path: root/danixland-contact-form.php

<?php
defined( 'ABSPATH' ) or die( 'No script kiddies please!' );

/*
Plugin Name:    danixland contact form
Description:    A simple yet powerful contact form plugin
Plugin URI:     https://danix.xyz/?p=3577
Version:        1.2
Author:         Danilo 'danix' Macr&igrave;
Author URI:     http://danix.xyz
License:        GPL2
License URI:    https://www.gnu.org/licenses/gpl-2.0.html
Domain Path:    /languages
Text Domain:    dnxcf
*/

global $dnxcf_form_version;
$dnxcf_form_version = '1.2';

/**
 * Add plugin i18n domain: dnxcf
 * @since 0.2
 */
load_plugin_textdomain( 'dnxcf', false, dirname( plugin_basename( __FILE__ ) ) . '/languages/' );

/**
 * Let's load our helper file ( DB initialization and stuff )
 * @since 0.2
 */
require( dirname( __FILE__ ) . '/include/dnxcf_helper.php' );

/**
 * Check / create the database for the plugin data
 * @since 1.1.3
 */
register_activation_hook( __FILE__, 'dnxcf_set_db_version' );
register_activation_hook( __FILE__, 'dnxcf_db_check' );

if ( is_admin() ) {
	require_once( dirname( __FILE__ ) . '/include/dnxcf_settings.php' );
}

// Add Genericons, used in the contact form.
function dnxcf_scripts() {
	wp_enqueue_style( 'dnxcf_genericons', plugins_url( '/style/genericons/genericons.css', __FILE__ ), array(), '3.4.1' );
	wp_enqueue_style( 'dnxcf_helper_style', plugins_url( '/style/dnxcf_style.css', __FILE__ ), array(), '4.4.2' );
}
add_action( 'wp_enqueue_scripts', 'dnxcf_scripts' );

/*
 * This function displays a google map by adding a js script to the wp_footer
 * @since 1.0
 */
function dnxcf_gmap_enqueue() {
	global $dnxcf_options;
	$dnxcf_options = get_option( 'dnxcf_options' );
	$latitude = $dnxcf_options['dnxcf_latitude'];
	$longitude = $dnxcf_options['dnxcf_longitude'];
	$apikey = $dnxcf_options['dnxcf_apikey'];
	$sitename = get_bloginfo( 'name' );
	$siteurl = get_bloginfo( 'url' );
	$sitemsg = $dnxcf_options['dnxcf_gmap_message'];
	$visitus = __( 'Come visit us', 'dnxcf' );

	$popup_content = <<< DNX6655788EOT
<div id="content">
    <div id="siteNotice">
    </div>
    <h1 id="firstHeading" class="firstHeading">$sitename</h1>
    <div id="bodyContent">
        <p>$sitemsg</p>
        <p><a href="$siteurl">$visitus</a></p>
    </div>
</div>
DNX6655788EOT;
	?>
<script>
	function initMap() {
		var location = {lat: <?php echo $latitude; ?>, lng: <?php echo $longitude; ?> };
		var map = new google.maps.Map( document.getElementById('dnxcf_gmap'), {zoom: 15, center: location} );

		contentString = <?php echo json_encode( $popup_content ); ?>;
		var infowindow = new google.maps.InfoWindow( {content: contentString} );

		var marker = new google.maps.Marker( {position: location, map: map, animation: google.maps.Animation.DROP} );
		marker.addListener('click', function() { infowindow.open(map, marker); });
	}
</script>

<script src="https://maps.googleapis.com/maps/api/js?key=<?php echo $apikey; ?>&callback=initMap" async defer></script>

	<?php
}

global $dnxcf_options;
$dnxcf_options = get_option( 'dnxcf_options' );
if ( ! empty( $dnxcf_options['dnxcf_apikey'] ) ) {
	add_action( 'wp_footer', 'dnxcf_gmap_enqueue' );
}


/*
 * The actual contact form displayed using a shortcode
 * @since 0.1
 */
add_shortcode( 'dnx_contactform', 'dnxcf_return_form' );

/*
 * we use output buffer so that the form will stay at the bottom of content
 * allowing the user to write some text in the body of the page before
 * displaying the form with the shortcode
 * @since 0.5
 */
function dnxcf_return_form() {
	ob_start();
	dnxcf_display_form();
	$output = ob_get_contents();
	ob_end_clean();
	return $output;
}

/*
 * Here we handle the input/output flow
 * @since 0.2
 */
function dnxcf_display_form() {
	global $dnxcf_form_version, $dnxcf_options;
	$dnxcf_options = get_option( 'dnxcf_options' );

	$dnxcf_pid            = md5( $dnxcf_options['dnxcf_pid_key'] );
	$dnxcf_vers_id        = md5( $dnxcf_form_version );
	$dnxcf_date_id        = md5( date( 'TOZ' ) );
	$dnxcf_eml_id         = md5( $dnxcf_options['dnxcf_recv_email'] );
	$dnxcf_form_id        = $dnxcf_pid . $dnxcf_vers_id . $dnxcf_eml_id . $dnxcf_date_id;
	$dnxcf_form_id        = strtoupper( md5( $dnxcf_form_id ) );
	$dnxcf_form_id        = 'ID' . $dnxcf_form_id . 'DNX';
	$dnxcf_send_value     = trim( strtolower( 'submit_' . md5( $dnxcf_form_id ) ) );

	if ( isset( $_POST[ $dnxcf_send_value ] ) ) { // the form has been submitted
		$dnxcf_email_output = ( '1' == $dnxcf_options['dnxcf_content_type'] ) ? 'text/plain' : 'text/html';
		$dnxcf_form_name = 'dnxcf_form_' . $dnxcf_pid;
		$dnxcf_form_action = 'dnxcf_submit_' . $dnxcf_form_id;
		// valid html used to validate the comment content.
		$valid_html = array(
			'a' => array(
				'href' => array(),
				'title' => array(),
			),
			'br' => array(),
			'em' => array(),
			'strong' => array(),
			'p' => array(),
			'pre' => array(),
			'code' => array(),
		);
		// security checks before submitting the form
		if ( $_SERVER['REQUEST_URI'] == $_POST['_wp_http_referer'] && wp_verify_nonce( $_POST[ $dnxcf_form_name ], $dnxcf_form_action ) ) {

			$dnxcf_posted = array();
			// let's gather some data about the user submitting the form
			$dnxcf_ltd    = trim( strip_tags( stripslashes( current_time( 'mysql' ) ) ) );
			$dnxcf_hst    = trim( strip_tags( stripslashes( getenv( 'REMOTE_ADDR' ) ) ) );
			$dnxcf_ua     = trim( strip_tags( stripslashes( $_SERVER['HTTP_USER_AGENT'] ) ) );
			// our posted options, arranged in one nice array
			$dnxcf_posted['dnxcf_name'] = sanitize_text_field( $_POST['dnxcf_name'] );
			$dnxcf_posted['dnxcf_email'] = sanitize_email( $_POST['dnxcf_email'] );
			$dnxcf_posted['dnxcf_website'] = esc_url( $_POST['dnxcf_website'] );
			$dnxcf_posted['dnxcf_subject'] = sanitize_text_field( $_POST['dnxcf_subject'] );
			$dnxcf_posted['dnxcf_message'] = wp_kses( $_POST['dnxcf_message'], $valid_html );
			// let's begin with our email data, like receiver email, subject ecc.
			$dnxcf_to         = $dnxcf_options['dnxcf_recv_email'];
			$dnxcf_headers    = 'Reply-To: ' . $dnxcf_posted['dnxcf_email'];
			$dnxcf_subject    = __( 'Contact from "', 'dnxcf' ) . get_bloginfo( 'name' ) . '" - ' . $dnxcf_posted['dnxcf_subject'];

			// check for our content type and arrange our info accordingly
			if ( 'text/html' == $dnxcf_email_output ) {
				require( apply_filters( 'dnxcf_template_file', dirname( __FILE__ ) . '/include/dnxcf_mail_template_danixland.php' ) );
				$dnxcf_email_data = array(
					'ownname' => $dnxcf_options['dnxcf_recv_name'],
					'site' => get_bloginfo( 'name' ),
					'time' => $dnxcf_ltd,
					'host' => $dnxcf_hst,
					'ua' => $dnxcf_ua,
				);
				$dnxcf_message = dnxcf_email_content( $dnxcf_email_data, $dnxcf_posted );
			} else { // content_type is set to text/plain
				$dnxcf_message = sprintf(
					__( "Hello \"%1\$s\",\nyou are being contacted by %2\$s on %3\$s.\n%4\$s has provided the following informations:\n\tEmail:\t\t%5\$s\n\tWebsite:\t%6\$s\n\tMessage:\n\n%7\$s", 'dnxcf' ),
					$dnxcf_options['dnxcf_recv_name'],
					$dnxcf_posted['dnxcf_name'],
					get_bloginfo( 'name' ),
					$dnxcf_posted['dnxcf_name'],
					$dnxcf_posted['dnxcf_email'],
					$dnxcf_posted['dnxcf_website'],
					$dnxcf_posted['dnxcf_message']
				);
				$dnxcf_message .= "\n\n##-----------#-----------#-----------##\n\n";
				$dnxcf_message .= sprintf(
					__( "We have also collected the following informations:\n\tBrowser:\t%1\$s\n\tTime:\t\t%2\$s\n\tIP Address:\t%3\$s\n", 'dnxcf' ),
					$dnxcf_ua,
					$dnxcf_ltd,
					$dnxcf_hst
				);
			} // end check for mail_content_type
			$dnxcf_mailed = wp_mail( $dnxcf_to, $dnxcf_subject, $dnxcf_message, $dnxcf_headers );
			if ( $dnxcf_mailed ) {
				?>
			<p id="dnxcf_success"><?php _e( 'your email was sent successfully. Here\'s the data you submitted via our form.', 'dnxcf' ); ?></p>
			<p>
				<dl>
					<dt><?php _e( 'Your Name:', 'dnxcf' ); ?></dt>
					<dd><?php echo $dnxcf_posted['dnxcf_name']; ?></dd>
					<dt><?php _e( 'Your e-mail:', 'dnxcf' ); ?></dt>
					<dd><?php echo $dnxcf_posted['dnxcf_email']; ?></dd>
					<dt><?php _e( 'Subject of your message:', 'dnxcf' ); ?></dt>
					<dd><?php echo $dnxcf_posted['dnxcf_subject']; ?></dd>
					<dt><?php _e( 'Text of your Message:', 'dnxcf' ); ?></dt>
					<dd><blockquote><?php echo wptexturize( wpautop( $dnxcf_posted['dnxcf_message'] ) ); ?></blockquote></dd>
				</dl>
			</p>
			<p><?php _e( 'we also collected some data for tecnical reasons.', 'dnxcf' ); ?></p>
			<p>
				<dl>
					<dt><?php _e( 'Your IP address:', 'dnxcf' ); ?></dt>
					<dd><?php echo $dnxcf_hst; ?></dd>
					<dt><?php _e( 'Your Browser:', 'dnxcf' ); ?></dt>
					<dd><?php echo $dnxcf_ua; ?></dd>
				</dl>
			</p>
			<?php } else { ?>
			<p id="dnxcf_result_failure"><?php printf( __( 'there was a problem processing your email. Please contact the <a href="mailto:%s">administrator</a>.', 'dnxcf' ), get_bloginfo( 'admin_email' ) ); ?></p>
			<?php } ?>

			<?php
		} else { // Houston we have a problem, spammer detected
				// we might want to use the data we have and send a mail to the admin just in case...
			?>
	<p id="dnxcf_spammer"><?php _e( 'looks like you don\'t belong here. We don\'t like spammers. Go away now!', 'dnxcf' ); ?></p>
			<?php
		} // end check for wp_nonce
	} else { // the post hasn't been submitted. Let's show the form
		global $dnxcf_options;
		$dnxcf_options = get_option( 'dnxcf_options' );
		?>
	<!-- begin #dnxcf_form -->
	<form id="dnxcf_form" method="post" action="<?php echo htmlentities( $_SERVER['REQUEST_URI'] ); ?>">
		<?php
		wp_nonce_field( 'dnxcf_submit_' . $dnxcf_form_id, 'dnxcf_form_' . $dnxcf_pid, true, true );
		if ( ! empty( $dnxcf_options['dnxcf_apikey'] ) ) :
			?>
		<h4><?php _e( 'Our location', 'dnxcf' ); ?></h4>
		<div id="dnxcf_gmap"></div>
		<?php endif; ?>
		<p class="comment-notes"><?php _e( 'Required fields are marked ', 'dnxcf' ); ?><span class="required">*</span></p>
		<fieldset id="dnxcf_formwrap">
		<?php if ( $dnxcf_options['dnxcf_privacy'] ) : ?>
			<fieldset id="dnxcf_privacy">
				<h4><?php _e( 'Privacy:', 'dnxcf' ); ?></h4>
				<div class="policy"><?php echo wpautop( wptexturize( $dnxcf_options['dnxcf_privacy'] ) ); ?></div>
			</fieldset>
		<?php endif; ?>
			<fieldset id="dnxcf_personal">
				<h4><?php _e( 'Personal Informations:', 'dnxcf' ); ?></h4>
				<p class="dnxcf-name">
					<label class="genericon genericon-user" for="name"><span class="screen-reader-text"><?php _e( 'Full Name', 'dnxcf' ); ?></span><span class="required">*</span></label>
					<input name="dnxcf_name" id="name" size="35" maxlength="40" type="text" placeholder="<?php _e( 'name', 'dnxcf' ); ?>" required autocomplete="name">
				</p>
				<p class="dnxcf-email">
					<label class="genericon genericon-mail" for="email"><span class="screen-reader-text"><?php _e( 'email address', 'dnxcf' ); ?></span><span class="required">*</span></label>
					<input name="dnxcf_email" id="email" size="35" maxlength="50" type="email" placeholder="<?php _e( 'e-mail', 'dnxcf' ); ?>" required autocomplete="email">
				</p>
				<p class="dnxcf-website">
					<label for="website" class="genericon genericon-website"><span class="screen-reader-text"><?php _e( 'website', 'dnxcf' ); ?></span></label>
					<input name="dnxcf_website" id="website" size="35" maxlength="50" type="url" placeholder="<?php _e( 'website', 'dnxcf' ); ?>" autocomplete="url">
				</p>
			</fieldset>
			<fieldset id="dnxcf_message">
				<h4><?php _e( 'your message:', 'dnxcf' ); ?></h4>
				<p class="dnxcf-subject">
					<label class="genericon genericon-tag" for="subject"><span class="screen-reader-text"><?php _e( 'subject', 'dnxcf' ); ?></span><span class="required">*</span></label>
					<select name="dnxcf_subject" id="subject" required>
					<?php
					global $dnxcf_options;
					$dnxcf_options = get_option( 'dnxcf_options' );
					$subject_options = $dnxcf_options['dnxcf_subject'];
					foreach ( $subject_options as $option ) {
						echo '<option value="' . $option . '">' . $option . '</option>';
					}
					?>
					</select>
				</p>
				<p class="dnxcf-message">
					<label class="genericon genericon-comment" for="message"><span class="screen-reader-text"><?php _e( 'message', 'dnxcf' ); ?></span><span class="required">*</span></label>
					<textarea name="dnxcf_message" id="message" cols="60" rows="12" placeholder="<?php _e( 'Comment Here', 'dnxcf' ); ?>" required></textarea>
				</p>
			</fieldset>
			<fieldset id="dnxcf_send">
				<input type="submit" name="<?php echo $dnxcf_send_value; ?>" id="<?php echo $dnxcf_send_value; ?>" value="<?php _e( 'send message', 'dnxcf' ); ?>">
			</fieldset>
		</fieldset><!-- #formwrap -->
	</form>
	<!-- end #dnxcf_form -->
		<?php

	} // end check for post submission
} // end dnxcf_display_form()
?>