php-e107/contact.php

<?php
/*
 * e107 website system
 *
 * Copyright (C) 2008-2013 e107 Inc (e107.org)
 * Released under the terms and conditions of the
 * GNU General Public License (http://www.gnu.org/licenses/gpl.txt)
 *
 * /contact.php
 *
*/

require_once("class2.php");
//define('e_HANDLER', "e107_handlers/");
// security image may be disabled by removing the appropriate shortcodes from the template.
$active = varset($pref['contact_visibility'], e_UC_PUBLIC);
if(!check_class($active))
{
	e107::getRedirect()->go(e_HTTP."index.php");
}

require_once(e_HANDLER."secure_img_handler.php");
$sec_img = new secure_image;

include_lan(e_LANGUAGEDIR.e_LANGUAGE.'/lan_'.e_PAGE);


require_once(HEADERF);


if (!vartrue($CONTACT_FORM))
 {
	if (file_exists(THEME."contact_template.php")) 
	{
		require_once(THEME."contact_template.php");
	}
	else
	{		
		// Redirect Page if no contact-form or contact-info is available. 
		if(($pref['sitecontacts']== e_UC_NOBODY) && trim(SITECONTACTINFO) == "")
		{
			e107::getRedirect()->redirect(e_BASE."index.php");
			exit;
		}
		
		$CONTACT_FORM = e107::getCoreTemplate('contact','form'); // require_once(e_THEME."templates/contact_template.php");
	}
}

if(isset($_POST['send-contactus']))
{

	$error = "";

	$sender_name = $tp->toEmail($_POST['author_name'],TRUE,'RAWTEXT');
	$sender = check_email($_POST['email_send']);
	$subject = $tp->toEmail($_POST['subject'],TRUE,'RAWTEXT');
	$body = $tp->toEmail($_POST['body'],TRUE,'RAWTEXT');


// Check Image-Code
    if (isset($_POST['rand_num']) && !$sec_img->verify_code($_POST['rand_num'], $_POST['code_verify']))
	{
		$error .= LANCONTACT_15."\\n";
	}

// Check message body.
	if(strlen(trim($_POST['body'])) < 15)
	{
		$error .= LANCONTACT_12."\\n";
    }

// Check subject line.
	if(varset($_POST['subject']) && strlen(trim($_POST['subject'])) < 2)
	{
		$error .= LANCONTACT_13."\\n";
    }

	if(!strpos(trim($_POST['email_send']),"@"))
	{
		$error .= LANCONTACT_11."\\n";
    }



// Check email address on remote server (if enabled).
	if ($pref['signup_remote_emailcheck'] && $error == '')
	{
		require_once(e_HANDLER."mail_validation_class.php");
		list($adminuser,$adminhost) = explode('@', SITEADMINEMAIL, 2);
		$validator = new email_validation_class;
		$validator->localuser= $adminuser;
		$validator->localhost= $adminhost;
		$validator->timeout=3;
		//	$validator->debug=1;
		//	$validator->html_debug=1;
		if($validator->ValidateEmailBox($sender) != 1)
		{
			$error .= LANCONTACT_11."\\n";
		}

	}

	// No errors - so proceed to email the admin and the user (if selected).
    if(empty($error))
	{
		$body .= "\n\nIP:\t".e107::getIPHandler()->getIP(TRUE)."\n";

		if (USER)
		{
			$body .= "User:\t#".USERID." ".USERNAME."\n";
		}

		if(empty($_POST['contact_person']) && !empty($pref['sitecontacts'])) // only 1 person, so contact_person not posted.
		{
    		if($pref['sitecontacts'] == e_UC_MAINADMIN)
			{
        		$query = "user_perms = '0' OR user_perms = '0.' ";
			}
			elseif($pref['sitecontacts'] == e_UC_ADMIN)
			{
				$query = "user_admin = 1 ";
			}
			else
			{
				$query = "FIND_IN_SET(".$pref['sitecontacts'].",user_class) ";
			}
		}
		else
		{
      		$query = "user_id = ".intval($_POST['contact_person']);
		}

    	if($sql->gen("SELECT user_name,user_email FROM `#user` WHERE ".$query." LIMIT 1"))
		{
    		$row = $sql->fetch();
    		$send_to = $row['user_email'];
			$send_to_name = $row['user_name'];
		}
    	else
		{
		    $send_to = SITEADMINEMAIL;
			$send_to_name = ADMIN;
		}


		// Send as default sender to avoid spam issues. Use 'replyto' instead. 
    	$eml = array(
    	    'subject'       => $subject,
    	    'sender_name'   => $sender_name,
    	    'body'          => $body,
		    'replyto'       => $sender,
		    'replytonames'  => $sender_name,
		    'template'      => 'default'
	    );

    	$message = e107::getEmail()->sendEmail($send_to, $send_to_name, $eml, false)  ? LANCONTACT_09 : LANCONTACT_10;

 	//	$message =  (sendemail($send_to,"[".SITENAME."] ".$subject, $body,$send_to_name,$sender,$sender_name)) ? LANCONTACT_09 : LANCONTACT_10;

    	if(isset($pref['contact_emailcopy']) && $pref['contact_emailcopy'] && $_POST['email_copy'] == 1)
    	{
		    require_once(e_HANDLER."mail.php");
			sendemail($sender,"[".SITENAME."] ".$subject, $body,ADMIN,$sender,$sender_name);
    	}


    	$ns->tablerender('', "<div class='alert alert-success'>".$message."</div>");
		require_once(FOOTERF);
		exit;
    }
	else
	{
		message_handler("P_ALERT", $error);
	}

}

if(SITECONTACTINFO)
{
	if(!isset($CONTACT_INFO))
	{
		$CONTACT_INFO = e107::getCoreTemplate('contact','info'); 
	}
	
	$text = $tp->parseTemplate($CONTACT_INFO, TRUE, vartrue($contact_shortcodes));
	$ns -> tablerender(LANCONTACT_01, $text,"contact");
}

if(isset($pref['sitecontacts']) && $pref['sitecontacts'] != 255)
{
	$contact_shortcodes = e107::getScBatch('contact');
	// Wrapper support
	$contact_shortcodes->wrapper('contact/form');
	
	$text = $tp->parseTemplate($CONTACT_FORM, TRUE, $contact_shortcodes);

	if(trim($text) != "")
	{
		$ns -> tablerender(LANCONTACT_02, $text, "contact");
	}
}
require_once(FOOTERF);
exit;
?>