X-Git-Url: https://ruin.nu/git/?a=blobdiff_plain;f=lib%2FNDWeb%2FController%2FUsers.pm;fp=lib%2FNDWeb%2FController%2FUsers.pm;h=13b79c74e0c9e257b525efe264f1fb733f661956;hb=3b0d1d881162c5bcc1a18e8a43c807cc1fe52bc3;hp=117f1bde98a1ca785549c5bf49005db0411db6e2;hpb=48df392b0817ea813443309eecc5949550095155;p=ndwebbie.git

diff --git a/lib/NDWeb/Controller/Users.pm b/lib/NDWeb/Controller/Users.pm
index 117f1bd..13b79c7 100644
--- a/lib/NDWeb/Controller/Users.pm
+++ b/lib/NDWeb/Controller/Users.pm
@@ -159,30 +159,33 @@ sub postmail : Local {
 	my ( $self, $c ) = @_;
 	my $dbh = $c->model;
 
+	my $group = $c->req->param('group');
 	my $emails = $dbh->prepare(q{SELECT email FROM users
 		WHERE uid IN (SELECT uid FROM groupmembers WHERE gid = $1)
 			AND email is not null});
-	$emails->execute($c->req->param('group'));
+	$emails->execute($group);
 	my @emails;
 	while (my $email = $emails->fetchrow_hashref){
 		push @emails,$email->{email};
 	}
 
+	my $subject = $c->req->param('subject');
+	my $message = $c->req->param('message');
 	my %mail = (
 		smtp => 'localhost',
 		BCC      => (join ',',@emails),
 		From    => 'NewDawn Command <nd@ruin.nu>',
 		'Content-type' => 'text/plain; charset="UTF-8"',
-		Subject => $c->req->param('subject'),
-		Message => $c->req->param('message'),
+		Subject => $subject,
+		Message => $message,
 	);
 
 	if (sendmail %mail) {
 		$c->flash(ok => \@emails);
 	}else {
 		$c->flash(error => $Mail::Sendmail::error);
-		$c->flash(subject => $c->req->param('subject'));
-		$c->flash(message => $c->req->param('message'));
+		$c->flash(subject => $subject);
+		$c->flash(message => $message);
 	}
 
 	$c->res->redirect($c->uri_for('mail'));
@@ -226,11 +229,12 @@ sub postsms : Local {
 
 	$c->req->parameters->{uid} = [$c->req->parameters->{uid}]
 		unless ref $c->req->parameters->{uid} eq 'ARRAY';
+	my $message = $c->req->param('message');
 
 	my $query = $dbh->prepare(q{INSERT INTO sms (uid,message,number)
 		(SELECT $1,$2, trim(leading '+' FROM sms) FROM users u WHERE uid = ANY ($3) AND sms SIMILAR TO '\+\d+' )});
 
-	$query->execute($c->user->id,$c->req->param('message'),$c->req->parameters->{uid});
+	$query->execute($c->user->id,$message,$c->req->parameters->{uid});
 
 	$c->res->redirect($c->uri_for('sms'));
 }