اخواني هذا كود ارسال صفحة لصديق واعاني من السبام من خلاله فهل هنالك حل للتعديل فيه لكي لا يستغل من قبل السبامرز
كود:<?php include ('header.php'); if (!$_SERVER['HTTP_REFERER']) die("Sorry, but I did not get the address of the page to send. This information may be being blocked by your browser settings, or your firewall"); if ($_SERVER['REQUEST_METHOD']=="POST"){ $to_email=$_POST['to_email']; $to_name=$_POST['to_name']; $from_name=$_POST['from_name']; $from_email=$_POST['from_email']; $url_to_send=$_POST['url_to_send']; $errs=""; if (!$to_email) $errs.="No e-mail address to send to<br>\n"; elseif (!ValidEmail($to_email)) $errs.="The e-mail address $to_email does not appear to be valid<br>\n"; if (!$to_name) $errs.="No name to send to<br>\n"; if (!$from_name) $errs.="No name specified for sent by<br>\n"; if (!$from_email) $errs.="No e-mail address specified for sent by<br>\n"; elseif (!ValidEmail($from_email)) $errs.="The e-mail address $from_email does not appear to be valid<br>\n"; if (!$url_to_send) $errs.="URL to page not recieved. It may be blocked by your firewall or browser<br>\n"; elseif (strpos($url_to_send, $_SERVER['HTTP_HOST']) != 7) $errs.="Bad referring page.<br>\n"; if ($errs) echo "Could not send the link because of the following error(s):<br>\n$errs"; else { $body="Hi $to_name ! \n\nIt`s me , $from_name . I just read the funnies joke $sitetitle :) \n\nI think you may find it funny too . You can read the joke at the following address :\n\n$url_to_send \n\n\nCheers !"; if (@mail("$to_name <$to_email>","A page from $from_name", $body, "From: $from_name <$from_email>\n\n")) echo "The page was successfully sent! <br><br> <a href=view.php?joke=$joke>Go back</a>"; else echo "Sorry, but there was a problem and the link was not able to be sent."; } } else { ?> <table width="446" border="0" cellpadding="0" cellspacing="0"> <tr> <td height="19" valign="middle" background="img/topbar7.gif"> <center> <strong><font color="#FFFFFF">SEND THIS JOKE TO YOUR FRIEND</font></strong> <br> </center></td> </tr> <tr> <td bgcolor="#FFFF99" class=dott2><table width="446" border="0" cellspacing="2" cellpadding="2"> <form action="<?php echo $_SERVER['/PHP_SELF'];?>" method="post"> <input type="hidden" name="url_to_send" value="<?php echo $_SERVER['HTTP_REFERER'];?>"> <table align=center border="0" cellpadding="2" cellspacing="0"> <tr> <td>Friend's name</td> <td><input name="to_name" type="text" id="to_name"></td> </tr> <tr> <td>Friend's e-mail address </td> <td><input name="to_email" type="text" id="to_email"></td> </tr> <tr> <td>Your name</td> <td><input name="from_name" type="text" id="from_name"></td> </tr> <tr> <td>Your e-mail address </td> <td><input name="from_email" type="text" id="from_email"></td> </tr> <tr> <td colspan="2" align="center"><input type="submit" name="Submit" value="Send"></td> </tr> </table> </form> </td> </tr> <tr> <td><img src="img/bottombar.gif" width="448" height="18"></td> </tr> </table> <?php } function ValidEmail($addr){ list($local, $domain) = explode("@", $addr); $pattern_local = '^([0-9a-z]*([-|_]?[0-9a-z]+)*)(([-|_]?)\.([-|_]?)[0-9a-z]*([-|_]?[0-9a-z]+)+)*([-|_]?)$'; $pattern_domain = '^([0-9a-z]+([-]?[0-9a-z]+)*)(([-]?)\.([-]?)[0-9a-z]*([-]?[0-9a-z]+)+)*\.[a-z]{2,4}$'; $match_local = eregi($pattern_local, $local); $match_domain = eregi($pattern_domain, $domain); return ($match_local && $match_domain && gethostbyname($domain)); } include ('footer.php'); ?>
رد مع اقتباس
