|%|\*|/|'|\"|~|\?|#|\\$|\\&|\\^|www[.]";
return (eregi($badchars,$str));
}
function headerconv ($str)
{
$str = trim($str);
$str = stripslashes($str);
return $str;
}
function htmlconv ($str)
{
$str = str_replace("\"", """, $str);
$str = str_replace("<","<",$str);
$str = str_replace(">",">",$str);
$str = str_replace("\r\n", "\n", $str);
$str = str_replace("\r", "\n", $str);
$str = str_replace("\n", "
", $str);
$str = str_replace("\$", "$", $str);
$str = str_replace("|", "/", $str);
$str = eregi_replace("(
*){2,}","
",$str);
$str = eregi_replace("[ ]{2,}", " ", $str);
$str = trim($str);
return $str;
}
include ("config.inc");
if ($config["inc_headers"] == "on"):
include ($config["header"]);
endif;
if (!isset($HTTP_POST_VARS["action"])) {
$action = "";
} else $action = $HTTP_POST_VARS["action"];
if ($action != "send"):
include ("./form.inc");
else:
if (isset($HTTP_POST_VARS["form_name"])) {
$form_name = $HTTP_POST_VARS["form_name"];
} else
$form_name = "";
if (isset($HTTP_POST_VARS["form_email"])) {
$form_email = $HTTP_POST_VARS["form_email"];
} else
$form_email = "";
if (isset($HTTP_POST_VARS["form_subject"])) {
$form_subject = $HTTP_POST_VARS["form_subject"];
} else
$form_subject = "";
if (isset($HTTP_POST_VARS["form_recip"])) {
$form_recip = $HTTP_POST_VARS["form_recip"];
} else
$form_recip = "";
if (isset($HTTP_POST_VARS["form_message"])) {
$form_message = $HTTP_POST_VARS["form_message"];
} else
$form_message = "";
if (isset($HTTP_POST_VARS["form_sendcopy"])) {
$form_sendcopy = $HTTP_POST_VARS["form_sendcopy"];
} else
$form_sendcopy = "";
if ($form_name == "" || $form_email == "" || $form_subject == "" || $form_message == ""):
$errorheader = "СООБЩЕНИЕ НЕ ОТПРАВЛЕНО!
";
$errormessage = "Не были заполнены следующие обязательные поля:
";
$errormessage .= "";
if ($form_name == ""): $errormessage .= "Ваше имя
Ваш E-Mail
Тема сообщения
Текст сообщения
";
$errormessage .= "Пожалуйста, вернитесь назад и попробуйте снова.
";
include ("./error.inc");
else:
$header["subject"] = headerconv($form_subject);
$header["name"] = headerconv($form_name);
$form_name = htmlconv($form_name);
$form_email = htmlconv($form_email);
$form_subject = htmlconv($form_subject);
$form_message = htmlconv($form_message);
if (!(eregi("([a-z0-9_\-\.])+@([a-z0-9_\-\.])+\.([a-z0-9_\-\.])+",$form_email)) || checkmail($form_email)):
$errorheader = "СООБЩЕНИЕ НЕ ОТПРАВЛЕНО!
";
$errormessage = "Введенный Вами адрес E-Mail (".$form_email.") содержит
недопустимые символы или имеет неправильный формат.
";
$errormessage .= "Пожалуйста, вернитесь назад и попробуйте снова.
";
include ("./error.inc");
else:
$contents = file($config["recip_file"]);
$numlines = sizeof($contents);
for ($i=0;$i<$numlines;$i++) {
$contents[$i] = explode("|",$contents[$i]);
}
$form_send_to = $contents[$form_recip-1][1]."<".$contents[$form_recip-1][0].">";
if ($form_sendcopy == "on"):
$form_send_to = $form_send_to . ", ";
$form_send_to .= $header["name"]."<".$form_email.">";
endif;
$sendmessage = "
".$form_subject."
".$form_message;
if ($config["features"] == "on"):
$sendmessage .= "
Обозреватель: " . getenv("HTTP_USER_AGENT") .
"
Адрес IP: ".getenv("REMOTE_ADDR");
endif;
$sendmessage .= " |