| Server IP : 79.170.40.229 / Your IP : 18.226.180.81 Web Server : Apache System : Linux web232.extendcp.co.uk 4.18.0-513.24.1.el8_9.x86_64 #1 SMP Mon Apr 8 11:23:13 EDT 2024 x86_64 User : 1stforcarhirealicante.com ( 296923) PHP Version : 5.6.40 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /proc/thread-self/cwd/components/com_contact/ |
Upload File : |
<?php
/**
* @version $Id: controller.php 13426 2009-11-04 16:36:00Z ian $
* @package Joomla
* @subpackage Contact
* @copyright Copyright (C) 2005 - 2008 Open Source Matters. All rights reserved.
* @license GNU/GPL, see LICENSE.php
* Joomla! is free software. This version may have been modified pursuant to the
* GNU General Public License, and as distributed it includes or is derivative
* of works licensed under the GNU General Public License or other free or open
* source software licenses. See COPYRIGHT.php for copyright notices and
* details.
*/
// Check to ensure this file is included in Joomla!
defined('_JEXEC') or die( 'Restricted access' );
jimport( 'joomla.application.component.controller' );
/**
* Contact Component Controller
*
* @static
* @package Joomla
* @subpackage Contact
* @since 1.5
*/
class ContactController extends JController
{
/**
* Display the view
*/
function display()
{
$document =& JFactory::getDocument();
$viewName = JRequest::getVar('view', 'category', 'default', 'cmd');
$viewType = $document->getType();
// interceptors to support legacy urls
switch ($this->getTask())
{
//index.php?option=com_contact&task=category&id=0&Itemid=4
case 'category':
$viewName = 'category';
$layout = 'default';
break;
case 'view':
$viewName = 'contact';
$layout = 'default';
break;
}
// Set the default view name from the Request
$view = &$this->getView($viewName, $viewType);
// Push a model into the view
$model = &$this->getModel( $viewName );
if (!JError::isError( $model )) {
$view->setModel( $model, true );
}
// Workaround for the item view
if ($viewName == 'contact')
{
$modelCat = &$this->getModel( 'category' );
$view->setModel( $modelCat );
}
// Display the view
$view->assign('error', $this->getError());
// View caching logic -- simple... are we logged in?
$user = &JFactory::getUser();
$viewnow = JRequest::getVar('view');
$viewcache = JRequest::getVar('viewcache','1','POST','INT');
if ($user->get('id') || ($viewnow == 'category' && $viewcache == 0)) {
$view->display();
} else {
$option = JRequest::getCmd('option');
$cache =& JFactory::getCache($option, 'view');
$cache->get($view, 'display');
}
}
/**
* Method to send an email to a contact
*
* @static
* @since 1.0
*/
function submit()
{
global $mainframe;
// Check for request forgeries
JRequest::checkToken() or jexit( 'Invalid Token' );
// Initialize some variables
$db = & JFactory::getDBO();
$SiteName = $mainframe->getCfg('sitename');
$default = JText::sprintf( 'MAILENQUIRY', $SiteName );
$contactId = JRequest::getInt( 'id', 0, 'post' );
$name = JRequest::getVar( 'name', '', 'post' );
$email = JRequest::getVar( 'email', '', 'post' );
$subject = JRequest::getVar( 'subject', $default, 'post' );
$body = JRequest::getVar( 'text', '', 'post' );
$emailCopy = JRequest::getInt( 'email_copy', 0, 'post' );
// load the contact details
$model = &$this->getModel('contact');
// query options
$qOptions['id'] = $contactId;
$contact = $model->getContact( $qOptions );
if($contact->email_to == '' && $contact->user_id != 0)
{
$contact_user = JUser::getInstance($contact->user_id);
$contact->email_to = $contact_user->get('email');
}
/*
* If there is no valid email address or message body then we throw an
* error and return false.
*/
jimport('joomla.mail.helper');
if (!$email || !$body || (JMailHelper::isEmailAddress($email) == false))
{
$this->setError(JText::_('CONTACT_FORM_NC'));
$this->display();
return false;
}
// Contact plugins
JPluginHelper::importPlugin( 'contact' );
$dispatcher =& JDispatcher::getInstance();
// Input validation
if (!$this->_validateInputs( $contact, $email, $subject, $body ) ) {
JError::raiseWarning( 0, $this->getError() );
return false;
}
// Custom handlers
$post = JRequest::get( 'post' );
$results = $dispatcher->trigger( 'onValidateContact', array( &$contact, &$post ) );
foreach ($results as $result)
{
if (JError::isError( $result )) {
return false;
}
}
// Passed Validation: Process the contact plugins to integrate with other applications
$results = $dispatcher->trigger( 'onSubmitContact', array( &$contact, &$post ) );
$pparams = &$mainframe->getParams('com_contact');
if (!$pparams->get( 'custom_reply' ))
{
$MailFrom = $mainframe->getCfg('mailfrom');
$FromName = $mainframe->getCfg('fromname');
// Prepare email body
$prefix = JText::sprintf('ENQUIRY_TEXT', JURI::base());
$body = $prefix."\n".$name.' <'.$email.'>'."\r\n\r\n".stripslashes($body);
$mail = JFactory::getMailer();
$mail->addRecipient( $contact->email_to );
$mail->setSender( array( $email, $name ) );
$mail->setSubject( $FromName.': '.$subject );
$mail->setBody( $body );
$sent = $mail->Send();
/*
* If we are supposed to copy the admin, do so.
*/
// parameter check
$params = new JParameter( $contact->params );
$emailcopyCheck = $params->get( 'show_email_copy', 0 );
// check whether email copy function activated
if ( $emailCopy && $emailcopyCheck )
{
$copyText = JText::sprintf('Copy of:', $contact->name, $SiteName);
$copyText .= "\r\n\r\n".$body;
$copySubject = JText::_('Copy of:')." ".$subject;
$mail = JFactory::getMailer();
$mail->addRecipient( $email );
$mail->setSender( array( $MailFrom, $FromName ) );
$mail->setSubject( $copySubject );
$mail->setBody( $copyText );
$sent = $mail->Send();
}
}
$msg = JText::_( 'Thank you for your e-mail');
$link = JRoute::_('index.php?option=com_contact&view=contact&id='.$contact->slug.'&catid='.$contact->catslug, false);
$this->setRedirect($link, $msg);
}
/**
* Method to output a vCard
*
* @static
* @since 1.0
*/
function vcard()
{
global $mainframe;
// Initialize some variables
$db = & JFactory::getDBO();
$SiteName = $mainframe->getCfg('sitename');
$contactId = JRequest::getVar('contact_id', 0, '', 'int');
// Get a Contact table object and load the selected contact details
JTable::addIncludePath(JPATH_ADMINISTRATOR.DS.'components'.DS.'com_contact'.DS.'tables');
$contact =& JTable::getInstance('contact', 'Table');
$contact->load($contactId);
$user =& JFactory::getUser();
// Get the contact detail parameters
$params = new JParameter($contact->params);
// Show the Vcard if contact parameter indicates (prevents direct access)
if (($params->get('allow_vcard', 0)) && ($user->get('aid', 0) >= $contact->access))
{
// Parse the contact name field and build the nam information for the vcard.
$firstname = null;
$middlename = null;
$surname = null;
// How many parts do we have?
$parts = explode(' ', $contact->name);
$count = count($parts);
switch ($count) {
case 1 :
// only a first name
$firstname = $parts[0];
break;
case 2 :
// first and last name
$firstname = $parts[0];
$surname = $parts[1];
break;
default :
// we have full name info
$firstname = $parts[0];
$surname = $parts[$count -1];
for ($i = 1; $i < $count -1; $i ++) {
$middlename .= $parts[$i].' ';
}
break;
}
// quick cleanup for the middlename value
$middlename = trim($middlename);
// Create a new vcard object and populate the fields
require_once(JPATH_ADMINISTRATOR.DS.'components'.DS.'com_contact'.DS.'helpers'.DS.'vcard.php');
$v = new JvCard();
$v->setPhoneNumber($contact->telephone, 'PREF;WORK;VOICE');
$v->setPhoneNumber($contact->fax, 'WORK;FAX');
$v->setName($surname, $firstname, $middlename, '');
$v->setAddress('', '', $contact->address, $contact->suburb, $contact->state, $contact->postcode, $contact->country, 'WORK;POSTAL');
$v->setEmail($contact->email_to);
$v->setNote($contact->misc);
$v->setURL( JURI::base(), 'WORK');
$v->setTitle($contact->con_position);
$v->setOrg(html_entity_decode($SiteName, ENT_COMPAT, 'UTF-8'));
$filename = str_replace(' ', '_', $contact->name);
$v->setFilename($filename);
$output = $v->getVCard(html_entity_decode($SiteName, ENT_COMPAT, 'UTF-8'));
$filename = $v->getFileName();
// Send vCard file headers
header('Content-Disposition: attachment; filename='.$filename);
header('Content-Length: '.strlen($output));
header('Connection: close');
header('Content-Type: text/x-vCard; name='.$filename);
header('Cache-Control: store, cache');
header('Pragma: cache');
print $output;
} else {
JError::raiseWarning('SOME_ERROR_CODE', 'ContactController::vCard: '.JText::_('ALERTNOTAUTH'));
return false;
}
}
/**
* Validates some inputs based on component configuration
*
* @param Object $contact JTable Object
* @param String $email Email address
* @param String $subject Email subject
* @param String $body Email body
* @return Boolean
* @access protected
* @since 1.5
*/
function _validateInputs( $contact, $email, $subject, $body )
{
global $mainframe;
$session =& JFactory::getSession();
// Get params and component configurations
$params = new JParameter($contact->params);
$pparams = &$mainframe->getParams('com_contact');
// check for session cookie
$sessionCheck = $pparams->get( 'validate_session', 1 );
$sessionName = $session->getName();
if ( $sessionCheck ) {
if ( !isset($_COOKIE[$sessionName]) ) {
$this->setError( JText::_('ALERTNOTAUTH') );
return false;
}
}
// Determine banned e-mails
$configEmail = $pparams->get( 'banned_email', '' );
$paramsEmail = $params->get( 'banned_mail', '' );
$bannedEmail = $configEmail . ($paramsEmail ? ';'.$paramsEmail : '');
// Prevent form submission if one of the banned text is discovered in the email field
if(false === $this->_checkText($email, $bannedEmail )) {
$this->setError( JText::sprintf('MESGHASBANNEDTEXT', JText::_('Email')) );
return false;
}
// Determine banned subjects
$configSubject = $pparams->get( 'banned_subject', '' );
$paramsSubject = $params->get( 'banned_subject', '' );
$bannedSubject = $configSubject . ( $paramsSubject ? ';'.$paramsSubject : '');
// Prevent form submission if one of the banned text is discovered in the subject field
if(false === $this->_checkText($subject, $bannedSubject)) {
$this->setError( JText::sprintf('MESGHASBANNEDTEXT',JText::_('Subject')) );
return false;
}
// Determine banned Text
$configText = $pparams->get( 'banned_text', '' );
$paramsText = $params->get( 'banned_text', '' );
$bannedText = $configText . ( $paramsText ? ';'.$paramsText : '' );
// Prevent form submission if one of the banned text is discovered in the text field
if(false === $this->_checkText( $body, $bannedText )) {
$this->setError( JText::sprintf('MESGHASBANNEDTEXT', JText::_('Message')) );
return false;
}
// test to ensure that only one email address is entered
$check = explode( '@', $email );
if ( strpos( $email, ';' ) || strpos( $email, ',' ) || strpos( $email, ' ' ) || count( $check ) > 2 ) {
$this->setError( JText::_( 'You cannot enter more than one email address', true ) );
return false;
}
return true;
}
/**
* Checks $text for values contained in the array $array, and sets error message if true...
*
* @param String $text Text to search against
* @param String $list semicolon (;) seperated list of banned values
* @return Boolean
* @access protected
* @since 1.5.4
*/
function _checkText($text, $list) {
if(empty($list) || empty($text)) return true;
$array = explode(';', $list);
foreach ($array as $value) {
$value = trim($value);
if(empty($value)) continue;
if ( JString::stristr($text, $value) !== false ) {
return false;
}
}
return true;
}
}