<?php
if(!isset($_POST['submit']))
{
	//This page should not be accessed directly. Need to submit the form.
	echo "error; you need to submit the form!";
}

	$church = $_POST['church'];
	$name = $_POST['name'];
	$phone = $_POST['phone'];
	$email = $_POST['email'];
	$address = $_POST['address'];
	$city = $_POST['city'];
	$province = $_POST['province'];
	$postalcode = $_POST['postalcode'];
	$visitor_email = $_POST['email'];
	$message = $_POST['message'];

//Validate first
if(empty($name)||empty($visitor_email)) 
{
    echo "Name and email are mandatory!";
    exit;
}

if(IsInjected($visitor_email))
{
    echo "Bad email value!";
    exit;
}

$email_from = 'bissett@bissett.org';//<== update the email address
$email_subject = "EDCC MEMBERSHIP REQUEST";
$email_body = "You have received a new message from the user: $name.\n\n".
    "Here is the message: $message\n\n".
    "CHURCH: $church\n\n".
    "CONTACT: $name\n\n".
    "PHONE: $phone\n\n".
    "EMAIL: $email\n\n".
    "ADDRESS: $address\n\n".
	"CITY: $city\n\n".
	"PROVINCE: $province\n\n".
	"POSTAL CODE: $postalcode\n\n".
	"Notifications were sent to the following email addresses: \r\n".
$to = "bissett@bissett.org , lpkloster@gmail.com";//<== update the email address
$headers = "From: $email_from \r\n";
$headers .= "Reply-To: $visitor_email \r\n";
//Send the email!
mail($to,$email_subject,$email_body,$headers);
//done. redirect to thank-you page.
header('Location: thank-you.html');


// Function to validate against any email injection attempts
function IsInjected($str)
{
  $injections = array('(\n+)',
              '(\r+)',
              '(\t+)',
              '(%0A+)',
              '(%0D+)',
              '(%08+)',
              '(%09+)'
              );
  $inject = join('|', $injections);
  $inject = "/$inject/i";
  if(preg_match($inject,$str))
    {
    return true;
  }
  else
    {
    return false;
  }
}
   
?>