<?php
session_start();

/**
 * validate_email()
 *
 * @param mixed $field
 * @param mixed $CheckPattern	Only for email address fields
 * @param mixed $CheckNewLines	$CheckNewLines (Check this only for fields, not email body)
 * @return
 **/
function validate_email($field, $CheckPattern = TRUE, $CheckNewLines = TRUE)
{
	############################################################################################################
	// Check for Email For Exploit
	############################################################################################################
	if ($CheckPattern == TRUE)
	{
		// Test Pattern
		if (!is_valid_email($field))
		{
			//		  echo 'Invalid email submitted - mail not being sent.';
			return FALSE;
			exit;
		}
	}

	if ($CheckNewLines == TRUE)
	{
		if (!contains_newlines($field))
		{
			//			echo $field.'Invalid newlines submitted - mail not being sent.';
			return FALSE;
			exit;
		}
	}

	// All should be checked against bad strings
	if (!contains_bad_str($field))
	{
		//		echo 'Invalid string submitted - mail not being sent.';
		return FALSE;
		exit;
	}

	return TRUE;
}


// Valid Pattern
function is_valid_email($email)
{
	return preg_match('#^[a-z0-9.!\#$%&\'*+-/=?^_`{|}~]+@([0-9.]+|([^\s]+\.+[a-z]{2,6}))$#si', $email);
}


// Bad Strings
function contains_bad_str($str_to_test)
{
	$bad_strings = array(
		"content-type:"
		,"mime-version:"
		,"multipart/mixed"
		,"Content-Transfer-Encoding:"
		,"bcc:"
		,"cc:"
		,"to:"
		,"prescription"
		,"desyrel"
		,"viagra"
							);

	foreach($bad_strings as $bad_string)
	{
		if(eregi($bad_string, strtolower($str_to_test)))
		{
			//		      echo "$bad_string found. Suspected injection attempt - mail not being sent.";
			return FALSE;
			exit;
		}
	}
	return TRUE;
}


// New Lines in Subject or Email Fields
function contains_newlines($str_to_test)
{
	if(preg_match("/(%0A|%0D|\\n+|\\r+)/i", $str_to_test) != 0)
	{
		//		     echo "newline found in $str_to_test. Suspected injection attempt - mail not being sent.";
		return FALSE;
	}

	return TRUE;
}


// Valid Pattern
function is_valid_domain($domain)
{
	if (preg_match('#^([0-9.]+|([^\s]+\.+[a-z]{2,6}))$#si', $domain))
	{
		$good_domains = array(
		"afterpost.com"
		,"afterpost.net"
		,"afterpost.org"
		,"amisconstructionco.com"
		,"apexcardiology.com"
		,"atlantagolfcoursecommunities.net"
		,"beta.idcreports.com"
		,"bettingtowin.com"
		,"blue105.com"
		,"blue105.org"
		,"brennerbooks.com"
		,"briansilverman.com"
		,"bsf.theexecutiveadvisory.com"
		,"californiagolfcommunities.net"
		,"callegarini.com"
		,"cardiacep.net"
		,"carolinagolfcommunities.net"
		,"carolweiner.com"
		,"cdaconsulting.com"
		,"client.afterpost.com"
		,"clubweddingreceptions.net"
		,"coastalresortcommunities.net"
		,"coloradogolfcommunities.net"
		,"dfrstorage.com"
		,"drpractice.net"
		,"ds06whm.blue105.com"
		,"ds14.tvsecure.com"
		,"dysardgroup.com"
		,"e-activation.com"
		,"feinsteinroe.com"
		,"floridagolfcommunities.net"
		,"forexadvantage.com"
		,"freshanointingrevival.org"
		,"gchcollection.net"
		,"global-view.com"
		,"golf-estate.net"
		,"golfcoursecommunities.net"
		,"golfcoursehome.biz"
		,"golfcoursehome.com"
		,"golfcoursehome.net"
		,"golfcoursehomeco.net"
		,"golfcoursehomeinfo.net"
		,"golfcoursehomestyle.net"
		,"golfcourseproperty.net"
		,"gomadagascar.com"
		,"gradou.com"
		,"greengolfcommunities.net"
		,"guide105.com"
		,"gvads.blue105.us"
		,"hatcityblues.com"
		,"healthandwellnesscommunities.net"
		,"hollywoodsuccess.com"
		,"hughjeffries.com"
		,"idcreports.com"
		,"islandcommunities.net"
		,"john.blue105.net"
		,"lakefront-communities.net"
		,"lakeoconeegolfcommunities.net"
		,"lookoutmgmt.com"
		,"luxurygolfcommunities.net"
		,"luxurygolfhome.net"
		,"luxurygolfhomes.net"
		,"luxurymarinacommunities.net"
		,"luxurywaterfrontcommunities.net"
		,"luxuryyachtingcommunities.net"
		,"monahanlawoffice.com"
		,"mountaingolfcommunities.net"
		,"mvhomesandrentals.net"
		,"nancyleecarnahan.com"
		,"newenglandgolfcommunities.net"
		,"newpoll360.com"
		,"oceanviewcommunities.net"
		,"onlinehotelreservations.com"
		,"onthehousewvvy.com"
		,"orderplanner.com"
		,"orders.blue105.tv"
		,"pbergeron.com"
		,"plannedwaterfrontcommunities.net"
		,"pms.blue105.net"
		,"privateclubcommunities.net"
		,"privategolfcommunities.net"
		,"privateluxurycommunities.net"
		,"privateresidenceclubs.net"
		,"raffaellapiccinelli.com"
		,"savannahgolfcommunities.net"
		,"scba.com"
		,"seniorgolfcommunities.net"
		,"sergiosigala.com"
		,"sharonidith.com"
		,"sosmartbutbook.com"
		,"subtitlingsoftware.com"
		,"synaptic-cleft.com"
		,"system3entertainment.com"
		,"theexecutiveadvisory.com"
		,"tmcsales.net"
		,"tomschnabel.com"
		,"tornellproductions.com"
		,"valleyforgeleads.com"
		,"villaboario.com"
		,"waterfrontcommunities.net"
		,"waterviewhome.net"
						);

		$domain = strtolower($domain);

		if (in_array($domain, $good_domains))
		{
			return TRUE;
		}
		else
		{
			return FALSE;
		}
	}
	return FALSE;
}
?>
<html>

<head>
<title>Dedicated Server Contact Form</title>
<meta name="description" content="Blue 105 Internet Services will provide your company with all the Internet services you need, Domain Name Registration, Web Pages Design, Virtual Servers, E-mail Accounts, Multilingual Sites, etc.">
<meta name="keywords" content="Blue 105 Internet  web development  html pages  multilingual web sites  foreign language translations virtual servers  virtual hosting  servers hosting  e-mail accounts  email accounts  netscape e-mail accounts  web addresses  Internet addresses  available URL  www  domain name registration  registering a domain name   custom domain name  private domain name  custom names  URL  domain name application   WhoIS  virtual domains  web site hosting  looking up  searching for   application form  online  policy  InterNIC   regulations  finding  forms  fees  look up  obtaining  help  real audio  secure commerce  SGI Challenge server">
<script language="JavaScript">
<!--
function stopErrors()
{
	return true;
}
window.onerror = stopErrors;


var never = new Date()
never.setTime(never.getTime() + 2000*24*60*60*1000);

// name is a string of the name of your cookie
// value is the value corresponding to name
function SetCookie(name, value) {
	var expString = "; expires=" + never.toGMTString();
	document.cookie = name + "=" + escape(value) + expString;
}

// returns value of cookie or null if cookie does not exist
function GetCookie(name) {
	var result = null;
	var myCookie = " " + document.cookie + ";";
	var searchName = " " + name + "=";
	var startOfCookie = myCookie.indexOf(searchName);
	var endOfCookie;
	if (startOfCookie != -1) {
		startOfCookie += searchName.length; // skip past name of cookie
		endOfCookie = myCookie.indexOf(";", startOfCookie);
		result = unescape(myCookie.substring(startOfCookie, endOfCookie));
	}
	return result;
}

use_cookies = "unsure";

function saveValue(element) {
	if (document.images && use_cookies == "unsure")
	use_cookies = (confirm("Will you allow the values you enter into this form "
	+"to be stored as cookies so that those values will be pre-filled the next "
	+"time you return to this page?") ? "yes":"no");
	if (document.images && use_cookies == "yes") {
		if ((element.type == "text")
		|| (element.type == "password")
		|| (element.type == "textarea")
		|| (element.type == "radio")) {
		val = element.value;
		} else if (element.type.indexOf("select") != -1) {
		val = "";
		for(k=0;k<element.length;k++)
		if (element.options[k].selected)
		val += k+" ";
		} else if (element.type == "checkbox") {
		val = element.checked;
		}
		SetCookie("memory_"+element.form.name+"_"+element.name,val);
	}
}

function storedValues() {
	if (document.images) { // only do it in JavaScript 1.1 browsers
		for (i=0;i<document.forms.length;i++) {
			for (j=0;j<document.forms[i].elements.length; j++) {
				cookie_name = "memory_"+document.forms[i].name+"_"
				+document.forms[i].elements[j].name;
				val = GetCookie(cookie_name);
				if (val) {
					if ((document.forms[i].elements[j].type == "text")
					|| (document.forms[i].elements[j].type == "password")
					|| (document.forms[i].elements[j].type == "textarea")) {
					document.forms[i].elements[j].value = val;
					} else if (document.forms[i].elements[j].type.indexOf("select") != -1) {
					document.forms[i].elements[j].selectedIndex = -1;
					while (((pos = val.indexOf(" ")) != -1) && (val.length > 1)) {
					sel = parseInt(val.substring(0,pos));
					val = val.substring(pos+1,val.length);
					if (sel < document.forms[i].elements[j].length)
					document.forms[i].elements[j].options[sel].selected = true;
					}
					} else if (document.forms[i].elements[j].type == "checkbox") {
					document.forms[i].elements[j].checked = val;
					} else if (document.forms[i].elements[j].type == "radio") {
					if (document.forms[i].elements[j].value == val)
					document.forms[i].elements[j].checked = true;
					}
				}
			}
		}
	}
}

window.onload = storedValues;

// -->
<!-- Begin validation script
//----------------------------------------
// Clears field if the default value is there.
//----------------------------------------
function clear_field(field)
{
	if (field.value==field.defaultValue)
	{
		field.value=''
	}
}
//----------------------------------------
// Checks field to see if any information
// was entered. If not, the default value
// is reentered.
//----------------------------------------
function check_field(field)
{
	if (field.value=='' ||
		field.value==' ')
	{
		field.value=field.defaultValue
	}
}
//----------------------------------------
// Validates the form. If a field fails the
// validation, The form is not submitted.
//----------------------------------------
function validate_form()
{
	//----------------------------------------
	// Validates the name field.
	//----------------------------------------
	if (document.jsform.Name.value==document.jsform.Name.defaultValue ||
		document.jsform.Name.value.indexOf(' ',0)==0)
	{
		alert('\nPlease enter full name.')
		document.jsform.Name.select()
		document.jsform.Name.focus()
		return false
	}

	//----------------------------------------
	// Validates the email field.
	//----------------------------------------
	if (document.jsform.Email.value==document.jsform.Email.defaultValue)
	{
		alert('\nPlease enter email address.')
		document.jsform.Email.select()
		document.jsform.Email.focus()
		return false
	}
	if (document.jsform.Email.value.indexOf('@',0)==-1 ||
		document.jsform.Email.value.indexOf('.',0)==-1)
	{
		alert('\nInvalid email address.')
		document.jsform.Email.select()
		document.jsform.Email.focus()
		return false
	}
	//----------------------------------------
	// Prompts user for confirmation
	//----------------------------------------
	else
	{
		return true
	}
}
//----------------------------------------
// End of validation script -->
</script>
<link rel="stylesheet" type="text/css" href="../style.css">
</head>

<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">

<?php include("../include/header.htt"); ?>
<?php
if(strtolower($_SESSION['CAPTCHAString']) != strtolower($_POST['authstr']) && isset($_POST['authstr']) || !isset($_POST['authstr']))
{
	if (isset($_POST['authstr']))
	{
		echo "<p align=\"center\"><b><font color=\"#FF0000\">Your Image Verification Code did not match the letters you typed.</font></b></p>\n";
	}

	unset($_SESSION['CAPTCHAString']);
	?>

<p></p>
<h1>Server Emergency Form</h1>
<p>If you can't view your website or your whole website email is not working
(test it via Webmail as well to be sure it is not your computer or local
network), use this form to submit a support ticket to our engineering group.</p>
<p>This
form is to be used <b>ONLY</b> in case of <u><b>major server emergency</b></u> (example:
server is down). <br />
For any other issue, <a href="../../reachus.html">click here</a> to use our standard
contact form.</span></p>
<!--webbot BOT="GeneratedScript" PREVIEW=" " startspan --><script Language="JavaScript" Type="text/javascript"><!--
function FrontPage_Form1_Validator(theForm)
{

	if (theForm.name.value == "")
	{
		alert("Please enter a value for the \"Name\" field.");
		theForm.name.focus();
		return (false);
	}

	if (theForm.from_email.value == "")
	{
		alert("Please enter a value for the \"Email\" field.");
		theForm.from_email.focus();
		return (false);
	}

	if (theForm.phone.value == "")
	{
		alert("Please enter a value for the \"Phone\" field.");
		theForm.phone.focus();
		return (false);
	}

	if (theForm.domain.value == "")
	{
		alert("Please enter a value for the \"Domain\" field.");
		theForm.domain.focus();
		return (false);
	}

	if (theForm.subject.selectedIndex < 0)
	{
		alert("Please select one of the \"Support Issue\" options.");
		theForm.subject.focus();
		return (false);
	}

	if (theForm.subject.selectedIndex == 0)
	{
		alert("The first \"Support Issue\" option is not a valid selection.  Please choose one of the other options.");
		theForm.subject.focus();
		return (false);
	}

	if (theForm.comments.value == "")
	{
		alert("Please enter a value for the \"Problem Description\" field.");
		theForm.comments.focus();
		return (false);
	}
	return (true);
}
//--></script><!--webbot BOT="GeneratedScript" endspan --><form action="index.html" method="POST" name="FrontPage_Form1" onsubmit="return FrontPage_Form1_Validator(this)" language="JavaScript">
	<p><font face="Verdana,Helv,Arial" size="2">Name:<br />
	&nbsp;<!--webbot bot="Validation" s-display-name="Name" b-value-required="TRUE" --><input type="text" name="name" value="<?php echo $_POST['name']; ?>" size="30" onchange="saveValue(this)"><br />
	Email address:<br />
	&nbsp;<!--webbot bot="Validation" s-display-name="Email" b-value-required="TRUE" --><input type="text" name="from_email" value="<?php echo $_POST['from_email']; ?>" size="30" onchange="saveValue(this)"><br />
	Phone:<br />
	&nbsp;<!--webbot bot="Validation" s-display-name="Phone" b-value-required="TRUE" --><input type="text" name="phone" value="<?php echo $_POST['phone']; ?>" size="30" onchange="saveValue(this)"><br />
	Domain Name:<br />
	&nbsp;<!--webbot bot="Validation" s-display-name="Domain" b-value-required="TRUE" --><input type="text" name="domain" value="<?php echo $_POST['domain']; ?>" size="30" onchange="saveValue(this)"><br />
	Subject:<br />
	&nbsp;<!--webbot bot="Validation" s-display-name="Support Issue" b-value-required="TRUE" b-disallow-first-item="TRUE" --><select name="subject" size="1">
	<option value="0" selected>Support Issue</option>
	<option>Emergency: Cannot View Web Pages</option>
	<option>Help: Cannot FTP</option>
	<option>Help: Cannot Check Email</option>
	<option>Help: Cannot Send Email</option>
	<option>Help: Problem with Database</option>
	<option>Help: Problem with Password</option>
	</select></font></p>
	<p><font face="Verdana,Helv,Arial" size="2">Please enter a description of the problem you are experiencing:<br />
	&nbsp;<!--webbot bot="Validation" s-display-name="Problem Description" b-value-required="TRUE" --><textarea name="comments" rows="10" cols="50" wrap="virtual"><?php echo $_POST['comments'];?></textarea></font></p>
	<div align="left">
		<span lang="EN"><font size="2"><b>Image Verification Code</b><br />
		Please retype the letters you see in the image in this box. <br />
		(This is Case SeNSItivE)<br />
		<img src="../../RegImgAuth/RegImgAuth.php?.png"></font></span></div>
	<div align="left">
		<input type="text" name="authstr" size="20"></div>
	<p><b><font face="Verdana,Helv,Arial" size="2">Service Terms</font></b></p>
	<ol>
		<li><font face="Verdana,Helv,Arial" size="2">By submitting this request
		for service I understand that I may be billed for services provided, at
		the rates given below (4), unless the service requested is already included
		in my service plan.</font></li>
		<li><font face="Verdana,Helv,Arial" size="2">All service inquiries will
		be reviewed, and an estimate of cost will be emailed to the email address
		provided above for approval.</font></li>
		<li><font face="Verdana,Helv,Arial" size="2">I understand that my approval
		of the estimate is required before any dedicated server services will be
		performed.</font></li>
		<li><font face="Verdana,Helv,Arial" size="2">Rates:</font>
		<ol>
			<li><font face="Verdana,Helv,Arial" size="2">$150/hr, billed half hourly.</font></li>
			<li><font face="Verdana,Helv,Arial" size="2">Minimum charge $75.00</font></li>
		</ol>
		</li>
	</ol>
	<p>
		<input type="submit" value="Send Message"><font face="Verdana,Helv,Arial" size="2">
	</font>
	<input type="hidden" name="id" value="1"></p>
</form>

	<?php
}
elseif(strtolower($_SESSION['CAPTCHAString']) == strtolower($_POST['authstr']) && isset($_POST['authstr']))
{
	unset($_SESSION['CAPTCHAString']);

	if ($_REQUEST['from_email'])
	{
		$log_file = "../logs/support.log";
		$date_time = date("m/d/Y - h:i:sa");
		$ip = getenv("REMOTE_ADDR");

		$email_tvc = "911@tvcnet.com";
		$email_105 = "vgelpi@blue105.com";

		$comments = stripslashes($_POST['comments']);


		// COMPOSE MESSAGE TO SEND TO TVCNET
		$message_tvc = "SERVER SUPPORT PROBLEM

TVCnet Engineering:
This message has been submitted from blue105.com in reference
to a server problem. If the client used the form for any other communication, please disregard.
If you need to contact Valerio Gelpi, call 818-563-4335 or 310-963-6523. Thank You.

Here is the information submitted by the client on $date_time:

Domain: {$_POST['domain']}
Server: {$_POST['server_no']}
User Name: {$_POST['username']}
Subject: {$_POST['subject']}
Comments: {$_POST['comments']}
";

		# COMPOSE MESSAGE TO SEND TO BLUE 105
		$message_105 = "Name: {$_POST['name']}
E-mail: {$_POST['from_email']}
Phone: {$_POST['phone']}
Domain: {$_POST['domain']}
Subject: {$_POST['subject']}
Comments: {$_POST['comments']}
";

		# COMPOSE MESSAGE TO SEND TO CLIENT
		$message_client = "Thank you for your Blue 105 form submission.
We received your message and are working on solving the problem.
Please reply to this email if you have further questions or comments.

You submitted the following information on $date_time:

Name: {$_POST['name']}
E-mail: {$_POST['from_email']}
Phone: {$_POST['phone']}
Domain: {$_POST['domain']}
Subject: {$_POST['subject']}
Comments: {$_POST['comments']}
";


		if (validate_email($_POST['from_email'], $CheckPattern = TRUE, $CheckNewLines = TRUE) && is_valid_domain($_POST['domain']) && $_POST["subject"] != '0')
		{
			# SEND EMAIL TO TVCNET
			mail("$email_tvc", $_POST['subject'], "$message_tvc", "From: Blue 105 Support <$email_105>\n");

			# SEND EMAIL TO BLUE 105
			mail("$email_105", $_POST['subject'], "$message_105", "From: {$_POST['name']} <{$_POST['from_email']}>\n");

			# SEND EMAIL TO CLIENT
			//mail("$from_email", $_POST['subject'], "$message_client", "From: Blue 105 Support <support@blue105.com>\n");


			$file_exists = file_exists($log_file);

			$fp = fopen($log_file, "a");
			fwrite($fp,"$date_time, $ip, {$_POST['subject']}, {$_POST['name']}, {$_POST['from_email']}, {$_POST['phone']}, {$_POST['domain']}, {$_POST['comments']}\n");
			fclose($fp);

			// If the file was just created let's change the permissions so we can delete it after we download the data
			if ($file_exists != 1)
			{
				chmod($log_file, 0777);
			}
		?>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p align="center"><font face="Verdana,Helv,Arial" size="2"><b>Thank You!<br />
</b>Your message has been sent<br />
to our engineering team.</font></p>
		<?php
	}
	else
	{
		?>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p align="center"><font face="Verdana,Helv,Arial" size="2"><b>We are sorry, your message could not be sent.</b></font></p>
		<?php
	}
	}
}
?>
<?php include("../include/footer.htt"); ?>

</body>

</html>