<?php 

$form_your_email =' andrei@vanillacircus.co.uk, b.sykes@vanillacircus.co.uk';// <<=== update to your email address (all enquiries)

session_start();

$form_visitor_email = '';
$message = '';
$first_name = '';
$address = '';
$tel = '';
if(isset($_POST['submit']))
{
	
	
	$first_name = $_POST['text-944'];

	$tel = $_POST['tel-124'];
	$form_visitor_email = $_POST['your-email'];
	$message = $_POST['your-message'];

		///------------Do Validations-------------
	if(empty($first_name))
	{
		$form_errors .= "\n Please fill in your Name.";	
	}
	if(strpos($message,'http://') !== false){
		$form_errors .= "\n Please do not include any links or urls in your content.";
	}
	

	if(empty($form_visitor_email))
	{
		$form_errors .= "\n Please fill in your Email.";	
	}
	
		if(empty($tel))
	{
		$form_errors .= "\n Please fill in your Telephone.";	
	}

	

	if(IsInjected($form_visitor_email))
	{
		$form_errors .= "\n Bad email value!";
	}

	
	//do the state selection
	
	
	if(empty($form_errors))
	{	$_SESSION['visitor_name']=$first_name;
		//send the email
		$form_to = $form_your_email;
		$form_subject="Hurlingham Clinic Enquiry";
		$form_from = $form_visitor_email;
		$form_ip = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : '';
		
		$form_body = '<div align="center">'.		
		'<table border="1" cellspacing="5" cellpadding="5" width="80%">'.
		'<tr><td nowrap="nowrap" colspan="2" ><p align="center">Hurlingham Clinic Enquiry</p>'.
		
  '<tr><td nowrap="nowrap" bgcolor="#CCCCCC"><p>Name</p>'.
    '<td width="100%"><p>'."$first_name".'&nbsp;</p>'.
	
  '<tr><td nowrap="nowrap" bgcolor="#CCCCCC"><p>e-mail address</p>'.
    '<td width="100%"><p>'."$form_visitor_email".'&nbsp;</p>'.

	
 '<tr><td nowrap="nowrap" bgcolor="#CCCCCC"><p>Telephone </p>'.
   '<td width="100%"><p>'."$tel".'&nbsp;</p>'.

		 '<tr><td nowrap="nowrap" bgcolor="#CCCCCC"><p>Further  description</p>'.
   '<td width="100%"><p>'."$message".'</p>'.
	
  '<tr><td nowrap="nowrap" bgcolor="#CCCCCC"><p>Request IP</p>'.
    '<td width="100%"><p>'."$form_ip".'&nbsp;</p></table>'.
	'</div>';
		
		$visitor_body="";
		
		$form_headers = "From: $form_from \r\n";
		$form_headers .= "Reply-To: $form_visitor_email \r\n";
		$form_headers .= "MIME-Version: 1.0\r\n";
		$form_headers .= "Content-Type: text/html; charset=utf-8 \r\n";
		
		mail($form_to, $form_subject, $form_body,$form_headers);
		
		
$visitor_body='';
		$form_headers = "From: no-reply@rubbishclearance.me.uk \r\n";
		
		$form_headers .= "MIME-Version: 1.0\r\n";
		$form_headers .= "Content-Type: text/html; charset=utf-8 \r\n";
$visitor_subject='Thank you for contacting Hurlingham Clinic';

//mail($form_visitor_email, $visitor_subject, $visitor_body,$form_headers);
		header('Location: /thank-you.php'); 
	}
}

// Function to validate against any email injection attempts
function IsInjected($form_str)
{
  $form_injections = array('(\n+)',
              '(\r+)',
              '(\t+)',
              '(%0A+)',
              '(%0D+)',
              '(%08+)',
              '(%09+)'
              );
  $form_inject = join('|', $form_injections);
  $form_inject = "/$form_inject/i";
  if(preg_match($form_inject,$form_str))
    {
    return true;
  }
  else
    {
    return false;
  }
}
?>