| serg-php |
09.08.2008 15:50 |
Файл обработки формы
PHP код:
<?php
if(!defined('SITE_PATH')) die('Access Denied');
$EN_IMG_VER = 1;
// main code
// is GD library present ?
if(!GD_VER) $EN_IMG_VER = 0;
if($_GET['mode']=='image'){
if($EN_IMG_VER) {
$o_iv =& Factory::create('Image_Verify');
$o_iv->DisplayImage();
}
exit;
}
$whitelist = array(
'name' => array(
'type' => 'string',
'maxlength' => 100,
),
'email' => array(
'type' => 'email',
'maxlength' => 100,
),
'url' => array(
'type' => 'string',
'maxlength' => 100,
),
'foundus' => array(
'type' => 'string',
'maxlength' => 100,
),
'comments' => array(
'type' => 'print_ws',
'maxlength' => 1000,
),
);
$err_msg = '';
$tpl_v = array();
$tpl_v['EN_IMG_VER'] = $EN_IMG_VER;
if($_SERVER['REQUEST_METHOD']=='POST') {
$clean = esFilter($_POST, $whitelist);
if(!$clean['email']) $err_msg = hwLng('req_email');
elseif(!$clean['comments']) $err_msg = hwLng('req_comments');
if(!$err_msg && $EN_IMG_VER){
$o_iv =& Factory::create('Image_Verify');
if(!$o_iv->IsTextOK($_POST['img_text'])) $err_msg = hwLng('err_img_code');
}
if(!$err_msg){
foreach(array_keys($whitelist) as $k) $tpl_v[$k] = htmlspecialchars($clean[$k], ENT_QUOTES, $GLOBALS['CHARSET']);
EvalAdvTpl(TPL_PATH.'feedback_ok.htm', $tpl_v, 1);
$tpl_v['HTTP_REFERER'] = htmlspecialchars($_SERVER['HTTP_REFERER'], ENT_QUOTES, $GLOBALS['CHARSET']);
$email_body = EvalAdvTpl(TPL_PATH.'feedback.mail',$tpl_v);
hwSendMail(ADMIN_EMAIL, $tpl_v['email'], '', $email_body);
return;
}
} //end POST
foreach(array_keys($whitelist) as $k) $tpl_v[$k] = isset($_POST[$k]) ? htmlspecialchars($_POST[$k], ENT_QUOTES, $GLOBALS['CHARSET']) : '';
$tpl_v['err_msg'] = $err_msg;
EvalAdvTpl(TPL_PATH.'feedback.htm', $tpl_v, 1);
?>
|
