Core Features
1. User Management & Permissions
- Multi-Role System:Superuser: Complete system control, cannot be modified
- Admin: Full access to all features and settings
- List Manager: Restricted user with granular permissions
- Granular Permissions for List Managers:Can manage own lists (create/edit their own mailing lists)
- Can send campaigns (permission to execute email sends)
- Can manage campaigns (create/edit/view campaigns)
- Can manage own headers & footers (create branded email templates)
- Assigned specific lists (restrict access to particular subscriber lists)
2. Subscriber Management
- Complete Subscriber Database:Import subscribers via CSV/Excel with automatic field mapping
- Manual subscriber creation with custom fields
- Email validation and duplicate detection
- Custom field support (unlimited additional data per subscriber)
- Subscriber status tracking (active/inactive/unsubscribed)
- Bulk operations (activate, deactivate, delete, assign to lists)
- Email Aliasing System:Map multiple email addresses to single primary email
- Prevents duplicate sends (person+alias@gmail.com → person@gmail.com)
- Automatic deduplication during campaign sends
3. Mailing List Management
- Flexible List Organization:Create unlimited mailing lists
- Assign subscribers to multiple lists
- Track subscriber count per list
- List-specific permissions for List Managers
- Bulk subscriber assignment/removal
4. Email Template System
- Rich Template Editor:Visual WYSIWYG editor (TinyMCE)
- HTML code editor for advanced users
- Live preview of templates
- Custom placeholder support: {name}, {first_name}, {email}, {organization}, custom fields
- Template categorization and search
- Duplicate templates for quick creation
- Headers & Footers System:Create reusable email headers with branding
- Create reusable email footers with unsubscribe links
- User-specific headers/footers with ownership tracking
- Preview headers/footers before applying
- Enable/disable without deletion
5. Campaign Management
- Campaign Creation:Select from saved templates or create new content
- Apply headers and footers to campaigns
- Attach files (PDF, DOC, DOCX, XLS, XLSX, images, up to 10MB)
- Select multiple mailing lists as recipients
- Configure sender name, email, and reply-to address
- Schedule campaigns for future sending (CRON job integration)
- Send test emails before launching
- Campaign Sending Features:Batch sending with configurable batch size and delays
- Real-time progress tracking (sent count, failed count, percentage)
- Automatic retry logic (2 attempts with exponential backoff)
- SMTP error handling with detailed logging
- Attachment validation before sending
- Prevents duplicate sends via send_log tracking
- Bulletproof Recovery System:Resume: Continue stuck campaigns from exact point of failure
6. Analytics & Tracking
- Campaign Statistics:Total recipients targeted
- Emails sent successfully
- Failed deliveries with error messages
- Missing recipients (not yet sent)
- Campaign status (draft, sending, sent)
- Sent timestamp tracking
- Send Log:Complete log of every email sent
- Per-recipient delivery status
- Error messages for failed sends
- Timestamp of each send attempt
7. System Settings & Configuration
- SMTP Configuration:Custom SMTP server settings
- SSL/TLS encryption support
- Configurable timeout (30 seconds default)
- Connection pooling options
- Organization Settings:Organization name and branding
- Default sender information
- Unsubscribe URL configuration
- Batch sending parameters (batch size, delays)
Technical Architecture
Backend
- Language: PHP 7.4+
- Database: MySQL 5.7+ with PDO
- Email Library: PHPMailer for SMTP sending
- Authentication: Session-based with password hashing
- API: RESTful endpoints for all operations
Frontend
- Framework: Bootstrap 5.3
- Icons: Font Awesome 6.4
- Editor: TinyMCE 6 for WYSIWYG editing
- JavaScript: Vanilla JS (no framework dependencies)
Security Features
- Password Security: hashing with unique salt per user
- Session Management: Secure PHP sessions with timeout
- Password timeout: Prevents brute force password attacks
- SQL Injection Prevention: PDO prepared statements throughout
- XSS Protection: HTML escaping on all user inputs
- File Upload Validation: Whitelist of allowed file types, size limits, virus scanning ready
- Access Control: Permission checks on every API endpoint
- CSRF Protection: Session-based request validation