Ravenna · March 1, 2011 00:41
diff --git a/form_mailform.php b/form_mailform.php
 <?php 


 // Please specify your Mail Server - Example: mail.yourdomain.com.
 ini_set("SMTP","gwa1.webcontrolcenter.com");

 // Please specify an SMTP Number 25 and 8889 are valid SMTP Ports.
 ini_set("smtp_port","25");

 // Please specify the return address to use
 ini_set('sendmail_from', '[email protected]');



 # You can use this script to submit your forms or to receive orders by email.
 # You can use this script to submit your forms or to receive orders by email.
 $MailToAddress = $_POST['Location'] . " , ". $_POST['Email'] ; // your email address
 $redirectURL = "http://sealantspecialists.com/index.php/thank-you/"; // the URL of the thank you page.
 $MailSubject = "Sealant Specialists Form Submission"; // the subject of the email
 $sendHTML = FALSE; //set to "false" to receive Plain TEXT e-mail
 $serverCheck = TRUE; // if, for some reason you can't send e-mails, set this to "false"
 #$MailToCC = $_POST['Manager'];
 #$MailToCC = $_POST['Department'] . " , ". $_POST['Email'] ; 


 # copyright 2006 Web4Future.com =================== READ THIS ===================================================

 # If you are asking for a name and an email address in your form, you can name the input fields "name" and "email".
 # If you do this, the message will apear to come from that email address and you can simply click the reply button to answer it.

 # To block an IP, simply add it to the blockip.txt text file.
 # CHMOD 777 the blockip.txt file (run "CHMOD 777 blockip.txt", without the double quotes) 
 # This is needed because the script tries to block the IP that tried to hack it

 # If you have a multiple selection box or multiple checkboxes, you MUST name the multiple list box or checkbox as "name[]" instead of just "name" 
 # you must also add "multiple" at the end of the tag like this: <select name="myselectname[]" multiple> 
 # you have to do the same with checkboxes

 /*****************************************************************

 	Web4Future Easiest Form2Mail (GPL).
 	Copyright (C) 1998-2006 Web4Future.com All Rights Reserved. 
 	http://www.Web4Future.com/
 	This script was written by George L. & Calin S. from Web4Future.com

 	This program is free software; you can redistribute it and/or modify
 	it under the terms of the GNU General Public License as published by
 	the Free Software Foundation; either version 2 of the License, or
 	(at your option) any later version.

 	This program is distributed in the hope that it will be useful,
 	but WITHOUT ANY WARRANTY; without even the implied warranty of
 	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 	GNU General Public License for more details.

 *****************************************************************/

 # DO NOT EDIT BELOW THIS LINE UNLESS YOU KNOW WHAT YOU ARE DOING ===================================================
 $w4fver =  "2.2";
 $ip = ($_SERVER['HTTP_X_FORWARDED_FOR'] == "" ? $_SERVER['REMOTE_ADDR'] : $_SERVER['HTTP_X_FORWARDED_FOR']);
 //function blockIP
 function blockip($ip) {
 	$handle = @fopen("blockip.txt", 'a');
 	@fwrite($handle, $ip."\n");
 	@fclose($handle); 
 }
 $w4fx = stristr(file_get_contents('blockip.txt'),getenv('REMOTE_ADDR')); 
 if ($serverCheck) { 
 	if (preg_match ("/".str_replace("www.", "", $_SERVER["SERVER_NAME"])."/i", $_SERVER["HTTP_REFERER"])) { $w4fy = TRUE; } else { $w4fy = FALSE; }
 } else { $w4fy = TRUE; }
 if (($w4fy === TRUE) && ($w4fx === FALSE)) {
 $w4fMessage = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\"><html>\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\"></head><body><font face=3Dverdana size=3D2>";
 if (count($_GET) >0) {
 	reset($_GET);
 	while(list($key, $val) = each($_GET)) {
 		$GLOBALS[$key] = $val;
 		if (is_array($val)) { 
 			$w4fMessage .= "<b>$key:</b> ";
 			foreach ($val as $vala) { 
 				$vala =stripslashes($vala);
 				$vala = htmlspecialchars($vala);
 				if (trim($vala)) { if (stristr($vala,"Content-Type:") || stristr($vala,"MIME-Version") || stristr($vala,"Content-Transfer-Encoding") || stristr($vala,"bcc:")) { blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); }	}
 				$w4fMessage .= "$vala, ";
 			} 
 			$w4fMessage .= "<br>\n";
 		} 	
 		else {
 			$val = stripslashes($val);
 			if (trim($val)) { if (stristr($val,"Content-Type:") || stristr($val,"MIME-Version") || stristr($val,"Content-Transfer-Encoding") || stristr($val,"bcc:")) { blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); }	}
 			if (($key == "Submit") || ($key == "submit")) { } 	
 			else { 	if ($val == "") { $w4fMessage .= "$key: - <br>\n"; }
 					else { $w4fMessage .= "<b>$key:</b> $val<br>\n"; }
 			}
 		}
 	} // end while
 }//end if
 else {
 	reset($_POST);
 	while(list($key, $val) = each($_POST)) {
 		$GLOBALS[$key] = $val;
 		if (is_array($val)) { 
 			$w4fMessage .= "<b>$key:</b> ";
 			foreach ($val as $vala) { 
 				$vala =stripslashes($vala);
 				$vala = htmlspecialchars($vala);
 				if (trim($vala)) { if (stristr($vala,"Content-Type:") || stristr($vala,"MIME-Version") || stristr($vala,"Content-Transfer-Encoding") || stristr($vala,"bcc:")) {blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); }	}				
 				$w4fMessage .= "$vala, ";
 			} 
 			$w4fMessage .= "<br>\n";
 		} 	
 		else {
 			$val = stripslashes($val);
 			if (trim($val)) { if (stristr($val,"Content-Type:") || stristr($val,"MIME-Version") || stristr($val,"Content-Transfer-Encoding") || stristr($val,"bcc:")) {blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); }	}
 			if (($key == "Submit") || ($key == "submit")) { } 	
 			else { 	if ($val == "") { $w4fMessage .= "$key: - <br>\n"; }
 					else { $w4fMessage .= "<b>$key:</b> $val<br>\n"; }
 			}
 		}
 	} // end while
 	}//end else
 	$w4fMessage .= "<font size=3D1><br><br>\n Sender IP: ".$ip."</font></font></body></html>";
    $w4f_what = array("/To:/i", "/Cc:/i", "/Bcc:/i","/Content-Type:/i","/\n/");
 	$name = preg_replace($w4f_what, "", $name);
 	$email = preg_replace($w4f_what, "", $email);
 if (!$email) {$email = $MailToAddress;}
 	$mailHeader = "From: $name <$email>\r\n";
 	$mailHeader .= "Reply-To: $name <$email>\r\n";
 	$mailHeader .= "Message-ID: <". md5(rand()."".time()) ."@". ereg_replace("www.","",$_SERVER["SERVER_NAME"]) .">\r\n";
 	$mailHeader .= "MIME-Version: 1.0\r\n";
 	if ($sendHTML) {
 		$mailHeader .= "Content-Type: multipart/alternative;";			
 		$mailHeader .= " 	boundary=\"----=_NextPart_000_000E_01C5256B.0AEFE730\"\r\n";					
 	}
 	$mailHeader .= "X-Priority: 3\r\n";
 	$mailHeader .= "X-Mailer: PHP/" . phpversion()."\r\n";
 	$mailHeader .= "X-MimeOLE: Produced By Web4Future Easiest Form2Mail $w4fver\r\n";
 	if ($sendHTML) { 
 		if ($MailToCC) { $mailHeader .= "Bcc: $MailToCC\r\n"; }
 		$mailMessage = "This is a multi-part message in MIME format.\r\n\r\n"; 
 		$mailMessage .= "------=_NextPart_000_000E_01C5256B.0AEFE730\r\n";
 		$mailMessage .= "Content-Type: text/plain;   charset=\"ISO-8859-1\"\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n";			
 		$mailMessage .= trim(strip_tags($w4fMessage))."\r\n\r\n";			
 		$mailMessage .= "------=_NextPart_000_000E_01C5256B.0AEFE730\r\n";			
 		$mailMessage .= "Content-Type: text/html;   charset=\"ISO-8859-1\"\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n";			
 		$mailMessage .= "$w4fMessage\r\n\r\n";			
 		$mailMessage .= "------=_NextPart_000_000E_01C5256B.0AEFE730--\r\n";			
 	}
 	if ($sendHTML === FALSE) {
 		
 		if ($MailToCC) { $mailHeader .= "Bcc: $MailToCC\r\n"; }
 		$mailHeader .= "Content-Type: text/plain;   charset=\"ISO-8859-1\"\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n";			
 		$mailMessage .= trim(strip_tags($w4fMessage))."\r\n\r\n";			
 	}

 	if (!mail($MailToAddress, $MailSubject, $mailMessage,$mailHeader)) { echo "Error sending e-mail!";}
 	else { header("Location: ".$redirectURL); }	
 } else { echo "<center><font face=verdana size=3 color=red><b>NICE TRY, ILLEGAL EXECUTION DETECTED!</b></font></center>";}
 ?>
	<?php


	// Please specify your Mail Server - Example: mail.yourdomain.com.
	ini_set("SMTP","gwa1.webcontrolcenter.com");

	// Please specify an SMTP Number 25 and 8889 are valid SMTP Ports.
	ini_set("smtp_port","25");

	// Please specify the return address to use
	ini_set('sendmail_from', '[email protected]');



	# You can use this script to submit your forms or to receive orders by email.
	# You can use this script to submit your forms or to receive orders by email.
	$MailToAddress = $_POST['Location'] . " , ". $_POST['Email'] ; // your email address
	$redirectURL = "http://sealantspecialists.com/index.php/thank-you/"; // the URL of the thank you page.
	$MailSubject = "Sealant Specialists Form Submission"; // the subject of the email
	$sendHTML = FALSE; //set to "false" to receive Plain TEXT e-mail
	$serverCheck = TRUE; // if, for some reason you can't send e-mails, set this to "false"
	#$MailToCC = $_POST['Manager'];
	#$MailToCC = $_POST['Department'] . " , ". $_POST['Email'] ;


	# copyright 2006 Web4Future.com =================== READ THIS ===================================================

	# If you are asking for a name and an email address in your form, you can name the input fields "name" and "email".
	# If you do this, the message will apear to come from that email address and you can simply click the reply button to answer it.

	# To block an IP, simply add it to the blockip.txt text file.
	# CHMOD 777 the blockip.txt file (run "CHMOD 777 blockip.txt", without the double quotes)
	# This is needed because the script tries to block the IP that tried to hack it

	# If you have a multiple selection box or multiple checkboxes, you MUST name the multiple list box or checkbox as "name[]" instead of just "name"
	# you must also add "multiple" at the end of the tag like this: <select name="myselectname[]" multiple>
	# you have to do the same with checkboxes

	/*****************************************************************

	Web4Future Easiest Form2Mail (GPL).
	Copyright (C) 1998-2006 Web4Future.com All Rights Reserved.
	http://www.Web4Future.com/
	This script was written by George L. & Calin S. from Web4Future.com

	This program is free software; you can redistribute it and/or modify
	it under the terms of the GNU General Public License as published by
	the Free Software Foundation; either version 2 of the License, or
	(at your option) any later version.

	This program is distributed in the hope that it will be useful,
	but WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	GNU General Public License for more details.

	*****************************************************************/

	# DO NOT EDIT BELOW THIS LINE UNLESS YOU KNOW WHAT YOU ARE DOING ===================================================
	$w4fver = "2.2";
	$ip = ($_SERVER['HTTP_X_FORWARDED_FOR'] == "" ? $_SERVER['REMOTE_ADDR'] : $_SERVER['HTTP_X_FORWARDED_FOR']);
	//function blockIP
	function blockip($ip) {
	$handle = @fopen("blockip.txt", 'a');
	@fwrite($handle, $ip."\n");
	@fclose($handle);
	}
	$w4fx = stristr(file_get_contents('blockip.txt'),getenv('REMOTE_ADDR'));
	if ($serverCheck) {
	if (preg_match ("/".str_replace("www.", "", $_SERVER["SERVER_NAME"])."/i", $_SERVER["HTTP_REFERER"])) { $w4fy = TRUE; } else { $w4fy = FALSE; }
	} else { $w4fy = TRUE; }
	if (($w4fy === TRUE) && ($w4fx === FALSE)) {
	$w4fMessage = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\"><html>\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\"></head><body><font face=3Dverdana size=3D2>";
	if (count($_GET) >0) {
	reset($_GET);
	while(list($key, $val) = each($_GET)) {
	$GLOBALS[$key] = $val;
	if (is_array($val)) {
	$w4fMessage .= "<b>$key:</b> ";
	foreach ($val as $vala) {
	$vala =stripslashes($vala);
	$vala = htmlspecialchars($vala);
	if (trim($vala)) { if (stristr($vala,"Content-Type:") \|\| stristr($vala,"MIME-Version") \|\| stristr($vala,"Content-Transfer-Encoding") \|\| stristr($vala,"bcc:")) { blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); } }
	$w4fMessage .= "$vala, ";
	}
	$w4fMessage .= "<br>\n";
	}
	else {
	$val = stripslashes($val);
	if (trim($val)) { if (stristr($val,"Content-Type:") \|\| stristr($val,"MIME-Version") \|\| stristr($val,"Content-Transfer-Encoding") \|\| stristr($val,"bcc:")) { blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); } }
	if (($key == "Submit") \|\| ($key == "submit")) { }
	else { if ($val == "") { $w4fMessage .= "$key: - <br>\n"; }
	else { $w4fMessage .= "<b>$key:</b> $val<br>\n"; }
	}
	}
	} // end while
	}//end if
	else {
	reset($_POST);
	while(list($key, $val) = each($_POST)) {
	$GLOBALS[$key] = $val;
	if (is_array($val)) {
	$w4fMessage .= "<b>$key:</b> ";
	foreach ($val as $vala) {
	$vala =stripslashes($vala);
	$vala = htmlspecialchars($vala);
	if (trim($vala)) { if (stristr($vala,"Content-Type:") \|\| stristr($vala,"MIME-Version") \|\| stristr($vala,"Content-Transfer-Encoding") \|\| stristr($vala,"bcc:")) {blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); } }
	$w4fMessage .= "$vala, ";
	}
	$w4fMessage .= "<br>\n";
	}
	else {
	$val = stripslashes($val);
	if (trim($val)) { if (stristr($val,"Content-Type:") \|\| stristr($val,"MIME-Version") \|\| stristr($val,"Content-Transfer-Encoding") \|\| stristr($val,"bcc:")) {blockip($ip); die("ILLEGAL EXECUTION DETECTED!"); } }
	if (($key == "Submit") \|\| ($key == "submit")) { }
	else { if ($val == "") { $w4fMessage .= "$key: - <br>\n"; }
	else { $w4fMessage .= "<b>$key:</b> $val<br>\n"; }
	}
	}
	} // end while
	}//end else
	$w4fMessage .= "<font size=3D1><br><br>\n Sender IP: ".$ip."</font></font></body></html>";
	$w4f_what = array("/To:/i", "/Cc:/i", "/Bcc:/i","/Content-Type:/i","/\n/");
	$name = preg_replace($w4f_what, "", $name);
	$email = preg_replace($w4f_what, "", $email);
	if (!$email) {$email = $MailToAddress;}
	$mailHeader = "From: $name <$email>\r\n";
	$mailHeader .= "Reply-To: $name <$email>\r\n";
	$mailHeader .= "Message-ID: <". md5(rand()."".time()) ."@". ereg_replace("www.","",$_SERVER["SERVER_NAME"]) .">\r\n";
	$mailHeader .= "MIME-Version: 1.0\r\n";
	if ($sendHTML) {
	$mailHeader .= "Content-Type: multipart/alternative;";
	$mailHeader .= " boundary=\"----=_NextPart_000_000E_01C5256B.0AEFE730\"\r\n";
	}
	$mailHeader .= "X-Priority: 3\r\n";
	$mailHeader .= "X-Mailer: PHP/" . phpversion()."\r\n";
	$mailHeader .= "X-MimeOLE: Produced By Web4Future Easiest Form2Mail $w4fver\r\n";
	if ($sendHTML) {
	if ($MailToCC) { $mailHeader .= "Bcc: $MailToCC\r\n"; }
	$mailMessage = "This is a multi-part message in MIME format.\r\n\r\n";
	$mailMessage .= "------=_NextPart_000_000E_01C5256B.0AEFE730\r\n";
	$mailMessage .= "Content-Type: text/plain; charset=\"ISO-8859-1\"\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n";
	$mailMessage .= trim(strip_tags($w4fMessage))."\r\n\r\n";
	$mailMessage .= "------=_NextPart_000_000E_01C5256B.0AEFE730\r\n";
	$mailMessage .= "Content-Type: text/html; charset=\"ISO-8859-1\"\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n";
	$mailMessage .= "$w4fMessage\r\n\r\n";
	$mailMessage .= "------=_NextPart_000_000E_01C5256B.0AEFE730--\r\n";
	}
	if ($sendHTML === FALSE) {

	if ($MailToCC) { $mailHeader .= "Bcc: $MailToCC\r\n"; }
	$mailHeader .= "Content-Type: text/plain; charset=\"ISO-8859-1\"\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n";
	$mailMessage .= trim(strip_tags($w4fMessage))."\r\n\r\n";
	}

	if (!mail($MailToAddress, $MailSubject, $mailMessage,$mailHeader)) { echo "Error sending e-mail!";}
	else { header("Location: ".$redirectURL); }
	} else { echo "<center><font face=verdana size=3 color=red><b>NICE TRY, ILLEGAL EXECUTION DETECTED!</b></font></center>";}
	?>