<?php
 
defined('C5_EXECUTE') or die("Access Denied.");
 
use Concrete\Core\Validation\CSRF\Token;
 
?>
 
<?php if(isset($response) && $response): ?>
    <div class="alert alert-info">Thanks, your email was successfully sent.</div>
<?php endif; ?>
 
<?php if(isset($errors) && !empty($errors)): ?>
    <div class="alert alert-error">
        <p>Sorry, there was a problem with your submission and your message could not be sent.</p>
        <ul>
            <?php foreach($errors as $field => $error): ?>
                <li><?php echo $error; ?></li>
            <?php endforeach; ?>
        </ul>
    </div>
<?php endif; ?>
 
<form method="post" action="<?php echo $view->action('send')?>">
    <input type="hidden" name="contact[csrf]" id="contact_csrf" value="<?php $token = new Token(); echo $token->generate('contact_form_submit'); ?>" />
    <input type="hidden" name="contact[subject]" id="contact_subject" value="" />
 
    <div class="field">
        <label for="contact_name"><?php echo t('Your name')?></label>
        <input type="text" name="contact[name]" id="contact_name" required="required" value="<?php echo $name; ?>" />
    </div>
 
    <div class="field">
        <label for="contact_email"><?php echo t('Your email address')?></label>
        <input type="email" name="contact[email]" id="contact_email" required="required" value="<?php echo $email; ?>" />
    </div>
 
    <div class="field">
        <label for="contact_message" class="label-block"><?php echo t('How can we help?')?></label>
        <textarea name="contact[message]" id="contact_message" required="required"><?php echo $message; ?></textarea>
    </div>
 
    <div class="field">
        <input type="submit" name="contact[submit]" id="contact_submit" value="Send email" class="btn btn-primary btn-l" />
    </div>
</form>
 

 
<?php
 
namespace Concrete\Block\ExternalForm\Form\Controller;
 
use Loader;
use Concrete\Core\Validation\CSRF\Token;
 
class ContactForm extends \Concrete\Core\Controller\AbstractController
{
    /**
     * Sends the email.
     *
     * @return boolean
     */
    public function action_send()
    {
        $errors = array();
 
        // Load helpers
        $form = Loader::helper('form');
        $text = Loader::helper('text');
        $mail = Loader::helper('mail');
        $valid = Loader::helper('validation/strings');
 
        // Filter
        $input['csrf'] = $text->sanitize($form->getRequestValue('contact[csrf]'));
        $input['name'] = $text->sanitize($form->getRequestValue('contact[name]'));
        $input['email'] = $text->email($form->getRequestValue('contact[email]'));
        $input['message'] = $text->sanitize($form->getRequestValue('contact[message]'));
 
        // Validate
        $token = new Token();
        if(!$token->validate('contact_form_submit', $input['csrf'])) {
            $errors['general'] = 'Sorry, we were unable to send your message at this time, please try again.';
        }
 
        if(mb_strlen($form->getRequestValue('contact[subject]')) > 0) {
            // This is a honeytrap for bots
            $errors['general'] = 'Sorry, we were unable to send your message at this time.';
        }
 
        if(mb_strlen($input['name']) < 2) {
            $errors['name'] = 'You must enter your full name.';
        }
 
        if (!$valid->email($input['email'])) {
            $errors['email'] = 'You must enter a valid email address so we can reply.';
        }
 
        if(mb_strlen($input['message']) < 2) {
            $errors['message'] = 'You must enter a message.';
        }
 
        if(empty($errors)) {
            $body = 'Name: ' . $input['name'] . "\r\n";
            $body .= 'Email: ' . $input['email'] . "\r\n\r\n";
            $body .= "Message: \r\n" . $input['message'];
 
            // Send the mail
            $mail->setSubject('Message from the Foo website contact form');
            $mail->setBody($body);
            $mail->to('you@email.com', 'Some One');
            $mail->from('contactform@foo.org', 'Foo website');
            $mail->replyto($input['email'], $input['name']);
            $mail->sendMail();
 
            $this->set('response', true);
 
            return true;
        }
 
        $this->set('errors', $errors);
        $this->set('name', $input['name']);
        $this->set('email', $input['email']);
        $this->set('message', $input['message']);
 
        return false;
    }
 
    /**
     * Displays the form.
     */
    public function view()
    {
    }
}