Heres the code
contactprocessor.php
[php]
<?php
session_start();
//import form information for My special filters
$GUEST = $_POST['kve1_Name'];
$EMAILADDRESS = $_POST['kve1_Email'];
$PHONE = $_POST['kve1_Phone'];
$MESSAGE = $_POST['kve1_Message'];
// Strip HTML Special Characters next
$GUEST = htmlspecialchars($GUEST);
$EMAILADDRESS = htmlspecialchars($EMAILADDRESS);
$PHONE = htmlspecialchars($PHONE);
$MESSAGE = htmlspecialchars($MESSAGE);
$_SESSION[guest] = "$GUEST";
// CHECK to make sure the following fields are not empty
if (empty($GUEST) or (empty($EMAILADDRESS)) or (empty($PHONE)) or (empty($MESSAGE)))
{
$errorString = '
Please enter requested information.';
// Kick user back to form since they didn't complete the required fields.
include 'index.php';
}
elseif (!filter_var($EMAILADDRESS, FILTER_VALIDATE_EMAIL)) /// PERFORM EMAIL VALIDATION
{
$errorString = '
Enter valid email address ';
// Kick user back to form since they input invalid email address
include 'index.php';
}
else
{
// THE data passed the tests above so go ahead and send this completed form info to email
// To send HTML mail, the Content-type header must be set
$headers = 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
// Additional headers
$headers .= 'To: Kalae ' . "\r\n";
$headers .= 'From: boisewebmaster.com - Contact us form' . "\r\n";
// Mail it
$to = '
[email protected]'; // note the comma
$subject = 'boisewebmaster.com - Contact us form submission';
$message = "
New BWM Form Submission
Name: |
$GUEST |
Email Address: |
$EMAILADDRESS |
Phone Number: |
$PHONE |
Message: |
$MESSAGE |
";
///
mail($to, $subject, $message, $headers);
// display the thank you page
header("Location:thanks.php");
}
?>
[/php]
passcheck.php
[php]
<?php
session_start();
include 'login.php'; // login details
include 'connect.php'; // mysql_connect details
include 'check_input.php'; // stop mysql injection
$login = check_input($_POST['login']);
$password = check_input($_POST['password']);
// PREVENT NULL SUBMISSIONS
if (empty($login) or (empty($password)))
{
$errorString = '
Invalid Username / Password';
// Kick user back to form since they didn't complete the required fields.
$login = '';
$password = '';
include 'index.php';
die;
}
$salt = "Zmjh7"; // before password
$pepper = "0p93x"; //after password
$token = md5("$salt$password$pepper");
$query = "SELECT member_id FROM members WHERE login='$login' AND password='$token'";
$result = mysql_query($query);
if(mysql_num_rows($result) > 0) {
session_regenerate_id();
$member=mysql_fetch_array($result);
$_SESSION['SESS_MEMBER_ID'] = $member['member_id'];
$_SESSION['member_id']; // might take this out///
// write session to disk
session_write_close();
header("location: member.php");
exit();
}else {
$errorString = '
Authentication Failed';
// Kick user back to form since they didn't complete the required fields.
$login = '';
$password = '';
include 'index.php';
die;
}
?>
[/php]
Hope somebody can figure this out it’s been driving me insane in my membrane!!