-
Notifications
You must be signed in to change notification settings - Fork 1
/
contact.php
62 lines (56 loc) · 1.45 KB
/
contact.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
<?php
if(!isset($_POST['submit']))
{
//This page should not be accessed directly. Need to submit the form.
echo "error; you need to submit the form!";
}
$contact_email = $_POST['email'];
$contact_name = $_POST['name'];
$contact_phone = $_POST['phone'];
$contact_subject = $_POST['subject']
$contact_message = $_POST['message'];
//Validate first
if(empty($contact_email) || empty($message))
{
echo "meassage and email is mandatory!";
exit;
}
if(IsInjected($contact_email) || IsInjected($subject))
{
echo "Bad email value!";
exit;
}
$email_from = 'openneuropet';//<== update the email address
$email_subject = $contact_subject;
$email_body = "You have a new message from $contact_name ($_POST['phone']):\n".
" $contact_message.";
$to = "[email protected]";//<== update the email address
$headers = "From: $email_from \r\n";
$headers .= "Reply-To: $contact_email \r\n";
//Send the email!
mail($to,$email_subject,$email_body,$headers);
//done. redirect to thank-you page.
header('Location: thank-you.html');
// Function to validate against any email injection attempts
function IsInjected($str)
{
$injections = array('(\n+)',
'(\r+)',
'(\t+)',
'(%0A+)',
'(%0D+)',
'(%08+)',
'(%09+)'
);
$inject = join('|', $injections);
$inject = "/$inject/i";
if(preg_match($inject,$str))
{
return true;
}
else
{
return false;
}
}
?>