They’ve just sent me this form from the server and told me the other is full of mistakes and won’t work.
I haven’t started to fill it in yet and I have to go out unfortunately for an hour or two. I will look at it when I get back.
I hope you prefer this (although some of it is in Spanish).
Dank u
$value) { $_POST["$key"] = stripslashes($value); } } # Detect any Windows operating system # if (strstr(php_uname(), 'Windows')) { $IS_WINDOWS = TRUE; } ######################################################################## # # # USER CONFIGURABLE SETTINGS # # # ######################################################################## # Authorized email address masks that can be used as the recipient # $auth = "*@127.0.0.1, *@localhost, *@*"; // $auth = "*@127.0.0.1, *@localhost"; # Authorize all email addresses to the current domain # # If you want strict email account authorization, comment this out and # the script will only authorize the masks in the list defined above. # $auth .= ", *@" . get_domain($_SERVER['SERVER_NAME']); # Email address masks that will be rejected if in the email field # $deny = "nobody@*, anonymous@*, postmaster@*"; # The following allow you to set some default settings # # These are commented out by default and when used, either override or # append to any values. This allows you to ensure that hackers don't # post their own values to certain fields, making you miss out on # important data that you want to ensure is included in the email. # #$must['required'] = "env_report"; #$must['env_report'] = "REMOTE_ADDR"; #$must['redirect'] = "http://my.domain.com/ok.html"; #$must['error_redirect'] = "http://my.domain.com/error.html"; #$must['missing_fields_redirect'] = "http://my.domain.com/missing.html"; # ######################################################################## ######################################################################## # # # DO NOT EDIT ANYTHING PAST THIS POINT # # # ######################################################################## ######################################################################## # # Functions # # Trim leading and trailing white space from array values # function array_trim(&$value, $key) { $value = trim($value); } # Return the top level domain of a hostname # function get_domain($string) { if (eregi('\\.?([a-zA-Z0-9\\-]+\\.?[a-zA-Z0-9\\-]+)$', $string, $values)) { return $values[1]; } return NULL; } # Show an error message to the user # function error_msg($error, $required = FALSE) { global $post; if (!empty($post['missing_fields_redirect']) && $required) { header('Location: ' . $post['missing_fields_redirect']); } elseif (!empty($post['error_redirect'])) { header('Location: ' . $post['error_redirect']); } else { echo "\\r\
"; echo "\ \\r\
"; echo "\ \ \\r\
"; echo "\ \ \\r\
"; echo "\ \\r\
"; echo "\ \\r\
"; echo "\ \
${error}
\\r\
\ \
« volver atras
\\r\
"; echo "\ \\r\
"; echo "\\r\
"; } exit(); } # Basic pattern matching on an entire array # function pattern_grep($input, $array) { foreach ($array as $value) { $value = addcslashes($value, '^.[]$()|{}\\\\'); $value = str_replace('*', '.*', $value); $value = str_replace('?', '.?', $value); $value = str_replace('+', '.+', $value); if (eregi('^' . $value . '$', $input)) { return TRUE; } } return FALSE; } # ######################################################################## ######################################################################## # # Main # # Check to make sure the info was posted # if ($_SERVER['REQUEST_METHOD'] == 'POST') { $post = array( 'recipient' => $_POST['recipient'], 'email' => $_POST['email'], 'subject' => $_POST['subject'], 'realname' => $_POST['realname'], 'required' => $_POST['required'], 'env_report' => $_POST['env_report'], 'sort' => $_POST['sort'], 'redirect' => $_POST['redirect'], 'error_redirect' => $_POST['error_redirect'], 'missing_fields_redirect' => $_POST['missing_fields_redirect'] ); $http = array( 'REMOTE_USER' => $_SERVER['REMOTE_USER'], 'REMOTE_ADDR' => $_SERVER['REMOTE_ADDR'], 'HTTP_USER_AGENT' => $_SERVER['HTTP_USER_AGENT'] ); if (isset($must['required'])) { $post['required'] = $must['required'] . ',' . $_POST['required']; } if (isset($must['env_report'])) { $post['env_report'] = $must['env_report'] . ',' . $_POST['env_report']; } if (isset($must['redirect'])) { $post['redirect'] = $must['redirect']; } if (isset($must['error_redirect'])) { $post['error_redirect'] = $must['error_redirect']; } if (isset($must['missing_fields_redirect'])) { $post['missing_fields_redirect'] = $must['missing_fields_redirect']; } if (($auth = explode(',', $auth))) { array_walk($auth, 'array_trim'); } if (($deny = explode(',', $deny))) { array_walk($deny, 'array_trim'); } # Check for missing required fields # if ((!empty($post['required'])) && ($list = explode(',', $post['required']))) { $list[] = 'recipient'; $list[] = 'email'; array_walk($list, 'array_trim'); foreach ($list as $value) { if (!empty($value) && empty($_POST["$value"])) { error_msg("No has rellenado todos los campos obligatorios.", TRUE); } } } # Check the email addresses submitted # if (pattern_grep($post['email'], $deny)) { error_msg("Ha introducido una direccion de correo no permitida."); } if (!eregi('^([a-zA-Z0-9\\.\\_\\-]+)\\@((([a-zA-Z0-9\\-]+)\\.)+([a-zA-Z]+))$', $post['email'])) { error_msg("Ha introducido una direccion de correo no valida"); } if (!$IS_WINDOWS) { if (!getmxrr(get_domain($post['email']), $mxhost)) { error_msg("El dominio de la direccion de correo que ha introducido no tiene registro MX."); } } # Check if the recipients email address is authorized # if ((!empty($post['recipient'])) && ($list = explode(',', $post['recipient']))) { array_walk($list, 'array_trim'); foreach ($list as $value) { if (!eregi('^([a-zA-Z0-9\\.\\_\\-]+)\\@((([a-zA-Z0-9\\-]+)\\.)+([a-zA-Z]+))$', $value)) { error_msg("La direccion de correo del recipiente no es valida."); } if (!pattern_grep($value, $auth)) { error_msg("La direccion de correo del recipiente no esta autorizado."); } } } else { error_msg("Ha ocurrido un error desconocido al comprobar la validez de la direccion de correo del recipiente."); } # Sort the fields # if ((!empty($post['sort'])) && ($list = explode(',', $post['sort']))) { array_walk($list, 'array_trim'); foreach ($list as $value) { $form["$value"] = $_POST["$value"]; } } else { $form = $_POST; } # Create the message # $subject = empty($post['subject']) ? "Formulario" : "Formulario: " . $post['subject']; $message = "Enviado por: " . $post['realname'] . " <" . $post['email'] . "> con fecha " . date('l, F jS, Y @ g:i:s a (O)') . "\\r\
\\r\
"; if (!empty($post['env_report'])) { if (($list = explode(',', $post['env_report']))) { $message .= "Variables de cliente\\r\
"; $message .= "----------------\\r\
\\r\
"; array_walk($list, 'array_trim'); foreach ($list as $value) { if (array_key_exists($value, $http)) { $message .= "${value}:\\r\
" . $http["$value"] . "\\r\
\\r\
"; } } } } $message .= "Campos del Formulario\\r\
"; $message .= "------------------\\r\
\\r\
"; foreach ($form as $key => $value) { if (!array_key_exists($key, $post)) { $message .= "${key}:\\r\
${value}\\r\
\\r\
"; } } # Send out the email # if (mail($post['recipient'], $subject, $message, "From: " . $post['email'] . "\\r\
Reply-To: " . $post['email'] . "\\r\
X-Mailer: PHP FormMail")) { if (!empty($post['redirect'])) { header('Location: ' . $post['redirect']); } else { echo "\\r\
"; echo "\ \\r\
"; echo "\ \ \\r\
"; echo "\ \ \\r\
"; echo "\ \\r\
"; echo "\ \\r\
"; echo "\ \
Muchas gracias por completar el formulario.
\\r\
\ \
« volver atras
\\r\
"; echo "\ \\r\
"; echo "\\r\
"; } $fp = fopen('/var/log/formmail_log', 'a'); fwrite($fp, '['.date('Y/m/d H:i:s').'] formmail: to='.$post['recipient'].' from='.$post['email']); fclose($fp); } else { error_msg("Ha ocurrido un error desconocido en el envio del correo."); } } else { error_msg("Ha utilizado un metodo no valido. Debe utilizar el metodo POST en el campo ACTION de su formulario."); } # ######################################################################## ?>
