Viên ngọc phương Đông

ruạṛ

<?php
//these calls will get repeated in template.php so use require_once
$data_dir = $_SERVER['DOCUMENT_ROOT'].'/admin/scripts-includes/';
$template_dir = $_SERVER['DOCUMENT_ROOT'].'/resources/template/';
require_once $data_dir.'universal.php';
require_once $template_dir.'functions.php';

session_start();
$connID = connect_to_db();
$mailbody = $m = '';

/**
 * get valid product id or abort 
 */
if(!$prod_id = is_numeric_id($_POST['product_id'],false))
{
	getout('','/');
	exit;
}

$p = new product($prod_id);
$p->set_category(is_numeric_id($_POST['category_id'],0));
if(!$p->active){
	getout('','/');
	exit;
}

$json = '{';

foreach($_POST as $f => $v)
{
	if(strtolower($f) == 'security_code' 
		|| strtolower($f) == 'auth' 
		|| strtolower($f) == 'submit' 
		|| strtolower($f) == 'product_id'
		|| strtolower($f) == 'category_id')

{
		continue;
	}
	$$f = $v;
	$mailbody .= ucfirst(str_replace('_',' ',$f)).": $v \n";
	$n = str_replace('-','_',$f);
	$x = str_replace('"',"'",trim($v));//double quotes break the javascript;
	$x = str_replace(array("\r\n","\n","\t"),'\n',$x); // line breaks break the javascript
	$json .= '"'.$n.'":"'.$x.'",';
}

$json = rtrim($json,',').'}';

/**
 * validation
 */
/* captcha
if(!isset($_SESSION['security_code']) 
	|| empty($_SESSION['security_code']) 
	|| !isset($_POST['auth']) 
	|| empty($_POST['auth']) 
	|| ($_SESSION['security_code'] != $_POST['auth'] ) ) 
{
	$m .= 'Incorrect security code, please try again.'.$_SESSION['security_code'].' | '.$_POST['auth'];
	setcookie('formMessage', '<p>'.$m.'</p>', time()+30,'/');
	setcookie('contactformJson',$json,time()+30,'/');
	getout('');
	exit;
}
// */
if($contact_name == '' || !is_email($contact_email))
{
	$m .= 'Please enter a contact name and valid email address';
	setcookie('formMessage', '<p class="message">'.$m.'</p>', time()+30,'/');
	setcookie('productformJson',$json,time()+30,'/');
	getout('');
	exit;
} 
$email_address = SITE_FROM_ADDRESS;
//$email_address = 'matt@activatedesign.co.nz'; //testing
//$email_address = 'programmer@activatedesign.co.nz'; //development

$subject = 'Enquiry about '.$p->name.' from '.SITE_FROM_NAME.' website';
$headers = "From: $email_address" . "\n" . "Reply-To: $email_address" . "\n" . "Return-Path: $email_address" . "\n" . 'X-Mailer: PHP/' . phpversion();
$mailbody = 'http://'.SITE_ROOT.$p->path.' ( http://'.SITE_ROOT.'/admin/edit-product.php?prod='.$prod_id.' )

'.$mailbody;

mail($email_address, $subject, $mailbody, $headers);

//* default action
$form = true;
require_once($_SERVER['DOCUMENT_ROOT'].'/resources/template/template.php');
//*/
//header('Location: /Thank-You/'); //alternative