*** ecard.php	Tue Apr 19 05:17:10 2005
--- cpg133/ecard.php	Mon Jul 25 14:46:10 2005
***************
*** 65,71 ****
  // Check supplied email address
  $valid_email_pattern = "^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$";
  $valid_sender_email = eregi($valid_email_pattern, $sender_email);
! $valid_recipient_email = eregi($valid_email_pattern, $recipient_email);
  $invalid_email = '<font size="1">' . $lang_ecard_php['invalid_email'] . '</font>';
  if (!$valid_sender_email && count($HTTP_POST_VARS) > 0) $sender_email_warning = $invalid_email;
  if (!$valid_recipient_email && count($HTTP_POST_VARS) > 0) $recipient_email_warning = $invalid_email;
--- 65,83 ----
  // Check supplied email address
  $valid_email_pattern = "^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$";
  $valid_sender_email = eregi($valid_email_pattern, $sender_email);
! 
! //$valid_recipient_email = eregi($valid_email_pattern, $recipient_email);
! // parse the emails so can send to multiple people.
! $recipient_email_r = explode(",",$recipient_email);
! if(is_array($recipient_email_r))
! {
! 	reset($recipient_email_r);
! 	while(list(,$email) = each($recipient_email_r))
! 	{
! 		$valid_recipient_email = eregi($valid_email_pattern, trim($email));
! 	}
! }
! 
  $invalid_email = '<font size="1">' . $lang_ecard_php['invalid_email'] . '</font>';
  if (!$valid_sender_email && count($HTTP_POST_VARS) > 0) $sender_email_warning = $invalid_email;
  if (!$valid_recipient_email && count($HTTP_POST_VARS) > 0) $recipient_email_warning = $invalid_email;
***************
*** 124,130 ****
          $message .= "Sent by $sender_name from IP {$_SERVER['REMOTE_ADDR']} at ".gmstrftime("%A,  %B,%d,%Y %I:%M %p ", time())." [GMT]";
              $subject = sprintf($lang_ecard_php['ecard_title'], $sender_name);
  
!             $result = cpg_mail($recipient_email, $subject, $message, 'text/html', $sender_name, $sender_email);
  
          //write ecard log
          if ($CONFIG['log_ecards'] == 1) {
--- 136,147 ----
  	$message .= "Sent by $sender_name from IP {$_SERVER['REMOTE_ADDR']} at ".gmstrftime("%A,  %B,%d,%Y %I:%M %p ", time())." [GMT]";
  	$subject = sprintf($lang_ecard_php['ecard_title'], $sender_name);
  
! 	// for maximum stability, send to each recipient
! 	reset($recipient_email_r);
! 	while(list(,$email) = each($recipient_email_r))
! 	{
! 		$result = cpg_mail($email, $subject, $message, 'text/html', $sender_name, $sender_email);
! 	}
  		
  	//write ecard log
  	if ($CONFIG['log_ecards'] == 1) {