Email and name validation in PHP
Hello, dear ones!
I have a script and I need it to check the email and username before accepting an order. Thank you in advance!
<h1>Order Processing</h1>
<?php
require_once realpath(dirname(__FILE__) . '/../cms/local.php');
function send_mail($emailaddress, $fromaddress, $emailsubject, $body, $attachments=false){
$eol="\n";
$mime_boundary=md5(time());
# Common Headers
$headers = '';
$headers .= 'From: '.$fromaddress.$eol;
$headers .= 'Reply-To: '.$fromaddress.$eol;
$headers .= 'Return-Path: '.$fromaddress.$eol; // these two to set reply address
$headers .= "Message-ID: <".$now." TheSystem@".$_SERVER['SERVER_NAME'].">".$eol;
$headers .= "X-Mailer: PHP v".phpversion().$eol;
// These two to help avoid spam-filters
$headers .= 'Bcc: '.EMAILS_ORDER.$eol;
# Boundary for marking the split & Multitype Headers
$headers .= 'MIME-Version: 1.0'.$eol;
$headers .= "Content-Type: multipart/related; boundary=\"".$mime_boundary."\"".$eol;
$msg = "";
if ($attachments !== false)
{
for($i=0; $i < count($attachments); $i++)
{
if (is_file($attachments[$i]["file"]))
{
# File for Attachment
//$file_name = substr($attachments[$i]["file"], (strrpos($attachments[$i]["file"], "/")+1));
$file_name = basename($attachments[$i]["name"]);
$handle=fopen($attachments[$i]["file"], 'rb');
$f_contents=fread($handle, filesize($attachments[$i]["file"]));
$f_contents=chunk_split(base64_encode($f_contents));
// Encode The Data For Transition using base64_encode();
fclose($handle);
# Attachment
$msg .= "--".$mime_boundary.$eol;
$msg .= "Content-Type: ".$attachments[$i]["content_type"]."; name=\"".$file_name."\"".$eol;
$msg .= "Content-Transfer-Encoding: base64".$eol;
$msg .= "Content-Disposition: attachment; filename=\"".$file_name."\"".$eol.$eol; // !! This line needs TWO end of lines !! IMPORTANT !!
//$msg .= "Content-Disposition: attachment;".$eol;
//
$msg .= " filename=\"".$file_name."\"".$eol.$eol;
$msg .= $f_contents.$eol.$eol;
}
}
}
# Setup for text OR html
$msg .= "Content-Type: multipart/alternative".$eol;
/*
# Text Version
$msg .= "--".$mime_boundary.$eol;
$msg .= "Content-Type: text/plain; charset=iso-8859-1".$eol;
$msg .= "Content-Transfer-Encoding: 8bit".$eol.$eol;
$msg .= strip_tags(str_replace("<br>", "\n", $body)).$eol.$eol;
*/
# HTML Version
$msg .= "--".$mime_boundary.$eol;
$msg .= "Content-Type: text/html; charset=windows-1251".$eol;
$msg .= "Content-Transfer-Encoding: 8bit".$eol.$eol;
$msg .= $body.$eol.$eol;
# Finished
$msg .= "--".$mime_boundary."--".$eol.$eol; // finish with two eol's for better security. see Injection.
# SEND THE EMAIL
ini_set(sendmail_from,$fromaddress); // the INI lines are to force the From Address to be used !
$result = mail($emailaddress, $emailsubject, $msg, $headers);
ini_restore(sendmail_from);
return $result;
}
if ( isset($_POST['Full Name']) ) {
$fio = $_POST['Full Name'];
$reg = $_POST['Region'];
$city = $_POST['City'];
$phone = $_POST['Phone'];
$email = $_POST['Email'];
$addres = $_POST['Delivery Address'];
$com = $_POST['Order Comment'];
$group1 = $_POST['group1'];
$to = $email;
$from = '"Website '.$_SERVER['SERVER_NAME'].'"
Your order from ".date('d.m.Y H:i')."
| Customer Information: | |
|---|---|
| Full Name | $fio |
| Region | $reg |
| City | $city |
| Contact Phone | $phone |
| Delivery Address | $addres |
| Payment Method | $group1 |
| Order Comment: | $com |
Order Contents:
"; if ($_SESSION['cart']) { $totalArray = array(); $uniqueArray = array_unique($_SESSION['cart']); // remove duplicate items // Final count of product IDs and their quantities foreach ($uniqueArray as $key) { foreach ( $_SESSION['cart'] as $k => $v ) { $totalArray[$v] = ( $v == $key ) ? $totalArray[$v] + 1 : $totalArray[$v] ; } } } $DB = new PDO ('sqlite:'.$_SERVER['DOCUMENT_ROOT'].'/minicms.sqlite'); $r = $DB->query('SELECT * FROM catalog_items')->fetchAll(); $message .= '| Product Name | Quantity | Price per Unit, rub | Total Price, rub |
| ".$dataArr['name']." | ". "".$totalArray[$dataArr['id']]." | ". "".$dataArr['price']." | ". "".$dataArr['price']*$totalArray[$dataArr['id']]." | "; "</tr>";