HEX
Server: Apache/2.4.25 (Debian)
System: Linux server17 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User: web37 (1062)
PHP: 7.4.30
Disabled: show_source, highlight_file, apache_child_terminate, apache_get_modules, apache_note, apache_setenv, virtual, dl, disk_total_space, posix_getpwnam, posix_getpwuid, posix_mkfifo, posix_mknod, posix_setpgid, posix_setsid, posix_setuid, posix_uname, proc_nice, openlog, syslog, pfsockopen
Upload Files
File: /var/www/web37/htdocs/websuche/markt/email.php
<?PHP
include "./inc/config.inc.php";
include "./inc/systemeinstellungen.php";
mysql_connect($db_host,$db_user,$db_pass) or die("Keine Verbindung zum Datenbank - Zugangsdaten falsch?");
mysql_select_db($db_name) or die("Datenbank nicht erreichbar");

$design= mysql_fetch_array(mysql_query("SELECT design_typ
                            FROM ".$dbtable98." "));
$design_typ =$design['design_typ'];
if($design_typ ==1) { $design_typ = "dark-blue.css"; }
elseif($design_typ ==2) { $design_typ = "dark-red.css"; }
elseif($design_typ ==3) { $design_typ = "light-cyan.css"; }
elseif($design_typ ==4) { $design_typ = "yellow.css"; }
echo '<link rel="stylesheet" type="text/css" href="./system/'.$design_typ.'">';

if(isset($_REQUEST['fromname'])) { $from_name = $_REQUEST['fromname']; } else { $from_name = ""; }
if(isset($_REQUEST['frommail'])) { $from_mail = $_REQUEST['frommail']; }  else { $from_mail = ""; }
if(isset($_REQUEST['mailsubject'])) { $mail_subject = $_REQUEST['mailsubject']; }  else { $mail_subject = ""; }
if(isset($_REQUEST['mailtext'])) { $mail_text = $_REQUEST['mailtext']; }  else { $mail_text = ""; }
if(isset($_POST['s'])) { $send = $_POST['s']; }  else{ $send = ""; }

$adminmail    = ADMINMAIL;
$mail_to      = $adminmail;
$kontaktfrom  = "Kontaktformular ".SITE_PROJEKT;
$err_text ="";
if(trim($from_name)=="")
{
   $err_text.="<FONT class=\"alert\">Kein Name angegeben</font><br>";
}
if(trim($from_mail)=="")
{
   $err_text.="<FONT class=\"alert\">Keine eMail Adresse angegeben</font><br>";
}
else
{
   if(!ereg("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,6})$",$from_mail))
   {
      $err_text.="<FONT class=\"alert\">Keine g&uuml;ltige eMail Adresse angegeben.</font><br>";
   }
}
if(trim($mail_subject)=="")
{
   $err_text.="<FONT class=\"alert\">Kein Betreff angegeben.</font><br>";
}
if(trim($mail_text)=="")
{
   $err_text.="<FONT class=\"alert\">Kein Nachrichtentext angegeben.</font><br>";
}
if(strlen($mail_text)>1000)
{
   $mail_text=substr($mail_text,0,1000)."\n\n\n... (Text wurde auf 1000 Zeichen gek&uuml;rzt!)";
}

$from_name   = str_replace(chr(34),"''",$from_name);
$mail_subject= str_replace(chr(34),"''",$mail_subject);
$from_name   = stripslashes($from_name);
$from_mail   = stripslashes($from_mail);
$mail_subject= stripslashes($mail_subject);
$mail_text   = stripslashes($mail_text);

if($send=="1" && $err_text !="")
{
  echo "<p><FONT class=\"alert\"><b>Fehler:</b></font><br>";
  echo $err_text."</p>";
}
if($send!="1")
{
?>

<BODY background="./gfx/bacc.gif" TOPMARGIN=0 LEFTMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0>
   <table align="left" width="515" height="400" background="./gfx/back.gif">
   <form action="email.php" method="post">
     <tr valign="top">
       <td colspan="2" align="center"></td>
     </tr>
     <tr valign="top">
       <td class="einsa">Name: </td>
       <td><input type="text" name="fromname" size="40" maxlength="60" value="<?PHP echo $from_name; ?>"></td>
     </tr>
     <tr valign="top">
       <td class="einsa">eMail: </td>
       <td><input type="text" name="frommail" size="40" maxlength="100" value="<?PHP echo $from_mail; ?>"></td>
     </tr>
     <tr valign="top">
       <td class="einsa">Betreff: </td>
       <td><input type="text" name="mailsubject" size="40" maxlength="100" value="<?PHP echo $mail_subject; ?>"></td>
     </tr>
     <tr valign="top">
       <td class="einsa">Kommentar:<br><small>Max. 1000 Zeichen</small> <br><br><br><br><br></td>
       <td>
       <textarea rows="6" name="mailtext" cols="44"><?PHP echo $mail_text; ?></textarea><br><br>
       <input type="hidden" value="1" name="s">
       <input type="submit" class="submit" value="Absenden..">
       </td>
     </tr>
   </form>
</table>
</body>


<?PHP
}
if($send=="1" && $err_text =="")
{
     $header = "From: $from_name <$from_mail>\n";
     $header.= "Reply-To: $from_mail\n";
     $header.= "X-Mailer: PHP-FormMailer\n";
     $header.= "Content-Type: text/plain";
     $mail_date = gmdate("D, d M Y H:i:s")." GMT";
     $send      = 0;
     $datum     = date("d.m.");
     $uhr       = date("H:i");

     $text99= $from_name." (".$from_mail.") hat am ".$datum." um ".$uhr." Uhr folgende Nachhricht hinterlassen:\n\nBetrifft:\n".$mail_subject."\n\nInhalt:\n ".$mail_text;

     if(mail($mail_to,$kontaktfrom,$text99,$header))
     {
        echo "<table align=\"left\" hight=\"400\" width=\"515\" background=\"./gfx/bacc.gif\"><tr><td class=\"einsa\"><p><b><center>Ihre Anfrage wurde abgesendet.</b><br><br>Wir werden Ihre Anfrage so schnell wie m&ouml;glich beantworten.</b></p></center>";
        echo "<p align=\"center\"></p><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br></tr></td>";
     }
}
if($send=="1" && $err_text !="")
{
     {
        echo "<p><b><table align=\"left\" hight=\"400\" width=\"515\" background=\"./gfx/bacc.gif\"><tr><td class=\"einsa\"><p><b><center>Beim Versenden der eMail ist ein Fehler aufgetreten!</b></p></center>";
        echo "<p><img src=\"gfx/buttcenterback.gif\" border=\"0\" height=\"11\" width=\"13\"><a href=\"email.php?fromname=".$from_name."&frommail=".$from_mail."&mailsubject=".$mail_subject."&mailtext=".urlencode($mail_text)."\" class=\"einsa\"> Zur&uuml;ck zum Formular</a></p><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br></tr></td>";
     }

}
?>