#!/usr/local/bin/perl
#FILE: email_basic.pl - Version 1.32
#
#       This perl script generates both the HTML form and email message
#people wish to send you. This script requires "sendmail" to run.
#
#       To call this script, just call it as you would any other php
#script you have on your system. Example:
#       http://www.domain.com/cgi-bin/email_basic.pl
#
#REQUIREMENTS:
# 	1) This script expects its name to be "email_basic.pl". On some systems, you may need
#to change the file extension to ".cgi" depending on how your system is configured.
#	2) Sendmail is required
#	3) The standard CGI module is required
#	4) You should have a directory specified where perl stores file
#attachments temporarily. When this script terminates, the attachments
#should be deleted from your system by this script.
#
#ADDITIONAL FEATURES:
#	1) Dynamically specify the "subject" field through the query string. For example:
#http://www.yourdomain.com/cgi-bin/email_advanced.pl?subject=hello_world
#will cause the phrase "hello_world" to automatically show up as the subject for the email
#	2) Dynamically specify the "to" field through the query string. For example:
#http://www.yourdomain.com/cgi-bin/email_advanced.pl?to=someone@somewhere.com
#will cause the email to override the default destination address. Great feature if you need
#to send a certain form submittal to another email address
#	3) Dynamically specify the "from" field through the query string. For example:
#http://www.yourdomain.com/cgi-bin/email_advanced.pl?from=webmaster@thiscomputer.com
#will cause the email to override the default from address. Great feature if you want
#the email to come "from" another email address
#	4) Any combination of the above. For example:
#http://www.yourdomain.com/cgi-bin/email_advanced.pl?subject=hello&from=webmaster@thiscomputer.com
#	5) Multiple file attachments. The ability to add multiple file attachments instead of just one
#	6) Limit the file upload size. Can specify if there are any limitations to the file upload size, and
#if so, how big the allowed files are to be.
#	7) Style sheets. The ability to set (or link in) style sheet definitions to customize your
#HTML text to look like it does on the rest of your site!
#	8) Restrict file uploads by file type! Choose which extensions you want to allow to be uploaded!
#
####
#	If you want any of these additional features, you need to purchase the "advanced" version
#of this email script. Go to http://www.davelozinski.com/scripts/email for the juicy details. :)
####
#
#       Finally, this "basic" code is free, and comes with absolutely NO
#warranties, either expressed or implied. Feel free to do what you want
#with it. Feel free to build upon it. If you did not get this code
#from http://www.davelozinski.com, you don't have the original.
#
#REVISION HISTORY:
#		06/03/02		Version 1.32 - Corrected a "buffer"
#					attachment bug.
#		05/15/02		Version 1.31 - minor code enhancement
#		04/25/02		Version 1.3 - no modifications
#		02/01/02		Version 1.2 - minor modifications
#		09/28/01		Version 1.1
#		08/01/01		Original Version
#
#CONTACT INFORMATION:
#	http://www.davelozinski.com/cgi-bin/email_lozinski.pl
#
#Begin the customizable configurations: 

#The title of the web page and the text on the "submit" button  
$TITLE = "Send Me Email!";

#The background color of the web page, the normal text color, and the
#text color for the information that is required. Note that these can
#either be in hexidecimal format, or words as the settings below show.
#If you specify the color code in hex, it expects a leading '#'
#pound sign.
$BGCOLOR = "#000000";
$TEXT_COLOR_NORMAL = "#0088FF";
$REQUIRED_TEXT_COLOR = "yellow";

#The URL to a background picture for the web pages.
$BACKGROUND_URL = "";

#The URL to the executable directory where this script is located.
#DO NOT put a trailing slash '/' character!
$CGI_DIR = ".";

#Set to "1" if you want the optional fields shown in the email form.
#Set to "0" (zero) otherwise.  
$SHOW_OPTIONAL_FIELDS = 0;

#The email address where you want all the email from this page sent to if
#no destination email is supplied by the "to" parameter. NOTE THE BACKSLASH
#CHARACTER "\" BEFORE THE "@" CHARACTER! 
$DESTINATION_EMAIL = "destination_address\@some_domain.com";

#The email address that will be placed in the "from" field of all emails sent back to 
#the end user.
$FROM_EMAIL = "return_address\@yourdomain.com";

#Set to "1" if you want the optional file upload field shown in the email form.
#Set to "0" (zero) otherwise.  
#BE CAREFUL WHEN USING THIS FEATURE AS PEOPLE COULD POTENTIALLY EMAIL YOU
#VIRUSES! Of course, this is true of any email you receive, but allowing
#email attachments from strangers greatly increases this risk.
$SHOW_ATTACHMENT_FIELD = 1;

#Need to set the path to "sendmail"
$SENDMAIL = "/usr/bin/sendmail";

#Define the directory where uploaded files are		
#temporarily stored for attaching to the outgoing email.
#You need to provide a trailing slash "/" character!
#Also note that this directory should have "world" write permissions 
#so this script can actually save the file uploads!
$TEMPPATH = "/tmp/";

#####################################################################
######## NOTHING FROM HERE DOWN SHOULD NEED TO BE CONFIGURED ########
#####################################################################
######## Main body of code ########
use CGI; 
my $in = new CGI;
&StartHTML;
if (!$in->param("mail")) { 
	&PrintForm;
} else { 
	if (!(&check_form_data)) {
		if (&send_mail) {
			&reply_to_user;
		} else {
			print ("Your email was not sent.<BR>\n");
		}
	}
} 
&FinishHTML;
exit(0);

######## perl functions ########

########################
#sub StartHTML
#This function prints the start of the feedback form web page.
########################
sub StartHTML {
print ("Content-type: text/html\n\n");
print ("<HTML>
<HEAD>
<TITLE>$TITLE</TITLE>
</HEAD>
<BODY BGCOLOR=\"$BGCOLOR\" BACKGROUND=\"$BACKGROUND_URL\" TEXT=\"$TEXT_COLOR_NORMAL\">
");
}
########################

########################
#sub FinishHTML
#
#This function prints the end to the feedback form web page.
#If you have your own set of server-side include files you want
#to include, put the 
#<!--#include
#directive as appropriate.
########################
sub FinishHTML {
print ("<BR>
</BODY>
</HTML>
");
}
########################

########################
#sub PrintForm
#This function prints the HTML input form.
########################
sub PrintForm {
print ("
<FORM ENCTYPE=\"multipart/form-data\" ACTION=\"${CGI_DIR}/email_basic.pl\" METHOD=\"POST\">
<H2>$TITLE</H2>
<TABLE BORDER=\"0\" CELLPADDING=\"4\" CELLSPACING=\"2\">
<TR VALIGN=\"top\">
<TD>
<TABLE>
");
if ($SHOW_OPTIONAL_FIELDS) { 
		print ("<TR VALIGN=\"top\">
        <TD>Your name:</TD>
        <TD><INPUT TYPE=\"text\" NAME=\"users_name\"></TD>
        </TR>
		");
}
print ("<TR VALIGN=\"top\">
<TD><FONT COLOR=\"$REQUIRED_TEXT_COLOR\"><B>* Your email:</B></FONT></TD>
<TD><INPUT TYPE=\"text\" NAME=\"users_email\"></TD>
</TR>
<TR VALIGN=\"top\">
<TD COLSPAN=\"2\">
<FONT COLOR=\"$REQUIRED_TEXT_COLOR\">
<INPUT TYPE=\"checkbox\" NAME=\"keep_copy\" VALUE=\"1\" CHECKED>Have a copy of your message sent to you? </FONT>
</TD>
</TR>
</TABLE>
<BR>
");
if ($SHOW_OPTIONAL_FIELDS) {
		print <<__END_OF_HTML_CODE__;
        <TABLE>
        <TR VALIGN="top">
        <TD>Your country:</TD>
        <TD><INPUT TYPE="text" NAME="users_country"></TD>
        </TR>
        <TR VALIGN="top">
		<TD>Your State/Province:</TD>
		<TD><INPUT TYPE="text" NAME="state_address"></TD>
		</TR>
        </TABLE>
        <BR>
__END_OF_HTML_CODE__
}
print ("<FONT COLOR=\"$REQUIRED_TEXT_COLOR\"><B>* Subject of the message:</B></FONT>
<INPUT TYPE=\"text\" NAME=\"subject\" VALUE=\"\" SIZE=\"40\"><BR>
<BR>
<FONT COLOR=\"$REQUIRED_TEXT_COLOR\"><B>* Your message:</B></FONT><BR>
<TEXTAREA NAME=\"message\" ROWS=\"8\" COLS=\"70\"></TEXTAREA>
<BR>
");
### Print out the attachment input field ###
if ($SHOW_ATTACHMENT_FIELD) {
	print ("<BR>Attachment: <INPUT TYPE=\"file\" NAME=\"attach\"><BR>\n");
}
print ("<INPUT TYPE=\"hidden\" NAME=\"mail\" VALUE=\"1\"><BR>
<INPUT TYPE=\"submit\" VALUE=\"$TITLE\">
</TD>
</TR>
</TABLE>
</FORM>
<BR>
<FONT COLOR=\"$REQUIRED_TEXT_COLOR\"><B>*  - indicates a required field.</B></FONT><BR>
");

} #PrintForm
########################

########################
#This subroutine checks the user's input for any obvious
#errors/mistakes.
########################
sub check_form_data {

my $error = 0;

if ($in->param("users_email") !~ /\@/ || $in->param("users_email") !~ /\w/ ) {
    print ("You need to enter your email address.<BR><BR>\n");
	$error = 1;
} 
if ($in->param("subject") !~ /\w/) {
    print ("Your message cannot be sent without a subject.<BR><BR>\n");
	$error = 1;
} 
if ($in->param("message") !~ /\w/) {
    print ("You seemed to have forgotten to enter the email message you wish to send.<BR><BR>\n");
	$error = 1;
}
if ($in->param("subject") =~ /[\[\;\>\<\&\*\^\$\(\)\`\|\]\']/ ||
	$in->param("users_email") =~ /[\[\;\>\<\&\*\^\$\(\)\`\|\]\']/) {
    print ("For security reasons, you cannot have any of the following characters in your email or subject fields: [ ; < > & * ` | ]<BR><BR>\n");
	$error = 1;
}
return $error;

} #check_form_data 
########################


########################
#This subroutine returns a web page to the user confirming their email
######################## 
sub reply_to_user {

print ("<B><I>Thank you</I></B> for sending me email!<BR><BR>\n");
print ("Below is a copy of the information you sent me:<BR>\n");
print ("<DL>\n");
if ($in->param("users_name") ne "") {
	print ("<DT><B>Your name:</B>\n<DD>" . $in->param("users_name") . "<BR><BR>\n");
}
print ("<DT><B>Your email:</B>\n<DD>" . $in->param("users_email") . "<BR><BR>\n"); 
if ($in->param("users_country") ne "") {
	print ("<DT><B>Your country:</B>\n<DD>" . $in->param("users_country") . "<BR><BR>\n");
}
if ($in->param("state_address") ne "") {
	print ("<DT><B>Your state:</B>\n<DD>" . $in->param("state_address") . "<BR><BR>\n"); 
}
print ("<DT><B>Your message:</B>\n<DD>" . $in->param("message") . "<BR><BR>\n");
print ("</DL>\n");

} #reply_to_user
########################


########################
#This subroutine does the work of sending the emails
######################## 
sub send_mail {

my $error = 0;     #No error. If email could not be sent, will set to 1. 
$mailheaders = "";
$msg_body = "\n";

$mailheaders = "To: $DESTINATION_EMAIL\n";
$mailheaders .= "From: " . $in->param("users_email") . "\n";
$mailheaders .= "Subject: " . $in->param("subject") . "\n";

if ($in->param("users_name") ne "") {
	$msg_body .= $in->param("users_name") . " - ";
}
$msg_body .= $in->param("users_email") . " filled out the email form on your website.\n";
if ($in->param("users_country") ne "") {
	$msg_body .= "They are in the country of: " . $in->param("users_country") . "\n";
}
if ($in->param("state_address") ne "") {
	$msg_body .= "They are writing from the state of: " . $in->param("state_address") . "\n\n";
}
$msg_body .= "The follow is what they had to say:\n\n";
$msg_body .= $in->param("message") . "\n\n";

if ($in->param("attach") ne "" && $SHOW_ATTACHMENT_FIELD) {
	$file_name = $in->param("attach");
	$file_handle = $in->param("attach");
	$file_handle =~ s/^.*(\\|\/)//; # strip the remote path and keep the filename 
	if (open (ATTACHMENT, ">${TEMPPATH}$file_handle")) {
		while ($contents = read($file_name, $buffer, 3420)) { 
			print ATTACHMENT ($buffer); 
		} 
		close (ATTACHMENT); 
		chmod (0777, "${TEMPPATH}$file_handle");	#Set the attachment so anyone can delete it later, including this script
		&AddAttachment;
	} else {
		print ("Error! Could not save the attachment in \"$TEMPPATH\". Make sure this directory has appropriate write permissions!<BR>\n");
	} #if open ATTACHMENT
}  else {
	$mailheaders .= "\n";	#Extra newline after the subject to indicate start of body
	$msg_body = $mailheaders . $msg_body;
} #if there was an attachment

if (open (MESSAGE, "| $SENDMAIL -t ")) {
	#send the message to the destination address
	print MESSAGE ($msg_body . "\n");
	close(MESSAGE);

	#if the user wants a copy, build the return message
	if ($in->param("keep_copy")) {
		$mailheaders = "To: " . $in->param("users_email") . "\n";
		$mailheaders .= "From: $FROM_EMAIL\n";
		$mailheaders .= "Subject: " . $in->param("subject") . "\n";
		$msg_body = "The following is what you wrote from the ";
		$msg_body .= "\"$TITLE\" webpage...:\n\n";
		$msg_body .= $in->param("message") . "\n\n";
		if ($in->param("attach") ne "" && $SHOW_ATTACHMENT_FIELD) {
			&AddAttachment;
		}  else {
			$mailheaders .= "\n";	#Extra newline after the subject to indicate start of body
			$msg_body = $mailheaders . $msg_body;
		} #if there was an attachment
		#send the message to the user who submitted the form		
		if (open (MESSAGE, "| $SENDMAIL -t ")) {
			print MESSAGE ($msg_body . "\n");
			close(MESSAGE);
		} else {
			print ("An error occurred. \"$SENDMAIL\" could not be opened, and a message could not be sent to " . $in->param("users_email") . "!<BR>\n");
			$error = 1;
		}
	}
} else {
	print ("An error occurred. \"$SENDMAIL\" could not be opened!<BR>No emails have been sent!\n");
	$error = 1;
}
#Clean up by deleting the uploaded file from the system
if ($in->param("attach") ne "" && $SHOW_ATTACHMENT_FIELD) {
	unlink ("${TEMPPATH}$file_handle");
}
return !($error);

} #send_mail
########################

########################
#sub AddAttachment
#This subroutine adds the attachment to the email message
########################
sub AddAttachment { 

#Generate the random message "boundary" for attachments
my @boundaryv = (0..9, 'A'..'F');
srand(time ^ $$);
for (my $i = 0; $i++ < 24;) {
	$boundary .= $boundaryv[rand(@boundaryv)];
}
$mailheaders .= "X-Mailer: Lozinski Emailer\n";
$mailheaders .= "MIME-Version: 1.0\n";
$mailheaders .= "Content-Type: multipart/mixed; boundary=\"------------$boundary\"\n\n";
$mailheaders .= "This is a multi-part message in MIME format.\n";
$mailheaders .= "--------------$boundary\n";
$mailheaders .= "Content-Type: text/plain; charset=us-ascii\n";
$mailheaders .= "Content-Transfer-Encoding: 7bit\n\n";
$msg_body = $mailheaders . $msg_body;
$msg_body .= "\n--------------$boundary\n\n";
if ($in->uploadInfo($file_name)->{"Content-Type"} =~ /^text/i) { #If we're sending an ASCII-text file
	$msg_body .= "--------------$boundary\n";
	$msg_body .= "Content-Type: " . $in->uploadInfo($file_name)->{"Content-Type"} . " charset=us-ascii; name=\"$file_handle\"\n";
	$msg_body .= "Content-Transfer-Encoding: 7bit\n";
	$msg_body .= "Content-Disposition: attachment; filename=\"$file_handle\"\n\n";
	open (INPUT, "${TEMPPATH}$file_handle"); # should be readable, we changed permissions above
	while ($line = <INPUT>) { $msg_body .= $line; }
	close (INPUT);
} else { #We're sending a binary file
	$msg_body .= "--------------$boundary\n";
	$msg_body .= "Content-Type: " . $in->uploadInfo($file_name)->{"Content-Type"} . "; name=\"$file_handle\"\n";
	$msg_body .= "Content-Transfer-Encoding: base64\n";
	$msg_body .= "Content-Disposition: attachment; filename=\"$file_handle\"\n\n";
	my $buf; $/=0;
	open (INPUT, "${TEMPPATH}$file_handle"); # should be readable, we checked above [-r]
	binmode (INPUT);
	while(read(INPUT, $buf, 3420)) {
		$msg_body .= &encode_base64($buf);
	}
	close (INPUT);
}
$msg_body .= "\n--------------$boundary\n\n";

} # sub AddAttachment
########################

########################
#sub encode_base64
#This subroutine encodes any attachments in base64 for sending
########################
sub encode_base64 {

my @buffer = @_;
my $res = "";
my $eol = "\n";

pos($buffer[0]) = 0; 
while ($buffer[0] =~ /(.{1,45})/gs) {
	$res .= substr(pack('u', $1), 1);
	chop($res);
}
$res =~ tr|` -_|AA-Za-z0-9+/|;

### Fix padding at the end:
my $padding = (3 - length($buffer[0]) % 3) % 3;
$res =~ s/.{$padding}$/'=' x $padding/e if $padding;

### Break encoded string into lines of no more than 76 characters each:
$res =~ s/(.{1,76})/$1$eol/g if (length $eol);
return $res;
	
} #encode_base64
########################