Free Contact Form PHP Script with image captcha - OLD VERSION

[MCHALLIS]

I made a Free Contact Form PHP Script with image captcha
It includes a captcha with audio and a refresh feature.

You can see my contact form here
http://www.642weather.com/weather/contact_us.php

Features:
Tested code (has been running on several sites for several months with no problems)
XHTML Transitional compliant
Reloads form data and warns user if user forgets to fill out a field.
No need to press back button.
Optional redirect to home page after message sent
Validates syntax of email address (user@aol = bad, user@aol.com = good)
Use as a standalone page or incorporate into your site template
It can run on most any webserver as long as you have PHP installed, and GD support within PHP.
(see readme.txt inside the zip for full instructions)

Security:
It has very tight security, it stops all the spammer tricks I have found.
Filters all form inputs from html and other nasties.
Spamchecks email address input from common spammer tactics...
 prevents spammer forcing to:, cc:, bcc:, newlines, and other email injection attempts to spam the world
Make sure the form was posted from your approved host name only. (enable or disable with a setting)
E-mail message shows IP address and user agent (browser version) of user who contacted you

Captcha Image by www.phpcaptcha.org included (enable or disable with a setting)
# open-source free PHP CAPTCHA script
# Abstract background with multi colored, angled, and transparent text
# Arched lines through text
# Generates audible CAPTCHA files in wav format
# refresh button to reload captcha if you cannot read it.

This has been replaced with my new PHP version
Fast Secure Contact Form – PHP Script
http://www.fastsecurecontactform.com/download-php-script

Here is a sample contact email message: (my real ip has been masked for this post)
------------------------

Sent from Long Beach Weather contact form

To: Webmaster

From:
Mike Test
mike@somewebsite.com

Message:
This is a test to show what the email message looks like

Sent from (ip address): 68.118.xxx.xxx (68-118-xxx-xxx.dhcp.xxx.xxx.charter.com)
Coming from (referer): http://www.642weather.com/weather/contact_us.php
Using (user agent): Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0

[Budgie]

Thanks for reminding me Mike, I've been meaning to add this to my own site after running it on SCWN since that started.
A highly recommended addition to your site folks!! 

Edit: All up & running on both my weather & photos sites. 

[drobbins]

WOW  - That was easy!

[MCHALLIS]

Did you know that spambots crawl over websites looking for email addresses, when they find one they add it to their database for junk email?

Problem:
If you publish your email on your web site, like in this example....
<a href="mailto:you@somewebsite.com" title="E-mail us">Contact Us</a>
... then your email will most definitely start getting lots of spam.
It is foolish to have your email address 'in plain site' on your websites, because harvesting them is one of the biggest ways that spammers get huge lists of email addresses to spam.

Solution:
Use my contact.php form so that your email address is completely concealed.

Another solution (although not as foolproof):
Use JavaScript to encrypt and hide your address from spam-bots.
http://www.dynamicdrive.com/emailriddler/

[MCHALLIS]

Current Version: 1.05  09-Aug-2008 Spelling correction in $welcome_intro, also shortened it a bit. (no other code changes)
Thanks niko 

[SandhurstWX]

Mike,
What a useful script, and swiftly incorporated into my site. Many thanks to you and all who keep on coming up with all these useful scripts.

[NorCal Dan]

Mike,
What a useful script, and swiftly incorporated into my site. Many thanks to you and all who keep on coming up with all these useful scripts.

Yes, very nice and easy to incorporate.  Thanks.

[kray1000]

Working very nicely here as well.  Thanks, Mike.

P.S. -- Love the CAPS "decapitator"! 

[MCHALLIS]

Updated today - Version: 1.06  10-Aug-2008 Now automatically adds numbered keys to the $contacts array for simpler contacts config
                           changed page title to 'Contact Us'
                           added version print tag into html source
                           added error message if "captcha_library not found"
                           added features by Kevin Reed at www.tnetweather.com: (Thanks Kevin)
                           Added HTML code to Pass Section 508 and WAI accessibility validation
                           Added meta tags (WAI Requirement)
                           Added labels for form elements (WAI Requirement)
                           Removed the table since is was not really needed.
                           Added fieldset/legend
                           Added CSS basics for the form to allow easier enhancement.
                           The entire form is now controlled by the the div id of contactform.
                           Some other small changes.
If upgrading to version 1.06 and are integrating into your website template...
follow step 4 of the readme.txt and be sure to add the css and meta tags to your html <head></head> section

[daveq]

Mike, works very well and easy to set up.  I linked mine from the footer 'Contact Us' instead of adding a button.  You guys never cease to amaze me.

Thanks.

--Dave

Yikes.  New version as I was typing.

[far_ken_beauty]

Yep. will be adding this. Well done. 

[MCHALLIS]

Updated today...
Current Version: Version: 1.07 - 11-Aug-2008 added features: checks for required mail and image PHP functions
                           fixed bug with truncated string when double quote in name or subject input
                           Better input string protection, new cleaner code input functions
                           renamed all included subroutines with ctf_ prefix so they will not conflict with other scripts
                           wordwrap email message text so lines are no longer than 70 characters
                           added ini_set sendmail_from, needed for some windows servers
                           this update is recommended for the bug fix and better security
If upgrading to version 1.06 or higher and are integrating into your website template...
follow step 4 of the readme.txt and be sure to add the css and meta tags to your html <head></head> section

[MCHALLIS]

Version: 1.08 - 13-Aug-2008
added a few settings for email message headers
few other small fixes

[NorCal Dan]

I don't see the subject in the email I sent myself...I must have something setup wrong as none of my previous emails had the subject line in them...

[dafuser]

I'm getting the following error when I test the contact.php script:

Warning: mail(): Bad parameters to mail() function, mail not sent. in /home/content/d/a/f/dafuser/html/wx/contact.php on line 394

Message Sent

Your message has been sent, thank you.

I'm guessing I have some part of the configuration wrong, but don't see what it is.