$db = mysql_connect("localhost", "username", "password") or die("Could not connect.");

if(!$db) 

	die("no db");

if(!mysql_select_db("databse_name",$db))

 	die("No database selected.");

if(!get_magic_quotes_gpc())

{

  $_GET = array_map('mysql_real_escape_string', $_GET); 

  $_POST = array_map('mysql_real_escape_string', $_POST); 

  $_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);

}

else

{  

   $_GET = array_map('stripslashes', $_GET); 

   $_POST = array_map('stripslashes', $_POST); 

   $_COOKIE = array_map('stripslashes', $_COOKIE);

   $_GET = array_map('mysql_real_escape_string', $_GET); 

   $_POST = array_map('mysql_real_escape_string', $_POST); 

   $_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);

}



$adminmail="you@yourdomain.com";

$path="http://www.domain.com/path";

include "connect.php";

if(isset($_POST['submit'])) //if submit was pushed

{

   $email=$_POST['email'];

   $checkdups="SELECT * from email_table where email='$email'";

   $checkdups2=mysql_query($checkdups) or die("Could not check duplicates");

   $checkdups3=mysql_num_rows($checkdups2);   

   if(strlen($email)<4 || substr_count($email," ")>0)

   {

      print "That is not a valid email address. Please try again.";

   }

   else if($checkdups3>0)

   {

      print "That email is already in our database.";

   }

   else

   {

      srand((double)microtime()*1000000);  //sets random seed

      $string = md5(rand(0,1000000)); 

      $thekey=$string;

      $insertemail="INSERT into email_table (email,validkey) values('$email','$thekey')";

      mysql_query($insertemail) or die("Could not insert mail");

      mail($email,"Thanks for signing up","Thanks, please activate your account at $path/validate.php?email=$email&string=$string","From: $adminmail");

      print "You have signed up for the newsletter and a validation link has been sent to your email.";



   }

}

else

{

    print "<form action='signup.php' method='post'>";

    print "Email:<br>";

    print "<input type='text' name='email' size='20'><br>";

    print "<input type='submit' name='submit' value='submit'></form>";



}

 

if(isset($_POST['submit']))

include "connect.php";

$email=$_GET['email'];

$string=$_GET['string'];

$email=trim($email); //trims whitespace

$email=strip_tags($email); //strips out possible HTML

$string=trim($string);

$string=strip_tags($string);

$query="update email_table set validated='1' where email='$email' and validkey='$string'";

mysql_query($query) or die("Could not validate user");

print "User validated.";

include "../connect.php";

$getlist="SELECT * from email_table order by email ASC"; //select e-mails in ABC order

$getlist2=mysql_query($getlist) or die("Could not get list");

print "<table border='1'><tr><td>Email</td><td>Delete</td></tr>";

while($getlist3=mysql_fetch_array($getlist2))

{

   print "<tr><td><A href='mailto:$getlist3[email]'>$getlist3[email]</a></td><td><A href='deluser.php?ID=$getlist3[userID]'>Delete</a></td></tr>";

}

print "</table>";

include "../connect.php";

if(isset($_POST['submit']))

{

   $ID=$_POST['ID'];

   $ID=trim($ID);

   $ID=strip_tags($ID);

   $deluser="Delete from email_table where userID='$ID'";

   mysql_query($deluser) or die("Could not delete user");

   print "Email deleted.";



}

else

{

   $ID=$_GET['ID'];

   $ID=trim($ID);

   $ID=strip_tags($ID);

   print "<form action='deluser.php' method='post'>";

   print "<input type='hidden' name='ID' value='$ID'>";

   print "Are you sure you want to delete this user?";

   print "<input type='submit' name='submit' value='submit'></form>";



}

include "../connect.php";

if(isset($_POST['submit']))

{

  $subject=$_POST['subject'];

  $nletter=$_POST['nletter'];

  if(strlen($subject)<1)

  {

     print "You did not enter a subject.";

  }

  else if(strlen($nletter)<1)

  {

    print "You did not enter a message.";

  } 

  else

  {

      $nletter=$_POST['nletter'];

      $subject=$_POST['subject'];

      $nletter=stripslashes($nletter);

      $subject=stripslashes($subject);

      $lists=$_POST['lists'];

      $nletter=str_replace("rn","<br>",$nletter);

      //the block above formats the letter so it will send correctly.

      $getlist="SELECT * from email_table order by email ASC"; //select e-mails in ABC order

      $getlist2=mysql_query($getlist) or die("Could not get list");

      while($getlist3=mysql_fetch_array($getlist2))

      {

         $headers = "From: $adminmail \r\n"; 

         $headers.= "Content-Type: text/html; charset=ISO-8859-1 ";  //send HTML enabled mail

         $headers .= "MIME-Version: 1.0 ";     

         mail("$getlist3[email]","$subject","$nletter",$headers);

      }

      print "Newsletter Sent.";

   }

}

else

{

   print "<form action='sendletter.php' method='post'>";

   print "Subject:<br>";

   print "<input type='text' name='subject' size='20'><br>";

   print "Message:<br>";

   print "<textarea name='nletter' cols='50' rows='6'></textarea><br>";

   print "<input type='submit' name='submit' value='submit'></form>";





}