-
Notifications
You must be signed in to change notification settings - Fork 0
/
Database.php
81 lines (58 loc) · 1.64 KB
/
Database.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
<?php
$name = $_POST['name'];
$subject = $_POST['subject'];
$email = $_POST['email'];
$message = $_POST['message'];
$alert = "";
$host = "localhost";
$username = "utopiant_tech";
$password = "Techstersol789@";
$dbname = "utopiant_tech";
$con = mysqli_connect($host, $username, $password, $dbname);
if (!$con) {
die("Connection failed: " . mysqli_connect_error());
}
$sql = "INSERT INTO contactform (name, subject, email, message) VALUES ('$name', '$subject', '$email', '$message')";
$rs = mysqli_query($con, $sql);
/* if ($rs) {
echo "Submit Successfully!";
} */
mysqli_close($con);
/*email */
$email_from = 'admin@techstersol.com';
$email_subject = "New Form submission from Techstersol";
$email_body = "You have received a new message from the user $name.\n"."Subject: $subject.\n"."Email:$email.\n"."Here is the message:\n $message";
#notification
$to = "mzayemazam@gmail.com";
$headers = "From: $email_from \r\n";
$headers .= "Reply-To: $email \r\n";
mail($to,$email_subject,$email_body,$headers);
#secure from injector
function IsInjected($str)
{
$injections = array('(\n+)',
'(\r+)',
'(\t+)',
'(%0A+)',
'(%0D+)',
'(%08+)',
'(%09+)'
);
$inject = join('|', $injections);
$inject = "/$inject/i";
if(preg_match($inject,$str))
{
return true;
}
else
{
return false;
}
}
if(IsInjected($email))
{
echo "Bad email value!";
exit;
}
header('Location: https://techstersol.com');
?>