PHP form - how to hide recipient address

[Tali]

Hi,

I have many pages sending to 1 php contact form. I'm passing recipient email address from a sending page:

<php>
<form action="../mail.php" method="post">
<input type="hidden" name="recipient" value="[e-mail]" />
<input type="hidden" name="company" value="Vend Rite Systems" />

    <div class="contact_row">
      <div class="contact_col1">Name<span class="red_text">*</span>:</div>
				<div class="contact_col2"><input class="formfield" name="realname" type="text" size="35" maxlength="50" /></div>
				<br class="clear" />
    </div>
    <div class="contact_row">
      <div class="contact_col1">Email<span class="red_text">*</span>:</div>
				<div class="contact_col2"><input class="formfield" name="email" type="text" size="35" maxlength="50" /></div>
				<br class="clear" />
    </div>
    <div class="contact_row">
      <div class="contact_col1">Phone no.<span class="red_text">*</span>:<br /></div>
				<div class="contact_col2"><input class="formfield" name="phone" type="text" size="35" maxlength="50" /></div>
				<br class="clear" />
    </div>
    <div class="contact_row">
      <div class="contact_col1">Message<span class="red_text">*</span>:<br /></div>
				<div class="contact_col2"><textarea class="formfield" name="text" cols="38" rows="5"></textarea><br /></div>
				<br class="clear" />
    </div>
    <div class="contact_row" align="right">
      <input class="formfield" type="submit" value="Send message" />	
    </div>
			</form>

</php>

The problem is - when looking at "view-->source" , you see recipient email address.
How is it possible to hide recipients email addresses?
This is my php form:
<php>
$subject = 'Form Submission from ';

$emailadd = $POST['recipient'];

$emailcompany = $POST['company'];

$realname = $POST['realname'];
$email = $POST['email'];
$phone = $POST['phone'];
$text = $POST['text'];
$url = '';

$req = '1';

$text = "Results from form $emailcompany:\n\n";

$space = ' ';
$line = '
';

if(!$email == "" && (!strstr($email,"@") || !strstr($email,".")))
{
echo "<h2>Enter valid e-mail</h2>\n";
$badinput = "<h2>Feedback was NOT submitted</h2>\n";
echo $badinput;
die ("Go back! ! ");
}

if(empty($realname) || empty($email) || empty($text )) {
echo "<h2>Fill in all fields</h2>\n";
die ("Go back! ! ");
}

foreach ($_POST as $key => $value)
{

$j = strlen($key);
	if ($j >= 20)
	{echo "Name of form element $key cannot be longer than 20 characters";die;}
$j = 20 - $j;
	for ($i = 1; $i <= $j; $i++)
	{$space .= ' ';}
$value = str_replace('\n', "$line", $value);
$conc = "{$key}:$space{$value}$line";
$text .= $conc;
$space = '  ';

}
mail($emailadd, $subject, $text, 'From: '.$emailadd.'');
mail($emailother, $subject, $text, 'From: '.$emailother.'');
echo "<font color='red'>You message was sent successfully</font>";
?>
</php>

Thank you in advace

Tali

[djjjozsi]

save the recipient in $_SESSION ...
Or you can use a normal variable.

$recipient = "whoknows@domain";
mail($recipient , ...);

[Tali]

Hi,

I have many pages sending to 1 php contact form. I'm passing recipient email address from a sending page:

<php>
<form action="../mail.php" method="post">
<input type="hidden" name="recipient" value="[e-mail]" />
<input type="hidden" name="company" value="Vend Rite Systems" />

<div class="contact_row">
<div class="contact_col1">Name<span class="red_text">*</span>:</div>
<div class="contact_col2"><input class="formfield" name="realname" type="text" size="35" maxlength="50" /></div>
<br class="clear" />
</div>
<div class="contact_row">
<div class="contact_col1">Email<span class="red_text">*</span>:</div>
<div class="contact_col2"><input class="formfield" name="email" type="text" size="35" maxlength="50" /></div>
<br class="clear" />
</div>
<div class="contact_row">
<div class="contact_col1">Phone no.<span class="red_text">*</span>:<br /></div>
<div class="contact_col2"><input class="formfield" name="phone" type="text" size="35" maxlength="50" /></div>
<br class="clear" />
</div>
<div class="contact_row">
<div class="contact_col1">Message<span class="red_text">*</span>:<br /></div>
<div class="contact_col2"><textarea class="formfield" name="text" cols="38" rows="5"></textarea><br /></div>
<br class="clear" />
</div>
<div class="contact_row" align="right">
<input class="formfield" type="submit" value="Send message" />
</div>
</form>
</php>

The problem is - when looking at "view-->source" , you see recipient email address.
How is it possible to hide recipients email addresses?
This is my php form:

<php>
$subject = 'Form Submission from ';
$emailadd = $_POST['recipient'];
$emailcompany = $_POST['company'];
$realname = $_POST['realname'];
$email = $_POST['email'];
$phone = $_POST['phone'];
$text = $_POST['text'];
$url = '';
$req = '1';

$text = "Results from form $emailcompany:\n\n";
$space = ' ';
$line = '
';

if(!$email == "" && (!strstr($email,"@") || !strstr($email,".")))
{
echo "<h2>Enter valid e-mail</h2>\n";
$badinput = "<h2>Feedback was NOT submitted</h2>\n";
echo $badinput;
die ("Go back! ! ");
}

if(empty($realname) || empty($email) || empty($text )) {
echo "<h2>Fill in all fields</h2>\n";
die ("Go back! ! ");
}

foreach ($_POST as $key => $value)
{

$j = strlen($key);
if ($j >= 20)
{echo "Name of form element $key cannot be longer than 20 characters";die;}
$j = 20 - $j;
for ($i = 1; $i <= $j; $i++)
{$space .= ' ';}
$value = str_replace('\n', "$line", $value);
$conc = "{$key}:$space{$value}$line";
$text .= $conc;
$space = ' ';
}
mail($emailadd, $subject, $text, 'From: '.$emailadd.'');
mail($emailother, $subject, $text, 'From: '.$emailother.'');
echo "<font color='red'>You message was sent successfully</font>";
?>
</php>

Thank you in advace

Tali

[Tali]

Thanks, but recipient address every time is different. I have about 100 pages with different email addresses, that send to mail.php

[djjjozsi]

start a session:

<?php
session_start();
// save the address in a session variable.
$_SESSION["recipient"]= "an email address";
?>

and in mail.php

<?php
session_start();
if(empty($_SESSION["recipient"]))
die("recipient is empty");

$emailadd = $_SESSION["recipient"];
// ...
?>

And use the real php bb tags around your php scripts, please. Its the first icon from the right side.

[Tali]

Thanks for the help
Really appreciate it.

Another question - is it possible to save into a file (csv, excel or txt format) users email addresses from contact form?

Thanks

Tali

[djjjozsi]

Its a better choice if you save them into a database.
However you need simple store, save the file outer from your public folder.

if(isset($_POST["email"]))
file_put_contents("../emails.txt" , htmlspecialchars($_POST["email"]) . "\n\r" , FILE_APPEND  );

[Tali]

Yes, to save it into database could be even better.
This line will create a file and save form to the file?

Thanks

[djjjozsi]

Yes it can make it, but only the $_POST["email"] only.

[Tali]

I tried it - it doesn't save any data. The file is empty

Thanks

[djjjozsi]

in the example, you filnd: "../emails.txt"

Lets correct this file to a real folder, and be sure its safe from the internet.

[Tali]

Yes, i changed the path - it's in the same folder, so i put just "emails.txt"
But nothing in there

[djjjozsi]

then you don't have permission to write.

[Tali]

yes, changed permissions to "write" in all the groups, it saves now.
Will it add a new email address every time and save the file?

Thanks

[Tali]

yes, i see it add and saves
Thanks for the help

[djjjozsi]

but notice that if i quess file names from your server and matched , i get all your email addresses. Lets add a "safe from web" folder, ask a new thread how to make one.

inserting into an email table (database ) makes this project a bit safer, with lots of advantages. And collecting email addresses without a warn in our contry is a crime. You should forewarn the visitor that his personal information will be logged.