<?
include_once($_SERVER['DOCUMENT_ROOT']."/vx/lib/xinc.php");
require_once($_SERVER['DOCUMENT_ROOT']."/vx/lib/user.php");
$data = array();

$firstName = clean($_POST['firstName']);
$lastName = clean($_POST['lastName']);
$contactEmail = clean($_POST['email']);
$contactEmailConfirm = clean($_POST['confirm_email']);
$phone = clean($_POST['phone']);
$zip = clean($_POST['zip']);
$is_member = clean($_POST['is_member']);
$subject = clean($_POST['subject']);
$message = clean($_POST['message']);
$message = $siteCode." ->:: ".$contactEmail." ->:: ".htmlentities(stripcslashes($message));

$_SESSION['passed_recaptcha'] = 1;

if(empty($_SESSION['passed_recaptcha'])) {
	if(isset($_POST['g-recaptcha-response'])) {
		if(!function_exists('PostFields')) {
			function PostFields($url,$fields)
			{
				$fields = http_build_query($fields);
				$ch = curl_init();
				curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
				curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
				curl_setopt($ch, CURLOPT_REFERER, $_SERVER["HTTP_HOST"] . $_SERVER['REQUEST_URI']);
				curl_setopt($ch, CURLOPT_URL, $url);
				curl_setopt($ch, CURLOPT_POST, 1);
				curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);
				curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
				curl_setopt($ch, CURLOPT_USERAGENT, "LCAPI cUrl Agent");
				curl_setopt($ch, CURLOPT_VERBOSE, true);
				ob_start();   
				$data = curl_exec ($ch);  
				ob_end_clean(); 
				curl_close ($ch);

				return $data;
			}
		}
		
		$postfields = array();
		$postfields['secret'] = '6LeYaLsUAAAAABjwDfw4QDkiO-oiaNIruZSxwN6H';
		$postfields['response'] = $_POST['g-recaptcha-response'];
		$postfields['remoteip'] = $_SERVER['REMOTE_ADDR'];
		$recaptcha_response = PostFields('https://www.google.com/recaptcha/api/siteverify',$postfields);
		$json_response = json_decode($recaptcha_response);
		if($json_response->success) {
			$_SESSION['passed_recaptcha'] = 1;
		} else {
			$messageText = "The Recaptcha failed.
			".date('m/d/Y g:i a')."
			First Name: ".$firstName."
			Last Name: ".$lastName."
			Phone: ".$phone."
			Email: ".$contactEmail."
			Confirm Email: ".$contactEmailConfirm."
			Zip: ".$zip."
			Are you currently a member: ".$is_member."
			
			Subject: $subject. 
			
			Message: $message
			
			Browser Info: ".$_SERVER['HTTP_USER_AGENT']."
			IP Address: ".$_SERVER['REMOTE_ADDR']." 
			Referer URL: ".$_SERVER['HTTP_REFERER'];
			$to = $siteEmail;
			$emailMessage = nl2br($messageText);
			$subject = $siteName." Contact Us Form - ReCaptcha Failed";
			mailgun_send_message('heinz57@gmail.com,jeremy@usbusinessfundingsolutions.com','NoReply@surfcrm.com',$subject,$emailMessage,1,'Website Feedback','','','',0,array());
		}
	} else {
		$messageText = "The Recaptcha paramaters were not passed.
		".date('m/d/Y g:i a')."
		First Name: ".$firstName."
		Last Name: ".$lastName."
		Phone: ".$phone."
		Email: ".$contactEmail."
		Confirm Email: ".$contactEmailConfirm."
		Zip: ".$zip."
		Are you currently a member: ".$is_member."
		
		Subject: $subject. 
		
		Message: $message
		
		Browser Info: ".$_SERVER['HTTP_USER_AGENT']."
		IP Address: ".$_SERVER['REMOTE_ADDR']." 
		Referer URL: ".$_SERVER['HTTP_REFERER'];
		$to = $siteEmail;
		$emailMessage = nl2br($messageText);
		$subject = $siteName." Contact Us Form - ReCaptcha Failed";
		mailgun_send_message('heinz57@gmail.com,jeremy@usbusinessfundingsolutions.com','NoReply@surfcrm.com',$subject,$emailMessage,1,'Website Feedback','','','',0,array());
	}
}
if(!empty($_SESSION['passed_recaptcha'])) {
	if(empty($contactEmail) && empty($firstName)) {
		$data['status']='pass'
		echo json_encode($data);
		die();
	}
	$messageText = date('m/d/Y g:i a')."
	First Name: ".$firstName."
	Last Name: ".$lastName."
	Phone: ".$phone."
	Email: ".$contactEmail."
	Confirm Email: ".$contactEmailConfirm."
	Zip: ".$zip."
	Are you currently a member: ".$is_member."
	
	Subject: $subject. 
	
	Message: $message
	
	Browser Info: ".$_SERVER['HTTP_USER_AGENT']."
	IP Address: ".$_SERVER['REMOTE_ADDR']." 
	Referer URL: ".$_SERVER['HTTP_REFERER'];
	$to = $siteEmail;
	$emailMessage = nl2br($messageText);
	$subject = $siteName." Contact Us Form - ".date('m/d/Y').", ".$contactEmail;
	//mailgun_send_message($to,$siteEmail,$subject,$emailMessage,1,'Website Feedback','','','',0,array(),$contactEmail,1);		
	//Insert into tickets instead of sending an email
	//Check if they are a member
	$found_them = 0;
	$res = $db->get_results("SELECT id,date_ordered FROM lc2{$siteCode}_lc.lc_reseller WHERE email='".$db->clean($contactEmail)."'");
	if(!empty($res)) {
		$found_them = 1;
	} else {
		$_POST['phone'] = preg_replace('/[^0-9]/','',$_POST['phone']);
		$res = $db->get_results("SELECT id,date_ordered FROM lc2{$siteCode}_lc.lc_reseller WHERE phone_1='".$db->clean($_POST['phone'])."' OR phone_2='".$db->clean($_POST['phone'])."' OR phone_3='".$db->clean($_POST['phone'])."'");
		if(!empty($res)) {
			$found_them = 1;
		} else {
			$res = $db->get_results("SELECT id,date_ordered FROM lc2{$siteCode}_lc.lc_reseller WHERE first='".$db->clean($_POST['firstName'])."' AND last='".$db->clean($_POST['lastName'])."'");
			if(!empty($res)) {
				$found_them = 1;
			}
		}
	}
	if($is_member=='Yes' && !$found_them) {
		$db->query("INSERT INTO lc2admin.usa_contact_page_submit
					(
						site_code
						,first_name
						,last_name
						,phone
						,zip_code
						,email
						,is_member
						,subject
						,message
						,found_them_client
						,client_id
						,found_them_lead
						,lead_id
						,ts
					) VALUES (
						'".$db->clean($siteCode)."'
						,'".$db->clean($firstName)."'
						,'".$db->clean($lastName)."'
						,'".$db->clean($_POST['phone'])."'
						,'".$db->clean($zip)."'
						,'".$db->clean($contactEmail)."'
						,'".$db->clean($is_member)."'
						,'".$db->clean($subject)."'
						,'".$db->clean($emailMessage)."'
						,0
						,0
						,0
						,0
						,NOW()
					)");
		$data['status']='fail';
		$data['error'] = 'We could not find your account? Are you sure this is the email and phone number you signed up with?';
		echo json_encode($data);
		die();
	}
	if($found_them) {
		$db->query("INSERT INTO lc2admin.usa_contact_page_submit
					(
						site_code
						,first_name
						,last_name
						,phone
						,zip_code
						,email
						,is_member
						,subject
						,message
						,found_them_client
						,client_id
						,found_them_lead
						,lead_id
						,ts
					) VALUES (
						'".$db->clean($siteCode)."'
						,'".$db->clean($firstName)."'
						,'".$db->clean($lastName)."'
						,'".$db->clean($_POST['phone'])."'
						,'".$db->clean($zip)."'
						,'".$db->clean($contactEmail)."'
						,'".$db->clean($is_member)."'
						,'".$db->clean($subject)."'
						,'".$db->clean($emailMessage)."'
						,1
						,'".$db->clean($res[0]->id)."'
						,0
						,0
						,NOW()
					)");
		$db->query("INSERT INTO surfcrm.tickets
					(
						account
						,cust_id
						,site_id
						,cust_name
						,cust_email
						,subject
						,order_date
						,date_imported
						,date_assigned
						,date_completed
						,emp_username
						,spam
						,waiting
						,active
					) VALUES (
						'".$db->clean($siteEmail)."'
						,'".$db->clean($res[0]->id)."'
						,'".$db->clean($siteCode)."'
						,'".$db->clean($firstName.' '.$lastName)."'
						,'".$db->clean($contactEmail)."'
						,'".$db->clean($subject)."'
						,'".$db->clean($res[0]->date_ordered)."'
						,NOW()
						,'0000-00-00 00:00:00'
						,'0000-00-00 00:00:00'
						,''
						,'0'
						,'0'
						,'1'
					)");
		$ticket_id = $db->last_insert_id();
		$db->query("INSERT INTO surfcrm.tickets_events
					(
						tid
						,subject
						,message
						,sender
						,type
						,datecreate
						,active
						,message_id
					) VALUES (
						'".$db->clean($ticket_id)."'
						,'".$db->clean($subject)."'
						,'".$db->clean($emailMessage)."'
						,'".$db->clean($firstName.' '.$lastName)."'
						,'message'
						,NOW()
						,'1'
						,''
					)");
	} else {
		//Look for the lead
		$found_them = 0;
		$res = $db->get_results("SELECT id,date_captured as date_ordered FROM lc2{$siteCode}_lc.lc_leads WHERE email='".$db->clean($contactEmail)."'");
		if(!empty($res)) {
			$found_them = 1;
		} else {
			$_POST['phone'] = preg_replace('/[^0-9]/','',$_POST['phone']);
			$res = $db->get_results("SELECT id,date_captured as date_ordered FROM lc2{$siteCode}_lc.lc_leads WHERE date_captured >= '".date('Y-m-d',strtotime('-1 year'))."' AND (phone='".$db->clean($_POST['phone'])."' OR phone2='".$db->clean($_POST['phone'])."' OR phone3='".$db->clean($_POST['phone'])."')");
			if(!empty($res)) {
				$found_them = 1;
			} else {
				$res = $db->get_results("SELECT id,date_captured as date_ordered FROM lc2{$siteCode}_lc.lc_reseller WHERE first='".$db->clean($_POST['firstName'])."' AND last='".$db->clean($_POST['lastName'])."'");
				if(!empty($res)) {
					$found_them = 1;
				}
			}
		}
		if($found_them) {
			$db->query("INSERT INTO lc2admin.usa_contact_page_submit
					(
						site_code
						,first_name
						,last_name
						,phone
						,zip_code
						,email
						,is_member
						,subject
						,message
						,found_them_client
						,client_id
						,found_them_lead
						,lead_id
						,ts
					) VALUES (
						'".$db->clean($siteCode)."'
						,'".$db->clean($firstName)."'
						,'".$db->clean($lastName)."'
						,'".$db->clean($_POST['phone'])."'
						,'".$db->clean($zip)."'
						,'".$db->clean($contactEmail)."'
						,'".$db->clean($is_member)."'
						,'".$db->clean($subject)."'
						,'".$db->clean($emailMessage)."'
						,0
						,0
						,1
						,'".$db->clean($res[0]->id)."'
						,NOW()
					)");
			$db->query("INSERT INTO surfcrm.tickets
					(
						account
						,cust_id
						,lead_id
						,site_id
						,cust_name
						,cust_email
						,subject
						,order_date
						,date_imported
						,date_assigned
						,date_completed
						,emp_username
						,spam
						,waiting
						,active
					) VALUES (
						'".$db->clean($siteEmail)."'
						,0
						,'".$db->clean($res[0]->id)."'
						,'".$db->clean($siteCode)."'
						,'".$db->clean($firstName.' '.$lastName)."'
						,'".$db->clean($contactEmail)."'
						,'".$db->clean($subject)."'
						,'".$db->clean($res[0]->date_ordered)."'
						,NOW()
						,'0000-00-00 00:00:00'
						,'0000-00-00 00:00:00'
						,''
						,'0'
						,'0'
						,'1'
					)");
			$ticket_id = $db->last_insert_id();
			$db->query("INSERT INTO surfcrm.tickets_events
						(
							tid
							,subject
							,message
							,sender
							,type
							,datecreate
							,active
							,message_id
						) VALUES (
							'".$db->clean($ticket_id)."'
							,'".$db->clean($subject)."'
							,'".$db->clean($emailMessage)."'
							,'".$db->clean($firstName.' '.$lastName)."'
							,'message'
							,NOW()
							,'1'
							,''
						)");
		} else {
			$db->query("INSERT INTO lc2admin.usa_contact_page_submit
					(
						site_code
						,first_name
						,last_name
						,phone
						,zip_code
						,email
						,is_member
						,subject
						,message
						,found_them_client
						,client_id
						,found_them_lead
						,lead_id
						,ts
					) VALUES (
						'".$db->clean($siteCode)."'
						,'".$db->clean($firstName)."'
						,'".$db->clean($lastName)."'
						,'".$db->clean($_POST['phone'])."'
						,'".$db->clean($zip)."'
						,'".$db->clean($contactEmail)."'
						,'".$db->clean($is_member)."'
						,'".$db->clean($subject)."'
						,'".$db->clean($emailMessage)."'
						,0
						,0
						,0
						,0
						,NOW()
					)");
			$db->query("INSERT INTO surfcrm.tickets
						(
							account
							,cust_id
							,site_id
							,cust_name
							,cust_email
							,subject
							,order_date
							,date_imported
							,date_assigned
							,date_completed
							,emp_username
							,spam
							,waiting
							,active
						) VALUES (
							'".$db->clean($siteEmail)."'
							,'0'
							,'".$db->clean($siteCode)."'
							,'".$db->clean($firstName.' '.$lastName)."'
							,'".$db->clean($contactEmail)."'
							,'".$db->clean($subject)."'
							,'0000-00-00 00:00:00'
							,NOW()
							,'0000-00-00 00:00:00'
							,'0000-00-00 00:00:00'
							,''
							,'0'
							,'0'
							,'1'
						)");
			$ticket_id = $db->last_insert_id();
			$db->query("INSERT INTO surfcrm.tickets_events
						(
							tid
							,subject
							,message
							,sender
							,type
							,datecreate
							,active
							,message_id
						) VALUES (
							'".$db->clean($ticket_id)."'
							,'".$db->clean($subject)."'
							,'".$db->clean($emailMessage)."'
							,'".$db->clean($firstName.' '.$lastName)."'
							,'message'
							,NOW()
							,'1'
							,''
						)");
		}
	}
	$data['status']='pass';
} else {
	$data['status']='fail';
}


/*$db->query("
				INSERT INTO surfcrm.issues
				SET
					problem = '$message',
					file = '/vx/usa/contact/',
					username = '$contactEmail',
					email = '$contactEmail',
					site_code = '$siteCode',
					device = '$device',
					browser = '$browser',
					operating_system = '$operatingSystem',
					client_id = '$user',
					user_agent = '".$_SERVER['HTTP_USER_AGENT']."',
					status_date = NOW(),
					date_created = NOW(),
					status = 'New',
					creator_has_seen = 0
		");
if($db->valid())
{
	$newIssue = $db->last_insert_id();
	$db->query("
					INSERT INTO surfcrm.issues_assigned_to
					SET 
						issue_id = '$newIssue',
						username = 'Customer Service',
						has_seen = 0
	");
	if($db->valid())
	{
		$data["result"] = "success";
	}
}*/
/*
$attn = "USA Grant Application.org Support - Support "; 	
$messageText = "Attention: $attn, 
A support request was submitted from $firstName $lastName ($contactEmail) on the following subject: $subject. 
Message: $message
-------- Additional Info: ----------
IP Address: ".$_SERVER['REMOTE_ADDR']." 
Browser Info: ".$_SERVER['HTTP_USER_AGENT']."
Referer URL: ".$_SERVER['HTTP_REFERER'];
$to = $siteEmail;
$headers = "MIME-Version: 1.0" . "\r\n";
$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$headers .= 'From: <'.$to.'>' . "\r\n";
if(mail($to, $subject, $messageText, $headers))
{
	$data['to'] = $to;
	$data['message'] = $messageText;
	$data['result'] = "success";
}
*/
echo json_encode($data);
?>