<?php





/************************************************************************/


/* PHP-NUKE: Web Portal System        


/* ===========================


/*                                                          


/* Copyright (c) 2002 by Francisco Burzi              


/* http://phpnuke.org                                       


/*                                                              


/************************************************************************/


/* Based on php Addon Feedback 1.0                       


/* Copyright (c) 2001 by Jack Kozbial                           


/* http://www.InternetIntl.com                                  


/* jack@internetintl.com                                          


/************************************************************************/


/* This program is free software. You can redistribute it and/or modify


/* it under the terms of the GNU General Public License as published by


/* the Free Software Foundation; either version 2 of the License.    


/************************************************************************/


/*         Additional security & Abstraction layer conversion         


/*                           2003 chatserv                            


/*      http://www.nukefixes.com -- http://www.nukeresources.com      


/************************************************************************/


/* Secure Feedback DSL 0.2 beta - A VinDSL Hack                       


/* Copyright (c) 2005 by VinDSL                   


/* http://www.Lenon.com                                              


/* perfect.pecker@lycos.co.uk                                 


/*                                                      


/*Validation code/concept: http://www.ilovejackdaniels.com


/************************************************************************/





if (!eregi("modules.php", $_SERVER['PHP_SELF'])) {


    die ("You can't access this file directly...");


}





require_once("mainfile.php");


$module_name = basename(dirname(__FILE__));


get_lang($module_name);





define("_SUBJECT","Subject");


define("_FBENTERSUBJECT","ERROR: Please enter a subject!");


define("_FBRENTEREMAIL","ERROR: Please enter a valid Email!");





/**********************************/


/* Configuration      


/*                           


/* You can change this:         


/* $index = 0; (right side off) 


/**********************************/


$index = 1;


/**********************************/





include("header.php");





function check_email_address($sender_email) {


    // <<MOVE THIS OUT OF THE VALIDATION SECTION>>>


    // Check for bad input, such as linefeed and carriage return characters et cetera


    if (eregi("(Content-Type)|(MIME-Version)|(Content-Disposition)|(\n)|(%0A)|(0x0A)|(\r)|(0x0D)|(%0D)|(to:)|(cc:)|(bcc:)", $sender_email)) {


    // Email invalid because of bad input


    die("bad address");


    // return false;


    }


    // First, we check that there's only one @ symbol, and that the lengths are right


    if (!ereg("[^@]{1,64}@[^@]{1,255}", $sender_email)) {


    // Email invalid because of wrong number of characters in one section, or wrong number of @ symbols


    return false;


    }


    // Split it into sections to make life easier


    $email_array = explode("@", $sender_email);


    $local_array = explode(".", $email_array[0]);


    // Check for allowed characters and lengths for parts before the @ symbol


    for ($i = 0; $i < sizeof($local_array); $i++) {


    if (!ereg("^(([A-Za-z0-9!#$%&'*+/=?^_`{|}~-][A-Za-z0-9!#$%&'*+/=?^_`{|}~\.-]{0,63})|(\"[^(\\|\")]{0,62}\"))$", $local_array[$i])) {


    return false;


    }


    }


    // Check if domain is IP. If not, it should be valid domain name


    if (!ereg("^\[?[0-9\.]+\]?$", $email_array[1])) {


    $domain_array = explode(".", $email_array[1]);


    if (sizeof($domain_array) < 2) {


    // Email invalid because there are not enough parts to domain


    return false;


    }


    // Check for allowed characters and lengths for parts after the @ symbol


    for ($i = 0; $i < sizeof($domain_array); $i++) {


    if (!ereg("^(([A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9])|([A-Za-z0-9]+))$", $domain_array[$i])) {


    return false;


    }


    }


    }


    return true;


}





$cookie[0] = intval($cookie[0]);


if ($cookie[1] != "") {


    $row = $db->sql_fetchrow($db->sql_query("SELECT name, username, user_email FROM ".$user_prefix."_users WHERE user_id='$cookie[0]'"));


    if ($row['name'] != "") {


    $sender_name = $row['name'];


    } else {


    $sender_name = $row['username'];


    }


    $sender_email = $row['user_email'];


}

    //Email defines from bobocop at bobocop dot cz at http://us3.php.net/REGEXPi


    define('REGEXP_EMAIL_ATOM','/[-a-z0-9!#$%&\'*+\/=?^_`{|}~]/i');


    define('REGEXP_EMAIL_DOMAIN','/([a-z0-9]([-a-z0-9]*[a-z0-9]+)?)/i');


    define('REGEXP_EMAIL','/^'.REGEXP_EMAIL_ATOM.'+(\.'.REGEXP_EMAIL_ATOM.'+)*@('.REGEXP_EMAIL_DOMAIN.'{1,63}\.)+'.REGEXP_EMAIL_DOMAIN.'{2,63}$/i');