root_url(),
$personal,
common_local_url('showstream', array('nickname' => $user->nickname)),
common_local_url('register', array('code' => $invite->code)));