This is one I have:
<head>
<script type="text/javascript">
<!--
function reset() {
document.tellafriend.name.value="";
document.tellafriend.email.value="";
document.tellafriend.friendmail1.value="";
document.tellafriend.friendmail2.value="";
document.tellafriend.friendmail3.value="";
}
function validate(form) {
if (form.name.value.length==0) {
alert("vul je naam in, aub");
return false;
}
if (form.email.value.length==0) {
alert("vul je email adres in, aub");
return false;
}
if (form.friendmail1.value.length==0) {
alert("vul je vriends email adres in, aub");
return false;
}
return true;
}
//-->
</script>
body tag:
<body onload="reset()">
form in html:
<form name="tellafriend" action="tellafriend.php" method="post" onsubmit="return validate(this);">
<table border="0" cellpadding="10" cellspacing="0">
<tr><td>
* je naam:
</td><td>
<input size="30" class="input" name="name" style="border:1px solid #666666; width:250px">
</td></tr>
<tr><td>
* je email:
</td><td>
<input size="30" class="input" name="email" onFocus="clearDefault(this)" style="border:1px solid #666666; width:250px">
</td></tr>
<tr><td>
* email vriend 1
</td><td>
<input size="30" class="input" name="friendmail1" onFocus="clearDefault(this)" style="border:1px solid #666666; width:250px">
</td></tr>
<tr><td>
email vriend 2
</td><td>
<input size="30" class="input" name="friendmail2" onFocus="clearDefault(this)" style="border:1px solid #666666; width:250px">
</td></tr>
<tr><td>
email vriend 3
</td><td>
<input size="30" class="input" name="friendmail3" onFocus="clearDefault(this)" style="border:1px solid #666666; width:190px">
<INPUT TYPE="submit" class="input" NAME="submit" VALUE="zend" onclick="validate();" style="border: 1px solid #666666; background-color:white; height:17px; width:48px;">
</td></tr></table>
</form>
tellafriend.php
<?php
if(count($_POST)) {
foreach(array('friendmail1','friendmail2','friendmail3','email','name') as $key) $_POST[$key] = strip_tags($_POST[$key]);
if(!is_secure($_POST)) { die("Asta la vista Hacker");}
$emailto = "bert@ikke.be";
$esubject = "tell a friend is gebruikt";
$emailtext = "
$_POST[name] heeft de tell-a-friend form gebruikt. Zijn email adres is $_POST[email]
De vrienden zijn:
$_POST[friendmail1]
$_POST[friendmail2]
$_POST[friendmail3]
";
@mail("$emailto", $esubject, $emailtext, "From: $_POST[email]");
$thankyoupage = "index.html";
$tsubject = "$_POST[name] raadt je hetbestevoordeel.be aan";
$ttext = "
Hey,
$_POST[name] ( $_POST[email] ) raadt je deze site aan:
http://www.hetbestevoordeel.be
Zeker bezoeken !
";
@mail("$_POST[friendmail1],$_POST[friendmail2],$_POST[friendmail3]", $tsubject, $ttext, "FROM: $_POST[email]");
header("Location: $thankyoupage");
exit;
}
function is_secure($ar) {
$reg = "/(Content-Type|Bcc|MIME-Version|Content-Transfer-Encoding)/i";
if(!is_array($ar)) { return preg_match($reg,$ar);}
$incoming = array_values_recursive($ar);
foreach($incoming as $k=>$v) if(preg_match($reg,$v)) return false;
return true;
}
function array_values_recursive($array) {
$arrayValues = array();
foreach ($array as $key=>$value) {
if (is_scalar($value) || is_resource($value)) {
$arrayValues[] = $value;
$arrayValues[] = $key;
}
elseif (is_array($value)) {
$arrayValues[] = $key;
$arrayValues = array_merge($arrayValues, array_values_recursive($value));
}
}
return $arrayValues;
}
?>