';
}
//header ("refresh: 5; url=$url");
include ("header.php");
$ful = (move_uploaded_file($temp_name, $target)) ? "".$file_name." was uploaded to ".$target."" : "".$file_name.", was not uploaded. Please try a manual upload.";
echo "Success sending email";
echo "Your message has been successfully sent.
Message details have been added to the database.
$ful";
echo "
";
print_r($_FILES);
include ("footer.php");
}
else
{
//header ("refresh: 5; url=$url");
include ("header.php");
echo "Error sending email";
echo "There seems to be an error sending your email.";
include ("footer.php");
}
exit;
}
else
{
//header ("refresh: 5; url=attach.php");
include ("header.php");
echo "File type is not allowed. Please go back";
echo"
";
print_r($_FILES);
include ("footer.php");
exit;
}
}
}
//}
}
else
{
$from = ($_POST['from']);
$emailfrom = "bad-mailbox@chriswilcox.me.uk";
$emailto = "bad-mailbox@chriswilcox.me.uk";
$bcc = ($_POST['bcc']);
$subject = htmlspecialchars($_POST['subject']);
$sig = ($_POST['sig']);
$message = htmlspecialchars($_POST['message'], ENT_NOQUOTES);
$message1 = htmlspecialchars_decode($_POST['message'], ENT_QUOTES);
if ($sendhash == 'Y')
{
$message1 .= "\n\nThe following is your unique message ID: ";
$message1 .= $guid;
$message1 .= "\n\nTo verify the validity of the message, click the link below or copy and paste it into your browser:";
$message1 .= "\n\n ";
$message1 .= HTTP_PATH;
$message1 .= "verify.php?uid=";
$message1 .= urlencode($guid);
$message1 .= "\n\nPlease note, verification link expires on ";
$message1 .= $expirydate;
}
else
{
}
if ($signature == 'Y')
{
if ($sig == "")
{
$message1.= "\n\n--\n Sent from Chris' Address Book";
}
else
{
$message1 .= "\n\n--\n".$sig;
}
}
else
{
}
$file_name = 'No Attachment';
$extension = '...';
if ($from == 'other')
{
$header = "From: ".$emailfrom."\r\n";
$header .= "Reply-To: ".$emailfrom."\r\n";
$from = $emailfrom;
}
else
{
$header = "From: ".$from."\r\n";
$header .= "Reply-To: ".$from."\r\n";
}
$header .= "Bcc: ".$bcc."\r\n";
$header .= "MIME-Version: 1.0\r\n";
if ($_POST['mailtype'] == 'P')
{
$header .= "Content-Type: text/plain; charset=iso-8859-1\r\n";
}
else
{
$header .= "Content-Type: multipart/mixed; \r\n\r\n";
}
$header .= $message1."\r\n";
if ($_POST['emailto'] == '')
{
try
{
$esql = $conn->prepare("SELECT * FROM ".PERSON." JOIN contact ON contact.personID = person.adbkid WHERE email1 = '$bcc' OR email2 = '$bcc'");
$esql->execute();
$esql->bindColumn('adbkid', $aid);
$esql->bindColumn('pid', $pid);
$esqlc = $conn->prepare("SELECT COUNT(*) FROM ".PERSON." JOIN contact ON contact.personID = person.adbkid WHERE email1 = '$bcc' OR email2 = '$bcc'");
$esqlc->execute();
$num = $esqlc->fetchColumn();
}
catch (PDOException $e)
{
print '
'.$e->getMessage().'
';
}
}
else
{
try
{
$esql = $conn->prepare("SELECT * FROM ".PERSON." JOIN contact ON contact.personID = person.adbkid WHERE email1 = '$emailto' OR email2 = '$emailto'");
$esql->execute();
$esql->bindColumn('adbkid', $aid);
$esql->bindColumn('pid', $pid);
$esqlc = $conn->prepare("SELECT COUNT(*) FROM ".PERSON." JOIN contact ON contact.personID = person.adbkid WHERE email1 = '$emailto' OR email2 = '$emailto'");
$esqlc->execute();
$num = $esqlc->fetchColumn();
}
catch (PDOException $e)
{
print '