zem_contact_reborn plugin

function zem_contact($atts, $thing = '')
{
        global $sitename, $prefs, $production_status, $zem_contact_from,
                $zem_contact_recipient, $zem_contact_error, $zem_contact_submit,
                $zem_contact_form, $zem_contact_labels, $zem_contact_values;

        extract(zem_contact_lAtts(array(
                'copysender'  => 0,
                'form'                => '',
                'from'                => '',
                'from_form'   => '',
                'label'               => zem_contact_gTxt('contact'),
                'redirect'    => '',
                'show_error'  => 1,
                'show_input'  => 1,
                'send_article'        => 0,
                'subject'     => zem_contact_gTxt('email_subject', html_entity_decode($sitename,ENT_QUOTES)),
                'subject_form'        => '',
                'to'          => '',
                'to_form'     => '',
                'thanks'      => graf(zem_contact_gTxt('email_thanks')),
                'thanks_form' => ''
        ), $atts));

        unset($atts['show_error'], $atts['show_input']);
        $zem_contact_form_id = md5(serialize($atts).preg_replace('/[\t\s\r\n]/','',$thing));
        $zem_contact_submit = (ps('zem_contact_submit') and ps('zem_contact_form_id') == $zem_contact_form_id);

        if (!is_callable('mail'))
        {
                return ($production_status == 'live') ?
                        zem_contact_gTxt('mail_sorry') :
                        gTxt('warn_mail_unavailable');
        }

        static $headers_sent = false;
        if (!$headers_sent) {
                header('Last-Modified: '.gmdate('D, d M Y H:i:s',time()-3600*24*7).' GMT');
                header('Expires: '.gmdate('D, d M Y H:i:s',time()+600).' GMT');
                header('Cache-Control: no-cache, must-revalidate');
                $headers_sent = true;
        }

        $nonce   = mysql_real_escape_string(ps('zem_contact_nonce'));
        $renonce = false;

        if ($zem_contact_submit)
        {
                safe_delete('txp_discuss_nonce', 'issue_time < date_sub(now(), interval 10 minute)');
                if ($rs = safe_row('used', 'txp_discuss_nonce', "nonce = '$nonce'"))
                {
                        if ($rs['used'])
                        {
                                unset($zem_contact_error);
                                $zem_contact_error[] = zem_contact_gTxt('form_used');
                                $renonce = true;
                                $_POST = array();
                                $_POST['zem_contact_submit'] = 1;
                                $_POST['zem_contact_form_id'] = $zem_contact_form_id;
                                $_POST['zem_contact_nonce'] = $nonce;
                        }
                }
                else
                {
                        $zem_contact_error[] = zem_contact_gTxt('form_expired');
                        $renonce = true;
                }
        }

        if ($zem_contact_submit and $nonce and !$renonce)
        {
                $zem_contact_nonce = $nonce;
        }

        elseif (!$show_error or $show_input)
        {
                $zem_contact_nonce = md5(uniqid(rand(), true));
                safe_insert('txp_discuss_nonce', "issue_time = now(), nonce = '$zem_contact_nonce'");
        }

        $form = ($form) ? fetch_form($form) : $thing;

        if (empty($form))
        {
                $form = '
'.zem_contact_gTxt('name').'" />


'.
($send_article ? ''.zem_contact_gTxt('recipient').'" />
' : '').
'


';
        }

        $form = parse($form);

        if ($to_form)
        {
                $to = parse(fetch_form($to_form));
        }

        if (!$to and !$send_article)
        {
                return zem_contact_gTxt('to_missing');
        }

        $out = '';

        if (!$zem_contact_submit) {
          # don't show errors or send mail
        }

        elseif (!empty($zem_contact_error))
        {
                if ($show_error or !$show_input)
                {
                        $out .= n.'
';

                        foreach (array_unique($zem_contact_error) as $error)
                        {
                                $out .= n.t.'
'.$error.'';
                        }

                        $out .= n.'';

                        if (!$show_input) return $out;
                }
        }

        elseif ($show_input and is_array($zem_contact_form))
        {
                /// load and check spam plugins/
                callback_event('zemcontact.submit');
                $evaluation =& get_zemcontact_evaluator();
                $clean = $evaluation->get_zemcontact_status();
                if ($clean != 0) {
                        return zem_contact_gTxt('spam');
                }

                if ($from_form)
                {
                        $from = parse(fetch_form($from_form));
                }

                if ($subject_form)
                {
                        $subject = parse(fetch_form($subject_form));
                }

                $sep = !is_windows() ? "\n" : "\r\n";

                $msg = array();

                foreach ($zem_contact_labels as $name => $label)
                {
                        $msg[] = $label.': '.$zem_contact_values[$name];
                }

                if ($send_article)
                {
                        global $thisarticle;
                        $subject = str_replace('&', '&', $thisarticle['title']);
                        $msg[] = permlinkurl($thisarticle);
                        $msg[] = $subject;
                        $s_ar = array('‘', '’', '“', '”', '’', '′', '″', '…', '–', '—', '×', '™', '®', '©', '<', '>', '"', '&', '&', "\t", '');
                        if ($prefs['override_emailcharset'] and is_callable('utf8_decode')) {
                                $r_ar = array("'", "'", '"', '"', "'", "'", '"', '...', '-', '--', 'x', '[tm]', '(r)', '(c)', '<', '>', '"', '&', '&', ' ', "\n");
                        }
                        else
                        {
                                $r_ar = array('‘', '’', '“', '”', '’', '′', '″', '…', '–', '—', '×', '™', '®', '©', '<', '>', '"', '&', '&', ' ', "\n");
                        }
                        $msg[] = trim(strip_tags(str_replace($s_ar,$r_ar,(trim(strip_tags($thisarticle['excerpt'])) ? $thisarticle['excerpt'] : $thisarticle['body']))));
                        if (empty($zem_contact_recipient))
                        {
                                return zem_contact_gTxt('field_missing', htmlspecialchars(zem_contact_gTxt('recipient')));
                        }
                        else
                        {
                                $to = $zem_contact_recipient;
                        }
                }

                $msg = join("\n\n", $msg);
                $msg = str_replace("\r\n", "\n", $msg);
                $msg = str_replace("\r", "\n", $msg);
                $msg = str_replace("\n", $sep, $msg);

                if ($from)
                {
                        $reply = $zem_contact_from;
                }

                else
                {
                        $from = $zem_contact_from;
                        $reply = '';
                }

                $from    = zem_contact_strip($from);
                $to      = zem_contact_strip($to);
                $subject = zem_contact_strip($subject);
                $reply   = zem_contact_strip($reply);
                $msg     = zem_contact_strip($msg, FALSE);

                if ($prefs['override_emailcharset'] and is_callable('utf8_decode'))
                {
                        $charset = 'ISO-8599-1';
                        $to      = utf8_decode($to);
                        $subject = utf8_decode($subject);
                        $msg     = utf8_decode($msg);
                        $from    = utf8_decode($from);
                        $reply   = utf8_decode($reply);
                }

                else
                {
                        $charset = 'UTF-8';
                }

                $subject = zem_contact_mailheader($subject, 'text');

                $headers = 'From: '.$from.
                        ($reply ? ($sep.'Reply-To: '.$reply) : '').
                        $sep.'X-Mailer: Textpattern (zem_contact_reborn)'.
                        $sep.'X-Originating-IP: '.(!empty($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['HTTP_X_FORWARDED_FOR'].' via ' : '').$_SERVER['REMOTE_ADDR'].
                        $sep.'Content-Transfer-Encoding: 8bit'.
                        $sep.'Content-Type: text/plain; charset="'.$charset.'"';

                safe_update('txp_discuss_nonce', "used = '1', issue_time = now()", "nonce = '$nonce'");

                if (mail($to, $subject, $msg, $headers))
                {
                        $_POST = array();

                        if ($copysender and $zem_contact_from)
                        {
                                mail($from, $subject, $msg, $headers);
                        }

                        if ($redirect)
                        {
                                while (@ob_end_clean());
                                $uri = hu.ltrim($redirect,'/');
                                if (empty($_SERVER['FCGI_ROLE']) and empty($_ENV['FCGI_ROLE']))
                                {
                                        txp_status_header('303 See Other');
                                        header('Location: '.$uri);
                                        header('Connection: close');
                                        header('Content-Length: 0');
                                }
                                else
                                {
                                        $uri = htmlspecialchars($uri);
                                        $refresh = zem_contact_gTxt('refresh');
                                        echo <<<END
DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
        <title>$sitenametitle>
        /html; charset=utf-8" />
        "refresh" content="0;url=$uri" />


"$uri">$refresh


END;
                                }
                                exit;
                        }

                        else
                        {
                                return '
"zemThanks" id="zcr'.$zem_contact_form_id.'">' .
                                        ($thanks_form ? fetch_form($thanks_form) : $thanks) .
                                        '
';
                        }
                }

                else
                {
                        $out .= graf(zem_contact_gTxt('mail_sorry'));
                }
        }

        if ($show_input and !$send_article or gps('zem_contact_send_article'))
        {
                return '
"post"'.((!$show_error and $zem_contact_error) ? '' : ' id="zcr'.$zem_contact_form_id.'"').' class="zemContactForm" action="'.serverSet('REQUEST_URI').'#zcr'.$zem_contact_form_id.'">'.
                        ( $label ? n.'
' : n.'
' ).
                        ( $label ? n.'
'.$label.'' : '' ).
                        $out.
                        n.''.$zem_contact_nonce.'" />'.
                        n.''.$zem_contact_form_id.'" />'.
                        $form.
                        callback_event('zemcontact.form').
                        ( $label ? (n.'') : (n.'