Snitz Forums 2000 - Newsletter MOD

Author

Topic

Page: of 5

leatherlips
Senior Member

USA
1838 Posts

Posted - 05 July 2008 : 16:11:04

I have a few questions about the newsletter mod over at snitz bitz. Does it allow non forum members to sign up? Does it have a double opt in and opt out feature, meaning they get a link in an email to confirm that want to subscribe or unsubscribe?<

leatherlips
Senior Member

USA
1838 Posts

Posted - 06 July 2008 : 12:50:35

I went ahead and installed this on my test forum. I see that it allows non members to join which I think is good. However, it does not have a double opt in or out feature. Does anyone know how to implement that?<

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 14:06:26

What would be needed, Leather is for the computer to generate a random string, store it against their opt-in info & send it to the user like this:

forumURL & target.asp=Member_ID"& variablestring & "

Then the target.asp page would compare it to the value in the DBase like this:


MMID=val(left(Request.ServerVariables("QUERY_STRING"),len(Request.ServerVariables("QUERY_STRING"))-(knownlengthofvariablestring)))
strSql = "SELECT WHATEVERVALUE FROM " & strMemberTablePrefix & "MEMBERS WHERE MEMBER_ID=" & MMID
set rsOpt=Server.CreateObject("ADODB.Recordset")
rsOpt.open StrSql, My_conn
variablestring = right(Request.ServerVariables("QUERY_STRING"),knownlengthofvariablestring)
rsOpt.close
set rsOpt=Nothing
if variablestring=rsOpt("whatevervalue") then
	' opt in routine
else
	' opt out
end if

Edited by - Carefree on 06 July 2008 14:10:11

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 14:38:27

You could use something like this to create your random string:


variablestring=sha256(opt" & MEMBER_ID & ")

That way, your variable string will always be 64 characters, regardless of the length of "MEMBER_ID". Since the code will have to match a stored variable to confirm opting in, it should preclude any malicious people opting someone else in.

However, if you allow non-forum members to sign up, you'll have to use a different pattern recognition to do the job. Use their Email address in an approach like this:

The link sent would have to include some form of their email address, possibly encrypted.

You could do this:

EncEM=sha256(" & email & ")

Store EncEM as ENCRYPTEDEMAIL
Store VariableString as WHATEVERVALUE

Making the link like this:

forumURL & target.asp=" & EncEM & variablestring & "

Then your opt-in table would have to include at least three fields (email address, encrypted email, whatevervalue).


MMEM=left(Request.ServerVariables("QUERY_STRING"),64)
VariableString = right(Request.ServerVariables("QUERY_STRING"),64)
strSql = "SELECT WHATEVERVALUE FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEMAL=" & MMEM
set rsOpt=Server.CreateObject("ADODB.Recordset")
rsOpt.open StrSql, My_conn
if variablestring=rsOpt("whatevervalue") then
	' opt in routine
else
	' opt out
end if
rsOpt.close
set rsOpt=Nothing

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 15:30:02

Here Leather, an all-in-one for you


<%
'################################################################################
'## Snitz Forums 2000 v3.4.06
'################################################################################
'## Copyright (C) 2000-06 Michael Anderson, Pierre Gorissen,
'##                       Huw Reddick and Richard Kinser
'##
'## This program is free software; you can redistribute it and/or
'## modify it under the terms of the GNU General Public License
'## as published by the Free Software Foundation; either version 2
'## of the License, or (at your option) any later version.
'##
'## All copyright notices regarding Snitz Forums 2000
'## must remain intact in the scripts and in the outputted HTML
'## The "powered by" text/logo with a link back to
'## http://forum.snitz.com in the footer of the pages MUST
'## remain visible when the pages are viewed on the internet or intranet.
'##
'## This program is distributed in the hope that it will be useful,
'## but WITHOUT ANY WARRANTY; without even the implied warranty of
'## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
'## GNU General Public License for more details.
'##
'## You should have received a copy of the GNU General Public License
'## along with this program; if not, write to the Free Software
'## Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
'##
'## Support can be obtained from our support forums at:
'## http://forum.snitz.com
'##
'## Correspondence and Marketing Questions can be sent to:
'## manderson@snitz.com
'##
'################################################################################
%>
<!--#INCLUDE FILE="inc_sha256.asp"-->
<%

if generate = 1 then
	'	NewsLetter Opt-In Routine

	EM = Request.ServerVariables("QUERY_STRING")
	EncEM = sha256("" & EM)
	Randomize
	DateNumber = Int(Rnd * PRange) + 1
	WHATEVER = sha256("" & DateNumber)

	strSql="INSERT INTO " & strTablePrefix & "OPTIN " &_
		"(EMAIL, ENCRYPTEDEM, WHATEVER) VALUES ('" & EM & "', '" & EncEM & "', '" & WHATEVER & "')"
	my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
	rsOpt.close
	set rsOpt = Nothing

	strRecipientsName = Request.Form("Name")
	strRecipients = Request.Form("Email")
	strFrom = strSender
	strFromName = strForumTitle
	strsubject = strForumTitle & " Newsletter "
	strMessage = "Hello " & Request.Form("name") & vbNewline & vbNewline
	strMessage = strMessage & "You received this message from " & strForumTitle & " because someone using your email address has elected to receive our newsletter at " & strForumURL & "." & vbNewline & vbNewline
	strMessage = strMessage & "Please click on the link below to start receiving the newsletter." & vbNewline & vbNewLine
	strMessage = strMessage & "If the link is split or broken, you will need to copy and paste the entire link into your web browser." & vbNewline & vbNewLine
	strMessage = strMessage & "If you do not want to receive our newsletter, simply delete this message."
	strMessage = strMessage & strForumURL & "target.asp?opt="& encryptedem & whatever & vbNewline & vbNewline
%>
<!--#INCLUDE FILE="inc_mail.asp" -->
<%
else
	XEM = Request.ServerVariables("QUERY_STRING")
	ENCEM = LEFT(XEM,64)
	strSql = "SELECT EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM=" & ENCEM
	set rsOpt = myConn.execute(strSql)
	if not rsOpt.BOF and not rsOpt.EOF then 'Record exists
		if WHATEVER=RIGHT(XEM,64) then 'Record matches
			'	Do opt in routine
				'	Advise of success
					Response.Write	"Congratulations, you have successfully joined " & strForumTitle & "'s newsletter." & vbNewLine & _
						"<br>You will begin receiving it with the next issue."
				'	Add to recipient list
'	#############################

	'	Place your specific activities here

'	#############################
				'	Now delete from optin table
					rsOpt.close
					set rsOpt = Nothing
					strSql = "DELETE EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM=" & ENCEM
					my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
					rsOpt.close
					set rsOpt = Nothing
				'	Finally, redirect to default.asp
					Response.Write	"<meta http-equiv=""Refresh"" content=""2; URL=default.asp"">" & vbNewLine
		else 'Delete record, doesn't match
			rsOpt.close
			set rsOpt = Nothing
			strSql = "DELETE EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM=" & ENCEM
			my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
			rsOpt.close
			set rsOpt = Nothing
		end if
	else '	Record doesn't exist, redirect to default.asp
		Response.Write	"<meta http-equiv=""Refresh"" content=""2; URL=default.asp"">" & vbNewLine
	end if
end if
%>

Edited by - Carefree on 06 July 2008 15:34:19

leatherlips
Senior Member

USA
1838 Posts

Posted - 06 July 2008 : 15:54:30

Thanks! I'll try it out. Do I have to add anything to the database?<

leatherlips
Senior Member

USA
1838 Posts

Posted - 06 July 2008 : 16:04:45

Also, what file would your code replace?<

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 17:08:27

You'll have to create a table (if one doesn't already exist with that mod) to hold those values, yes.

You can do it with a dbs file like this:


OPT-IN MOD
[CREATE]
OPTIN

EMAIL#varchar(64)##
ENCRYPTEDEM#varchar(64)##
WHATEVER#varchar(64)##
[END]

Leave the blank line in. Save in your root forum directory as "dbs_optin.asp". Then install it like normal from Admin Home.

The file above doesn't replace any existing files & you'll have to finalize whatever steps are necessary to add the person to your list of recipients. There's a comment delineated section in the file for that (list and it should be obvious).

If you have trouble with it, let me know & I'll DL that mod and finish it for you.<

Edited by - Carefree on 06 July 2008 17:09:01

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 17:12:20

To use that file that I created, you'll need to set the value of a variable "Generate" to 1 from the form where they elect to receive the newsletter, then change the action to target.asp?=(email).<

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 17:25:56

OK - downloaded it.

In mailinglist.asp, line 45, change it to say:


    if blnValid = True then
    	session("generate")="1"
    	Response.Redirect	"target.asp?"&strEmail&""

That'll get it started.

I added in the final steps from mailinglist.asp into target.asp


<%
'################################################################################
'## Snitz Forums 2000 v3.4.06
'################################################################################
'## Copyright (C) 2000-06 Michael Anderson, Pierre Gorissen,
'##                       Huw Reddick and Richard Kinser
'##
'## This program is free software; you can redistribute it and/or
'## modify it under the terms of the GNU General Public License
'## as published by the Free Software Foundation; either version 2
'## of the License, or (at your option) any later version.
'##
'## All copyright notices regarding Snitz Forums 2000
'## must remain intact in the scripts and in the outputted HTML
'## The "powered by" text/logo with a link back to
'## http://forum.snitz.com in the footer of the pages MUST
'## remain visible when the pages are viewed on the internet or intranet.
'##
'## This program is distributed in the hope that it will be useful,
'## but WITHOUT ANY WARRANTY; without even the implied warranty of
'## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
'## GNU General Public License for more details.
'##
'## You should have received a copy of the GNU General Public License
'## along with this program; if not, write to the Free Software
'## Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
'##
'## Support can be obtained from our support forums at:
'## http://forum.snitz.com
'##
'## Correspondence and Marketing Questions can be sent to:
'## manderson@snitz.com
'##
'################################################################################
%>
<!--#INCLUDE FILE="inc_sha256.asp"-->
<%

if Session("Generate") = "1" then
	'	NewsLetter Opt-In Routine

	EM = Request.ServerVariables("QUERY_STRING")
	EncEM = sha256("" & EM)
	Randomize
	DateNumber = Int(Rnd * PRange) + 1
	WHATEVER = sha256("" & DateNumber)

	strSql="INSERT INTO " & strTablePrefix & "OPTIN " &_
		"(EMAIL, ENCRYPTEDEM, WHATEVER) VALUES ('" & EM & "', '" & EncEM & "', '" & WHATEVER & "')"
'	Response.Write	strSql
'	Response.end
	my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
	rsOpt.close
	set rsOpt = Nothing

	strRecipientsName = Request.Form("Name")
	strRecipients = Request.Form("Email")
	strFrom = strSender
	strFromName = strForumTitle
	strsubject = strForumTitle & " Newsletter "
	strMessage = "Hello " & Request.Form("name") & vbNewline & vbNewline
	strMessage = strMessage & "You received this message from " & strForumTitle & " because someone using your email address has elected to receive our newsletter at " & strForumURL & "." & vbNewline & vbNewline
	strMessage = strMessage & "Please click on the link below to start receiving the newsletter." & vbNewline & vbNewLine
	strMessage = strMessage & "If the link is split or broken, you will need to copy and paste the entire link into your web browser." & vbNewline & vbNewLine
	strMessage = strMessage & "If you do not want to receive our newsletter, simply delete this message."
	strMessage = strMessage & strForumURL & "target.asp?opt="& encryptedem & whatever & vbNewline & vbNewline
%>
<!--#INCLUDE FILE="inc_mail.asp" -->
<%
session("Generate") = ""
else
	XEM = Request.ServerVariables("QUERY_STRING")
	ENCEM = LEFT(XEM,64)
	strSql = "SELECT EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM=" & ENCEM
	set rsOpt = myConn.execute(strSql)
	if not rsOpt.BOF and not rsOpt.EOF then 'Record exists
		if WHATEVER=RIGHT(XEM,64) then 'Record matches
			rsOpt.close
			set rsOpt = Nothing
			'	Do opt in routine
				'	Advise of success
					Response.Write	"Congratulations, you have successfully joined " & strForumTitle & "'s newsletter." & vbNewLine & _
						"<br>You will begin receiving it with the next issue."
				'	Add to recipient list
        strSQL = "INSERT INTO " & strTablePrefix & "maillist (email, date_created, active)" & _
        	" VALUES ('" & strEmail & "', '" & strDate & "', '" & blnMailList & "');"
        my_Conn.Execute(strSQL)
				'	Now delete from optin table
					strSql = "DELETE EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM=" & ENCEM
					my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
					rsOpt.close
					set rsOpt = Nothing
				'	Finally, redirect to default.asp
					Response.Write	"<meta http-equiv=""Refresh"" content=""2; URL=default.asp"">" & vbNewLine
		else 'Delete record, doesn't match
			rsOpt.close
			set rsOpt = Nothing
			strSql = "DELETE EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM=" & ENCEM
			my_Conn.Execute (strSql),,adCmdText + adExecuteNoRecords
			rsOpt.close
			set rsOpt = Nothing
		end if
	else '	Record doesn't exist, redirect to default.asp
		Response.Write	"<meta http-equiv=""Refresh"" content=""2; URL=default.asp"">" & vbNewLine
	end if
end if
%>

Edited by - Carefree on 06 July 2008 17:56:27

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 18:15:49

I have a bug to solve, then I think it's done.

I'm getting an Object required: 'my_Conn' error referring to these few lines:


	strSql="INSERT INTO " & strTablePrefix & "OPTIN " &_
		"(EMAIL, ENCRYPTEDEM, WHATEVER) VALUES ('" & EM & "', '" & EncEM & "', '" & WHATEVER & "');"
	my_Conn.Execute(strSql)

Here's the strSql output to Response.Write

quote:

INSERT INTO OPTIN (EMAIL, ENCRYPTEDEM, WHATEVER) VALUES ('example@msn.com', 'b1b651a4b3876253d6174b0bc2219d53ae89d0b20f864532f356bb5f66128ec7', '6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b');

It's giving me what I expect it to, anybody see why I'd be getting the error?

Edit - never mind, I'm an idiot. I forgot to include config.asp<

Edited by - Carefree on 06 July 2008 18:26:09

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 20:42:26

Done. It all works.


<%
'################################################################################
'## Snitz Forums 2000 v3.4.06
'################################################################################
'## Copyright (C) 2000-06 Michael Anderson, Pierre Gorissen,
'##                       Huw Reddick and Richard Kinser
'##
'## This program is free software; you can redistribute it and/or
'## modify it under the terms of the GNU General Public License
'## as published by the Free Software Foundation; either version 2
'## of the License, or (at your option) any later version.
'##
'## All copyright notices regarding Snitz Forums 2000
'## must remain intact in the scripts and in the outputted HTML
'## The "powered by" text/logo with a link back to
'## http://forum.snitz.com in the footer of the pages MUST
'## remain visible when the pages are viewed on the internet or intranet.
'##
'## This program is distributed in the hope that it will be useful,
'## but WITHOUT ANY WARRANTY; without even the implied warranty of
'## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
'## GNU General Public License for more details.
'##
'## You should have received a copy of the GNU General Public License
'## along with this program; if not, write to the Free Software
'## Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
'##
'## Support can be obtained from our support forums at:
'## http://forum.snitz.com
'##
'## Correspondence and Marketing Questions can be sent to:
'## manderson@snitz.com
'##
'################################################################################
%>
<!--#INCLUDE FILE="config.asp"-->
<!--#INCLUDE FILE="inc_sha256.asp"-->
<!--#INCLUDE FILE="inc_func_common.asp" -->
<!--#INCLUDE FILE="inc_func_member.asp" -->
<!--#INCLUDE FILE="inc_func_posting.asp"-->
<%

if Session("Generate") = "1" then
	'	NewsLetter Opt-In Routine

	EM = Request.ServerVariables("QUERY_STRING")
	EncEM = sha256("" & EM)
	Randomize
	DateNumber = Int(Rnd * PRange) + 1
	WHATEVER = sha256("" & DateNumber)

	set my_Conn=Server.CreateObject("ADODB.Connection")
	my_Conn.Open strConnString
	strSql="INSERT INTO " & strTablePrefix & "OPTIN " &_
		"(EMAIL, ENCRYPTEDEM, WHATEVER) VALUES ('" & EM & "', '" & EncEM & "', '" & WHATEVER & "')"
'	Response.Write	strSql
'	Response.End
	Appnd = EncEM & WHATEVER
	set rsOpt=my_Conn.Execute(strSql)
	strRecipientsName = strForumURL & "Newsletter Recipient"
	strRecipients = Request.ServerVariables("QUERY_STRING")
	strFrom = strSender
	strFromName = strForumTitle
	strsubject = strForumTitle & " Newsletter "
	strMessage = "Hello " & Request.Form("name") & vbNewline & vbNewline
	strMessage = strMessage & "You received this message from " & strForumTitle & " because someone using your email address has elected to receive our newsletter at " & strForumURL & "." & vbNewline & vbNewline
	strMessage = strMessage & "Please click on the link below to start receiving the newsletter." & vbNewline & vbNewLine
	strMessage = strMessage & strForumURL & "target.asp?"& Appnd & vbNewline & vbNewline
	strMessage = strMessage & "If the link is split or broken, you will need to copy and paste the entire link into your web browser." & vbNewline & vbNewLine
	strMessage = strMessage & "If you do not want to receive our newsletter, simply delete this message, do not reply, it isn't monitored."
%>
<!--#INCLUDE FILE="inc_mail.asp" -->
<%
session("Generate") = ""

else
	EncEM = LEFT(Request.ServerVariables("QUERY_STRING"),64)
	XEM = RIGHT(Request.ServerVariables("QUERY_STRING"),64)
	set my_Conn=Server.CreateObject("ADODB.Connection")
	my_Conn.Open strConnString
	strSql = "SELECT EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM='" & EncEM & "'"
	set rsOpt=my_Conn.Execute(strSql)
	if not rsOpt.BOF and not rsOpt.EOF then 'Record exists
		if rsOpt("WHATEVER")=XEM then 'Record matches
			strEmail=rsOpt("EMAIL")
			rsOpt.close
			set rsOpt = Nothing
			'	Do opt in routine
				'	Advise of success
					Response.Write	"Congratulations, you have successfully joined " & strForumTitle & "'s newsletter." & vbNewLine & _
						"<br>You will begin receiving it with the next issue."
				'	Add to recipient list
				set my_Conn=Server.CreateObject("ADODB.Connection")
				my_Conn.Open strConnString
				strDate = Date()
        strSQL = "INSERT INTO " & strTablePrefix & "maillist (email, date_created, active)" & _
        	" VALUES ('" & strEmail & "', '" & strDate & "',1)"
				set rsOpt=my_Conn.Execute(strSql)
				'	Now delete from optin table
					strSql = "DELETE EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM='" & ENCEM & "'"
					set rsOpt=my_Conn.Execute(strSql)
				'	Finally, redirect to default.asp
					Response.Write	"<meta http-equiv=""Refresh"" content=""2; URL=default.asp"">" & vbNewLine
		else 'Delete record, doesn't match
			rsOpt.close
			set rsOpt = Nothing
			set my_Conn=Server.CreateObject("ADODB.Connection")
			my_Conn.Open strConnString
			strSql = "DELETE EMAIL, ENCRYPTEDEM, WHATEVER FROM " & strTablePrefix & "OPTIN WHERE ENCRYPTEDEM='" & ENCEM & "'"
			set rsOpt=my_Conn.Execute(strSql)
		end if
	else '	Record doesn't exist, redirect to default.asp
		Response.Write	"<meta http-equiv=""Refresh"" content=""2; URL=default.asp"">" & vbNewLine
	end if
end if
		Response.Write	"<meta http-equiv=""Refresh"" content=""2; URL=default.asp"">" & vbNewLine
%>

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 21:02:04

My part works lol. I created a test newsletter, it says it sent it (to the right members from the database), but it didn't really get sent. Further, it deletes everything you typed as soon as you confirm the send, so if you want to continue testing, I'd back it up.<

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 21:49:58

Here's the routine from the nlEmail_list.asp (newsletter sending):


	strRecipientsName = rsMail("Email")
	strRecipients = rsMail("Email")
	strFrom = strSender
	strFromName = strForumTitle
	strSubject = Request.Form("txtSubject")
	strMessage = Request.Form("txtBody") & vbcrlf & vbcrlf & "If you want to unsubscribe from this list, please go to: " & strForumURL & "." & vbCrLf & vbCrLf & "You are subscribed as: " & strRecipients & vbCRLF
%>
<!--#INCLUDE FILE="inc_mail.asp" -->
<%

It pulls the correct email address from the database, claims it sends it ok - but nothing apparently is sent. I don't see anything wrong with it but I may have been looking too long today.<

leatherlips
Senior Member

USA
1838 Posts

Posted - 06 July 2008 : 22:10:10

Carefree, thanks for all your work! It is very much appreciated! Maybe it's not that big a deal to have a double opt in. I've just noticed that other newsletter scripts have a feature like that to help prevent someone being signed up that didn't want to.<

Carefree
Advanced Member

Philippines
4222 Posts

Posted - 06 July 2008 : 22:39:46

Leather, the problem isn't with the double-opt in. That part works perfectly. The problem is that the newsletter isn't being sent at all (if you try html version).<

Page: of 5

Topic