[ 'host' => 'smtp.office365.com', // e.g. smtp.gmail.com 'port' => 587, // 465 (SSL) or 587 (STARTTLS) 'security' => 'tls', // 'ssl' | 'tls' | '' (none) 'username' => 'career@insurasoft.biz', 'password' => '******', 'from_email' => 'career@insurasoft.biz', 'from_name' => 'RC Systems Careers', 'to_email' => 'jack@insurasoft.biz', 'envelope_from' => null, 'timeout' => 15, ], 'form' => [ 'require_phone' => true, 'require_message' => true, ], 'upload' => [ 'required' => true, 'max_bytes' => 5 * 1024 * 1024, // 5 MB 'allowed_exts' => ['pdf','doc','docx','txt','rtf'], ], 'ui' => [ 'brand' => 'RC Systems — Talent Submission', ] ]; /* =========================== 2) HELPER: SAFE HTML =========================== */ function h($s) { return htmlspecialchars((string)$s, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'); } /* =========================== 3) VALIDATION & PROCESSING =========================== */ $errors = []; $success = false; $fields = [ 'full_name' => '', 'email' => '', 'phone' => '', 'expertise' => '', 'experience_years' => '', 'message' => '', ]; $expertiseOptions = ['Programming','Design','Customer Support','Accounting','Analytics']; if ($_SERVER['REQUEST_METHOD'] === 'POST') { // Collect fields foreach ($fields as $k => $v) { $fields[$k] = isset($_POST[$k]) ? trim((string)$_POST[$k]) : ''; } // Validate if ($fields['full_name'] === '' || mb_strlen($fields['full_name']) < 2) { $errors[] = 'Please enter a valid Full Name.'; } if (!filter_var($fields['email'], FILTER_VALIDATE_EMAIL)) { $errors[] = 'Please enter a valid Email Address.'; } if ($CONFIG['form']['require_phone'] && $fields['phone'] === '') { $errors[] = 'Phone Number is required.'; } if (!in_array($fields['expertise'], $expertiseOptions, true)) { $errors[] = 'Please select a valid Field of Expertise.'; } if ($fields['experience_years'] === '' || !preg_match('/^\d{1,2}$/', $fields['experience_years'])) { $errors[] = 'Please enter a valid number for Years of Experience (0–99).'; } if ($CONFIG['form']['require_message'] && (mb_strlen($fields['message']) < 5)) { $errors[] = 'Please provide a brief Message (at least 5 characters).'; } // File upload validation $attachment = null; // ['name'=>..., 'type'=>..., 'data'=>...] if (isset($_FILES['cv']) && $_FILES['cv']['error'] !== UPLOAD_ERR_NO_FILE) { $err = $_FILES['cv']['error']; if ($err !== UPLOAD_ERR_OK) { $errors[] = 'File upload failed. Error code: ' . (int)$err; } else { if ($_FILES['cv']['size'] > $CONFIG['upload']['max_bytes']) { $errors[] = 'File too large. Max size is ' . number_format($CONFIG['upload']['max_bytes'] / (1024*1024), 2) . ' MB.'; } else { $ext = strtolower(pathinfo($_FILES['cv']['name'], PATHINFO_EXTENSION)); if (!in_array($ext, $CONFIG['upload']['allowed_exts'], true)) { $errors[] = 'Invalid file type. Allowed: ' . implode(', ', $CONFIG['upload']['allowed_exts']); } else { $finfo = new finfo(FILEINFO_MIME_TYPE); $mime = $finfo->file($_FILES['cv']['tmp_name']) ?: 'application/octet-stream'; $data = file_get_contents($_FILES['cv']['tmp_name']); if ($data === false) { $errors[] = 'Unable to read uploaded file.'; } else { $attachment = [ 'name' => $_FILES['cv']['name'], 'type' => $mime, 'data' => $data ]; } } } } } elseif ($CONFIG['upload']['required']) { $errors[] = 'Please upload your CV.'; } // If valid, send email via SMTP if (!$errors) { $subject = 'New Candidate Submission: ' . $fields['full_name'] . ' (' . $fields['expertise'] . ')'; // Build email body (text + HTML) $bodyText = "A new submission has been received:\n\n" . "Full Name: {$fields['full_name']}\n" . "Email: {$fields['email']}\n" . "Phone: {$fields['phone']}\n" . "Field of Expertise: {$fields['expertise']}\n" . "Years of Experience: {$fields['experience_years']}\n\n" . "Message:\n{$fields['message']}\n"; $bodyHtml = '' . '

New Candidate Submission

' . '' . '' . '' . '' . '' . '' . '

Full Name	' . h($fields['full_name']) . '
Email	' . h($fields['email']) . '
Phone	' . h($fields['phone']) . '
Field of Expertise	' . h($fields['expertise']) . '
Years of Experience	' . h($fields['experience_years']) . '

' . '

Message
' . nl2br(h($fields['message'])) . '

' . '

This message was sent from the website form.

' . ''; $mailResult = smtp_send_mail( $CONFIG['smtp'], [ 'to' => $CONFIG['smtp']['to_email'], 'subject' => $subject, 'from_email' => $CONFIG['smtp']['from_email'], 'from_name' => $CONFIG['smtp']['from_name'], 'body_text' => $bodyText, 'body_html' => $bodyHtml, 'attachments' => $attachment ? [$attachment] : [] ] ); if ($mailResult === true) { $success = true; // Reset fields after success foreach ($fields as $k => $v) $fields[$k] = ''; } else { $errors[] = 'Email sending failed: ' . $mailResult; } } } /* =========================== 4) SMTP SENDER (Minimal) =========================== */ /** * smtp_send_mail — minimal SMTP client supporting AUTH LOGIN, STARTTLS/SSL, attachments * @param array $smtpConf * @param array $msg { * to, subject, from_email, from_name, body_text, body_html, attachments: [ ['name','type','data']... ] * } * @return true|string true on success; error string on failure */ function smtp_send_mail(array $smtpConf, array $msg) { $host = $smtpConf['host']; $port = (int)$smtpConf['port']; $security = strtolower((string)$smtpConf['security']); $timeout = (int)($smtpConf['timeout'] ?? 15); $user = $smtpConf['username']; $pass = $smtpConf['password']; $from = $smtpConf['envelope_from'] ?: $msg['from_email']; $transport = $host; if ($security === 'ssl') { $transport = "ssl://{$host}"; if ($port === 587) $port = 465; } $fp = @stream_socket_client("{$transport}:{$port}", $errno, $errstr, $timeout, STREAM_CLIENT_CONNECT); if (!$fp) { return "Connection error: {$errstr} ({$errno})"; } stream_set_timeout($fp, $timeout); $read = function() use ($fp) { $data = ''; while (!feof($fp)) { $line = fgets($fp, 515); if ($line === false) break; $data .= $line; if (preg_match('/^\d{3}\s/', $line)) break; // last line of response } return $data; }; $write = function($cmd) use ($fp) { return fwrite($fp, $cmd); }; $expect = function($resp, $code) { return (strpos($resp, (string)$code) === 0); }; // Greet $resp = $read(); if (!preg_match('/^220/', $resp)) { fclose($fp); return "Unexpected greeting: " . trim($resp); } $hostname = gethostname() ?: 'localhost'; $write("EHLO {$hostname}\r\n"); $resp = $read(); if (!preg_match('/^250/', $resp)) { // Try HELO $write("HELO {$hostname}\r\n"); $resp = $read(); if (!preg_match('/^250/', $resp)) { fclose($fp); return "EHLO/HELO failed: " . trim($resp); } } // STARTTLS (if configured) if ($security === 'tls') { $write("STARTTLS\r\n"); $resp = $read(); if (!preg_match('/^220/', $resp)) { fclose($fp); return "STARTTLS failed: " . trim($resp); } if (!stream_socket_enable_crypto($fp, true, STREAM_CRYPTO_METHOD_TLS_CLIENT)) { fclose($fp); return "TLS negotiation failed."; } // EHLO again after STARTTLS $write("EHLO {$hostname}\r\n"); $resp = $read(); if (!preg_match('/^250/', $resp)) { fclose($fp); return "EHLO after STARTTLS failed: " . trim($resp); } } // AUTH LOGIN if ($user !== '' || $pass !== '') { $write("AUTH LOGIN\r\n"); $resp = $read(); if (!preg_match('/^334/', $resp)) { fclose($fp); return "AUTH LOGIN not accepted: " . trim($resp); } $write(base64_encode($user) . "\r\n"); $resp = $read(); if (!preg_match('/^334/', $resp)) { fclose($fp); return "Username rejected: " . trim($resp); } $write(base64_encode($pass) . "\r\n"); $resp = $read(); if (!preg_match('/^235/', $resp)) { fclose($fp); return "Password rejected: " . trim($resp); } } // MAIL FROM $write("MAIL FROM:<{$from}>\r\n"); $resp = $read(); if (!preg_match('/^250/', $resp)) { fclose($fp); return "MAIL FROM failed: " . trim($resp); } // RCPT TO $toList = array_map('trim', explode(',', $msg['to'])); foreach ($toList as $to) { $write("RCPT TO:<{$to}>\r\n"); $resp = $read(); if (!preg_match('/^250|^251/', $resp)) { fclose($fp); return "RCPT TO failed for {$to}: " . trim($resp); } } // DATA $write("DATA\r\n"); $resp = $read(); if (!preg_match('/^354/', $resp)) { fclose($fp); return "DATA command rejected: " . trim($resp); } // Build MIME message $boundaryMixed = 'bnd_mixed_' . bin2hex(random_bytes(6)); $boundaryAlt = 'bnd_alt_' . bin2hex(random_bytes(6)); $subjectHeader = function($s) { if (function_exists('mb_encode_mimeheader')) { return mb_encode_mimeheader($s, 'UTF-8', 'B', "\r\n"); } return '=?UTF-8?B?' . base64_encode($s) . '?='; }; $headers = []; $headers[] = 'Date: ' . date('r'); $headers[] = 'From: ' . $msg['from_name'] . ' <' . $msg['from_email'] . '>'; $headers[] = 'To: ' . implode(', ', $toList); $headers[] = 'Subject: ' . $subjectHeader($msg['subject']); $headers[] = 'MIME-Version: 1.0'; $headers[] = 'Content-Type: multipart/mixed; boundary="' . $boundaryMixed . '"'; $eol = "\r\n"; $mime = implode($eol, $headers) . $eol . $eol; $mime .= '--' . $boundaryMixed . $eol; $mime .= 'Content-Type: multipart/alternative; boundary="' . $boundaryAlt . '"' . $eol . $eol; // Text part $mime .= '--' . $boundaryAlt . $eol; $mime .= 'Content-Type: text/plain; charset=UTF-8' . $eol; $mime .= 'Content-Transfer-Encoding: 7bit' . $eol . $eol; $mime .= $msg['body_text'] . $eol . $eol; // HTML part $mime .= '--' . $boundaryAlt . $eol; $mime .= 'Content-Type: text/html; charset=UTF-8' . $eol; $mime .= 'Content-Transfer-Encoding: 7bit' . $eol . $eol; $mime .= $msg['body_html'] . $eol . $eol; // End alternative $mime .= '--' . $boundaryAlt . '--' . $eol; // Attachments foreach ($msg['attachments'] as $att) { $mime .= '--' . $boundaryMixed . $eol; $nameEnc = $att['name']; // RFC 2231 filename* for UTF-8 $mime .= 'Content-Type: ' . ($att['type'] ?: 'application/octet-stream') . '; name="' . addcslashes($nameEnc, '"') . '"' . $eol; $mime .= "Content-Transfer-Encoding: base64{$eol}"; $mime .= 'Content-Disposition: attachment; filename="' . addcslashes($nameEnc, '"') . '"' . $eol . $eol; $mime .= chunk_split(base64_encode($att['data'])) . $eol; } // End mixed $mime .= '--' . $boundaryMixed . '--' . $eol . '.' . $eol; $write($mime); $resp = $read(); if (!preg_match('/^250/', $resp)) { fclose($fp); return "DATA send failed: " . trim($resp); } // QUIT $write("QUIT\r\n"); $read(); // ignore fclose($fp); return true; } ?>