PHP file displays code

andersond

I have a PHP file that usually sends an email. Instead, it now simply displays the code beginning with line 14 (where #eol= begins). Can anybody help me with this?

Expand|Select|Wrap|Line Numbers

 
<?php
 
  #Change only the information after the equals sign
 
  $to = $_REQUEST['ProducerEmail'];  

  $body = "Your request to bind the submission on ".$_REQUEST['IName']." has been received by United Brokers. After it has been reviewed for content by an Underwriter and it has been determined that no essential information is missing it will be sent to Processing and will, typically, be on its way back to you within 48 hours.  Thank you for your business.";

  $subject = "RE: ".$_REQUEST['IName']." - Submission Received";

  $fromaddress = $_REQUEST['UWemail']; 

  $fromname = $_REQUEST['Underwriter'];

  $agent = $_REQUEST['Agent'];

  $producer = $_REQUEST['Producer'];
 
  # DO NOT EDIT BELOW THIS

  $eol="\r\n";

  $attachments=false;

  $mime_boundary=md5(time());
 
  # Common Headers

  $headers .= "From: ".$fromname."<".$fromaddress.">".$eol;

  $headers .= "Reply-To: ".$fromname."<".$fromaddress.">".$eol;

  $headers .= "Return-Path: ".$fromname."<".$fromaddress.">".$eol;    // these two to set reply address

  $headers .= "Message-ID: <".time()."-".$fromaddress.">".$eol;

  $headers .= "X-Mailer: PHP v".phpversion().$eol;          // These two to help avoid spam-filters
 
  # Boundry for marking the split & Multitype Headers

  $headers .= 'MIME-Version: 1.0'.$eol.$eol;

  $headers .= "Content-Type: multipart/mixed; boundary=\"".$mime_boundary."\"".$eol.$eol;
 
  # Open the first part of the mail

  $msg = "--".$mime_boundary.$eol;
 
  $htmlalt_mime_boundary = $mime_boundary."_htmlalt"; //we must define a different MIME boundary for this section

  # Setup for text OR html -

  $msg .= "Content-Type: multipart/alternative; boundary=\"".$htmlalt_mime_boundary."\"".$eol.$eol;
 
  # Text Version

  $msg .= "--".$htmlalt_mime_boundary.$eol;

  $msg .= "Content-Type: text/plain; charset=iso-8859-1".$eol;

  $msg .= "Content-Transfer-Encoding: 8bit".$eol.$eol;

  $msg .= strip_tags(str_replace("<br>", "\n", substr($body, (strpos($body, "<body>")+6)))).$eol.$eol;
 
  # HTML Version

  $msg .= "--".$htmlalt_mime_boundary.$eol;

  $msg .= "Content-Type: text/html; charset=iso-8859-1".$eol;

  $msg .= "Content-Transfer-Encoding: 8bit".$eol.$eol;

  $msg .= $body.$eol.$eol;
 
  //close the html/plain text alternate portion

  $msg .= "--".$htmlalt_mime_boundary."--".$eol.$eol;
 
  if ($attachments !== false)

  {

    for($i=0; $i < count($attachments); $i++)

    {

      if (is_file($attachments[$i]["file"]))

      {   

        # File for Attachment

        $file_name = substr($attachments[$i]["file"], (strrpos($attachments[$i]["file"], "/")+1));
 
        $handle=fopen($attachments[$i]["file"], 'rb');

        $f_contents=fread($handle, filesize($attachments[$i]["file"]));

        $f_contents=chunk_split(base64_encode($f_contents));    //Encode The Data For Transition using base64_encode();

        $f_type=filetype($attachments[$i]["file"]);

        fclose($handle);
 
        # Attachment

        $msg .= "--".$mime_boundary.$eol;

        $msg .= "Content-Type: ".$attachments[$i]["content_type"]."; name=\"".$file_name."\"".$eol;  // sometimes i have to send MS Word, use 'msword' instead of 'pdf'

        $msg .= "Content-Transfer-Encoding: base64".$eol;

        $msg .= "Content-Description: ".$file_name.$eol;

        $msg .= "Content-Disposition: attachment; filename=\"".$file_name."\"".$eol.$eol; // !! This line needs TWO end of lines !! IMPORTANT !!

        $msg .= $f_contents.$eol.$eol;

      }

    }

  }
 
  # Finished

  $msg .= "--".$mime_boundary."--".$eol.$eol;  // finish with two eol's for better security. see Injection.
 
  # SEND THE EMAIL

  ini_set(sendmail_from,$fromaddress);  // the INI lines are to force the From Address to be used !

  $mail_sent = mail($to, $subject, $msg, $headers);
 
  ini_restore(sendmail_from);
 
  return $mail_sent;
 
?>

Atli

Please use CODE tags when posting source code:

[CODE=php]
PHP code goes here.
[/CODE]

Moderator

code green

This is usually because of a missed closing php tag or including a file without php tags.
All code is then parsed as HTML by the browser.
Can't see anything in your code.
Although could be coming via the REQUEST global, because you have no input validation whatsoever.
Rather dangerous to allow this.
Can you double check your code for any of the above and echo out the REQUEST global to see what is in there?

Atli

Hi.

I, like code green, see nothing wrong with that code.

Are you sure this is the code that you are running. Is there a chance you are running an old, out of date version on your server, rather than the one you are editing?

When I first read your post I thought it had something to do with the <?php tags, but there doesn't seem to be anything wrong with them.

My only concern is, like code green mentioned, that you are using $_REQUEST without any validation. I would advise using the $_POST, $_GET and $_COOKIE super-globals instead of the $_REQUEST super-global, for increased security, and that you make sure the values that are passed are those you are expecting.

PHP file displays code

re: PHP file displays code

re: PHP file displays code

re: PHP file displays code

Similar PHP bytes

/bytes/development

/bytes/it

/bytes/about