Просмотр файла darkworld/mail.php

<?
include_once("files/zag.php");
if (md5($pas)==$password && $log==$login && $log!=="" && md5($pas)!=="") {
if(getenv("HTTP_X_FORWARDED_FOR")){ $ip = getenv("HTTP_X_FORWARDED_FOR"); }else{
if(getenv("REMOTE_ADDR")) $ip = getenv("REMOTE_ADDR");}
$ip=htmlspecialchars(stripslashes($ip));
$brow=htmlspecialchars(stripslashes(getenv('HTTP_USER_AGENT')));
$brow=strtok($brow,'/');

$ipone=explode(".",$ip);

$iptwo="$ipone[0].$ipone[1].$ipone[2]";

$file=file("data/ban.dat");
$total=count($file);
for($i=0; $i<$total; $i++){
$data = explode("||",$file[$i]);

if($data[0]==$iptwo){
$time=time()-86400;
if($data[1]>$time){echo"<small>Вы забанены на 24 часа!</small>"; echo "</p></card></wml>"; exit; }
}}

switch(@$go) {

default:

echo"<small>&#x41D;&#x430;&#x43F;&#x438;&#x441;&#x430;&#x442;&#x44C; &#x43F;&#x438;&#x441;&#x44C;&#x43C;&#x43E;:</small><br/><br/>";
echo"<small><b>Обязательно указывайте свой e-mail! В игровую почту мы не отвечаем!</b></small><br/>";
echo "<small>&#x41E;&#x431;&#x440;&#x430;&#x442;&#x43D;&#x44B;&#x439; &#x430;&#x434;&#x440;&#x435;&#x441;:</small><br/>";
echo "<input name=\"email\" maxlength=\"50\" title=\"email\"/><br/>";
echo "<small>&#x41F;&#x438;&#x441;&#x44C;&#x43C;&#x43E;:</small><br/>";
echo "<input name=\"text\" maxlength=\"200\" title=\"text\"/><br/>";

echo "<small>&#x41A;&#x43E;&#x43C;&#x443;:</small><br/><select name=\"send\">
<option value=\"admin\">&#x410;&#x434;&#x43C;&#x438;&#x43D;&#x438;&#x441;&#x442;&#x440;&#x430;&#x442;&#x43E;&#x440;&#x443;</option></select>
<br/>";

echo "<small><anchor title=\"go\">OK<go href=\"mail.php?go=go&amp;log=".$log."&amp;pas=".$pas."&amp;go=to\" method=\"post\">";
echo "<postfield name=\"text\" value=\"$(text)\"/>";
echo "<postfield name=\"email\" value=\"$(email)\"/>";
echo "<postfield name=\"send\" value=\"$(send)\"/>";
echo "<postfield name=\"login\" value=\"$log\"/>";
echo "</go></anchor></small><br/>";
break;

case 'to':

if(empty($_POST[text])){echo"<small>&#x412;&#x44B; &#x43D;&#x435; &#x432;&#x432;&#x435;&#x43B;&#x438; &#x441;&#x43E;&#x43E;&#x431;&#x449;&#x435;&#x43D;&#x438;&#x435;.</small>"; include_once"files/down.php"; exit; }
if(empty($_POST[email])){echo"<small>&#x412;&#x44B; &#x43D;&#x435; &#x432;&#x432;&#x435;&#x43B;&#x438; &#x441;&#x432;&#x43E;&#x439; e-mail.</small>"; include_once"files/down.php"; exit; }
if(empty($_POST[send])){echo"<small>&#x412;&#x44B; &#x43D;&#x435; &#x432;&#x44B;&#x431;&#x440;&#x430;&#x43B;&#x438; &#x43A;&#x43E;&#x43C;&#x443; &#x43E;&#x442;&#x43F;&#x440;&#x430;&#x432;&#x43B;&#x44F;&#x442;&#x44C; &#x43F;&#x438;&#x441;&#x44C;&#x43C;&#x43E;.</small>"; include_once"files/down.php"; exit; }

if($send=="admin"){$to="admin@dark-world.net.ru";}
if($send=="support"){$to="support@dark-world.net.ru";}


$text = htmlspecialchars(stripslashes($_POST[text]));
$send = htmlspecialchars(stripslashes($_POST[send]));
$login = htmlspecialchars(stripslashes($_POST[login]));
$email = htmlspecialchars(stripslashes($_POST[email]));

include("files/function.php");

$text=utf_to_win($text);

$text = convert_cyr_string($text, 'w','k');

$name="$email";

$mess="$piz";

$adds = "From: \"".$name."\" <".$name.">\n"; 

$adds .= "X-sender: \"".$name."\" <".$name.">\n";
$adds .= "Content-Type: text/plain; charset=koi8-r\n";   

$adds .= "MIME-Version: 1.0\r\n";
$adds .= "Content-Transfer-Encoding: 8bit\r\n";
$adds .= "X-Mailer: PHP v.".phpversion();

mail("$to", "$login", "$text", "$adds");

echo"<small>&#x412;&#x430;&#x448;&#x435; &#x43F;&#x438;&#x441;&#x44C;&#x43C;&#x43E; &#x443;&#x441;&#x43F;&#x435;&#x448;&#x43D;&#x43E; &#x43E;&#x442;&#x43F;&#x440;&#x430;&#x432;&#x43B;&#x435;&#x43D;&#x43E;! &#x412;&#x430;&#x43C; &#x43E;&#x442;&#x432;&#x435;&#x442;&#x44F;&#x442; &#x432; &#x442;&#x435;&#x447;&#x435;&#x43D;&#x438;&#x435; 5 &#x440;&#x430;&#x431;&#x43E;&#x447;&#x438;&#x445; &#x434;&#x43D;&#x435;&#x439;.</small>";

break;
}
}else{echo"<small>&#x41F;&#x430;&#x440;&#x43E;&#x43B;&#x44C; &#x438;&#x43B;&#x438; &#x43B;&#x43E;&#x433;&#x438;&#x43D; &#x43D;&#x435;&#x432;&#x435;&#x440;&#x435;&#x43D;!</small>";}

include_once"files/down.php";
?>