#!/usr/bin/perl -w
###use strict;
use DBI;
use CGI qw(:standard);
print "Content-type: text/html\n\n";
@referers = ('72.167.40.203','www.mywebsite.com','mywebsite.com');
&check_url;
&mail;
sub check_url {
local($check_referer) = 0;
if ($ENV{'HTTP_REFERER'}) {
foreach $referer (@referers) {
if ($ENV{'HTTP_REFERER'} =~ m|https?://([^/]*)$referer|i) {
$check_referer = 1;
last;
}
}
}
else {
$check_referer = 1;
}
if ($check_referer != 1) {&bad_referer}
}
sub bad_referer {
print "content-type: text/html\n\n";
print <<"(END ERROR HTML)";
Bad Referrer - Access Denied
Bad Referrer - Access Denied
(END ERROR HTML)
exit;
}
sub mail {
###Get the name, email address, and profile address of the sender
my ($dbh, $sth, $count, $AccountID,$SenderFirstName, $SenderLastName, $SenderEmail, $ID, $row, $View);
$dbh = DBI->connect('dbi:mysql:membersdb','ID','pw')
or die "Connection Error: $DBI::errstr\n";
my $SenderID = param('SenderID');
$sth = $dbh->prepare("SELECT FirstName,LastName,Email,View FROM memberinfo WHERE AccountID='$SenderID'");
$sth->execute ();
my @row = $sth->fetchrow_array ();
$SenderFirstName= $row[0];
$SenderLastName= $row[1];
$SenderEmail= $row[2];
$SenderView= $row[3];
$sth->finish;
##Get the name & email address of the recipient
my ($dbh, $sth, $count, $AccountID,$FirstName, $LastName, $Email, $row);
$dbh = DBI->connect('dbi:mysql:membersdb','ID','pw')
or die "Connection Error: $DBI::errstr\n";
my $ID = param('AccountID');
$sth = $dbh->prepare("SELECT FirstName,LastName, Email FROM memberinfo WHERE AccountID='$ID'");
$sth->execute ();
my @row = $sth->fetchrow_array ();
$FirstName= $row[0];
$LastName= $row[1];
$Recipient= $row[2];
$sth->finish;
$dbh->disconnect ();
use HTML::Entities;
use Mail::Sendmail 0.79;
my $Message = param('Message');
$From="info\@mywebsite.com";
$html = <$SenderFirstName $SenderLastName has sent you a message.
$Message
END_HTML
%mail = (
from => "$From",
to => "$Recipient",
subject => 'A Message From My Website',
'content-type' => 'text/html; charset="iso-8859-1"',
);
$mail{body} = <$html