Fixed secuity issue

mailer.py

@@ -1,9 +1,11 @@
 """Mailer script."""
+
 import hashlib
 import sys
 import os
 import smtplib
 import urllib2
+from urlparse import urlparse
 from optparse import OptionParser
 from flask import Flask, request, redirect, url_for, render_template, session
 from email.MIMEMultipart import MIMEMultipart
@@ -12,6 +14,8 @@
 import time
 import datetime
 
+
+
 reload(sys)
 sys.setdefaultencoding("utf-8")
 
@@ -45,35 +49,51 @@ def mailer(email, file_url, file_name):
     timestamp = datetime.datetime.fromtimestamp(ts).strftime('%Y-%m-%d-%H-%M-%S')
 
 
-    fromaddr = "your_email"
+    fromaddr = "freetamilebooksteam@gmail.com"
     toaddr = email
-    password = "your_password"
+    password = "password here "
     msg = MIMEMultipart()
+    msg["Subject"] = "Ebook from FreeTamilEbooks.com"
     msg['From'] = fromaddr
     msg['To'] = toaddr
+#    msg['cc'] = "tshrinivasan@gmail.com"
     part = MIMEBase('application', 'octet-stream')
-    req = urllib2.Request(
+    parsed_uri = urlparse(file_url)
+    if parsed_uri.hostname == 'freetamilebooks.com':	
+
+        req = urllib2.Request(
         file_url,
         headers={
             'User-Agent':
             'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11'
         })
-    part.set_payload(urllib2.urlopen(req).read())
-    encoders.encode_base64(part)
-    part.add_header('Content-Disposition',
-                    "attachment; filename= %s" % file_name)
-    msg.attach(part)
-    server = smtplib.SMTP('smtp.gmail.com', 587)
-    server.starttls()
-    server.login(fromaddr, password)
-    text = msg.as_string()
-    server.sendmail(fromaddr, toaddr, text)
-    server.quit()
-
-    log = open("logs/log.csv", "a")
-    log_content = timestamp +"," + email + "," + file_url +"," + file_name + "\n"
-    log.write(log_content)
-    log.close()
+
+#    file_name = file_name.encode('utf-8')
+
+#    file_name = "/tmp/" + timestamp + "-" + file_name
+#    print file_name
+#    os.system(" wget -O " + file_name + "   "  + file_url)
+
+        part.set_payload(urllib2.urlopen(req).read())
+#    part.set_payload(open(file_name).read())
+        encoders.encode_base64(part)
+        part.add_header('Content-Disposition',
+#                    "attachment; filename= %s" % os.path.basename(file_name))
+                     "attachment; filename= %s" % file_name)
+        msg.attach(part)
+        server = smtplib.SMTP('smtp.gmail.com', 587)
+        server.ehlo()
+        server.starttls()
+        server.ehlo() 
+        server.login(fromaddr, password)
+        text = msg.as_string()
+        server.sendmail(fromaddr, toaddr, text)
+        server.quit()
+
+        log = open("/var/www/html/Send2Kindle/logs/log.csv", "a")
+        log_content = timestamp +"," + email + "," + file_url +"," + file_name + "\n"
+        log.write(log_content)
+        log.close()
 
 if __name__ == "__main__":
     parser = OptionParser()