<?php
# vdc_email_display.php - VICIDIAL agent email display script
#
# Copyright (C) 2026  Matt Florell, Joe Johnson <vicidial@gmail.com>    LICENSE: AGPLv2
#
# This page displays any incoming emails in the Vicidial user interface.  It 
# also allows the user to download and view any attachments sent in the email,
# and also gives the user the ability to respond to the email and even
# attach files to it.  The page also logs all email messages that are sent
# through it to the vicidial_email_log table
#
# changes:
# 121214-2300 - First Build
# 130127-0027 - Better non-latin characters support
# 130328-0007 - Converted ereg to preg functions
# 130603-2210 - Added login lockout for 15 minutes after 10 failed logins, and other security fixes
# 130705-1515 - Added optional encrypted passwords compatibility
# 130802-1032 - Changed to PHP mysqli functions
# 140811-0834 - Changed to use QXZ function for echoing text
# 141118-1426 - Added agent_email variable
# 141128-0850 - Code cleanup for QXZ functions
# 141216-2117 - Added language settings lookups and user/pass variable standardization
# 150603-1541 - Fixed email attachments issue
# 170526-2330 - Added additional variable filtering
# 171126-1406 - Added fault tolerance and extra debug
# 210616-2038 - Added optional CORS support, see options.php for details
# 220219-1839 - More security changes
# 260302-1154 - Code updates for PHP8 compatibility
#

$version = '2.14-16';
$build = '260302-1154';
$php_script = 'vdc_email_display.php';

require_once("dbconnect_mysqli.php");
require_once("functions.php");

if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
	elseif (isset($_POST["DB"]))	{$DB=$_POST["DB"];}
if (isset($_GET["attachment_id"]))	{$attachment_id=$_GET["attachment_id"];}
	elseif (isset($_POST["attachment_id"]))	{$attachment_id=$_POST["attachment_id"];}
	else {$attachment_id=0;}
if (isset($_GET["lead_id"]))	{$lead_id=$_GET["lead_id"];}
	elseif (isset($_POST["lead_id"]))	{$lead_id=$_POST["lead_id"];}
	else {$lead_id=0;}
if (isset($_GET["email_row_id"]))	{$email_row_id=$_GET["email_row_id"];}
	elseif (isset($_POST["email_row_id"]))	{$email_row_id=$_POST["email_row_id"];}
	else {$email_row_id=0;}
if (isset($_GET["campaign"]))	{$campaign=$_GET["campaign"];}
	elseif (isset($_POST["campaign"]))	{$campaign=$_POST["campaign"];}
	else {$campaign="";}
if (isset($_GET["user"]))	{$user=$_GET["user"];}
	elseif (isset($_POST["user"]))	{$user=$_POST["user"];}
	else {$user="";}
if (isset($_GET["pass"]))	{$pass=$_GET["pass"];}
	elseif (isset($_POST["pass"]))	{$pass=$_POST["pass"];}
	else {$pass="";}
if (isset($_GET["stage"]))	{$stage=$_GET["stage"];}
	elseif (isset($_POST["stage"]))	{$stage=$_POST["stage"];}
	else {$stage="";}
if (isset($_GET["sender_email"]))	{$sender_email=$_GET["sender_email"];}
	elseif (isset($_POST["sender_email"]))	{$sender_email=$_POST["sender_email"];}
	else {$sender_email="";}
if (isset($_GET["reply_subject"]))	{$reply_subject=$_GET["reply_subject"];}
	elseif (isset($_POST["reply_subject"]))	{$reply_subject=$_POST["reply_subject"];}
	else {$reply_subject="";}
if (isset($_GET["reply_to_address"]))	{$reply_to_address=$_GET["reply_to_address"];}
	elseif (isset($_POST["reply_to_address"]))	{$reply_to_address=$_POST["reply_to_address"];}
	else {$reply_to_address="";}
if (isset($_GET["reply_from_address"]))	{$reply_from_address=$_GET["reply_from_address"];}
	elseif (isset($_POST["reply_from_address"]))	{$reply_from_address=$_POST["reply_from_address"];}
	else {$reply_from_address="";}
if (isset($_GET["reply_message"]))	{$reply_message=$_GET["reply_message"];}
	elseif (isset($_POST["reply_message"]))	{$reply_message=$_POST["reply_message"];}
if (isset($_GET["REPLY"]))	{$REPLY=$_GET["REPLY"];}
	elseif (isset($_POST["REPLY"]))	{$REPLY=$_POST["REPLY"];}
	else {$REPLY="";}
if (isset($_GET["agent_email"]))	{$agent_email=$_GET["agent_email"];}
	elseif (isset($_POST["agent_email"]))	{$agent_email=$_POST["agent_email"];}
	else {$agent_email="";}

$PHP_SELF=$_SERVER['PHP_SELF'];
$PHP_SELF = preg_replace('/\.php.*/i','.php',$PHP_SELF);

# if options file exists, use the override values for the above variables
#   see the options-example.php file for more information
if (file_exists('options.php'))
	{
	require('options.php');
	}

if (array_key_exists('attachment1', $_FILES))
	{
	$attachment1=$_FILES["attachment1"];
		$A1_orig = $_FILES['attachment1']['name'];
		$A1_path = $_FILES['attachment1']['tmp_name'];
		$A1_type = $_FILES['attachment1']['type'];
	}
if (array_key_exists('attachment2', $_FILES))
	{
	$attachment2=$_FILES["attachment2"];
		$A2_orig = $_FILES['attachment2']['name'];
		$A2_path = $_FILES['attachment2']['tmp_name'];
		$A2_type = $_FILES['attachment2']['type'];
	}
if (array_key_exists('attachment3', $_FILES))
	{
	$attachment3=$_FILES["attachment3"];
		$A3_orig = $_FILES['attachment3']['name'];
		$A3_path = $_FILES['attachment3']['tmp_name'];
		$A3_type = $_FILES['attachment3']['type'];
	}
if (array_key_exists('attachment4', $_FILES))
	{
	$attachment4=$_FILES["attachment4"];
		$A4_orig = $_FILES['attachment4']['name'];
		$A4_path = $_FILES['attachment4']['tmp_name'];
		$A4_type = $_FILES['attachment4']['type'];
	}
if (array_key_exists('attachment5', $_FILES))
	{
	$attachment5=$_FILES["attachment5"];
		$A5_orig = $_FILES['attachment5']['name'];
		$A5_path = $_FILES['attachment5']['tmp_name'];
		$A5_type = $_FILES['attachment5']['type'];
	}

header ("Content-type: text/html; charset=utf-8");
header ("Cache-Control: no-cache, must-revalidate");  // HTTP/1.1
header ("Pragma: no-cache");                          // HTTP/1.0

if ($stage=='WELCOME')
	{echo "EMAIL"; exit;}

$txt = '.txt';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
$CIDdate = date("mdHis");
$ENTRYdate = date("YmdHis");
$MT[0]='';
$agents='@agents';
# 3/28/25 - removed, never used
# $script_height = ($script_height - 20);
# if (strlen($bgcolor) < 6) {$bgcolor='FFFFFF';}

$IFRAME=0;

# default optional vars if not set
# 3/28/25 - removed, never used
# if (!isset($format))   {$format="text";}
# 	if ($format == 'debug')	{$DB=1;}
# if (!isset($ACTION))   {$ACTION="refresh";}
# if (!isset($query_date)) {$query_date = $NOW_DATE;}

$user = preg_replace("/\'|\"|\\\\|;| /","",$user);
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
$stmt = "SELECT use_non_latin,timeclock_end_of_day,agentonly_callback_campaign_lock,custom_fields_enabled,allow_emails,enable_languages,language_method,allow_web_debug FROM system_settings;";
$rslt=mysql_to_mysqli($stmt, $link);
	if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'00XXX',$user,$server_ip,$session_name,$one_mysql_log);}
#if ($DB) {echo "$stmt\n";}
$qm_conf_ct = mysqli_num_rows($rslt);
if ($qm_conf_ct > 0)
	{
	$row=mysqli_fetch_row($rslt);
	$non_latin =							$row[0];
	$timeclock_end_of_day =					$row[1];
	$agentonly_callback_campaign_lock =		$row[2];
	$custom_fields_enabled =				$row[3];
	$allow_emails =							$row[4];
	$SSenable_languages =					$row[5];
	$SSlanguage_method =					$row[6];
	$SSallow_web_debug =					$row[7];
	}
if ($SSallow_web_debug < 1 || !isset($DB)) {$DB=0;}
$DB=preg_replace("/[^0-9]/","",$DB);


# $campaign = preg_replace('/[^-_0-9\p{L}]/u',"",$campaign);
$attachment_id = preg_replace("/[^0-9]/","",$attachment_id);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
$email_row_id = preg_replace('/[^0-9]/','',$email_row_id);
$reply_to_address = preg_replace("/\'|\"|\\\\|;/","",$reply_to_address);
# $reply_to_address = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$reply_to_address);
# $stage = preg_replace('/[^-_0-9\p{L}]/u','',$stage);
# $sender_email = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$sender_email);
$reply_subject = preg_replace("/\<|\>|\'|\"|\\\\|;/","",$reply_subject);
# $reply_from_address = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$reply_from_address);
# $agent_email = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$agent_email);
# $REPLY=preg_replace("/[^-_0-9a-zA-Z]/","",$REPLY);

# filtered
# $reply_message

if ($non_latin < 1)
	{
	$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
	$pass=preg_replace("/[^-\.\+\/\=_0-9a-zA-Z]/","",$pass);
	$campaign = preg_replace('/[^-_0-9a-zA-Z]/',"",$campaign);
	$reply_to_address = preg_replace('/[^-\.\:\/\@\_0-9a-zA-Z]/','',$reply_to_address);
	$stage = preg_replace('/[^-_0-9a-zA-Z]/','',$stage);
	$sender_email = preg_replace('/[^-\.\:\/\@\_0-9a-zA-Z]/','',$sender_email);
	$reply_from_address = preg_replace('/[^-\.\:\/\@\_0-9a-zA-Z]/','',$reply_from_address);
	$agent_email = preg_replace('/[^-\.\:\/\@\_0-9a-zA-Z]/','',$agent_email);
	$REPLY=preg_replace("/[^-_0-9a-zA-Z]/","",$REPLY);
	}
else
	{
	$user=preg_replace("/[^-_0-9\p{L}]/u","",$user);
	$pass = preg_replace('/[^-\.\+\/\=_0-9\p{L}]/u','',$pass);
	$campaign = preg_replace('/[^-_0-9\p{L}]/u',"",$campaign);
	$reply_to_address = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$reply_to_address);
	$stage = preg_replace('/[^-_0-9\p{L}]/u','',$stage);
	$sender_email = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$sender_email);
	$reply_from_address = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$reply_from_address);
	$agent_email = preg_replace('/[^-\.\:\/\@\_0-9\p{L}]/u','',$agent_email);
	$REPLY=preg_replace("/[^-_0-9\p{L}]/u","",$REPLY);
	}


#############################################

$VUselected_language = '';
$stmt="SELECT selected_language from vicidial_users where user='$user';";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_to_mysqli($stmt, $link);
	if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'00XXX',$user,$server_ip,$session_name,$one_mysql_log);}
$sl_ct = mysqli_num_rows($rslt);
if ($sl_ct > 0)
	{
	$row=mysqli_fetch_row($rslt);
	$VUselected_language =		$row[0];
	}
##### END SETTINGS LOOKUP #####
###########################################

if ($allow_emails<1) 
	{
	echo _QXZ("Your system does not have the email setting enabled")."\n";
	exit;
	}

$auth=0;
$auth_message = user_authorization($user,$pass,'',0,1,0,0,'vdc_email_display');
if ($auth_message == 'GOOD')
	{$auth=1;}

$stmt="SELECT count(*) from vicidial_users where user='$user' and modify_leads IN('1','2','3','4');";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_to_mysqli($stmt, $link);
$row=mysqli_fetch_row($rslt);
$VUmodify=$row[0];

$stmt="SELECT count(*) from vicidial_live_agents where user='$user';";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_to_mysqli($stmt, $link);
$row=mysqli_fetch_row($rslt);
$LVAactive=$row[0];
$LVAactive=9;
if ( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0) or ( ($LVAactive < 1) ) )
	{
	echo _QXZ("Invalid Username/Password:")." |$user|$pass|$auth_message|\n";
	echo "<form action=./vdc_email_display.php method=POST name=email_display_form id=email_display_form>\n";
	echo "<input type=hidden name=user id=user value=\"$user\">\n";
	echo "</form>\n";
	exit;
	}
else
	{
	# do nothing for now
	}

if ($REPLY) 
	{
	$to = "$reply_to_address";
	$from = "$reply_from_address"; 
	$subject ="$reply_subject"; 
	$message = "$reply_message";
	$headers = "From: $from";
	$attachment_str="";
 
	$semi_rand = md5(time()); 
	$mime_boundary = "==Multipart_Boundary_x{$semi_rand}x";
	$headers .= "\nMIME-Version: 1.0\n" . "Content-Type: multipart/mixed;\n" . " boundary=\"{$mime_boundary}\""; 
	$message = "This is a multi-part message in MIME format.\n\n" . "--{$mime_boundary}\n" . "Content-Type: text/plain; charset=\"utf-8\"\n" . "Content-Transfer-Encoding: 7bit\n\n" . $reply_message . "\n\n"; 
	$message .= "--{$mime_boundary}\n";

	for ($i=1; $i<=5; $i++) 
		{
		$attachment_orig_name="A".$i."_orig";
		$attachment_path="A".$i."_path";
		$LF_orig=$$attachment_orig_name;
		$LF_path=$$attachment_path;
		# echo "<p>".$$attachment_name."<BR/>".$$attachment_orig_name."<BR/>".$$attachment_path."<BR/><p>"; 
		if ($LF_orig) 
			{
			if (preg_match("/;|:|\/|\^|\[|\]|\"|\'|\*/",$LF_orig))
				{
				echo _QXZ("ERROR: Invalid File Name:")." $LF_orig\n";
				exit;
				}
			else 
				{
				copy($LF_path, "/tmp/$LF_orig");
				$file = fopen("/tmp/$LF_orig","rb");
				$data = fread($file,filesize("/tmp/$LF_orig"));
				fclose($file);
				$data = chunk_split(base64_encode($data));
				$message .= "Content-Type: {\"application/octet-stream\"};\n" . " name=\"$LF_orig\"\n" . 
				"Content-Disposition: attachment;\n" . " filename=\"$LF_orig\"\n" . 
				"Content-Transfer-Encoding: base64\n\n" . $data . "\n\n";
				$message .= "--{$mime_boundary}\n";
				$attachment_str.="$LF_orig|";
				}
			}
		}

	$sendmail = @mail($to, $subject, $message, $headers); 
	if ($sendmail) 
		{
		$reply_message=preg_replace('/(\"|\||\'|\;)/', '\\\$1', $reply_message); 
		$log_stmt="INSERT INTO vicidial_email_log(email_row_id, lead_id, email_date, user, email_to, message, campaign_id, attachments) VALUES('$email_row_id', '$lead_id', now(), '$user', '$reply_to_address', '$reply_message', '$campaign', '$attachment_str')";
		$log_rslt=mysql_to_mysqli($log_stmt, $link);
		echo "<p>mail sent to $to!</p>";

		# Hangup the "call" on the agent screen
		$stmt="UPDATE vicidial_live_agents set external_hangup='1' where user='$user';";
		if ($DB) {echo "$stmt\n";}
		$rslt=mysql_to_mysqli($stmt, $link);
		$affected_rows = mysqli_affected_rows($link);
		}
	else 
		{
		echo "<p>"._QXZ("mail could not be sent!")."</p>"; 
		} 
	exit;
	}


if ( ($lead_id>0) or ($email_row_id>0) ) 
	{
	$stmt="SELECT * from vicidial_email_list where lead_id='$lead_id' and direction='INBOUND' and status IN('NEW','INCALL') order by email_date asc";
	if ($email_row_id)
		{$stmt="SELECT * from vicidial_email_list where lead_id='$lead_id' and email_row_id='$email_row_id' and direction='INBOUND' and status IN('NEW','INCALL') order by email_date asc";}
	if ($DB > 0) {echo "$stmt\n";}
	$rslt=mysql_to_mysqli($stmt, $link);
	$EMAIL_form="";
	if (mysqli_num_rows($rslt)>0) {
		$row=mysqli_fetch_array($rslt);
		$email_row_id=$row["email_row_id"];
		preg_match('/\<[^\>\@]+\@[^\>\@]+\>/', $row["email_from"], $matches);
		if (strlen($matches[0])>0) {
			$email_from = substr($matches[0],1,-1);
		} else {
			$email_from = $row["email_from"];
		}
		preg_match('/\<[^\>\@]+\@[^\>\@]+\>/', $row["email_to"], $matches);
		if (strlen($matches[0])>0) {
			$row["email_from"]=preg_replace('/\>/', '&gt;', $row["email_from"]); 
			$row["email_from"]=preg_replace('/\</', '&lt;', $row["email_from"]); 
			$email_to = substr($matches[0],1,-1);
		} else {
			$row["email_to"]=preg_replace('/\>/', '\>', $row["email_to"]); 
			$email_to = $row["email_to"];
		}
		$EMAIL_form.="<center><TABLE cellspacing=2 cellpadding=2 bgcolor='#CCCCCC' width='500'>\n";
		$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>"._QXZ("Date received:")."</td><td align='left' valign='top' width='*'>$row[email_date]</td></tr>\n";
		$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>"._QXZ("From:")."</td><td align='left' valign='top' width='*'>$row[email_from]</td></tr>\n";
		$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>"._QXZ("Subject:")."</td><td align='left' valign='top' width='*'>$row[subject]</td></tr>\n";
		$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>"._QXZ("Message:")."</td><td align='left' valign='top' width='*'><pre>$row[message]</pre></td></tr>\n";

		$att_stmt="select * from inbound_email_attachments where email_row_id='$email_row_id'";
		$att_rslt=mysql_to_mysqli($att_stmt, $link);
		if (mysqli_num_rows($att_rslt)>0) {
			$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>"._QXZ("Attachments:")."</td><td align='left' valign='top' width='*'><pre>";
			while($att_row=mysqli_fetch_array($att_rslt)) {
				$EMAIL_form.="<LI><a href='$PHP_SELF?attachment_id=$att_row[attachment_id]&lead_id=$lead_id&user=$user&pass=$pass'>$att_row[filename]</a>\n";
			}
			$EMAIL_form.="</pre></td></tr>";
		}
		$EMAIL_form.="<tr><td colspan='2'><HR></td></tr>";
		$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>"._QXZ("Response:")."</td><td align='left' valign='top' width='*'>RE: $row[subject]<input type='hidden' name='reply_subject' value='RE: $row[subject]'></td></tr>\n";
		$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>"._QXZ("Reply:")."<BR><BR><input type='button' name='copy' value='"._QXZ("COPY MESSAGE")." >>>' onClick='CopyMessage($row[email_row_id])'></td><td align='left' valign='top' width='*'><textarea rows='8' cols='50' name='reply_message' id='reply_message'>$reply_message</textarea></td></tr>\n";
		$EMAIL_form.="<tr bgcolor=white><td align='right' valign='top' width='150'>Attachments:</td><td align='left' valign='top' width='*'>";
		$EMAIL_form.="<span id='attachment_span1'><input type=file name='attachment1' value='$attachment1'></span><BR/>";
		$EMAIL_form.="<span id='attachment_span2'><input type=file name='attachment2'></span><BR/>";
		$EMAIL_form.="<span id='attachment_span3'><input type=file name='attachment3'></span><BR/>";
		$EMAIL_form.="<span id='attachment_span4'><input type=file name='attachment4'></span><BR/>";
		$EMAIL_form.="<span id='attachment_span5'><input type=file name='attachment5'></span>";
		$EMAIL_form.="</td></tr>\n";
		$EMAIL_form.="<tr><td colspan='2' align='center'><input type='submit' name='REPLY' value='"._QXZ("REPLY")."'></td></tr>";
		$EMAIL_form.="</table></center>\n";
		$EMAIL_form.="<input type='hidden' name='reply_to_address' value='$email_from'>\n";
		$EMAIL_form.="<input type='hidden' name='reply_from_address' value='$email_to'>\n";
		$EMAIL_form.="<input type='hidden' name='campaign' value='$campaign'>\n";
		$EMAIL_form.="<input type='hidden' name='lead_id' value='$lead_id'>\n";
		$EMAIL_form.="<input type='hidden' name='email_row_id' value='$email_row_id'>\n";
		$EMAIL_form.="<input type='hidden' name='user' value='$user'>\n";
		$EMAIL_form.="<input type='hidden' name='pass' value='$pass'>\n";
	}

	if ($attachment_id) {
		$stmt="select * from inbound_email_attachments where attachment_id='$attachment_id'";
		$rslt=mysql_to_mysqli($stmt, $link);
		if (mysqli_num_rows($rslt)>0) {
			$row=mysqli_fetch_array($rslt);
			$filename=$row["filename"];
			$encoding=$row["file_encoding"];
			$file_size=$row["file_size"];
			$file_type=$row["file_type"];
			$file_contents=$row["file_contents"];
			if ($encoding=="base64") {
				$file_contents=base64_decode($file_contents);
				$file_size=strlen($file_contents);
			}
			header("Content-length: ".$file_size."");
			header("Content-type: ".$file_type."");
			header('Content-Disposition: attachment; filename="'.$filename.'"');
			echo $file_contents;
		}
	} else {
?>
	<html>
	<head>
	<title><?php echo _QXZ("AGENT email frame"); ?></title>
	</head>
	<script language="Javascript">
	function ParseFileName() 
		{
		for (var i=1; i<=5; i++) 
			{	
			var attachment_field=eval("document.forms[0].attachment"+i);
			var endstr=attachment_field.value.lastIndexOf('\\');
			if (endstr>-1) 
				{
				endstr++;
				var filename=attachment_field.value.substring(endstr);
				attachment_field.value=filename;
				}
			}
		}
	function CopyMessage()
		{
		<?php 
			if (!isset($row["message"])) {$row["message"]="";}
			$row["message"]=preg_replace('/\r|\n/', ' ', $row["message"]); 
			echo "var message=\"".preg_replace('/\"/', '\\\"', $row["message"])."\";\n"; 
		?>
		var msg_array=message.split(" ");
		var full_msg="";
		var msg_line="> ";
		for (var i=0; i<msg_array.length; i++) 
			{
			if (msg_array[i].length>=48) 
				{
				msg_line+=msg_array[i]+" ";
				}
			if (msg_line.length+msg_array[i].length<50)
				{
				msg_line+=msg_array[i]+" ";
				}
			else
				{
				full_msg+=msg_line+"\n";
				msg_line="> "+msg_array[i]+" ";
				}
			}
			full_msg+=msg_line+"\n";
			var email_field_value=document.getElementById("reply_message").value+"\n";
			email_field_value+=full_msg;
			document.getElementById("reply_message").value=email_field_value;
		}
	</script>
	<style type="text/css">
	pre { white-space: pre-wrap; }
	</style>
	<body>
	<form action='<?php echo $PHP_SELF ?>' method='post' name="email_display_form" id="email_display_form" onSubmit="if (this.submitted) return false; this.submitted=true" enctype="multipart/form-data">
	<?php echo $EMAIL_form; ?>
	</form>
	</body>
	</html>
<?php
	}
} else {
	echo _QXZ("No email to display");
}
?>