cms2day Forum - Community & Support rund ums cms2day

PHP-Quelltext

<?php

/*

    ADDON/MODUL EXTENSION <cms2day>
    Autor: Matthias Müller <http://www.cms2day.de>
 
*/

global $cmDB;
global $settings;
global $optionen;
global $personaldaten;

require_once('includes/module/kontaktformular/inc/frontend.language.de.inc.php');

$modul_settings = mysqli_fetch_assoc(mysqli_query($cmDB, "SELECT * FROM modul_kontaktformular"));

if (isset($_GET['action']) && $_GET['action'] == SEND_TRUE) {
    
    open_okay();
    print SEND_OK;
    close_okay();
    
} else if (isset($_GET['action']) && $_GET['action'] == SEND_SPAM) {
    
    open_okay();
    print SEND_ERROR_BOT;
    close_okay();
    
} else if (isset($_GET['action']) && $_GET['action'] == ACTION_SEND) {
    
    if (isset($_SESSION['send'])) {
        
        $sendInfo = explode(':', $_SESSION['send']);
        
        $checkTime = $sendInfo[1] + 300;
        
        if ($checkTime > time() && $sendInfo[0] == $_SERVER['REMOTE_ADDR']) {

            header ('Location: '.buildLocation("",SEND_SPAM,""));
            exit;
        
        } else {
            
            unset($_SESSION['send']);
            
        }
        
    } else {
# nicht noetige Daten deaktiviert
#        $_POST['data_1'] = clean_input($_POST['data_1']);
        $_POST['data_2'] = clean_input($_POST['data_2']);
#        $_POST['data_3'] = clean_input($_POST['data_3']);
#        $_POST['data_4'] = clean_input($_POST['data_4']);
        $_POST['data_5'] = clean_input($_POST['data_5']);
        $_POST['data_6'] = clean_input($_POST['data_6']);
#neue checkbox
               # $_POST['data_7'] = clean_input($_POST['data_7']);
        if(isset($_POST['data_7'])){
                   $checkbox= $_POST['data_7'];
                }else{
                   $checkbox= "";
        }
    
        $data = mysqli_fetch_assoc(mysqli_query($cmDB, "SELECT * FROM spamschutz WHERE id = '".mysqli_real_escape_string($cmDB, $_POST['spam_id'])."' AND antwort = '".mysqli_real_escape_string($cmDB, strtolower($_POST['spamschutz']))."' LIMIT 1"));
        
        if (!empty($_POST['email']) || !empty($_POST['website'])) {
            
            $_SESSION['send'] = $_SERVER['REMOTE_ADDR'].':'.time();
            header ('Location: '.buildLocation("","",""));
            exit;
            
        } else if ((time() - $_POST['time']) < 5) {
            
            header ('Location: '.buildLocation("","",""));
            exit;
            
        } else {
    
            if (empty($data['frage'])) {
            
                open_fehler();
                print SEND_ERROR_SPAM;
                close_fehler();
            
            } else {
            
                if (empty($checkbox) || $checkbox != FORM_CHECKBOX) {
                                # if (empty($_POST['data_7'])) {                         

                    open_fehler();
                    print SEND_ERROR_CHECKBOX;
                    close_fehler();
        
                } else {
                  
 
                    if (empty($_POST['data_2']) || !preg_match('/^([a-z0-9äöü]+([-_\.]?[a-z0-9äöü])+)@[a-z0-9äöü]+([-_\.]?[a-z0-9äöü])+\.[a-zäöü]{2,10}$/i', $_POST['data_2'])) {
        
                        open_fehler();
                        print SEND_ERROR_EMAIL;
                        close_fehler();
                
                    } else {
                
                        if (empty($_POST['data_5']) || $_POST['data_5'] == FORM_SUBJECT) {
        
                            open_fehler();
                            print SEND_ERROR_SUBJECT;
                            close_fehler();
        
                        } else {
        
                            if (empty($_POST['data_6']) || $_POST['data_6'] == FORM_MESSAGE) {
        
                                open_fehler();
                                print SEND_ERROR_MESSAGE;
                                close_fehler();
        
                            } else {
#unnoetige Auswertung deaktiviert                        
                            #    if (!empty($_POST['data_3']) && $_POST['data_3'] != FORM_WEBSITE) {
                                    
                            #        $webseite = 'http://'.str_replace('http://', '', $_POST['data_3']);
                            
                            #    } else {
                            
                            #        $webseite = MAIL_EMPTY;
                            
                            #    }
                            
                                if (!isset($_SESSION['send'])) {
                                
                            #####        $telefon = $_POST['data_4'] != FORM_TEL ? $_POST['data_4'] : MAIL_EMPTY;
                            
                                    $mail = !empty($modul_settings['email']) ? $modul_settings['email'] : $personaldaten['email'];
                                
                            #$nachricht = $_POST['data_6']."\r\n\r\n---\r\n\r\n".MAIL_HEAD_NAME." ".$_POST['data_1']."\r\n".MAIL_HEAD_WEBSITE." ".$webseite."\r\n".MAIL_HEAD_TEL." ".$telefon;
                                    $nachricht = $_POST['data_6'];
                                #    $nachricht = str_replace("\r\n", "\n", $nachricht);
                                    
                                    sendMail($mail, $_POST['data_2'], MAIL_SUBJECT_1.$_POST['data_5'], $nachricht);
# Bestaetigunsmail deaktiviert                                
                                    #if (isset($_POST['bestaetigung']) && $_POST['bestaetigung'] == 'true') {
            
                                    #    $bestaetigung = MAIL_TEXT_2."\r\n\r\n".$_POST['data_6'];
                                    #    $bestaetigung = str_replace("\r\n", "\n", $bestaetigung);
                                    #    
                                    #    sendMail($_POST['data_2'], $mail, MAIL_SUBJECT_2.$_POST['data_5'], $bestaetigung);                            
                                
                                    #}
                                    
                                    $_SESSION['send'] = $_SERVER['REMOTE_ADDR'].':'.time();
                                    
                                    header ('Location: '.buildLocation("",SEND_TRUE,""));
                                    exit;
                                
                                }
    
                            }
                        
                        }
        
                    }
                
                }
    
            }
        
        }

    }

}

print '<div id="modul">';
print '<div id="modul_kontaktformular">';

print str_replace('%PAGE_DIR%', $settings['page_dir'], $modul_settings['kopfbereich']);

open_table();

print '<form method="post" action="'.$settings['page_dir'].'/index.php?seite='.$_GET['seite'].'&amp;action='.ACTION_SEND.'">';

print '<input type="text" class="formular_2" name="time" value="'.time().'" />';
print '<input type="text" class="formular_2" name="email" value="" />';
print '<input type="text" class="formular_2" name="website" value="" />';

# unnoetige Felder deaktiviert

#getInputTextForm("data_1",FORM_NAME,"fullForm formular","");
getInputTextForm("data_2",FORM_EMAIL,"fullForm formular","");
#getInputTextForm("data_3",FORM_WEBSITE,"fullForm formular","");
#getInputTextForm("data_4",FORM_TEL,"fullForm formular","");
getInputTextForm("data_5",FORM_SUBJECT,"fullForm formular","");
getInputTextarea("data_6",FORM_MESSAGE,"fullForm textarea","");

#neue checkboxfunction 
getInputCheckboxForm ("data_7",FORM_CHECKBOX, FORM_CHECKBOX_TEXT);
    
getInputSpamschutz();

#Bestaetigungsmail deaktiviert
#if (isset($_POST['bestaetigung']) && $_POST['bestaetigung'] == "true") {

#    $bestaetigung = '<input type="checkbox" name="bestaetigung" value="true" title="'.FORM_CHECK.'" checked="checked" />';

#} else {

#    $bestaetigung = '<input type="checkbox" name="bestaetigung" value="true" title="'.FORM_CHECK.'" />';

#}



print '<table cellspacing="0" cellpadding="0" summary="text">';
print '<tr>';
print '<td style="padding: 0px 10px 0px 0px;" align="left"><span class="button"><input type="submit" value="'.FORM_BUTTON.'" class="button" /></span></td>';
################################print '<td style="padding: 0px;" align="left"><table cellspacing="0" cellpadding="0" summary="text"><tr><td>'.$bestaetigung.'</td><td>&nbsp;'.FORM_CHECK.'</td></tr></table></td>';
print '<td style="padding: 0px;" align="left"><table cellspacing="0" cellpadding="0" summary="text"><tr><td></td><td>&nbsp;</td></tr></table></td>';
print '</tr>';
print '</table>';

print '</form>';
    
close_table();

print '</div>';
print '</div>';

?>