SMTP-Mailer

Core Features

1. User Management & Permissions

• Multi-Role System:Superuser: Complete system control, cannot be modified
• Admin: Full access to all features and settings
• List Manager: Restricted user with granular permissions
• Granular Permissions for List Managers:Can manage own lists (create/edit their own mailing lists)
• Can send campaigns (permission to execute email sends)
• Can manage campaigns (create/edit/view campaigns)
• Can manage own headers & footers (create branded email templates)
• Assigned specific lists (restrict access to particular subscriber lists)

2. Subscriber Management

• Complete Subscriber Database:Import subscribers via CSV/Excel with automatic field mapping
• Manual subscriber creation with custom fields
• Email validation and duplicate detection
• Custom field support (unlimited additional data per subscriber)
• Subscriber status tracking (active/inactive/unsubscribed)
• Bulk operations (activate, deactivate, delete, assign to lists)
• Email Aliasing System:Map multiple email addresses to single primary email
• Prevents duplicate sends (person+alias@gmail.com → person@gmail.com)
• Automatic deduplication during campaign sends

3. Mailing List Management

• Flexible List Organization:Create unlimited mailing lists
• Assign subscribers to multiple lists
• Track subscriber count per list
• List-specific permissions for List Managers
• Bulk subscriber assignment/removal

4. Email Template System

• Rich Template Editor:Visual WYSIWYG editor (TinyMCE)
• HTML code editor for advanced users
• Live preview of templates
• Custom placeholder support: {name}, {first_name}, {email}, {organization}, custom fields
• Template categorization and search
• Duplicate templates for quick creation
• Headers & Footers System:Create reusable email headers with branding
• Create reusable email footers with unsubscribe links
• User-specific headers/footers with ownership tracking
• Preview headers/footers before applying
• Enable/disable without deletion

5. Campaign Management

• Campaign Creation:Select from saved templates or create new content
• Apply headers and footers to campaigns
• Attach files (PDF, DOC, DOCX, XLS, XLSX, images, up to 10MB)
• Select multiple mailing lists as recipients
• Configure sender name, email, and reply-to address
• Schedule campaigns for future sending (CRON job integration)
• Send test emails before launching
• Campaign Sending Features:Batch sending with configurable batch size and delays
• Real-time progress tracking (sent count, failed count, percentage)
• Automatic retry logic (2 attempts with exponential backoff)
• SMTP error handling with detailed logging
• Attachment validation before sending
• Prevents duplicate sends via send_log tracking
• Bulletproof Recovery System:Resume: Continue stuck campaigns from exact point of failure

6. Analytics & Tracking

• Campaign Statistics:Total recipients targeted
• Emails sent successfully
• Failed deliveries with error messages
• Missing recipients (not yet sent)
• Campaign status (draft, sending, sent)
• Sent timestamp tracking
• Send Log:Complete log of every email sent
• Per-recipient delivery status
• Error messages for failed sends
• Timestamp of each send attempt

7. System Settings & Configuration

• SMTP Configuration:Custom SMTP server settings
• SSL/TLS encryption support
• Configurable timeout (30 seconds default)
• Connection pooling options
• Organization Settings:Organization name and branding
• Default sender information
• Unsubscribe URL configuration
• Batch sending parameters (batch size, delays)

Technical Architecture

Backend

• Language: PHP 7.4+
• Database: MySQL 5.7+ with PDO
• Email Library: PHPMailer for SMTP sending
• Authentication: Session-based with password hashing
• API: RESTful endpoints for all operations

Frontend

• Framework: Bootstrap 5.3
• Icons: Font Awesome 6.4
• Editor: TinyMCE 6 for WYSIWYG editing
• JavaScript: Vanilla JS (no framework dependencies)

Security Features

• Password Security: hashing with unique salt per user
• Session Management: Secure PHP sessions with timeout
• Password timeout: Prevents brute force password attacks
• SQL Injection Prevention: PDO prepared statements throughout
• XSS Protection: HTML escaping on all user inputs
• File Upload Validation: Whitelist of allowed file types, size limits, virus scanning ready
• Access Control: Permission checks on every API endpoint
• CSRF Protection: Session-based request validation