No OneTemporary
Actions

Size

143 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/conf/default.conf.php b/conf/default.conf.php
	index 80290c3de8..077dd9677e 100644
	--- a/conf/default.conf.php
	+++ b/conf/default.conf.php
	@@ -1,1378 +1,1383 @@
	<?php

	return array(

	// The root URI which Phabricator is installed on.
	// Example: "http://phabricator.example.com/"
	'phabricator.base-uri' => null,

	// If you have multiple environments, provide the production environment URI
	// here so that emails, etc., generated in development/sandbox environments
	// contain the right links.
	'phabricator.production-uri' => null,

	// Setting this to 'true' will invoke a special setup mode which helps guide
	// you through setting up Phabricator.
	'phabricator.setup' => false,

	// -- IMPORTANT! Security! -------------------------------------------------- //

	// IMPORTANT: By default, Phabricator serves files from the same domain the
	// application lives on. This is convenient but not secure: it creates a large
	// class of vulnerabilities which can not be generally mitigated.
	//
	// To avoid this, you should configure a second domain in the same way you
	// have the primary domain configured (e.g., point it at the same machine and
	// set up the same vhost rules) and provide it here. For instance, if your
	// primary install is on "http://www.phabricator-example.com/", you could
	// configure "http://www.phabricator-files.com/" and specify the entire
	// domain (with protocol) here. This will enforce that files are
	// served only from the alternate domain. Ideally, you should use a
	// completely separate domain name rather than just a different subdomain.
	//
	// It is STRONGLY RECOMMENDED that you configure this. Your install is NOT
	// SECURE unless you do so.
	'security.alternate-file-domain' => null,

	// Default key for HMAC digests where the key is not important (i.e., the
	// hash itself is secret). You can change this if you want (to any other
	// string), but doing so will break existing sessions and CSRF tokens.
	'security.hmac-key' => '[D\t~Y7eNmnQGJ;rnH6aF;m2!vJ8@v8C=Cs:aQS\.Qw',

	// If the web server responds to both HTTP and HTTPS requests but you want
	// users to connect with only HTTPS, you can set this to true to make
	// Phabricator redirect HTTP requests to HTTPS.
	//
	// Normally, you should just configure your server not to accept HTTP traffic,
	// but this setting may be useful if you originally used HTTP and have now
	// switched to HTTPS but don't want to break old links, or if your webserver
	// sits behind a load balancer which terminates HTTPS connections and you
	// can not reasonably configure more granular behavior there.
	//
	// NOTE: Phabricator determines if a request is HTTPS or not by examining the
	// PHP $_SERVER['HTTPS'] variable. If you run Apache/mod_php this will
	// probably be set correctly for you automatically, but if you run Phabricator
	// as CGI/FCGI (e.g., through nginx or lighttpd), you need to configure your
	// web server so that it passes the value correctly based on the connection
	// type. Alternatively, you can add a PHP snippet to the top of this
	// configuration file to directly set $_SERVER['HTTPS'] to the correct value.
	'security.require-https' => false,


	// -- Internationalization -------------------------------------------------- //

	// This allows customizing texts used in Phabricator. The class must extend
	// PhabricatorTranslation.
	'translation.provider' => 'PhabricatorEnglishTranslation',

	// You can use 'translation.override' if you don't want to create a full
	// translation to give users an option for switching to it and you just want
	// to override some strings in the default translation.
	'translation.override' => array(),


	// -- Access Policies ------------------------------------------------------- //

	// Phabricator allows you to set the visibility of objects (like repositories
	// and source code) to "Public", which means anyone on the internet can see
	// them, even without being logged in. This is great for open source, but
	// some installs may never want to make anything public, so this policy is
	// disabled by default. You can enable it here, which will let you set the
	// policy for objects to "Public". With this option disabled, the most open
	// policy is "All Users", which means users must be logged in to view things.
	'policy.allow-public' => false,


	// -- Logging --------------------------------------------------------------- //

	// To enable the Phabricator access log, specify a path here. The Phabricator
	// access log can provide more detailed information about Phabricator access
	// than normal HTTP access logs (for instance, it can show logged-in users,
	// controllers, and other application data). If not set, no log will be
	// written.
	//
	// Make sure the PHP process can write to the log!
	'log.access.path' => null,

	// Format for the access log. If not set, the default format will be used:
	//
	// "[%D]\t%h\t%u\t%M\t%C\t%m\t%U\t%c\t%T"
	//
	// Available variables are:
	//
	// - %c The HTTP response code.
	// - %C The controller which handled the request.
	// - %D The request date.
	// - %e Epoch timestamp.
	// - %h The webserver's host name.
	// - %p The PID of the server process.
	// - %R The HTTP referrer.
	// - %r The remote IP.
	// - %T The request duration, in microseconds.
	// - %U The request path.
	// - %u The logged-in user, if one is logged in.
	// - %M The HTTP method.
	// - %m For conduit, the Conduit method which was invoked.
	//
	// If a variable isn't available (for example, %m appears in the file format
	// but the request is not a Conduit request), it will be rendered as "-".
	//
	// Note that the default format is subject to change in the future, so if you
	// rely on the log's format, specify it explicitly.
	'log.access.format' => null,


	// -- DarkConsole ----------------------------------------------------------- //

	// DarkConsole is a administrative debugging/profiling tool built into
	// Phabricator. You can leave it disabled unless you're developing against
	// Phabricator.

	// Determines whether or not DarkConsole is available. DarkConsole exposes
	// some data like queries and stack traces, so you should be careful about
	// turning it on in production (although users can not normally see it, even
	// if the deployment configuration enables it).
	'darkconsole.enabled' => false,

	// Always enable DarkConsole, even for logged out users. This potentially
	// exposes sensitive information to users, so make sure untrusted users can
	// not access an install running in this mode. You should definitely leave
	// this off in production. It is only really useful for using DarkConsole
	// utilities to debug or profile logged-out pages. You must set
	// 'darkconsole.enabled' to use this option.
	'darkconsole.always-on' => false,


	// Allows you to mask certain configuration values from appearing in the
	// "Config" tab of DarkConsole.
	'darkconsole.config-mask' => array(
	'mysql.pass',
	'amazon-ses.secret-key',
	'amazon-s3.secret-key',
	'sendgrid.api-key',
	'recaptcha.private-key',
	'phabricator.csrf-key',
	'facebook.application-secret',
	'github.application-secret',
	'google.application-secret',
	'phabricator.application-secret',
	'disqus.application-secret',
	'phabricator.mail-key',
	'security.hmac-key',
	'ldap.anonymous-user-password',
	),


	// -- MySQL --------------------------------------------------------------- //

	// Class providing database configuration. It must implement
	// DatabaseConfigurationProvider.
	'mysql.configuration-provider' => 'DefaultDatabaseConfigurationProvider',

	// The username to use when connecting to MySQL.
	'mysql.user' => 'root',

	// The password to use when connecting to MySQL.
	'mysql.pass' => '',

	// The MySQL server to connect to. If you want to connect to a different
	// port than the default (which is 3306), specify it in the hostname
	// (e.g., db.example.com:1234).
	'mysql.host' => 'localhost',

	// The number of times to try reconnecting to the MySQL database
	'mysql.connection-retries' => 3,

	// Phabricator supports PHP extensions MySQL and MySQLi. It is possible to
	// implement also other access mechanism (e.g. PDO_MySQL). The class must
	// extend AphrontMySQLDatabaseConnectionBase.
	'mysql.implementation' => 'AphrontMySQLDatabaseConnection',


	// -- Notifications --------------------------------------------------------- //

	// Set this to true to enable real-time notifications. You must also run a
	// notification server for this to work. Consult the documentation in
	// "Notifications User Guide: Setup and Configuration" for instructions.
	'notification.enabled' => false,

	// Client port for the realtime server to listen on, and for realtime clients
	// to connect to. Use "localhost" if you are running the notification server
	// on the same host as the web server.
	'notification.client-uri' => 'http://localhost:22280/',

	// URI and port for the notification root server.
	'notification.server-uri' => 'http://localhost:22281/',

	// The server must be started as root so it can bind to privileged ports, but
	// if you specify a user here it will drop permissions after binding.
	'notification.user' => null,

	// Location where the server should log to.
	'notification.log' => '/var/log/aphlict.log',

	// PID file to use.
	'notification.pidfile' => '/var/run/aphlict.pid',

	// Enable this option to get additional debug output in the browser.
	'notification.debug' => false,


	// -- Email ----------------------------------------------------------------- //

	// Some Phabricator tools send email notifications, e.g. when Differential
	// revisions are updated or Maniphest tasks are changed. These options allow
	// you to configure how email is delivered.

	// You can test your mail setup by going to "MetaMTA" in the web interface,
	// clicking "Send New Message", and then composing a message.

	// Default address to send mail "From".
	'metamta.default-address' => 'noreply@example.com',

	// Domain used to generate Message-IDs.
	'metamta.domain' => 'example.com',

	// When a message is sent to multiple recipients (for example, several
	// reviewers on a code review), Phabricator can either deliver one email to
	// everyone (e.g., "To: alincoln, usgrant, htaft") or separate emails to each
	// user (e.g., "To: alincoln", "To: usgrant", "To: htaft"). The major
	// advantages and disadvantages of each approach are:
	//
	// - One mail to everyone:
	// - Recipients can see To/Cc at a glance.
	// - If you use mailing lists, you won't get duplicate mail if you're
	// a normal recipient and also Cc'd on a mailing list.
	// - Getting threading to work properly is harder, and probably requires
	// making mail less useful by turning off options.
	// - Sometimes people will "Reply All" and everyone will get two mails,
	// one from the user and one from Phabricator turning their mail into
	// a comment.
	// - Not supported with a private reply-to address.
	// - Mails are sent in the server default translation.
	// - One mail to each user:
	// - Recipients need to look in the mail body to see To/Cc.
	// - If you use mailing lists, recipients may sometimes get duplicate
	// mail.
	// - Getting threading to work properly is easier, and threading settings
	// can be customzied by each user.
	// - "Reply All" no longer spams all other users.
	// - Required if private reply-to addresses are configured.
	// - Mails are sent in the language of user preference.
	//
	// In the code, splitting one outbound email into one-per-recipient is
	// sometimes referred to as "multiplexing".
	'metamta.one-mail-per-recipient' => true,

	// When sending a message that has no To recipient (i.e. all recipients
	// are CC'd, for example when multiplexing mail), set the To field to the
	// following value. If no value is set, messages with no To will have
	// their CCs upgraded to To.
	'metamta.placeholder-to-recipient' => null,

	// When a user takes an action which generates an email notification (like
	// commenting on a Differential revision), Phabricator can either send that
	// mail "From" the user's email address (like "alincoln@logcabin.com") or
	// "From" the 'metamta.default-address' address. The user experience is
	// generally better if Phabricator uses the user's real address as the "From"
	// since the messages are easier to organize when they appear in mail clients,
	// but this will only work if the server is authorized to send email on behalf
	// of the "From" domain. Practically, this means:
	// - If you are doing an install for Example Corp and all the users will
	// have corporate @corp.example.com addresses and any hosts Phabricator
	// is running on are authorized to send email from corp.example.com,
	// you can enable this to make the user experience a little better.
	// - If you are doing an install for an open source project and your
	// users will be registering via Facebook and using personal email
	// addresses, you MUST NOT enable this or virtually all of your outgoing
	// email will vanish into SFP blackholes.
	// - If your install is anything else, you're much safer leaving this
	// off since the risk in turning it on is that your outgoing mail will
	// mostly never arrive.
	'metamta.can-send-as-user' => false,

	-
	// Adapter class to use to transmit mail to the MTA. The default uses
	// PHPMailerLite, which will invoke "sendmail". This is appropriate
	// if sendmail actually works on your host, but if you haven't configured mail
	- // it may not be so great. You can also use Amazon SES, by changing this to
	- // 'PhabricatorMailImplementationAmazonSESAdapter', signing up for SES, and
	- // filling in your 'amazon-ses.access-key' and 'amazon-ses.secret-key' below.
	+ // it may not be so great. A number of other mailers are available (e.g., SES,
	+ // SendGrid, SMTP, custom mailers), consult "Configuring Outbound Email" in
	+ // the documentation for details.
	'metamta.mail-adapter' =>
	'PhabricatorMailImplementationPHPMailerLiteAdapter',

	// When email is sent, try to hand it off to the MTA immediately instead of
	// queueing it for delivery by the daemons. If you are running the Phabricator
	// daemons with "phd start", you should disable this to provide a (sometimes
	// substantial) performance boost. It's on by default to make setup and
	// configuration a little easier.
	'metamta.send-immediately' => true,

	// When email is sent, what format should Phabricator use for user's
	// email addresses? Valid values are:
	// - 'short' - 'gwashington <gwashington@example.com>'
	// - 'real' - 'George Washington <gwashington@example.com>'
	// - 'full' - 'gwashington (George Washington) <gwashington@example.com>'
	// The default is 'full'.
	'metamta.user-address-format' => 'full',

	// If you're using PHPMailer to send email, provide the mailer and options
	- // here. PHPMailer is a superior to PHPMailerLite and provides more mailers.
	- // You need it when you want to use SMTP instead of sendmail as the mailer.
	+ // here. PHPMailer is much more enormous than PHPMailerLite, and provides more
	+ // mailers and greater enormity. You need it when you want to use SMTP
	+ // instead of sendmail as the mailer.
	'phpmailer.mailer' => 'smtp',
	'phpmailer.smtp-host' => '',
	'phpmailer.smtp-port' => 25,

	+ // When using PHPMailer with SMTP, you can set this to one of "tls" or "ssl"
	+ // to use TLS or SSL. Leave it blank for vanilla SMTP. If you're sending
	+ // via Gmail, set it to "ssl".
	+ 'phpmailer.smtp-protocol' => '',
	+
	// Set following if your smtp server requires authentication.
	'phpmailer.smtp-user' => null,
	'phpmailer.smtp-password' => null,

	// If you're using Amazon SES to send email, provide your AWS access key
	// and AWS secret key here. To set up Amazon SES with Phabricator, you need
	// to:
	// - Make sure 'metamta.mail-adapter' is set to:
	// "PhabricatorMailImplementationAmazonSESAdapter"
	// - Make sure 'metamta.can-send-as-user' is false.
	// - Make sure 'metamta.default-address' is configured to something sensible.
	// - Make sure 'metamta.default-address' is a validated SES "From" address.
	'amazon-ses.access-key' => null,
	'amazon-ses.secret-key' => null,

	// If you're using Sendgrid to send email, provide your access credentials
	// here. This will use the REST API. You can also use Sendgrid as a normal
	// SMTP service.
	'sendgrid.api-user' => null,
	'sendgrid.api-key' => null,

	// You can configure a reply handler domain so that email sent from Maniphest
	// will have a special "Reply To" address like "T123+82+af19f@example.com"
	// that allows recipients to reply by email and interact with tasks. For
	// instructions on configurating reply handlers, see the article
	// "Configuring Inbound Email" in the Phabricator documentation. By default,
	// this is set to 'null' and Phabricator will use a generic 'noreply@' address
	// or the address of the acting user instead of a special reply handler
	// address (see 'metamta.default-address'). If you set a domain here,
	// Phabricator will begin generating private reply handler addresses. See
	// also 'metamta.maniphest.reply-handler' to further configure behavior.
	// This key should be set to the domain part after the @, like "example.com".
	'metamta.maniphest.reply-handler-domain' => null,

	// You can follow the instructions in "Configuring Inbound Email" in the
	// Phabricator documentation and set 'metamta.maniphest.reply-handler-domain'
	// to support updating Maniphest tasks by email. If you want more advanced
	// customization than this provides, you can override the reply handler
	// class with an implementation of your own. This will allow you to do things
	// like have a single public reply handler or change how private reply
	// handlers are generated and validated.
	//
	// This key should be set to a loadable subclass of
	// PhabricatorMailReplyHandler.
	'metamta.maniphest.reply-handler' => 'ManiphestReplyHandler',

	// If you don't want phabricator to take up an entire domain
	// (or subdomain for that matter), you can use this and set a common
	// prefix for mail sent by phabricator. It will make use of the fact that
	// a mail-address such as phabricator+D123+1hjk213h@example.com will be
	// delivered to the phabricator users mailbox.
	// Set this to the left part of the email address and it well get
	// prepended to all outgoing mail. If you want to use e.g.
	// 'phabricator@example.com' this should be set to 'phabricator'.
	'metamta.single-reply-handler-prefix' => null,

	// Prefix prepended to mail sent by Maniphest. You can change this to
	// distinguish between testing and development installs, for example.
	'metamta.maniphest.subject-prefix' => '[Maniphest]',

	// See 'metamta.maniphest.reply-handler-domain'. This does the same thing, but
	// affects Pholio.
	'metamta.pholio.reply-handler-domain' => null,

	// Prefix prepended to mail sent by Pholio.
	'metamta.pholio.subject-prefix' => '[Pholio]',

	// See 'metamta.maniphest.reply-handler-domain'. This does the same thing, but
	// affects Macro.
	'metamta.macro.reply-handler-domain' => null,

	// Prefix prepended to mail sent by Macro.
	'metamta.macro.subject-prefix' => '[Macro]',

	// See 'metamta.maniphest.reply-handler-domain'. This does the same thing,
	// but allows email replies via Differential.
	'metamta.differential.reply-handler-domain' => null,

	// See 'metamta.maniphest.reply-handler'. This does the same thing, but
	// affects Differential.
	'metamta.differential.reply-handler' => 'DifferentialReplyHandler',

	// Prefix prepended to mail sent by Differential.
	'metamta.differential.subject-prefix' => '[Differential]',

	// Set this to true if you want patches to be attached to mail from
	// Differential. This won't work if you are using SendGrid as your mail
	// adapter.
	'metamta.differential.attach-patches' => false,

	// To include patches in email bodies, set this to a positive integer. Patches
	// will be inlined if they are at most that many lines. For instance, a value
	// of 100 means "inline patches if they are no longer than 100 lines". By
	// default, patches are not inlined.
	'metamta.differential.inline-patches' => 0,

	// If you enable either of the options above, you can choose what format
	// patches are sent in. Valid options are 'unified' (like diff -u) or 'git'.
	'metamta.differential.patch-format' => 'unified',

	// Enables a different format for comments in differential emails.
	// Differential will create unified diffs around the comment, which
	// will give enough context for people who are only viewing the
	// reviews in email to understand what is going on. The context will
	// be created based on the range of the comment.
	'metamta.differential.unified-comment-context' => false,

	// Prefix prepended to mail sent by Diffusion.
	'metamta.diffusion.subject-prefix' => '[Diffusion]',

	// See 'metamta.maniphest.reply-handler-domain'. This does the same thing,
	// but allows email replies via Diffusion.
	'metamta.diffusion.reply-handler-domain' => null,

	// See 'metamta.maniphest.reply-handler'. This does the same thing, but
	// affects Diffusion.
	'metamta.diffusion.reply-handler' => 'PhabricatorAuditReplyHandler',

	// Set this to true if you want patches to be attached to commit notifications
	// from Diffusion. This won't work with SendGrid.
	'metamta.diffusion.attach-patches' => false,

	// To include patches in Diffusion email bodies, set this to a positive
	// integer. Patches will be inlined if they are at most that many lines.
	// By default, patches are not inlined.
	'metamta.diffusion.inline-patches' => 0,

	// If you've enabled attached patches or inline patches for commit emails, you
	// can establish a hard byte limit on their size. You should generally set
	// reasonable byte and time limits (defaults are 1MB and 60 seconds) to avoid
	// sending ridiculously enormous email for changes like "importing an external
	// library" or "accidentally committed this full-length movie as text".
	'metamta.diffusion.byte-limit' => 1024 * 1024,

	// If you've enabled attached patches or inline patches for commit emails, you
	// can establish a hard time limit on generating them.
	'metamta.diffusion.time-limit' => 60,

	// Prefix prepended to mail sent by Package.
	'metamta.package.subject-prefix' => '[Package]',

	// See 'metamta.maniphest.reply-handler'. This does similar thing for package
	// except that it only supports sending out mail and doesn't handle incoming
	// email.
	'metamta.package.reply-handler' => 'OwnersPackageReplyHandler',

	// By default, Phabricator generates unique reply-to addresses and sends a
	// separate email to each recipient when you enable reply handling. This is
	// more secure than using "From" to establish user identity, but can mean
	// users may receive multiple emails when they are on mailing lists. Instead,
	// you can use a single, non-unique reply to address and authenticate users
	// based on the "From" address by setting this to 'true'. This trades away
	// a little bit of security for convenience, but it's reasonable in many
	// installs. Object interactions are still protected using hashes in the
	// single public email address, so objects can not be replied to blindly.
	'metamta.public-replies' => false,

	// You can configure an email address like "bugs@phabricator.example.com"
	// which will automatically create Maniphest tasks when users send email
	// to it. This relies on the "From" address to authenticate users, so it is
	// is not completely secure. To set this up, enter a complete email
	// address like "bugs@phabricator.example.com" and then configure mail to
	// that address so it routed to Phabricator (if you've already configured
	// reply handlers, you're probably already done). See "Configuring Inbound
	// Email" in the documentation for more information.
	'metamta.maniphest.public-create-email' => null,

	// If you enable 'metamta.public-replies', Phabricator uses "From" to
	// authenticate users. You can additionally enable this setting to try to
	// authenticate with 'Reply-To'. Note that this is completely spoofable and
	// insecure (any user can set any 'Reply-To' address) but depending on the
	// nature of your install or other deliverability conditions this might be
	// okay. Generally, you can't do much more by spoofing Reply-To than be
	// annoying (you can write but not read content). But, you know, this is
	// still COMPLETELY INSECURE.
	'metamta.insecure-auth-with-reply-to' => false,

	// If you enable 'metamta.maniphest.public-create-email' and create an
	// email address like "bugs@phabricator.example.com", it will default to
	// rejecting mail which doesn't come from a known user. However, you might
	// want to let anyone send email to this address; to do so, set a default
	// author here (a Phabricator username). A typical use of this might be to
	// create a "System Agent" user called "bugs" and use that name here. If you
	// specify a valid username, mail will always be accepted and used to create
	// a task, even if the sender is not a system user. The original email
	// address will be stored in an 'From Email' field on the task.
	'metamta.maniphest.default-public-author' => null,

	// You can disable the Herald hints in email if users prefer smaller messages.
	// These are the links under the headers "MANAGE HERALD RULES" and
	// "WHY DID I GET THIS EMAIL?". If you set this to true, they will not appear
	// in any mail. Users can still navigate to the links via the web interface.
	'metamta.herald.show-hints' => true,

	// You can disable the hints under "REPLY HANDLER ACTIONS" if users prefer
	// smaller messages. The actions themselves will still work properly.
	'metamta.reply.show-hints' => true,

	// You can disable the "To:" and "Cc:" footers in mail if users prefer
	// smaller messages.
	'metamta.recipients.show-hints' => true,

	// If this option is enabled, Phabricator will add a "Precedence: bulk"
	// header to transactional mail (e.g., Differential, Maniphest and Herald
	// notifications). This may improve the behavior of some auto-responder
	// software and prevent it from replying. However, it may also cause
	// deliverability issues -- notably, you currently can not send this header
	// via Amazon SES, and enabling this option with SES will prevent delivery
	// of any affected mail.
	'metamta.precedence-bulk' => false,

	// Mail.app on OS X Lion won't respect threading headers unless the subject
	// is prefixed with "Re:". If you enable this option, Phabricator will add
	// "Re:" to the subject line of all mail which is expected to thread. If
	// you've set 'metamta.one-mail-per-recipient', users can override this
	// setting in their preferences.
	'metamta.re-prefix' => false,

	// If true, allow MetaMTA to change mail subjects to put text like
	// '[Accepted]' and '[Commented]' in them. This makes subjects more useful,
	// but might break threading on some clients. If you've set
	// 'metamta.one-mail-per-recipient', users can override this setting in their
	// preferences.
	'metamta.vary-subjects' => true,


	// -- Auth ------------------------------------------------------------------ //

	// Can users login with a username/password, or by following the link from
	// a password reset email? You can disable this and configure one or more
	// OAuth providers instead.
	'auth.password-auth-enabled' => true,

	// Maximum number of simultaneous web sessions each user is permitted to have.
	// Setting this to "1" will prevent a user from logging in on more than one
	// browser at the same time.
	'auth.sessions.web' => 5,

	// Maximum number of simultaneous Conduit sessions each user is permitted
	// to have.
	'auth.sessions.conduit' => 5,

	// Set this true to enable the Settings -> SSH Public Keys panel, which will
	// allow users to associated SSH public keys with their accounts. This is only
	// really useful if you're setting up services over SSH and want to use
	// Phabricator for authentication; in most situations you can leave this
	// disabled.
	'auth.sshkeys.enabled' => false,

	// If true, email addresses must be verified (by clicking a link in an
	// email) before a user can login. By default, verification is optional
	// unless 'auth.email-domains' is nonempty (see below).
	'auth.require-email-verification' => false,

	// You can restrict allowed email addresses to certain domains (like
	// "yourcompany.com") by setting a list of allowed domains here. Users will
	// only be allowed to register using email addresses at one of the domains,
	// and will only be able to add new email addresses for these domains. If
	// you configure this, it implies 'auth.require-email-verification'.
	//
	// To configure email domains, set a list of domains like this:
	//
	// array(
	// 'yourcompany.com',
	// 'yourcompany.co.uk',
	// )
	//
	// You should omit the "@" from domains. Note that the domain must match
	// exactly. If you allow "yourcompany.com", that permits "joe@yourcompany.com"
	// but rejects "joe@mail.yourcompany.com".
	'auth.email-domains' => array(),

	// You can provide an arbitrary block of HTML here, which will appear on the
	// login screen. Normally, you'd use this to provide login or registration
	// instructions to users.
	'auth.login-message' => null,


	// -- Accounts -------------------------------------------------------------- //

	// Is basic account information (email, real name, profile picture) editable?
	// If you set up Phabricator to automatically synchronize account information
	// from some other authoritative system, you can disable this to ensure
	// information remains consistent across both systems.
	'account.editable' => true,

	// When users set or reset a password, it must have at least this many
	// characters.
	'account.minimum-password-length' => 8,


	// -- Facebook OAuth -------------------------------------------------------- //

	// Can users use Facebook credentials to login to Phabricator?
	'facebook.auth-enabled' => false,

	// Can users use Facebook credentials to create new Phabricator accounts?
	'facebook.registration-enabled' => true,

	// Are Facebook accounts permanently linked to Phabricator accounts, or can
	// the user unlink them?
	'facebook.auth-permanent' => false,

	// The Facebook "Application ID" to use for Facebook API access.
	'facebook.application-id' => null,

	// The Facebook "Application Secret" to use for Facebook API access.
	'facebook.application-secret' => null,

	// Should Phabricator reject requests made by users with
	// Secure Browsing disabled?
	'facebook.require-https-auth' => false,

	// -- GitHub OAuth ---------------------------------------------------------- //

	// Can users use GitHub credentials to login to Phabricator?
	'github.auth-enabled' => false,

	// Can users use GitHub credentials to create new Phabricator accounts?
	'github.registration-enabled' => true,

	// Are GitHub accounts permanently linked to Phabricator accounts, or can
	// the user unlink them?
	'github.auth-permanent' => false,

	// The GitHub "Client ID" to use for GitHub API access.
	'github.application-id' => null,

	// The GitHub "Secret" to use for GitHub API access.
	'github.application-secret' => null,


	// -- Google OAuth ---------------------------------------------------------- //

	// Can users use Google credentials to login to Phabricator?
	'google.auth-enabled' => false,

	// Can users use Google credentials to create new Phabricator accounts?
	'google.registration-enabled' => true,

	// Are Google accounts permanently linked to Phabricator accounts, or can
	// the user unlink them?
	'google.auth-permanent' => false,

	// The Google "Client ID" to use for Google API access.
	'google.application-id' => null,

	// The Google "Client Secret" to use for Google API access.
	'google.application-secret' => null,

	// -- LDAP Auth ----------------------------------------------------- //
	// Enable ldap auth
	'ldap.auth-enabled' => false,

	// The LDAP server hostname
	'ldap.hostname' => '',

	// The LDAP server port
	'ldap.port' => 389,

	// The LDAP base domain name
	'ldap.base_dn' => '',

	// The attribute to be regarded as 'username'. Has to be unique
	'ldap.search_attribute' => '',

	// Perform a search to find a user
	// Many LDAP installations do not have the username in the dn, if this is
	// true for you set this to true and configure the username_attribute below
	'ldap.search-first' => false,

	// The attribute to search for if you have to search for a user
	'ldap.username-attribute' => '',

	// The attribute(s) to be regarded as 'real name'.
	// If more then one attribute is supplied the values of the attributes in
	// the array will be joined
	'ldap.real_name_attributes' => array(),

	// A domain name to use when authenticating against Active Directory
	// (e.g. 'example.com')
	'ldap.activedirectory_domain' => '',

	// The LDAP version
	'ldap.version' => 3,

	// LDAP Referrals Option
	// Whether referrals should be followed by the client
	// Should be set to 0 if you use Windows 2003 AD
	'ldap.referrals' => 1,

	// The anonymous user name to use before searching a user.
	// Many LDAP installations require login even before searching a user, set
	// this option to enable it.
	'ldap.anonymous-user-name' => '',

	// The password of the LDAP anonymous user.
	'ldap.anonymous-user-password' => '',


	// -- Disqus OAuth ---------------------------------------------------------- //

	// Can users use Disqus credentials to login to Phabricator?
	'disqus.auth-enabled' => false,

	// Can users use Disqus credentials to create new Phabricator accounts?
	'disqus.registration-enabled' => true,

	// Are Disqus accounts permanently linked to Phabricator accounts, or can
	// the user unlink them?
	'disqus.auth-permanent' => false,

	// The Disqus "Client ID" to use for Disqus API access.
	'disqus.application-id' => null,

	// The Disqus "Client Secret" to use for Disqus API access.
	'disqus.application-secret' => null,


	// -- Phabricator OAuth ----------------------------------------------------- //

	// Meta-town -- Phabricator is itself an OAuth Provider
	// TODO -- T887 -- make this support multiple Phabricator instances!

	// The URI of the Phabricator instance to use as an OAuth server.
	'phabricator.oauth-uri' => null,

	// Can users use Phabricator credentials to login to Phabricator?
	'phabricator.auth-enabled' => false,

	// Can users use Phabricator credentials to create new Phabricator accounts?
	'phabricator.registration-enabled' => true,

	// Are Phabricator accounts permanently linked to Phabricator accounts, or can
	// the user unlink them?
	'phabricator.auth-permanent' => false,

	// The Phabricator "Client ID" to use for Phabricator API access.
	'phabricator.application-id' => null,

	// The Phabricator "Client Secret" to use for Phabricator API access.
	'phabricator.application-secret' => null,


	// -- Recaptcha ------------------------------------------------------------- //

	// Is Recaptcha enabled? If disabled, captchas will not appear. You should
	// enable Recaptcha if your install is public-facing, as it hinders
	// brute-force attacks.
	'recaptcha.enabled' => false,

	// Your Recaptcha public key, obtained from Recaptcha.
	'recaptcha.public-key' => null,

	// Your Recaptcha private key, obtained from Recaptcha.
	'recaptcha.private-key' => null,


	// -- Misc ------------------------------------------------------------------ //

	// This is hashed with other inputs to generate CSRF tokens. If you want, you
	// can change it to some other string which is unique to your install. This
	// will make your install more secure in a vague, mostly theoretical way. But
	// it will take you like 3 seconds of mashing on your keyboard to set it up so
	// you might as well.
	'phabricator.csrf-key' => '0b7ec0592e0a2829d8b71df2fa269b2c6172eca3',

	// This is hashed with other inputs to generate mail tokens. If you want, you
	// can change it to some other string which is unique to your install. In
	// particular, you will want to do this if you accidentally send a bunch of
	// mail somewhere you shouldn't have, to invalidate all old reply-to
	// addresses.
	'phabricator.mail-key' => '5ce3e7e8787f6e40dfae861da315a5cdf1018f12',

	// Version string displayed in the footer. You can generate this value from
	// Git log or from the current date in the deploy with a script like this:
	//
	// git log -n1 --pretty=%h > version.txt
	//
	// You can then use this generated value like this:
	//
	// 'phabricator.version' =>
	// file_get_contents(dirname(__FILE__).'/version.txt'),
	'phabricator.version' => 'UNSTABLE',

	// PHP requires that you set a timezone in your php.ini before using date
	// functions, or it will emit a warning. If this isn't possible (for instance,
	// because you are using HPHP) you can set some valid constant for
	// date_default_timezone_set() here and Phabricator will set it on your
	// behalf, silencing the warning.
	'phabricator.timezone' => null,

	// When unhandled exceptions occur, stack traces are hidden by default.
	// You can enable traces for development to make it easier to debug problems.
	'phabricator.show-stack-traces' => false,

	// Shows an error callout if a page generated PHP errors, warnings or notices.
	// This makes it harder to miss problems while developing Phabricator.
	'phabricator.show-error-callout' => false,

	// When users write comments which have URIs, they'll be automatically linked
	// if the protocol appears in this set. This whitelist is primarily to prevent
	// security issues like javascript:// URIs.
	'uri.allowed-protocols' => array(
	'http' => true,
	'https' => true,
	),

	// Tokenizers are UI controls which let the user select other users, email
	// addresses, project names, etc., by typing the first few letters and having
	// the control autocomplete from a list. They can load their data in two ways:
	// either in a big chunk up front, or as the user types. By default, the data
	// is loaded in a big chunk. This is simpler and performs better for small
	// datasets. However, if you have a very large number of users or projects,
	// (in the ballpark of more than a thousand), loading all that data may become
	// slow enough that it's worthwhile to query on demand instead. This makes
	// the typeahead slightly less responsive but overall performance will be much
	// better if you have a ton of stuff. You can figure out which setting is
	// best for your install by changing this setting and then playing with a
	// user tokenizer (like the user selectors in Maniphest or Differential) and
	// seeing which setting loads faster and feels better.
	'tokenizer.ondemand' => false,

	// By default, Phabricator includes some silly nonsense in the UI, such as
	// a submit button called "Clowncopterize" in Differential and a call to
	// "Leap Into Action". If you'd prefer more traditional UI strings like
	// "Submit", you can set this flag to disable most of the jokes and easter
	// eggs.
	'phabricator.serious-business' => false,


	// -- Files ----------------------------------------------------------------- //

	// Lists which uploaded file types may be viewed in the browser. If a file
	// has a mime type which does not appear in this list, it will always be
	// downloaded instead of displayed. This is mainly a usability
	// consideration, since browsers tend to freak out when viewing enormous
	// binary files.
	//
	// The keys in this array are viewable mime types; the values are the mime
	// types they will be delivered as when they are viewed in the browser.
	//
	// IMPORTANT: Configure 'security.alternate-file-domain' above! Your install
	// is NOT safe if it is left unconfigured.
	'files.viewable-mime-types' => array(
	'image/jpeg' => 'image/jpeg',
	'image/jpg' => 'image/jpg',
	'image/png' => 'image/png',
	'image/gif' => 'image/gif',
	'text/plain' => 'text/plain; charset=utf-8',
	'text/x-diff' => 'text/plain; charset=utf-8',

	// ".ico" favicon files, which have mime type diversity. See:
	// http://en.wikipedia.org/wiki/ICO_(file_format)#MIME_type
	'image/x-ico' => 'image/x-icon',
	'image/x-icon' => 'image/x-icon',
	'image/vnd.microsoft.icon' => 'image/x-icon',
	),

	// List of mime types which can be used as the source for an <img /> tag.
	// This should be a subset of 'files.viewable-mime-types' and exclude files
	// like text.
	'files.image-mime-types' => array(
	'image/jpeg' => true,
	'image/jpg' => true,
	'image/png' => true,
	'image/gif' => true,
	'image/x-ico' => true,
	'image/x-icon' => true,
	'image/vnd.microsoft.icon' => true,
	),

	// -- Storage --------------------------------------------------------------- //

	// Phabricator allows users to upload files, and can keep them in various
	// storage engines. This section allows you to configure which engines
	// Phabricator will use, and how it will use them.

	// The largest filesize Phabricator will store in the MySQL BLOB storage
	// engine, which just uses a database table to store files. While this isn't a
	// best practice, it's really easy to set up. Set this to 0 to disable use of
	// the MySQL blob engine.
	'storage.mysql-engine.max-size' => 1000000,

	// Phabricator provides a local disk storage engine, which just writes files
	// to some directory on local disk. The webserver must have read/write
	// permissions on this directory. This is straightforward and suitable for
	// most installs, but will not scale past one web frontend unless the path
	// is actually an NFS mount, since you'll end up with some of the files
	// written to each web frontend and no way for them to share. To use the
	// local disk storage engine, specify the path to a directory here. To
	// disable it, specify null.
	'storage.local-disk.path' => null,

	// If you want to store files in Amazon S3, specify an AWS access and secret
	// key here and a bucket name below.
	'amazon-s3.access-key' => null,
	'amazon-s3.secret-key' => null,

	// To use a custom endpoint, specify it here. Normally, you do not need to
	// configure this.
	'amazon-s3.endpoint' => null,

	// Set this to a valid Amazon S3 bucket to store files there. You must also
	// configure S3 access keys above.
	'storage.s3.bucket' => null,

	// Phabricator uses a storage engine selector to choose which storage engine
	// to use when writing file data. If you add new storage engines or want to
	// provide very custom rules (e.g., write images to one storage engine and
	// other files to a different one), you can provide an alternate
	// implementation here. The default engine will use choose MySQL, Local Disk,
	// and S3, in that order, if they have valid configurations above and a file
	// fits within configured limits.
	'storage.engine-selector' => 'PhabricatorDefaultFileStorageEngineSelector',

	// Set the size of the largest file a user may upload. This is used to render
	// text like "Maximum file size: 10MB" on interfaces where users can upload
	// files, and files larger than this size will be rejected.
	//
	// Specify this limit in bytes, or using a "K", "M", or "G" suffix.
	//
	// NOTE: Setting this to a large size is NOT sufficient to allow users to
	// upload large files. You must also configure a number of other settings. To
	// configure file upload limits, consult the article "Configuring File Upload
	// Limits" in the documentation. Once you've configured some limit across all
	// levels of the server, you can set this limit to an appropriate value and
	// the UI will then reflect the actual configured limit.
	'storage.upload-size-limit' => null,

	// Phabricator puts databases in a namespace, which defualts to "phabricator"
	// -- for instance, the Differential database is named
	// "phabricator_differential" by default. You can change this namespace if you
	// want. Normally, you should not do this unless you are developing
	// Phabricator and using namespaces to separate multiple sandbox datasets.
	'storage.default-namespace' => 'phabricator',


	// -- Search ---------------------------------------------------------------- //

	// Phabricator supports Elastic Search; to use it, specify a host like
	// 'http://elastic.example.com:9200/' here.
	'search.elastic.host' => null,

	// Phabricator uses a search engine selector to choose which search engine
	// to use when indexing and reconstructing documents, and when executing
	// queries. You can override the engine selector to provide a new selector
	// class which can select some custom engine you implement, if you want to
	// store your documents in some search engine which does not have default
	// support.
	'search.engine-selector' => 'PhabricatorDefaultSearchEngineSelector',


	// -- Differential ---------------------------------------------------------- //

	'differential.revision-custom-detail-renderer' => null,

	// Array for custom remarkup rules. The array should have a list of
	// class names of classes that extend PhutilRemarkupRule
	'differential.custom-remarkup-rules' => null,

	// Array for custom remarkup block rules. The array should have a list of
	// class names of classes that extend PhutilRemarkupEngineBlockRule
	'differential.custom-remarkup-block-rules' => null,

	// List of file regexps where whitespace is meaningful and should not
	// use 'ignore-all' by default
	'differential.whitespace-matters' => array(
	'/\.py$/',
	'/\.l?hs$/',
	),

	'differential.field-selector' => 'DifferentialDefaultFieldSelector',

	// Differential can show "Host" and "Path" fields on revisions, with
	// information about the machine and working directory where the
	// change came from. These fields are disabled by default because they may
	// occasionally have sensitive information; you can set this to true to
	// enable them.
	'differential.show-host-field' => false,

	// Differential has a required "Test Plan" field by default, which requires
	// authors to fill out information about how they verified the correctness of
	// their changes when sending code for review. If you'd prefer not to use
	// this field, you can disable it here. You can also make it optional
	// (instead of required) below.
	'differential.show-test-plan-field' => true,

	// Differential has a required "Test Plan" field by default. You can make it
	// optional by setting this to false. You can also completely remove it above,
	// if you prefer.
	'differential.require-test-plan-field' => true,

	// If you set this to true, users can "!accept" revisions via email (normally,
	// they can take other actions but can not "!accept"). This action is disabled
	// by default because email authentication can be configured to be very weak,
	// and, socially, email "!accept" is kind of sketchy and implies revisions may
	// not actually be receiving thorough review.
	'differential.enable-email-accept' => false,

	// If you set this to true, users won't need to login to view differential
	// revisions. Anonymous users will have read-only access and won't be able to
	// interact with the revisions.
	'differential.anonymous-access' => false,

	// If you set this to true, revision author email address information will
	// be exposed in Conduit. This is useful for Arcanist.
	//
	// For example, consider the "arc patch DX" workflow which needs to ask
	// Differential for the revision DX. This data often should contain
	// the author's email address, eg "George Washington
	// <gwashinton@example.com>" when DX is a git or mercurial revision. If this
	// option is false, Differential defaults to the best it can, something like
	// "George Washington" or "gwashington".
	'differential.expose-emails-prudently' => false,

	// List of file regexps that should be treated as if they are generated by
	// an automatic process, and thus get hidden by default in differential.
	'differential.generated-paths' => array(
	// '/config\.h$/',
	// '#/autobuilt/#',
	),

	// If you set this to true, users can accept their own revisions. This action
	// is disabled by default because it's most likely not a behavior you want,
	// but it proves useful if you are working alone on a project and want to make
	// use of all of differential's features.
	'differential.allow-self-accept' => false,

	// If you set this to true, any user can close any revision so long as it has
	// been accepted. This can be useful depending on your development model. For
	// example, github-style pull requests where the reviewer is often the
	// actual committer can benefit from turning this option to true. If false,
	// only the submitter can close a revision.
	'differential.always-allow-close' => false,

	// Revisions newer than this number of days are marked as fresh in Action
	// Required and Revisions Waiting on You views. Only work days (not weekends
	// and holidays) are included. Set to 0 to disable this feature.
	'differential.days-fresh' => 1,

	// Similar to 'differential.days-fresh' but marks stale revisions. If the
	// revision is even older than it is marked as old.
	'differential.days-stale' => 3,

	// -- Repositories ---------------------------------------------------------- //

	// The default location in which to store local copies of repositories.
	// Anything stored in this directory will be assumed to be under the
	// control of phabricator, which means that Phabricator will try to do some
	// maintenance on working copies if there are problems (such as a change
	// to the remote origin url). This maintenance may include completely
	// removing (and recloning) anything in this directory.
	//
	// When set to null, this option is ignored (i.e. Phabricator will not fully
	// control any working copies).
	'repository.default-local-path' => null,

	// -- Maniphest ------------------------------------------------------------- //

	'maniphest.enabled' => true,

	// Array of custom fields for Maniphest tasks. For details on adding custom
	// fields to Maniphest, see "Maniphest User Guide: Adding Custom Fields".
	'maniphest.custom-fields' => array(),

	// Class which drives custom field construction. See "Maniphest User Guide:
	// Adding Custom Fields" in the documentation for more information.
	'maniphest.custom-task-extensions-class' => 'ManiphestDefaultTaskExtensions',

	// What should the default task priority be in create flows?
	// See the constants in @{class:ManiphestTaskPriority} for valid values.
	// Defaults to "needs triage".
	'maniphest.default-priority' => 90,

	// -- Phriction ------------------------------------------------------------- //

	'phriction.enabled' => true,

	// -- Phame ----------------------------------------------------------------- //

	// Should Phame users have Disqus comment widget, and if so what's the
	// website shortname to use? For example, secure.phabricator.org uses
	// "phabricator", which we registered with Disqus. If you aren't familiar
	// with Disqus, see:
	// Disqus quick start guide - http://docs.disqus.com/help/4/
	// Information on shortnames - http://docs.disqus.com/help/68/
	'disqus.shortname' => null,

	// Directories to look for Phame skins inside of.
	'phame.skins' => array(
	'externals/skins/',
	),

	// -- Remarkup -------------------------------------------------------------- //

	// If you enable this, linked YouTube videos will be embeded inline. This has
	// mild security implications (you'll leak referrers to YouTube) and is pretty
	// silly (but sort of awesome).
	'remarkup.enable-embedded-youtube' => false,


	// -- Garbage Collection ---------------------------------------------------- //

	// Phabricator generates various logs and caches in the database which can
	// be garbage collected after a while to make the total data size more
	// manageable. To run garbage collection, launch a
	// PhabricatorGarbageCollector daemon.

	// Since the GC daemon can issue large writes and table scans, you may want to
	// run it only during off hours or make sure it is scheduled so it doesn't
	// overlap with backups. This determines when the daemon can start running
	// each day.
	'gcdaemon.run-at' => '12 AM',

	// How many seconds after 'gcdaemon.run-at' the daemon may collect garbage
	// for. By default it runs continuously, but you can set it to run for a
	// limited period of time. For instance, if you do backups at 3 AM, you might
	// run garbage collection for an hour beforehand. This is not a high-precision
	// limit so you may want to leave some room for the GC to actually stop, and
	// if you set it to something like 3 seconds you're on your own.
	'gcdaemon.run-for' => 24 * 60 * 60,

	// These 'ttl' keys configure how much old data the GC daemon keeps around.
	// Objects older than the ttl will be collected. Set any value to 0 to store
	// data indefinitely.

	'gcdaemon.ttl.herald-transcripts' => 30 * (24 * 60 * 60),
	'gcdaemon.ttl.daemon-logs' => 7 * (24 * 60 * 60),
	'gcdaemon.ttl.differential-parse-cache' => 14 * (24 * 60 * 60),
	'gcdaemon.ttl.markup-cache' => 30 * (24 * 60 * 60),
	'gcdaemon.ttl.task-archive' => 14 * (24 * 60 * 60),


	// -- Feed ------------------------------------------------------------------ //

	// If you set this to true, you can embed Phabricator activity feeds in other
	// pages using iframes. These feeds are completely public, and a login is not
	// required to view them! This is intended for things like open source
	// projects that want to expose an activity feed on the project homepage.
	//
	// NOTE: You must also set `policy.allow-public` to true for this setting
	// to work properly.
	'feed.public' => false,

	// If you set this to a list of http URIs, when a feed story is published a
	// task will be created for each uri that posts the story data to the uri.
	// Daemons automagically retry failures 100 times, waiting $fail_count * 60s
	// between each subsequent failure. Be sure to keep the daemon console
	// (/daemon/) open while developing and testing your end points.
	//
	// NOTE: URIs are not validated, the URI must return http status 200 within
	// 30 seconds, and no permission checks are performed.
	'feed.http-hooks' => array(),

	// -- Drydock --------------------------------------------------------------- //

	// Drydock is used to allocate various software resources. For example, it
	// allocates working copies so continuous integration tests can be executed.
	// It needs at least one host to allocate these resources on.
	//
	// Set this option to true to let Drydock use the localhost for allocations.
	// This is the simplest configuration, but the least scalable. You MUST
	// disable this if you run daemons on more than one machine -- if you do not,
	// a daemon on machine A may allocate a resource locally, and then a daemon
	// on machine B may try to access it.
	'drydock.localhost.enabled' => true,

	// If the localhost is available to Drydock, specify the path on disk where
	// Drydock should write files. You should create this directory and make sure
	// the user that the daemons run as has permission to write to it.
	'drydock.localhost.path' => '/var/drydock/',

	// If you want to use Drydock's builtin EC2 Blueprints, configure your AWS
	// EC2 credentials here.
	'amazon-ec2.access-key' => null,
	'amazon-ec2.secret-key' => null,


	// -- Customization --------------------------------------------------------- //

	// Paths to additional phutil libraries to load.
	'load-libraries' => array(),

	'aphront.default-application-configuration-class' =>
	'AphrontDefaultApplicationConfiguration',

	'controller.oauth-registration' =>
	'PhabricatorOAuthDefaultRegistrationController',


	// Directory that phd (the Phabricator daemon control script) should use to
	// track running daemons.
	'phd.pid-directory' => '/var/tmp/phd/pid',

	// Directory that the Phabricator daemons should use to store the log file
	'phd.log-directory' => '/var/tmp/phd/log',

	// Number of "TaskMaster" daemons that "phd start" should start. You can
	// raise this if you have a task backlog, or explicitly launch more with
	// "phd launch <N> taskmaster".
	'phd.start-taskmasters' => 4,

	// Launch daemons in "verbose" mode by default. This creates a lot of output,
	// but can help debug issues. Daemons launched in debug mode with "phd debug"
	// are always launched in verbose mode. See also 'phd.trace'.
	'phd.verbose' => false,

	// Launch daemons in "trace" mode by default. This creates an ENORMOUS amount
	// of output, but can help debug issues. Daemons launched in debug mode with
	// "phd debug" are always launched in trace mdoe. See also 'phd.verbose'.
	'phd.trace' => false,

	// Path to custom celerity resource map relative to 'phabricator/src'.
	// See also `scripts/celerity_mapper.php`.
	'celerity.resource-path' => '__celerity_resource_map__.php',

	// This value is an input to the hash function when building resource hashes.
	// It has no security value, but if you accidentally poison user caches (by
	// pushing a bad patch or having something go wrong with a CDN, e.g.) you can
	// change this to something else and rebuild the Celerity map to break user
	// caches. Unless you are doing Celerity development, it is exceptionally
	// unlikely that you need to modify this.
	'celerity.resource-hash' => 'd9455ea150622ee044f7931dabfa52aa',

	// In a development environment, it is desirable to force static resources
	// (CSS and JS) to be read from disk on every request, so that edits to them
	// appear when you reload the page even if you haven't updated the resource
	// maps. This setting ensures requests will be verified against the state on
	// disk. Generally, you should leave this off in production (caching behavior
	// and performance improve with it off) but turn it on in development. (These
	// settings are the defaults.)
	'celerity.force-disk-reads' => false,

	// Minify static resources by removing whitespace and comments. You should
	// enable this in production, but disable it in development.
	'celerity.minify' => false,

	// You can respond to various application events by installing listeners,
	// which will receive callbacks when interesting things occur. Specify a list
	// of classes which extend PhabricatorEventListener here.
	'events.listeners' => array(),

	// -- Syntax Highlighting --------------------------------------------------- //

	// Phabricator can highlight PHP by default and use Pygments for other
	// languages if enabled. You can provide a custom highlighter engine by
	// extending class PhutilSyntaxHighlighterEngine.
	'syntax-highlighter.engine' => 'PhutilDefaultSyntaxHighlighterEngine',

	// If you want syntax highlighting for other languages than PHP then you can
	// install the python package 'Pygments', make sure the 'pygmentize' script is
	// available in the $PATH of the webserver, and then enable this.
	'pygments.enabled' => false,

	// In places that we display a dropdown to syntax-highlight code,
	// this is where that list is defined.
	// Syntax is 'lexer-name' => 'Display Name',
	'pygments.dropdown-choices' => array(
	'apacheconf' => 'Apache Configuration',
	'bash' => 'Bash Scripting',
	'brainfuck' => 'Brainf*ck',
	'c' => 'C',
	'cpp' => 'C++',
	'css' => 'CSS',
	'd' => 'D',
	'diff' => 'Diff',
	'django' => 'Django Templating',
	'erb' => 'Embedded Ruby/ERB',
	'erlang' => 'Erlang',
	'haskell' => 'Haskell',
	'html' => 'HTML',
	'java' => 'Java',
	'js' => 'Javascript',
	'mysql' => 'MySQL',
	'objc' => 'Objective-C',
	'perl' => 'Perl',
	'php' => 'PHP',
	'rest' => 'reStructuredText',
	'text' => 'Plain Text',
	'python' => 'Python',
	'rainbow' => 'Rainbow',
	'remarkup' => 'Remarkup',
	'ruby' => 'Ruby',
	'xml' => 'XML',
	),

	// This is an override list of regular expressions which allows you to choose
	// what language files are highlighted as. If your projects have certain rules
	// about filenames or use unusual or ambiguous language extensions, you can
	// create a mapping here. This is an ordered dictionary of regular expressions
	// which will be tested against the filename. They should map to either an
	// explicit language as a string value, or a numeric index into the captured
	// groups as an integer.
	'syntax.filemap' => array(
	// Example: Treat all '*.xyz' files as PHP.
	// '@\\.xyz$@' => 'php',

	// Example: Treat 'httpd.conf' as 'apacheconf'.
	// '@/httpd\\.conf$@' => 'apacheconf',

	// Example: Treat all '*.x.bak' file as '.x'. NOTE: we map to capturing
	// group 1 by specifying the mapping as "1".
	// '@\\.([^.]+)\\.bak$@' => 1,

	'@\.arcconfig$@' => 'js',
	'@\.divinerconfig$@' => 'js',
	),

	// Set the default monospaced font style for users who haven't set a custom
	// style.
	'style.monospace' => '10px "Menlo", "Consolas", "Monaco", monospace',


	// -- Debugging ------------------------------------------------------------- //

	// Enable this to change HTTP redirects into normal pages with a link to the
	// redirection target. For example, after you submit a form you'll get a page
	// saying "normally, you'd be redirected...". This is useful to examine
	// service or profiler information on write pathways, or debug redirects. It
	// also makes the UX horrible for normal use, so you should enable it only
	// when debugging.
	//
	// NOTE: This does not currently work for forms with Javascript "workflow",
	// since the redirect happens in Javascript.
	'debug.stop-on-redirect' => false,

	// Set the rate for how often to do sampled profiling. On average, one
	// request for every number of requests specified here will be sampled.
	// Set this value to 0 to completely disable profiling. In a production
	// environment, this value should either be set to 0 (to disable) or to
	// a large number (to sample only a few requests).
	'debug.profile-rate' => 0,


	// -- Previews ------------------------------------------------------------- //

	// Turn on to enable the "viewport" meta tag. This is a preview feature which
	// will improve the usability of Phabricator on phones and tablets once it
	// is ready.
	'preview.viewport-meta-tag' => false,

	// -- Environment ---------------------------------------------------------- //

	// Phabricator occasionally shells out to other binaries on the server.
	// An example of this is the "pygmentize" command, used to syntax-highlight
	// code written in languages other than PHP. By default, it is assumed that
	// these binaries are in the $PATH of the user running Phabricator (normally
	// 'apache', 'httpd', or 'nobody'). Here you can add extra directories to
	// the $PATH environment variable, for when these binaries are in non-standard
	// locations.
	'environment.append-paths' => array(),
	);
	diff --git a/externals/phpmailer/class.phpmailer.php b/externals/phpmailer/class.phpmailer.php
	index 56007cdfa1..0c62ddbe2c 100644
	--- a/externals/phpmailer/class.phpmailer.php
	+++ b/externals/phpmailer/class.phpmailer.php
	@@ -1,2320 +1,2338 @@
	<?php
	/*~ class.phpmailer.php
	.---------------------------------------------------------------------------.
	\| Software: PHPMailer - PHP email class \|
	\| Version: 5.1 \|
	\| Contact: via sourceforge.net support pages (also www.worxware.com) \|
	\| Info: http://phpmailer.sourceforge.net \|
	\| Support: http://sourceforge.net/projects/phpmailer/ \|
	\| ------------------------------------------------------------------------- \|
	\| Admin: Andy Prevost (project admininistrator) \|
	\| Authors: Andy Prevost (codeworxtech) codeworxtech@users.sourceforge.net \|
	\| : Marcus Bointon (coolbru) coolbru@users.sourceforge.net \|
	\| Founder: Brent R. Matzelle (original founder) \|
	\| Copyright (c) 2004-2009, Andy Prevost. All Rights Reserved. \|
	\| Copyright (c) 2001-2003, Brent R. Matzelle \|
	\| ------------------------------------------------------------------------- \|
	\| License: Distributed under the Lesser General Public License (LGPL) \|
	\| http://www.gnu.org/copyleft/lesser.html \|
	\| This program is distributed in the hope that it will be useful - WITHOUT \|
	\| ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or \|
	\| FITNESS FOR A PARTICULAR PURPOSE. \|
	\| ------------------------------------------------------------------------- \|
	\| We offer a number of paid services (www.worxware.com): \|
	\| - Web Hosting on highly optimized fast and secure servers \|
	\| - Technology Consulting \|
	\| - Oursourcing (highly qualified programmers and graphic designers) \|
	'---------------------------------------------------------------------------'
	*/

	/**
	* PHPMailer - PHP email transport class
	* NOTE: Requires PHP version 5 or later
	* @package PHPMailer
	* @author Andy Prevost
	* @author Marcus Bointon
	* @copyright 2004 - 2009 Andy Prevost
	* @version $Id: class.phpmailer.php 447 2009-05-25 01:36:38Z codeworxtech $
	* @license http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License
	*/

	if (version_compare(PHP_VERSION, '5.0.0', '<') ) exit("Sorry, this version of PHPMailer will only run on PHP version 5 or greater!\n");

	class PHPMailer {

	/////////////////////////////////////////////////
	// PROPERTIES, PUBLIC
	/////////////////////////////////////////////////

	/**
	* Email priority (1 = High, 3 = Normal, 5 = low).
	* @var int
	*/
	public $Priority = 3;

	/**
	* Sets the CharSet of the message.
	* @var string
	*/
	public $CharSet = 'iso-8859-1';

	/**
	* Sets the Content-type of the message.
	* @var string
	*/
	public $ContentType = 'text/plain';

	/**
	* Sets the Encoding of the message. Options for this are
	* "8bit", "7bit", "binary", "base64", and "quoted-printable".
	* @var string
	*/
	public $Encoding = '8bit';

	/**
	* Holds the most recent mailer error message.
	* @var string
	*/
	public $ErrorInfo = '';

	/**
	* Sets the From email address for the message.
	* @var string
	*/
	public $From = 'root@localhost';

	/**
	* Sets the From name of the message.
	* @var string
	*/
	public $FromName = 'Root User';

	/**
	* Sets the Sender email (Return-Path) of the message. If not empty,
	* will be sent via -f to sendmail or as 'MAIL FROM' in smtp mode.
	* @var string
	*/
	public $Sender = '';

	/**
	* Sets the Subject of the message.
	* @var string
	*/
	public $Subject = '';

	/**
	* Sets the Body of the message. This can be either an HTML or text body.
	* If HTML then run IsHTML(true).
	* @var string
	*/
	public $Body = '';

	/**
	* Sets the text-only body of the message. This automatically sets the
	* email to multipart/alternative. This body can be read by mail
	* clients that do not have HTML email capability such as mutt. Clients
	* that can read HTML will view the normal Body.
	* @var string
	*/
	public $AltBody = '';

	/**
	* Sets word wrapping on the body of the message to a given number of
	* characters.
	* @var int
	*/
	public $WordWrap = 0;

	/**
	* Method to send mail: ("mail", "sendmail", or "smtp").
	* @var string
	*/
	public $Mailer = 'mail';

	/**
	* Sets the path of the sendmail program.
	* @var string
	*/
	public $Sendmail = '/usr/sbin/sendmail';

	/**
	* Path to PHPMailer plugins. Useful if the SMTP class
	* is in a different directory than the PHP include path.
	* @var string
	*/
	public $PluginDir = '';

	/**
	* Sets the email address that a reading confirmation will be sent.
	* @var string
	*/
	public $ConfirmReadingTo = '';

	/**
	* Sets the hostname to use in Message-Id and Received headers
	* and as default HELO string. If empty, the value returned
	* by SERVER_NAME is used or 'localhost.localdomain'.
	* @var string
	*/
	public $Hostname = '';

	/**
	* Sets the message ID to be used in the Message-Id header.
	* If empty, a unique id will be generated.
	* @var string
	*/
	public $MessageID = '';

	/////////////////////////////////////////////////
	// PROPERTIES FOR SMTP
	/////////////////////////////////////////////////

	/**
	* Sets the SMTP hosts. All hosts must be separated by a
	* semicolon. You can also specify a different port
	* for each host by using this format: [hostname:port]
	* (e.g. "smtp1.example.com:25;smtp2.example.com").
	* Hosts will be tried in order.
	* @var string
	*/
	public $Host = 'localhost';

	/**
	* Sets the default SMTP server port.
	* @var int
	*/
	public $Port = 25;

	/**
	* Sets the SMTP HELO of the message (Default is $Hostname).
	* @var string
	*/
	public $Helo = '';

	/**
	* Sets connection prefix.
	* Options are "", "ssl" or "tls"
	* @var string
	*/
	public $SMTPSecure = '';

	/**
	* Sets SMTP authentication. Utilizes the Username and Password variables.
	* @var bool
	*/
	public $SMTPAuth = false;

	/**
	* Sets SMTP username.
	* @var string
	*/
	public $Username = '';

	/**
	* Sets SMTP password.
	* @var string
	*/
	public $Password = '';

	/**
	* Sets the SMTP server timeout in seconds.
	* This function will not work with the win32 version.
	* @var int
	*/
	public $Timeout = 10;

	/**
	* Sets SMTP class debugging on or off.
	* @var bool
	*/
	public $SMTPDebug = false;

	/**
	* Prevents the SMTP connection from being closed after each mail
	* sending. If this is set to true then to close the connection
	* requires an explicit call to SmtpClose().
	* @var bool
	*/
	public $SMTPKeepAlive = false;

	/**
	* Provides the ability to have the TO field process individual
	* emails, instead of sending to entire TO addresses
	* @var bool
	*/
	public $SingleTo = false;

	/**
	* If SingleTo is true, this provides the array to hold the email addresses
	* @var bool
	*/
	public $SingleToArray = array();

	/**
	* Provides the ability to change the line ending
	* @var string
	*/
	public $LE = "\n";

	/**
	* Used with DKIM DNS Resource Record
	* @var string
	*/
	public $DKIM_selector = 'phpmailer';

	/**
	* Used with DKIM DNS Resource Record
	* optional, in format of email address 'you@yourdomain.com'
	* @var string
	*/
	public $DKIM_identity = '';

	/**
	* Used with DKIM DNS Resource Record
	* optional, in format of email address 'you@yourdomain.com'
	* @var string
	*/
	public $DKIM_domain = '';

	/**
	* Used with DKIM DNS Resource Record
	* optional, in format of email address 'you@yourdomain.com'
	* @var string
	*/
	public $DKIM_private = '';

	/**
	* Callback Action function name
	* the function that handles the result of the send email action. Parameters:
	* bool $result result of the send action
	* string $to email address of the recipient
	* string $cc cc email addresses
	* string $bcc bcc email addresses
	* string $subject the subject
	* string $body the email body
	* @var string
	*/
	public $action_function = ''; //'callbackAction';

	/**
	* Sets the PHPMailer Version number
	* @var string
	*/
	public $Version = '5.1';

	/////////////////////////////////////////////////
	// PROPERTIES, PRIVATE AND PROTECTED
	/////////////////////////////////////////////////

	private $smtp = NULL;
	private $to = array();
	private $cc = array();
	private $bcc = array();
	private $ReplyTo = array();
	private $all_recipients = array();
	private $attachment = array();
	private $CustomHeader = array();
	private $message_type = '';
	private $boundary = array();
	protected $language = array();
	private $error_count = 0;
	private $sign_cert_file = "";
	private $sign_key_file = "";
	private $sign_key_pass = "";
	private $exceptions = false;

	/////////////////////////////////////////////////
	// CONSTANTS
	/////////////////////////////////////////////////

	const STOP_MESSAGE = 0; // message only, continue processing
	const STOP_CONTINUE = 1; // message?, likely ok to continue processing
	const STOP_CRITICAL = 2; // message, plus full stop, critical error reached

	/////////////////////////////////////////////////
	// METHODS, VARIABLES
	/////////////////////////////////////////////////

	/**
	* Constructor
	* @param boolean $exceptions Should we throw external exceptions?
	*/
	public function __construct($exceptions = false) {
	$this->exceptions = ($exceptions == true);
	}

	/**
	* Sets message type to HTML.
	* @param bool $ishtml
	* @return void
	*/
	public function IsHTML($ishtml = true) {
	if ($ishtml) {
	$this->ContentType = 'text/html';
	} else {
	$this->ContentType = 'text/plain';
	}
	}

	/**
	* Sets Mailer to send message using SMTP.
	* @return void
	*/
	public function IsSMTP() {
	$this->Mailer = 'smtp';
	}

	/**
	* Sets Mailer to send message using PHP mail() function.
	* @return void
	*/
	public function IsMail() {
	$this->Mailer = 'mail';
	}

	/**
	* Sets Mailer to send message using the $Sendmail program.
	* @return void
	*/
	public function IsSendmail() {
	if (!stristr(ini_get('sendmail_path'), 'sendmail')) {
	$this->Sendmail = '/var/qmail/bin/sendmail';
	}
	$this->Mailer = 'sendmail';
	}

	/**
	* Sets Mailer to send message using the qmail MTA.
	* @return void
	*/
	public function IsQmail() {
	if (stristr(ini_get('sendmail_path'), 'qmail')) {
	$this->Sendmail = '/var/qmail/bin/sendmail';
	}
	$this->Mailer = 'sendmail';
	}

	/////////////////////////////////////////////////
	// METHODS, RECIPIENTS
	/////////////////////////////////////////////////

	/**
	* Adds a "To" address.
	* @param string $address
	* @param string $name
	* @return boolean true on success, false if address already used
	*/
	public function AddAddress($address, $name = '') {
	return $this->AddAnAddress('to', $address, $name);
	}

	/**
	* Adds a "Cc" address.
	* Note: this function works with the SMTP mailer on win32, not with the "mail" mailer.
	* @param string $address
	* @param string $name
	* @return boolean true on success, false if address already used
	*/
	public function AddCC($address, $name = '') {
	return $this->AddAnAddress('cc', $address, $name);
	}

	/**
	* Adds a "Bcc" address.
	* Note: this function works with the SMTP mailer on win32, not with the "mail" mailer.
	* @param string $address
	* @param string $name
	* @return boolean true on success, false if address already used
	*/
	public function AddBCC($address, $name = '') {
	return $this->AddAnAddress('bcc', $address, $name);
	}

	/**
	* Adds a "Reply-to" address.
	* @param string $address
	* @param string $name
	* @return boolean
	*/
	public function AddReplyTo($address, $name = '') {
	return $this->AddAnAddress('ReplyTo', $address, $name);
	}

	/**
	* Adds an address to one of the recipient arrays
	* Addresses that have been added already return false, but do not throw exceptions
	* @param string $kind One of 'to', 'cc', 'bcc', 'ReplyTo'
	* @param string $address The email address to send to
	* @param string $name
	* @return boolean true on success, false if address already used or invalid in some way
	* @access private
	*/
	private function AddAnAddress($kind, $address, $name = '') {
	if (!preg_match('/^(to\|cc\|bcc\|ReplyTo)$/', $kind)) {
	echo 'Invalid recipient array: ' . kind;
	return false;
	}
	$address = trim($address);
	$name = trim(preg_replace('/[\r\n]+/', '', $name)); //Strip breaks and trim
	if (!self::ValidateAddress($address)) {
	$this->SetError($this->Lang('invalid_address').': '. $address);
	if ($this->exceptions) {
	throw new phpmailerException($this->Lang('invalid_address').': '.$address);
	}
	echo $this->Lang('invalid_address').': '.$address;
	return false;
	}
	if ($kind != 'ReplyTo') {
	if (!isset($this->all_recipients[strtolower($address)])) {
	array_push($this->$kind, array($address, $name));
	$this->all_recipients[strtolower($address)] = true;
	return true;
	}
	} else {
	if (!array_key_exists(strtolower($address), $this->ReplyTo)) {
	$this->ReplyTo[strtolower($address)] = array($address, $name);
	return true;
	}
	}
	return false;
	}

	/**
	* Set the From and FromName properties
	* @param string $address
	* @param string $name
	* @return boolean
	*/
	public function SetFrom($address, $name = '',$auto=1) {
	$address = trim($address);
	$name = trim(preg_replace('/[\r\n]+/', '', $name)); //Strip breaks and trim
	if (!self::ValidateAddress($address)) {
	$this->SetError($this->Lang('invalid_address').': '. $address);
	if ($this->exceptions) {
	throw new phpmailerException($this->Lang('invalid_address').': '.$address);
	}
	echo $this->Lang('invalid_address').': '.$address;
	return false;
	}
	$this->From = $address;
	$this->FromName = $name;
	if ($auto) {
	if (empty($this->ReplyTo)) {
	$this->AddAnAddress('ReplyTo', $address, $name);
	}
	if (empty($this->Sender)) {
	$this->Sender = $address;
	}
	}
	return true;
	}

	/**
	* Check that a string looks roughly like an email address should
	* Static so it can be used without instantiation
	* Tries to use PHP built-in validator in the filter extension (from PHP 5.2), falls back to a reasonably competent regex validator
	* Conforms approximately to RFC2822
	* @link http://www.hexillion.com/samples/#Regex Original pattern found here
	* @param string $address The email address to check
	* @return boolean
	* @static
	* @access public
	*/
	public static function ValidateAddress($address) {
	if (function_exists('filter_var')) { //Introduced in PHP 5.2
	if(filter_var($address, FILTER_VALIDATE_EMAIL) === FALSE) {
	return false;
	} else {
	return true;
	}
	} else {
	return preg_match('/^(?:[\w\!\#\$\%\&\'\\+\-\/\=\?\^\`\{\\|\}\~]+\.)[\w\!\#\$\%\&\'\*\+\-\/\=\?\^\`\{\\|\}\~]+@(?:(?:(?:[a-zA-Z0-9_](?:[a-zA-Z0-9_\-](?!\.)){0,61}[a-zA-Z0-9_-]?\.)+[a-zA-Z0-9_](?:[a-zA-Z0-9_\-](?!$)){0,61}[a-zA-Z0-9_]?)\|(?:\[(?:(?:[01]?\d{1,2}\|2[0-4]\d\|25[0-5])\.){3}(?:[01]?\d{1,2}\|2[0-4]\d\|25[0-5])\]))$/', $address);
	}
	}

	/////////////////////////////////////////////////
	// METHODS, MAIL SENDING
	/////////////////////////////////////////////////

	/**
	* Creates message and assigns Mailer. If the message is
	* not sent successfully then it returns false. Use the ErrorInfo
	* variable to view description of the error.
	* @return bool
	*/
	public function Send() {
	try {
	if ((count($this->to) + count($this->cc) + count($this->bcc)) < 1) {
	throw new phpmailerException($this->Lang('provide_address'), self::STOP_CRITICAL);
	}

	// Set whether the message is multipart/alternative
	if(!empty($this->AltBody)) {
	$this->ContentType = 'multipart/alternative';
	}

	$this->error_count = 0; // reset errors
	$this->SetMessageType();
	$header = $this->CreateHeader();
	$body = $this->CreateBody();

	if (empty($this->Body)) {
	throw new phpmailerException($this->Lang('empty_message'), self::STOP_CRITICAL);
	}

	// digitally sign with DKIM if enabled
	if ($this->DKIM_domain && $this->DKIM_private) {
	$header_dkim = $this->DKIM_Add($header,$this->Subject,$body);
	$header = str_replace("\r\n","\n",$header_dkim) . $header;
	}

	// Choose the mailer and send through it
	switch($this->Mailer) {
	case 'sendmail':
	return $this->SendmailSend($header, $body);
	case 'smtp':
	return $this->SmtpSend($header, $body);
	default:
	return $this->MailSend($header, $body);
	}

	} catch (phpmailerException $e) {
	$this->SetError($e->getMessage());
	if ($this->exceptions) {
	throw $e;
	}
	echo $e->getMessage()."\n";
	return false;
	}
	}

	/**
	* Sends mail using the $Sendmail program.
	* @param string $header The message headers
	* @param string $body The message body
	* @access protected
	* @return bool
	*/
	protected function SendmailSend($header, $body) {
	if ($this->Sender != '') {
	$sendmail = sprintf("%s -oi -f %s -t", escapeshellcmd($this->Sendmail), escapeshellarg($this->Sender));
	} else {
	$sendmail = sprintf("%s -oi -t", escapeshellcmd($this->Sendmail));
	}
	if ($this->SingleTo === true) {
	foreach ($this->SingleToArray as $key => $val) {
	if(!@$mail = popen($sendmail, 'w')) {
	throw new phpmailerException($this->Lang('execute') . $this->Sendmail, self::STOP_CRITICAL);
	}
	fputs($mail, "To: " . $val . "\n");
	fputs($mail, $header);
	fputs($mail, $body);
	$result = pclose($mail);
	// implement call back function if it exists
	$isSent = ($result == 0) ? 1 : 0;
	$this->doCallback($isSent,$val,$this->cc,$this->bcc,$this->Subject,$body);
	if($result != 0) {
	throw new phpmailerException($this->Lang('execute') . $this->Sendmail, self::STOP_CRITICAL);
	}
	}
	} else {
	if(!@$mail = popen($sendmail, 'w')) {
	throw new phpmailerException($this->Lang('execute') . $this->Sendmail, self::STOP_CRITICAL);
	}
	fputs($mail, $header);
	fputs($mail, $body);
	$result = pclose($mail);
	// implement call back function if it exists
	$isSent = ($result == 0) ? 1 : 0;
	$this->doCallback($isSent,$this->to,$this->cc,$this->bcc,$this->Subject,$body);
	if($result != 0) {
	throw new phpmailerException($this->Lang('execute') . $this->Sendmail, self::STOP_CRITICAL);
	}
	}
	return true;
	}

	/**
	* Sends mail using the PHP mail() function.
	* @param string $header The message headers
	* @param string $body The message body
	* @access protected
	* @return bool
	*/
	protected function MailSend($header, $body) {
	$toArr = array();
	foreach($this->to as $t) {
	$toArr[] = $this->AddrFormat($t);
	}
	$to = implode(', ', $toArr);

	$params = sprintf("-oi -f %s", $this->Sender);
	if ($this->Sender != '' && strlen(ini_get('safe_mode'))< 1) {
	$old_from = ini_get('sendmail_from');
	ini_set('sendmail_from', $this->Sender);
	if ($this->SingleTo === true && count($toArr) > 1) {
	foreach ($toArr as $key => $val) {
	$rt = @mail($val, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header, $params);
	// implement call back function if it exists
	$isSent = ($rt == 1) ? 1 : 0;
	$this->doCallback($isSent,$val,$this->cc,$this->bcc,$this->Subject,$body);
	}
	} else {
	$rt = @mail($to, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header, $params);
	// implement call back function if it exists
	$isSent = ($rt == 1) ? 1 : 0;
	$this->doCallback($isSent,$to,$this->cc,$this->bcc,$this->Subject,$body);
	}
	} else {
	if ($this->SingleTo === true && count($toArr) > 1) {
	foreach ($toArr as $key => $val) {
	$rt = @mail($val, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header, $params);
	// implement call back function if it exists
	$isSent = ($rt == 1) ? 1 : 0;
	$this->doCallback($isSent,$val,$this->cc,$this->bcc,$this->Subject,$body);
	}
	} else {
	$rt = @mail($to, $this->EncodeHeader($this->SecureHeader($this->Subject)), $body, $header);
	// implement call back function if it exists
	$isSent = ($rt == 1) ? 1 : 0;
	$this->doCallback($isSent,$to,$this->cc,$this->bcc,$this->Subject,$body);
	}
	}
	if (isset($old_from)) {
	ini_set('sendmail_from', $old_from);
	}
	if(!$rt) {
	throw new phpmailerException($this->Lang('instantiate'), self::STOP_CRITICAL);
	}
	return true;
	}

	/**
	* Sends mail via SMTP using PhpSMTP
	* Returns false if there is a bad MAIL FROM, RCPT, or DATA input.
	* @param string $header The message headers
	* @param string $body The message body
	* @uses SMTP
	* @access protected
	* @return bool
	*/
	protected function SmtpSend($header, $body) {
	require_once $this->PluginDir . 'class.smtp.php';
	$bad_rcpt = array();

	if(!$this->SmtpConnect()) {
	throw new phpmailerException($this->Lang('smtp_connect_failed'), self::STOP_CRITICAL);
	}
	$smtp_from = ($this->Sender == '') ? $this->From : $this->Sender;
	if(!$this->smtp->Mail($smtp_from)) {
	throw new phpmailerException($this->Lang('from_failed') . $smtp_from, self::STOP_CRITICAL);
	}

	// Attempt to send attach all recipients
	foreach($this->to as $to) {
	if (!$this->smtp->Recipient($to[0])) {
	$bad_rcpt[] = $to[0];
	// implement call back function if it exists
	$isSent = 0;
	$this->doCallback($isSent,$to[0],'','',$this->Subject,$body);
	} else {
	// implement call back function if it exists
	$isSent = 1;
	$this->doCallback($isSent,$to[0],'','',$this->Subject,$body);
	}
	}
	foreach($this->cc as $cc) {
	if (!$this->smtp->Recipient($cc[0])) {
	$bad_rcpt[] = $cc[0];
	// implement call back function if it exists
	$isSent = 0;
	$this->doCallback($isSent,'',$cc[0],'',$this->Subject,$body);
	} else {
	// implement call back function if it exists
	$isSent = 1;
	$this->doCallback($isSent,'',$cc[0],'',$this->Subject,$body);
	}
	}
	foreach($this->bcc as $bcc) {
	if (!$this->smtp->Recipient($bcc[0])) {
	$bad_rcpt[] = $bcc[0];
	// implement call back function if it exists
	$isSent = 0;
	$this->doCallback($isSent,'','',$bcc[0],$this->Subject,$body);
	} else {
	// implement call back function if it exists
	$isSent = 1;
	$this->doCallback($isSent,'','',$bcc[0],$this->Subject,$body);
	}
	}


	if (count($bad_rcpt) > 0 ) { //Create error message for any bad addresses
	$badaddresses = implode(', ', $bad_rcpt);
	throw new phpmailerException($this->Lang('recipients_failed') . $badaddresses);
	}
	if(!$this->smtp->Data($header . $body)) {
	throw new phpmailerException($this->Lang('data_not_accepted'), self::STOP_CRITICAL);
	}
	if($this->SMTPKeepAlive == true) {
	$this->smtp->Reset();
	}
	return true;
	}

	/**
	* Initiates a connection to an SMTP server.
	* Returns false if the operation failed.
	* @uses SMTP
	* @access public
	* @return bool
	*/
	public function SmtpConnect() {
	if(is_null($this->smtp)) {
	$this->smtp = new SMTP();
	}

	$this->smtp->do_debug = $this->SMTPDebug;
	$hosts = explode(';', $this->Host);
	$index = 0;
	$connection = $this->smtp->Connected();

	// Retry while there is no connection
	try {
	while($index < count($hosts) && !$connection) {
	$hostinfo = array();
	if (preg_match('/^(.+):([0-9]+)$/', $hosts[$index], $hostinfo)) {
	$host = $hostinfo[1];
	$port = $hostinfo[2];
	} else {
	$host = $hosts[$index];
	$port = $this->Port;
	}

	$tls = ($this->SMTPSecure == 'tls');
	$ssl = ($this->SMTPSecure == 'ssl');

	if ($this->smtp->Connect(($ssl ? 'ssl://':'').$host, $port, $this->Timeout)) {

	$hello = ($this->Helo != '' ? $this->Helo : $this->ServerHostname());
	$this->smtp->Hello($hello);

	if ($tls) {
	if (!$this->smtp->StartTLS()) {
	throw new phpmailerException($this->Lang('tls'));
	}

	//We must resend HELO after tls negotiation
	$this->smtp->Hello($hello);
	}

	$connection = true;
	if ($this->SMTPAuth) {
	if (!$this->smtp->Authenticate($this->Username, $this->Password)) {
	throw new phpmailerException($this->Lang('authenticate'));
	}
	}
	}
	$index++;
	if (!$connection) {
	throw new phpmailerException($this->Lang('connect_host'));
	}
	}
	} catch (phpmailerException $e) {
	$this->smtp->Reset();
	throw $e;
	}
	return true;
	}

	/**
	* Closes the active SMTP session if one exists.
	* @return void
	*/
	public function SmtpClose() {
	if(!is_null($this->smtp)) {
	if($this->smtp->Connected()) {
	$this->smtp->Quit();
	$this->smtp->Close();
	}
	}
	}

	/**
	* Sets the language for all class error messages.
	* Returns false if it cannot load the language file. The default language is English.
	* @param string $langcode ISO 639-1 2-character language code (e.g. Portuguese: "br")
	* @param string $lang_path Path to the language file directory
	* @access public
	*/
	function SetLanguage($langcode = 'en', $lang_path = 'language/') {
	//Define full set of translatable strings
	$PHPMAILER_LANG = array(
	'provide_address' => 'You must provide at least one recipient email address.',
	'mailer_not_supported' => ' mailer is not supported.',
	'execute' => 'Could not execute: ',
	'instantiate' => 'Could not instantiate mail function.',
	'authenticate' => 'SMTP Error: Could not authenticate.',
	'from_failed' => 'The following From address failed: ',
	'recipients_failed' => 'SMTP Error: The following recipients failed: ',
	'data_not_accepted' => 'SMTP Error: Data not accepted.',
	'connect_host' => 'SMTP Error: Could not connect to SMTP host.',
	'file_access' => 'Could not access file: ',
	'file_open' => 'File Error: Could not open file: ',
	'encoding' => 'Unknown encoding: ',
	'signing' => 'Signing Error: ',
	'smtp_error' => 'SMTP server error: ',
	'empty_message' => 'Message body empty',
	'invalid_address' => 'Invalid address',
	'variable_set' => 'Cannot set or reset variable: '
	);
	//Overwrite language-specific strings. This way we'll never have missing translations - no more "language string failed to load"!
	$l = true;
	if ($langcode != 'en') { //There is no English translation file
	$l = @include $lang_path.'phpmailer.lang-'.$langcode.'.php';
	}
	$this->language = $PHPMAILER_LANG;
	return ($l == true); //Returns false if language not found
	}

	/**
	* Return the current array of language strings
	* @return array
	*/
	public function GetTranslations() {
	return $this->language;
	}

	/////////////////////////////////////////////////
	// METHODS, MESSAGE CREATION
	/////////////////////////////////////////////////

	/**
	* Creates recipient headers.
	* @access public
	* @return string
	*/
	public function AddrAppend($type, $addr) {
	$addr_str = $type . ': ';
	$addresses = array();
	foreach ($addr as $a) {
	$addresses[] = $this->AddrFormat($a);
	}
	$addr_str .= implode(', ', $addresses);
	$addr_str .= $this->LE;

	return $addr_str;
	}

	/**
	* Formats an address correctly.
	* @access public
	* @return string
	*/
	public function AddrFormat($addr) {
	if (empty($addr[1])) {
	return $this->SecureHeader($addr[0]);
	} else {
	return $this->EncodeHeader($this->SecureHeader($addr[1]), 'phrase') . " <" . $this->SecureHeader($addr[0]) . ">";
	}
	}

	/**
	* Wraps message for use with mailers that do not
	* automatically perform wrapping and for quoted-printable.
	* Original written by philippe.
	* @param string $message The message to wrap
	* @param integer $length The line length to wrap to
	* @param boolean $qp_mode Whether to run in Quoted-Printable mode
	* @access public
	* @return string
	*/
	public function WrapText($message, $length, $qp_mode = false) {
	$soft_break = ($qp_mode) ? sprintf(" =%s", $this->LE) : $this->LE;
	// If utf-8 encoding is used, we will need to make sure we don't
	// split multibyte characters when we wrap
	$is_utf8 = (strtolower($this->CharSet) == "utf-8");

	$message = $this->FixEOL($message);
	if (substr($message, -1) == $this->LE) {
	$message = substr($message, 0, -1);
	}

	$line = explode($this->LE, $message);
	$message = '';
	for ($i=0 ;$i < count($line); $i++) {
	$line_part = explode(' ', $line[$i]);
	$buf = '';
	for ($e = 0; $e<count($line_part); $e++) {
	$word = $line_part[$e];
	if ($qp_mode and (strlen($word) > $length)) {
	$space_left = $length - strlen($buf) - 1;
	if ($e != 0) {
	if ($space_left > 20) {
	$len = $space_left;
	if ($is_utf8) {
	$len = $this->UTF8CharBoundary($word, $len);
	} elseif (substr($word, $len - 1, 1) == "=") {
	$len--;
	} elseif (substr($word, $len - 2, 1) == "=") {
	$len -= 2;
	}
	$part = substr($word, 0, $len);
	$word = substr($word, $len);
	$buf .= ' ' . $part;
	$message .= $buf . sprintf("=%s", $this->LE);
	} else {
	$message .= $buf . $soft_break;
	}
	$buf = '';
	}
	while (strlen($word) > 0) {
	$len = $length;
	if ($is_utf8) {
	$len = $this->UTF8CharBoundary($word, $len);
	} elseif (substr($word, $len - 1, 1) == "=") {
	$len--;
	} elseif (substr($word, $len - 2, 1) == "=") {
	$len -= 2;
	}
	$part = substr($word, 0, $len);
	$word = substr($word, $len);

	if (strlen($word) > 0) {
	$message .= $part . sprintf("=%s", $this->LE);
	} else {
	$buf = $part;
	}
	}
	} else {
	$buf_o = $buf;
	$buf .= ($e == 0) ? $word : (' ' . $word);

	if (strlen($buf) > $length and $buf_o != '') {
	$message .= $buf_o . $soft_break;
	$buf = $word;
	}
	}
	}
	$message .= $buf . $this->LE;
	}

	return $message;
	}

	/**
	* Finds last character boundary prior to maxLength in a utf-8
	* quoted (printable) encoded string.
	* Original written by Colin Brown.
	* @access public
	* @param string $encodedText utf-8 QP text
	* @param int $maxLength find last character boundary prior to this length
	* @return int
	*/
	public function UTF8CharBoundary($encodedText, $maxLength) {
	$foundSplitPos = false;
	$lookBack = 3;
	while (!$foundSplitPos) {
	$lastChunk = substr($encodedText, $maxLength - $lookBack, $lookBack);
	$encodedCharPos = strpos($lastChunk, "=");
	if ($encodedCharPos !== false) {
	// Found start of encoded character byte within $lookBack block.
	// Check the encoded byte value (the 2 chars after the '=')
	$hex = substr($encodedText, $maxLength - $lookBack + $encodedCharPos + 1, 2);
	$dec = hexdec($hex);
	if ($dec < 128) { // Single byte character.
	// If the encoded char was found at pos 0, it will fit
	// otherwise reduce maxLength to start of the encoded char
	$maxLength = ($encodedCharPos == 0) ? $maxLength :
	$maxLength - ($lookBack - $encodedCharPos);
	$foundSplitPos = true;
	} elseif ($dec >= 192) { // First byte of a multi byte character
	// Reduce maxLength to split at start of character
	$maxLength = $maxLength - ($lookBack - $encodedCharPos);
	$foundSplitPos = true;
	} elseif ($dec < 192) { // Middle byte of a multi byte character, look further back
	$lookBack += 3;
	}
	} else {
	// No encoded character found
	$foundSplitPos = true;
	}
	}
	return $maxLength;
	}


	/**
	* Set the body wrapping.
	* @access public
	* @return void
	*/
	public function SetWordWrap() {
	if($this->WordWrap < 1) {
	return;
	}

	switch($this->message_type) {
	case 'alt':
	case 'alt_attachments':
	$this->AltBody = $this->WrapText($this->AltBody, $this->WordWrap);
	break;
	default:
	$this->Body = $this->WrapText($this->Body, $this->WordWrap);
	break;
	}
	}

	/**
	* Assembles message header.
	* @access public
	* @return string The assembled header
	*/
	public function CreateHeader() {
	$result = '';

	// Set the boundaries
	$uniq_id = md5(uniqid(time()));
	$this->boundary[1] = 'b1_' . $uniq_id;
	$this->boundary[2] = 'b2_' . $uniq_id;

	$result .= $this->HeaderLine('Date', self::RFCDate());
	if($this->Sender == '') {
	$result .= $this->HeaderLine('Return-Path', trim($this->From));
	} else {
	$result .= $this->HeaderLine('Return-Path', trim($this->Sender));
	}

	// To be created automatically by mail()
	if($this->Mailer != 'mail') {
	if ($this->SingleTo === true) {
	foreach($this->to as $t) {
	$this->SingleToArray[] = $this->AddrFormat($t);
	}
	} else {
	if(count($this->to) > 0) {
	$result .= $this->AddrAppend('To', $this->to);
	} elseif (count($this->cc) == 0) {
	$result .= $this->HeaderLine('To', 'undisclosed-recipients:;');
	}
	}
	}

	$from = array();
	$from[0][0] = trim($this->From);
	$from[0][1] = $this->FromName;
	$result .= $this->AddrAppend('From', $from);

	// sendmail and mail() extract Cc from the header before sending
	if(count($this->cc) > 0) {
	$result .= $this->AddrAppend('Cc', $this->cc);
	}

	// sendmail and mail() extract Bcc from the header before sending
	if((($this->Mailer == 'sendmail') \|\| ($this->Mailer == 'mail')) && (count($this->bcc) > 0)) {
	$result .= $this->AddrAppend('Bcc', $this->bcc);
	}

	if(count($this->ReplyTo) > 0) {
	$result .= $this->AddrAppend('Reply-to', $this->ReplyTo);
	}

	// mail() sets the subject itself
	if($this->Mailer != 'mail') {
	$result .= $this->HeaderLine('Subject', $this->EncodeHeader($this->SecureHeader($this->Subject)));
	}

	if($this->MessageID != '') {
	$result .= $this->HeaderLine('Message-ID',$this->MessageID);
	} else {
	$result .= sprintf("Message-ID: <%s@%s>%s", $uniq_id, $this->ServerHostname(), $this->LE);
	}
	$result .= $this->HeaderLine('X-Priority', $this->Priority);
	$result .= $this->HeaderLine('X-Mailer', 'PHPMailer '.$this->Version.' (phpmailer.sourceforge.net)');

	if($this->ConfirmReadingTo != '') {
	$result .= $this->HeaderLine('Disposition-Notification-To', '<' . trim($this->ConfirmReadingTo) . '>');
	}

	// Add custom headers
	for($index = 0; $index < count($this->CustomHeader); $index++) {
	$result .= $this->HeaderLine(trim($this->CustomHeader[$index][0]), $this->EncodeHeader(trim($this->CustomHeader[$index][1])));
	}
	if (!$this->sign_key_file) {
	$result .= $this->HeaderLine('MIME-Version', '1.0');
	$result .= $this->GetMailMIME();
	}

	return $result;
	}

	/**
	* Returns the message MIME.
	* @access public
	* @return string
	*/
	public function GetMailMIME() {
	$result = '';
	switch($this->message_type) {
	case 'plain':
	$result .= $this->HeaderLine('Content-Transfer-Encoding', $this->Encoding);
	$result .= sprintf("Content-Type: %s; charset=\"%s\"", $this->ContentType, $this->CharSet);
	break;
	case 'attachments':
	case 'alt_attachments':
	if($this->InlineImageExists()){
	$result .= sprintf("Content-Type: %s;%s\ttype=\"text/html\";%s\tboundary=\"%s\"%s", 'multipart/related', $this->LE, $this->LE, $this->boundary[1], $this->LE);
	} else {
	$result .= $this->HeaderLine('Content-Type', 'multipart/mixed;');
	$result .= $this->TextLine("\tboundary=\"" . $this->boundary[1] . '"');
	}
	break;
	case 'alt':
	$result .= $this->HeaderLine('Content-Type', 'multipart/alternative;');
	$result .= $this->TextLine("\tboundary=\"" . $this->boundary[1] . '"');
	break;
	}

	if($this->Mailer != 'mail') {
	$result .= $this->LE.$this->LE;
	}

	return $result;
	}

	/**
	* Assembles the message body. Returns an empty string on failure.
	* @access public
	* @return string The assembled message body
	*/
	public function CreateBody() {
	$body = '';

	if ($this->sign_key_file) {
	$body .= $this->GetMailMIME();
	}

	$this->SetWordWrap();

	switch($this->message_type) {
	case 'alt':
	$body .= $this->GetBoundary($this->boundary[1], '', 'text/plain', '');
	$body .= $this->EncodeString($this->AltBody, $this->Encoding);
	$body .= $this->LE.$this->LE;
	$body .= $this->GetBoundary($this->boundary[1], '', 'text/html', '');
	$body .= $this->EncodeString($this->Body, $this->Encoding);
	$body .= $this->LE.$this->LE;
	$body .= $this->EndBoundary($this->boundary[1]);
	break;
	case 'plain':
	$body .= $this->EncodeString($this->Body, $this->Encoding);
	break;
	case 'attachments':
	$body .= $this->GetBoundary($this->boundary[1], '', '', '');
	$body .= $this->EncodeString($this->Body, $this->Encoding);
	$body .= $this->LE;
	$body .= $this->AttachAll();
	break;
	case 'alt_attachments':
	$body .= sprintf("--%s%s", $this->boundary[1], $this->LE);
	$body .= sprintf("Content-Type: %s;%s" . "\tboundary=\"%s\"%s", 'multipart/alternative', $this->LE, $this->boundary[2], $this->LE.$this->LE);
	$body .= $this->GetBoundary($this->boundary[2], '', 'text/plain', '') . $this->LE; // Create text body
	$body .= $this->EncodeString($this->AltBody, $this->Encoding);
	$body .= $this->LE.$this->LE;
	$body .= $this->GetBoundary($this->boundary[2], '', 'text/html', '') . $this->LE; // Create the HTML body
	$body .= $this->EncodeString($this->Body, $this->Encoding);
	$body .= $this->LE.$this->LE;
	$body .= $this->EndBoundary($this->boundary[2]);
	$body .= $this->AttachAll();
	break;
	}

	if ($this->IsError()) {
	$body = '';
	} elseif ($this->sign_key_file) {
	try {
	$file = tempnam('', 'mail');
	file_put_contents($file, $body); //TODO check this worked
	$signed = tempnam("", "signed");
	if (@openssl_pkcs7_sign($file, $signed, "file://".$this->sign_cert_file, array("file://".$this->sign_key_file, $this->sign_key_pass), NULL)) {
	@unlink($file);
	@unlink($signed);
	$body = file_get_contents($signed);
	} else {
	@unlink($file);
	@unlink($signed);
	throw new phpmailerException($this->Lang("signing").openssl_error_string());
	}
	} catch (phpmailerException $e) {
	$body = '';
	if ($this->exceptions) {
	throw $e;
	}
	}
	}

	return $body;
	}

	/**
	* Returns the start of a message boundary.
	* @access private
	*/
	private function GetBoundary($boundary, $charSet, $contentType, $encoding) {
	$result = '';
	if($charSet == '') {
	$charSet = $this->CharSet;
	}
	if($contentType == '') {
	$contentType = $this->ContentType;
	}
	if($encoding == '') {
	$encoding = $this->Encoding;
	}
	$result .= $this->TextLine('--' . $boundary);
	$result .= sprintf("Content-Type: %s; charset = \"%s\"", $contentType, $charSet);
	$result .= $this->LE;
	$result .= $this->HeaderLine('Content-Transfer-Encoding', $encoding);
	$result .= $this->LE;

	return $result;
	}

	/**
	* Returns the end of a message boundary.
	* @access private
	*/
	private function EndBoundary($boundary) {
	return $this->LE . '--' . $boundary . '--' . $this->LE;
	}

	/**
	* Sets the message type.
	* @access private
	* @return void
	*/
	private function SetMessageType() {
	if(count($this->attachment) < 1 && strlen($this->AltBody) < 1) {
	$this->message_type = 'plain';
	} else {
	if(count($this->attachment) > 0) {
	$this->message_type = 'attachments';
	}
	if(strlen($this->AltBody) > 0 && count($this->attachment) < 1) {
	$this->message_type = 'alt';
	}
	if(strlen($this->AltBody) > 0 && count($this->attachment) > 0) {
	$this->message_type = 'alt_attachments';
	}
	}
	}

	/**
	* Returns a formatted header line.
	* @access public
	* @return string
	*/
	public function HeaderLine($name, $value) {
	return $name . ': ' . $value . $this->LE;
	}

	/**
	* Returns a formatted mail line.
	* @access public
	* @return string
	*/
	public function TextLine($value) {
	return $value . $this->LE;
	}

	/////////////////////////////////////////////////
	// CLASS METHODS, ATTACHMENTS
	/////////////////////////////////////////////////

	/**
	* Adds an attachment from a path on the filesystem.
	* Returns false if the file could not be found
	* or accessed.
	* @param string $path Path to the attachment.
	* @param string $name Overrides the attachment name.
	* @param string $encoding File encoding (see $Encoding).
	* @param string $type File extension (MIME) type.
	* @return bool
	*/
	public function AddAttachment($path, $name = '', $encoding = 'base64', $type = 'application/octet-stream') {
	try {
	if ( !@is_file($path) ) {
	throw new phpmailerException($this->Lang('file_access') . $path, self::STOP_CONTINUE);
	}
	$filename = basename($path);
	if ( $name == '' ) {
	$name = $filename;
	}

	$this->attachment[] = array(
	0 => $path,
	1 => $filename,
	2 => $name,
	3 => $encoding,
	4 => $type,
	5 => false, // isStringAttachment
	6 => 'attachment',
	7 => 0
	);

	} catch (phpmailerException $e) {
	$this->SetError($e->getMessage());
	if ($this->exceptions) {
	throw $e;
	}
	echo $e->getMessage()."\n";
	if ( $e->getCode() == self::STOP_CRITICAL ) {
	return false;
	}
	}
	return true;
	}

	/**
	* Return the current array of attachments
	* @return array
	*/
	public function GetAttachments() {
	return $this->attachment;
	}

	/**
	* Attaches all fs, string, and binary attachments to the message.
	* Returns an empty string on failure.
	* @access private
	* @return string
	*/
	private function AttachAll() {
	// Return text of body
	$mime = array();
	$cidUniq = array();
	$incl = array();

	// Add all attachments
	foreach ($this->attachment as $attachment) {
	// Check for string attachment
	$bString = $attachment[5];
	if ($bString) {
	$string = $attachment[0];
	} else {
	$path = $attachment[0];
	}

	if (in_array($attachment[0], $incl)) { continue; }
	$filename = $attachment[1];
	$name = $attachment[2];
	$encoding = $attachment[3];
	$type = $attachment[4];
	$disposition = $attachment[6];
	$cid = $attachment[7];
	$incl[] = $attachment[0];
	if ( $disposition == 'inline' && isset($cidUniq[$cid]) ) { continue; }
	$cidUniq[$cid] = true;

	$mime[] = sprintf("--%s%s", $this->boundary[1], $this->LE);
	$mime[] = sprintf("Content-Type: %s; name=\"%s\"%s", $type, $this->EncodeHeader($this->SecureHeader($name)), $this->LE);
	$mime[] = sprintf("Content-Transfer-Encoding: %s%s", $encoding, $this->LE);

	if($disposition == 'inline') {
	$mime[] = sprintf("Content-ID: <%s>%s", $cid, $this->LE);
	}

	$mime[] = sprintf("Content-Disposition: %s; filename=\"%s\"%s", $disposition, $this->EncodeHeader($this->SecureHeader($name)), $this->LE.$this->LE);

	// Encode as string attachment
	if($bString) {
	$mime[] = $this->EncodeString($string, $encoding);
	if($this->IsError()) {
	return '';
	}
	$mime[] = $this->LE.$this->LE;
	} else {
	$mime[] = $this->EncodeFile($path, $encoding);
	if($this->IsError()) {
	return '';
	}
	$mime[] = $this->LE.$this->LE;
	}
	}

	$mime[] = sprintf("--%s--%s", $this->boundary[1], $this->LE);

	return join('', $mime);
	}

	/**
	* Encodes attachment in requested format.
	* Returns an empty string on failure.
	* @param string $path The full path to the file
	* @param string $encoding The encoding to use; one of 'base64', '7bit', '8bit', 'binary', 'quoted-printable'
	* @see EncodeFile()
	* @access private
	* @return string
	*/
	private function EncodeFile($path, $encoding = 'base64') {
	try {
	if (!is_readable($path)) {
	throw new phpmailerException($this->Lang('file_open') . $path, self::STOP_CONTINUE);
	}
	if (function_exists('get_magic_quotes')) {
	function get_magic_quotes() {
	return false;
	}
	}
	if (PHP_VERSION < 6) {
	$magic_quotes = get_magic_quotes_runtime();
	set_magic_quotes_runtime(0);
	}
	$file_buffer = file_get_contents($path);
	$file_buffer = $this->EncodeString($file_buffer, $encoding);
	if (PHP_VERSION < 6) { set_magic_quotes_runtime($magic_quotes); }
	return $file_buffer;
	} catch (Exception $e) {
	$this->SetError($e->getMessage());
	return '';
	}
	}

	/**
	* Encodes string to requested format.
	* Returns an empty string on failure.
	* @param string $str The text to encode
	* @param string $encoding The encoding to use; one of 'base64', '7bit', '8bit', 'binary', 'quoted-printable'
	* @access public
	* @return string
	*/
	public function EncodeString ($str, $encoding = 'base64') {
	$encoded = '';
	switch(strtolower($encoding)) {
	case 'base64':
	$encoded = chunk_split(base64_encode($str), 76, $this->LE);
	break;
	case '7bit':
	case '8bit':
	$encoded = $this->FixEOL($str);
	//Make sure it ends with a line break
	if (substr($encoded, -(strlen($this->LE))) != $this->LE)
	$encoded .= $this->LE;
	break;
	case 'binary':
	$encoded = $str;
	break;
	case 'quoted-printable':
	$encoded = $this->EncodeQP($str);
	break;
	default:
	$this->SetError($this->Lang('encoding') . $encoding);
	break;
	}
	return $encoded;
	}

	/**
	* Encode a header string to best (shortest) of Q, B, quoted or none.
	* @access public
	* @return string
	*/
	public function EncodeHeader($str, $position = 'text') {
	$x = 0;

	switch (strtolower($position)) {
	case 'phrase':
	if (!preg_match('/[\200-\377]/', $str)) {
	// Can't use addslashes as we don't know what value has magic_quotes_sybase
	$encoded = addcslashes($str, "\0..\37\177\\\"");
	if (($str == $encoded) && !preg_match('/[^A-Za-z0-9!#$%&\'*+\/=?^_`{\|}~ -]/', $str)) {
	return ($encoded);
	} else {
	return ("\"$encoded\"");
	}
	}
	$x = preg_match_all('/[^\040\041\043-\133\135-\176]/', $str, $matches);
	break;
	case 'comment':
	$x = preg_match_all('/[()"]/', $str, $matches);
	// Fall-through
	case 'text':
	default:
	$x += preg_match_all('/[\000-\010\013\014\016-\037\177-\377]/', $str, $matches);
	break;
	}

	if ($x == 0) {
	return ($str);
	}

	$maxlen = 75 - 7 - strlen($this->CharSet);
	// Try to select the encoding which should produce the shortest output
	if (strlen($str)/3 < $x) {
	$encoding = 'B';
	if (function_exists('mb_strlen') && $this->HasMultiBytes($str)) {
	// Use a custom function which correctly encodes and wraps long
	// multibyte strings without breaking lines within a character
	$encoded = $this->Base64EncodeWrapMB($str);
	} else {
	$encoded = base64_encode($str);
	$maxlen -= $maxlen % 4;
	$encoded = trim(chunk_split($encoded, $maxlen, "\n"));
	}
	} else {
	$encoding = 'Q';
	$encoded = $this->EncodeQ($str, $position);
	$encoded = $this->WrapText($encoded, $maxlen, true);
	$encoded = str_replace('='.$this->LE, "\n", trim($encoded));
	}

	$encoded = preg_replace('/^(.*)$/m', " =?".$this->CharSet."?$encoding?\\1?=", $encoded);
	$encoded = trim(str_replace("\n", $this->LE, $encoded));

	return $encoded;
	}

	/**
	* Checks if a string contains multibyte characters.
	* @access public
	* @param string $str multi-byte text to wrap encode
	* @return bool
	*/
	public function HasMultiBytes($str) {
	if (function_exists('mb_strlen')) {
	return (strlen($str) > mb_strlen($str, $this->CharSet));
	} else { // Assume no multibytes (we can't handle without mbstring functions anyway)
	return false;
	}
	}

	/**
	* Correctly encodes and wraps long multibyte strings for mail headers
	* without breaking lines within a character.
	* Adapted from a function by paravoid at http://uk.php.net/manual/en/function.mb-encode-mimeheader.php
	* @access public
	* @param string $str multi-byte text to wrap encode
	* @return string
	*/
	public function Base64EncodeWrapMB($str) {
	$start = "=?".$this->CharSet."?B?";
	$end = "?=";
	$encoded = "";

	$mb_length = mb_strlen($str, $this->CharSet);
	// Each line must have length <= 75, including $start and $end
	$length = 75 - strlen($start) - strlen($end);
	// Average multi-byte ratio
	$ratio = $mb_length / strlen($str);
	// Base64 has a 4:3 ratio
	$offset = $avgLength = floor($length * $ratio * .75);

	for ($i = 0; $i < $mb_length; $i += $offset) {
	$lookBack = 0;

	do {
	$offset = $avgLength - $lookBack;
	$chunk = mb_substr($str, $i, $offset, $this->CharSet);
	$chunk = base64_encode($chunk);
	$lookBack++;
	}
	while (strlen($chunk) > $length);

	$encoded .= $chunk . $this->LE;
	}

	// Chomp the last linefeed
	$encoded = substr($encoded, 0, -strlen($this->LE));
	return $encoded;
	}

	/**
	* Encode string to quoted-printable.
	* Only uses standard PHP, slow, but will always work
	* @access public
	* @param string $string the text to encode
	* @param integer $line_max Number of chars allowed on a line before wrapping
	* @return string
	*/
	public function EncodeQPphp( $input = '', $line_max = 76, $space_conv = false) {
	$hex = array('0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F');
	$lines = preg_split('/(?:\r\n\|\r\|\n)/', $input);
	$eol = "\r\n";
	$escape = '=';
	$output = '';
	while( list(, $line) = each($lines) ) {
	$linlen = strlen($line);
	$newline = '';
	for($i = 0; $i < $linlen; $i++) {
	$c = substr( $line, $i, 1 );
	$dec = ord( $c );
	if ( ( $i == 0 ) && ( $dec == 46 ) ) { // convert first point in the line into =2E
	$c = '=2E';
	}
	if ( $dec == 32 ) {
	if ( $i == ( $linlen - 1 ) ) { // convert space at eol only
	$c = '=20';
	} else if ( $space_conv ) {
	$c = '=20';
	}
	} elseif ( ($dec == 61) \|\| ($dec < 32 ) \|\| ($dec > 126) ) { // always encode "\t", which is not required
	$h2 = floor($dec/16);
	$h1 = floor($dec%16);
	$c = $escape.$hex[$h2].$hex[$h1];
	}
	if ( (strlen($newline) + strlen($c)) >= $line_max ) { // CRLF is not counted
	$output .= $newline.$escape.$eol; // soft line break; " =\r\n" is okay
	$newline = '';
	// check if newline first character will be point or not
	if ( $dec == 46 ) {
	$c = '=2E';
	}
	}
	$newline .= $c;
	} // end of for
	$output .= $newline.$eol;
	} // end of while
	return $output;
	}

	/**
	* Encode string to RFC2045 (6.7) quoted-printable format
	* Uses a PHP5 stream filter to do the encoding about 64x faster than the old version
	* Also results in same content as you started with after decoding
	* @see EncodeQPphp()
	* @access public
	* @param string $string the text to encode
	* @param integer $line_max Number of chars allowed on a line before wrapping
	* @param boolean $space_conv Dummy param for compatibility with existing EncodeQP function
	* @return string
	* @author Marcus Bointon
	*/
	public function EncodeQP($string, $line_max = 76, $space_conv = false) {
	if (function_exists('quoted_printable_encode')) { //Use native function if it's available (>= PHP5.3)
	return quoted_printable_encode($string);
	}
	$filters = stream_get_filters();
	if (!in_array('convert.*', $filters)) { //Got convert stream filter?
	return $this->EncodeQPphp($string, $line_max, $space_conv); //Fall back to old implementation
	}
	$fp = fopen('php://temp/', 'r+');
	$string = preg_replace('/\r\n?/', $this->LE, $string); //Normalise line breaks
	$params = array('line-length' => $line_max, 'line-break-chars' => $this->LE);
	$s = stream_filter_append($fp, 'convert.quoted-printable-encode', STREAM_FILTER_READ, $params);
	fputs($fp, $string);
	rewind($fp);
	$out = stream_get_contents($fp);
	stream_filter_remove($s);
	$out = preg_replace('/^\./m', '=2E', $out); //Encode . if it is first char on a line, workaround for bug in Exchange
	fclose($fp);
	return $out;
	}

	+ /**
	+ * NOTE: Phabricator patch to remove use of "/e". See D2147.
	+ */
	+ private function encodeQCallback(array $matches) {
	+ return '='.sprintf('%02X', ord($matches[1]));
	+ }
	+
	/**
	* Encode string to q encoding.
	* @link http://tools.ietf.org/html/rfc2047
	* @param string $str the text to encode
	* @param string $position Where the text is going to be used, see the RFC for what that means
	* @access public
	* @return string
	*/
	public function EncodeQ ($str, $position = 'text') {
	+
	+ // NOTE: Phabricator patch to remove use of "/e". See D2147.
	+
	// There should not be any EOL in the string
	$encoded = preg_replace('/[\r\n]*/', '', $str);

	switch (strtolower($position)) {
	case 'phrase':
	- $encoded = preg_replace("/([^A-Za-z0-9!*+\/ -])/", "'='.sprintf('%02X', ord('\\1'))", $encoded);
	+ $encoded = preg_replace_callback(
	+ "/([^A-Za-z0-9!*+\/ -])/",
	+ array($this, 'encodeQCallback'),
	+ $encoded);
	break;
	case 'comment':
	- $encoded = preg_replace("/([\"])/", "'='.sprintf('%02X', ord('\\1'))", $encoded);
	+ $encoded = preg_replace_callback(
	+ "/([\"])/",
	+ array($this, 'encodeQCallback'),
	+ $encoded);
	+ break;
	case 'text':
	default:
	// Replace every high ascii, control =, ? and _ characters
	- //TODO using /e (equivalent to eval()) is probably not a good idea
	- $encoded = preg_replace('/([\000-\011\013\014\016-\037\075\077\137\177-\377])/',
	- "'='.sprintf('%02X', ord('\\1'))", $encoded);
	+ $encoded = preg_replace_callback(
	+ '/([\000-\011\013\014\016-\037\075\077\137\177-\377])/',
	+ array($this, 'encodeQCallback'),
	+ $encoded);
	break;
	}

	// Replace every spaces to _ (more readable than =20)
	$encoded = str_replace(' ', '_', $encoded);

	return $encoded;
	}

	/**
	* Adds a string or binary attachment (non-filesystem) to the list.
	* This method can be used to attach ascii or binary data,
	* such as a BLOB record from a database.
	* @param string $string String attachment data.
	* @param string $filename Name of the attachment.
	* @param string $encoding File encoding (see $Encoding).
	* @param string $type File extension (MIME) type.
	* @return void
	*/
	public function AddStringAttachment($string, $filename, $encoding = 'base64', $type = 'application/octet-stream') {
	// Append to $attachment array
	$this->attachment[] = array(
	0 => $string,
	1 => $filename,
	2 => basename($filename),
	3 => $encoding,
	4 => $type,
	5 => true, // isStringAttachment
	6 => 'attachment',
	7 => 0
	);
	}

	/**
	* Adds an embedded attachment. This can include images, sounds, and
	* just about any other document. Make sure to set the $type to an
	* image type. For JPEG images use "image/jpeg" and for GIF images
	* use "image/gif".
	* @param string $path Path to the attachment.
	* @param string $cid Content ID of the attachment. Use this to identify
	* the Id for accessing the image in an HTML form.
	* @param string $name Overrides the attachment name.
	* @param string $encoding File encoding (see $Encoding).
	* @param string $type File extension (MIME) type.
	* @return bool
	*/
	public function AddEmbeddedImage($path, $cid, $name = '', $encoding = 'base64', $type = 'application/octet-stream') {

	if ( !@is_file($path) ) {
	$this->SetError($this->Lang('file_access') . $path);
	return false;
	}

	$filename = basename($path);
	if ( $name == '' ) {
	$name = $filename;
	}

	// Append to $attachment array
	$this->attachment[] = array(
	0 => $path,
	1 => $filename,
	2 => $name,
	3 => $encoding,
	4 => $type,
	5 => false, // isStringAttachment
	6 => 'inline',
	7 => $cid
	);

	return true;
	}

	/**
	* Returns true if an inline attachment is present.
	* @access public
	* @return bool
	*/
	public function InlineImageExists() {
	foreach($this->attachment as $attachment) {
	if ($attachment[6] == 'inline') {
	return true;
	}
	}
	return false;
	}

	/////////////////////////////////////////////////
	// CLASS METHODS, MESSAGE RESET
	/////////////////////////////////////////////////

	/**
	* Clears all recipients assigned in the TO array. Returns void.
	* @return void
	*/
	public function ClearAddresses() {
	foreach($this->to as $to) {
	unset($this->all_recipients[strtolower($to[0])]);
	}
	$this->to = array();
	}

	/**
	* Clears all recipients assigned in the CC array. Returns void.
	* @return void
	*/
	public function ClearCCs() {
	foreach($this->cc as $cc) {
	unset($this->all_recipients[strtolower($cc[0])]);
	}
	$this->cc = array();
	}

	/**
	* Clears all recipients assigned in the BCC array. Returns void.
	* @return void
	*/
	public function ClearBCCs() {
	foreach($this->bcc as $bcc) {
	unset($this->all_recipients[strtolower($bcc[0])]);
	}
	$this->bcc = array();
	}

	/**
	* Clears all recipients assigned in the ReplyTo array. Returns void.
	* @return void
	*/
	public function ClearReplyTos() {
	$this->ReplyTo = array();
	}

	/**
	* Clears all recipients assigned in the TO, CC and BCC
	* array. Returns void.
	* @return void
	*/
	public function ClearAllRecipients() {
	$this->to = array();
	$this->cc = array();
	$this->bcc = array();
	$this->all_recipients = array();
	}

	/**
	* Clears all previously set filesystem, string, and binary
	* attachments. Returns void.
	* @return void
	*/
	public function ClearAttachments() {
	$this->attachment = array();
	}

	/**
	* Clears all custom headers. Returns void.
	* @return void
	*/
	public function ClearCustomHeaders() {
	$this->CustomHeader = array();
	}

	/////////////////////////////////////////////////
	// CLASS METHODS, MISCELLANEOUS
	/////////////////////////////////////////////////

	/**
	* Adds the error message to the error container.
	* @access protected
	* @return void
	*/
	protected function SetError($msg) {
	$this->error_count++;
	if ($this->Mailer == 'smtp' and !is_null($this->smtp)) {
	$lasterror = $this->smtp->getError();
	if (!empty($lasterror) and array_key_exists('smtp_msg', $lasterror)) {
	$msg .= '<p>' . $this->Lang('smtp_error') . $lasterror['smtp_msg'] . "</p>\n";
	}
	}
	$this->ErrorInfo = $msg;
	}

	/**
	* Returns the proper RFC 822 formatted date.
	* @access public
	* @return string
	* @static
	*/
	public static function RFCDate() {
	$tz = date('Z');
	$tzs = ($tz < 0) ? '-' : '+';
	$tz = abs($tz);
	$tz = (int)($tz/3600)*100 + ($tz%3600)/60;
	$result = sprintf("%s %s%04d", date('D, j M Y H:i:s'), $tzs, $tz);

	return $result;
	}

	/**
	* Returns the server hostname or 'localhost.localdomain' if unknown.
	* @access private
	* @return string
	*/
	private function ServerHostname() {
	if (!empty($this->Hostname)) {
	$result = $this->Hostname;
	} elseif (isset($_SERVER['SERVER_NAME'])) {
	$result = $_SERVER['SERVER_NAME'];
	} else {
	$result = 'localhost.localdomain';
	}

	return $result;
	}

	/**
	* Returns a message in the appropriate language.
	* @access private
	* @return string
	*/
	private function Lang($key) {
	if(count($this->language) < 1) {
	$this->SetLanguage('en'); // set the default language
	}

	if(isset($this->language[$key])) {
	return $this->language[$key];
	} else {
	return 'Language string failed to load: ' . $key;
	}
	}

	/**
	* Returns true if an error occurred.
	* @access public
	* @return bool
	*/
	public function IsError() {
	return ($this->error_count > 0);
	}

	/**
	* Changes every end of line from CR or LF to CRLF.
	* @access private
	* @return string
	*/
	private function FixEOL($str) {
	$str = str_replace("\r\n", "\n", $str);
	$str = str_replace("\r", "\n", $str);
	$str = str_replace("\n", $this->LE, $str);
	return $str;
	}

	/**
	* Adds a custom header.
	* @access public
	* @return void
	*/
	public function AddCustomHeader($custom_header) {
	$this->CustomHeader[] = explode(':', $custom_header, 2);
	}

	/**
	* Evaluates the message and returns modifications for inline images and backgrounds
	* @access public
	* @return $message
	*/
	public function MsgHTML($message, $basedir = '') {
	preg_match_all("/(src\|background)=\"(.*)\"/Ui", $message, $images);
	if(isset($images[2])) {
	foreach($images[2] as $i => $url) {
	// do not change urls for absolute images (thanks to corvuscorax)
	if (!preg_match('#^[A-z]+://#',$url)) {
	$filename = basename($url);
	$directory = dirname($url);
	($directory == '.')?$directory='':'';
	$cid = 'cid:' . md5($filename);
	$ext = pathinfo($filename, PATHINFO_EXTENSION);
	$mimeType = self::_mime_types($ext);
	if ( strlen($basedir) > 1 && substr($basedir,-1) != '/') { $basedir .= '/'; }
	if ( strlen($directory) > 1 && substr($directory,-1) != '/') { $directory .= '/'; }
	if ( $this->AddEmbeddedImage($basedir.$directory.$filename, md5($filename), $filename, 'base64',$mimeType) ) {
	$message = preg_replace("/".$images[1][$i]."=\"".preg_quote($url, '/')."\"/Ui", $images[1][$i]."=\"".$cid."\"", $message);
	}
	}
	}
	}
	$this->IsHTML(true);
	$this->Body = $message;
	$textMsg = trim(strip_tags(preg_replace('/<(head\|title\|style\|script)[^>]>.?<\/\\1>/s','',$message)));
	if (!empty($textMsg) && empty($this->AltBody)) {
	$this->AltBody = html_entity_decode($textMsg);
	}
	if (empty($this->AltBody)) {
	$this->AltBody = 'To view this email message, open it in a program that understands HTML!' . "\n\n";
	}
	}

	/**
	* Gets the MIME type of the embedded or inline image
	* @param string File extension
	* @access public
	* @return string MIME type of ext
	* @static
	*/
	public static function _mime_types($ext = '') {
	$mimes = array(
	'hqx' => 'application/mac-binhex40',
	'cpt' => 'application/mac-compactpro',
	'doc' => 'application/msword',
	'bin' => 'application/macbinary',
	'dms' => 'application/octet-stream',
	'lha' => 'application/octet-stream',
	'lzh' => 'application/octet-stream',
	'exe' => 'application/octet-stream',
	'class' => 'application/octet-stream',
	'psd' => 'application/octet-stream',
	'so' => 'application/octet-stream',
	'sea' => 'application/octet-stream',
	'dll' => 'application/octet-stream',
	'oda' => 'application/oda',
	'pdf' => 'application/pdf',
	'ai' => 'application/postscript',
	'eps' => 'application/postscript',
	'ps' => 'application/postscript',
	'smi' => 'application/smil',
	'smil' => 'application/smil',
	'mif' => 'application/vnd.mif',
	'xls' => 'application/vnd.ms-excel',
	'ppt' => 'application/vnd.ms-powerpoint',
	'wbxml' => 'application/vnd.wap.wbxml',
	'wmlc' => 'application/vnd.wap.wmlc',
	'dcr' => 'application/x-director',
	'dir' => 'application/x-director',
	'dxr' => 'application/x-director',
	'dvi' => 'application/x-dvi',
	'gtar' => 'application/x-gtar',
	'php' => 'application/x-httpd-php',
	'php4' => 'application/x-httpd-php',
	'php3' => 'application/x-httpd-php',
	'phtml' => 'application/x-httpd-php',
	'phps' => 'application/x-httpd-php-source',
	'js' => 'application/x-javascript',
	'swf' => 'application/x-shockwave-flash',
	'sit' => 'application/x-stuffit',
	'tar' => 'application/x-tar',
	'tgz' => 'application/x-tar',
	'xhtml' => 'application/xhtml+xml',
	'xht' => 'application/xhtml+xml',
	'zip' => 'application/zip',
	'mid' => 'audio/midi',
	'midi' => 'audio/midi',
	'mpga' => 'audio/mpeg',
	'mp2' => 'audio/mpeg',
	'mp3' => 'audio/mpeg',
	'aif' => 'audio/x-aiff',
	'aiff' => 'audio/x-aiff',
	'aifc' => 'audio/x-aiff',
	'ram' => 'audio/x-pn-realaudio',
	'rm' => 'audio/x-pn-realaudio',
	'rpm' => 'audio/x-pn-realaudio-plugin',
	'ra' => 'audio/x-realaudio',
	'rv' => 'video/vnd.rn-realvideo',
	'wav' => 'audio/x-wav',
	'bmp' => 'image/bmp',
	'gif' => 'image/gif',
	'jpeg' => 'image/jpeg',
	'jpg' => 'image/jpeg',
	'jpe' => 'image/jpeg',
	'png' => 'image/png',
	'tiff' => 'image/tiff',
	'tif' => 'image/tiff',
	'css' => 'text/css',
	'html' => 'text/html',
	'htm' => 'text/html',
	'shtml' => 'text/html',
	'txt' => 'text/plain',
	'text' => 'text/plain',
	'log' => 'text/plain',
	'rtx' => 'text/richtext',
	'rtf' => 'text/rtf',
	'xml' => 'text/xml',
	'xsl' => 'text/xml',
	'mpeg' => 'video/mpeg',
	'mpg' => 'video/mpeg',
	'mpe' => 'video/mpeg',
	'qt' => 'video/quicktime',
	'mov' => 'video/quicktime',
	'avi' => 'video/x-msvideo',
	'movie' => 'video/x-sgi-movie',
	'doc' => 'application/msword',
	'word' => 'application/msword',
	'xl' => 'application/excel',
	'eml' => 'message/rfc822'
	);
	return (!isset($mimes[strtolower($ext)])) ? 'application/octet-stream' : $mimes[strtolower($ext)];
	}

	/**
	* Set (or reset) Class Objects (variables)
	*
	* Usage Example:
	* $page->set('X-Priority', '3');
	*
	* @access public
	* @param string $name Parameter Name
	* @param mixed $value Parameter Value
	* NOTE: will not work with arrays, there are no arrays to set/reset
	* @todo Should this not be using __set() magic function?
	*/
	public function set($name, $value = '') {
	try {
	if (isset($this->$name) ) {
	$this->$name = $value;
	} else {
	throw new phpmailerException($this->Lang('variable_set') . $name, self::STOP_CRITICAL);
	}
	} catch (Exception $e) {
	$this->SetError($e->getMessage());
	if ($e->getCode() == self::STOP_CRITICAL) {
	return false;
	}
	}
	return true;
	}

	/**
	* Strips newlines to prevent header injection.
	* @access public
	* @param string $str String
	* @return string
	*/
	public function SecureHeader($str) {
	$str = str_replace("\r", '', $str);
	$str = str_replace("\n", '', $str);
	return trim($str);
	}

	/**
	* Set the private key file and password to sign the message.
	*
	* @access public
	* @param string $key_filename Parameter File Name
	* @param string $key_pass Password for private key
	*/
	public function Sign($cert_filename, $key_filename, $key_pass) {
	$this->sign_cert_file = $cert_filename;
	$this->sign_key_file = $key_filename;
	$this->sign_key_pass = $key_pass;
	}

	/**
	* Set the private key file and password to sign the message.
	*
	* @access public
	* @param string $key_filename Parameter File Name
	* @param string $key_pass Password for private key
	*/
	public function DKIM_QP($txt) {
	$tmp="";
	$line="";
	for ($i=0;$i<strlen($txt);$i++) {
	$ord=ord($txt[$i]);
	if ( ((0x21 <= $ord) && ($ord <= 0x3A)) \|\| $ord == 0x3C \|\| ((0x3E <= $ord) && ($ord <= 0x7E)) ) {
	$line.=$txt[$i];
	} else {
	$line.="=".sprintf("%02X",$ord);
	}
	}
	return $line;
	}

	/**
	* Generate DKIM signature
	*
	* @access public
	* @param string $s Header
	*/
	public function DKIM_Sign($s) {
	$privKeyStr = file_get_contents($this->DKIM_private);
	if ($this->DKIM_passphrase!='') {
	$privKey = openssl_pkey_get_private($privKeyStr,$this->DKIM_passphrase);
	} else {
	$privKey = $privKeyStr;
	}
	if (openssl_sign($s, $signature, $privKey)) {
	return base64_encode($signature);
	}
	}

	/**
	* Generate DKIM Canonicalization Header
	*
	* @access public
	* @param string $s Header
	*/
	public function DKIM_HeaderC($s) {
	$s=preg_replace("/\r\n\s+/"," ",$s);
	$lines=explode("\r\n",$s);
	foreach ($lines as $key=>$line) {
	list($heading,$value)=explode(":",$line,2);
	$heading=strtolower($heading);
	$value=preg_replace("/\s+/"," ",$value) ; // Compress useless spaces
	$lines[$key]=$heading.":".trim($value) ; // Don't forget to remove WSP around the value
	}
	$s=implode("\r\n",$lines);
	return $s;
	}

	/**
	* Generate DKIM Canonicalization Body
	*
	* @access public
	* @param string $body Message Body
	*/
	public function DKIM_BodyC($body) {
	if ($body == '') return "\r\n";
	// stabilize line endings
	$body=str_replace("\r\n","\n",$body);
	$body=str_replace("\n","\r\n",$body);
	// END stabilize line endings
	while (substr($body,strlen($body)-4,4) == "\r\n\r\n") {
	$body=substr($body,0,strlen($body)-2);
	}
	return $body;
	}

	/**
	* Create the DKIM header, body, as new header
	*
	* @access public
	* @param string $headers_line Header lines
	* @param string $subject Subject
	* @param string $body Body
	*/
	public function DKIM_Add($headers_line,$subject,$body) {
	$DKIMsignatureType = 'rsa-sha1'; // Signature & hash algorithms
	$DKIMcanonicalization = 'relaxed/simple'; // Canonicalization of header/body
	$DKIMquery = 'dns/txt'; // Query method
	$DKIMtime = time() ; // Signature Timestamp = seconds since 00:00:00 - Jan 1, 1970 (UTC time zone)
	$subject_header = "Subject: $subject";
	$headers = explode("\r\n",$headers_line);
	foreach($headers as $header) {
	if (strpos($header,'From:') === 0) {
	$from_header=$header;
	} elseif (strpos($header,'To:') === 0) {
	$to_header=$header;
	}
	}
	$from = str_replace('\|','=7C',$this->DKIM_QP($from_header));
	$to = str_replace('\|','=7C',$this->DKIM_QP($to_header));
	$subject = str_replace('\|','=7C',$this->DKIM_QP($subject_header)) ; // Copied header fields (dkim-quoted-printable
	$body = $this->DKIM_BodyC($body);
	$DKIMlen = strlen($body) ; // Length of body
	$DKIMb64 = base64_encode(pack("H*", sha1($body))) ; // Base64 of packed binary SHA-1 hash of body
	$ident = ($this->DKIM_identity == '')? '' : " i=" . $this->DKIM_identity . ";";
	$dkimhdrs = "DKIM-Signature: v=1; a=" . $DKIMsignatureType . "; q=" . $DKIMquery . "; l=" . $DKIMlen . "; s=" . $this->DKIM_selector . ";\r\n".
	"\tt=" . $DKIMtime . "; c=" . $DKIMcanonicalization . ";\r\n".
	"\th=From:To:Subject;\r\n".
	"\td=" . $this->DKIM_domain . ";" . $ident . "\r\n".
	"\tz=$from\r\n".
	"\t\|$to\r\n".
	"\t\|$subject;\r\n".
	"\tbh=" . $DKIMb64 . ";\r\n".
	"\tb=";
	$toSign = $this->DKIM_HeaderC($from_header . "\r\n" . $to_header . "\r\n" . $subject_header . "\r\n" . $dkimhdrs);
	$signed = $this->DKIM_Sign($toSign);
	return "X-PHPMAILER-DKIM: phpmailer.worxware.com\r\n".$dkimhdrs.$signed."\r\n";
	}

	protected function doCallback($isSent,$to,$cc,$bcc,$subject,$body) {
	if (!empty($this->action_function) && function_exists($this->action_function)) {
	$params = array($isSent,$to,$cc,$bcc,$subject,$body);
	call_user_func_array($this->action_function,$params);
	}
	}
	}

	class phpmailerException extends Exception {
	public function errorMessage() {
	$errorMsg = '<strong>' . $this->getMessage() . "</strong><br />\n";
	return $errorMsg;
	}
	}
	?>
	diff --git a/src/applications/metamta/adapter/PhabricatorMailImplementationPHPMailerAdapter.php b/src/applications/metamta/adapter/PhabricatorMailImplementationPHPMailerAdapter.php
	index bfb24f74f3..8c401842b6 100644
	--- a/src/applications/metamta/adapter/PhabricatorMailImplementationPHPMailerAdapter.php
	+++ b/src/applications/metamta/adapter/PhabricatorMailImplementationPHPMailerAdapter.php
	@@ -1,111 +1,116 @@
	<?php

	final class PhabricatorMailImplementationPHPMailerAdapter
	extends PhabricatorMailImplementationAdapter {

	/**
	* @phutil-external-symbol class PHPMailer
	*/
	public function __construct() {
	$root = phutil_get_library_root('phabricator');
	$root = dirname($root);
	require_once $root.'/externals/phpmailer/class.phpmailer.php';
	$this->mailer = new PHPMailer($use_exceptions = true);
	$this->mailer->CharSet = 'utf-8';

	// By default, PHPMailer sends one mail per recipient. We handle
	// multiplexing higher in the stack, so tell it to send mail exactly
	// like we ask.
	$this->mailer->SingleTo = false;

	$mailer = PhabricatorEnv::getEnvConfig('phpmailer.mailer');
	if ($mailer == 'smtp') {
	$this->mailer->IsSMTP();
	$this->mailer->Host = PhabricatorEnv::getEnvConfig('phpmailer.smtp-host');
	$this->mailer->Port = PhabricatorEnv::getEnvConfig('phpmailer.smtp-port');
	$user = PhabricatorEnv::getEnvConfig('phpmailer.smtp-user');
	if ($user) {
	$this->mailer->SMTPAuth = true;
	$this->mailer->Username = $user;
	$this->mailer->Password =
	PhabricatorEnv::getEnvConfig('phpmailer.smtp-password');
	}
	+
	+ $protocol = PhabricatorEnv::getEnvConfig('phpmailer.smtp-protocol');
	+ if ($protocol) {
	+ $this->mailer->SMTPSecure = $protocol;
	+ }
	} else if ($mailer == 'sendmail') {
	$this->mailer->IsSendmail();
	} else {
	// Do nothing, by default PHPMailer send message using PHP mail()
	// function.
	}
	}

	public function supportsMessageIDHeader() {
	return true;
	}

	public function setFrom($email, $name = '') {
	$this->mailer->SetFrom($email, $name, $crazy_side_effects = false);
	return $this;
	}

	public function addReplyTo($email, $name = '') {
	$this->mailer->AddReplyTo($email, $name);
	return $this;
	}

	public function addTos(array $emails) {
	foreach ($emails as $email) {
	$this->mailer->AddAddress($email);
	}
	return $this;
	}

	public function addCCs(array $emails) {
	foreach ($emails as $email) {
	$this->mailer->AddCC($email);
	}
	return $this;
	}

	public function addAttachment($data, $filename, $mimetype) {
	$this->mailer->AddStringAttachment(
	$data,
	$filename,
	'base64',
	$mimetype
	);
	return $this;
	}

	public function addHeader($header_name, $header_value) {
	if (strtolower($header_name) == 'message-id') {
	$this->mailer->MessageID = $header_value;
	} else {
	$this->mailer->AddCustomHeader($header_name.': '.$header_value);
	}
	return $this;
	}

	public function setBody($body) {
	$this->mailer->Body = $body;
	return $this;
	}

	public function setSubject($subject) {
	$this->mailer->Subject = $subject;
	return $this;
	}

	public function setIsHTML($is_html) {
	$this->mailer->IsHTML($is_html);
	return $this;
	}

	public function hasValidRecipients() {
	return true;
	}

	public function send() {
	return $this->mailer->Send();
	}

	}

File Metadata

Mime Type: text/x-diff
Expires: Jan 19 2025, 11:54 (4 w, 5 d ago)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 1124288
Default Alt Text: (143 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions