Current File : /home/users/kundensystem/www/alt/kontakt.php

<?php
include './inc/header.php';

if(!isset($_SESSION['msg_user'])){
    ?><script>location.href="./login.php";</script><?php
    exit;
}

$msg='';
if(isset($_POST['rand'])&&$_POST['rand']!=''&&$_POST['rand']==$_SESSION['rand']){
    $fromname=$_POST['name'];
    $frommail=$_POST['email'];
    $subject=$_POST['subject'];
    $mailtext=$_POST['mailtext'];
    $ip = $_SERVER['REMOTE_ADDR'];

    $sql=mysqli_query($conn, "SELECT * FROM ".$dbtable36." 
                                    WHERE (status = 'email' AND val = '".$frommail."') 
                                       OR (status = 'ip' AND val = '".$ip."')");
    if(mysqli_num_rows($sql)>0){
        $msg='<div class="error-message"><b>Hinweis</b>: Diese Email bzw. IP ist gesperrt!</div>';
    } else if($_POST['spam_input']!=$_POST['spam_val']){
        $msg='<div class="error-message">Ihre Eingabe bei der Spam Kontrolle war ung&uuml;ltig!</div>';
    } else{
        eMailSenden(ADMINMAIL, $subject, $mailtext, $frommail);

        mysqli_query($conn, "INSERT INTO ".$dbtable9." 
                                    SET name = '".$fromname."',
                                        mail = '".$frommail."',
                                        ip  = '".$ip."',
                                        subject = '".replaceu($subject)."',
                                        message = '".replaceu($mailtext)."',
                                        admin_check = '0',
                                        datum = '".date('d.m.Y')."'");

        $msg='<div class="success-message"><b>Hinweis</b>: Ihre Nachricht wurde erfolgreich gesendet!</div>';
    }
}
?>
<div class="row">
  <div class="col-xl-3">
    <?php include './inc/sidebar.php'; ?>
  </div>
  <div class="col-xl-9">
        <div class="text-center page_title">Kontakt</div>
        <div class="border main-main">
            Über unser Kontaktformular können Sie uns jederzeit erreichen und uns Ihre Tipps, Wünsche, Verbesserungsvorschläge, Fragen oder Kritiken mitteilen!
            <?php
            if($msg!=''){
                echo '<div class="row mb"><div class="col-xl-12">'.$msg.'</div></div>';
            }
            ?>

            <br><br>
            <form method="post">
                <div class="row mb small_row">
                    <label class="col-sm-4 col-form-label col-form-label-sm">Ihre Name : </label>
                    <div class="col-sm-8">
                        <input type="text" class="form-control form-control-sm" name="name" required>
                    </div>
                </div>
                <div class="row mb small_row">
                    <label class="col-sm-4 col-form-label col-form-label-sm">eMail-Adresse : </label>
                    <div class="col-sm-8">
                        <input type="email" class="form-control form-control-sm" name="email" required>
                    </div>
                </div>
                <div class="row mb small_row">
                    <label class="col-sm-4 col-form-label col-form-label-sm"> Betreff : </label>
                    <div class="col-sm-8">
                        <input type="text" class="form-control form-control-sm" name="subject" required>
                    </div>
                </div>
                <div class="row mb small_row">
                    <div class="col-sm-12">
                        Der Text Ihrer Anfrage
                        <textarea class="form-control form-control-sm" name="mailtext" rows="7" required></textarea>
                    </div>
                </div>
                <br>
                <?php $spam=get_spame(); ?>
                <div class="row mb small_row">
                    <label class="col-sm-4 col-form-label col-form-label-sm"> Spamschutz : </label>
                    <div class="col-sm-8">
                        <?= $spam['text'];?> <input type="text" class="mtt" name="spam_input" required>
                        <input type="hidden" name="spam_val" value="<?= $spam['val'];?>">
                    </div>
                </div>
                <div class="row mb small_row">
                    <div class="col-sm-12 col-12">
                        <div class="error-message text-center">
                            <input type="checkbox" name="check" id="check">
                            Mit der Nutzung dieses Formulars erkl&auml;ren Sie sich mit der Speicherung und Verarbeitung Ihrer Daten durch diese Website einverstanden.
                        </div>
                    </div>
                </div>
                <br>
                <div class="row mb small_row">
                    <div class="col-sm-12 text-center">
                        <?php $rand=rand(); $_SESSION['rand']=$rand;?>
                        <input type="hidden" name="rand" value="<?= $rand;?>">
                        <input type="submit" value="Absenden" class="btn btn-primary" id="cont_submit" disabled>
                    </div>
                </div>
            </form>
            <br>
        </div>
  </div>
</div>

<?php include './inc/footer.php'; ?>
</div>
<script>
     function but_enable(){
         if($('#check').prop("checked") == true){
            $('#cont_submit').prop('disabled',false);
         } else {
            $('#cont_submit').prop('disabled',true);
         }
     }
     $('#check').click(function(){
         but_enable();
     })
</script>