Geeklog Forums

function phpblock_suggest(){

   global $_TABLES, $_CONF, $_USER;

   $message="what would you like to see on the site?";
   $siteurl = $_CONF['site_url'];  

   if($_USER['username'] != ''){
               
                // we only need the email cos we know the username.  They have already passed validation and therefore
                // this cannot be spoofed.  So, only select email from the database.
                $result = DB_query("SELECT email FROM {$_TABLES['users']} WHERE username = '{$_USER['username']}'");
        $U = DB_fetchArray($result);
                $username = $_USER['username'];
                $useremail = $U[email];
                if($useremail == ''){
                        $useremail = 'anonymous@anonymous.com';
                        }
               
                }elseif($_USER['username'] == ''){
               
                $username = 'Guest';
                $useremail = 'anonymous@anonymous.com';
                }
               
        $display ="";
        $display .="<B>Hello $username, $message<B><BR>";
        $display .="";
        $display .="<BR>";
        $display .= "";
        $display .= "";
        $display .= "";
        $display .= "";
        $display .="";
        return $display;

}

<?php
   include('lib-common.php');
   global $_CONF;  
   $email="anonymous@anonymous.com";
   $adminemail = $_CONF['site_mail'];
   // Suggestion Box phpBlock created by Mr.GxBlock of http://www.gxblock.com Please don't remove this message.    
   echo COM_siteHeader();
   if($suggest != ''){
     if(strlen($suggest) < 10){
          echo COM_startBlock('Error');
          printf("Please go back and enter insert at unique message with at least 10 characters.");
          echo COM_endBlock();
          echo COM_siteFooter(true);
          exit();
          }
         if($suggest == '$textareamessage'){
          echo COM_startBlock('Error');
          printf("Please go back and enter insert at unique message with at least 10 characters.");
          echo COM_endBlock();
          echo COM_siteFooter(true);
          exit();
          }
          $suggest = str_replace(array(">", "<",""", "&"), array(">","<", """, "&"), $suggest);
          $suggest = stripslashes($suggest);
          $suggest = COM_checkWords($suggest);
      mail
      (
      "$adminemail",
      "From Your Suggestion Box - A New Request",
      "Name : $username from $REMOTE_ADDR
       Email : $useremail
       Note:
       $suggest
       ",
       "From: $useremailn"
      );
         echo COM_refresh($HTTP_REFERER);
         echo COM_startBlock('Your suggestion has been proccessed');
         printf("Thank you $username, you are now being transferring back to previous page. You may also <A HREF="$HTTP_REFERER">click here</A>.");
         echo COM_endBlock();
         echo COM_siteFooter(true);
         exit();
   }else{
         echo COM_startBlock('Error');
         printf("Please try again.");
         echo COM_endBlock();
         echo COM_siteFooter();
         exit();
   }
 ?>