"; // debugging if (!isset($_POST) || ($length < 3)) { $success = false; // nothing POSTed by the form (code +1) $code = $code + $length + 1; // should have at least 3 elements } // ============================================ Main processing loop if (isset($_POST)): // Iterate through all the POSTed variables, and add them to the message body. $count = 0; while (list($key, $value) = each($_POST)): // echo "$key : $value
"; // debugging $just_failed = false; $value = trim($value); // tidy the input value $count = $count + 1; // loop counter,for trace preg_match("/Loop: " . $count . " Error: " . $code . ": " .$match[0] . $vName); preg_match("/www/", $value, $match); if ($match[0] != '') { $vName = $vName . "hyperlinking detected; "; $success = false; $just_failed = true; $code = $code + 50; // dodgy input (code + 50) } // echo("
Loop: " . $count . " Error: " . $code . ": " . $vName); preg_match("/tp:/", $value, $match); if ($match[0] != '') { $vName = $vName . "hyperlinking detected; "; $success = false; $just_failed = true; $code = $code + 50; // dodgy input (code + 50) } // echo("
Loop: " . $count . " Error: " . $code . ": " . $vName . "
"); if ($key == 'FormType') { $Form = $value; if ( $value == 'Educational Enquiry' || $value == 'Order' || $value == 'Teaching Feedback' || $value == 'PD Information Request' || $value == 'eCv Information Request' || $value == 'Technical Support Request' || $value == 'Product Registration' || $value == 'Mailing List Subscription Request' || $value == 'Message' || $value == 'Feedback' || $value == 'Request Download Key' ) { $subject = $value . ' from www.escher3D.com'; } else { $success = false; $just_failed = true; $code = $code + 20; // FormType not identified } } // save input email address for the reply-to header if ($key == 'Email_Address') { if (preg_match('/ ^[-a-z0-9_\.]+@[-a-z0-9_\.]+$/i',$value)) { $reply = $value; } else { $success = false; $just_failed = true; $code = $code + 300; // Email_Address in bad format } } // Check for a supplied input in the Sandwich field and kill if present if ((strlen($value) != 0) && ($key == 'Sandwich')) { $success = false; $just_failed = true; $code = $code + 4000; // Bot attempt; this field SHOULD be empty } // Find if this is a quotation or an order if ($key == 'Quotation_Required') { if ($value == 'Order') { $paypal = 'true'; } else { $paypal = 'false'; } } // Check for an unsupplied input, replace null with empty if (strlen($value) == 0) { $body .= $key . ': ' . "" . "\r\n"; } else { if (!$just_failed) { $body .= $key . ': ' . $value . "\r\n"; } else { $body .= $key . ': censored' . "\r\n"; } } endwhile; endif; // ========================= End of main loop: Result: if ($success) { // Define From/Reply Headers $headers = "From: $from\r\n"; $headers .= "Reply-To: $reply\r\n"; // Mail the message out. This will not work from localhost. $success = mail($to, $subject, $body, $headers); } else { if (strlen($vName) > 1) { $vName = $vName . ' ***'; } // echo("
At End: Error: " . $code . ": " . $vName . "


"); } ?> Escher3D Orderform Result

The webpage at Escher3D says:

Thank you, your " . $Form . " form has been sent."); if ($paypal) { echo('
Thank you. We will email you the payment request shortly.
'); } else { echo('
We will get back to you as soon as possible.
'); } } else { echo("Sorry, your " . $Form . " form could not be sent.

"); echo("The details were: " . $subject . ": " . $body . " code: " . $code . " " . $vName); // echo("

Please telephone us."); } ?>