<?php

function makePass($length=6) {
$salt       = "ABCDEFGHIJKLMNPQRSTUVWXYZ123456789";
$makepass   = '';
mt_srand(10000000*(double)microtime());
for ($i = 0; $i < $length; $i++)
$makepass .= $salt[mt_rand(0,33)];
return $makepass;
}
   
session_start('jdcode');
session_register('code');

$seccode = makePass();

$_SESSION['code'] = $seccode;


function html2rgb( $color ) {
  if (substr($color,0,1)=="#") $color=substr($color,1,6);
  $tablo[0] = hexdec(substr($color, 0, 2));
  $tablo[1] = hexdec(substr($color, 2, 2));
  $tablo[2] = hexdec(substr($color, 4, 2));
  return $tablo;
}

//background color
$bgc=html2rgb( $_GET['bgc'] );
//fontcolor
$fc=html2rgb( $_GET['fc'] );
//linecolor
$lc=html2rgb( $_GET['lc'] );
//border color
$bc=html2rgb( $_GET['bc'] );


header("Content-Type: image/png");
$im = imagecreate(100, 35) or die('Image create error!');

$bgcolor = imagecolorallocate($im, $bgc[0], $bgc[1], $bgc[2]);
$fontcolor = imagecolorallocate($im, $fc[0], $fc[1], $fc[2]);
$linecolor = imagecolorallocate($im, $lc[0], $lc[1], $lc[2]);
$bordercolor = imagecolorallocate($im, $bc[0], $bc[1], $bc[2]);

for($x=10; $x <= 100; $x+=10)
imageline($im, $x, 0, $x, 50, $linecolor);


imageline($im, 0, 5, 100, 5, $linecolor);
imageline($im, 0, 15, 100, 15, $linecolor);
imageline($im, 0, 25, 100, 25, $linecolor);

imageline($im, 0, 0, 0, 50, $bordercolor);
imageline($im, 0, 0, 100, 0, $bordercolor);
imageline($im, 0, 34, 100, 34, $bordercolor);
imageline($im, 99, 0, 99, 34, $bordercolor);

imagestring($im, 10, 25, 10, $seccode, $fontcolor);
imagepng($im);
imagedestroy($im);

session_destroy('jdcode');
?>

<?php
/*
Plugin Name: WP-ContactForm
Plugin URI: http://blog.ftwr.co.uk/wordpress/
Description: WP Contact Form is a drop in form for users to contact you. It can be implemented on a page or a post.
Author: Ryan Duff, Peter Westwood
Author URI: http://blog.ftwr.co.uk
Version: 1.5.1.1
*/

load_plugin_textdomain('wpcf',$path = 'wp-content/plugins/wp-contact-form');

/*
This shows the quicktag on the write pages
Based off Buttonsnap Template
http://redalt.com/downloads
*/
if(get_option('wpcf_show_quicktag') == true) {
    include( plugin_dir_path(__FILE__) . 'buttonsnap.php');

    add_action('init', 'wpcf_button_init');
    add_action('marker_css', 'wpcf_marker_css');

    function wpcf_button_init() {
        $wpcf_button_url = buttonsnap_dirname(__FILE__) . '/wpcf_button.png';

        buttonsnap_textbutton($wpcf_button_url, __('Insert Contact Form', 'wpcf'), '<!--contact form-->');
        buttonsnap_register_marker('contact form', 'wpcf_marker');
    }

    function wpcf_marker_css() {
        $wpcf_marker_url = buttonsnap_dirname(__FILE__) . '/wpcf_marker.gif';
        echo "
            .wpcf_marker {
                    display: block;
                    height: 15px;
                    width: 155px
                    margin-top: 5px;
                    background-image: url({$wpcf_marker_url});
                    background-repeat: no-repeat;
                    background-position: center;
            }
        ";
    }
}

function wpcf_is_malicious($input) {
    $is_malicious = false;
    $bad_inputs = array("\r", "\n", "mime-version", "content-type", "cc:", "to:");
    foreach($bad_inputs as $bad_input) {
        if(strpos(strtolower($input), strtolower($bad_input)) !== false) {
            $is_malicious = true; break;
        }
    }
    return $is_malicious;
}

/* This function checks for errors on input and changes $wpcf_strings if there are any errors. Shortcircuits if there has not been a submission */
function wpcf_check_input() {
    if(!(isset($_POST['wpcf_stage']))) {return false;} // Shortcircuit.

    $_POST['wpcf_your_name'] = htmlentities(stripslashes(trim($_POST['wpcf_your_name'])));
    $_POST['wpcf_email'] = htmlentities(stripslashes(trim($_POST['wpcf_email'])));
    $_POST['wpcf_website'] = htmlentities(stripslashes(trim($_POST['wpcf_website'])));
    $_POST['wpcf_msg'] = htmlentities(stripslashes(trim($_POST['wpcf_msg'])));
    $securitycode = htmlentities(stripslashes(strtoupper(trim(strtoupper($_POST['seccode'])))));
     
    global $wpcf_strings;
    $ok = true;

    if(empty($_POST['wpcf_your_name']))
    {
        $ok = false; $reason = 'empty';
        $wpcf_strings['name'] = '<div class="contactright"><input type="text" name="wpcf_your_name" id="wpcf_your_name" size="30" maxlength="50" value="' . $_POST['wpcf_your_name'] . '" class="contacterror" /> (' . __('required', 'wpcf') . ')</div>';
    }

    if(!is_email($_POST['wpcf_email']))
    {
        $ok = false; $reason = 'empty';
        $wpcf_strings['email'] = '<div class="contactright"><input type="text" name="wpcf_email" id="wpcf_email" size="30" maxlength="50" value="' . $_POST['wpcf_email'] . '" class="contacterror" /> (' . __('required', 'wpcf') . ')</div>';
    }

    if(empty($_POST['wpcf_msg']))
    {
        $ok = false; $reason = 'empty';
        $wpcf_strings['msg'] = '<div class="contactright"><textarea name="wpcf_msg" id="wpcf_message" cols="35" rows="8" class="contacterror">' . $_POST['wpcf_msg'] . '</textarea></div>';
    }

    if(wpcf_is_malicious($_POST['wpcf_your_name']) || wpcf_is_malicious($_POST['wpcf_email'])) {
        $ok = false; $reason = 'malicious';
    }
   
    session_start('jdcode');
    $checkSecurity = false;
   
    if (isset($_SESSION['code']) && ($_SESSION['code'] != "") && ($_SESSION['code'] == $securitycode)) {
    $checkSecurity = true;
    }

    if ($checkSecurity == false) {
    $ok = false;
    $wpcf_strings['error'] = '<div style="font-weight: bold;">Güvenlik kodunu hatalı yazdınız. Tekrar deneyin</div>';
    }
   
    if($ok == true)
    {
        return true;
    }
    else {
        if($reason == 'malicious') {
            $wpcf_strings['error'] = "<div style='font-weight: bold;'>You can not use any of the following in the Name or Email fields: a linebreak, or the phrases 'mime-version', 'content-type', 'cc:' or 'to:'.</div>";
        } elseif($reason == 'empty') {
            $wpcf_strings['error'] = '<div style="font-weight: bold;">' . stripslashes(get_option('wpcf_error_msg')) . '</div>';
        }
        return false;
    }
}

/*Wrapper function which calls the form.*/
function wpcf_callback( $content ) {
    global $wpcf_strings;

    /* Run the input check. */        
    if(false === strpos($content, '<!--contact form-->')) {
        return $content;
    }
   
    /* Declare strings that change depending on input. This also resets them so errors clear on resubmission. */
    $wpcf_strings = array(
        'name' => '<div class="contactright"><input type="text" name="wpcf_your_name" id="wpcf_your_name" size="30" maxlength="50" value="' . (isset($_POST['wpcf_your_name']) ? $_POST['wpcf_your_name'] :'') . '" /> (' . __('gerekli', 'wpcf') . ')</div>',
        'email' => '<div class="contactright"><input type="text" name="wpcf_email" id="wpcf_email" size="30" maxlength="50" value="' . (isset($_POST['wpcf_email']) ? $_POST['wpcf_email'] : '') . '" /> (' . __('gerekli', 'wpcf') . ')</div>',
        'msg' => '<div class="contactright"><textarea name="wpcf_msg" id="wpcf_msg" cols="35" rows="8" >' . (isset($_POST['wpcf_msg']) ? $_POST['wpcf_msg'] : '' ) . '</textarea></div>',
        'error' => '');
   
    if(wpcf_check_input()) // If the input check returns true (ie. there has been a submission & input is ok)
    {

            $recipient = get_option('wpcf_email');
            $subject = get_option('wpcf_subject');
            $success_msg = get_option('wpcf_success_msg');
            $success_msg = stripslashes($success_msg);

            $name = $_POST['wpcf_your_name'];
            $email = $_POST['wpcf_email'];
            $website = $_POST['wpcf_website'];
            $msg = $_POST['wpcf_msg'];

            $headers = "MIME-Version: 1.0\n";
            $headers .= "From: $name < $email>\n";
            $headers .= "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"\n";

            $fullmsg = "$name yazmış:\n";
            $fullmsg .= wordwrap($msg, 80, "\n") . "\n\n";
            $fullmsg .= "Web sitesi: " . $website . "\n";
            $fullmsg .= "IP Adresi: " . getip();

            mail($recipient, $subject, $fullmsg, $headers);

            $sonuc = '<div style="font-weight: bold;">' . $success_msg . '</div>';
            echo $sonuc;
    }
    else // Else show the form. If there are errors the strings will have updated during running the inputcheck.
    {
//security image by pisdoktor
$securityimage = get_option('siteurl').'/wp-content/plugins/wp-contact-form/security.php?bgc=E5E5E5&amp;fc=CACACA&amp;lc=DFDFDF&amp;bc=D2D2D2';
$securityimage = '<img src="'. $securityimage . '" alt="Güvenlik Kodu" />';
//end security image by pisdoktor
        $form = '<div class="contactform">
        ' . $wpcf_strings['error'] . '
            <form action="' . get_permalink() . '" method="post">
                <div class="contactleft"><label for="wpcf_your_name">' . __('Adınız: ', 'wpcf') . '</label></div>' . $wpcf_strings['name']  . '
                <div class="contactleft"><label for="wpcf_email">' . __('Eposta Adresiniz:', 'wpcf') . '</label></div>' . $wpcf_strings['email'] . '
                <div class="contactleft"><label for="wpcf_website">' . __('Web siteniz:', 'wpcf') . '</label></div><div class="contactright"><input type="text" name="wpcf_website" id="wpcf_website" size="30" maxlength="100" value="' . (isset($_POST['wpcf_website']) ? $_POST['wpcf_website'] : '') . '" /></div>
                <div class="contactleft"><label for="wpcf_msg">' . __('Mesajınız: ', 'wpcf') . '</label></div>' . $wpcf_strings['msg'] . '
                <div class="contactleft">' . $securityimage . '</div><div class="contactright"><input type="text" maxlength="6" name="seccode"/> <i>* Büyük-küçük harf duyarlı değildir</i></div>
                <div class="contactright"><input type="submit" name="Submit" value="' . __('Gönder', 'wpcf') . '" id="contactsubmit" /><input type="hidden" name="wpcf_stage" value="process" /></div>
            </form>
        </div>
        <div style="clear:both; height:1px;">&nbsp;</div>';
        return str_replace('<!--contact form-->', $form, $content);
    }
}


/*Can't use WP's function here, so lets use our own*/
function getip() {
    if (isset($_SERVER))
    {
         if (isset($_SERVER["HTTP_X_FORWARDED_FOR"]))
         {
              $ip_addr = $_SERVER["HTTP_X_FORWARDED_FOR"];
         }
         elseif (isset($_SERVER["HTTP_CLIENT_IP"]))
         {
              $ip_addr = $_SERVER["HTTP_CLIENT_IP"];
         }
         else
         {
             $ip_addr = $_SERVER["REMOTE_ADDR"];
         }
    }
    else
    {
         if ( getenv( 'HTTP_X_FORWARDED_FOR' ) )
         {
              $ip_addr = getenv( 'HTTP_X_FORWARDED_FOR' );
         }
         elseif ( getenv( 'HTTP_CLIENT_IP' ) )
         {
              $ip_addr = getenv( 'HTTP_CLIENT_IP' );
         }
         else
         {
              $ip_addr = getenv( 'REMOTE_ADDR' );
         }
    }
return $ip_addr;
}


/*CSS Styling*/
function wpcf_css() {
    ?>
<style type="text/css" media="screen">

/* Begin Contact Form CSS */
.contactform {
    position: static;
    overflow: hidden;
    width: 95%;
}

.contactleft {
    width: 25%;
    white-space: pre;
    text-align: right;
    clear: both;
    float: left;
    display: inline;
    padding: 4px;
    margin: 5px 0;
}

.contactright {
    width: 70%;
    text-align: left;
    float: right;
    display: inline;
    padding: 4px;
    margin: 5px 0;
}

.contacterror {
    border: 1px solid #ff0000;
}

.contactsubmit {
}
/* End Contact Form CSS */

    </style>

<?php

    }

function wpcf_add_options_page() {
        add_options_page(__('Contact Form Options', 'wpcf'), __('Contact Form', 'wpcf'), 'manage_options', 'wp-contact-form/options-contactform.php');
    }

/* Action calls for all functions */

//if(get_option('wpcf_show_quicktag') == true) {add_action('admin_footer', 'wpcf_add_quicktag');}

add_action('admin_menu', 'wpcf_add_options_page');
add_filter('wp_head', 'wpcf_css');
add_filter('the_content', 'wpcf_callback', 7);

?>