sendform-php/sendform.php

<?php
	session_start();
	require_once("sendform.conf");

	if ($conf['defaultReq'] != "") $conf['defaultReq'] .= ", recipient";
	else $conf['defaultReq'] = "recipient";
	
	$conf['referrals'] = explode(",", $conf['referrals']);
	$conf['excludeFields'] = explode(",", "recipient, ccrecipient, bccrecipient, subject, required, redirect, mailtemplate, mailtemplatehtml, submit, submit_x, submit_y, verification, ignoreempty, g-recaptcha-response, " . $conf['excludeFields']);
	$srequired = explode(",", $conf['defaultReq']);

	$errMsgStyle = "font-family: Arial;
					font-size: 14px;
					color: #FF0000;
					font-weight: bold;
					width: 100%;
					text-align: center;";
	$errDetStyle = "font-family: Arial;
					font-size: 12px;
					color: #FF0000;
					width: 100%;
					text-align: center;";

	$theDomain = getdomain($_SERVER['HTTP_REFERER']);
	checkreferal();
	
	// Google reCaptcha v2
	if(isset($conf['reCaptchaSecret'])){
		if(isset($_POST['g-recaptcha-response'])) $captcha=$_POST['g-recaptcha-response'];
		else errormsg("Verification failed. Please try again.");
		
		// post request to server
        $url = 'https://www.google.com/recaptcha/api/siteverify?secret=' . urlencode($conf['reCaptchaSecret']) .  '&response=' . urlencode($captcha);
        $ch = curl_init();

		curl_setopt($ch, CURLOPT_AUTOREFERER, TRUE);
		curl_setopt($ch, CURLOPT_HEADER, 0);
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
		curl_setopt($ch, CURLOPT_URL, $url);
		curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);       

		$response = curl_exec($ch);
		curl_close($ch);
        
        $responseKeys = json_decode($response,true);
        // should return JSON with success as true
        if(!$responseKeys["success"]) errormsg("Verification failed. Please try again.");
    }
    
	checkrequired();
	if(!validemail($conf['defaultFrom']) && !isset($_POST['email'])) bademail($conf['defaultFrom']);
	fillrecipients();

	if(isset($_POST['subject']))
		$subject = $_POST['subject'];
	else
		$subject = $conf['defaultSubject'];
		
	if(isset($_POST['ignoreempty']) && ($_POST('ignoreempty') === true || $_POST('ignoreempty') === false))
		$ignoreempty = $_POST['ignoreempty'];
	else
		$ignoreempty = $conf['defaultIgnoreEmpty'];
		
	if(isset($_POST['email']) && trim($_POST['email']) != "")
		$fromemail = $_POST['email'];
	else
		$fromemail = $conf['defaultFrom'];
	
		
	if(isset($_POST['redirect']))
		$redirectURL = $_POST['redirect'];
	else
		$redirectURL = $_SERVER['HTTP_REFERER'];
	
	if(isset($_POST['mailtemplate']) && $_POST['mailtemplate'] != "")
		writetemplate($_POST['mailtemplate']);
	else {
		if(isset($_POST['mailtemplatehtml']) && $_POST['mailtemplatehtml'] != "") {
			$headers = 'MIME-Version: 1.0' . "\r\n";
			$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
			writetemplate($_POST['mailtemplatehtml']);
		}
		else
			writestandard();
	}
	$headers .= "From: $fromemail" . "\r\n";
	if(isset($_POST['ccrecipient']) && $_POST['ccrecipient'] != ""){
		$ccemail = $_POST['ccrecipient'];
		$headers .= "Cc: $ccemail" . "\r\n";
		}
	if(isset($_POST['bccrecipient']) && $_POST['bccrecipient'] != ""){
		$bccemail = $_POST['bccrecipient'];
		$headers .= "Bcc: $bccemail" . "\r\n";
		}
	sendit();
	redirect();
	
	function checkrequired() {
		global $recipients, $subject, $phone, $fax, $email,$redirectURL, $message, $srequired, $urequired;
		// Check for all script required fields
		foreach($srequired as $req) {
			$req = trim($req);
			if(!isset($_POST[$req]))
				missingfield($req);
		}
		// Check for all user required fields
		if(isset($_POST['required'])) {
			$urequired = explode(",", "recipient, " . $_POST['required']);
			foreach($urequired as $req) {
				$req = trim($req);
				if($req == "email" && isset($_POST[$req]) && !validemail($_POST[$req]))
					bademail($_POST[$req]);
				else
					if(!isset($_POST[$req]) || trim($_POST[$req]) == "")
						missingfield($req);
			}
		}
	}
	
	function sendit() {
		global $recipients, $subject, $message, $fromemail, $headers, $conf['smtpHost'], $conf['smtpUser'], $conf['smtpPass'], $conf['smtpEnable'];
		foreach($recipients as $to) {
			if($conf['smtpEnable'] == 1){
				require_once "Mail.php";

				$headers = array ('From' => $fromemail, 'To' => $to, 'Subject' => $subject);
				$smtp = Mail::factory('smtp', array ('host' => $host, 'auth' => true, 'username' => $conf['smtpUser'], 'password' => $conf['smtpPass']));

				$mail = $smtp->send($to, $headers, $message);

				if (PEAR::isError($mail)) errormsg($mail->getMessage());
			}
			elseif($conf['smtpEnable'] == 0){
				if(trim($to) != "")
					mail(trim($to), stripslashes($subject), stripslashes($message), $headers);
			}
		}
	}
	
	function writestandard() {
		global $message, $theDomain, $ignoreempty;
		$message="Here is the information collected:\n\n";
		foreach($_POST as $varname => $varval) {
			if($ignoreempty===true && empty($varval)) continue;
			if(is_array($varval)) $varval = implode(", ",$varval);
			if(!exclude($varname)) {
				$message .= "$varname: ";
				if(count($varval) > 1) {
					for($i = 0; $i < count($varval); $i++)
						if($i < count($varval) - 1)
							$message .= "$varval[$i], ";
						else
							$message .= "$varval[$i]";
				} else {
					$message .= "$varval";
				}
				$message .= "\n";
			}
		}
	}

	function writetemplate($thefile) {
		global $message, $theDomain, $ignoreempty;
		$thearray = Array();
	    if($fp = @fopen($thefile, 'r')) {
	        while($data = fgets($fp, 1024)) {
				$data = chop($data);
				foreach($_POST as $varname => $varval) {
					if($ignoreempty===true && empty($varval)) continue;
					if(is_array($varval)) $varval = implode(", ",$varval);
					$data = str_replace("[$varname]", $varval, $data);
				}
				$message .= $data . "\n";
            }
			fclose($fp);
        }
	}

	function redirect() {
		global $redirectURL;
		header("Location: " . $redirectURL);
	}

	function exclude($theVar) {
		$req = false;
		global $conf['excludeFields'];
		foreach($conf['excludeFields'] as $field) {
			$field = trim($field);
			if(strcmp(strtolower($field), strtolower($theVar)) == 0)
				$req = true;
		}		
		return $req;
	}
	function checkreferal() {
		global $conf['referrals'], $theDomain;
		$valid = false;
		foreach($conf['referrals'] as $ref) {
			$ref = trim($ref);
			if(strcmp($theDomain, $ref) == 0) {
				$valid = true;
				break;
			}
		}
		if(!$valid)
			badreferer($theDomain);
	}
	function errormail($errormsg) {
		if (validemail($conf['errorTo'])) mail($conf['errorTo'], 'Error on form', $errormsg, $headers);
	}
	function fillrecipients() {
		global $recipients;
		$recipients = explode(",", $_POST['recipient']);
	}

	function missingfield($field) {
		writeStyles();
		echo "<h4>Missing Required Field</h4>\n";
		echo "<p>";
		echo "The Missing Field:";
		echo "<strong>$field</strong>";
		echo "</p>";
		errormail("The Missing Field:".$field);
		exit; 
	}
	function badreferer($ref) {
		writeStyles();
		echo "<h4>Bad Referer</h4>\n";
		echo "<p>";
		echo "This domain is not authorized for use of this script:";
		echo "<strong>$ref</strong>";
		echo "</p>";
		errormail("This domain is not authorized for use of this script:".$ref);
		exit; 
	}
	function bademail($email) {
		writeStyles();
		echo "<h4>Bad EMail Address</h4>";
		echo "<p>";
		echo "The email address you provided is not a valid email address:";
		echo "<strong>$email</strong>";
		echo "</p>";
		errormail("The email address you provided is not a valid email address:".$email);
		exit; 
	}
	function errormsg($msg) {
		writeStyles();
		echo "<h4>An Error Has Occured</h4>";
		echo "<p>";
		echo "<strong>$msg</strong>";
		echo "</p>";
		errormail("An Error Has Occured:".$msg);
		exit; 
	}
	function getdomain($url) {
		$host = parse_url($url, PHP_URL_HOST);
		$host = preg_replace("(www\.)","",$host);
		return $host;
		#preg_match("/^(http:\/\/)?([^\/]+)/i", $url, $matches);
		#$host = $matches[2];
		#preg_match("/[^\.\/]+\.[^\.\/]+$/", $host, $matches);
		#return $matches[0];
	}
	function validemail($email) {
		if (filter_var($email, FILTER_VALIDATE_EMAIL)) return true;
		else return false;
	}
	function writeStyles() {
		global $errMsgStyle, $errDetStyle;
		echo "<style type=\"text/css\">";
		echo "h4 {";
		echo $errMsgStyle;
		echo "}";
		echo "p {";
		echo $errDetStyle;
		echo "}";
		echo "</style>";
		
	}
?>