'; debug_print_backtrace(); echo ''; FormMailExit("You cannot set FormMail setting '$s_name' to type '$s_new_type'. It should be type '$s_orig_type'."); } $GLOBALS[$s_name] = $m_value; } } /* * Load an optional include file after the configuration. * You can use this to set variables or make adjustments * based on the results of the configuration section. */ @include("formmail-preconfigdefs.inc.php"); /* * Many configuration settings used to be constants. However, constants * cannot be re-defined in PHP. This limitation reduced the value * of "formmail-postconfig.inc.php" and other hook scripts. * Therefore, all configuration settings have been changed to be global * variables (no define's). * * The following defines are for backward-compatibility with any existing * hook scripts that are expecting the old constants. */ define("EMAIL_NAME",Settings::get("EMAIL_NAME")); define("DEF_ALERT",Settings::get("DEF_ALERT")); define("AT_MANGLE",Settings::get("AT_MANGLE")); define("HEAD_CRLF",Settings::get("HEAD_CRLF")); define("BODY_LF",Settings::get("BODY_LF")); define("SENDMAIL_F_OPTION",Settings::get("SENDMAIL_F_OPTION")); define("SENDMAIL_F_OPTION_LINE",Settings::get("SENDMAIL_F_OPTION_LINE")); define("SET_SENDER_FROM_EMAIL",Settings::get("SET_SENDER_FROM_EMAIL")); define("INI_SET_FROM",Settings::get("INI_SET_FROM")); define("ADVANCED_TEMPLATES",Settings::get("ADVANCED_TEMPLATES")); define("LIMITED_IMPORT",Settings::get("LIMITED_IMPORT")); define("FILEUPLOADS",Settings::get("FILEUPLOADS")); define("MAX_FILE_UPLOAD_SIZE",Settings::get("MAX_FILE_UPLOAD_SIZE")); define("FILE_MODE",Settings::get("FILE_MODE")); define("FILE_OVERWRITE",Settings::get("FILE_OVERWRITE")); define("PUT_DATA_IN_URL",Settings::get("PUT_DATA_IN_URL")); define("DB_SEE_INPUT",Settings::get("DB_SEE_INPUT")); define("DB_SEE_INI",Settings::get("DB_SEE_INI")); define("MAXSTRING",Settings::get("MAXSTRING")); define("CHECK_FOR_NEW_VERSION",Settings::get("CHECK_FOR_NEW_VERSION")); define("CHECK_DAYS",Settings::get("CHECK_DAYS")); define("ALERT_ON_USER_ERROR",Settings::get("ALERT_ON_USER_ERROR")); define("ENABLE_ATTACK_DETECTION",Settings::get("ENABLE_ATTACK_DETECTION")); define("ATTACK_DETECTION_URL",Settings::get("ATTACK_DETECTION_URL")); define("ALERT_ON_ATTACK_DETECTION",Settings::get("ALERT_ON_ATTACK_DETECTION")); define("ATTACK_DETECTION_MIME",Settings::get("ATTACK_DETECTION_MIME")); define("ATTACK_DETECTION_JUNK",Settings::get("ATTACK_DETECTION_JUNK")); define("ATTACK_DETECTION_JUNK_CONSONANTS",Settings::get("ATTACK_DETECTION_JUNK_CONSONANTS")); define("ATTACK_DETECTION_JUNK_VOWELS",Settings::get("ATTACK_DETECTION_JUNK_VOWELS")); define("ATTACK_DETECTION_JUNK_CONSEC_CONSONANTS",Settings::get("ATTACK_DETECTION_JUNK_CONSEC_CONSONANTS")); define("ATTACK_DETECTION_JUNK_CONSEC_VOWELS",Settings::get("ATTACK_DETECTION_JUNK_CONSEC_VOWELS")); define("ATTACK_DETECTION_JUNK_TRIGGER",Settings::get("ATTACK_DETECTION_JUNK_TRIGGER")); define("ATTACK_DETECTION_SPECIALS",Settings::get("ATTACK_DETECTION_SPECIALS")); define("ATTACK_DETECTION_MANY_URLS",Settings::get("ATTACK_DETECTION_MANY_URLS")); define("ATTACK_DETECTION_MANY_URL_FIELDS",Settings::get("ATTACK_DETECTION_MANY_URL_FIELDS")); define("ATTACK_DETECTION_IGNORE_ERRORS",Settings::get("ATTACK_DETECTION_IGNORE_ERRORS")); define("ZERO_IS_EMPTY",Settings::get("ZERO_IS_EMPTY")); define("VALIDATE_EMAIL_DOMAIN",Settings::get("VALIDATE_EMAIL_DOMAIN")); define("DESTROY_SESSION",Settings::get("DESTROY_SESSION")); // // for Ajax allow GET method for cross site JSONP // if (IsAjax()) { Settings::set('ALLOW_GET_METHOD',true); } /* * Load an optional include file after the configuration. * You can use this to set variables or make adjustments * based on the results of the configuration section. */ @include("formmail-postconfig.inc.php"); // @formatter:off // // the following constants define all FormMail messages // // To re-align comments, use these search and replace patterns: // Search Replace // ^(\S{35,39})\s+// $1\t// // ^(\S{31,35})\s+// $1\t\t// // ^(\S{27,31})\s+// $1\t\t\t// // ^(\S{23,27})\s+// $1\t\t\t\t// // ^(\S{19,23})\s+// $1\t\t\t\t\t// // define('MSG_SCRIPT_VERSION',0); // This script requires at least PHP version... define('MSG_END_VERS_CHK',1); // If you're happy... define('MSG_VERS_CHK',2); // A later version of FormMail is available... define('MSG_CHK_FILE_ERROR',3); // Unable to create check file... define('MSG_UNK_VALUE_SPEC',4); // derive_fields: unknown value specification... define('MSG_INV_VALUE_SPEC',5); // derive_fields: invalid value specification... define('MSG_DERIVED_INVALID',6); // Some derive_fields specifications... define('MSG_INT_FORM_ERROR',7); // Internal form error... define('MSG_OPTIONS_INVALID',8); // Some mail_options settings... define('MSG_PLSWAIT_REDIR',9); // Please wait while you are redirected... define('MSG_IFNOT_REDIR',10); // If you are not redirected... define('MSG_PEAR_OBJ',11); // Failed to create PEAR Mail object... define('MSG_PEAR_ERROR',12); // PEAR Mail error... define('MSG_NO_FOPT_ADDR',13); // You have specified "SendMailFOption"... define('MSG_MORE_INFO',14); // More information... define('MSG_INFO_STOPPED',15); // Extra alert information suppressed... define('MSG_FM_ALERT',16); // FormMail alert define('MSG_FM_ERROR',17); // FormMail script error define('MSG_FM_ERROR_LINE',18); // The following error occurred... define('MSG_USERDATA_STOPPED',19); // User data suppressed... define('MSG_FILTERED',20); // This alert has been filtered... define('MSG_TEMPLATES',21); // You must set either TEMPLATEDIR or TEMPLATEURL... define('MSG_OPEN_TEMPLATE',22); // Failed to open template... define('MSG_ERROR_PROC',23); // An error occurred while processing... define('MSG_ALERT_DONE',24); // Our staff have been alerted... define('MSG_PLS_CONTACT',25); // Please contact us directly... define('MSG_APOLOGY',26); // We apologize for any inconvenience... define('MSG_ABOUT_FORMMAIL',27); // Your form submission was processed by... define('MSG_PREG_FAILED',28); // preg_match_all failed in FindCRMFields... define('MSG_URL_INVALID',29); // CRM URL "$URL" is not valid... define('MSG_URL_OPEN',30); // Failed to open Customer Relationship... define('MSG_CRM_FAILED',31); // Failure report from CRM... define('MSG_CRM_FORM_ERROR',32); // Your form submission was not... define('MSG_OR',33); // "$ITEM1" or "$ITEM2" define('MSG_NOT_BOTH',34); // not both "$ITEM1" and "$ITEM2" define('MSG_XOR',35); // "$ITEM1" or "$ITEM2" (but not both) define('MSG_IS_SAME_AS',36); // "$ITEM1" is the same as "$ITEM2" define('MSG_IS_NOT_SAME_AS',37); // "$ITEM1" is not the same as "$ITEM2" define('MSG_REQD_OPER',38); // Operator "$OPER" is not valid for "required" define('MSG_PAT_FAILED',39); // Pattern operator "$OPER" failed: pattern... define('MSG_COND_OPER',40); // Operator "$OPER" is not valid... define('MSG_INV_COND',41); // Invalid "conditions" field... define('MSG_COND_CHARS',42); // The conditions field "$FLD" is not valid... define('MSG_COND_INVALID',43); // The conditions field "$FLD" is not valid... define('MSG_COND_TEST_LONG',44); // Field "$FLD" has too many components... define('MSG_COND_IF_SHORT',45); // Field "$FLD" has too few components for... define('MSG_COND_IF_LONG',46); // Field "$FLD" has too many components for... define('MSG_COND_UNK',47); // Field "$FLD" has an unknown command word... define('MSG_MISSING',48); // Missing "$ITEM"... define('MSG_NEED_ARRAY',49); // "$ITEM" must be an array... define('MSG_SUBM_FAILED',50); // Your form submission has failed... define('MSG_FILTER_WRONG',51); // Filter "$FILTER" is not properly... define('MSG_FILTER_CONNECT',52); // Could not connect to site "$SITE"... define('MSG_FILTER_PARAM',53); // Filter "$FILTER" has invalid parameter... define('MSG_FILTER_OPEN_FILE',54); // Filter "$FILTER" cannot open file... define('MSG_FILTER_FILE_ERROR',55); // Filter "$FILTER": read error on file... define('MSG_FILTER_READ_ERROR',56); // Filter '$filter' failed: read error... define('MSG_FILTER_NOT_OK',57); // Filter 'FILTER' failed... define('MSG_FILTER_UNK',58); // Unknown filter... define('MSG_FILTER_CHDIR',59); // Cannot chdir... define('MSG_FILTER_NOTFOUND',60); // Cannot execute... define('MSG_FILTER_ERROR',61); // Filter "$FILTER" failed... define('MSG_SPARE',62); // this value is now spare define('MSG_TEMPLATE_ERRORS',63); // Template "$NAME" caused the... define('MSG_TEMPLATE_FAILED',64); // Failed to process template "$NAME"... define('MSG_MIME_PREAMBLE',65); // (Your mail reader should not show this... define('MSG_MIME_HTML',66); // This message has been generated by FormMail... define('MSG_FILE_OPEN_ERROR',67); // Failed to open file "$NAME"... define('MSG_ATTACH_DATA',68); // Internal error: AttachFile requires... define('MSG_PHP_HTML_TEMPLATES',69); // HTMLTemplate option is only ... define('MSG_PHP_FILE_UPLOADS',70); // For security reasons, file upload... define('MSG_FILE_UPLOAD',71); // File upload attempt ignored... define('MSG_FILE_UPLOAD_ATTACK',72); // Possible file upload attack... define('MSG_PHP_PLAIN_TEMPLATES',73); // PlainTemplate option is only... define('MSG_ATTACH_NAME',74); // filter_options: Attach must contain a name... define('MSG_PHP_BCC',75); // Warning: BCC is probably not supported... define('MSG_CSVCOLUMNS',76); // The "csvcolumns" setting is not... define('MSG_CSVFILE',77); // The "csvfile" setting is not... define('MSG_TARG_EMAIL_PAT_START',78); // Warning: Your TARGET_EMAIL pattern... define('MSG_TARG_EMAIL_PAT_END',79); // Warning: Your TARGET_EMAIL pattern... define('MSG_CONFIG_WARN',80); // The following potential problems... define('MSG_PHP_AUTORESP',81); // Autorespond is only supported... define('MSG_ALERT',82); // This is a test alert message... define('MSG_NO_DEF_ALERT',83); // No DEF_ALERT value has been set.... define('MSG_TEST_SENT',84); // Test message sent. Check your email..... define('MSG_TEST_FAILED',85); // FAILED to send alert message... define('MSG_NO_DATA_PAGE',86); // This URL is a Form submission program... define('MSG_REQD_ERROR',87); // The form required some values that you... define('MSG_COND_ERROR',88); // Some of the values you provided... define('MSG_CRM_FAILURE',89); // The form submission did not succeed... define('MSG_FOPTION_WARN',90); // Warning: You've used SendMailFOption in... define('MSG_NO_ACTIONS',91); // The form has an internal error... define('MSG_NO_RECIP',92); // The form has an internal error... define('MSG_INV_EMAIL',93); // Invalid email addresses... define('MSG_FAILED_SEND',94); // Failed to send email... define('MSG_ARESP_EMAIL',96); // No "email" field was found. Autorespond... define('MSG_ARESP_SUBJ',97); // Your form submission... define('MSG_LOG_NO_VERIMG',98); // No VerifyImgString in session... define('MSG_ARESP_NO_AUTH',99); // Failed to obtain authorization... define('MSG_LOG_NO_MATCH',100); // User did not match image... define('MSG_ARESP_NO_MATCH',101); // Your entry did not match... define('MSG_LOG_FAILED',102); // Failed define('MSG_ARESP_FAILED',103); // Autoresponder failed define('MSG_LOG_OK',104); // OK define('MSG_THANKS_PAGE',105); // Thanks! We've received your.... define('MSG_LOAD_MODULE',106); // Cannot load module.... define('MSG_LOAD_FMCOMPUTE',107); // Cannot load FMCompute.... define('MSG_REGISTER_MODULE',108); // Cannot register module.... define('MSG_COMP_PARSE',109); // These parse errors occurred.... define('MSG_COMP_REG_DATA',110); // Failed to register data field.... define('MSG_COMP_ALERT',111); // The following alert messages.... define('MSG_COMP_DEBUG',112); // The following debug messages... define('MSG_COMP_EXEC',113); // The following errors occurred.... define('MSG_REG_FMCOMPUTE',114); // Cannot register function... define('MSG_USER_ERRORS',115); // A number of errors occurred... define('MSG_CALL_PARAM_COUNT',116); // Invalid parameter count... define('MSG_CALL_UNK_FUNC',117); // Unknown function... define('MSG_SAVE_FILE',118); // Failed to save file.... define('MSG_CHMOD',119); // Failed to chmod file.... define('MSG_VERIFY_MISSING',120); // Image verification string missing... define('MSG_VERIFY_MATCH',121); // Your entry did not match... define('MSG_FILE_NAMES_INVALID',122); // Some file_names specifications... define('MSG_FILE_NAMES_NOT_FILE',123); // Your file_names specification... define('MSG_TEMPL_ALERT',124); // The following alert messages.... define('MSG_TEMPL_DEBUG',125); // The following debug messages... define('MSG_TEMPL_PROC',126); // The following errors occurred.... define('MSG_SAVE_FILE_EXISTS',127); // Cannot save file.... define('MSG_EMPTY_ADDRESSES',128); // $COUNT empty addresses define('MSG_CALL_INVALID_PARAM',129); // Invalid parameter.... define('MSG_INI_PARSE_WARN',130); // Warning: your INI define('MSG_INI_PARSE_ERROR',131); // The FormMail INI... define('MSG_RECAPTCHA_MATCH',132); // reCaptcha verification failed... define('MSG_AND',133); // "$ITEM1" and "$ITEM2" define('MSG_NEXT_PLUS_GOOD',134); // The form specifies both next_form and.... define('MSG_MULTIFORM',135); // You must set either MULTIFORMDIR or MULTIFORMURL... define('MSG_MULTIFORM_FAILED',136); // Failed to process multi-page form template "$NAME"... define('MSG_NEED_THIS_FORM',137); // Multi-page forms require "this_form" field... define('MSG_NO_PHP_SELF',138); // PHP on the server is not providing "PHP_SELF" define('MSG_RETURN_URL_INVALID',139); // Return "$URL" is not valid... define('MSG_GO_BACK',140); // Cannot 'go back' if not a multi-page form... define('MSG_OPEN_URL',141); // Cannot open URL... define('MSG_CANNOT_RETURN',142); // Cannot return to page.... define('MSG_ATTACK_DETECTED',143); // Server attack detected.... define('MSG_ATTACK_PAGE',144); // Your form submission.... define('MSG_ATTACK_MIME_INFO',145); // The field "$FLD" contained... define('MSG_ATTACK_DUP_INFO',146); // The fields "$FLD1" and... define('MSG_ATTACK_SPEC_INFO',147); // Special field "$FLD"... define('MSG_NEED_SCRATCH_PAD',148); // You need to set SCRATCH_PAD... define('MSG_MULTI_UPLOAD',149); // File upload processing failed during multi-page form processing. define('MSG_OPEN_SCRATCH_PAD',150); // Cannot open directory... define('MSG_NO_NEXT_NUM_FILE',151); // You cannot use the %nextnum% feature... define('MSG_NEXT_NUM_FILE',152); // Cannot process next number... define('MSG_ATTACK_MANYURL_INFO',153); // Field "$FLD"... define('MSG_ATTACK_MANYFIELDS_INFO',154); // $NUM fields have URLs.... define('MSG_REV_CAP',155); // ATTACK_DETECTION_REVERSE_CAPTCHA setting.... define('MSG_ATTACK_REV_CAP_INFO',156); // The field "$FLD" contained... define('MSG_ATTACK_JUNK_INFO',157); // The field "$FLD" contained... define('MSG_ARESP_EMPTY',158); // The autoresponse... define('MSG_LOG_RECAPTCHA',159); // reCaptcha process failed... define('MSG_URL_PARSE',160); // URL parse failed define('MSG_URL_SCHEME',161); // Unsupported URL scheme... define('MSG_SOCKET',162); // Socket error ... define('MSG_GETURL_OPEN',163); // Open URL failed: ... define('MSG_RESOLVE',164); // Cannot resolve... define('MSG_FORM_OK',170); // Form Submission Succeeded define('MSG_FORM_ERROR',171); // Form Submission Error define('MSG_GET_DISALLOWED',172); // GET method has... define('MSG_INVALID_SENDER',173); // The form has specified an invalid sender define('MSG_SET_SENDER_FROM_EMAIL',174); // SET_SENDER_FROM_EMAIL is no longer supported // // The following are PHP's file upload error messages // define('MSG_FILE_UPLOAD_ERR_UNK',180); // Unknown error code. define('MSG_FILE_UPLOAD_ERR1',181); // The uploaded file exceeds the upload_max_filesize directive in php.ini. define('MSG_FILE_UPLOAD_ERR2',182); // The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the html form. define('MSG_FILE_UPLOAD_ERR3',183); // The uploaded file was only partially uploaded. define('MSG_FILE_UPLOAD_ERR4',184); // No file was uploaded. define('MSG_FILE_UPLOAD_ERR6',186); // Missing a temporary folder. define('MSG_FILE_UPLOAD_ERR7',187); // Failed to write file to disk. define('MSG_FILE_UPLOAD_ERR8',188); // File upload stopped by extension. define('MSG_FILE_UPLOAD_SIZE',189); // Uploaded file "$NAME" is too big... (not a PHP error code - internal maximum file size error) define('MSG_POST_SIZE_LIMIT',190); // Your form submission exceeds the server's configured size limit. // // following are for derive_fields functions // define('MSG_DER_FUNC_ERROR',200); // derive_fields: invalid function.... define('MSG_DER_FUNC_SIZE_FMT',201); // function 'size' requires.... define('MSG_DER_FUNC_IF_FMT',202); // function 'if' requires.... define('MSG_DER_FUNC_NEXTNUM_FMT',203); // function 'nextnum' requires.... define('MSG_DER_FUNC_EXT_FMT',204); // function 'ext' requires.... define('MSG_DER_FUNC1_FMT',205); // function 'FUNC' requires.... define('MSG_DER_FUNC_SUBSTR_FMT',206); // function 'substr' requires.... define('MSG_USER_ATTACK_JUNK',220); // The following input ... define('MSG_USER_ATTACK_REV_CAP',221); // Your input ... define('MSG_USER_ATTACK_DUP',222); // You have ... define('MSG_USER_ATTACK_MANY_URLS',223); // Your input ... define('MSG_USER_ATTACK_MANY_URL_FIELDS',224); // Your input ... define('MSG_INVALID_EMAIL',230); // The email address...is invalid // @formatter:on // Jump to: // // Return true if using the built-in language // /** @noinspection PhpUnused */ function IsBuiltInLanguage() { global $sLangID; return (strpos($sLangID,"builtin") !== false); } $sSavePath = ""; $bPathSaved = false; // // Set include path to include the given directory. // function AddIncludePath($s_dir = ".") { global $sSavePath,$bPathSaved; $s_path = ini_get('include_path'); $i_path_len = strlen($s_path); $s_sep = IsServerWindows() ? ";" : ":"; // get path separator // // look for it in the include_path // $b_found = false; $i_pos = 0; $i_len = strlen($s_dir); while (!$b_found && ($i_pos = strpos($s_path,$s_dir,$i_pos)) !== false) { if ($i_pos == 0) { if ($i_len == $i_path_len) { $b_found = true; } // the path only has $s_dir elseif ($s_path[$i_len] == $s_sep) { $b_found = true; } } elseif ($s_path[$i_pos - 1] == $s_sep && ($i_pos + $i_len == $i_path_len || $s_path[$i_pos + $i_len] == $s_sep) ) { $b_found = true; } if (!$b_found) { $i_pos++; } } if (!$b_found) { // // allow multiple calls, but only store the original path once // if (!$bPathSaved) { $sSavePath = $s_path; } if (empty($s_path)) { $s_path = $s_dir; } else // // prepend the directory // { $s_path = $s_dir . $s_sep . $s_path; } ini_set('include_path',$s_path); $bPathSaved = true; } } // // Reset the include path after a call to AddIncludePath. // function ResetIncludePath() { global $sSavePath,$bPathSaved; if ($bPathSaved) { ini_set('include_path',$sSavePath); $bPathSaved = false; } } // // Load a language file // function LoadLanguageFile() { global $aMessages,$sLangID,$sHTMLCharSet; AddIncludePath(); if (!@include("language.inc.php")) { @include("language.inc"); } ResetIncludePath(); if (isset($sHTMLCharSet) && $sHTMLCharSet !== "") { header("Content-Type: text/html; charset=$sHTMLCharSet"); } } // // Load the messages array from the default language, and then // override with an optional language file. // Note: all messages get the MNUM parameter sent which they can use. // If they don't use it, the message number is appended. // function LoadBuiltinLanguage() { global $aMessages,$sLangID; $sLangID = "English (builtin)"; // MSG_SCRIPT_VERSION is shown if the PHP version is too old to run // FormMail // Parameters: // $PHPREQ is the minimum required PHP version // $PHPVERS is the version the server currently has installed. $aMessages[MSG_SCRIPT_VERSION] = 'This script requires at least PHP version ' . '$PHPREQ. You have PHP version $PHPVERS.'; // MSG_END_VERS_CHK is sent at the end of an Alert message when // FormMail detects that there's a newer version available // Parameters: none $aMessages[MSG_END_VERS_CHK] = '***************************************************\n' . 'If you are happy with your current version and want\n' . 'to stop these reminders, edit formmail.php and\n' . 'set CHECK_FOR_NEW_VERSION to false.\n' . '***************************************************\n'; // MSG_VERS_CHK is sent in an Alert message when // FormMail detects that there's a newer version available // Parameters: // $TECTITE the website to go to // $FM_VERS the current FormMail version // $NEWVERS the new FormMail version that's available $aMessages[MSG_VERS_CHK] = 'A later version of FormMail is available from $TECTITE.\n' . 'You are currently using version $FM_VERS.\n' . 'The new version available is $NEWVERS.\n'; // MSG_CHK_FILE_ERROR is sent in an Alert message when // FormMail cannot create a file to record the time of version check. // Parameters: // $FILE the file name that could not be created // $ERROR the actual error message $aMessages[MSG_CHK_FILE_ERROR] = 'Unable to create check file "$FILE": $ERROR'; // MSG_UNK_VALUE_SPEC is sent in an Alert message when // a form uses an unknown value specification in derive_fields. // Parameters: // $SPEC the unknown value specification // $MSG additional message $aMessages[MSG_UNK_VALUE_SPEC] = 'derive_fields: unknown value specification ' . '"$SPEC"$MSG'; // MSG_INV_VALUE_SPEC is sent in an Alert message when // a form uses a value specification in derive_fields that's // formatted incorrectly (missing terminating '%') // Parameters: // $SPEC the invalid value specification $aMessages[MSG_INV_VALUE_SPEC] = 'derive_fields: invalid value specification ' . '"$SPEC" (possibly missing a "%")'; // MSG_DERIVED_INVALID is sent in an Alert message when // a form's derive_fields setting has errors // Parameters: none // A list of errors is appended on separate lines $aMessages[MSG_DERIVED_INVALID] = 'Some derive_fields specifications are invalid $MNUM:\n'; // MSG_INT_FORM_ERROR is sent in an Alert message and displayed // to the form user // Parameters: none $aMessages[MSG_INT_FORM_ERROR] = 'Internal form error'; // MSG_OPTIONS_INVALID is sent in an Alert message when // a form's options settings are invalid. This applies to // mail_options, filter_options, crm_options, and autorespond // Parameters: // $OPT the name of the options field // A list of errors is appended on separate lines $aMessages[MSG_OPTIONS_INVALID] = 'Some $OPT settings are undefined $MNUM:\n'; // MSG_PLSWAIT_REDIR is shown to the user for a redirect // with JavaScript // Parameters: none $aMessages[MSG_PLSWAIT_REDIR] = 'Please wait while you are redirected...'; // MSG_IFNOT_REDIR is shown to the user for a redirect // with JavaScript // Parameters: // $URL the URL to redirect to $aMessages[MSG_IFNOT_REDIR] = 'If you are not automatically redirected, ' . 'please click here.'; // MSG_PEAR_OBJ is shown to the user if the PEAR Mail object // cannot be created // Parameters: none $aMessages[MSG_PEAR_OBJ] = 'Failed to create PEAR Mail object'; // MSG_PEAR_ERROR is sent in an Alert message if the PEAR Mail processing // reports an error // Parameters: // $MSG the error message from PEAR $aMessages[MSG_PEAR_ERROR] = 'PEAR Mail error: $MSG'; // MSG_NO_FOPT_ADDR is sent in an Alert message SendMailFOption is // specified in the form and no email address has been provided // Parameters: none $aMessages[MSG_NO_FOPT_ADDR] = 'You have specified "SendMailFOption" in your ' . 'form, but there is no email address to use'; // MSG_MORE_INFO is sent in an Alert message on a line by itself, just // before extra information about the FormMail processing that may have // led to the alert message // Parameters: none $aMessages[MSG_MORE_INFO] = 'More information:'; // MSG_INFO_STOPPED is sent in an Alert message to say that extra // alert information has been suppressed because of potential security // problems with showing it. // Parameters: none $aMessages[MSG_INFO_STOPPED] = '(Extra alert information suppressed for ' . 'security purposes. $MNUM)'; // MSG_FM_ALERT is sent as the subject line of an Alert message // Parameters: none $aMessages[MSG_FM_ALERT] = 'FormMail alert'; // MSG_FM_ERROR is sent as the subject line of an Alert message // Parameters: none $aMessages[MSG_FM_ERROR] = 'FormMail script error'; // MSG_FM_ERROR_LINE is sent in an Alert message on a // separate line to introduce the actual error message // Parameters: none $aMessages[MSG_FM_ERROR_LINE] = 'The following error occurred in FormMail $MNUM:'; // MSG_USERDATA_STOPPED is sent in an Alert message to say that the // user's data has been suppressed because of potential security // problems with showing it. // Parameters: none $aMessages[MSG_USERDATA_STOPPED] = '(User data suppressed for security ' . 'purposes. $MNUM)'; // MSG_FILTERED is sent in an Alert message to show what filter // has been used on the message // Parameters: // $FILTER the name of the filter $aMessages[MSG_FILTERED] = 'This alert has been filtered through "$FILTER" ' . 'for security purposes.'; // MSG_TEMPLATES is sent in an Alert message when a form tries // to use a template, but templates have not been configured in // formmail.php // Parameters: none $aMessages[MSG_TEMPLATES] = 'You must set either TEMPLATEDIR or TEMPLATEURL ' . 'in formmail.php before you can specify ' . 'templates in your forms.'; // MSG_OPEN_TEMPLATE is sent in an Alert message when FormMail cannot // open a template file // Parameters: // $NAME the name of the template file // $ERROR information about the error $aMessages[MSG_OPEN_TEMPLATE] = 'Failed to open template "$NAME" $MNUM: $ERROR'; // MSG_ERROR_PROC is shown to the user as part of an error // page. This message introduces the error. // Parameters: none $aMessages[MSG_ERROR_PROC] = 'An error occurred while processing the ' . 'form $MNUM.\n\n'; // MSG_ALERT_DONE is shown to the user as part of an error // page if an Alert message has been sent to the website owner. // Parameters: // SERVER the name of the server (website) $aMessages[MSG_ALERT_DONE] = 'The staff at $SERVER have been alerted to the error $MNUM.\n'; // MSG_PLS_CONTACT is shown to the user as part of an error // page if an Alert message could *not* be sent to the website owner. // Parameters: // SERVER the name of the server (website) $aMessages[MSG_PLS_CONTACT] = 'Please contact us ($SERVER) directly since this form ' . 'is not working $MNUM.\n'; // MSG_APOLOGY is shown to the user as part of an error // page as an apology for a problem with the form. // Parameters: // SERVER the name of the server (website) $aMessages[MSG_APOLOGY] = '$SERVER apologizes for any inconvenience this error ' . 'may have caused.'; // MSG_ABOUT_FORMMAIL is shown to the user at the foot of pages // generated by FormMail (e.g. the default "Thanks" page and default // error page). // Parameters: // $FM_VERS the FormMail version number // $TECTITE www.tectite.com $aMessages[MSG_ABOUT_FORMMAIL] = 'Your form submission was processed by ' . 'FormMail ' . '($FM_VERS), a PHP script available from ' . '$TECTITE.'; // MSG_PREG_FAILED is sent in an Alert message if the TectiteCRM // system failed to return the expected result. // Parameters: none $aMessages[MSG_PREG_FAILED] = 'preg_match_all failed in FindCRMFields'; // MSG_URL_INVALID is sent in an Alert message if the specified // URL for TectiteCRM is not valid according to the TARGET_URLS // configuration setting // Parameters: // $URL the invalid URL $aMessages[MSG_URL_INVALID] = 'The URL "$URL" to access the Customer ' . 'Relationship Management System is not valid ' . '(see TARGET_URLS in formmail.php)'; // MSG_URL_OPEN is sent in an Alert message if the specified // URL for TectiteCRM cannot be opened // Parameters: // $URL the invalid URL // $ERROR information about the error $aMessages[MSG_URL_OPEN] = 'Failed to open Customer Relationship ' . 'Management System URL "$URL" $MNUM: $ERROR'; // MSG_CRM_FAILED is sent in an Alert message if the TectiteCRM // system doesn't return an OK message // Parameters: // $URL the invalid URL // $MSG more information $aMessages[MSG_CRM_FAILED] = 'Failure report from Customer Relationship ' . 'Management System (url="$URL") $MNUM: $MSG'; // MSG_CRM_FORM_ERROR is shown to the user if the information // passed to TectiteCRM was not accepted // Parameters: none $aMessages[MSG_CRM_FORM_ERROR] = 'Your form submission was not accepted'; // MSG_AND is shown to the user; it shows two items separated // by "and" // Parameters: // $ITEM1 the first item // $ITEM2 the second item $aMessages[MSG_AND] = '"$ITEM1" and "$ITEM2"'; // MSG_OR is shown to the user; it shows two items separated // by "or" // Parameters: // $ITEM1 the first item // $ITEM2 the second item $aMessages[MSG_OR] = '"$ITEM1" or "$ITEM2"'; // MSG_NOT_BOTH is shown to the user; it shows two items that must // be specified together // Parameters: // $ITEM1 the first item // $ITEM2 the second item $aMessages[MSG_NOT_BOTH] = 'not both "$ITEM1" and "$ITEM2"'; // MSG_XOR is shown to the user; it shows two items that must // not be specified together // Parameters: // $ITEM1 the first item // $ITEM2 the second item $aMessages[MSG_XOR] = '"$ITEM1" or "$ITEM2" (but not both)'; // MSG_IS_SAME_AS is shown to the user; it shows two items that must // not be the same value // Parameters: // $ITEM1 the first item // $ITEM2 the second item $aMessages[MSG_IS_SAME_AS] = '"$ITEM1" is the same as "$ITEM2"'; // MSG_IS_NOT_SAME_AS is shown to the user; it shows two items that must // be the same value // Parameters: // $ITEM1 the first item // $ITEM2 the second item $aMessages[MSG_IS_NOT_SAME_AS] = '"$ITEM1" is not the same as "$ITEM2"'; // MSG_REQD_OPER is sent in an Alert message when an unknown // operator has been used in a "required" specification // Parameters: // $OPER the unknown operator $aMessages[MSG_REQD_OPER] = 'Operator "$OPER" is not valid for "required"'; // MSG_PAT_FAILED is sent in an Alert message when a "conditions" pattern // match has not matched anything (this isn't necessarily an error) // Parameters: // $OPER the "conditions" operator // $PAT the "conditions" pattern // $VALUE the value that was searched $aMessages[MSG_PAT_FAILED] = 'Pattern operator "$OPER" failed: pattern ' . '"$PAT", value searched was "$VALUE".'; // MSG_COND_OPER is sent in an Alert message when a "conditions" // operator is not value // Parameters: // $OPER the "conditions" operator $aMessages[MSG_COND_OPER] = 'Operator "$OPER" is not valid for "conditions"'; // MSG_INV_COND is sent in an Alert message when a "conditions" // field is not valid // Parameters: // FLD the field name $aMessages[MSG_INV_COND] = 'Invalid "conditions" field "$FLD" - not a string or array.'; // MSG_COND_CHARS is sent in an Alert message when a "conditions" // field is missing the mandatory first 2 characters (the separators) // Parameters: // FLD the field name // COND the conditions field value $aMessages[MSG_COND_CHARS] = 'The conditions field "$FLD" is not valid. ' . 'You must provide the two separator ' . 'characters at the beginning. You had "$COND".'; // MSG_COND_INVALID is sent in an Alert message when a "conditions" // field has the wrong format // Parameters: // FLD the field name // COND the conditions field value // SEP the internal separator character for the field. $aMessages[MSG_COND_INVALID] = 'The conditions field "$FLD" is not valid. ' . 'There must be at least 5 components ' . 'separated by "$SEP". Your value was "$COND".'; // MSG_COND_TEST_LONG is sent in an Alert message when a "conditions" // TEST value has too many components // Parameters: // FLD the field name // COND the conditions field value // SEP the list separator character for the field. $aMessages[MSG_COND_TEST_LONG] = 'Field "$FLD" has too many components for ' . 'a "TEST" command: "$COND".\nAre you missing ' . 'a "$SEP"?'; // MSG_COND_IF_SHORT is sent in an Alert message when a "conditions" // IF value has too few components // Parameters: // FLD the field name // COND the conditions field value // SEP the internal separator character for the field. $aMessages[MSG_COND_IF_SHORT] = 'Field "$FLD" has too few components for ' . 'an "IF" command: "$COND".\nThere must be ' . 'at least 6 components separated by "$SEP"'; // MSG_COND_IF_LONG is sent in an Alert message when a "conditions" // IF value has too many components // Parameters: // FLD the field name // COND the conditions field value // SEP the list separator character for the field. $aMessages[MSG_COND_IF_LONG] = 'Field "$FLD" has too many components for ' . 'an "IF" command: "$COND".\nAre you missing ' . 'a "$SEP"?'; // MSG_COND_UNK is sent in an Alert message when a "conditions" // value has an unknown command // Parameters: // FLD the field name // COND the conditions field value // CMD the unknown command $aMessages[MSG_COND_UNK] = 'Field "$FLD" has an unknown command word ' . '"$CMD": "$COND".'; // MSG_MISSING is sent in an Alert message when // a socket filter is incorrectly defined // Parameters: // ITEM the missing item $aMessages[MSG_MISSING] = 'Missing "$ITEM"'; // MSG_NEED_ARRAY is sent in an Alert message when // a socket filter is incorrectly defined // Parameters: // ITEM the item that should be an array $aMessages[MSG_NEED_ARRAY] = '"$ITEM" must be an array'; // MSG_SUBM_FAILED is shown to the user when an internal error // as occurred and that error is not to be shown // Parameters: none $aMessages[MSG_SUBM_FAILED] = 'Your form submission has failed due to ' . 'an error on our server.'; // MSG_FILTER_WRONG is sent in an Alert message when // a socket filter is incorrectly defined // Parameters: // FILTER the filter name // ERRORS a string containing a list of errors $aMessages[MSG_FILTER_WRONG] = 'Filter "$FILTER" is not properly defined: ' . '$ERRORS'; // MSG_FILTER_CONNECT is sent in an Alert message when FormMail // cannot connect to a socket filter // Parameters: // FILTER the filter name // SITE the site // ERRNUM socket error number // ERRSTR socket error message $aMessages[MSG_FILTER_CONNECT] = 'Could not connect to site "$SITE" ' . 'for filter "$FILTER" ($ERRNUM): $ERRSTR'; // MSG_FILTER_PARAM is sent in an Alert message when a socket // filter has an invalid parameter specification // Parameters: // FILTER the filter name // NUM parameter number // NAME parameter name $aMessages[MSG_FILTER_PARAM] = 'Filter "$FILTER" has invalid parameter ' . '#$NUM: no "$NAME"'; // MSG_FILTER_OPEN_FILE is sent in an Alert message when a socket // filter cannot open the required file // Parameters: // FILTER the filter name // FILE the file that could not be opened // ERROR the error message $aMessages[MSG_FILTER_OPEN_FILE] = 'Filter "$FILTER" cannot open file ' . '"$FILE": $ERROR'; // MSG_FILTER_FILE_ERROR is sent in an Alert message when a socket // filter gets an error message during reading a file // Parameters: // FILTER the filter name // FILE the file that could not be opened // ERROR the error message // NLINES the number of lines that were read successfully $aMessages[MSG_FILTER_FILE_ERROR] = 'Filter "$FILTER": read error on file ' . '"$FILE" after $NLINES lines: $ERROR'; // MSG_FILTER_READ_ERROR is sent in an Alert message when a socket // filter gets an error during reading from the socket // Parameters: // FILTER the filter name // ERROR the error message $aMessages[MSG_FILTER_READ_ERROR] = 'Filter "$FILTER" failed: read error: ' . '$ERROR'; // MSG_FILTER_NOT_OK is sent in an Alert message when a socket // filter fails to return the agreed __OK__ indicator // Parameters: // FILTER the filter name // DATA the data returned from the filter $aMessages[MSG_FILTER_NOT_OK] = 'Filter "$FILTER" failed (missing ' . '__OK__ line): $DATA'; // MSG_FILTER_UNK is sent in an Alert message // when an unknown filter is specified by a form // Parameters: // FILTER the filter name $aMessages[MSG_FILTER_UNK] = 'Unknown filter "$FILTER"'; // MSG_FILTER_CHDIR is sent in an Alert message // when FormMail cannot change to the filter's directory // Parameters: // FILTER the filter name // DIR the directory name // ERROR an error message from the system $aMessages[MSG_FILTER_CHDIR] = 'Cannot chdir to "$DIR" to run filter ' . '"$FILTER": $ERROR'; // MSG_FILTER_NOTFOUND is sent in an Alert message // when FormMail cannot execute the filter // Parameters: // FILTER the filter name // CMD the command line being executed // ERROR an error message from the system $aMessages[MSG_FILTER_NOTFOUND] = 'Cannot execute filter "$FILTER" with ' . 'command "$CMD": $ERROR'; // MSG_FILTER_ERROR is sent in an Alert message // when a filter returns a non-zero status // Parameters: // FILTER the filter name // ERROR an error message from the system // STATUS the status return from the command $aMessages[MSG_FILTER_ERROR] = 'Filter "$FILTER" failed (status $STATUS): ' . '$ERROR'; // MSG_SPARE is a spare message $aMessages[MSG_SPARE] = ''; // MSG_TEMPLATE_ERRORS is sent as part of an Alert message // when a template has generated some errors. The message // should end with a new line and the actual errors are // output after it. // Parameters: // NAME the template name $aMessages[MSG_TEMPLATE_ERRORS] = 'Template "$NAME" caused the ' . 'following errors $MNUM:\n'; // MSG_TEMPLATE_FAILED is sent in an Alert message // when processing a template has failed. // Parameters: // NAME the template name $aMessages[MSG_TEMPLATE_FAILED] = 'Failed to process template "$NAME"'; // MSG_MIME_PREAMBLE is sent in the preamble of MIME emails // Parameters: none $aMessages[MSG_MIME_PREAMBLE] = '(Your mail reader should not show this ' . 'text.\nIf it does you may need to ' . 'upgrade to more modern software.)'; // MSG_MIME_HTML is sent in the preamble of HTML emails // Parameters: // NAME the template name $aMessages[MSG_MIME_HTML] = 'This message has been generated by FormMail ' . 'using an HTML template\ncalled "$NAME". The ' . 'raw text of the form results\nhas been ' . 'included below, but your mail reader should ' . 'display the HTML\nversion only (unless it\'s ' . 'not capable of doing so).'; // MSG_FILE_OPEN_ERROR is sent in an Alert message when FormMail // cannot open a file // Parameters: // NAME the file name // TYPE the type of file // ERROR the system error message $aMessages[MSG_FILE_OPEN_ERROR] = 'Failed to open $TYPE file "$NAME": $ERROR'; // MSG_ATTACH_DATA is sent in an Alert message when the file // attachment through 'data' has gone wrong. // Parameters: none $aMessages[MSG_ATTACH_DATA] = 'Internal error: AttachFile requires ' . '"tmp_name" or "data"'; // MSG_PHP_HTML_TEMPLATES is sent in an Alert message when an // HTML template is used but the PHP version is too old. (deprecated) // Parameters: // $PHPVERS the current PHP version $aMessages[MSG_PHP_HTML_TEMPLATES] = ''; // MSG_PHP_FILE_UPLOADS is sent in an Alert message when // file upload is used but the PHP version is too old. (deprecated) // Parameters: // $PHPVERS the current PHP version $aMessages[MSG_PHP_FILE_UPLOADS] = ''; // MSG_FILE_UPLOAD is sent in an Alert message when // file upload is attempted but FormMail is not configured to allow // it // Parameters: none $aMessages[MSG_FILE_UPLOAD] = 'File upload attempt ignored'; // MSG_FILE_UPLOAD_ATTACK is sent in an Alert message when // possible file upload attack is detected // Parameters: // NAME file name // TEMP temporary file name // FLD name of the file upload field $aMessages[MSG_FILE_UPLOAD_ATTACK] = 'Possible file upload attack ' . 'detected: field="$FLD", name="$NAME" ' . 'temp name="$TEMP"'; // MSG_PHP_PLAIN_TEMPLATES is sent in an Alert message when a // Plain template is used but the PHP version is too old. (deprecated) // Parameters: // $PHPVERS the current PHP version $aMessages[MSG_PHP_PLAIN_TEMPLATES] = ''; // MSG_ATTACH_NAME is sent in an Alert message when a // the form uses the Attach feature without specifying a file name // Parameters: none $aMessages[MSG_ATTACH_NAME] = 'filter_options: Attach must contain a name ' . '(e.g. Attach=data.txt)'; // MSG_PHP_BCC is sent in an Alert message when a // the form uses the BCC feature and the PHP version may not support it // (deprecated) // Parameters: // $PHPVERS the current PHP version $aMessages[MSG_PHP_BCC] = ''; // MSG_CSVCOLUMNS is sent in an Alert message when a csvcolumns field // is not correct // Parameters: // $VALUE the csvcolumns field value $aMessages[MSG_CSVCOLUMNS] = 'The "csvcolumns" setting is not ' . 'valid: "$VALUE"'; // MSG_CSVFILE is sent in an Alert message when a csvfile field // is not correct // Parameters: // $VALUE the csvfile field value $aMessages[MSG_CSVFILE] = 'The "csvfile" setting is not valid: "$VALUE"'; // MSG_TARG_EMAIL_PAT_START is sent in an Alert message when a // $TARGET_EMAIL pattern is insecure because of a missing '^' // at the beginning // Parameters: // $PAT the pattern $aMessages[MSG_TARG_EMAIL_PAT_START] = 'Warning: Your TARGET_EMAIL pattern ' . '"$PAT" is missing a ^ at the ' . 'beginning.'; // MSG_TARG_EMAIL_PAT_END is sent in an Alert message when a // $TARGET_EMAIL pattern is insecure because of a missing '$' // at the end // Parameters: // $PAT the pattern $aMessages[MSG_TARG_EMAIL_PAT_END] = 'Warning: Your TARGET_EMAIL pattern ' . '"$PAT" is missing a $ at the end.'; // MSG_CONFIG_WARN is sent in an Alert message when the FormMail // configuration may have some problems. The messages are // passed on separate lines, so the line terminations below // are important. // Parameters: // $MESGS lines of messages $aMessages[MSG_CONFIG_WARN] = 'The following potential problems were found ' . 'in your configuration:\n$MESGS\n\n' . 'These are not necessarily errors, but you ' . 'should review the documentation\n' . 'inside formmail.php. If you are sure your ' . 'configuration is correct\n' . 'you can disable the above messages by ' . 'changing the CONFIG_CHECK settings.'; // MSG_PHP_AUTORESP is sent in an Alert message when the PHP version // does not support autoresponding (deprecated) // Parameters: // $PHPVERS current PHP version $aMessages[MSG_PHP_AUTORESP] = ''; // MSG_ALERT is the test alert message (formmail.php?testalert=1) // Parameters: // $LANG the language ID // $PHPVERS PHP version // $FM_VERS FormMail version // $SERVER server type // $DOCUMENT_ROOT PHP's DOCUMENT_ROOT value // $SCRIPT_FILENAME PHP's SCRIPT_FILENAME value // $PATH_TRANSLATED PHP's PATH_TRANSLATED value // $REAL_DOCUMENT_ROOT the REAL_DOCUMENT_ROOT value $aMessages[MSG_ALERT] = 'This is a test alert message $MNUM\n' . 'Loaded language is $LANG\n' . 'PHP version is $PHPVERS\n' . 'FormMail version is $FM_VERS\n' . 'Server type: $SERVER\n' . '\n' . 'DOCUMENT_ROOT: $DOCUMENT_ROOT\n' . 'SCRIPT_FILENAME: $SCRIPT_FILENAME\n' . 'PATH_TRANSLATED: $PATH_TRANSLATED\n' . 'REAL_DOCUMENT_ROOT: $REAL_DOCUMENT_ROOT'; // MSG_NO_DEF_ALERT is displayed if you use the testalert feature // and no DEF_ALERT setting has been provided. // Parameters: none $aMessages[MSG_NO_DEF_ALERT] = 'No DEF_ALERT value has been set.'; // MSG_TEST_SENT is displayed if when use the testalert feature // Parameters: none $aMessages[MSG_TEST_SENT] = 'Test message sent. Check your email.'; // MSG_TEST_FAILED is displayed if when use the testalert feature // and the mail sending fails. // Parameters: none $aMessages[MSG_TEST_FAILED] = 'FAILED to send alert message. Check your ' . 'server error logs.'; // MSG_NO_DATA_PAGE is the page that's displayed if the user // just opens the URL to FormMail directly. // Parameters: none $aMessages[MSG_NO_DATA_PAGE] = 'This URL is a Form submission program.\n' . 'It appears the form is not working ' . 'correctly as there was no data found.\n' . 'You\'re not supposed to browse to this ' . 'URL; it should be accessed from a form.'; // MSG_REQD_ERROR is displayed to the user as a default error // message when they haven't supplied some required fields // Parameters: none $aMessages[MSG_REQD_ERROR] = 'The form required some values that you ' . 'did not seem to provide.'; // MSG_COND_ERROR is displayed to the user as a default error // message when some form conditions have failed // Parameters: none $aMessages[MSG_COND_ERROR] = 'Some of the values you provided are not valid.'; // MSG_CRM_FAILURE is displayed to the user when submission // to the CRM has failed. // Parameters: // $URL the URL that was used // $DATA data returned from the CRM $aMessages[MSG_CRM_FAILURE] = 'The form submission did not succeed due to ' . 'a CRM failure. URL was \'$URL\'. ' . 'Returned CRM data:\n$DATA'; // MSG_FOPTION_WARN is sent in an Alert message when the form // uses the superseded SendMailFOption feature // Parameters: // $LINE line number for SENDMAIL_F_OPTION $aMessages[MSG_FOPTION_WARN] = 'Warning: You\'ve used SendMailFOption in ' . '"mail_options" in your form. This has been ' . 'superseded with a configuration setting ' . 'inside formmail.php. Please update your ' . 'formmail.php configuration (look for ' . 'SENDMAIL_F_OPTION on line $LINE) and set ' . 'it to "true", then remove SendMailFOption ' . 'from your form(s).'; // MSG_NO_ACTIONS is sent in an Alert message when there is no // action to perform or email address to send to // Parameters: none $aMessages[MSG_NO_ACTIONS] = 'The form has an internal error - no actions ' . 'or recipients were specified.'; // MSG_NO_RECIP is sent in an Alert message when there are no // valid recipients to send to // Parameters: none $aMessages[MSG_NO_RECIP] = 'The form has an internal error - no valid ' . 'recipients were specified.'; // MSG_INV_EMAIL is sent in an Alert message when there are errors // in the email addresses specified in the form // Parameters: // $ERRORS list of errors $aMessages[MSG_INV_EMAIL] = 'Invalid email addresses were specified ' . 'in the form $MNUM:\n$ERRORS'; // MSG_FAILED_SEND is sent in an Alert message when the mail sending fails. // Parameters: none $aMessages[MSG_FAILED_SEND] = 'Failed to send email'; // MSG_ARESP_EMAIL is sent in an Alert message when // no email address has been specified for an autoreponse // Parameters: none $aMessages[MSG_ARESP_EMAIL] = 'No "email" field was found. Autorespond ' . 'requires the submitter\'s email address.'; // MSG_ARESP_SUBJ is the default subject for the auto response email // Parameters: none $aMessages[MSG_ARESP_SUBJ] = 'Your form submission'; // MSG_LOG_NO_VERIMG is written to the auto respond log file // if no VerifyImgString session variable was found // Parameters: none $aMessages[MSG_LOG_NO_VERIMG] = 'No VerifyImgString or turing_string in session, ' . 'no reverse CAPTCHA, no reCaptcha'; // MSG_ARESP_NO_AUTH is shown to the user // if no VerifyImgString session variable was found // Parameters: none $aMessages[MSG_ARESP_NO_AUTH] = 'Failed to obtain authorization to send ' . 'you email. This is probably a fault on ' . 'the server.'; // MSG_LOG_NO_MATCH is written to the auto respond log file // if the user's entry did not match the image verification // Parameters: none $aMessages[MSG_LOG_NO_MATCH] = 'User did not match image'; // MSG_LOG_RECAPTCHA is written to the auto respond log file // if the reCaptcha process fails // Parameters: // ERR the reCaptcha error code $aMessages[MSG_LOG_RECAPTCHA] = 'reCaptcha process failed ($ERR)'; // MSG_ARESP_NO_MATCH is shown to the user // if the user's entry did not match the image verification // Parameters: none $aMessages[MSG_ARESP_NO_MATCH] = 'Your entry did not match the image'; // MSG_LOG_FAILED is written to the auto respond log file // if the autoresponding failed // Parameters: none $aMessages[MSG_LOG_FAILED] = 'Failed'; // MSG_ARESP_FAILED is sent in an Alert message // if the autoresponding failed // Parameters: none $aMessages[MSG_ARESP_FAILED] = 'Autoresponder failed'; // MSG_LOG_OK is written to the auto respond log file // if the autoresponding succeeded // Parameters: none $aMessages[MSG_LOG_OK] = 'OK'; // MSG_THANKS_PAGE is the default page that's displayed if the // submission is successful // Parameters: none $aMessages[MSG_THANKS_PAGE] = 'Thanks! We\'ve received your information ' . 'and, if it\'s appropriate, we\'ll be in ' . 'contact with you soon.'; // MSG_LOAD_MODULE is sent in an alert message if a module // could not be loaded. // Parameters: // $FILE the file name // $ERROR the error message $aMessages[MSG_LOAD_MODULE] = 'Cannot load module from file \'$FILE\': $ERROR'; // MSG_LOAD_FMCOMPUTE is sent in an alert message if the form // specifies at least one "fmcompute" field and the FMCompute // module cannot be loaded. // Parameters: // $FILE the file name // $ERROR the error message $aMessages[MSG_LOAD_FMCOMPUTE] = 'Cannot load FMCompute module from file ' . '\'$FILE\': $ERROR'; // MSG_REGISTER_MODULE is sent in an alert message if a module // could not register with FMCompute // Parameters: // $NAME the name of the module // $ERROR the error message $aMessages[MSG_REGISTER_MODULE] = 'Cannot register module $NAME with ' . 'FMCompute: $ERROR'; // MSG_COMP_PARSE is sent in an alert message if a parse error // occurs in an fmcompute field // Parameters: // $CODE the code with an error // $ERRORS the error messages $aMessages[MSG_COMP_PARSE] = 'These parse errors occurred in the following ' . 'code:\n$ERRORS\n$CODE'; // MSG_COMP_REG_DATA is sent in an alert message if FormMail cannot // register a data field with the FMCompute module // Parameters: // $NAME the field name // $ERROR the error message $aMessages[MSG_COMP_REG_DATA] = 'Failed to register data field \'$NAME\': ' . '$ERROR'; // MSG_COMP_ALERT is sent in an alert message if the FMCompute // module has generated some alert messages. // Parameters: // $ALERTS the alerts $aMessages[MSG_COMP_ALERT] = 'The following alert messages were reported ' . 'from the FMCompute module: $ALERTS'; // MSG_COMP_DEBUG is sent in an alert message if the FMCompute // module has generated some debug messages. // Parameters: // $DEBUG the alerts $aMessages[MSG_COMP_DEBUG] = 'The following debug messages were reported ' . 'from the FMCompute module: $DEBUG'; // MSG_COMP_EXEC is sent in an alert message if the FMCompute // module has generated some error messages during execution // Parameters: // $ERRORS the errors $aMessages[MSG_COMP_EXEC] = 'The following error messages were reported ' . 'from the FMCompute module: $ERRORS'; // MSG_TEMPL_ALERT is sent in an alert message if Advanced Template // Processing has generated some alert messages. // Parameters: // $ALERTS the alerts $aMessages[MSG_TEMPL_ALERT] = 'The following alert messages were reported ' . 'from the Advanced Template Processor: $ALERTS'; // MSG_TEMPL_DEBUG is sent in an alert message if Advanced Template // Processing has generated some debug messages. // Parameters: // $DEBUG the alerts $aMessages[MSG_TEMPL_DEBUG] = 'The following debug messages were reported ' . 'from the Advanced Template Processor: $DEBUG'; // MSG_TEMPL_PROC is sent in an alert message if Advanced Template Processing // has generated some error messages during processing // Parameters: // $ERRORS the errors $aMessages[MSG_TEMPL_PROC] = 'The following error messages were reported ' . 'from the Advanced Template Processor: $ERRORS'; // MSG_REG_FMCOMPUTE is sent in an Alert message when FormMail // cannot register an external function with FMCompute. // Parameters: // FUNC the function that could not be registered // ERROR the error message $aMessages[MSG_REG_FMCOMPUTE] = 'Cannot register function "$FUNC" with ' . 'FMCompute: $ERROR'; // MSG_USER_ERRORS is shown as part of a user error when an FMCompute // has called the "UserError" function one or more times. // Parameters: // NONE $aMessages[MSG_USER_ERRORS] = 'One or more errors occurred in your form submission'; // MSG_CALL_PARAM_COUNT is sent in an alert when a call to a FormMail // function from FMCompute has the wrong number of parameters // Parameters: // FUNC the function name // COUNT the actual number of parameters passed $aMessages[MSG_CALL_PARAM_COUNT] = 'FMCompute called FormMail function ' . '\'$FUNC\' with wrong number of ' . 'parameters: $COUNT'; // MSG_CALL_UNK_FUNC is sent in an alert when FMCompute calls an // unknown FormMail function // Parameters: // FUNC the function name $aMessages[MSG_CALL_UNK_FUNC] = 'FMCompute called unknown FormMail function ' . '\'$FUNC\''; // MSG_SAVE_FILE is sent in an alert when saving a file to // the server has failed // Parameters: // FILE the source file name (usually a temporary file name) // DEST the destination file name // ERR the error message $aMessages[MSG_SAVE_FILE] = 'Failed to save file \'$FILE\' to \'$DEST\': $ERR'; // MSG_SAVE_FILE_EXISTS is sent as part of an alert when saving a file to // the repository ($FILE_REPOSITORY) has failed because the file // already exists and FILE_OVERWRITE is set to false. // Parameters: // FILE the destination file name $aMessages[MSG_SAVE_FILE_EXISTS] = 'Cannot save file to repository as this would ' . 'overwrite \'$FILE\' and you have ' . 'set FILE_OVERWRITE to false.'; // MSG_EMPTY_ADDRESSES is sent as part of an alert when a number of empty // email addresses have been specified in recipients, cc, or bcc // *and* there are no valid addresses provided // in the list // Parameters: // COUNT the number of empty addresses $aMessages[MSG_EMPTY_ADDRESSES] = '$COUNT empty addresses'; // MSG_CALL_INVALID_PARAM is sent in an alert when a call to a FormMail // function from FMCompute has an invalid parameter // Parameters: // FUNC the function name // PARAM the parameter number // CORRECT information about correct values $aMessages[MSG_CALL_INVALID_PARAM] = 'FMCompute called FormMail function ' . '\'$FUNC\' with an invalid parameter ' . 'number $PARAM. Correct values are: $CORRECT'; // MSG_INI_PARSE_WARN is sent in an alert when the INI file // may have a syntax error and cannot be parsed. // Parameters: // FILE the file name $aMessages[MSG_INI_PARSE_WARN] = 'Warning: your INI file \'$FILE\' appears ' . 'to be empty. This may indicate a syntax error.'; // MSG_INI_PARSE_ERROR is shown as an error message when the INI file // has a syntax error and cannot be parsed. // Parameters: // FILE the file name $aMessages[MSG_INI_PARSE_ERROR] = 'The FormMail INI file \'$FILE\' has a syntax error'; // MSG_CHMOD is sent in an alert when changing the protection // mode of a file to has failed // Parameters: // FILE the file name // MODE the mode // ERR the error message $aMessages[MSG_CHMOD] = 'Failed to change protection mode of file \'$FILE\' ' . 'to $MODE: $ERR'; // MSG_VERIFY_MISSING is shown to the user image verification string // was not found // Parameters: none $aMessages[MSG_VERIFY_MISSING] = 'Image verification string missing. This' . ' is probably a fault on the server.'; // MSG_VERIFY_MATCH is shown to the user // if the user's entry did not match the image verification for the // imgverify option // Parameters: none $aMessages[MSG_VERIFY_MATCH] = 'Your entry did not match the image'; // MSG_RECAPTCHA_MATCH is shown to the user // if using the reCaptcha system and there was an error // Parameters: // ERR the error code from the reCaptcha API $aMessages[MSG_RECAPTCHA_MATCH] = 'reCaptcha verification failed ($ERR)'; // MSG_FILE_NAMES_INVALID is sent in an Alert message when // a form's file_names setting has errors // Parameters: none // A list of errors is appended on separate lines $aMessages[MSG_FILE_NAMES_INVALID] = 'Some file_names specifications are invalid $MNUM:\n'; // MSG_FILE_NAMES_NOT_FILE is sent in an Alert message when // a form's file_names setting refers to a file field that doesn't // exist // Parameters: // NAME the name of the file field that doesn't exist $aMessages[MSG_FILE_NAMES_NOT_FILE] = 'Your file_names specification has ' . 'an error. \'$NAME\' is not the name ' . 'of a file upload field\n'; // MSG_NEXT_PLUS_GOOD is sent in an alert message if the form is // ambiguous and specifies both "next_form" and "good_url" or // "good_template" // Parameters: // $WHICH the "good_" field that was specified $aMessages[MSG_NEXT_PLUS_GOOD] = 'The form has specified both "next_form" ' . 'and "$WHICH" fields - the action to ' . 'to perform is ambiguous'; // MSG_MULTIFORM is sent in an Alert message when a form tries // to use a multi-form template, but templates have not been configured in // formmail.php // Parameters: none $aMessages[MSG_MULTIFORM] = 'You must set either MULTIFORMDIR or MULTIFORMURL ' . 'in formmail.php before you can use ' . 'multi-page forms.'; // MSG_MULTIFORM_FAILED is sent in an Alert message // when processing a multi-page form template has failed. // Parameters: // NAME the template name $aMessages[MSG_MULTIFORM_FAILED] = 'Failed to process multi-page form template "$NAME"'; // MSG_NEED_THIS_FORM is sent in an Alert message // when a multi-page form does not specify the "this_form" field. // Parameters: // none $aMessages[MSG_NEED_THIS_FORM] = 'Multi-page forms require "this_form" field'; // MSG_NO_PHP_SELF is sent in an Alert message // when FormMail requires the "PHP_SELF" server variable and PHP is not // providing it. // Parameters: // none $aMessages[MSG_NO_PHP_SELF] = 'PHP on the server is not providing "PHP_SELF"'; // MSG_RETURN_URL_INVALID is sent in an Alert message // when "this_form" is not a valid return URL. This occurs for // multi-page forms. // Parameters: // URL the invalid URL $aMessages[MSG_RETURN_URL_INVALID] = 'Return URL "$URL" is not valid'; // MSG_GO_BACK is sent in an Alert message // when "multi_go_back" has been submitted but this isn't part of a // multi-page form. // Parameters: // none $aMessages[MSG_GO_BACK] = 'Cannot "go back" if not in a multi-page form ' . 'sequence or at the first page of the form ' . 'sequence'; // MSG_OPEN_URL is sent in an Alert message when a URL cannot // be opened. // Parameters: // URL the invalid URL // ERROR error message $aMessages[MSG_OPEN_URL] = 'Cannot open URL "$URL": $ERROR'; // MSG_CANNOT_RETURN is sent in an Alert message when an invalid return // request is made in a multi-page form sequence. // Parameters: // TO the requested page index // TOPINDEX the top page index $aMessages[MSG_CANNOT_RETURN] = 'Cannot return to page $TO. The top page ' . 'index is $TOPINDEX'; // MSG_ATTACK_DETECTED is sent in an Alert message when an attack on // the server has been detected // Parameters: // ATTACK name or description of the attack // INFO more information about the attack $aMessages[MSG_ATTACK_DETECTED] = 'Server attack "$ATTACK" detected. ' . 'Your server is safe as FormMail is ' . 'invulnerable to this attack. You can ' . 'disable these messages by setting ' . 'ALERT_ON_ATTACK_DETECTION to false ' . 'in FormMail\'s configuration section.' . '\nMore information:\n$INFO'; // MSG_ATTACK_PAGE is the contents of the browser page displayed to the // user when an attack is detected // Parameters: // SERVER the name of the server (website) // USERINFO details of the error $aMessages[MSG_ATTACK_PAGE] = 'Your form submission has been rejected ' . 'as it appears to be an abuse of our server (' . '$SERVER).
The following settings were found in the file '$s_file':
"; foreach ($a_sections as $s_sect => $a_settings) { $s_text .= "[$s_sect]\n"; foreach ($a_settings as $s_name => $s_value) { $s_text .= "$s_name = \"$s_value\"\n"; } $s_text .= "
"; } CreatePage($s_text,"Debug Output - INI File Display"); FormMailExit(); } // // Load the email_addresses section. // if (isset($a_sections["email_addresses"])) { $a_addr_list = $a_sections["email_addresses"]; // // make these addresses valid // foreach ($a_addr_list as $s_alias => $s_list) { $EMAIL_ADDRS[$s_alias] = $s_list; $ValidEmails->AddAddresses($s_list); } } // // Process special fields // if (isset($a_sections["special_fields"])) { foreach ($a_sections["special_fields"] as $s_name => $m_value) { if (IsSpecialField($s_name)) { ValidateSpecialField($s_name,$s_value,false); SetSpecialField($s_name,$m_value); // // if this is the recipients, cc, or bcc field, // make the addresses valid // if ($s_name === "recipients" || $s_name === "cc" || $s_name === "bcc") // // coming from the INI file, the values can only be strings // { if (is_string($m_value)) { $ValidEmails->AddAddresses($m_value); } } } // // check for multiple valued special fields // if (($a_multi_fld = IsSpecialMultiField($s_name)) !== false) { SetSpecialMultiField($a_multi_fld[0],$a_multi_fld[1],$m_value); } } } } /** * UnMangle an email address. This means replacing AT_MANGLE in the given * string with the @ symbol. * It can also lookup an email alias and return the corresponding email address. * Email aliases are defined in the EMAIL_ADDRS configuration setting or in an INI file. * * @param string $s_email the email address to unmangle * * @return string the actual email address */ function UnMangle($s_email) { $email_addrs = Settings::get('EMAIL_ADDRS'); // // map from a name to the real email address; if it exists // if (isset($email_addrs[$s_email])) { $s_email = $email_addrs[$s_email]; } // // unmangle // if (Settings::get('AT_MANGLE') != "") { $s_email = str_replace(Settings::get('AT_MANGLE'),"@",$s_email); } return ($s_email); } // // Check a list of email addresses (comma separated); returns a list // of valid email addresses (comma separated). // The list can be an array of comma separated lists. // The return value is true if there is at least one valid email address. // function CheckEmailAddress($m_addr,&$s_valid,&$s_invalid,$b_check = true) { global $ValidEmails; $s_invalid = $s_valid = ""; if (is_array($m_addr)) { $a_list = array(); foreach ($m_addr as $s_addr_list) { $a_list = array_merge($a_list,TrimArray(explode(",",$s_addr_list))); } } else { $a_list = TrimArray(explode(",",$m_addr)); } $a_invalid = array(); $n_empty = 0; for ($ii = 0 ; $ii < count($a_list) ; $ii++) { if ($a_list[$ii] === "") { // // ignore, but count empty addresses // $n_empty++; continue; } $s_email = UnMangle($a_list[$ii]); // // UnMangle works with INI files too, and a single // word can expand to a list of email addresses. // $a_this_list = TrimArray(explode(",",$s_email)); foreach ($a_this_list as $s_email) { if ($s_email === "") { // // ignore, but count empty addresses // $n_empty++; continue; } if ($b_check) { $b_is_valid = $ValidEmails->CheckAddress($s_email); } else { $b_is_valid = true; } if ($b_is_valid) { if (empty($s_valid)) { $s_valid = $s_email; } else { $s_valid .= "," . $s_email; } } else { $a_invalid[] = $s_email; } } } // // just ignore empty recipients unless there are *no* valid recipients // if (empty($s_valid) && $n_empty > 0) { $a_invalid[] = GetMessage(MSG_EMPTY_ADDRESSES,array("COUNT" => $n_empty)); } if (count($a_invalid) > 0) { $s_invalid = implode(",",$a_invalid); } return (!empty($s_valid)); } // // Redirect to another URL // function Redirect($url,$title) { global $ExecEnv; // // for browsers without cookies enabled, append the Session ID // if ($ExecEnv->allowSessionURL()) { if (session_id() !== "") { $url = AddURLParams($url,session_name() . "=" . urlencode(session_id())); } elseif (defined("SID")) { $url = AddURLParams($url,SID); } } //FMDebug("Before redirecting, FormData = ".(isset($_SESSION["FormData"]) ? var_export($_SESSION["FormData"],true) : "NULL")); // // this is probably a good idea to ensure the session data // is written away // if (function_exists('session_write_close')) { session_write_close(); } header("Location: $url"); // // avoid XSS by sanitizing the URL // $url = stripJS(filter_var($url,FILTER_SANITIZE_STRING)); // // if the header doesn't work, try JavaScript. // if that doesn't work, provide a manual link // $s_text = GetMessage(MSG_PLSWAIT_REDIR) . "\n\n"; $s_text .= ""; $s_text .= "\n\n" . GetMessage(MSG_IFNOT_REDIR,array("URL" => $url)); CreatePage($s_text,$title); FormMailExit(); } /** * Remove 'javascript:' from the given text. * * @param string $s_text the text to be modified * * @return string|string[] */ function stripJS($s_text) { return str_ireplace('javascript:','',$s_text); } class JSON { function _Format($m_val) { if (is_bool($m_val)) { $s_value = ($m_val) ? "true" : "false"; } elseif (is_string($m_val)) { // // convert literal line breaks into JavaScript escape sequences // $s_value = '"' . str_replace(array("\r","\n"),array('\\r','\\n'),addslashes($m_val)) . '"'; } elseif (is_numeric($m_val)) { $s_value = $m_val; } elseif (is_array($m_val)) { $s_value = $this->_FormatArray($m_val); } else { $s_value = "null"; } return ($s_value); } function _FormatArray($a_array) { if ($this->_IsNumericArray($a_array)) { $a_values = array(); foreach ($a_array as $m_val) { $a_values[] = $this->_Format($m_val); } $s_value = "[" . implode(",",$a_values) . "]"; } else { // // associative arrays are objects // $s_value = $this->MakeObject($a_array); } return ($s_value); } // // check if we have a numeric array or an associative array // numeric arrays may have holes; numeric array indexes must // be integers // function _IsNumericArray($a_data) { if (empty($a_data)) { return (true); } // empty array - treat as numeric // // check all the keys for numeric // $a_keys = array_keys($a_data); foreach ($a_keys as $m_index) { if (!is_int($m_index)) { return (false); } } return (true); } function MakeObject($a_data) { $a_members = array(); foreach ($a_data as $s_key => $m_val) { $a_members[] = '"' . $s_key . '":' . $this->_Format($m_val); } return ("{" . implode(",",$a_members) . "}"); } } function CORS_Response() { header('Access-Control-Allow-Origin: *'); header('Access-Control-Max-Age: 36000'); header('Access-Control-Allow-Methods: GET, POST, OPTIONS'); header('Access-Control-Allow-Headers: X-Requested-With'); } function JSON_Result($s_result,$a_data = array()) { global $aGetVars; FMDebug("Sending JSON_Result: $s_result"); $a_data["Result"] = $s_result; $json = new JSON(); $s_ret = $json->MakeObject($a_data); CORS_Response(); // // handle JSONP request // if (isset($aGetVars['callback']) && $aGetVars['callback'] != '') { header('Content-Type: text/javascript; charset=utf-8'); $s_ret = $aGetVars['callback'] . "($s_ret);"; FMDebug('JSONP request callback=' . $aGetVars['callback']); } else { header('Content-Encoding: utf-8'); header('Content-Type: application/json; charset=utf-8'); } FMDebug("JSON_Result output: " . $s_ret); echo $s_ret; } // // JoinLines is just like "implode" except that it checks // the end of each array for the separator already being // there. This allows us to join a mixture of mail // header lines (already terminated) with body lines. // This logic works if HEAD_CRLF, for example, is the same // as BODY_LF (i.e. both "\r\n") or if BODY_LF is the // same as the last character in HEAD_CRLF (i.e. // HEAD_CRLF = "\r\n" and BODY_LF = "\n"). // Other value combinations may break things. // function JoinLines($s_sep,$a_lines) { $s_str = ""; if (($i_sep_len = strlen($s_sep)) == 0) // // no separator // { return (implode("",$a_lines)); } $n_lines = count($a_lines); for ($ii = 0 ; $ii < $n_lines ; $ii++) { $s_line = $a_lines[$ii]; if (substr($s_line,-$i_sep_len) == $s_sep) { $s_str .= $s_line; } else { $s_str .= $s_line; // // don't append a separator to the last line // if ($ii < $n_lines - 1) { $s_str .= $s_sep; } } } return ($s_str); } // // Re-orders an array of email headers into the // order recommended by RFC822, section 4.1: // It is recommended that, if present, // headers be sent in the order "Return- // Path", "Received", "Date", "From", "Subject", // "Sender", "To", "cc", etc. // // Note that RFC822 is obsoleted by RFC2822 and // the latter states that field order doesn't // matter (except for some tracing fields). // However, a FormMail user reported that Yahoo doesn't like // email where the CC header appears before the From // header. So, as always, we try to work with broken // servers too... // // Returns an array indexed by the require numerical // order. Each element is an array containing the // header value (name,value pair). // function OrderHeaders($a_headers) { // // we list the headers we're responsible for // in the order suggested // $a_ordering = array("From","Subject","To","Cc","Bcc","Reply-To"); $a_ordered_headers = array(); foreach ($a_ordering as $s_name) { if (isset($a_headers[$s_name])) { $a_ordered_headers[] = array($s_name => $a_headers[$s_name]); unset($a_headers[$s_name]); } } // // now add in the remaining headers // foreach ($a_headers as $s_name => $s_value) { $a_ordered_headers[] = array($s_name => $a_headers[$s_name]); } return ($a_ordered_headers); } // // Makes a mail header field body "safe". // This simply places a backslash in front of every double-quote. // There's probably more we could do if required, but this // attempts to provide the same protection that was in the first // version of FormMail. In that version, every incoming // field had double-quotes replaced with single quotes. // That processing is no longer performed, and this // function is used to protect against potential attacks in // header fields - not by replacing double quotes with single quotes, // but by using the backslash "quoting" feature of RFC2822. // // This code could be improved by parsing the header and rewriting // it to be valid, possibly removing junk. // // That's a lot of code, though! // function SafeHeader($s_str) { return (str_replace('"','\\"',$s_str)); } // // makes a string safe to put as words in a header // function SafeHeaderWords($s_str) { // // We zap various characters and replace them with a question mark. // Also, we don't handle quoted strings, which are valid words. // $s_specials = '()<>@,;:\\".[]'; // special characters defined by RFC822 $s_str = preg_replace('/[[:cntrl:]]+/',"?",$s_str); // zap all control chars $s_str = preg_replace("/[" . preg_quote($s_specials,"/") . "]/","?",$s_str); // zap all specials return ($s_str); } // // makes a string safe to put as a quoted string in a header // function SafeHeaderQString($s_str) { return (str_replace('"','\\"', str_replace("\\","\\\\", str_replace("\r"," ", str_replace("\r\n"," ",$s_str))))); } // // makes a string safe to put in a header comment // function SafeHeaderComment($s_str) { return (str_replace("(","\\(", str_replace(")","\\)", str_replace("\\","\\\\", str_replace("\r"," ", str_replace("\r\n"," ",$s_str)))))); } // // makes a string safe to put in a header as an email address // function SafeHeaderEmail($s_str) { // // An email address is made up of local and domain parts // each of these is made up of "words" separated by "." // each "word" can be a sequence of characters excluding // specials, space and control characters OR it can be // a quoted string. // // The correct processing would be to completely // parse the address, strip junk, double-quote // words that need to be turned into quote strings, // and return a well-formed email address. // // That's a lot of code! // // So, instead, we opt for stripping out control characters. // $s_str = preg_replace('/[[:cntrl:]]+/',"",$s_str); // zap all control chars return ($s_str); } // // Expands an array of mail headers into mail header lines. // function ExpandMailHeaders($a_headers,$b_fold = false) { $s_hdrs = ""; $a_ordered_headers = OrderHeaders($a_headers); for ($ii = 0 ; $ii < count($a_ordered_headers) ; $ii++) { foreach ($a_ordered_headers[$ii] as $s_name => $s_value) { if ($s_name != "") { if ($s_hdrs != "") { $s_hdrs .= Settings::get('HEAD_CRLF'); } if ($b_fold) { $s_hdrs .= HeaderFolding($s_name . ": " . $s_value); } else { $s_hdrs .= $s_name . ": " . $s_value; } } } } //FMDebug("Headers are: $s_hdrs"); return ($s_hdrs); } // // Expands an array of mail headers into an array containing header lines. // function ExpandMailHeadersArray($a_headers) { $a_hdrs = array(); $a_ordered_headers = OrderHeaders($a_headers); for ($ii = 0 ; $ii < count($a_ordered_headers) ; $ii++) { foreach ($a_ordered_headers[$ii] as $s_name => $s_value) { if ($s_name != "") { $a_hdrs[] = $s_name . ": " . $s_value . Settings::get('HEAD_CRLF'); } } } return ($a_hdrs); } // // Low-level email send function; either calls PHP's mail function // or uses the PEAR Mail object. // NOTE: for some errors, there's no point trying to email // an alert message! So, in these cases, we just display the error to // the user. // $s_options are ignored for PEAR sending. // function DoMail($s_to,$s_subject,$s_mesg,$a_headers,$s_options) { global $ALT_MAIL_FUNCTION; if ($ALT_MAIL_FUNCTION !== '') { return ($ALT_MAIL_FUNCTION($s_to,$s_subject,$s_mesg,$a_headers,$s_options)); } else { // // Encode the subject line. // Ideally, we want to encode the relevant parts of To, From, Cc, // Reply-To, and this is the right place to do it. // However, it's another 1000 lines of code! // So, we must compromise the code quality because of this cost. // We encode subject here, and we encode the From line where it's // created. The rest remain for a future version where code size // can be controlled. // $s_subject = EncodeHeaderText($s_subject); if (!Settings::isEmpty('PEAR_SMTP_HOST')) { // // Note that PEAR Mail seems to take responsibility for header line folding // require_once("Mail.php"); $a_params = array("host" => Settings::get('PEAR_SMTP_HOST'), "port" => Settings::get('PEAR_SMTP_PORT') ); if (!Settings::isEmpty('PEAR_SMTP_USER')) { $a_params["auth"] = TRUE; $a_params["username"] = Settings::get('PEAR_SMTP_USER'); $a_params["password"] = Settings::get('PEAR_SMTP_PWD'); } $mailer = Mail::factory("smtp",$a_params); if (!is_object($mailer)) { ShowError("pear_error",GetMessage(MSG_PEAR_OBJ),FALSE,FALSE); FormMailExit(); } if (strtolower(get_class($mailer)) === 'pear_error') { ShowError("pear_error",$mailer->getMessage(),FALSE,FALSE); FormMailExit(); } if (!isset($a_headers['To']) && !isset($a_headers['to'])) { $a_headers['To'] = SafeHeader($s_to); } if (!isset($a_headers['Subject']) && !isset($a_headers['subject'])) { $a_headers['Subject'] = SafeHeader($s_subject); } $res = $mailer->send($s_to,$a_headers,$s_mesg); if ($res === TRUE) { return (TRUE); } global $aAlertInfo; $aAlertInfo[] = GetMessage(MSG_PEAR_ERROR,array("MSG" => $res->getMessage())); return (FALSE); } else { //$s_subject = HeaderFolding($s_subject,RFCLINELEN-10); // "Subject: " is about 10 chars // // Notes from Feb 2010.... // // PHP's mail function (tested in version 5.2.6) does folding of the // To line and the Subject line. // If we do it, then things break. // // This area is quite confusing. It's not clear whether the script // should be folding header lines or whether the MTA should do it. // We *do know* (as stated above) that folding To and Subject breaks things. // // But folding other header lines properly, seems to be OK. // // However, for years FormMail never did header line folding (except for the // soft line breaks inserted by the quoted_printable_encode function we had used), // and we didn't seem to get any reports of breakage (except for problems // with the quoted_printable_encode soft line breaks!). // // So, even though we've implemented all the code for header line folding, // we'll not use it. // No header line folding will be performed in version 8.22 onwards. // if ($s_options !== "") { return (mail($s_to,$s_subject,$s_mesg,ExpandMailHeaders($a_headers),$s_options)); } else { return (mail($s_to,$s_subject,$s_mesg,ExpandMailHeaders($a_headers))); } } } } // // Send an email // function SendCheckedMail($to,$subject,$mesg,$sender,$a_headers = array()) { $b_f_option = false; $b_form_option = IsMailOptionSet("SendMailFOption"); // this is superseded, but still supported if (Settings::get('SENDMAIL_F_OPTION') || $b_form_option) { if (empty($sender)) { // // SENDMAIL_F_OPTION with no sender is silently ignored // if ($b_form_option) { // // form has specified SendMailFOption, but there's no // sender address // static $b_in_here = false; global $SERVER; if (!$b_in_here) // prevent infinite recursion { $b_in_here = true; SendAlert(GetMessage(MSG_NO_FOPT_ADDR)); $b_in_here = false; } // // if there's no from address, create a dummy one // $sender = "dummy@" . (isset($SERVER) ? $SERVER : "UnknownServer"); $a_headers['From'] = $sender; $b_f_option = true; } } else { $b_f_option = true; } } if (Settings::get('INI_SET_FROM') && !empty($sender)) { ini_set('sendmail_from',$sender); } return (DoMail($to,$subject,$mesg,$a_headers,($b_f_option ? "-f$sender" : ""))); } // // Send an alert email, but not if ATTACK_DETECTION_IGNORE_ERRORS is true. // function SendAlertIgnoreSpam($s_error,$b_filter = true,$b_non_error = false) { if (!Settings::get('ATTACK_DETECTION_IGNORE_ERRORS')) { SendAlert($s_error,$b_filter,$b_non_error); } } // // Send an alert email // function SendAlert($s_error,$b_filter = true,$b_non_error = false) { global $SPECIAL_VALUES,$FORMATTED_INPUT,$aServerVars,$aStrippedFormVars; global $aAlertInfo,$aCleanedValues,$aFieldOrder,$sHTMLCharSet; // // The following initialisations are so that ShowError can run from fmhookpreinit scripts // $aSpecialValues = isset($SPECIAL_VALUES) ? $SPECIAL_VALUES : array(); $aFormattedInputValues = isset($FORMATTED_INPUT) ? $FORMATTED_INPUT : array(); $aServerVarValues = isset($aServerVars) ? $aServerVars : array(); $aStrippedFormVarValues = isset($aStrippedFormVars) ? $aStrippedFormVars : array(); $aAlertInfoValues = isset($aAlertInfo) ? $aAlertInfo : array(); $aCleaned = isset($aCleanedValues) ? $aCleanedValues : array(); $aFieldOrderValues = isset($aFieldOrder) ? $aFieldOrder : array(); $s_error = str_replace("\n",Settings::get('BODY_LF'),$s_error); $b_got_filter = GetFilterSpec($s_filter_name,$a_filter_list); // // if there is a filter specified and we're not sending the alert // through the filter, don't show the user's data. This is // on the assumption that the filter is an encryption program; so, // we don't want to send the user's data in clear text inside the // alerts. // $b_show_data = true; if ($b_got_filter && !$b_filter) { $b_show_data = false; } $s_form_subject = $s_alert_to = ""; $b_check = true; // // might be too early to have $aSpecialValues set, so // look in the form vars too // if (isset($aSpecialValues["alert_to"])) { $s_alert_to = trim($aSpecialValues["alert_to"]); } if (empty($s_alert_to) && isset($aStrippedFormVarValues["alert_to"])) { $s_alert_to = trim($aStrippedFormVarValues["alert_to"]); } if (isset($aSpecialValues["subject"])) { $s_form_subject = trim($aSpecialValues["subject"]); } if (empty($s_form_subject) && isset($aStrippedFormVarValues["subject"])) { $s_form_subject = trim($aStrippedFormVarValues["subject"]); } if (empty($s_alert_to)) { $s_alert_to = Settings::get('DEF_ALERT'); $b_check = false; } if (!empty($s_alert_to)) { $s_from_addr = $s_from = ""; $a_headers = array(); if (!Settings::isEmpty('FROM_USER')) { if (Settings::get('FROM_USER') != "NONE") { $a_headers['From'] = Settings::get('FROM_USER'); $s_from_addr = Settings::get('FROM_USER'); $s_from = "From: $s_from_addr"; } } else { global $SERVER; $s_from_addr = "FormMail@" . $SERVER; $a_headers['From'] = $s_from_addr; $s_from = "From: $s_from_addr"; } $s_mesg = "To: " . UnMangle($s_alert_to) . Settings::get('BODY_LF'); // // if a language pack has been included, a lot of error messages // may need the character set to be provided. // If that's available from the language pack, use it, // otherwise, if it's a mail_option, use it from there. // $s_charset = ""; if (isset($sHTMLCharSet) && $sHTMLCharSet !== "") { $s_charset = $sHTMLCharSet; } else { if (IsMailOptionSet("CharSet")) { $s_charset = GetMailOption("CharSet"); } } // // Alerts are plain text emails, so convert any HTML entities // back to their original characters. Note, this will only work on PHP // version 4.3.0 and above. // if (function_exists("html_entity_decode")) { $s_error = @html_entity_decode($s_error,ENT_COMPAT,$s_charset); } if ($s_charset !== "") { $a_headers['Content-Type'] = SafeHeader("text/plain; charset=$s_charset"); } if (!empty($s_from)) { $s_mesg .= $s_from . Settings::get('BODY_LF'); } $s_mesg .= Settings::get('BODY_LF'); if (count($aAlertInfoValues) > 0) { if ($b_show_data) { $s_error .= Settings::get('BODY_LF') . GetMessage(MSG_MORE_INFO) . Settings::get('BODY_LF'); $s_error .= implode(Settings::get('BODY_LF'),$aAlertInfoValues); } else { $s_error .= Settings::get('BODY_LF') . GetMessage(MSG_INFO_STOPPED) . Settings::get('BODY_LF'); } } // // some fields aren't security issues - show those in the alert // $a_safe_fields = array( "email: " . isset($aSpecialValues["email"]) ? $aSpecialValues["email"] : '', "realname: " . isset($aSpecialValues["realname"]) ? $aSpecialValues["realname"] : '', ); $s_safe_data = implode(Settings::get('BODY_LF'),$a_safe_fields); if ($b_non_error) { $s_preamble = $s_error . Settings::get('BODY_LF') . Settings::get('BODY_LF'); $s_mesg .= $s_preamble; $s_subj = GetMessage(MSG_FM_ALERT); if (!empty($s_form_subject)) { $s_subj .= " ($s_form_subject)"; } } else { $s_preamble = GetMessage(MSG_FM_ERROR_LINE) . Settings::get('BODY_LF') . $s_error . Settings::get('BODY_LF') . Settings::get('BODY_LF'); $s_mesg .= $s_preamble; $s_subj = GetMessage(MSG_FM_ERROR); if (!empty($s_form_subject)) { $s_subj .= " ($s_form_subject)"; } $s_mesg .= $s_safe_data; $s_mesg .= Settings::get('BODY_LF') . Settings::get('BODY_LF'); if ($b_show_data) { $s_mesg .= implode(Settings::get('BODY_LF'),$aFormattedInputValues); } else { $s_mesg .= GetMessage(MSG_USERDATA_STOPPED); } } /* * We only need to filter the form fields if the filter that * is specified is an encrypting filter. */ if ($b_filter && $b_got_filter && IsFilterAttribSet($aSpecialValues["filter"],"Encrypts") ) { $s_new_mesg = $s_preamble . $s_safe_data; $s_new_mesg .= Settings::get('BODY_LF') . Settings::get('BODY_LF'); if ($a_filter_list !== false) { // // just filter the critical fields // list($s_unfiltered,$s_filtered_results) = GetFilteredOutput($aFieldOrderValues,$aCleaned, $s_filter_name,$a_filter_list); $s_new_mesg .= $s_unfiltered; } else { // // filter everything // $s_filtered_results = Filter($s_filter_name,$s_mesg); } $s_new_mesg .= GetMessage(MSG_FILTERED,array("FILTER" => $s_filter_name)) . Settings::get('BODY_LF') . Settings::get('BODY_LF') . $s_filtered_results; $s_mesg = $s_new_mesg; } $s_mesg .= Settings::get('BODY_LF'); if (isset($aServerVarValues['HTTP_REFERER'])) { $s_mesg .= "Referring page was " . $aServerVarValues['HTTP_REFERER']; } elseif (isset($aSpecialValues['this_form']) && $aSpecialValues['this_form'] !== "") { $s_mesg .= "Referring form was " . $aSpecialValues['this_form']; } $s_mesg .= Settings::get('BODY_LF'); if (isset($aServerVarValues['SERVER_NAME'])) { $s_mesg .= "SERVER_NAME was " . $aServerVarValues['SERVER_NAME'] . Settings::get('BODY_LF'); } if (isset($aServerVarValues['REQUEST_URI'])) { $s_mesg .= "REQUEST_URI was " . $aServerVarValues['REQUEST_URI'] . Settings::get('BODY_LF'); } $s_mesg .= Settings::get('BODY_LF'); if (isset($aServerVarValues['REMOTE_ADDR'])) { $s_mesg .= "User IP address was " . $aServerVarValues['REMOTE_ADDR'] . Settings::get('BODY_LF'); } if (isset($aServerVarValues['HTTP_USER_AGENT'])) { $s_mesg .= "User agent was " . $aServerVarValues['HTTP_USER_AGENT'] . Settings::get('BODY_LF'); } if ($b_check) { if (CheckEmailAddress($s_alert_to,$s_valid,$s_invalid)) { return (SendCheckedMail($s_valid,$s_subj,$s_mesg,$s_from_addr,$a_headers)); } } else { return (SendCheckedMail($s_alert_to,$s_subj,$s_mesg,$s_from_addr,$a_headers)); } } return (false); } // // Read the lines in a file and return an array. // Each line is stripped of line termination characters. // function ReadLines($fp) { $a_lines = array(); while (!feof($fp)) { $s_line = fgets($fp,4096); // // strip carriage returns and line feeds // $s_line = str_replace("\r","",$s_line); $s_line = str_replace("\n","",$s_line); $a_lines[] = $s_line; } return ($a_lines); } // // Open a URL and return the data from it as a string or array of lines. // Returns false on failure ($s_error has the error string) // function GetURL($s_url,&$s_error,$b_ret_lines = false,$n_depth = 0) { global $php_errormsg,$aServerVars,$sUserAgent,$ExecEnv; // // open the URL with the same session as we have // if ($ExecEnv->allowSessionURL()) { if (session_id() !== "") { $s_url = AddURLParams($s_url,session_name() . "=" . urlencode(session_id())); } if (defined("SID")) { $s_url = AddURLParams($s_url,SID); } } $http_get = new HTTPGet($s_url); // // Determine authentication requirements // if (Settings::get('AUTHENTICATE') !== "" || Settings::get('AUTH_USER') !== "" || Settings::get('AUTH_PW') !== "") { if (Settings::get('AUTHENTICATE') === "") { $http_get->SetAuthentication("Basic",Settings::get('AUTH_USER'),Settings::get('AUTH_PW')); } else { $http_get->SetAuthenticationLine(Settings::get('AUTHENTICATE')); } } else { $a_parts = $http_get->GetURLSplit(); if (isset($a_parts["user"]) || isset($a_parts["pass"])) { $s_auth_user = isset($a_parts["user"]) ? $a_parts["user"] : ""; $s_auth_pass = isset($a_parts["pass"]) ? $a_parts["pass"] : ""; } else { $s_auth_type = isset($aServerVars["PHP_AUTH_TYPE"]) ? $aServerVars["PHP_AUTH_TYPE"] : ""; $s_auth_user = isset($aServerVars["PHP_AUTH_USER"]) ? $aServerVars["PHP_AUTH_USER"] : ""; $s_auth_pass = isset($aServerVars["PHP_AUTH_PW"]) ? $aServerVars["PHP_AUTH_PW"] : ""; } if (!isset($s_auth_type) || $s_auth_type === "") { $s_auth_type = "Basic"; } if ($s_auth_user !== "" || $s_auth_pass !== "") { $http_get->SetAuthentication($s_auth_type,$s_auth_user,$s_auth_pass); } } // // set the user agent // $http_get->SetAgent($sUserAgent); // // resolve the name now so the DNS cache can be written to the session // $http_get->Resolve(); // // Since we might be opening a URL within the same session, we can // get locks. So, close the session for writing to prevent this. // $b_closed = false; if (function_exists('session_write_close')) { session_write_close(); $b_closed = true; //ob_flush(); // this prevents automatic redirects if $TEMPLATEURL // is in use and JavaScript is switched off } $m_buf = FALSE; //FMDebug("Begin read"); if (($a_lines = $http_get->Read()) === FALSE) { $http_get->Close(); // // get the error code and send the appropriate alert // list($i_error,$i_sys_err,$s_sys_msg) = $http_get->GetError(); switch ($i_error) { case $http_get->nErrParse: $s_error = GetMessage(MSG_URL_PARSE); break; case $http_get->nErrScheme: $a_parts = $http_get->GetURLSplit(); $s_error = GetMessage(MSG_URL_SCHEME,array("SCHEME" => $a_parts["scheme"])); break; default: $s_error = GetMessage(MSG_SOCKET, array("ERRNO" => $i_sys_err, "ERRSTR" => $s_sys_msg, "PHPERR" => isset($php_errormsg) ? $php_errormsg : "" )); break; } } else { $http_get->Close(); // // check the HTTP response for actual status. Anything outside // 200-299 is a failure, but we also handle redirects. // list($i_http_code,$s_http_status) = $http_get->GetHTTPStatus(); if ($i_http_code < 200 || $i_http_code > 299) { switch ($i_http_code) { case 300: // multiple choices (we'll take the first) case 301: // moved permanently case 302: // found case 303: // see other /** @noinspection PhpMissingBreakStatementInspection */ case 307: // temporary redirect // // a "location" header must be present for us to continue // In the case of infinite redirects, we need to stop. // So, we limit to a maximum of 10 redirects. // if ($n_depth < 10) { if (($s_location = $http_get->FindHeader("location")) !== false) { FMDebug("Redirect from '$s_url' to '$s_location'"); $m_buf = GetURL($s_location,$s_error,$b_ret_lines,$n_depth + 1); $b_closed = false; break; } FMDebug("Redirect FAILED - no location header"); } else { FMDebug("Redirect FAILED depth=$n_depth"); } // FALL THRU default: $s_error = GetMessage(MSG_GETURL_OPEN,array("STATUS" => $s_http_status,"URL" => $s_url)); break; } } elseif ($b_ret_lines) { $m_buf = $a_lines; } else // // return lines as one big string buffer // { $m_buf = implode("",$a_lines); } } // // re-open our session // if ($b_closed) { session_start(); } return ($m_buf); } // // Write to the debug log if it exists and is writable. // function FMDebug($s_mesg) { static $fDebug = NULL; if (!isset($fDebug)) { $fDebug = false; // only initialize once $s_db_file = "fmdebug.log"; // look for debug file in current directory // // we only open an existing file - we don't create one // if (file_exists($s_db_file)) { if (($fDebug = fopen($s_db_file,"a")) === false) { return; } } } if ($fDebug !== false) { fwrite($fDebug,date('r') . ": " . $s_mesg . "\n"); fflush($fDebug); } } /* * Class: NetIO * Description: * A class to provide internet input/output capabilities. * Use as a base class for more specific functions. */ class NetIO { var $_sHost; var $_iPort; var $_sPrefix; var $_iConnTimeout; var $_fSock; var $_aIPs; var $_iError = 0; var $_iSysErr; var $_sSysMesg; var $nErrInit = -1; // not initialized var $nErrRead = -2; // read error var $nErrWrite = -3; // write error var $nErrWriteShort = -4; // failed to write all bytes var $nErrSocket = -100; // error in socket open function __construct($s_host = NULL,$i_port = NULL,$s_prefix = "") { if (isset($s_host)) { $this->_sHost = $s_host; } if (isset($i_port)) { $this->_iPort = $i_port; } $this->_sPrefix = $s_prefix; $this->_iConnTimeout = 30; $this->_iSysErr = 0; $this->_sSysMesg = ""; } function _SetError($i_error,$i_sys_err = 0,$s_sys_mesg = "") { $this->_iError = $i_error; $this->_iSysErr = $i_sys_err; $this->_sSysMesg = $s_sys_mesg; return (FALSE); } function IsError() { return $this->_iError !== 0; } function ClearError() { $this->_SetError(0); } function GetError() { return (array($this->_iError,$this->_iSysErr,$this->_sSysMesg)); } function SetHost($s_host) { $this->_sHost = $s_host; } function SetPort($i_port) { $this->_iPort = $i_port; } function SetConnectionTimeout($i_secs) { $this->_iConnTimeout = $i_secs; } function SetPrefix($s_prefix) { $this->_sPrefix = $s_prefix; } function GetHost() { return (isset($this->_sHost) ? $this->_sHost : ""); } function GetPort() { return (isset($this->_iPort) ? $this->_iPort : 0); } function GetPrefix() { return ($this->_sPrefix); } function GetConnectionTimeout() { return ($this->_iConnTimeout); } function _CacheIt() { FMDebug("Caching " . implode(",",$this->_aIPs)); if (IsSetSession("FormNetIODNSCache")) { $a_cache = GetSession("FormNetIODNSCache"); } else { $a_cache = array(); } $a_cache[$this->_sHost] = $this->_aIPs; SetSession("FormNetIODNSCache",$a_cache); } /* * Some versions of PHP seem to have a major slowdown when resolving * names with gethostbyname (5 seconds with PHP 4.3.9). * So, in the case of multi-page forms using MULTIFORMURL, we get a big speed up * by caching the IP address of the server. */ function _CheckCache() { if (!IsSetSession("FormNetIODNSCache")) { return (FALSE); } $a_cache = GetSession("FormNetIODNSCache"); if (!is_array($a_cache) || !isset($a_cache[$this->_sHost]) || !is_array($a_cache[$this->_sHost])) { return (FALSE); } $this->_aIPs = $a_cache[$this->_sHost]; return (TRUE); } function Resolve() { $this->ClearError(); if (!isset($this->_sHost)) { return ($this->_SetError($this->nErrInit)); } if ($this->_CheckCache()) { return (TRUE); } FMDebug("Start resolve of " . $this->_sHost); // // if host is an actual IP address, then it is returned unchanged, which is good! // if (($a_ip_list = gethostbynamel($this->_sHost)) === FALSE) { FMDebug("Resolve failed"); return ($this->_SetError($this->nErrInit,0, GetMessage(MSG_RESOLVE,array("NAME" => $this->_sHost)))); } FMDebug("Done resolve: " . implode(",",$a_ip_list)); $this->_aIPs = $a_ip_list; $this->_CacheIt(); return (TRUE); } function _SSLOpen($s_ip,&$errno,&$errstr,$i_timeout) { global $ExecEnv; FMDebug("Using _SSLOpen (stream_socket_client), SNI, host=" . $this->GetHost()); $context = stream_context_create(); $result = stream_context_set_option($context,'ssl','verify_host',true); $result = stream_context_set_option($context,'ssl','verify_peer',false); $result = stream_context_set_option($context,'ssl','allow_self_signed',true); $result = stream_context_set_option($context,'ssl','SNI_enabled',true); if ($ExecEnv->IsPHPAtLeast("5.6.0")) { $result = stream_context_set_option($context,'ssl','peer_name',$this->GetHost()); } else { $result = stream_context_set_option($context,'ssl','SNI_server_name',$this->GetHost()); } // // Note that even if SNI fails, the socket will still open, but the // web server should send a 400 error. // return (stream_socket_client($this->GetPrefix() . $s_ip . ":" . $this->GetPort(), $errno,$errstr,$i_timeout,STREAM_CLIENT_CONNECT,$context)); } /** @noinspection PhpUndefinedVariableInspection */ function Open() { $this->ClearError(); if (!isset($this->_sHost) || !isset($this->_iPort)) { return ($this->_SetError($this->nErrInit)); } if (!$this->Resolve()) { return (FALSE); } FMDebug("Starting socket open"); $f_sock = FALSE; // // Now, run through the list of IPs until we find one that connects. // However, this can cause problems with SNI in SSL/TLS connections. // If there is only one IP address, use the host name. // Otherwise, if we can specify SNI and it's an SSL connection // use streams, otherwise try each IP individually. // if (count($this->_aIPs) == 1) { FMDebug("Trying host " . $this->_sHost . ", timeout " . $this->GetConnectionTimeout()); $f_sock = @fsockopen($this->GetPrefix() . $this->_sHost,$this->GetPort(), $errno,$errstr,$this->GetConnectionTimeout()); } else { foreach ($this->_aIPs as $s_ip) { global $ExecEnv; FMDebug("Trying IP $s_ip, timeout " . $this->GetConnectionTimeout()); if ($ExecEnv->IsPHPAtLeast("5.3.2") && substr($this->GetPrefix(),0,3) == "ssl") { if (($f_sock = $this->_SSLOpen($s_ip,$errno,$errstr, $this->GetConnectionTimeout())) !== FALSE ) { break; } } elseif (($f_sock = @fsockopen($this->GetPrefix() . $s_ip,$this->GetPort(), $errno,$errstr,$this->GetConnectionTimeout())) !== FALSE ) { break; } } } if ($f_sock === FALSE) { FMDebug("open failed: $errno $errstr"); return ($this->_SetError($this->nErrSocket,$errno,$errstr)); } $this->_fSock = $f_sock; FMDebug("Done socket open"); return (TRUE); } function Read() { $this->ClearError(); $a_lines = array(); while (($s_line = fgets($this->_fSock)) !== FALSE) { $a_lines[] = $s_line; } FMDebug("Read " . count($a_lines) . " lines"); return ($a_lines); } function Write($s_str,$b_flush = TRUE) { $this->ClearError(); if (!isset($this->_fSock)) { return ($this->_SetError($this->nErrInit)); } if (($n_write = fwrite($this->_fSock,$s_str)) === FALSE) { return ($this->_SetError($this->nErrWrite)); } if ($n_write != strlen($s_str)) { return ($this->_SetError($this->nErrWriteShort)); } if ($b_flush) { if (fflush($this->_fSock) === FALSE) { return ($this->_SetError($this->nErrWriteShort)); } } return (TRUE); } function Close() { if (isset($this->_fSock)) { fclose($this->_fSock); unset($this->_fSock); } } } /* * Class: HTTPGet * Description: * A class that implements HTTP GET method. */ class HTTPGet extends NetIO { var $_sURL; var $_aURLSplit; var $_sRequest; var $_aResponse; var $_aRespHeaders; var $_sAuthLine; var $_sAuthType; var $_sAuthUser; var $_sAuthPass; var $_sAgent; var $nErrParse = -1000; // failed to parse URL var $nErrScheme = -1001; // unsupported URL scheme function __construct($s_url = "") { parent::__construct(); $this->_aURLSplit = array(); if (($this->_sURL = $s_url) !== "") { $this->_SplitURL(); } } function _SplitURL() { FMDebug("URL: " . $this->_sURL); if (($this->_aURLSplit = parse_url($this->_sURL)) === FALSE) { $this->_aURLSplit = array(); return ($this->_SetError($this->nErrParse)); } return (TRUE); } function GetURLSplit() { return ($this->_aURLSplit); } function SetURL($s_url) { $this->_aURLSplit = array(); $this->_sURL = $s_url; return ($this->_SplitURL()); } function _Init() { if (!isset($this->_aURLSplit["host"])) { return ($this->_SetError($this->nErrInit)); } $this->SetHost($this->_aURLSplit["host"]); $i_port = 80; $b_use_ssl = false; if (isset($this->_aURLSplit["scheme"])) { switch (strtolower($this->_aURLSplit["scheme"])) { case "http": break; case "https": $b_use_ssl = true; $i_port = 443; break; default: return ($this->_SetError($this->nErrScheme)); } } if (isset($this->_aURLSplit["port"])) { $i_port = $this->_aURLSplit["port"]; } if ($b_use_ssl) // // we require ssl:// for port 443 // { $this->SetPrefix("ssl://"); } $this->SetPort($i_port); return (TRUE); } function _SendRequest() { $this->_PrepareRequest(); return (parent::Write($this->_sRequest)); } function _PrepareRequest($s_method = 'GET') { FMDebug("Path: " . $this->_aURLSplit["path"]); if (!isset($this->_aURLSplit["path"]) || $this->_aURLSplit["path"] === "") { $s_path = "/"; } // default path else { $s_path = $this->_aURLSplit["path"]; } if (isset($this->_aURLSplit["query"])) { // // add the query to the path // Note that parse_url decodes the query string (urldecode), so // we need to split it into its component parameters // are re-encode their values. Calling urlencode($this->_aURLSplit["query"]) // encodes the '=' between parameters and this breaks things. // $a_params = explode('&',$this->_aURLSplit["query"]); foreach ($a_params as $i_idx => $s_param) { if (($i_pos = strpos($s_param,"=")) === false) { $a_params[$i_idx] = urlencode($s_param); } else { $a_params[$i_idx] = substr($s_param,0,$i_pos) . '=' . urlencode(substr($s_param,$i_pos + 1)); } } $s_path .= "?" . implode('&',$a_params); } // // add the fragment to the path. // if (isset($this->_aURLSplit["fragment"])) { $s_path .= '#' . urlencode($this->_aURLSplit["fragment"]); } // // build the request // $s_req = $s_method . " $s_path HTTP/1.0\r\n"; // // Add authentication // if (isset($this->_sAuthLine)) { $s_req .= "Authorization: $this->_sAuthLine\r\n"; } elseif (isset($this->_sAuthType)) { $s_req .= "Authorization: " . $this->_sAuthType . " " . base64_encode($this->_sAuthUser . ":" . $this->_sAuthPass) . "\r\n"; } // // Specify the host name // $s_req .= "Host: " . $this->GetHost() . "\r\n"; // // Specify the user agent // if (isset($this->_sAgent)) { $s_req .= "User-Agent: " . $this->_sAgent . "\r\n"; } // // Accept any output // $s_req .= "Accept: */*\r\n"; $s_req .= $this->_AdditionalHeaders(); // // End of request headers // $s_req .= "\r\n"; $this->_sRequest = $s_req; } function _AdditionalHeaders() { return (''); } function _GetResponse() { FMDebug("Reading"); if (($a_lines = parent::Read()) === FALSE) { return (FALSE); } $this->_aRespHeaders = $this->_aResponse = array(); $b_body = FALSE; for ($ii = 0 ; $ii < count($a_lines) ; $ii++) { if ($b_body) { //FMDebug("Body line: ".rtrim($a_lines[$ii])); $this->_aResponse[] = $a_lines[$ii]; } elseif ($a_lines[$ii] == "\r\n" || $a_lines[$ii] == "\n") { $b_body = TRUE; } else { //FMDebug("Header line: ".rtrim($a_lines[$ii])); $this->_aRespHeaders[] = $a_lines[$ii]; } } return (TRUE); } function GetResponseHeaders() { return ($this->_aRespHeaders); } function FindHeader($s_name) { $s_name = strtolower($s_name); $i_len = strlen($s_name); for ($ii = 0 ; $ii < count($this->_aRespHeaders) ; $ii++) { $s_line = $this->_aRespHeaders[$ii]; if (($s_hdr = substr($s_line,0,$i_len)) !== false) { $s_hdr = strtolower($s_hdr); if ($s_hdr === $s_name && substr($s_line,$i_len,1) === ":") { return (trim(substr($s_line,$i_len + 1))); } } } return (false); } function GetHTTPStatus() { $i_http_code = 0; $s_status = ""; for ($ii = 0 ; $ii < count($this->_aRespHeaders) ; $ii++) { $s_line = $this->_aRespHeaders[$ii]; if (substr($s_line,0,4) == "HTTP") { $i_pos = strpos($s_line," "); $s_status = substr($s_line,$i_pos + 1); $i_end_pos = strpos($s_status," "); if ($i_end_pos === false) { $i_end_pos = strlen($s_status); } $i_http_code = (int)substr($s_status,0,$i_end_pos); } } return (array($i_http_code,$s_status)); } function Resolve() { if (!$this->_Init()) { return (FALSE); } return (parent::Resolve()); } function Read() { if (!$this->_Init()) { return (FALSE); } FMDebug("Init done"); if (!$this->Open()) { return (FALSE); } FMDebug("Open done"); if (!$this->_SendRequest()) { return (FALSE); } FMDebug("Send done"); if (!$this->_GetResponse()) { return (FALSE); } FMDebug("Get done"); $this->Close(); return ($this->_aResponse); } function SetAuthenticationLine($s_auth) { $this->_sAuthLine = $s_auth; } function SetAuthentication($s_type,$s_user,$s_pass) { $this->_sAuthType = $s_type; $this->_sAuthUser = $s_user; $this->_sAuthPass = $s_pass; } function SetAgent($s_agent) { $this->_sAgent = $s_agent; } } /* * Class: HTTPPost * Description: * A class that implements HTTP POST method. */ class HTTPPost extends HTTPGet { var $_sPostData; /* data to POST */ function __construct($s_url = "") { $this->_sPostData = ''; parent::__construct($s_url); } function _SendRequest() { $this->_PrepareRequest(); return (NetIO::Write($this->_sRequest)); } function _PrepareRequest($s_method = 'POST') { parent::_PrepareRequest($s_method); $this->_AddData(); } function _AdditionalHeaders() { // // we don't handle file uploads yet // $a_hdrs = array( 'Content-Type: application/x-www-form-urlencoded', 'Content-Length: ' . strlen($this->_sPostData), ); return (implode("\r\n",$a_hdrs)); } function _AddData() { $this->_sRequest .= "\r\n"; // blank line after headers $this->_sRequest .= $this->_sPostData; } function _EncodeData($a_fields) { $s_data = ''; foreach ($a_fields as $s_name => $s_value) { if ($s_data != '') { $s_data .= '&'; } if (is_string($s_value)) { $s_data .= urlencode($s_name) . '=' . urlencode($s_value); } else { $s_data .= urlencode($s_name) . '=' . urlencode(serialize($s_value)); } } return ($s_data); } function Post($a_fields) { // // we don't handle file uploads yet // $this->_sPostData = $this->_EncodeData($a_fields); return ($this->Read()); } } // // Load a template file into a string. // function LoadTemplate($s_name,$s_dir,$s_url,$b_ret_lines = false) { global $php_errormsg; $s_buf = ""; $a_lines = array(); if (!empty($s_dir)) { $s_name = "$s_dir/" . basename($s_name); @ $fp = fopen($s_name,"r"); if ($fp === false) { SendAlert(GetMessage(MSG_OPEN_TEMPLATE,array("NAME" => $s_name, "ERROR" => CheckString($php_errormsg) ))); return (false); } if ($b_ret_lines) { $a_lines = ReadLines($fp); } else // // load the whole template into a string // { $s_buf = fread($fp,filesize($s_name)); } fclose($fp); } else { if (substr($s_url,-1) == '/') { $s_name = "$s_url" . basename($s_name); } else { $s_name = "$s_url/" . basename($s_name); } if (($m_data = GetURL($s_name,$s_error,$b_ret_lines)) === false) { SendAlert($s_error); return (false); } if ($b_ret_lines) { $a_lines = $m_data; // // strip line terminations from each line // for ($ii = count($a_lines) ; --$ii >= 0 ;) { $s_line = $a_lines[$ii]; $s_line = str_replace("\r","",$s_line); $s_line = str_replace("\n","",$s_line); $a_lines[$ii] = $s_line; } } else { $s_buf = $m_data; } } return ($b_ret_lines ? $a_lines : $s_buf); } // // To show an error template. The template must be HTML and, for security // reasons, must be a file on the server in the directory specified // by $TEMPLATEDIR or $TEMPLATEURL. // $a_specs is an array of substitutions to perform, as follows: // tag-name replacement string // // For example: // "fmerror"=>"An error message" // function ShowErrorTemplate($s_name,$a_specs,$b_user_error) { if (function_exists('FMHookShowErrorTemplate')) { if (FMHookShowErrorTemplate($s_name,$a_specs,$b_user_error)) { return (true); } } if (Settings::isEmpty('TEMPLATEDIR') && Settings::isEmpty('TEMPLATEURL')) { SendAlert(GetMessage(MSG_TEMPLATES)); return (false); } if (($s_buf = LoadTemplate($s_name,Settings::get('TEMPLATEDIR'),Settings::get('TEMPLATEURL'))) === false) { return (false); } // // now look for the tags to replace // foreach ($a_specs as $s_tag => $s_value) // // search for //\n"; echo GetMessage(MSG_ABOUT_FORMMAIL,array("FM_VERS" => $FM_VERS, "TECTITE" => "www.tectite.com" )); echo "
\n"; } echo "\n"; echo "\n"; } } // // Strip slashes if magic_quotes_gpc is set. // function StripGPC($s_value) { global $ExecEnv; if (!$ExecEnv->IsPHPAtLeast("5.4.0")) { // the magic_quotes_gpc setting was removed in PHP 5.4.0 if (get_magic_quotes_gpc() != 0) { $s_value = stripslashes($s_value); } } return ($s_value); } // // return an array, stripped of slashes if magic_quotes_gpc is set // function StripGPCArray($a_values) { global $ExecEnv; if (!$ExecEnv->IsPHPAtLeast("5.4.0")) { // the magic_quotes_gpc setting was removed in PHP 5.4.0 if (get_magic_quotes_gpc() != 0) { foreach ($a_values as $m_key => $m_value) { if (is_array($m_value)) // // strip arrays recursively // { $a_values[$m_key] = StripGPCArray($m_value); } else // // convert scalar to string and strip // { $a_values[$m_key] = stripslashes("$m_value"); } } } } return ($a_values); } // // Strip a value of unwanted characters, which might be hacks. // The stripping of \r and \n is a *critical* security feature. // function Strip($value) { // // When working with character sets such as UTF-8, stripping // control characters is a *really bad idea* and breaks things. // From version 8.22, FormMail only strips \r and \n as these // are really the only characters that can cause header hacks // to be inserted. (Strip means replace with a single space). // We also handle multiple spaces. // $value = preg_replace('/[ \r\n]+/'," ",$value); // zap all CRLF and multiple blanks return ($value); } // // Clean a value. This means: // 1. convert to string // 2. truncate to maximum length // 3. strip the value of unwanted or dangerous characters (hacks) // 4. trim both ends of whitespace // Each element of an array is cleaned as above. This process occurs // recursively, so arrays of arrays work OK too (though there's no // need for that in this program). // // Non-scalar values are changed to the string "Pattern: '".htmlspecialchars($s_pat)."': count=".preg_match($s_pat,$s_value)."
pat: ".htmlspecialchars($s_pat); $s_buf = preg_replace($s_pat,$s_repl,$s_buf); return ($s_buf); } // // This function handles multiple selects. // function FixMultiSelect($s_name,$a_values,$s_buf) { // // we search for: // // foreach ($a_values as $s_value) { $s_pat = '/(<\s*select[^>]*name="'; $s_pat .= preg_quote($s_name,"/"); $s_pat .= '\[\]".*?<\s*option[^>]*value="'; $s_pat .= preg_quote($s_value,"/"); $s_pat .= '"[^>]*)>'; $s_pat .= '/ims'; $s_repl = '$1 selected="selected">'; // echo "
pat: ".htmlspecialchars($s_pat);
$s_buf = preg_replace($s_pat,$s_repl,$s_buf);
}
return ($s_buf);
}
//
// This function unchecks all checkboxes and select options.
//
function UnCheckStuff($s_buf)
{
global $php_errormsg;
//
// we search for:
//
//
$s_pat = '/(<\s*input[^>]*type="checkbox"[^>]*?[^"\w])checked(="checked"|(?=[^"\w]))?([^>]*?)(\s*\/\s*)?>';
$s_pat .= '/ims';
$s_buf = preg_replace($s_pat,'$1$3$4>',$s_buf);
//
// we search for:
// " . GetMessage(MSG_NO_DEF_ALERT) . " " . GetMessage(MSG_TEST_SENT) . " " . GetMessage(MSG_TEST_FAILED) . " Wrong password for testalert!
//
$s_value = str_replace("\r\n",'
',$s_value);
//
// replace lone linefeeds with
//
$s_value = str_replace("\n",'
',$s_value);
//
// remove lone carriage returns
//
$s_value = str_replace("\r","",$s_value);
//
// replace all control chars with
//
$s_value = preg_replace('/[[:cntrl:]]+/','
',$s_value);
//
// strip HTML (note that all the
above will now be
// replaced with BODY_LF)
//
$s_value = StripHTML($s_value,Settings::get('BODY_LF'));
if ($b_mime_mail) {
if ($b_got_filter) {
//
// filter the whole value (ignore filter_fields for this
// special case) if a filter has been specified
//
$s_results = Filter($s_filter,$s_value);
if ($b_filter_attach) {
$a_attach_spec["Data"] = $s_results;
//
// KeepInLine keeps the filtered version inline as well
// as an attachment
//
if (!IsFilterOptionSet("KeepInLine")) {
$s_results = "";
}
$s_filter = ""; // no more filtering
}
} else {
$s_results = $s_value;
}
//
// send this single value off to get formatted in a MIME
// email
//
if (!MakeMimeMail($s_results,$a_headers,$a_raw_fields,
GetMailOption('HTMLTemplate'),
GetMailOption('TemplateMissing'),
IsMailOptionSet("NoPlain"),
$s_filter,$aFileVars,$a_attach_spec)
) {
return (false);
}
} elseif ($b_got_filter)
//
// filter the whole value (ignore filter_fields for this special case)
// if a filter has been specified
//
{
$s_results = Filter($s_filter,$s_value);
} else {
$s_results = $s_value;
if (IsMailOptionSet("CharSet"))
//
// sending plain text email, and the CharSet has been
// specified; include a header
//
{
$a_headers['Content-Type'] = "text/plain; charset=" . SafeHeader(GetMailOption("CharSet"));
}
}
} else {
if ($b_mime_mail) {
//
// get the plain text version of the email then send it
// to get MIME formatted
//
list($s_results,$s_unfiltered_results,$s_filtered_results) =
MakePlainEmail($a_fld_order,$a_clean_fields,
$s_to,$s_cc,$s_bcc,$a_raw_fields,$s_filter,
$a_filter_list);
if ($b_filter_attach) {
//
// attached the filtered results
//
$a_attach_spec["Data"] = $s_filtered_results;
//
// KeepInLine keeps the filtered version inline as well
// as an attachment
//
if (!IsFilterOptionSet("KeepInLine"))
//
// put the unfiltered results in the body of the message
//
{
$s_results = $s_unfiltered_results;
}
$s_filter = ""; // no more filtering
}
if (!MakeMimeMail($s_results,$a_headers,$a_raw_fields,
GetMailOption('HTMLTemplate'),
GetMailOption('TemplateMissing'),
IsMailOptionSet("NoPlain"),
$s_filter,$aFileVars,$a_attach_spec)
) {
return (false);
}
} else {
list($s_results,$s_unfiltered_results,$s_filtered_results) =
MakePlainEmail($a_fld_order,$a_clean_fields,
$s_to,$s_cc,$s_bcc,$a_raw_fields,$s_filter,
$a_filter_list);
if (!$b_got_filter && IsMailOptionSet("CharSet"))
//
// sending plain text email, and the CharSet has been
// specified; include a header
//
{
$a_headers['Content-Type'] = "text/plain; charset=" . SafeHeader(GetMailOption("CharSet"));
}
}
}
//
// now save uploaded files to the repository
//
if (Settings::get('FILEUPLOADS') && Settings::get('FILE_REPOSITORY') !== "") {
if (!SaveAllFilesToRepository()) {
return (false);
}
}
//
// send the mail - assumes the email addresses have already been checked
//
return (SendCheckedMail($s_to,$SPECIAL_VALUES["subject"],$s_results,
$s_sender,$a_headers));
}
//
// append an entry to a log file
//
function WriteLog($log_file)
{
global $SPECIAL_VALUES,$php_errormsg;
@ $log_fp = fopen($log_file,"a");
if ($log_fp === false) {
SendAlert(GetMessage(MSG_FILE_OPEN_ERROR,array("NAME" => $log_file,
"TYPE" => "log",
"ERROR" => CheckString($php_errormsg)
)));
return;
}
$date = gmdate("H:i:s d-M-y T");
$entry = $date . ":" . $SPECIAL_VALUES["email"] . "," .
$SPECIAL_VALUES["realname"] . "," . $SPECIAL_VALUES["subject"] . "\n";
fwrite($log_fp,$entry);
fclose($log_fp);
}
//
// write the data to a comma-separated-values file
//
function WriteCSVFile($s_csv_file,$a_vars)
{
global $SPECIAL_VALUES;
//
// create an array of column values in the order specified
// in $SPECIAL_VALUES["csvcolumns"]
//
$a_column_list = $SPECIAL_VALUES["csvcolumns"];
if (!isset($a_column_list) || empty($a_column_list) || !is_string($a_column_list)) {
SendAlert(GetMessage(MSG_CSVCOLUMNS,array("VALUE" => $a_column_list)));
return;
}
if (!isset($s_csv_file) || empty($s_csv_file) || !is_string($s_csv_file)) {
SendAlert(GetMessage(MSG_CSVFILE,array("VALUE" => $s_csv_file)));
return;
}
@ $fp = fopen($s_csv_file,"a" . Settings::get('CSVOPEN'));
if ($fp === false) {
SendAlert(GetMessage(MSG_FILE_OPEN_ERROR,array("NAME" => $s_csv_file,
"TYPE" => "CSV",
"ERROR" => CheckString($php_errormsg)
)));
return;
}
//
// convert the column list to an array, trim the names too
//
$a_column_list = TrimArray(explode(",",$a_column_list));
$n_columns = count($a_column_list);
//
// if the file is currently empty, put the column names in the first line
//
$b_heading = false;
if (filesize($s_csv_file) == 0) {
$b_heading = true;
}
$csv_format = new CSVFormat();
//
// now configure the CSVFormat object
// according to FormMail's configuration settings
//
$csv_format->SetQuote(Settings::get('CSVQUOTE'));
$csv_format->SetEscPolicy("conv");
$csv_format->SetSep(Settings::get('CSVSEP'));
$csv_format->SetIntSep(Settings::get('CSVINTSEP'));
if (Settings::get('LIMITED_IMPORT')) {
$csv_format->SetCleanFunc(function ($m_value) {
return CleanValue($m_value);
});
}
$s_csv = $csv_format->MakeCSVRecord($a_column_list,$a_vars);
if ($b_heading) {
fwrite($fp,$csv_format->MakeHeading($a_column_list) . Settings::get('CSVLINE'));
}
fwrite($fp,$s_csv . Settings::get('CSVLINE'));
fclose($fp);
// CreatePage($debug);
// FormMailExit();
}
function CheckConfig()
{
$a_mesgs = array();
if (in_array("TARGET_EMAIL",Settings::get('CONFIG_CHECK'))) {
//
// $TARGET_EMAIL values should begin with ^ and end with $
//
$a_target_email = Settings::get('TARGET_EMAIL');
for ($ii = 0 ; $ii < count($a_target_email) ; $ii++) {
$s_pattern = $a_target_email[$ii];
if (substr($s_pattern,0,1) != '^') {
$a_mesgs[] = GetMessage(MSG_TARG_EMAIL_PAT_START,
array("PAT" => $s_pattern));
}
if (substr($s_pattern,-1) != '$') {
$a_mesgs[] = GetMessage(MSG_TARG_EMAIL_PAT_END,
array("PAT" => $s_pattern));
}
}
}
if (Settings::get('SET_SENDER_FROM_EMAIL')) {
$a_mesgs[] = GetMessage(MSG_SET_SENDER_FROM_EMAIL);
}
if (count($a_mesgs) > 0) {
SendAlert(GetMessage(MSG_CONFIG_WARN,
array("MESGS" => implode("\n",$a_mesgs))),false,true);
}
}
//
// append an entry to the Auto Responder log file
//
function WriteARLog($s_to,$s_subj,$s_info)
{
global $aServerVars,$php_errormsg;
if (Settings::isEmpty('LOGDIR') || Settings::isEmpty('AUTORESPONDLOG')) {
return;
}
$log_file = Settings::get('LOGDIR') . "/" . Settings::get('AUTORESPONDLOG');
@ $log_fp = fopen($log_file,"a");
if ($log_fp === false) {
SendAlert(GetMessage(MSG_FILE_OPEN_ERROR,array("NAME" => $log_file,
"TYPE" => "log",
"ERROR" => CheckString($php_errormsg)
)));
return;
}
$a_entry = array();
$a_entry[] = gmdate("H:i:s d-M-y T"); // date/time in GMT
$a_entry[] = $aServerVars['REMOTE_ADDR']; // remote IP address
$a_entry[] = $s_to; // target email address
$a_entry[] = $s_subj; // subject line
$a_entry[] = $s_info; // information
$s_log_entry = implode(",",$a_entry) . "\n";
fwrite($log_fp,$s_log_entry);
fclose($log_fp);
}
/*
* The main logic starts here....
*/
//
// First, a special case; if formmail.php is called like this:
// http://.../formmail.php?testalert=1
// it sends a test message to the default alert address with some
// information about your PHP version and the DOCUMENT_ROOT.
//
if (isset($aGetVars["testalert"])) {
if ($aGetVars["testalert"] == Settings::get('TEST_PASSWORD')) {
function ShowServerVar($s_name)
{
global $aServerVars;
return (isset($aServerVars[$s_name]) ? $aServerVars[$s_name] : "-not set-");
}
$sAlert = GetMessage(MSG_ALERT,
array("LANG" => $sLangID,
"PHPVERS" => $ExecEnv->getPHPVersionString(),
"FM_VERS" => $FM_VERS,
"SERVER" => (IsServerWindows() ? "Windows" : "non-Windows"),
"DOCUMENT_ROOT" => ShowServerVar('DOCUMENT_ROOT'),
"SCRIPT_FILENAME" => ShowServerVar('SCRIPT_FILENAME'),
"PATH_TRANSLATED" => ShowServerVar('PATH_TRANSLATED'),
"REAL_DOCUMENT_ROOT" => CheckString($REAL_DOCUMENT_ROOT),
));
if (Settings::get('DEF_ALERT') == "") {
echo "\n";
echo "
\n";
echo "\n";
echo "\n";
}
ShowMessages();
FormMailExit();
}
//
// For saved files, add in the "new_name" values to the given
// array.
//
function GetSavedFileNames($a_values)
{
if (IsSetSession("FormSavedFiles")) {
$a_saved_files = GetSession("FormSavedFiles");
foreach ($a_saved_files as $s_fld => $a_upload) {
if (isset($a_upload["name"])) {
$a_values[$s_fld] = $a_upload["name"];
}
if (isset($a_upload["new_name"])) {
$a_values["name_of_$s_fld"] = $a_upload["new_name"];
}
}
}
return ($a_values);
}
//
// Scan the Multi form sequence values and build up the values that
// were submitted to the given form index.
//
function GetMultiValues($a_form_list,$i_form_index,$a_order = array(),
$a_clean = array(),
$a_raw_data = array(),
$a_all_data = array(),
$a_file_data = array())
{
$a_ret_clean = $a_ret_raw = $a_ret_all = $a_ret_files = array();
for ($ii = 0 ; $ii < $i_form_index ; $ii++) {
//
// only add a field to the order if it's not already there
//
$a_form_order = $a_form_list[$ii]["ORDER"];
$n_order = count($a_form_order);
for ($jj = 0 ; $jj < $n_order ; $jj++) {
if (array_search($a_form_order[$jj],$a_order) === false) {
$a_order[] = $a_form_order[$jj];
}
}
$a_ret_clean = array_merge($a_ret_clean,$a_form_list[$ii]["CLEAN"]);
$a_ret_raw = array_merge($a_ret_raw,$a_form_list[$ii]["RAWDATA"]);
$a_ret_all = array_merge($a_ret_all,$a_form_list[$ii]["ALLDATA"]);
$a_ret_files = array_merge($a_ret_files,$a_form_list[$ii]["FILES"]);
}
//
// later values must take precedence to earlier values,
// so merge in the passed-in data last
//
$a_ret_clean = array_merge($a_ret_clean,$a_clean);
$a_ret_raw = array_merge($a_ret_raw,$a_raw_data);
$a_ret_all = array_merge($a_ret_all,$a_all_data);
$a_ret_files = array_merge($a_ret_files,$a_file_data);
return (array($a_order,$a_ret_clean,$a_ret_raw,$a_ret_all,$a_ret_files));
}
$bMultiForm = false;
//
// Multi-page form sequencing is complicated....
// Requirements:
// 1. The first page in a multi-page form sequence must provide:
// - multi_start field set to 1
// - this_form field (it's own URL)
// - next_form field (multi-page form template name)
// 2. Subsequent pages must provide either:
// next_form (the next template name in the sequence)
// OR
// good_url or good_template or neither; this terminates
// the multi-page processing and provides the final URL.
// Logic:
// 1. We create session variables to contain information about
// the sequence.
// 2. On the first submission from the starting form, we record
// its "this_form" URL and the data submitted.
// We also create a URL (to FormMail) that will allow return
// to the *next* form in the sequence.
// 3. On submission from other forms in the sequence, we record
// the data that was submitted so we can return to that
// form with the user's data re-filled into the form.
// We also create a URL (to FormMail) that will allow return
// to the *next* form in the sequence.
// 4. A return URL contains "return=index" where index is the
// form sequence index number. This is a URL to FormMail.
// FormMail gets the template name or URL (URL only for the
// starting form) and outputs the requested HTML form. It also
// truncates the session data for forms after the returned-to
// one.
//
//
// Return to a previous form in a sequence.
//
function MultiFormReturn($i_return_to)
{
global $iFormIndex;
global $SessionAccessor;
if (!IsSetSession("FormList") ||
!IsSetSession("FormIndex") ||
$i_return_to < 0 ||
$i_return_to > GetSession("FormIndex")
) {
Error("cannot_return",GetMessage(MSG_CANNOT_RETURN,
array("TO" => $i_return_to,
"TOPINDEX" => (
IsSetSession("FormIndex") ?
GetSession("FormIndex") :
"\n";
echo " \n";
foreach ($a_list as $s_name => $i_value) {
if (substr($s_name,0,4) == "MSG_") {
//
// some PHP constants begin with MSG_, so we try to skip them
// too
//
switch ($s_name) {
case "MSG_IPC_NOWAIT":
case "MSG_EAGAIN":
case "MSG_ENOMSG":
case "MSG_NOERROR":
case "MSG_EXCEPT":
case "MSG_OOB":
case "MSG_PEEK":
case "MSG_DONTROUTE":
case "MSG_EOR":
continue 2;
}
if ($i_value >= 256) {
continue;
}
echo "\n";
echo "Message Number";
echo " \n";
echo "\n";
echo "$s_def_lang";
echo " \n";
echo "\n";
echo "$s_active_lang";
echo " \n";
echo "\n";
echo " \n";
}
}
echo "\n";
echo "$s_name ($i_value)";
echo " \n";
echo "\n";
$aMessages = $a_def_mesgs;
$s_def_msg = GetMessage((int)$i_value,array(),true,true);
echo nl2br(htmlentities($s_def_msg)); // English - don't need
// FixedHTMLEntities
echo " \n";
echo "\n";
$aMessages = $a_active_mesgs;
$s_act_msg = GetMessage((int)$i_value,array(),true,true);
if ($s_def_msg == $s_act_msg) {
echo "identical\n";
} else {
echo nl2br(FixedHTMLEntities($s_act_msg));
}
echo " \n";
echo "
";
*/
if (Settings::get('ATTACK_DETECTION_MANY_URLS') > 0) {
if ($n_match >= Settings::get('ATTACK_DETECTION_MANY_URLS')) {
$s_attack = "Many URLS in a field";
$s_info = GetMessage(MSG_ATTACK_MANYURL_INFO,
array("FLD" => $s_fld,"NUM" => ($n_match)),false);
$s_user_info = GetMessage(MSG_USER_ATTACK_MANY_URLS,array(),false);
return (true);
}
}
if ($n_match > 0) {
$a_fld_names[] = $s_fld;
}
}
}
if (Settings::get('ATTACK_DETECTION_MANY_URL_FIELDS') > 0) {
if (count($a_fld_names) >= Settings::get('ATTACK_DETECTION_MANY_URL_FIELDS')) {
$s_attack = "Many fields with URLs";
$s_info = GetMessage(MSG_ATTACK_MANYFIELDS_INFO,
array("FLDS" => implode(",",$a_fld_names),
"NUM" => (count($a_fld_names))
),false);
$s_user_info = GetMessage(MSG_USER_ATTACK_MANY_URL_FIELDS,array(),false);
return (true);
}
}
return (false);
}
function IsAjax()
{
global $SPECIAL_VALUES,$aFormVars,$aGetVars;
//
// this may be called too early to have SPECIAL_VALUES loaded,
// so we check the submitted form vars too.
//
if (isset($SPECIAL_VALUES) && $SPECIAL_VALUES["fmmode"] == "ajax") {
return (true);
}
if (isset($aFormVars["fmmode"])) {
return ($aFormVars["fmmode"] == "ajax");
}
if (isset($aGetVars["fmmode"])) {
return ($aGetVars["fmmode"] == "ajax");
}
return (false);
}
//
// Detect annoying attacks and prevent them from sending spurious
// alert messages.
//
function DetectAttacks($a_fields)
{
$s_info = $s_attack = "";
$b_attacked = false;
$s_user_info = "";
if (Settings::get('ATTACK_DETECTION_MIME')) {
if (DetectMimeAttack($a_fields,$s_attack,$s_info,$s_user_info)) {
$b_attacked = true;
}
}
if (!$b_attacked && !Settings::isEmpty('ATTACK_DETECTION_DUPS')) {
if (DetectDupAttack($a_fields,$s_attack,$s_info,$s_user_info)) {
$b_attacked = true;
}
}
if (!$b_attacked && Settings::get('ATTACK_DETECTION_SPECIALS')) {
if (DetectSpecialsAttack($a_fields,$s_attack,$s_info,$s_user_info)) {
$b_attacked = true;
}
}
if (!$b_attacked && (Settings::get('ATTACK_DETECTION_MANY_URLS') ||
Settings::get('ATTACK_DETECTION_MANY_URL_FIELDS'))
) {
if (DetectManyURLsAttack($a_fields,$s_attack,$s_info,$s_user_info)) {
$b_attacked = true;
}
}
if (Settings::get('ATTACK_DETECTION_JUNK')) {
if (DetectJunkAttack($a_fields,$s_attack,$s_info,$s_user_info)) {
$b_attacked = true;
}
}
if (!$b_attacked && !Settings::isEmpty('ATTACK_DETECTION_REVERSE_CAPTCHA')) {
if (DetectRevCaptchaAttack(Settings::get('ATTACK_DETECTION_REVERSE_CAPTCHA'),$a_fields,$s_attack,$s_info,
$s_user_info)
) {
$b_attacked = true;
}
}
if (function_exists('FMHookDetectAttacks')) {
if (FMHookDetectAttacks($a_fields,$s_attack,$s_info,$s_user_info)) {
$b_attacked = true;
}
}
if ($b_attacked) {
if (function_exists('FMHookAttacked')) {
FMHookAttacked($s_attack);
}
if (Settings::get('ALERT_ON_ATTACK_DETECTION')) {
SendAlert(GetMessage(MSG_ATTACK_DETECTED,
array("ATTACK" => $s_attack,
"INFO" => $s_info,
)),
false);
}
if (!IsAjax() && Settings::get('ATTACK_DETECTION_URL') !== "") {
Redirect(Settings::get('ATTACK_DETECTION_URL'),GetMessage(MSG_FORM_ERROR));
} else {
global $SERVER;
CreatePage(GetMessage(MSG_ATTACK_PAGE,array("SERVER" => $SERVER,"USERINFO" => $s_user_info)),
GetMessage(MSG_FORM_ERROR));
}
FormMailExit();
}
}
//
// Implement reverse captcha. At least two fields must be provided.
// At least one of the fields should have a non-empty value.
//
function DetectRevCaptchaAttack($a_revcap_spec,$a_form_data,&$s_attack,&$s_info,&$s_user_info)
{
global $bReverseCaptchaCompleted;
if (count($a_revcap_spec) < 2) {
SendAlert(GetMessage(MSG_REV_CAP));
return (false);
}
//
// check the reverse captcha fields
//
$n_empty = $n_non_empty = 0;
$b_attacked = false;
$s_info = "";
foreach ($a_revcap_spec as $s_fld_name => $s_value) {
if ($s_value === "") {
$n_empty++;
if (isset($a_form_data[$s_fld_name]) &&
$a_form_data[$s_fld_name] !== ""
) {
$b_attacked = true;
$s_info .= "\n" . GetMessage( MSG_ATTACK_REV_CAP_INFO,
array("FLD" => $s_fld_name,
"CONTENT" => $a_form_data[$s_fld_name]
),
false);
}
} else {
$n_non_empty++;
if (!isset($a_form_data[$s_fld_name]) ||
$a_form_data[$s_fld_name] !== $s_value
) {
$b_attacked = true;
$s_info .= "\n" . GetMessage( MSG_ATTACK_REV_CAP_INFO,
array("FLD" => $s_fld_name,
"CONTENT" =>
isset($a_form_data[$s_fld_name]) ?
$a_form_data[$s_fld_name] :
""
),
false);
}
}
}
//
// check that the rev captcha specification is correct:
// at least two fields, at least one empty
// and at least one non-empty
//
if ($n_empty + $n_non_empty < 2 ||
$n_empty == 0 || $n_non_empty == 0
) {
SendAlert(GetMessage(MSG_REV_CAP));
return (false);
}
if ($b_attacked) {
$s_attack = "Reverse Captcha";
$s_user_info = GetMessage(MSG_USER_ATTACK_REV_CAP,array(),false);
}
$bReverseCaptchaCompleted = !$b_attacked;
FMDebug('RevCaptcha: ' . $s_info);
//FMDebug("RevCaptcha done: ".($bReverseCaptchaCompleted ? "success" : "failure"));
return ($b_attacked);
}
//
// Check whether a form submission is allowed based on any Captcha provided
//
function CheckCaptchaSubmit()
{
global $SPECIAL_VALUES,$reCaptchaProcessor;
if ($SPECIAL_VALUES["imgverify"] !== "") {
//
// implement reCaptcha
//
if (isset($reCaptchaProcessor)) {
$s_error = '';
if (!$reCaptchaProcessor->Check($SPECIAL_VALUES["imgverify"],$SPECIAL_VALUES,$s_error)) {
$s_error_mesg = GetMessage(MSG_RECAPTCHA_MATCH,array("ERR" => $s_error));
UserError("recaptcha",$s_error_mesg,'',array('imgverify' => $s_error_mesg));
}
}
//
// implement other CAPTCHA
//
else {
//
// VerifyImgString is from Tectite's simple verifyimg.php CAPTCHA
// turing_string is from Captcha Creator
//
if (!IsSetSession("VerifyImgString") &&
!IsSetSession("turing_string")
) {
ErrorWithIgnore("verify_failed",GetMessage(MSG_VERIFY_MISSING),false);
}
//
// the user's entry must match the value in the session; allow
// spaces in the user's input
//
if (IsSetSession("VerifyImgString")) {
if (strtoupper(str_replace(" ","",$SPECIAL_VALUES["imgverify"])) !==
strtoupper(GetSession("VerifyImgString"))
) {
$s_error_mesg = GetMessage(MSG_VERIFY_MATCH);
UserError("img_verify",$s_error_mesg,'',array('imgverify' => $s_error_mesg));
}
} else {
if (strtoupper(str_replace(" ","",$SPECIAL_VALUES["imgverify"])) !==
strtoupper(GetSession("turing_string"))
) {
$s_error_mesg = GetMessage(MSG_VERIFY_MATCH);
UserError("img_verify",$s_error_mesg,'',array('imgverify' => $s_error_mesg));
}
}
}
}
}
/*
* Class: AutoResponder
* Description:
* Implements the auto responding feature of FormMail.
* The object must only be created after special fields have been
* processed.
*/
class AutoResponder
{
var $_bRequested; // true if requested by the form
var $_sTo; // to-address for auto response
var $_sSubject; // subject for auto response
var $_iNone = 0; // must be zero - initializes iType and iCaptchaType
var $_iCaptchaType; // type of CAPTCHA that's been successfully processed
var $_bCaptchaOK; // true if CAPTCHA processing is OK, otherwise false
//
// values of _iCaptchaType
//
var $_iFull = 1; // full captcha
var $_iRev = 2; // reverse captcha
var $_iType; // type of autoresponse (template or plain)
//
// values of _iType
//
var $_iSendTemplate = 1; // send a template
var $_iSendPlain = 2; // send a plain file
/*
* Method: AutoResponder ctor
* Parameters: void
* Returns: n/a
* Description:
* Constructs the object.
*/
function __construct()
{
global $SPECIAL_VALUES;
$this->_bCaptchaOK = $this->_bRequested = false;
$this->_sTo = "";
$this->_sSubject = "";
$this->_iType = $this->_iNone;
$this->_iCaptchaType = $this->_iNone;
//
// An autoreponse is sometimes optional in the sense the user
// can choose whether they want it.
// It can also be mandatory, and enforced by the form owner.
// Here are the rules:
// 1. If there is no return email address (email field), no autoresponse.
// In this case, if autoresponse has been requested by the form, send
// an alert message to the form owner, but otherwise ignore the problem
// (it's optional).
// 2. If no autoresponse has been requested by the form, skip.
// 3. If HTMLTemplate or PlainTemplate is set:
// 3a. If full CAPTCHA has been performed, send autoresponse.
// 3b If no full CAPTCHA has been performed, no autoresponse.
// 4. If HTMLTemplate and PlainTemplate are *not* set and either
// PlainFile or HTMLFile is set:
// 4a. If full CAPTCHA has been performed, send autoresponse.
// 4b. If Reverse CAPTCHA has been performed, send autoresponse.
// 4c. Otherwise, no autoresponse.
// 5. If full CAPTCHA is attempted but fails (e.g. wrong input), display
// error.
//
// The form owner can enforce autoresponse by making "email" required,
// and making "arverify" or "recaptcha_response_field" required (for templates)
// or by ensuring Reverse CAPTCHA is performed (for PlainFile or HTMLFile).
//
if (IsAROptionSet('HTMLTemplate') ||
IsAROptionSet('PlainTemplate')
) {
$this->_iType = $this->_iSendTemplate;
}
if (IsAROptionSet('PlainFile') ||
IsAROptionSet('HTMLFile')
) {
$this->_iType = $this->_iSendPlain;
}
if ($this->_iType) {
//
// the form has requested autoresponse....
// we need an email address to send to
//
if (!isset($SPECIAL_VALUES["email"]) || empty($SPECIAL_VALUES["email"])) {
SendAlert(GetMessage(MSG_ARESP_EMAIL));
} else {
$this->_bRequested = true;
$this->_sTo = $SPECIAL_VALUES["email"];
if (IsAROptionSet('Subject')) {
$this->_sSubject = GetAROption('Subject');
} else {
$this->_sSubject = GetMessage(MSG_ARESP_SUBJ,array(),false);
}
}
}
}
/*
* Method: AutoResponder::IsRequested
* Parameters: void
* Returns: bool true if autoresponding has been requested
* Description:
* Determines if autoresponding has been requested by the HTML.
*/
function IsRequested()
{
return ($this->_bRequested);
}
/*
* Method: AutoResponder::Process
* Parameters: $b_check_only if true, perform checks but do not send
* Returns: void
* Description:
* Processes the autorespond.
*/
function Process($b_check_only = false)
{
global $SPECIAL_VALUES;
FMDebug("AutoResponder::Process: check=" . ($b_check_only ? "Y" : "N"));
if ($this->IsRequested()) {
FMDebug("AutoResponder::Process: requested");
$b_done = false;
//
// You can create a function called SpecialAutoResponderProcess in a hook script.
// It gets passed the AutoResponder object and the $b_check_only flag.
// If the function returns true, then the standard process is not performed.
// Otherwise the standard process continues as-is.
// Your special function can call any of the public methods of this class including:
// StandarProcess
// Send
//
if (function_exists('SpecialAutoResponderProcess')) {
$b_done = SpecialAutoResponderProcess($this,$b_check_only);
}
if (!$b_done) {
$this->StandardProcess($b_check_only);
}
}
}
function StandardProcess($b_check_only)
{
//
// verify CAPTCHA or that Reverse CAPTCHA has been completed
// (unless we've already done that)
//
$this->_CheckCaptcha();
if (!$b_check_only && $this->_bCaptchaOK) {
FMDebug("AutoResponder::Process: proceeding, type=" . $this->_iType);
//
// for a template, full CAPTCHA must have been processed
//
if ($this->_iType == $this->_iSendTemplate) {
if ($this->_iCaptchaType == $this->_iFull) {
$this->Send(true);
}
}
//
// for a plain file, reverse CAPTCHA is sufficient, any CAPTCHA is OK
//
elseif ($this->_iType == $this->_iSendPlain) {
if ($this->_iCaptchaType) {
$this->Send(false);
}
}
}
}
/*
* Method: AutoResponder::_CheckCaptcha
* Parameters: void
* Returns: void
* Description:
* Checks the type of CAPTCHA that has been processed.
* This method should only be called if autoresponse has been requested
* by the form (i.e. IsRequested returns true).
*/
function _CheckCaptcha()
{
global $SPECIAL_VALUES,$bReverseCaptchaCompleted;
global $reCaptchaProcessor;
//
// only check for CAPTCHA once
//
if (!$this->_iCaptchaType) {
//
// check for full CAPTCHA attempt
// first, check for reCaptcha
//
if (isset($reCaptchaProcessor) && $SPECIAL_VALUES["arverify"] !== "") {
$this->_iCaptchaType = $this->_iFull;
$s_error = '';
if ($reCaptchaProcessor->Check($SPECIAL_VALUES["arverify"],$SPECIAL_VALUES,$s_error)) {
$this->_bCaptchaOK = true;
} else {
$this->_bCaptchaOK = false;
//
// report the error
//
WriteARLog($this->_sTo,$this->_sSubject,
GetMessage(MSG_LOG_RECAPTCHA,array("ERR" => $s_error),false));
UserError("recaptcha",GetMessage(MSG_RECAPTCHA_MATCH,array("ERR" => $s_error)));
}
}
//
// now check for our verifyimg or Captcha Creator
//
elseif ($SPECIAL_VALUES["arverify"] !== "") {
//
// allow spaces in the user's input, except for reCaptcha
//
$s_arverify = str_replace(" ","",$SPECIAL_VALUES["arverify"]);
$this->_iCaptchaType = $this->_iFull;
//
// full CAPTCHA has been attempted
// VerifyImgString is from Tectite's simple verifyimg.php CAPTCHA.
// turing_string is from Captcha Creator
//
if (IsSetSession("VerifyImgString") || IsSetSession("turing_string")) {
$b_match = false;
//
// the user's entry must match the value in the session
//
if (IsSetSession("VerifyImgString")) {
if (strtoupper($s_arverify) === strtoupper(GetSession("VerifyImgString"))) {
$b_match = true;
}
} else {
if (strtoupper($s_arverify) === strtoupper(GetSession("turing_string"))) {
$b_match = true;
}
}
if ($b_match) {
$this->_bCaptchaOK = true;
} else {
WriteARLog($this->_sTo,$this->_sSubject,
GetMessage(MSG_LOG_NO_MATCH,array(),false));
UserError("ar_verify",GetMessage(MSG_ARESP_NO_MATCH));
}
} else {
//
// ...and it has failed because there's no session data
//
WriteARLog($this->_sTo,$this->_sSubject,
GetMessage(MSG_LOG_NO_VERIMG,array(),false));
ErrorWithIgnore("verify_failed",GetMessage(MSG_ARESP_NO_AUTH),true);
}
} elseif (Settings::get('ENABLE_ATTACK_DETECTION') &&
!Settings::isEmpty('ATTACK_DETECTION_REVERSE_CAPTCHA')
) {
//
// Reverse CAPTCHA has been configured
//
$this->_iCaptchaType = $this->_iRev;
$this->_bCaptchaOK = $bReverseCaptchaCompleted;
}
}
}
/*
* Method: AutoResponder::_Send
* Parameters: $b_use_template if true, allow template, otherwise file
* Returns: void
* Description:
* Sends an autoreponse using a template.
*/
function Send($b_use_template)
{
global $SPECIAL_VALUES;
//
// declare some global vars for the hook system calls below
//
global $aFieldOrder,$aCleanedValues,$aRawDataValues,$aAllRawValues,$aFileVars;
FMDebug("Sending auto response: " . ($b_use_template ? "template" : "plain"));
//
// Hook system: before sending auto response
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprearesp.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprearesp.inc");
}
}
if (!$this->_SendEmail($this->_sTo,$this->_sSubject,$aRawDataValues,$b_use_template)) {
WriteARLog($this->_sTo,$this->_sSubject,
GetMessage(MSG_LOG_FAILED,array(),false));
SendAlert(GetMessage(MSG_ARESP_FAILED));
} else {
WriteARLog($this->_sTo,$this->_sSubject,
GetMessage(MSG_LOG_OK,array(),false));
//
// Hook system: after sending auto response
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostaresp.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostaresp.inc");
}
}
}
}
/*
* Method: AutoResponder::_SendEmail
* Parameters: $s_to the email address to send to
* $s_subj the subject line
* $a_values field values to access
* $b_use_template if true, use a template, otherwise plain file
* Returns: bool true on success, otherwise false
* Description:
* Sends an autoresponse email to the user.
*/
function _SendEmail($s_to,$s_subj,$a_values,$b_use_template)
{
global $ValidEmails;
$a_headers = array();
$s_mail_text = "";
$s_from_addr = GetAROption("FromAddr");
if (isset($s_from_addr)) {
$s_from_addr = UnMangle($s_from_addr);
if (!$ValidEmails->CheckAddress($s_from_addr)) {
SendAlert(GetMessage(MSG_INVALID_SENDER,
array("LOC" => "FromAddr in autorespond","EMAIL" => $s_from_addr)));
unset($s_from_addr);
}
}
if (!isset($s_from_addr)) {
$s_from_addr = "";
if (!Settings::isEmpty('FROM_USER')) {
if (Settings::get('FROM_USER') != "NONE") {
$s_from_addr = Settings::get('FROM_USER');
}
} else {
global $SERVER;
$s_from_addr = "FormMail@" . $SERVER;
}
}
if (!empty($s_from_addr)) {
$s_from_name = GetAROption('FromName');
$a_headers['From'] = MakeFromLine($s_from_addr,$s_from_name);
}
if (Settings::get('FIXED_SENDER') !== "") {
$s_sender = Settings::get('FIXED_SENDER');
} else {
$s_sender = $s_from_addr;
}
$s_type = "";
if ($b_use_template) {
if (IsAROptionSet('PlainTemplate')) {
$s_type .= "PlainTemplate ";
$s_template = GetAROption("PlainTemplate");
if (!ProcessTemplate($s_template,$a_lines,$a_values,
GetAROption('TemplateMissing'),
'SubstituteValuePlain')
) {
return (false);
}
FMDebug("AutoRespond: PlainTemplate " . count($a_lines) . " lines");
$s_mail_text = implode(Settings::get('BODY_LF'),$a_lines);
}
if (IsAROptionSet("HTMLTemplate")) {
$s_type .= "HTMLTemplate ";
if (!MakeMimeMail($s_mail_text,$a_headers,$a_values,
GetAROption("HTMLTemplate"),
GetAROption('TemplateMissing'))
) {
return (false);
}
FMDebug("AutoRespond: HTMLTemplate " . strlen($s_mail_text) . " bytes");
}
} else {
if (IsAROptionSet('PlainFile')) {
$s_type .= "PlainFile ";
//
// load the plain text file from the templates area
//
if (Settings::isEmpty('TEMPLATEDIR') && Settings::isEmpty('TEMPLATEURL')) {
SendAlert(GetMessage(MSG_TEMPLATES));
return (false);
}
$s_file = GetAROption("PlainFile");
if (($a_lines = LoadTemplate($s_file,Settings::get('TEMPLATEDIR'),Settings::get('TEMPLATEURL'),
true)) === false
) {
return (false);
}
$s_mail_text = implode(Settings::get('BODY_LF'),$a_lines);
FMDebug("AutoRespond: PlainFile " . count($a_lines) . " lines");
}
if (IsAROptionSet("HTMLFile")) {
$s_type .= "HTMLFile ";
if (!MakeMimeMail($s_mail_text,$a_headers,$a_values,
GetAROption("HTMLFile"),"",
false,"",array(),array(),false)
) {
return (false);
}
FMDebug("AutoRespond: HTMLTemplate " . strlen($s_mail_text) . " bytes");
}
}
if (strlen($s_mail_text) == 0) {
SendAlert(GetMessage(MSG_ARESP_EMPTY),array("TYPE" => $s_type));
}
FMDebug("AutoRespond: message is " . strlen($s_mail_text) . " bytes");
return (SendCheckedMail($s_to,$s_subj,$s_mail_text,$s_sender,$a_headers));
}
}
/*
* Class: SessionAccess
* Description:
* Implements access to the general PHP session.
* This provides a secure way of copy data to and from the
* user's PHP session.
*/
class SessionAccess
{
var $_aAccessList;
/*
* Method: SessionAccess ctor
* Parameters: $a_access_list list of variables that can be accessed
* Returns: n/a
* Description:
* Constructs the object.
*/
function __construct($a_access_list)
{
$this->_aAccessList = $a_access_list;
}
/*
* Method: SessionAccess::CopyIn
* Parameters: $a_vars reference to an array of values (keyed on name)
* $b_overwrite_empty if true, the session value will overwrite
* an empty array variable
* Returns: int number of values copied
* Description:
* Copies in the list of variables from the session to the given array.
*/
function CopyIn(&$a_vars,$b_overwrite_empty)
{
//$s_db = "Session CopyIn:\n";
$n_copied = 0;
foreach ($this->_aAccessList as $s_var_name) {
if (IsSetSession($s_var_name)) {
if (!isset($a_vars[$s_var_name]) ||
($b_overwrite_empty &&
FieldManager::IsEmpty($a_vars[$s_var_name]))
) {
$a_vars[$s_var_name] = GetSession($s_var_name);
//$s_db .= "$s_var_name='".$a_vars[$s_var_name]."'\n";
$n_copied++;
}
}
}
//SendAlert($s_db);
return ($n_copied);
}
/*
* Method: SessionAccess::CopyOut
* Parameters: $a_vars reference to an array of values (keyed on name)
* $a_fields an array of fields to copy
* Returns: int number of values copied
* Description:
* Copies the variables from the given array into the session.
* The list of fields to copy is specified in _aAccessList.
* If $a_fields is provided, it contains a list of fields to copy, which
* limits the fields selected from _aAccessList, otherwise all fields
* listed in _aAccessList are copied.
*/
function CopyOut($a_vars,$a_fields = array())
{
//$s_db = "Session CopyOut:\n";
$n_copied = 0;
foreach ($this->_aAccessList as $s_var_name) {
if (isset($a_vars[$s_var_name])) {
if (empty($a_fields) || in_array($s_var_name,$a_fields)) {
SetSession($s_var_name,$a_vars[$s_var_name]);
//$s_db .= "$s_var_name='".GetSession($s_var_name)."'\n";
$n_copied++;
}
}
}
//SendAlert($s_db);
return ($n_copied);
}
}
$SessionAccessor = new SessionAccess(Settings::get('SESSION_ACCESS'));
$bAdvTemplates = false;
if (Settings::get('ADVANCED_TEMPLATES') && (
!Settings::isEmpty('TEMPLATEDIR')
|| !Settings::isEmpty('TEMPLATEURL')
|| !Settings::isEmpty('MULTIFORMDIR')
|| !Settings::isEmpty('MULTIFORMURL')
)) {
$bAdvTemplates = true;
}
//
// Hook system: after configuring Advanced Templates
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostadvtemplates.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostadvtemplates.inc");
}
}
//
// Hook system: before return check and processing
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprereturnform.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprereturnform.inc");
}
}
if (isset($aGetVars["return"]) && is_numeric($aGetVars["return"])) {
//
// if advanced templates are in use, we will need them for
// performing a multi-page form return
//
if ($bAdvTemplates) {
$FMCTEMPLATE_PROC = true;
if (!include_once("$MODULEDIR/$FMCOMPUTE")) {
Error( "load_fmcompute",
GetMessage(MSG_LOAD_FMCOMPUTE,
array("FILE" => "$MODULEDIR/$FMCOMPUTE",
"ERROR" => $php_errormsg
)),
false,
false);
}
}
MultiFormReturn($aGetVars["return"]);
//
// Hook system: after multi-page return to form output
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostreturnform.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostreturnform.inc");
}
}
FormMailExit();
}
//
// Hook system: after initialization
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostinit.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostinit.inc");
}
}
$ExecEnv->checkUploadSize();
$ExecEnv->checkFileUploadSize($aFileVars);
//
// check configuration values for potential security problems
//
CheckConfig();
//
// otherwise, do the real processing of FormMail
//
$aStrippedFormVars = $aAllRawValues = StripGPCArray($aFormVars);
if (Settings::get('ENABLE_ATTACK_DETECTION')) {
DetectAttacks($aAllRawValues);
}
//
// Copy in configured session variables, overwriting any
// fields that are empty.
//
$SessionAccessor->CopyIn($aAllRawValues,true);
$SessionAccessor->CopyIn($aStrippedFormVars,true);
//
// process the options
//
ProcessMailOptions($aAllRawValues);
ProcessCRMOptions($aAllRawValues);
ProcessAROptions($aAllRawValues);
ProcessFilterOptions($aAllRawValues);
//
// create any derived fields
// NOTE: it's important that derivation occurs before cleaned values
// are created. If derivation occurred after cleaning or it created
// fields that were assumed to be clean, then an attack could create
// forged email headers using derive_fields. The code is safe with
// the logic sequence below.
//
$aAllRawValues = CreateDerived($aAllRawValues);
list($aFieldOrder,$aCleanedValues,$aRawDataValues) = ParseInput($aAllRawValues);
FilterFiles($aFileVars);
//
// if we're processing multi-forms, then merge in the raw data from previous
// forms unless this is the first page of the form sequence
//
if (IsSetSession("FormList") && $SPECIAL_VALUES["multi_start"] != 1) {
list($aFieldOrder,$aCleanedValues,
$aRawDataValues,$aAllRawValues,$aFileVars) = GetMultiValues(
GetSession("FormList"),
GetSession("FormIndex"),
$aFieldOrder,$aCleanedValues,
$aRawDataValues,$aAllRawValues,
$aFileVars);
}
if ($SPECIAL_VALUES["file_names"] !== "") {
list($aFieldOrder,$aCleanedValues,$aRawDataValues,$aAllRawValues,$aFileVars) =
SetFileNames($SPECIAL_VALUES["file_names"],$aFieldOrder,
$aCleanedValues,$aRawDataValues,$aAllRawValues,$aFileVars);
}
//
// Hook system: after loading and processing data
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookload.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookload.inc");
}
}
if (Settings::get('FORM_INI_FILE') !== "") {
ProcessFormIniFile(Settings::get('FORM_INI_FILE'));
//
// Hook system: after processing INI file
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookinifile.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookinifile.inc");
}
}
}
$bDoneSomething = false;
if (Settings::get('DB_SEE_INPUT')) {
/***
* echo "";
* print_r($aFormVars);
* print_r($aServerVars);
* echo "
";
* exit;
****/
CreatePage(implode("\n",$FORMATTED_INPUT),"Debug Output - Fields Submitted");
ZapSession();
FormMailExit();
}
if (!empty($SPECIAL_VALUES["fmcompute"]) || $bAdvTemplates) {
$FM_UserErrors = array();
//
// Generalized interface between FMCompute and FormMail functions
//
/** @noinspection PhpUnused */
function FM_CallFunction($s_func,$a_params,&$m_return,
&$s_mesg,&$a_debug,&$a_alerts)
{
switch ($s_func) {
case "FMFatalError":
SendComputeAlerts();
if (count($a_params) < 3) {
Error("fmcompute_call",GetMessage(MSG_CALL_PARAM_COUNT,
array("FUNC" => $s_func,
"COUNT" => count($a_params)
)),
false,false);
} else {
Error("fmcompute_error",$a_params[0],$a_params[1],$a_params[2]);
}
break;
case "FMFatalUserError":
SendComputeAlerts();
if (count($a_params) < 1) {
Error("fmcompute_call",GetMessage(MSG_CALL_PARAM_COUNT,
array("FUNC" => $s_func,
"COUNT" => count($a_params)
)),
false,false);
} else {
UserError("fmcompute_usererror",$a_params[0]);
}
break;
case "FMUserError":
if (count($a_params) < 1) {
SendComputeAlerts();
Error("fmcompute_call",GetMessage(MSG_CALL_PARAM_COUNT,
array("FUNC" => $s_func,
"COUNT" => count($a_params)
)),
false,false);
} else {
global $FM_UserErrors;
$FM_UserErrors[] = $a_params[0];
}
break;
case "FMSaveAllFilesToRepository":
if (count($a_params) != 0) {
SendComputeAlerts();
Error("fmcompute_call",GetMessage(MSG_CALL_PARAM_COUNT,
array("FUNC" => $s_func,
"COUNT" => count($a_params)
)),
false,false);
} else {
$m_return = SaveAllFilesToRepository();
}
break;
case "FMDeleteFileFromRepository":
if (count($a_params) != 1) {
SendComputeAlerts();
Error("fmcompute_call",GetMessage(MSG_CALL_PARAM_COUNT,
array("FUNC" => $s_func,
"COUNT" => count($a_params)
)),
false,false);
} else {
$m_return = DeleteFileFromRepository($a_params[0]);
}
break;
case "FMNextNum":
if (count($a_params) != 2) {
SendComputeAlerts();
Error("fmcompute_call",GetMessage(MSG_CALL_PARAM_COUNT,
array("FUNC" => $s_func,
"COUNT" => count($a_params)
)),
false,false);
} else {
$i_pad = $a_params[0];
$i_base = $a_params[1];
if ($i_base < 2 || $i_base > 36) {
Error("fmcompute_call",GetMessage(MSG_CALL_INVALID_PARAM,
array("FUNC" => $s_func,
"PARAM" => 2,
"CORRECT" => 2. . .36
)),
false,false);
}
$m_return = GetNextNum($i_pad,$i_base);
}
break;
default:
$s_mesg = GetMessage(MSG_CALL_UNK_FUNC,array("FUNC" => $s_func));
return (false);
}
return (true);
}
//
// register useful FormMail functions with FMCompute module
//
function RegisterFormMailFunctions($fmc)
{
//
// Allows the user to call "Error" from within a computation
//
if (($s_msg = $fmc->RegisterExternalFunction("PHP","void",
"FMFatalError",
array("string","bool","bool"),
"FM_CallFunction")) !== true
) {
Error( "fmcompute_reg",
GetMessage(MSG_REG_FMCOMPUTE,
array("FUNC" => "FMFatalError",
"ERROR" => $s_msg
)),
false,false);
}
//
// Allows the user to call "UserError" from within a computation
//
if (($s_msg = $fmc->RegisterExternalFunction("PHP","void",
"FMFatalUserError",
array("string"),
"FM_CallFunction")) !== true
) {
Error( "fmcompute_reg",
GetMessage(MSG_REG_FMCOMPUTE,
array("FUNC" => "FMFatalUserError",
"ERROR" => $s_msg
)),
false,false);
}
//
// Allows the user to record an error to be displayed
// from within a computation.
//
if (($s_msg = $fmc->RegisterExternalFunction("PHP","void",
"FMUserError",
array("string"),
"FM_CallFunction")) !== true
) {
Error( "fmcompute_reg",
GetMessage(MSG_REG_FMCOMPUTE,
array("FUNC" => "FMUserError",
"ERROR" => $s_msg
)),
false,false);
}
//
// Saves files to the repository.
//
if (($s_msg = $fmc->RegisterExternalFunction("PHP","bool",
"FMSaveAllFilesToRepository",
array(),
"FM_CallFunction")) !== true
) {
Error( "fmcompute_reg",
GetMessage(MSG_REG_FMCOMPUTE,
array("FUNC" => "FMSaveAllFilesToRepository",
"ERROR" => $s_msg
)),
false,false);
}
//
// Delete a file from the repository.
//
if (($s_msg = $fmc->RegisterExternalFunction("PHP","bool",
"FMDeleteFileFromRepository",
array("string"),
"FM_CallFunction")) !== true
) {
Error( "fmcompute_reg",
GetMessage(MSG_REG_FMCOMPUTE,
array("FUNC" => "FMDeleteFileFromRepository",
"ERROR" => $s_msg
)),
false,false);
}
//
// Generate a Next Number
//
if (($s_msg = $fmc->RegisterExternalFunction("PHP","string",
"FMNextNum",
array("int","int"),
"FM_CallFunction")) !== true
) {
Error( "fmcompute_reg",
GetMessage(MSG_REG_FMCOMPUTE,
array("FUNC" => "FMNextNum",
"ERROR" => $s_msg
)),
false,false);
}
}
//
// load the fmcompute module
//
if (!empty($SPECIAL_VALUES["fmcompute"])) {
$FMCOMPUTE_CLASS = true;
$FMCOMPUTE_NODEBUG = true;
}
if ($bAdvTemplates) {
$FMCTEMPLATE_PROC = true;
}
if (!include_once("$MODULEDIR/$FMCOMPUTE")) {
Error( "load_fmcompute",
GetMessage(MSG_LOAD_FMCOMPUTE,
array("FILE" => "$MODULEDIR/$FMCOMPUTE",
"ERROR" => $php_errormsg
)),
false,false);
}
if (!empty($SPECIAL_VALUES["fmcompute"])) {
/** @noinspection PhpUndefinedVariableInspection */
RegisterFormMailFunctions($FMCalc);
//
// if GeoIP support is specified, load that module now
//
if (!Settings::isEmpty('GEOIP_LIC')) {
$FMMODULE_LOAD = true; // signal module load
if (!include_once("$MODULEDIR/$FMGEOIP")) {
Error( "load_module",
GetMessage(MSG_LOAD_MODULE,
array("FILE" => "$MODULEDIR/$FMGEOIP",
"ERROR" => $php_errormsg
)),
false,false);
}
//
// load the license and register the module
//
/** @noinspection PhpUndefinedClassInspection */
$GeoIP = new FMGeoIP(Settings::get('GEOIP_LIC'));
/** @noinspection PhpUndefinedMethodInspection */
if (!$GeoIP->RegisterModule($FMCalc)) {
/** @noinspection PhpUndefinedMethodInspection */
Error( "reg_module",
GetMessage(MSG_REGISTER_MODULE,
array("NAME" => "FMGeoIP",
"ERROR" => $GeoIP->GetError()
)),
false,false);
}
}
}
}
if (isset($SPECIAL_VALUES["multi_go_back"]) && !empty($SPECIAL_VALUES["multi_go_back"])) {
if (!IsSetSession("FormList") || GetSession("FormIndex") == 0) {
ErrorWithIgnore("go_back",GetMessage(MSG_GO_BACK),false,false);
}
MultiKeep(); // store any "multi_keep" data just submitted
//
// save back to the session any variables that have been specified in
// multi_keep
//
if (isset($SPECIAL_VALUES["multi_keep"]) && !empty($SPECIAL_VALUES["multi_keep"])) {
$SessionAccessor->CopyOut($aAllRawValues,$SPECIAL_VALUES["multi_keep"]);
}
MultiFormReturn(GetSession("FormIndex") - 1);
// echo "Form index = ".GetSession("FormIndex");
//
// Hook system: after multi-page return to form output
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostreturnform.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostreturnform.inc");
}
}
FormMailExit();
}
//
// This is the check for spiders; I can't imagine a spider will
// ever use the POST method.
//
if ($bIsGetMethod && count($aFormVars) == 0) {
if (!Settings::get('ALLOW_GET_METHOD') && $bHasGetData) {
CreatePage(GetMessage(MSG_GET_DISALLOWED),GetMessage(MSG_FORM_ERROR));
} else {
CreatePage(GetMessage(MSG_NO_DATA_PAGE),GetMessage(MSG_FORM_ERROR));
}
ZapSession();
FormMailExit();
}
//
// Hook system: before performing required and conditions etc.
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprechecks.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprechecks.inc");
}
}
//
// check for required fields
//
if (!CheckRequired($SPECIAL_VALUES["required"],$aAllRawValues,$sMissing,$aMissingList)) {
UserError("missing_fields",GetMessage(MSG_REQD_ERROR),$sMissing,$aMissingList);
}
//
// check complex conditions
//
$fmConditions = new Conditions($SPECIAL_VALUES["conditions"],$sMissing,$aMissingList);
if (!$fmConditions->Check($aAllRawValues,$aFileVars)) {
UserError("failed_conditions",GetMessage(MSG_COND_ERROR),$sMissing,$aMissingList);
}
//
// check CAPTCHA
//
CheckCaptchaSubmit();
//
// Hook system: after performing required and conditions etc.
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookchecks.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookchecks.inc");
}
}
if (!empty($SPECIAL_VALUES["fmmodules"])) {
$aModuleList = TrimArray(explode(",",$SPECIAL_VALUES["fmmodules"]));
$FMMODULE_LOAD = true; // signal module load
foreach ($aModuleList as $sModule) {
if (!include_once("$MODULEDIR/$sModule")) {
Error( "load_module",
GetMessage(MSG_LOAD_MODULE,
array("FILE" => "$MODULEDIR/$sModule",
"ERROR" => $php_errormsg
)),
false,false);
}
}
}
if (!empty($SPECIAL_VALUES["fmcompute"])) {
//
// Callback function for preg_replace_callback to add line
// numbers on each match
//
function AddLineNumbersCallback($a_matches)
{
global $iAddLineNumbersCounter;
return (sprintf("%d:",++$iAddLineNumbersCounter) . $a_matches[0]);
}
//
// Add line numbers to some code
//
function AddLineNumbers($s_code)
{
global $iAddLineNumbersCounter;
$iAddLineNumbersCounter = 0;
return (preg_replace_callback('/^/m','AddLineNumbersCallback',$s_code));
}
//
// Load some more code into FMCalc
//
function Load($s_code)
{
global $FMCalc;
$a_mesgs = array();
// echo "Loading '$s_code'";
if ($FMCalc->Parse($s_code,$a_mesgs) === false) {
$s_msgs = "";
foreach ($a_mesgs as $a_msg) {
$s_msgs .= "Line " . $a_msg["LINE"];
$s_msgs .= ", position " . $a_msg["CHAR"] . ": ";
$s_msgs .= $a_msg["MSG"] . "\n";
}
Error( "fmcompute_parse",
GetMessage(MSG_COMP_PARSE,
array("CODE" => AddLineNumbers($s_code),
"ERRORS" => $s_msgs
)),
false,
false);
}
}
//
// Send any alerts found in FMCalc
//
function SendComputeAlerts()
{
global $FMCalc;
$a_alerts = $FMCalc->GetAlerts();
if (count($a_alerts) > 0) {
SendAlert(GetMessage(MSG_COMP_ALERT,
array("ALERTS" => implode("\n",StripHTML($a_alerts)))));
}
$a_debug = $FMCalc->GetDebug();
if (count($a_debug) > 0) {
SendAlert(GetMessage(MSG_COMP_DEBUG,
array("DEBUG" => implode("\n",StripHTML($a_debug)))));
}
}
//
// Perform the computations in FMCalc
//
function Compute(&$a_field_order,&$a_cleaned_values,&$a_raw_data_values,
&$a_values)
{
global $FMCalc,$FM_UserErrors;
$a_mesgs = array();
$FM_UserErrors = array();
if (($a_flds = $FMCalc->Execute($a_mesgs)) !== false) {
SendComputeAlerts();
foreach ($a_flds as $s_name => $s_value) {
$a_values[$s_name] = $s_value;
ProcessField($s_name,$s_value,$a_field_order,
$a_cleaned_values,$a_raw_data_values);
}
if (count($FM_UserErrors) > 0) {
UserError("fmcompute_usererrors",GetMessage(MSG_USER_ERRORS),
"",$FM_UserErrors);
}
} else {
SendComputeAlerts();
Error("fmcompute_exec",GetMessage(MSG_COMP_EXEC,
array("ERRORS" => implode("\n",$a_mesgs))),false,false);
}
}
//
// Register all fields; a future improvement should use a call-back
// function so as not to copy all the data into the FMCompute object
//
function RegisterData($a_form_data,$a_file_vars)
{
global $FMCalc;
foreach ($a_form_data as $s_name => $s_value) {
if (isset($s_name) && isset($s_value)) {
if (($s_msg = $FMCalc->RegisterExternalData("PHP","string",
$s_name,"c",$s_value)) !== true
) {
Error("fmcompute_regdata",GetMessage(MSG_COMP_REG_DATA,
array("NAME" => $s_name,"ERROR" => $s_msg)),false,false);
}
}
}
foreach ($a_file_vars as $s_fld_name => $a_file_spec) {
if (FieldManager::IsUploadedFile($a_file_spec)) {
if (isset($a_file_spec["new_name"])) {
//
// we ignore errors here, because name_of_ field often already
// exists from the above loop
//
$FMCalc->RegisterExternalData("PHP","string",
"name_of_" . $s_fld_name,"c",$a_file_spec["new_name"]);
}
$s_value = $a_file_spec["name"];
} else {
$s_value = "";
}
if (($s_msg = $FMCalc->RegisterExternalData("PHP","string",
$s_fld_name,"c",$s_value)) !== true
) {
Error("fmcompute_regdata",GetMessage(MSG_COMP_REG_DATA,
array("NAME" => $s_fld_name,"ERROR" => $s_msg)),false,false);
}
}
}
/*
* Function: MergeFileArrays
* Parameters: $a_new_files the list of files just submitted by the form
* $a_saved_files the list of files that have been previously saved (can be NULL)
* Returns: array a merged array
* Description:
* Intelligently merges two arrays of file definitions.
* If a file has been newly uploaded, its definition takes precedence.
*/
function MergeFileArrays($a_new_files,$a_saved_files)
{
if (isset($a_saved_files)) {
foreach ($a_saved_files as $s_key => $a_def) {
if (isset($a_new_files[$s_key])) {
if (!FieldManager::IsUploadedFile($a_new_files[$s_key])) {
$a_new_files[$s_key] = $a_def;
}
} else {
$a_new_files[$s_key] = $a_def;
}
}
}
return ($a_new_files);
}
RegisterData($aAllRawValues,MergeFileArrays($aFileVars,IsSetSession("FormSavedFiles") ?
GetSession("FormSavedFiles") : array()));
//
// parse all fmcompute fields
//
if (is_array($SPECIAL_VALUES["fmcompute"])) {
$nCompute = count($SPECIAL_VALUES["fmcompute"]);
for ($iCompute = 0 ; $iCompute < $nCompute ; $iCompute++) {
Load($SPECIAL_VALUES["fmcompute"][$iCompute]);
}
} else {
Load($SPECIAL_VALUES["fmcompute"]);
}
//
// run computations
//
Compute($aFieldOrder,$aCleanedValues,$aRawDataValues,$aAllRawValues);
//
// Hook system: after computations
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookcompute.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookcompute.inc");
}
}
}
$bGotGoBack = $bGotNextForm = $bGotGoodTemplate = $bGotGoodUrl = false;
if (isset($SPECIAL_VALUES["good_url"]) &&
!empty($SPECIAL_VALUES["good_url"])
) {
$bGotGoodUrl = true;
}
if (isset($SPECIAL_VALUES["good_template"]) &&
!empty($SPECIAL_VALUES["good_template"])
) {
$bGotGoodTemplate = true;
}
if (isset($SPECIAL_VALUES["next_form"]) &&
!empty($SPECIAL_VALUES["next_form"])
) {
$bGotNextForm = true;
}
if (isset($SPECIAL_VALUES["multi_go_back"]) &&
!empty($SPECIAL_VALUES["multi_go_back"])
) {
$bGotGoBack = true;
}
//
// it's not valid to specify "next_form" as well as "good_url" or
// "good_template"; this is because it's ambiguous - do we go to the
// next form or the final 'thank you' page?
//
if ($bGotNextForm && ($bGotGoodTemplate || $bGotGoodUrl)) {
ErrorWithIgnore("next_plus_good",GetMessage(MSG_NEXT_PLUS_GOOD,array("WHICH" =>
($bGotGoodUrl ? "good_url" :
"good_template")
)), false,false);
}
MultiFormLogic();
//
// Hook system: after multi-page form logic
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookmulti.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookmulti.inc");
}
}
//
// write to the CSV database
//
if (!Settings::isEmpty('CSVDIR') && isset($SPECIAL_VALUES["csvfile"]) &&
!empty($SPECIAL_VALUES["csvfile"])
) {
//
// Hook system: before writing CSV file
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprecsv.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprecsv.inc");
}
}
WriteCSVFile(Settings::get('CSVDIR') . "/" . basename($SPECIAL_VALUES["csvfile"]),$aAllRawValues);
//
// Hook system: after writing CSV file
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostcsv.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostcsv.inc");
}
}
$bDoneSomething = true;
}
//
// write to the log file
//
if (!Settings::isEmpty('LOGDIR') && isset($SPECIAL_VALUES["logfile"]) && !empty($SPECIAL_VALUES["logfile"])) {
//
// Hook system: before writing log file
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprelog.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprelog.inc");
}
}
WriteLog(Settings::get('LOGDIR') . "/" . basename($SPECIAL_VALUES["logfile"]));
//
// Hook system: after writing log file
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostlog.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostlog.inc");
}
}
$bDoneSomething = true;
}
//
// send to the CRM
//
if (isset($SPECIAL_VALUES["crm_url"]) && isset($SPECIAL_VALUES["crm_spec"]) &&
!empty($SPECIAL_VALUES["crm_url"]) && !empty($SPECIAL_VALUES["crm_spec"])
) {
$sCRM = GetCRMURL($SPECIAL_VALUES["crm_spec"],$aAllRawValues,$SPECIAL_VALUES["crm_url"]);
if (!empty($sCRM)) {
$aCRMReturnData = array();
//
// Hook system: before sending to CRM
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprecrm.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprecrm.inc");
}
}
if (!SendToCRM($sCRM,$aCRMReturnData)) {
//
// CRM interface failed, check if the form wants an error
// displayed
//
if (IsCRMOptionSet("ErrorOnFail")) {
Error("crm_failed",GetMessage(MSG_CRM_FAILURE,
array("URL" => $sCRM,
"DATA" => GetObjectAsString($aCRMReturnData)
)),
false,false);
}
} else
//
// append the returned data to the raw data values of the form
//
{
$aRawDataValues = array_merge($aRawDataValues,$aCRMReturnData);
}
//
// Hook system: after sending to CRM
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostcrm.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostcrm.inc");
}
}
$bDoneSomething = true;
}
}
//
// Check obsolete SendMailFOption
//
if (IsMailOptionSet("SendMailFOption")) {
SendAlert(GetMessage(MSG_FOPTION_WARN,array("LINE" => Settings::get('SENDMAIL_F_OPTION_LINE'))),
false,true);
}
$AutoResp = new AutoResponder();
//
// check for autoresponse problems
//
$AutoResp->Process(true);
//
// Hook system: before completion
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprecomplete.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprecomplete.inc");
}
}
//
// send email
//
if (!isset($SPECIAL_VALUES["recipients"]) || empty($SPECIAL_VALUES["recipients"])) {
//
// No recipients - don't email anyone...
// If nothing has been done above (CSV, logging, or CRM),
// then report an error.
//
if (!$bDoneSomething) {
if (!$bGotGoBack && !$bGotNextForm) {
ErrorWithIgnore("no_recipients",GetMessage(MSG_NO_ACTIONS));
}
}
} else {
//
// Hook system: before sending emails
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpreemail.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpreemail.inc");
}
}
$s_invalid = $s_invalid_cc = $s_invalid_bcc = "";
if (!CheckEmailAddress($SPECIAL_VALUES["recipients"],$s_valid_recipients,$s_invalid)) {
ErrorWithIgnore("no_valid_recipients",GetMessage(MSG_NO_RECIP));
} else {
$s_valid_cc = $s_valid_bcc = "";
//
// check CC and BCC addresses
//
if (isset($SPECIAL_VALUES["cc"]) && !empty($SPECIAL_VALUES["cc"])) {
CheckEmailAddress($SPECIAL_VALUES["cc"],$s_valid_cc,$s_invalid_cc);
}
if (isset($SPECIAL_VALUES["bcc"]) && !empty($SPECIAL_VALUES["bcc"])) {
CheckEmailAddress($SPECIAL_VALUES["bcc"],$s_valid_bcc,$s_invalid_bcc);
}
//
// send an alert for invalid addresses
//
$s_error = "";
if (!empty($s_invalid)) {
$s_error .= "recipients: $s_invalid\r\n";
}
if (!empty($s_invalid_cc)) {
$s_error .= "cc: $s_invalid_cc\r\n";
}
if (!empty($s_invalid_bcc)) {
$s_error .= "bcc: $s_invalid_bcc\r\n";
}
if (!empty($s_error)) {
SendAlert(GetMessage(MSG_INV_EMAIL,array("ERRORS" => $s_error)));
}
//
// send the actual results
//
if (!SendResults($aFieldOrder,$aCleanedValues,$s_valid_recipients,$s_valid_cc,
$s_valid_bcc,$aRawDataValues)
) {
Error("mail_failed",GetMessage(MSG_FAILED_SEND));
}
//
// Hook system: after sending emails
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostemail.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostemail.inc");
}
}
}
}
//
// Process autoresponse
//
$AutoResp->Process();
$SessionAccessor->CopyOut($aAllRawValues);
//
// multi-form processing
//
if ($bGotNextForm) {
OutputMultiFormTemplate($SPECIAL_VALUES["next_form"],$aRawDataValues);
// echo "Form index = ".GetSession("FormIndex");
//
// Hook system: after multi-page next form output
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostnextform.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostnextform.inc");
}
}
} else {
//
// Hook system: before finishing
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookprefinish.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookprefinish.inc");
}
}
//
// redirect to the good URL page, or create a default page;
// we're no longer processing a multi-page form sequence
//
UnsetSession("FormList");
UnsetSession("FormIndex");
UnsetSession("FormKeep");
if (!$bGotGoodUrl) {
if (IsAjax()) {
JSON_Result("OK");
} else {
if ($bGotGoodTemplate) {
OutputTemplate($SPECIAL_VALUES["good_template"],$aRawDataValues);
} else {
CreatePage(GetMessage(MSG_THANKS_PAGE),GetMessage(MSG_FORM_OK));
}
}
//
// Hook system: after finishing (before session is cleared)
//
if (!Settings::isEmpty('HOOK_DIR')) {
if (!@include(Settings::get('HOOK_DIR') . "/fmhookpostfinish.inc.php")) {
@include(Settings::get('HOOK_DIR') . "/fmhookpostfinish.inc");
}
}
//
// everything's good, so we don't need the session any more
//
ZapSession();
} elseif (IsAjax()) {
JSON_Result("OK");
} else
//
// Note that a redirect terminates the script and prevents
// the processing of fmhookpostfinish.inc. Also, the session
// is left intact (which the good_url can use).
//
{
Redirect($SPECIAL_VALUES["good_url"],GetMessage(MSG_FORM_OK));
}
}