if(($_SESSION['security_code'] == $_POST['security_code']) && (!empty($_SESSION['security_code'])) ) { unset($_SESSION['security_code']); } else { $error_array[] .= "The security code you have entered is incorrect."; } function check_email_address($email) { if (!ereg("^[^@]{1,64}@[^@]{1,255}$", $email)) { return false; } $email_array = explode("@", $email); $local_array = explode(".", $email_array[0]); for ($i = 0; $i < sizeof($local_array); $i++) { if (!ereg("^(([A-Za-z0-9!#$%&'*+/=?^_`{|}~-][A-Za-z0-9!#$%&'*+/=?^_`{|}~\.-]{0,63})|(\"[^(\\|\")]{0,62}\"))$", $local_array[$i])) { return false; } } if (!ereg("^\[?[0-9\.]+\]?$", $email_array[1])) { $domain_array = explode(".", $email_array[1]); if (sizeof($domain_array) < 2) { return false; } for ($i = 0; $i < sizeof($domain_array); $i++) { if (!ereg("^(([A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9])|([A-Za-z0-9]+))$", $domain_array[$i])) { return false; } } } return true; } //Clean and validate our POST variables $clean_email_to = addslashes(strip_tags($_POST['email_to'])); $clean_message_text = stripslashes(strip_tags($_POST['message_text'])); $clean_subject = stripslashes(strip_tags($_POST['subject'])); $clean_phone = stripslashes(strip_tags($_POST['sender_phone'])); $clean_name = stripslashes(strip_tags($_POST['sender_name'])); $clean_sender_email = stripslashes(strip_tags($_POST['sender_email'])); if(!$clean_sender_email){$error_array[] .= "You have not supplied an email address.";} else { if (!check_email_address($clean_sender_email)) { $error_array[] .= "The email address you have entered is not valid."; } } if(!$clean_name){$error_array[] .= "Please enter your name.";} if(!$clean_message_text){$error_array[] .= "Please enter some message text.";} if(strlen($clean_message_text) > 1000){$error_array[] .= "Message text is too long, limit: 1000 characters.";} if($_POST['email_to'] == "no_email") {$error_array[] .= "Please select which department you would like to send this message to.";} $email_to = $emailers[$clean_subject]; $subject = "fitladzclub.co.uk website contact $clean_sender_email, sent on " . date("d/m/Y"); if ($_POST['submit']){ if(!$error_array){ //There is no error, send email $headers = 'From: ' . $clean_sender_email . '' . "\r\n" . 'Reply-To: ' . $clean_sender_email . '' . "\r\n"; $message_text = "Name: $clean_name\nEmail: $clean_sender_email\nPhone Number: $clean_phone\n\nMessage: \n\n$clean_message_text"; $body .= 'Visitor Ip: ' . $RealIp . "\r\n"; if (mail($email_to, $subject, $message_text, $headers)) { $email_success = true; } } } //------------------------------------------------------------------------- function getip() // Returns the real Ip in most cases { if (isSet($_SERVER)) { if (isSet($_SERVER["HTTP_X_FORWARDED_FOR"])) { $realip = $_SERVER["HTTP_X_FORWARDED_FOR"]; } elseif (isSet($_SERVER["HTTP_CLIENT_IP"])) { $realip = $_SERVER["HTTP_CLIENT_IP"]; } else { $realip = $_SERVER["REMOTE_ADDR"]; } } else { if ( getenv( 'HTTP_X_FORWARDED_FOR' ) ) { $realip = getenv( 'HTTP_X_FORWARDED_FOR' ); } elseif ( getenv( 'HTTP_CLIENT_IP' ) ) { $realip = getenv( 'HTTP_CLIENT_IP' ); } else { $realip = getenv( 'REMOTE_ADDR' ); } } return $realip; } //----------------------------------------------------------------------------- ?>