<?php
session_start();
error_reporting(E_ERROR | E_PARSE);
date_default_timezone_set('Europe/Berlin');
header('Content-type: text/html; charset=utf-8');


#########################################################################
#	Kontaktformular.com         					                                #
#	http://www.kontaktformular.com        						                    #
#	All rights by KnotheMedia.de                                    			#
#-----------------------------------------------------------------------#
#	I-Net: http://www.knothemedia.de                            					#
#########################################################################
// Der Copyrighthinweis darf NICHT entfernt werden!


  $script_root = substr(__FILE__, 0,
                        strrpos(__FILE__,
                                DIRECTORY_SEPARATOR)
                       ).DIRECTORY_SEPARATOR;

require_once $script_root.'upload.php';

$remote = getenv("REMOTE_ADDR");

function encrypt($string, $key) {
$result = '';
for($i=0; $i<strlen($string); $i++) {
   $char = substr($string, $i, 1);
   $keychar = substr($key, ($i % strlen($key))-1, 1);
   $char = chr(ord($char)+ord($keychar));
   $result.=$char;
}
return base64_encode($result);
}
$sicherheits_eingabe = encrypt($_POST["sicherheitscode"], "8h384ls94");
$sicherheits_eingabe = str_replace("=", "", $sicherheits_eingabe);

@require('config.php');

if ($_POST['delete'])
{
unset($_POST);
}

if ($_POST["kf-km"]) {

   $anrede      = $_POST["anrede"];
$titel      = $_POST["titel"];
   
$vorname      = $_POST["vorname"];
$name      = $_POST["name"];
$firma   = $_POST["firma"];
   $telefon   = $_POST["telefon"];
$email      = $_POST["email"];
$betreff   = $_POST["betreff"];
$nachricht   = $_POST["nachricht"];
   $sicherheitscode   = $_POST["sicherheitscode"];
   $date = date("d.m.Y | H:i");
   $ip = $_SERVER['REMOTE_ADDR']; 
   $UserAgent = $_SERVER["HTTP_USER_AGENT"];
   $host = getHostByAddr($remote);

$anrede = stripslashes($anrede);
$vorname = stripslashes($vorname);
$name = stripslashes($name);
$email = stripslashes($email);
$betreff = stripslashes($betreff);
$nachricht = stripslashes($nachricht);
 
if (isset($anrede) && $anrede == "0") {
  
          $fehler['anrede'] = "<font color=#cc3333>Bitte w&auml;hlen Sie eine Anrede aus.<br /></font>";

  }


if(!$vorname) {
 
 $fehler['vorname'] = "<font color=#cc3333>Geben Sie bitte Ihren Vornamen ein.<br /></font>";
 
}


if(!$name) {
 
 $fehler['name'] = "<font color=#cc3333>Geben Sie bitte Ihren Nachnamen ein.<br /></font>";
 
}


if (!preg_match("/^[0-9a-zA-ZÄÜÖ_.-]+@[0-9a-z.-]+\.[a-z]{2,6}$/", $email)) {
   $fehler['email'] = "<font color=#cc3333>Geben Sie bitte Ihre E-Mail-Adresse ein.\n<br /></font>";
}

 
if(!$betreff) {
 
 $fehler['betreff'] = '<font color=#cc3333>Geben Sie bitte einen Betreff ein.<br /></font>';
 
 
}
 
if(!$nachricht) {
 
 $fehler['nachricht'] = '<font color=#cc3333>Geben Sie bitte eine Nachricht ein.<br /></font>';
 
 
}

if($sicherheits_eingabe != $_SESSION['captcha_spam']){
unset($_SESSION['captcha_spam']);
   $fehler['captcha'] = "<font color=#cc3333>Der Code wurde falsch eingegeben.<br /></font>";
   }

    if (!isset($fehler) || count($fehler) == 0) {
      $error             = false;
      $errorMessage      = '';
      $uploadErrors      = array();
      $uploadedFiles     = array();
      $totalUploadSize   = 0;

      if ($cfg['UPLOAD_ACTIVE'] && in_array($_SERVER['REMOTE_ADDR'], $cfg['BLACKLIST_IP']) === true) {
          $error = true;
          $fehler['upload'] = '<font color=#990000>Sie haben keine Erlaubnis Dateien hochzuladen.<br /></font>';
      }

      if (!$error) {
          for ($i=0; $i < $cfg['NUM_ATTACHMENT_FIELDS']; $i++) {
              if ($_FILES['f']['error'][$i] == UPLOAD_ERR_NO_FILE) {
                  continue;
              }

              $extension = explode('.', $_FILES['f']['name'][$i]);
              $extension = strtolower($extension[count($extension)-1]);
              $totalUploadSize += $_FILES['f']['size'][$i];

              if ($_FILES['f']['error'][$i] != UPLOAD_ERR_OK) {
                  $uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
                  switch ($_FILES['f']['error'][$i]) {
                      case UPLOAD_ERR_INI_SIZE :
                          $uploadErrors[$j]['error'] = 'Die Datei ist zu groß (PHP-Ini Direktive).';
                      break;
                      case UPLOAD_ERR_FORM_SIZE :
                          $uploadErrors[$j]['error'] = 'Die Datei ist zu groß (MAX_FILE_SIZE in HTML-Formular).';
                      break;
                      case UPLOAD_ERR_PARTIAL :
						  if ($cfg['UPLOAD_ACTIVE']) {
                          	  $uploadErrors[$j]['error'] = 'Die Datei wurde nur teilweise hochgeladen.';
						  } else {
							  $uploadErrors[$j]['error'] = 'Die Datei wurde nur teilweise versendet.';
					  	  }
                      break;
                      case UPLOAD_ERR_NO_TMP_DIR :
                          $uploadErrors[$j]['error'] = 'Es wurde kein temporärer Ordner gefunden.';
                      break;
                      case UPLOAD_ERR_CANT_WRITE :
                          $uploadErrors[$j]['error'] = 'Fehler beim Speichern der Datei.';
                      break;
                      case UPLOAD_ERR_EXTENSION  :
                          $uploadErrors[$j]['error'] = 'Unbekannter Fehler durch eine Erweiterung.';
                      break;
                      default :
						  if ($cfg['UPLOAD_ACTIVE']) {
                          	  $uploadErrors[$j]['error'] = 'Unbekannter Fehler beim Hochladen.';
						  } else {
							  $uploadErrors[$j]['error'] = 'Unbekannter Fehler beim Versenden des Email-Attachments.';
						  }
                  }

                  $j++;
                  $error = true;
              }
              else if ($totalUploadSize > $cfg['MAX_ATTACHMENT_SIZE']*1024) {
                  $uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
                  $uploadErrors[$j]['error'] = 'Maximaler Upload erreicht ('.$cfg['MAX_ATTACHMENT_SIZE'].' KB).';
                  $j++;
                  $error = true;
              }
              else if ($_FILES['f']['size'][$i] > $cfg['MAX_FILE_SIZE']*1024) {
                  $uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
                  $uploadErrors[$j]['error'] = 'Die Datei ist zu groß (max. '.$cfg['MAX_FILE_SIZE'].' KB).';
                  $j++;
                  $error = true;
              }
              else if (!empty($cfg['BLACKLIST_EXT']) && strpos($cfg['BLACKLIST_EXT'], $extension) !== false) {
                  $uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
                  $uploadErrors[$j]['error'] = 'Die Dateiendung ist nicht erlaubt.';
                  $j++;
                  $error = true;
              }
              else if (preg_match("=^[\\:*?<>|/]+$=", $_FILES['f']['name'][$i])) {
                  $uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
                  $uploadErrors[$j]['error'] = 'Ungültige Zeichen im Dateinamen (\/:*?<>|).';
                  $j++;
                  $error = true;
              }
              else if ($cfg['UPLOAD_ACTIVE'] && file_exists($cfg['UPLOAD_FOLDER'].'/'.$_FILES['f']['name'][$i])) {
                  $uploadErrors[$j]['name'] = $_FILES['f']['name'][$i];
                  $uploadErrors[$j]['error'] = 'Die Datei existiert bereits.';
                  $j++;
                  $error = true;
              }
              else {
				  if ($cfg['UPLOAD_ACTIVE']) {
                     move_uploaded_file($_FILES['f']['tmp_name'][$i], $cfg['UPLOAD_FOLDER'].'/'.$_FILES['f']['name'][$i]);	
				  }
                  $uploadedFiles[] = $_FILES['f']['name'][$i];
              }
          }
      }

      if ($error) {
          $errorMessage = 'Es sind folgende Fehler beim Versenden des Kontaktformulars aufgetreten:'."\n";
          if (count($uploadErrors) > 0) {
              foreach ($uploadErrors as $err) {
                  $tmp .= ''.$err['name']."<br/>\n- ".$err['error']."<br/><br/>\n";
              }
              $tmp = "<br/><br/>\n".$tmp;
          }
          $errorMessage .= $tmp.'';
          $fehler['upload'] = $errorMessage;
      }
  }



   if (!isset($fehler))
   {

	$recipient = "".$empfaenger."";
    $betreff = "".$_POST["betreff"]."";
	//$mailheaders = "From: \"".stripslashes($_POST["vorname"])." ".stripslashes($_POST["name"])."\" <".$_POST["email"].">\n";
	//$mailheaders .= "Reply-To: <".$_POST["email"].">\n";
	//$mailheaders .= "X-Mailer: PHP/" . phpversion() . "\n";
	$mailheader_betreff = "=?UTF-8?B?".base64_encode($betreff)."?=";
	$mailheaders   = array();
	$mailheaders[] = "MIME-Version: 1.0";
	$mailheaders[] = "Content-type: text/plain; charset=utf-8";
	$mailheaders[] = "From: =?UTF-8?B?".base64_encode(stripslashes($_POST["vorname"])." ".stripslashes($_POST["name"]))."?= <".$_POST["email"].">";
	$mailheaders[] = "Reply-To: <".$_POST["email"].">";
	$mailheaders[] = "Subject: ".$mailheader_betreff;
	$mailheaders[] = "X-Mailer: PHP/".phpversion();		

   


   $msg  = "Folgendes wurde am ". $date ." Uhr per Formular geschickt:\n" . "-----------------------------------------------------------------\n\n";
   $msg .= "Name: " . $anrede . " " . $titel . "" . $vorname . " " . $name . "\n";
$msg .= "Firma: " . $firma . "\n\n";
$msg .= "E-Mail: " . $email . "\n";
$msg .= "Telefon: " . $telefon . "\n";
$msg .= "\nBetreff: " . $betreff . "\n";
$msg .= "Nachricht:\n" . $_POST['nachricht'] = preg_replace("/\r\r|\r\n|\n\r|\n\n/","\n",$_POST['nachricht']) . "\n\n";

   "-----------------------------------------------------------------\n\n";
 if (count($uploadedFiles) > 0) {
	   if ($cfg['UPLOAD_ACTIVE']) {
       	   $msg .= 'Es wurden folgende Dateien hochgeladen:'."\n";
	       foreach ($uploadedFiles as $file) {
	           $msg .= ' - '.$cfg['DOWNLOAD_URL'].'/'.$cfg['UPLOAD_FOLDER'].'/'.$file."\n";
	       }
	   } else {
		   $msg .= 'Es wurden folgende Dateien als Attachment angehängt:'."\n";
		   foreach ($uploadedFiles as $file) {
	           $msg .= ' - '.$file."\n";
	       }
	   }
   }
  $msg .= "\n\nIP Adresse: " . $ip . "\n";
  $msg = strip_tags ($msg);

   
	//$mailheaders = "From: \"".stripslashes($_POST["vorname"])." ".stripslashes($_POST["name"])."\" <".$_POST["email"].">\n";
	//$mailheaders .= "Reply-To: <".$_POST["email"].">\n";
	//$mailheaders .= "X-Mailer: PHP/" . phpversion() . "\n";
	$mailheader_betreff = "=?UTF-8?B?".base64_encode($betreff)."?=";
	$mailheaders   = array();
   

	if (!$cfg['UPLOAD_ACTIVE'] && count($uploadedFiles) > 0) {
		$attachments = array();
		for ($i = 0; $i < $cfg['NUM_ATTACHMENT_FIELDS']; $i++) {
		   	if ($_FILES['f']['name'][$i] == UPLOAD_ERR_NO_FILE) {
				continue;
			}
			$attachments[] = $_FILES['f']['tmp_name'][$i];
		}
		$boundary = md5(uniqid(rand(), true));
		
		
		// allgemeiner Header
		$mailheaders[] = "MIME-Version: 1.0";
		$mailheaders[] = "Content-type: multipart/mixed; boundary=\"".$boundary."\"";
		$mailheaders[] = "From: =?UTF-8?B?".base64_encode(stripslashes($_POST["vorname"])." ".stripslashes($_POST["name"]))."?= <".$_POST["email"].">";
		$mailheaders[] = "Reply-To: <".$_POST["email"].">";
		$mailheaders[] = "Subject: ".$mailheader_betreff;
		$mailheaders[] = "X-Mailer: PHP/".phpversion();	
		
		// Nachricht
		$mailheaders[] = "--".$boundary;
		$mailheaders[] = "Content-type: text/plain; charset=utf-8";
		$mailheaders[] = "Content-Transfer-Encoding: 8bit";
		$mailheaders[] = "Folgendes wurde am ". $date ." Uhr per Formular geschickt:\n";
		$mailheaders[] = $msg;
		$mailheaders[] = "";
		
		// Anhänge
		for ($i = 0; $i < count($uploadedFiles); $i++) {
			$file = fopen($attachments[$i],"r");
			$content = fread($file,filesize($attachments[$i]));
			fclose($file);
			$encodedfile = chunk_split(base64_encode($content));
			$mailheaders[] = "--".$boundary;
			$mailheaders[] = "Content-Disposition: attachment; filename=\"".$uploadedFiles[$i]."\"";		
			$mailheaders[] = "Content-Type: application/octet-stream; name=\"".$uploadedFiles[$i]."\"";
			$mailheaders[] = "Content-Transfer-Encoding: base64";
			$mailheaders[] = "";
			$mailheaders[] = $encodedfile;
		}
		$mailheaders[] = "--".$boundary."--";
	}
	else{
		$mailheaders[] = "MIME-Version: 1.0";
		$mailheaders[] = "Content-type: text/plain; charset=utf-8";
		$mailheaders[] = "From: =?UTF-8?B?".base64_encode(stripslashes($_POST["vorname"])." ".stripslashes($_POST["name"]))."?= <".$_POST["email"].">";
		$mailheaders[] = "Reply-To: <".$_POST["email"].">";
		$mailheaders[] = "Subject: ".$mailheader_betreff;
		$mailheaders[] = "X-Mailer: PHP/".phpversion();		
	}


   

	$dsubject = "Ihre Nachricht";  
	//$dmailheaders = "From: ".$ihrname." <".$recipient.">\n";
	//$dmailheaders .= "Reply-To: <".$recipient.">\n";
	$dmailheader_dsubject = "=?UTF-8?B?".base64_encode($dsubject)."?=";
   	$dmailheaders   = array();
	$dmailheaders[] = "MIME-Version: 1.0";
	$dmailheaders[] = "Content-type: text/plain; charset=utf-8";
	$dmailheaders[] = "From: =?UTF-8?B?".base64_encode($ihrname)."?= <".$recipient.">";
	$dmailheaders[] = "Reply-To: <".$recipient.">";
	$dmailheaders[] = "Subject: ".$dmailheader_dsubject;
	$dmailheaders[] = "X-Mailer: PHP/".phpversion();		

   $dmsg  = "Sehr geehrte Damen und Herren,\n\nvielen Dank für Ihr Interesse.\n\nIhre Nachricht wurde erfolgreich übertragen und wird schnellstmöglich bearbeitet.\n\nMit freundlichen Grüßen\nTimo Hein\n\n";
   $dmsg .= "Zusammenfassung: \n" .
  "-------------------------------------------------------------------------\n\n";
   $dmsg .= "Name: " . $anrede . " " . $titel . "" . $vorname . " " . $name . "\n";
$dmsg .= "Firma: " . $firma . "\n\n";
$dmsg .= "E-Mail: " . $email . "\n";
$dmsg .= "Telefon: " . $telefon . "\n";
$dmsg .= "\nBetreff: " . $betreff . "\n";
$dmsg .= "Nachricht:\n" . str_replace("\r", "", $nachricht) . "\n\n";
   
   if (count($uploadedFiles) > 0) {
       $dmsg .= 'Sie haben folgende Dateien übertragen:'."\n";
       foreach ($uploadedFiles as $file) {
           $dmsg .= ' - '.$file."\n";
       }
   }
   $dmsg = strip_tags ($dmsg);


//if (mail($recipient,$betreff,$msg,$mailheaders)) {
//mail($email, $dsubject, $dmsg, $dmailheaders);
if (mail($recipient, $mailheader_betreff, $msg, implode("\n", $mailheaders))) {
mail($email, $dmailheader_dsubject, $dmsg, implode("\n", $dmailheaders));


echo "<META HTTP-EQUIV=\"refresh\" content=\"0;URL=".$danke."\">";
exit;
 
}
}
}

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="de-DE" lang="de-DE">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta name="language" content="de"/>
<meta name="description" content="kontaktformular.com"/>
<meta name="revisit" content="After 7 days"/>
<meta name="robots" content="INDEX,FOLLOW"/>
<meta http-equiv="Content-Style-Type" content="text/css" />   
<meta http-equiv="Content-Script-Type" content="text/javascript" />
<title>kontaktformular.com</title>
<link href="style-kontaktformular.css" rel="stylesheet" type="text/css" />
</head>

<body id="Kontaktformularseite" onload="parent.resize_me('kontaktformular')">

<div class="kontaktformular">
<form action="<?php $_SERVER['PHP_SELF'];?>" method="post" enctype="multipart/form-data">

<input style="width:0px; height:0px; visibility:hidden;" type="hidden" name="action" value="smail" />
<input style="width:0px; height:0px; visibility:hidden;" type="hidden" name="content" value="formular"/>

Bitte prüfen Sie Ihre Eingaben sorgfältig. Sie erhalten eine Kopie Ihrer Nachricht per E-Mail.<br />
<br />
<table width="610" border="0" cellpadding="0" cellspacing="0">
	<tr><td colspan="4"></td></tr>
	<tr>
		<td width="115" height="30">Anrede <span class="pflichtfeld">*</span> / Titel: </td>
		<td width="225" height="30"><?php if ($fehler["anrede"] != "") { echo $fehler["anrede"]; } ?>
			<select style="width:65px" name="anrede" >
				<option selected="selected" value="0"></option>
				<option value="Herr" <? if($_POST['anrede']=="Herr"){ echo "selected";}?> >Herr</option>
				<option value="Frau" <? if($_POST['anrede']=="Frau"){ echo "selected";}?> >Frau</option>
				</select>
			<select style="width:130px" name="titel" >
				<option selected="selected"></option>
				<option value="Dr. " <? if($_POST['titel']=="Dr. "){ echo "selected";}?> >Dr.</option>
				<option value="Dr. med. " <? if($_POST['titel']=="Dr. med. "){ echo "selected";}?> >Dr. med.</option>
				<option value="Prof. " <? if($_POST['titel']=="Prof. "){ echo "selected";}?> >Prof.</option>
				<option value="Prof. Dr. " <? if($_POST['titel']=="Prof. Dr. "){ echo "selected";}?> >Prof. Dr.</option>
				<option value="Prof. Dr. med. " <? if($_POST['titel']=="Prof. Dr. med. "){ echo "selected";}?> >Prof. Dr. med.</option>
				</select>
			</td>
		<td width="70" height="30">Firma:</td>
		<td width="200" height="30"><input name="firma" type="text"  value="<?php echo $_POST[firma]; ?>" style="width:190px" maxlength="<?php echo $zeichenlaenge_firma; ?>" /></td>
	</tr>
	<tr>
		<td height="30">Vorname: <span class="pflichtfeld">*</span></td>
		<td height="30"><?php if ($fehler["vorname"] != "") { echo $fehler["vorname"]; } ?>
			<input name="vorname" type="text" value="<?php echo $_POST[vorname]; ?>" style="width:190px" maxlength="<?php echo $zeichenlaenge_vorname; ?>" />
		</td>
		<td height="30">Telefon: <br /></td>
		<td height="30"><?php if ($fehler["telefon"] != "") { echo $fehler["telefon"]; } ?>
			<input name="telefon" type="text" value="<?php echo $_POST[telefon]; ?>" style="width:190px" maxlength="<?php echo $zeichenlaenge_telefon; ?>" /></td>
		</tr>
	<tr>
		<td height="30">Nachname: <span class="pflichtfeld">*</span></td>
		<td height="30"><?php if ($fehler["name"] != "") { echo $fehler["name"]; } ?>
			<input name="name" type="text" value="<?php echo $_POST[name]; ?>" style="width:190px" maxlength="<?php echo $zeichenlaenge_name; ?>" />
		</td>
		<td height="30">E-Mail: <span class="pflichtfeld">*</span><br /></td>
		<td height="30"><?php if ($fehler["email"] != "") { echo $fehler["email"]; } ?>
			<input name="email" type="text" id="email" value="<?php echo $_POST[email]; ?>" style="width:190px" maxlength="<?php echo $zeichenlaenge_email; ?>" /></td>
		</tr>
	<tr>
		<td height="30">Betreff: <span class="pflichtfeld">*</span></td>
		<td height="30"><?php if ($fehler["betreff"] != "") { echo $fehler["betreff"]; } ?>
			<input name="betreff" type="text"  value="<?php echo $_POST[betreff]; ?>" style="width:190px" maxlength="<?php echo $zeichenlaenge_betreff; ?>" />
			</td>
		<td height="30">&nbsp;</td>
		<td height="30">&nbsp;</td>
	</tr>
	<tr>
		<td>Nachricht: <span class="pflichtfeld">*</span></td>
		<td colspan="3"><?php if ($fehler["nachricht"] != "") { echo $fehler["nachricht"]; } ?>
			<textarea style="width:480px" name="nachricht" rows="7" cols="1"><?php echo $_POST[nachricht]; ?></textarea>
		</td>
		</tr>
	<?php
		  for ($i=0; $i < $cfg['NUM_ATTACHMENT_FIELDS']; $i++) {
			  echo '<tr>';
			  echo '<td style="width:150px">Anhang:</td>';
			  echo '<td><input type="file" style="width:268px" name="f[]" /></td>';
			  echo '</tr>';
		  }
	?>
	<tr>
		<td height="50">Sicherheitscode:</td>
		<td height="50"><img src="captcha/captcha.php" alt="Sicherheitscode" title="michatronic-sicherheitscode" id="captcha" /><br />
			<a href="javascript:void(0);" onclick="javascript:document.getElementById('captcha').src='captcha/captcha.php?'+Math.random();"><span class="neuercode">Code ändern</span></a>
			</td>
		<td height="50">Eingabe: <span class="pflichtfeld">*</span></td>
		<td height="50"><?php if ($fehler["captcha"] != "") { echo $fehler["captcha"]; } ?>
			<input type="text" name="sicherheitscode" maxlength="150" value="" style="width:85px" /></td>
	</tr>
	<tr>
		<td height="20" colspan="4"><hr class="hr-dotted" /></td>
		</tr>
	<tr>
		<td height="30" valign="top"><span class="pflichtfeld">*</span> Pflichtfelder</td>
		<td height="30" valign="top">&nbsp;</td>
		<td height="30" valign="top">&nbsp;</td>
		<td height="30" valign="top"><input type="submit" name="delete" value="Zurücksetzen" style="float:left;"/>
			<input type="submit" name="kf-km" value="Senden" onclick="tescht();" style="float:right;"/></td>
	</tr>
</table>
<!-- Copyrighthinweis siehe Impressum -->
</form> 

 </div>
</body>
</html>