HxBro's Blog » PHP http://www.hxbro.com Random Ramblings Mon, 31 Mar 2008 08:59:33 +0000 http://wordpress.org/?v=2.9.1 en hourly 1 My company website http://www.hxbro.com/2007/08/09/my-company-website/ http://www.hxbro.com/2007/08/09/my-company-website/#comments Thu, 09 Aug 2007 15:01:14 +0000 HxBro http://www.hxbro.com/2007/08/09/my-company-website/ After a long period without a company website, I’ve now created a new one showing what I offer and a portfolio of both web and digital tv projects I’ve worked on.

I can provide a wide range of IT services, specialising in Web and Digital TV but also covering PC maintenance and troubleshooting, Broadband setup and troubleshooting, and Web Hosting services. Feel free to check out the site and also pass on the site if you know anyone who might need my services.

http://www.spodnet.net/

]]> http://www.hxbro.com/2007/08/09/my-company-website/feed/ 0 PHP Contact Form With Simple Spam Filtering Revisited http://www.hxbro.com/2007/03/14/php-contact-form-with-simple-spam-filtering-revisited/ http://www.hxbro.com/2007/03/14/php-contact-form-with-simple-spam-filtering-revisited/#comments Wed, 14 Mar 2007 08:26:45 +0000 HxBro http://www.hxbro.com/2007/03/14/php-contact-form-with-simple-spam-filtering-revisited/ I’ll be posting up an updated contact form in the near future with a break down of what each bit is doing, this will help you adapt and change the code to fit your purposes, I’ll add in a few more bits to help with customising the smtp feature and adding in the akismet spam filtering.

]]> http://www.hxbro.com/2007/03/14/php-contact-form-with-simple-spam-filtering-revisited/feed/ 0 PHP Contact Form With Simple Spam Filtering http://www.hxbro.com/2007/02/25/php-contact-form-with-simple-spam-filtering/ http://www.hxbro.com/2007/02/25/php-contact-form-with-simple-spam-filtering/#comments Sun, 25 Feb 2007 17:38:59 +0000 HxBro http://www.hxbro.com/2007/02/25/php-contact-form-with-simple-spam-filtering/ Here is some code to handle a simple contact form and email it to someone. This is another piece of code that has grown at of various sources, the is_dodgy function and usage came from a contact form plugin for wordpress which can be downloaded from http://chip.cuccio.us/projects/contact-form-ii/. You'll need to download XPertMailer from http://xpertmailer.sourceforge.net/ and put the files in the same directory as your contact code. XPertMailer handles the actual mailing, the php mail() function isn't very good and is open to all sorts of abuse by spammers if the coder has been slack.

You may also want to include my email validation code in with this script to check the incoming email address is valid.

I'll be posting up another version of this script with akismet filtering for the spam soon.

Show Plain Text Version
PHP:
  1. <?php
  2.  
  3. function is_dodgy($input) {
  4.         $is_malicious = false;
  5.         $bad_inputs = array("<", ">", "&lt;", "&gt", "mime-version", "content-type", "cc:", "bcc:", "to:", "<a href", "</a>", "http://", "[/URL]", "[URL=");
  6.         foreach($bad_inputs as $bad_input) {
  7.                 if(strpos(strtolower($input), strtolower($bad_input)) !== false) {
  8.                         $is_malicious = true; break;
  9.                 }
  10.         }
  11.         return $is_malicious;
  12. }
  13.  
  14. if (isset($_POST['send']))
  15. {
  16.     $error_mesage = "";
  17.  
  18.     $to = "youremail@address.com";
  19.     $from = "";
  20.     $subject = "";
  21.     $message = "";
  22.  
  23.     if (isset($_POST['from']))
  24.     {
  25.         $from = stripslashes(trim($_POST['from']));
  26.     }
  27.  
  28.     if (isset($_POST['subject']))
  29.     {
  30.         $subject = stripslashes(trim($_POST['subject']));
  31.     }
  32.  
  33.     if (isset($_POST['message']))
  34.     {
  35.         $message = stripslashes(trim($_POST['message']));
  36.     }
  37.  
  38.     if ($from == "")
  39.     {
  40.         $error_message .= "Please enter your e-mail address<br>";
  41.     }
  42.  
  43.     if ($subject == "")
  44.     {
  45.         $error_message .= "Please enter a subject<br>";
  46.     }
  47.  
  48.     if ($message == "")
  49.     {
  50.         $error_message .= "Please enter a message<br>";
  51.     }
  52.  
  53.     $dodgy = false;
  54.  
  55.     if (is_dodgy($from) || is_dodgy($subject))
  56.     {
  57.         $dodgy = true;
  58.     }
  59.     else if (stristr($from, "\r") || stristr($from, "\n") || stristr($subject, "\r") || stristr($subject, "\n"))
  60.     {
  61.         $dodgy = true;
  62.     }
  63.  
  64.     if ($dodgy)
  65.     {
  66.         $error_message = "I'm sorry but you've passed illegal content, please try again";
  67.     }
  68.  
  69.     if ($error_message == "")
  70.     {
  71.         require_once "smtp.php";
  72.  
  73.         // turn off errors
  74.         error_reporting(false);
  75.  
  76.         // 0 -> no time limit
  77.         set_time_limit(0);
  78.  
  79.         $mail = new SMTP;
  80.         if ($mail->From($from))
  81.         {
  82.             $mail->AddTo($to);
  83.             $mail->Text($message);
  84.             $sent = $mail->Send($subject);
  85.  
  86.             if ($sent)
  87.             {
  88.                 echo "Thank you for your message, we will attempt to contact you shortly";
  89.             }
  90.             else
  91.             {
  92.                 echo "Thank you for your message, however there was an error whilst sending the e-mail. Please try again later";
  93.             }
  94.         }
  95.         else
  96.         {
  97.             $error_message .= "Your email address appears to be invalid<br>";
  98.         }
  99.     }
  100. }
  101.  
  102. if (!isset($_POST['send']) || (isset($_POST['send']) && $error_message))
  103. {
  104. ?>
  105.  
  106. <p>Please contact us using the form below, please include contact details so we can contact you back:</p>
  107.  
  108. <?php
  109.  
  110. if ($error_message != "") echo "<p style=\"color: #ff0000\">" . $error_message . "</p>";
  111.  
  112. ?>
  113.  
  114. <form id="contact" action="<?php echo $_SERVER['PHP_SELF'] ?>" method="post">
  115.     <input type="hidden" name="send" value="1">
  116. <table border="0" cellspacing="4" cellpadding="0">
  117.     <tr><td>E-mail :</td><td><input class="contact_input" type="text" name="from" size="20" maxlength="255" value="<?php echo htmlspecialchars($from) ?>"></td></tr>
  118.     <tr><td>Subject :</td><td><input class="contact_input" type="text" name="subject" size="20" maxlength="255" value="<?php echo htmlspecialchars($subject) ?>"></td></tr>
  119.     <tr><td valign="top">Message :</td><td><textarea class="contact_input" rows="8" cols="50" name="message"><?php echo htmlspecialchars($message) ?></textarea></td></tr>
  120.     <tr><td></td><td align="left"><input type="submit" value="Send Message"> <input type="reset" value="Reset Form"></td></tr>
  121. </table>
  122. </form>
  123.  
  124. <?php } ?>

]]> http://www.hxbro.com/2007/02/25/php-contact-form-with-simple-spam-filtering/feed/ 0 PHP Email Address Validation http://www.hxbro.com/2007/02/25/php-email-address-validation/ http://www.hxbro.com/2007/02/25/php-email-address-validation/#comments Sun, 25 Feb 2007 16:48:45 +0000 HxBro http://www.hxbro.com/2007/02/25/php-email-address-validation/ I've built up various libraries of code over the years, always improving and changing. This bit of code should attempt to validate an email address, it first checks the format of it is correct then does an mx check on the domain name, I built the function based on various bits and bobs from around the Internet, or from the www.php.net website which has some excellent examples in the documentation. If I don't give credit it's because I can't remember where I got the code from!

Show Plain Text Version
PHP:
  1. function check_email_address($email)
  2. {
  3.     // First, we check that there's one @ symbol, and that the lengths are right
  4.     if (!ereg("^[^@]{1,64}@[^@]{1,255}$", $email))
  5.     {
  6.         // Email invalid because wrong number of characters in one section, or wrong number of @ symbols.
  7.         return false;
  8.     }
  9.  
  10.     // Split it into sections to make life easier
  11.     $email_array = explode("@", $email);
  12.     $local_array = explode(".", $email_array[0]);
  13.  
  14.     for ($i = 0; $i <sizeof($local_array); $i++)
  15.     {
  16.         if (!ereg("^(([A-Za-z0-9!#$%&'*+/=?^_`{|}~-][A-Za-z0-9!#$%&'*+/=?^_`{|}~\.-]{0,63})|(\"[^(\\|\")]{0,62}\"))$", $local_array[$i]))
  17.         {
  18.             return false;
  19.         }
  20.     }
  21.  
  22.     if (!ereg("^\[?[0-9\.]+\]?$", $email_array[1]))
  23.     {
  24.         // Check if domain is IP. If not, it should be valid domain name
  25.         $domain_array = explode(".", $email_array[1]);
  26.  
  27.         if (sizeof($domain_array) <2)
  28.         {
  29.             return false; // Not enough parts to domain
  30.         }
  31.  
  32.         for ($i = 0; $i <sizeof($domain_array); $i++)
  33.         {
  34.             if (!ereg("^(([A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9])|([A-Za-z0-9]+))$", $domain_array[$i]))
  35.             {
  36.                 return false;
  37.             }
  38.         }
  39.     }
  40.  
  41.     // mx check
  42.     $strDot      = '.';
  43.     $strAfterAt  = substr(strstr($email, '@'), 1);
  44.     $chunks      = explode($strDot, $strAfterAt);
  45.     $cntChunks  = count($chunks) - 1;
  46.  
  47.     $strDomain = $chunks[($cntChunks-1)] . $strDot . $chunks[$cntChunks];
  48.  
  49.     if (!getmxrr( $strDomain, $mxhosts ))
  50.     {
  51.        return false;
  52.     }
  53.  
  54.     return true;
  55. }

to call just use:

Show Plain Text Version
PHP:
  1. $email = "email@domain.com";
  2. if (check_email_address($email))
  3. {
  4.     // email looks valid
  5. }
  6. else
  7. {
  8.     // email not valid
  9. }

]]> http://www.hxbro.com/2007/02/25/php-email-address-validation/feed/ 0