No3x

Can’t reproduce. Filled a pretty simple gravity form that sends mail notification.
Logged and raw view:

Time:
2017-12-05 15:15:46
Receiver:
xxx@yahoo.de
Subject:
Neues Anmeldeformular Contact
Message:
<table width="99%" border="0" cellpadding="1" cellspacing="0" bgcolor="#EAEAEA"><tr><td> <table width="100%" border="0" cellpadding="5" cellspacing="0" bgcolor="#FFFFFF"> <tr bgcolor="#EAF2FA"> <td colspan="2"> <font style="font-family: sans-serif;font-size:12px"><strong>Name</strong></font> </td> </tr> <tr bgcolor="#FFFFFF"> <td width="20">&nbsp;</td> <td> <font style="font-family: sans-serif;font-size:12px">Christian</font> </td> </tr> <tr bgcolor="#EAF2FA"> <td colspan="2"> <font style="font-family: sans-serif;font-size:12px"><strong>E-Mail</strong></font> </td> </tr> <tr bgcolor="#FFFFFF"> <td width="20">&nbsp;</td> <td> <font style="font-family: sans-serif;font-size:12px"><a href='xxx@yahoo.de@yahoo.de'>xxx@yahoo.de@yahoo.de</a></font> </td> </tr> <tr bgcolor="#EAF2FA"> <td colspan="2"> <font style="font-family: sans-serif;font-size:12px"><strong>Message</strong></font> </td> </tr> <tr bgcolor="#FFFFFF"> <td width="20">&nbsp;</td> <td> <font style="font-family: sans-serif;font-size:12px">Test</font> </td> </tr> </table> </td> </tr> </table>
Headers:
From: "xxx@yahoo.de" ,\nContent-type: text/html; charset=UTF-8
Attachments:
Error:

Hi @alemarengo84,

not all plugins provide public access to their assets. At least you know now what attachment was attached to the mail and then you can access it on the file system.

If you really want to access it via HTTP you could configure your webserver to authenticate users before permitting access.
https://httpd.apache.org/docs/2.4/howto/auth.html
https://www.nginx.com/resources/admin-guide/restricting-access-auth-basic/
But this is out of my scope.

Hi @dacgarz,

Of course you can query whatever you want on the database table. There is no build in support in my ORM for what you are trying to do so you have to use plain SQL.
There are issues with your query:
$lastemailed = $wpdb->get_var($wpdb->prepare("SELECT timestamp FROM $wpdb->wpml_mails WHERE receiver=%s AND subject=%s", $useremail, $list_subj));
Please enable WP_DEBUG and try to read error messages.

1. $wpdb->wpml_mails
$wpdb has no member wpml_mails. Use
$tablename = $wpdb->prefix . 'wpml_mails';
instead.
2. Order by date to get latest
3. Quote your search strings
4. Limit is not required by the nature of get_var.

global $wpdb;
$tablename = $wpdb->prefix . 'wpml_mails';
$timestamp = $wpdb->get_var($wpdb->prepare("SELECT timestamp FROM $tablename WHERE receiver=\"%s\" AND subject=\"%s\" ORDER BY timestamp DESC", $useremail, $list_subj));
submit_button( $text = $timestamp, $type = 'secondary', $name = 'button_latest' );

Please note that the receiver and subject must match exactly with your current query. You might want to use LIKE.

• This reply was modified 8 years, 7 months ago by No3x. Reason: typo

Sorry I did not even had access to the plugin site here on WP.org to respond to the question while the plugin was suspended.

Please update to the latest version as soon as possible. The fix for this bug was really easy since protection against cross site scripting was implemented in a prior version but messed up during a refactoring.

Kind regards
No3x

Please check the php error log. If it’s not logged then there is likely a error message that explains the cause.

• This reply was modified 8 years, 7 months ago by No3x.

Hi @dovyp,

thanks for joining the discussion. Can you please write about your point of view regarding:
1. Removing the redux-about submenu in plugin code is permitted.
2. Removing redux ads (when WP_DEBUG is true) in plugin code is permitted.

Can you elaborate on

We can’t properly support users of code we didn’t write.

I understand that redux is a framework and you can’t control how it’s used. Do you want to change issue management between plugin users and redux?

Hi @pomegranate!

Thanks for your kind feedback and the suggestion regarding the redux links.
Please consider making a donation if you like the plugin.