İletişim Formu Sayfasında TR Karakter Sorunu

<?php


// for javascript in header file
define('IN_CONTACT', true);

define('IN_DNP', true);
require_once('./includes/global.php');

// ################################################################
$mode = sanitize($_GET['mode']);
$mode = (!in_array($mode, array('general', 'domain'))) ? 'general' : $mode;

// Are we contacting about a certain domain?
if ($mode == 'domain')
{
	// Valid ID?
	$domainid = (is_string($_GET['d'])) ? sanitize($_GET['d']) : intval($_GET['d']);

	if (!is('domain', $domainid))
	{
		redirect('index.php');
	}

	// Pull the domain and it's status.
	$getdomain = get_value('contact', $domainid);

	if (count($getdomain) == 0)
	{
		redirect('index.php');
	}

	$domain = $getdomain['domain'];
	$status = $getdomain['status'];

	unset($getdomain);

	// Has the domain been sold, or is it not for sale?
	if (in_array($status, array('Sold', 'Not For Sale')))
	{
		redirect('index.php');
	}
}

$result = '';

// ################################################################
// Process the form and send the email..
require_once('./includes/recaptcha.class.php');

$recaptcha = recaptcha::getInstance();
$recaptcha_error = NULL;

if (!empty($_POST['submit']))
{
	$name = sanitize($_POST['sender_name']);
	$email = sanitize($_POST['sender_email']);

	// If this is concerning a domain, we'll check for an offer.
	if ($mode == 'domain')
	{
		$offer = sanitize(str_replace($config->get('currency'), '', $_POST['sender_offer']));
		$offer = preg_replace('#\.[0-9]{2}$#', '', $offer);
		$offer = preg_replace('#([^0-9,]+)#', '', $offer);
	}
	else
	{
		// Otherwise, we need an email subject.
		$subject = sanitize($_POST['sender_subject']);
	}

	// Email body/message...
	$message = str_replace("\r\n", "\n", $_POST['sender_message']);
	$message = wordwrap(sanitize($message, false), 75);

	// reCAPTCHA - Just say no, to spam. :)
	$recaptcha_challenge = sanitize($_POST['recaptcha_challenge_field']);
	$recaptcha_response = sanitize($_POST['recaptcha_response_field']);

	/**
	* Create a session value for name, email, and message.
	* This way, if there's an error, a user won't lose what they've entered.
	*/
	$_SESSION['form'] = array(
		'name'    => $name,
		'email'   => $email,
		'message' => $message
	);

	// Holds any errors that may happen with entered data
	$errors = array();

	// We need to make sure all data is there/valid...
	if (empty($name) OR is('injection', $name))
	{
		$errors[] = 'Your name is required.';
	}

	if (empty($email))
	{
		$errors[] = 'Your email is required.';
	}

	if (empty($message))
	{
		$errors[] = 'A message is required.';
	}

	if (!is('email', $email) OR is('injection', $email))
	{
		$errors[] = 'Email is invalid.';
	}

	if ($mode == 'general' AND empty($subject))
	{
		$errors[] = 'A subject is required.';
	}

	if (is('spam', $message))
	{
		$errors[] = 'Sorry, but your message seemed a bit like spam.';
	}

	if (count($errors) > 0)
	{
		$result .= 'The following errors occurred:<br /><ul>';

		foreach ($errors AS $error)
		{
			$result .= "<li>$error</li>\n";
		}

		$result .= '</ul>';

		unset($errors);
	}
	else
	{
        $resp = $recaptcha->check_answer(get_ip(), $recaptcha_challenge, $recaptcha_response);

		if (!$resp->is_valid)
		{
			$recaptcha_error = $resp->error;
			$result .= 'reCAPTCHA: Incorrect. Try again.';
		}
		else
		{
			$recaptcha_error = NULL;

			$params = array(
				'name'    => $name,
				'email'   => $email,
				'ip'      => get_ip(),
				'message' => $message
			);

			if ($mode == 'domain')
			{
				$params['domain'] = $domain;
				$params['offer'] = (empty($offer) ? 'n/a' : $offer);
			}
			else
			{
				$params['subject'] = $subject;
			}

			require_once('./includes/emailer.class.php');

			$emailer = emailer::getInstance();
			$emailer->set_params($config->get('contactemail'), $email, ($mode == 'domain' ? "Domain Inquiry: $domain" : "Inquiry: $subject"));
			$emailer->use_template($params, ($mode == 'domain' ? 'email.tpl' : 'email_general.tpl'));

			if ($emailer->send())
			{
				$result .= "$name your message was sent. Your E-mail is important to us. We will try to reply within 2 business days. Thank you.";

				// Reset the session array
				$_SESSION['form'] = array(
					'name'    => '',
					'email'   => '',
					'message' => ''
				);
			}
			else
			{
				$result .= 'There seems to have been a problem sending the E-mail. Please try again.';
			}
		}
	}
}
else
{
	$_SESSION['form'] = array(
		'name'    => '',
		'email'   => '',
		'message' => ''
	);
}

// ################################################################
// Output page
$pagetitle = ($mode == 'domain') ? "Inquiring about $domain" : 'General Inquiry';

if ($mode == 'domain')
{
	include("$template/contact.php");
}
else
{
	include("$template/contact_general.php");
}

?>

<?php include ("header.php"); ?>

<div class="wrap">
<div class="container main">
<div class="bigintro">

				<span class="toptitles">Contact</span>
				<?php if ($result != ''): ?>
				<div id="result"><?php echo $result; ?></div>
				<?php endif; ?>
				<form action="./contact.php?mode=general" method="post" style="display: inline;" onsubmit="return validate_form('general');">
				<table class="pretty" style="width:908px;" cellspacing="0">
				<tbody>
				<tr class="odd">
					<td class="one"><label for="sender_name">Name:*</label></td>
					<td class="two"><input type="text" name="sender_name" id="sender_name" maxlength="100" value="<?php echo $_SESSION['form']['name']; ?>" /></td>
				</tr>
				<tr class="even">
					<td class="one"><label for="sender_email">E-mail:*</label></td>
					<td class="two"><input type="text" name="sender_email" id="sender_email" maxlength="100" value="<?php echo $_SESSION['form']['email']; ?>" /></td>
				</tr>
				<tr class="odd">
					<td class="one"><strong>Domain:</strong></td>
					<td class="two"><?php echo $domain; ?></td>
				</tr>
				<tr class="even">
					<td class="one"><label for="sender_offer">Offer:*</label></td>
					<td class="two"><input type="text" name="sender_offer" id="sender_offer" maxlength="10" /> <small>(optional - only <code>0-9</code> and <code>,</code> accepted. Eg: 1,000 (<?php echo $config->get('currency'); ?>1,000))</small></td>
				</tr>
				<tr class="odd">
					<td class="one"><label for="sender_subject">Subject:*</label></td>
					<td class="two">Domain Purchase Offer - <?php echo $domain['domain']; ?></td>
				</tr>
				<tr class="even">
					<td valign="top" class="one"><label for="sender_message">Message:*</label></td>
					<td class="two"><textarea name="sender_message" id="sender_message" rows="4" cols="35"><?php echo $_SESSION['form']['message']; ?></textarea></td>
				</tr>
				<tr class="odd">
					<td valign="top" colspan="2" class="one"><div align="center"><?php echo $recaptcha->get_html($recaptcha_error); ?></div></td>
				</tr>
				<tr class="even">
					<td colspan="2" class="two"><div align="center"><input type="submit" name="submit" value="Submit" class="button" /></div></td>
				</tr>
				</tbody>
				</table>
				</form>
<br />

</div><!--/bigintro-->
</div><!--/main-->
</div><!--/wrap-->

<?php include ("footer.php"); ?>

<?php include ("header.php"); ?>

<div class="wrap">
<div class="container main">
<div class="bigintro">

				<span class="toptitles">Contact</span>
				<?php if ($result != ''): ?>
				<div id="result"><?php echo $result; ?></div>
				<?php endif; ?>
				<form action="./contact.php?mode=general" method="post" style="display: inline;" onsubmit="return validate_form('general');">
				<table cellspacing="0" class="pretty" style="width:908px;">
				<tbody>
				<tr>
					<td class="one"><label for="sender_name">Name:*</label></td>
					<td class="two"><input type="text" name="sender_name" id="sender_name" maxlength="100" value="<?php echo $_SESSION['form']['name']; ?>" /></td>
				</tr>
				<tr>
					<td class="one"><label for="sender_email">E-mail:*</label></td>
					<td class="two"><input type="text" name="sender_email" id="sender_email" maxlength="100" value="<?php echo $_SESSION['form']['email']; ?>" /></td>
				</tr>
				<tr>
					<td class="one"><label for="sender_subject">Subject:*</label></td>
					<td class="two"><input type="text" name="sender_subject" id="sender_subject" maxlength="100" value="<?php echo $_SESSION['form']['subject']; ?>" />
					</td>
				</tr>
				<tr>
					<td valign="top" class="one"><label for="sender_message">Message:*</label></td>
					<td class="two"><textarea name="sender_message" id="sender_message" rows="4" cols="35"><?php echo $_SESSION['form']['message']; ?></textarea></td>
				</tr>
				<tr>
					<td valign="top" colspan="2" class="one"><div align="center"><?php echo $recaptcha->get_html($recaptcha_error); ?></div></td>
				</tr>
				<tr>
					<td colspan="2" class="two"><div align="center"><input type="submit" name="submit" value="Submit" class="button" /></div></td>
				</tr>
				</tbody>
				</table>
				</form>
<br />

</div><!--/bigintro-->
</div><!--/main-->
</div><!--/wrap-->

<?php include('footer.php'); ?>

<?php
// for javascript in header file
define('IN_CONTACT', true);

define('IN_DNP', true);
require_once('./includes/global.php');

// ################################################################
$mode = sanitize($_GET['mode']);
$mode = (!in_array($mode, array('general', 'domain'))) ? 'general' : $mode;

// Are we contacting about a certain domain?
if ($mode == 'domain')
{
	// Valid ID?
	$domainid = (is_string($_GET['d'])) ? sanitize($_GET['d']) : intval($_GET['d']);

	if (!is('domain', $domainid))
	{
		redirect('index.php');
	}

	// Pull the domain and it's status.
	$getdomain = get_value('contact', $domainid);

	if (count($getdomain) == 0)
	{
		redirect('index.php');
	}

	$domain = $getdomain['domain'];
	$status = $getdomain['status'];

	unset($getdomain);

	// Has the domain been sold, or is it not for sale?
	if (in_array($status, array('Sold', 'Not For Sale')))
	{
		redirect('index.php');
	}
}

$result = '';

// ################################################################
// Process the form and send the email..
require_once('./includes/recaptcha.class.php');

$recaptcha = recaptcha::getInstance();
$recaptcha_error = NULL;

if (!empty($_POST['submit']))
{
	$name = sanitize($_POST['sender_name']);
	$email = sanitize($_POST['sender_email']);

	// If this is concerning a domain, we'll check for an offer.
	if ($mode == 'domain')
	{
		$offer = sanitize(str_replace($config->get('currency'), '', $_POST['sender_offer']));
		$offer = preg_replace('#\.[0-9]{2}$#', '', $offer);
		$offer = preg_replace('#([^0-9,]+)#', '', $offer);
	}
	else
	{
		// Otherwise, we need an email subject.
		$subject = sanitize($_POST['sender_subject']);
	}

	// Email body/message...
	$message = str_replace('\r\n', '\n', $_POST['sender_message']);
	$message = wordwrap(sanitize($message, false), 75);

	// reCAPTCHA - Just say no, to spam. :)
	$recaptcha_challenge = sanitize($_POST['recaptcha_challenge_field']);
	$recaptcha_response = sanitize($_POST['recaptcha_response_field']);

	/**
	* Create a session value for name, email, and message.
	* This way, if there's an error, a user won't lose what they've entered.
	*/
	$_SESSION['form'] = array(
		'name'    => $name,
		'email'   => $email,
		'message' => $message
	);

	// Holds any errors that may happen with entered data
	$errors = array();

	// We need to make sure all data is there/valid...
	if (empty($name) OR is('injection', $name))
	{
		$errors[] = 'Your name is required.';
	}

	if (empty($email))
	{
		$errors[] = 'Your email is required.';
	}

	if (empty($message))
	{
		$errors[] = 'A message is required.';
	}

	if (!is('email', $email) OR is('injection', $email))
	{
		$errors[] = 'Email is invalid.';
	}

	if ($mode == 'general' AND empty($subject))
	{
		$errors[] = 'A subject is required.';
	}

	if (is('spam', $message))
	{
		$errors[] = 'Sorry, but your message seemed a bit like spam.';
	}

	if (count($errors) > 0)
	{
		$result .= 'The following errors occurred:<br /><ul>';

		foreach ($errors AS $error)
		{
			$result .= '<li>$error</li>\n';
		}

		$result .= '</ul>';

		unset($errors);
	}
	else
	{
        $resp = $recaptcha->check_answer(get_ip(), $recaptcha_challenge, $recaptcha_response);

		if (!$resp->is_valid)
		{
			$recaptcha_error = $resp->error;
			$result .= 'reCAPTCHA: Incorrect. Try again.';
		}
		else
		{
			$recaptcha_error = NULL;

			$params = array(
				'name'    => $name,
				'email'   => $email,
				'ip'      => get_ip(),
				'message' => $message
			);

			if ($mode == 'domain')
			{
				$params['domain'] = $domain;
				$params['offer'] = (empty($offer) ? 'n/a' : $offer);
			}
			else
			{
				$params['subject'] = $subject;
			}

			require_once('./includes/emailer.class.php');

			$emailer = emailer::getInstance();
			$emailer->set_params($config->get('contactemail'), $email, ($mode == 'domain' ? 'Domain Inquiry: $domain' : 'Inquiry: $subject'));
			$emailer->use_template($params, ($mode == 'domain' ? 'email.tpl' : 'email_general.tpl'));

			if ($emailer->send())
			{
				$result .= '$name your message was sent. Your E-mail is important to us. We will try to reply within 2 business days. Thank you.';

				// Reset the session array
				$_SESSION['form'] = array(
					'name'    => '',
					'email'   => '',
					'message' => ''
				);
			}
			else
			{
				$result .= 'There seems to have been a problem sending the E-mail. Please try again.';
			}
		}
	}
}
else
{
	$_SESSION['form'] = array(
		'name'    => '',
		'email'   => '',
		'message' => ''
	);
}
?>

=====================================================================
      This is an automated message from DNS Portfolio.
=====================================================================

A visitor to your portfolio has found a domain that interests them:

{domain}

--------------------------------------------
Name : {name}
Email: {email}
Offer: {offer}
IP   : {ip}
--------------------------------------------

Message:

{message}

=====================================================================
      This is an automated message from DNS Portfolio.
=====================================================================

A visitor to your portfolio has sent you a general inquiry.

--------------------------------------------
Name   : {name}
Email  : {email}
Subject: {subject}
IP     : {ip}
--------------------------------------------

Message:

{message}

<?php


if (!defined('IN_DNP'))
{
	die('You\'re not supposed to be here.');
}

/**
* Class to send email. Based on a class by phpBB2.
*/
class emailer
{
	/**
	* Class instance, start of implementing Singleton pattern.
	*
	* private, cannot be accessed directly outside of this class
	*
	* @var object
	*/
	private static $instance;

	/**
	* The email recipient
	*
	* private, cannot be accessed directly outside of this class.
	*
	* @var string
	*/
	private $to;

	/**
	* The email subject
	*
	* private, cannot be accessed directly outside of this class.
	*
	* @var string
	*/
	private $subject;

	/**
	* The email body
	*
	* private, cannot be accessed directly outside of this class.
	*
	* @var string
	*/
	private $body;

	/**
	* Who the email is from
	*
	* private, cannot be accessed directly outside of this class.
	*
	* @var string
	*/
	private $from;

	/**
	* Host/domain
	*
	* private, cannot be accessed directly outside of this class.
	*
	* @var string
	*/
	private $host;

	/**
	* Extra email headers
	*
	* private, cannot be accessed directly outside of this class.
	*
	* @var string
	*/
	private $extra_headers;

	/**
	* Constructor. Sets host and initiates extra_headers.
	*
	* private, cannot be accessed directly outside of this class.
	*
	* @param  void
	* @return void
	*/
	private function __construct()
	{
		$this->host = preg_replace('#^www\.#i', '', dnp_getenv('SERVER_NAME'));
		$this->extra_headers = '';
	}

	/**
	* Creates an instance of the class. We do it this way to try and
	* implement the Singleton pattern.
	*
	* @param  void
	* @return object
	*/
	public static function getInstance()
	{
		if (!self::$instance)
		{
			self::$instance = new self();
		}
		return self::$instance;
	}

	/**
	*/
	private function __clone() {}

	/**
	* Sets email parameters (To, From, and Subject)
	*
	* @param  string  $to       Recipient email
	* @param  string  $from     Who the email is from
	* @param  string  $subject  Subject of the email
	* @return void
	*/
	public function set_params($to, $from, $subject)
	{
		$this->to = trim($to);
		$this->from = trim($from);
		$this->from = (is_null($from)) ? "noreply@{$this->host}" : $this->from;
		$this->subject = trim($subject);
	}

	/**
	* Allows us to set extra headers aside from the standard ones in the send() function.
	*
	* @param  string  $headers  Extra headers seperated by \n
	* @return void
	*/
	public function extra_headers($headers = '')
	{
		$this->extra_headers .= str_replace("\r\n", "\n", $headers);
	}

	/**
	* Allows us to use templates for the email body
	*
	* @param  array   $tpl_vars  An array of var => replacement
	* @param  string  $tpl_file  Template filename
	* @return void
	*/
	public function use_template($tpl_vars, $tpl_file)
	{
		$tpl_file = (defined('IN_ADMIN') ? '..' : '.') . "/templates/$tpl_file";

		if (!is_array($tpl_vars) OR count($tpl_vars) == 0)
		{
			trigger_error('emailer->use_template - <code>$tpl_vars</code> must be an array, or is empty.', E_USER_ERROR);
		}

		if (!is_file($tpl_file))
		{
			trigger_error("emailer->use_template - '<code>$tpl_file</code>' is not a file or does not exist.", E_USER_ERROR);
		}

		if (!($fp = @fopen($tpl_file, 'r')))
		{
			trigger_error("emailer->use_template - Could not open template file: '<code>$tpl_file</code>'", E_USER_ERROR);
		}

		$this->body = fread($fp, filesize($tpl_file));

		foreach ($tpl_vars AS $var => $content)
		{
			$this->body = str_replace('{' . $var . '}', $content, $this->body);
		}
		fclose($fp);
	}

	/**
	* Wrapper of the mail() function, which also sets standard email headers,
	* plus any extra ones we may add in script via the extra_headers() function.
	*
	* @param  void
	* @return boolean  true if the email is sent, false if not.
	*/
	public function send()
	{
		$headers = "From: {$this->from}\n";
		$headers .= "Reply-To: {$this->from}\n";
		$headers .= "Return-Path: {$this->from}\n";
		$headers .= "Sender: {$this->from}\n";
		$headers .= "Message-ID: <" . dnp_hash(uniqid(time())) . "@{$this->host}>\n";
		$headers .= "MIME-Version: 1.0\n";
		$headers .= "Content-type: text/plain; charset=8859-9\n";
		$headers .= "Content-transfer-encoding: 8bit\n";
		$headers .= "Date: " . date('r', time()) . "\n";
		$headers .= "X-Priority: 3\n";
		$headers .= "X-MSMail-Priority: Normal\n";
		$headers .= "X-Mailer: Domain Name Portfolio via PHP/" . PHP_VERSION . "\n";
		$headers .= "X-MimeOLE: Produced By Domain Name Portfolio\n";

		if ($this->extra_headers != '')
		{
			$headers .= trim($this->extra_headers) . "\n";
		}

		if (@mail($this->to, $this->subject, $this->body, $headers))
		{
			return true;
		}
		return false;
	}
}

?>

<?php



if (!defined('IN_DNP'))
{
	die('You\'re not supposed to be here.');
}

/**
* Strip any unsafe tags/chars/attributes from input values.
*
* @param  string   $value       Value to be cleaned
* @param  boolean  $strip_crlf  Strip \r\n ?
* @param  boolean  $is_email    If the value is an email, pass it through the email sanitize filter.
* @return string                Sanitized value.
*/
function sanitize($value, $strip_crlf = true, $is_email = false)
{
	$value = preg_replace('@&(?!(#[0-9]+|[a-z]+);)@si', '', $value);

	if ($is_email)
	{
		/**
		* PHP versions older than 5.2.11 have bugs in FILTER_SANITIZE_EMAIL
		* It allows characters that shouldn't be allowed.
		*
		* We will only sanitize the email if they are using 5.2.11 and greater.
		* This shouldn't pose a problem on < 5.2.11 cause we validate the email
		* later on anyway.
		*/
		if (version_compare(PHP_VERSION, '5.2.11', '>='))
		{
			$value = filter_var($value, FILTER_SANITIZE_EMAIL);
		}
	}
	else
	{
		$value = filter_var($value, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH);
	}

	// This will strip new line characters if $strip_crlf is set to true.
	if ($strip_crlf)
	{
		$value = preg_replace('@([\r\n])[\s]+@', '', $value);
	}

	return clean($value);
}

/**
* Clean values pulled from the database, although could be used on anything.
*
* Cleans either a string, or can clean an entire array of values:
*	clean($array);
*
* @param  mixed  $value  Value to be cleaned
* @return mixed          Cleaned array or string.
*/
function clean($value)
{
	if (is_array($value))
	{
		foreach ($value AS $key => $val)
		{
			if (is_string($val))
			{
				$value["$key"] = trim(stripslashes($val));
			}
			else if (is_array($val))
			{
				$value["$key"] = clean($value["$key"]);
			}
		}
		return $value;
	}
	return trim(stripslashes($value));
}

/**
* Will make sure a variable is valid.
*
* @param  string  $option  What to check
* @param  mixed   $value   What to check's value.
* @return mixed            Depending on the $option, could return a string, NULL, or boolean.
*/
function is($option, $value)
{
	global $db;

	switch ($option)
	{
		case 'orderby':
			if (!in_array($value, array('domain', 'category', 'registrar', 'regdate', 'expiry', 'price', 'status')))
			{
				return 'domain';
			}
			break;
		case 'catid':
			if (is_string($value))
			{
				return NULL;
			}
			else if (is_integer($value) AND !is('category', $value))
			{
				return NULL;
			}
			break;
		case 'email':
			return (bool)(preg_match('#^[a-z0-9.!\#$%&\'*+-/=?^_`{|}~]+@([0-9.]+|([^\s\'"<>]+\.+[a-z]{2,6}))$#si', $value));
			break;
		case 'injection':
			return (bool)(preg_match('#(To:|Bcc:|Cc:|Content-type:|Mime-version:|Content-Transfer-Encoding:)#i', urldecode($value)));
			break;
		case 'spam':
			preg_match_all('#(<a href|\[url|http[s]?://)#i', $value, $matches, PREG_PATTERN_ORDER);
			return (bool)(count($matches[0]) > 2);
			break;
		case 'domain':
			$getdomain = $db->query("
				SELECT *
				FROM " . TABLE_PREFIX . "domains
				WHERE " . (is_numeric($value) ? "domainid = " . intval($value) : "domain = '$value'") . "
			");

			$numrows = $db->num_rows($getdomain);
			$db->free_result($getdomain);

			return (bool)($numrows > 0);
			break;
		case 'category':
			if (is_numeric($value) AND $value == 0)
			{
				return true;
			}

			$getcategory = $db->query("
				SELECT *
				FROM " . TABLE_PREFIX . "categories
				WHERE " . (is_numeric($value) ? "catid = " . intval($value) : "title = '$category'") . "
			");

			$numrows = $db->num_rows($getcategory);
			$db->free_result($getcategory);

			return (bool)($numrows > 0);
			break;
		case 'expdate':
			$value = str_replace('-', '/', $value);

			// Expects mm/dd/yyyy Example: 8/30/2009
			if (preg_match('#[0-9]{2}/[0-9]{2}/[0-9]{4}#', $value))
			{
				$value = explode('/', $value);

				if ($value[2] < date('Y'))
				{
					return false;
				}

				if (checkdate($value[0], $value[1], $value[2]))
				{
					return true;
				}
			}
			return false;
			break;
	}
	return $value;
}

/**
* Get the users ip address.
*
* @param  void
* @return string  IP Address
*/
function get_ip()
{
	$ip = dnp_getenv('REMOTE_ADDR');

	if (dnp_getenv('HTTP_X_FORWARDED_FOR'))
	{
		if (preg_match_all('#\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}#s', dnp_getenv('HTTP_X_FORWARDED_FOR'), $matches))
		{
			foreach ($matches[0] AS $match)
			{
				if (!preg_match('#^(10|172\.16|192\.168)\.#', $match))
				{
					$ip = $match;
					break;
				}
			}
			unset($matches);
		}
	}
	else if (dnp_getenv('HTTP_CLIENT_IP'))
	{
		$ip = dnp_getenv('HTTP_CLIENT_IP');
	}
	else if (dnp_getenv('HTTP_FROM'))
	{
		$ip = dnp_getenv('HTTP_FROM');
	}

	if (!filter_var($ip, FILTER_VALIDATE_IP))
	{
		return '0.0.0.0';
	}
	return $ip;
}

/**
* Returns an environment variable.
*
* @param  string  $varname  Variable name, eg: PHP_SELF
* @return string            Variable's value.
*/
function dnp_getenv($varname)
{
	if (isset($_SERVER[$varname]))
	{
		return $_SERVER[$varname];
	}
	else if (isset($_ENV[$varname]))
	{
		return $_ENV[$varname];
	}
	return '';
}

/**
* A wrapper for date that will format dates using the UTC timezone.
* This is used for domain expiration dates as UTC is pretty much 
* the standard for domain expiration dates.
*
* @param  string   $format     Date format
* @param  integer  $timestamp  Unix timestamp
* @return string               Formatted date
*/
function dnp_date($format, $timestamp)
{
	if (empty($timestamp))
	{
		$timestamp = time();
	}

	// Get the current timezone
	$current_tz = date_default_timezone_get();

	// Set to UTC, as that's pretty much the standard for domain expiration
	date_default_timezone_set('UTC');

	// format the time
	$date = date($format, $timestamp);

	// Set back to old timezone
	date_default_timezone_set($current_tz);

	return $date;
}

/**
* Returns a md5'ed hash.
*
* @param  string  $string  String to hash
* @return string  Hash
*/
function dnp_hash($string)
{
	return hash('md5', $string);
}

/**
* Helper function for encode_email
*
* @param  string  $char  Character to encode.
* @return string         Encoded character.
*/
function _encode_email_helper($char = 0)
{
	return '&#' . ord($char) . ';';
}

/**
* Encodes an email address, if that email is valid.
*
* At this time, this will mainly be used on database error pages, that
* places the email address in HTML.
*
* @param  string  $email  Email address to encode.
* @return string          Encoded email address if valid, or plain email if not valid.
*/
function encode_email($email)
{
	if (is('email', $email))
	{
		$chars = str_split($email);

		$encoded = filter_var($chars, FILTER_CALLBACK, array('options' => '_encode_email_helper'));
		$encoded = implode('', $encoded);

		unset($chars);

		return $encoded;
	}
	return $email;
}

/**
* Redirects to another URL.
*
* @param  string  $url  Destination url
* @return void
*/
function redirect($url)
{
	if (count($_SESSION))
	{
		session_write_close();
	}

	$url = filter_var($url, FILTER_SANITIZE_URL);

	header("Location: $url", true, 302);
	exit;
}

/**
* Generates the pagination.
*
* @param  integer  $numresults  Total number of results.
* @param  integer  $page        Current page
* @param  string   $orderby     Sort order
* @param  integer  $catid       Category ID (if any)
* @param  string   $search      Search query (will only be used for search.php)
* @return array                 Array consisting of SQL limit, and pagination links.
*/
function paginate($numresults, $page, $orderby = NULL, $catid = NULL, $search = NULL)
{
	//Generate image path according to calling script
    
    if(substr($_SERVER[REQUEST_URI],-13,-1)=='portfolio.ph'){
        $_navigationimg='./templates/default/images';        
    }else{
        $_navigationimg='../templates/admin/images';
    }

    global $config;

	$usedefault = (bool)($config->get('template') == 'default' AND !defined('IN_ADMIN'));
	$link = '';
	$extra = array();

	if ($numresults > 0)
	{
		$perpage = ($config->get('maxperpage') <= 10) ? 10 : $config->get('maxperpage');
		$numpages = ceil($numresults / $perpage);
		$numpages = ($numpages == 0) ? 1 : $numpages;
		$page = ($page < 1) ? 1 : ($page > $numpages ? $numpages : $page);

		$page1 = "1";
		$pageb = $page - 1;
		//$pageback = $pageb ? $pageb : ($page > $numpages ? $numpages : $page);
		$pagef = $page + 1;
		//$pageforward = $pagef <= $numpages ? $pagef : ($page <= $numpages ? $numpages : $page);

		// Currently using sort?
		if (!is_null($orderby))
		{
			array_push($extra, "&amp;sort=$orderby");
		}

		// Browsing a category?
		if (!is_null($catid))
		{
			array_push($extra, "&amp;cat=$catid");
		}

		// Searching?
		if (!is_null($search))
		{
			array_push($extra, '&amp;query=' . urlencode($search));
		}

		$extra = implode('', $extra);

		// Generate Links - I know, it looks messy, but it works :P
		// It'll be something like: 1 ... 4 5 6 7 8 ... 15
		if ($page >= 1)
		{
			$link .= " <a href=\"?page=$page1$extra\"><img src=\"$_navigationimg/first.png\" class=\"fix2\" title=\"<<\"/></a>";
		}
			
			//if ($page >= ($pageback) AND $page != ($pageback))
			if ($page >= ($pageb) AND $page != ($pageb))
		{
			//$link .= " <a href=\"?page=$pageback$extra\"><img src=\"../templates/admin/images/prev.png\" class=\"fix2\" title=\"<\"/></a>&nbsp;";
			$link .= " <a href=\"?page=$pageb$extra\"><img src=\"$_navigationimg/prev.png\" class=\"fix2\" title=\"<\"/></a>&nbsp;";
		}

		for ($i = ($page - 1), $stop = ($page + 7); $i <= $stop; ++$i)
		{
			if ($i < 1 OR $i > $numpages)
			{
				continue;
			}

			if ($page == $i)
			{
				//$link .= ($usedefault) ? " $i " : " [$i] ";
				$link .= "<span class=\"current\">$i</span>";
			}
			else
			{
				$link .= " <span class=\"numberfix\"><a href=\"?page=$i$extra\">$i</a></span> ";
			}
		}

		//if ($page <= ($pageforward) AND $page != ($pageforward))
		if ($page <= ($pagef) AND $page != ($pagef))
		{
			//$link .= " <a href=\"?page=$pageforward$extra\"><img src=\"../templates/admin/images/next.png\" class=\"fix2\" title=\">\"/></a>";
			$link .= " <a href=\"?page=$pagef$extra\"><img src=\"$_navigationimg/next.png\" class=\"fix2\" title=\">\"/></a>";
		}

		if ($page <= $numpages)
		{
			$link .= " <a href=\"?page=$numpages$extra\"><img src=\"$_navigationimg/last.png\" class=\"fix2\" title=\">>\"/></a>";
		}

		$lowerlimit = ($page - 1) * $perpage + 1;
		$upperlimit = $page * $perpage;

		if ($upperlimit > $numresults)
		{
			$upperlimit = $numresults;

			if ($lowerlimit > $numresults)
			{
				$lowerlimit = $numresults - $perpage;
			}
		}

		if ($lowerlimit <= 0)
		{
			$lowerlimit = 1;
		}
	}
	else
	{
		$lowerlimit = 1;
		$link = '';
	}

	return array(
		'limit' => $lowerlimit - 1,
		'link'  => $link
	);
}

/**
* Builds the HTML for categories and latest domains added.
*
* @param  string  $list  Which list to build.
* @return string         List HTML
*/
function build_list($list)
{
	global $db, $config;

	$uselegacy = (bool)($config->get('template') == 'legacy');

	switch ($list)
	{
		case 'cats':
			$getcats = $db->query("
				SELECT catid, title, description
				FROM " . TABLE_PREFIX . "categories
				ORDER BY title ASC
			") or $db->raise_error();

			if ($db->num_rows($getcats) > 0)
			{
				$class = '';

				while ($cat = $db->fetch_array($getcats))
				{
					$class = ($class == '') ? ' class="odd"' : '';

					$cat['description'] = ($cat['description'] != '') ? $cat['description'] : $cat['title'];

					$cat['numdomains'] = $db->query("
						SELECT COUNT(d2c.domainid) AS count
						FROM " . TABLE_PREFIX . "dom2cat AS d2c
						LEFT JOIN " . TABLE_PREFIX . "domains AS dom ON(dom.domainid = d2c.domainid)
						WHERE d2c.catid = $cat[catid]
							AND dom.hidden != 1
					", true);
					$cat['numdomains'] = $cat['numdomains']['count'];

					if ($uselegacy)
					{
						$listhtml .= "<a href=\"./portfolio.php?cat=$cat[catid]\" title=\"$cat[description]\">".substr($cat[title],0,16)." ($cat[numdomains])</a>\n";
					}
					else
					{
						$listhtml .= "<li><a href=\"./portfolio.php?cat=$cat[catid]\" title=\"$cat[description]\">".substr($cat[title],0,16)." <span style=\"color:#000;\">($cat[numdomains])&nbsp;&nbsp;&nbsp;</span></a></li>\n";
					}
					$listhtml = trim($listhtml);
				}
			}
			else
			{
				$listhtml = ($uselegacy) ? 'No Categories Yet' : '<span>No Categories Yet</span>';
			}
			$db->free_result($getcats);

			return trim($listhtml);
			break;
		case 'latest':
			$getlatest = $db->query("
				SELECT domainid, domain, added
				FROM " . TABLE_PREFIX . "domains
				WHERE hidden != 1
				ORDER BY added DESC
				LIMIT 5
			") or $db->raise_error();

			if ($db->num_rows($getlatest) == 0)
			{
				$listhtml = ($uselegacy) ? '&nbsp;- None' : '<li>None</li>';

			}
			else
			{
				$class = '';

				while ($latest = $db->fetch_array($getlatest))
				{
					$date = date('m/d/Y', $latest['added']);

					if ($uselegacy)
					{
						$listhtml .= "<a href=\"details.php?d=$latest[domainid]\" title=\"Details for $latest[domain]\">$latest[domain] ($date)</a>\n";
					}
					else
					{
						$listhtml .= "<li$class><a href=\"details.php?d=$latest[domainid]\" title=\"Details for $latest[domain]\">$latest[domain]</a> ($date)</li>\n";
					}
					$listhtml = trim($listhtml);

					$class = ($class == '') ? ' class="odd"' : '';
				}
			}
			$db->free_result($getlatest);

			return trim($listhtml);
			break;
		default:
			break;
	}
}

/**
* Gets current page name.
*
* @param  void
* @return string  Current page name.
*/
function dnp_page()
{
	$page = basename($_SERVER['SCRIPT_FILENAME'], '.php');

	if (empty($page) OR $page == 'index')
	{
		$page = 'home';
	}
	return $page;
}

/**
* Gets the latest version of Domain Name Portfolio.
* Borrowed from phpBB and modified - phpBB.com
*
* @param  boolean  $check  Check domainportfolio.us for latest version?
* @return string           Latest version if $check is true, current script version if not.
*/
function dnp_version($check = false)
{
	if ($check)
	{
		if ($fsock = @fsockopen('www.DNSPortfolio.com', 80, $errno, $errstr, 10))
		{
			fputs($fsock, "GET /current.txt HTTP/1.1\r\nHOST: www.DNSPortfolio.com\r\nConnection: close\r\n\r\n");

			$latest = '';
			$getinfo = false;

			while (!feof($fsock))
			{
				if ($getinfo)
				{
					$latest .= fread($fsock, 1024);
				}
				else
				{
					if (fgets($fsock, 1024) == "\r\n")
					{
						$getinfo = true;
					}
				}
			}
			fclose($fsock);

			$latest = array_map('trim', explode("\n", $latest));

			return implode('.', $latest);
		}
		return 'n/a';
	}
	else
	{
		return '1.7.0';
	}
}

/**
* Will get values from the database for forms, etc.
*
* @param  string   $option  What do we need the value for?
* @param  integer  $id      If it's for a domain or category (by ID)
* @return array             Data for given $option from the database.
*/
function get_value($option, $id = 0)
{
	global $db;

	switch ($option)
	{
		case 'contact':
			$domaininfo = $db->query("
				SELECT domain, status
				FROM " . TABLE_PREFIX . "domains
				WHERE " . (is_numeric($id) ? "domainid = '" . intval($id) . "'" : "domain = '$id'") . "
					AND hidden != 1
			", true) or $db->raise_error();
			return $domaininfo;
			break;
		case 'details':
		case 'domainedit':
			$domaininfo = $db->query("
				SELECT domains.*, d2c.*, IF(categories.title IS NULL, 'None', GROUP_CONCAT(categories.title SEPARATOR ', ')) AS category, domains.domainid AS domainid
				FROM " . TABLE_PREFIX . "domains AS domains
				LEFT JOIN " . TABLE_PREFIX . "dom2cat AS d2c ON (domains.domainid = d2c.domainid)
				LEFT JOIN " . TABLE_PREFIX . "categories AS categories ON (d2c.catid = categories.catid)
				WHERE " . (is_numeric($id) ? "domains.domainid = '" . intval($id) . "'" : "domains.domain = '$id'") . "
				GROUP BY COALESCE(d2c.domainid, RAND())
			", true) or $db->raise_error();
			return (count($domaininfo)) ? $domaininfo : array();
			break;
		case 'catedit':
			$catinfo = $db->query("
				SELECT title, description, keywords
				FROM " . TABLE_PREFIX . "categories
				WHERE catid = '$id'
			", true) or $db->raise_error();
			return (count($catinfo)) ? $catinfo : array();
			break;
		default:
			break;
	}
}

/**
* Builds the 'hide' dropdown menu in admin for the edit page.
*
* @param  string  $option  Which select to build.
* @param  string  $value   Select's value.
* @return string           The $option's HTML
*/
function build_select($option, $value = '')
{
	global $db;

	$values = array(
		'hidden' => array('No', 'Yes'),
		'issite' => array('No', 'Yes'),
		'status' => array('For Sale', 'Not For Sale', 'Make Offer', 'Sold')
	);

	$select = '';

	switch ($option)
	{
		case 'hidden':
		case 'issite':
			foreach ($values[$option] AS $key => $val)
			{
				$select .= "<option label=\"$val\" value=\"$key\"" . ($value == $key ? ' selected="selected"' : '') . ">$val</option>\n";
			}
			break;
		case 'status':
			foreach ($values[$option] AS $val)
			{
				$select .= "<option label=\"$val\" value=\"$val\"" . ($value == $val ? ' selected="selected"' : '') . ">$val</option>\n";
			}
			break;
		case 'category':
			//$select = '<option label="No Category" value=\"$cat[catid]\" selected="selected">No Category</option>' . "\n";

			$getcats = $db->query("
				SELECT catid, title
				FROM " . TABLE_PREFIX . "categories
				ORDER BY title ASC
			") or $db->raise_error();

			while ($cat = $db->fetch_array($getcats))
			{
				if ($value == '')
				{
					$select .= "<option label=\"$cat[title]\" value=\"$cat[catid]\">$cat[title]</option>\n";
				}
				else
				{
					$dom2cats = $db->fetch_all("
						SELECT domainid, catid
						FROM " . TABLE_PREFIX . "dom2cat
						WHERE domainid = $value
					", 'catid');

					$select .= "<option label=\"$cat[title]\" value=\"$cat[catid]\"";
					$select .= (in_array($cat['catid'], $dom2cats) ? ' selected="selected"' : '') . ">$cat[title]</option>\n";

				}
			}
			$db->free_result($getcats);
			break;
	}
	return $select;
}

/**
* Returns a 'nice', human-readable size - thanks to WordPress
*
* @param  integer  $bytes  Size to format
* @return string           Human-readable size.
*/
function size_format($bytes)
{
	$quant = array(
		'TB' => pow(1024, 4),
		'GB' => pow(1024, 3),
		'MB' => pow(1024, 2),
		'kB' => pow(1024, 1),
		'B'  => pow(1024, 0)
	);

	foreach ($quant AS $unit => $mag)
	{
		if (intval($bytes) >= $mag)
		{
			return number_format($bytes / $mag) . " $unit";
		}
	}
	return '-';
}

?>