

<div style='background:#0a0a0a; color:#00ff41; font-family:monospace; padding:20px; max-width:900px; margin:20px auto; border:1px solid #00ff41;'><h2 style='color:#ffcc80;'>✏ EDIT: send_booking.php</h2><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#1a1a1a; color:#00ff41; border:1px solid #00ff41; font-family:monospace; padding:10px;'>&lt;?php
// send_booking.php
//
// Handles appointment requests submitted via the booking modal on
// various pages of the Huenic Care website. The script collects
// details from the POST body, validates required fields and
// dispatches the request via SMTP to all configured recipients.
//
// Configuration values (SMTP host, user, password and recipient
// addresses) are defined in config.php. If you need to change the
// password or update the list of recipients, edit that file
// accordingly. To protect sensitive information, avoid committing
// credentials to version control.

header(&#039;Content-Type: application/json&#039;);

// Only allow POST requests
if ($_SERVER[&#039;REQUEST_METHOD&#039;] !== &#039;POST&#039;) {
    echo json_encode([&#039;status&#039; =&gt; &#039;error&#039;, &#039;message&#039; =&gt; &#039;Invalid request&#039;]);
    exit;
}

// Pull configuration settings
require_once __DIR__ . &#039;/config.php&#039;;

/**
 * Send an email via SMTP using a simple socket connection. This
 * function implements the minimum SMTP commands required to log in,
 * compose and send a multipart message with optional attachment.
 *
 * @param array  $to        An array of recipient email addresses.
 * @param string $subject   The email subject.
 * @param string $body      The plain text body of the message.
 * @param string $replyTo   The reply‑to address for responses.
 * @param array|null $attachment Optional associative array with keys
 *                               &#039;path&#039;, &#039;name&#039; and &#039;type&#039; for an
 *                               uploaded file. If null, no attachment
 *                               will be included.
 * @return bool             True on success, false on failure.
 */
function send_smtp_mail(array $to, string $subject, string $body, string $replyTo, ?array $attachment = null, bool $isHtml = false): bool
{
    // Use globals from config.php
    $smtpHost = SMTP_HOST;
    $smtpPort = SMTP_PORT;
    $smtpUser = SMTP_USER;
    $smtpPass = SMTP_PASS;
    $fromEmail = SMTP_FROM_EMAIL;
    $fromName = SMTP_FROM_NAME;

    // Create an SSL stream context that ignores self‑signed certificates.
    $context = stream_context_create([
        &#039;ssl&#039; =&gt; [
            &#039;verify_peer&#039; =&gt; false,
            &#039;verify_peer_name&#039; =&gt; false,
            &#039;allow_self_signed&#039; =&gt; true,
        ],
    ]);
    $socket = @stream_socket_client(
        &#039;ssl://&#039; . $smtpHost . &#039;:&#039; . $smtpPort,
        $errno,
        $errstr,
        30,
        STREAM_CLIENT_CONNECT,
        $context
    );
    if (!$socket) {
        return false;
    }

    // Helper to read a response from the server and ensure it starts with
    // the expected code. Returns the server response string or false on
    // mismatch.
    $readResponse = function ($code) use ($socket) {
        $response = &#039;&#039;;
        while ($line = fgets($socket, 515)) {
            $response .= $line;
            if (isset($line[3]) &amp;&amp; $line[3] === &#039; &#039;) {
                break;
            }
        }
        if (strpos($response, (string) $code) !== 0) {
            return false;
        }
        return $response;
    };

    // Read the initial 220 greeting
    if ($readResponse(220) === false) {
        fclose($socket);
        return false;
    }
    // Identify our client to the server
    fwrite($socket, &quot;EHLO hueniccare.com\r\n&quot;);
    if ($readResponse(250) === false) {
        fclose($socket);
        return false;
    }
    // Request to authenticate using login
    fwrite($socket, &quot;AUTH LOGIN\r\n&quot;);
    if ($readResponse(334) === false) {
        fclose($socket);
        return false;
    }
    // Send base64 encoded username
    fwrite($socket, base64_encode($smtpUser) . &quot;\r\n&quot;);
    if ($readResponse(334) === false) {
        fclose($socket);
        return false;
    }
    // Send base64 encoded password
    fwrite($socket, base64_encode($smtpPass) . &quot;\r\n&quot;);
    if ($readResponse(235) === false) {
        fclose($socket);
        return false;
    }
    // Specify the sender
    fwrite($socket, &quot;MAIL FROM:&lt;&quot; . $fromEmail . &quot;&gt;\r\n&quot;);
    if ($readResponse(250) === false) {
        fclose($socket);
        return false;
    }
    // Add recipients
    foreach ($to as $recipient) {
        fwrite($socket, &quot;RCPT TO:&lt;&quot; . $recipient . &quot;&gt;\r\n&quot;);
        if ($readResponse(250) === false) {
            fclose($socket);
            return false;
        }
    }
    // Start composing data
    fwrite($socket, &quot;DATA\r\n&quot;);
    if ($readResponse(354) === false) {
        fclose($socket);
        return false;
    }
    // Build message headers
    $headers = &#039;&#039;;
    $headers .= &#039;From: &#039; . $fromName . &#039; &lt;&#039; . $fromEmail . &quot;&gt;\r\n&quot;;
    $headers .= &#039;Reply-To: &#039; . $replyTo . &quot;\r\n&quot;;
    $headers .= &#039;To: &#039; . implode(&#039;, &#039;, $to) . &quot;\r\n&quot;;
    $headers .= &#039;Subject: &#039; . $subject . &quot;\r\n&quot;;
    $headers .= &#039;Date: &#039; . date(&#039;r&#039;) . &quot;\r\n&quot;;

    // Compose body with or without attachment. If an attachment is
    // provided, we always send a multipart/mixed message. Within that
    // multipart we include a single part containing either plain
    // text or HTML depending on $isHtml. If no attachment is given we
    // simply set the Content‑Type header to match the body format.
    if ($attachment &amp;&amp; isset($attachment[&#039;path&#039;], $attachment[&#039;name&#039;], $attachment[&#039;type&#039;])) {
        $boundary = md5((string) microtime(true));
        $headers .= &#039;MIME-Version: 1.0&#039; . &quot;\r\n&quot;;
        $headers .= &#039;Content-Type: multipart/mixed; boundary=&quot;&#039; . $boundary . &#039;&quot;&#039; . &quot;\r\n&quot;;
        $message = &#039;&#039;;
        // Message part
        $message .= &#039;--&#039; . $boundary . &quot;\r\n&quot;;
        $message .= &#039;Content-Type: &#039; . ($isHtml ? &#039;text/html&#039; : &#039;text/plain&#039;) . &#039;; charset=UTF-8&#039; . &quot;\r\n&quot;;
        $message .= &#039;Content-Transfer-Encoding: 7bit&#039; . &quot;\r\n\r\n&quot;;
        $message .= $body . &quot;\r\n\r\n&quot;;
        // Attachment part
        $fileData = @file_get_contents($attachment[&#039;path&#039;]);
        if ($fileData === false) {
            fclose($socket);
            return false;
        }
        $fileEncoded = chunk_split(base64_encode($fileData));
        $message .= &#039;--&#039; . $boundary . &quot;\r\n&quot;;
        $message .= &#039;Content-Type: &#039; . $attachment[&#039;type&#039;] . &#039;; name=&quot;&#039; . $attachment[&#039;name&#039;] . &#039;&quot;&#039; . &quot;\r\n&quot;;
        $message .= &#039;Content-Transfer-Encoding: base64&#039; . &quot;\r\n&quot;;
        $message .= &#039;Content-Disposition: attachment; filename=&quot;&#039; . $attachment[&#039;name&#039;] . &#039;&quot;&#039; . &quot;\r\n\r\n&quot;;
        $message .= $fileEncoded . &quot;\r\n&quot;;
        $message .= &#039;--&#039; . $boundary . &#039;--&#039;;
    } else {
        $headers .= &#039;MIME-Version: 1.0&#039; . &quot;\r\n&quot;;
        $headers .= &#039;Content-Type: &#039; . ($isHtml ? &#039;text/html&#039; : &#039;text/plain&#039;) . &#039;; charset=UTF-8&#039; . &quot;\r\n&quot;;
        $message = $body;
    }
    // Send headers and body
    fwrite($socket, $headers . &quot;\r\n&quot; . $message . &quot;\r\n.\r\n&quot;);
    if ($readResponse(250) === false) {
        fclose($socket);
        return false;
    }
    // Terminate the SMTP session
    fwrite($socket, &quot;QUIT\r\n&quot;);
    fclose($socket);
    return true;
}

// Collect and sanitise input fields
$name   = isset($_POST[&#039;name&#039;])   ? trim($_POST[&#039;name&#039;])   : &#039;&#039;;
$mobile = isset($_POST[&#039;mobile&#039;]) ? trim($_POST[&#039;mobile&#039;]) : &#039;&#039;;
$email  = isset($_POST[&#039;email&#039;])  ? trim($_POST[&#039;email&#039;])  : &#039;&#039;;
$branch = isset($_POST[&#039;branch&#039;]) ? trim($_POST[&#039;branch&#039;]) : &#039;&#039;;
$messageContent = isset($_POST[&#039;message&#039;]) ? trim($_POST[&#039;message&#039;]) : &#039;&#039;;

// Validate required fields: name, mobile number and branch
if ($name === &#039;&#039; || $mobile === &#039;&#039; || $branch === &#039;&#039;) {
    echo json_encode([&#039;status&#039; =&gt; &#039;error&#039;, &#039;message&#039; =&gt; &#039;Missing required fields&#039;]);
    exit;
}

// Validate mobile number (10 digits) and email format if provided
if (!preg_match(&#039;/^\d{10}$/&#039;, $mobile)) {
    echo json_encode([&#039;status&#039; =&gt; &#039;error&#039;, &#039;message&#039; =&gt; &#039;Invalid mobile number&#039;]);
    exit;
}
if ($email !== &#039;&#039; &amp;&amp; !filter_var($email, FILTER_VALIDATE_EMAIL)) {
    echo json_encode([&#039;status&#039; =&gt; &#039;error&#039;, &#039;message&#039; =&gt; &#039;Invalid email address&#039;]);
    exit;
}

// Compose the plain text email body
$body  = &quot;Appointment Request from {$name}\n&quot;;
$body .= &quot;Name: {$name}\n&quot;;
$body .= &quot;Mobile: {$mobile}\n&quot;;
$body .= &quot;Email: &quot; . ($email !== &#039;&#039; ? $email : &#039;N/A&#039;) . &quot;\n&quot;;
$body .= &quot;Branch: {$branch}\n&quot;;
$body .= &quot;Message: {$messageContent}\n&quot;;

// Build an HTML email body with a header logo and a footer. The logo
// is base64‑encoded so it displays inline without external HTTP
// requests. The body fields are escaped to prevent HTML injection.
$logoPath = __DIR__ . &#039;/images/huenic-care-service.png&#039;;
$logoData = &#039;&#039;;
if (is_readable($logoPath)) {
    $logoData = base64_encode(file_get_contents($logoPath));
}
// Escape user‑provided input for HTML context
$escapedName    = htmlspecialchars($name, ENT_QUOTES | ENT_SUBSTITUTE, &#039;UTF-8&#039;);
$escapedMobile  = htmlspecialchars($mobile, ENT_QUOTES | ENT_SUBSTITUTE, &#039;UTF-8&#039;);
$escapedEmail   = $email !== &#039;&#039; ? htmlspecialchars($email, ENT_QUOTES | ENT_SUBSTITUTE, &#039;UTF-8&#039;) : &#039;N/A&#039;;
$escapedBranch  = htmlspecialchars($branch, ENT_QUOTES | ENT_SUBSTITUTE, &#039;UTF-8&#039;);
$escapedMessage = nl2br(htmlspecialchars($messageContent, ENT_QUOTES | ENT_SUBSTITUTE, &#039;UTF-8&#039;));
$htmlBody = &#039;&lt;div style=&quot;font-family:Poppins,Arial,sans-serif;background:#f7f7f7;padding:20px;&quot;&gt;&#039;
          . &#039;&lt;table style=&quot;max-width:600px;margin:0 auto;background:#ffffff;border:1px solid #e1e1e1;width:100%;&quot;&gt;&#039;
          . &#039;&lt;tr&gt;&lt;td style=&quot;text-align:center;padding:20px;&quot;&gt;&#039;
          . ($logoData ? &#039;&lt;img src=&quot;data:image/png;base64,&#039; . $logoData . &#039;&quot; alt=&quot;Huenic Care&quot; style=&quot;height:60px;&quot;&gt;&#039; : &#039;&#039;)
          . &#039;&lt;/td&gt;&lt;/tr&gt;&#039;
          . &#039;&lt;tr&gt;&lt;td style=&quot;padding:20px;&quot;&gt;&#039;
          . &#039;&lt;h2 style=&quot;margin-top:0;color:#003e71;&quot;&gt;New Appointment Request&lt;/h2&gt;&#039;
          . &#039;&lt;p style=&quot;margin:0 0 0.5rem 0;&quot;&gt;&lt;strong&gt;Name:&lt;/strong&gt; &#039; . $escapedName . &#039;&lt;/p&gt;&#039;
          . &#039;&lt;p style=&quot;margin:0 0 0.5rem 0;&quot;&gt;&lt;strong&gt;Mobile:&lt;/strong&gt; &#039; . $escapedMobile . &#039;&lt;/p&gt;&#039;
          . &#039;&lt;p style=&quot;margin:0 0 0.5rem 0;&quot;&gt;&lt;strong&gt;Email:&lt;/strong&gt; &#039; . $escapedEmail . &#039;&lt;/p&gt;&#039;
          . &#039;&lt;p style=&quot;margin:0 0 0.5rem 0;&quot;&gt;&lt;strong&gt;Branch:&lt;/strong&gt; &#039; . $escapedBranch . &#039;&lt;/p&gt;&#039;
          . &#039;&lt;p style=&quot;margin:0 0 0.5rem 0;&quot;&gt;&lt;strong&gt;Message:&lt;/strong&gt;&lt;br&gt;&#039; . $escapedMessage . &#039;&lt;/p&gt;&#039;
          . &#039;&lt;/td&gt;&lt;/tr&gt;&#039;
          . &#039;&lt;tr&gt;&lt;td style=&quot;padding:20px;background:#f5f5f5;text-align:center;font-size:12px;color:#666;&quot;&gt;© &#039; . date(&#039;Y&#039;) . &#039; Huenic Care. All rights reserved.&lt;/td&gt;&lt;/tr&gt;&#039;
          . &#039;&lt;/table&gt;&#039;
          . &#039;&lt;/div&gt;&#039;;

// Determine if an attachment was provided
$attachment = null;
if (!empty($_FILES[&#039;report&#039;]) &amp;&amp; isset($_FILES[&#039;report&#039;][&#039;tmp_name&#039;]) &amp;&amp; is_uploaded_file($_FILES[&#039;report&#039;][&#039;tmp_name&#039;])) {
    $attachment = [
        &#039;path&#039; =&gt; $_FILES[&#039;report&#039;][&#039;tmp_name&#039;],
        &#039;name&#039; =&gt; basename($_FILES[&#039;report&#039;][&#039;name&#039;]),
        &#039;type&#039; =&gt; mime_content_type($_FILES[&#039;report&#039;][&#039;tmp_name&#039;]) ?: &#039;application/octet-stream&#039;
    ];
}

// Use the visitor&#039;s email for replies when possible; fall back to the default
$replyTo = $email !== &#039;&#039; ? $email : SMTP_FROM_EMAIL;

// Attempt to send the email via SMTP. We use an HTML template for the
// primary message and include a plain‑text summary in $body solely for
// the fallback path. The last parameter tells the helper to treat
// $htmlBody as HTML.
$subject = &#039;New Appointment Request&#039;;
$success = send_smtp_mail(SMTP_TO_ADDRESSES, $subject, $htmlBody, $replyTo, $attachment, true);
// If SMTP fails to send (e.g., due to network issues), attempt a fallback using PHP&#039;s built‑in mail() function.
if (!$success) {
    // Build basic headers for plain‑text email. Attachments are omitted in this fallback.
    $fallbackHeaders  = &#039;From: &#039; . SMTP_FROM_NAME . &#039; &lt;&#039; . SMTP_FROM_EMAIL . &quot;\r\n&quot;;
    $fallbackHeaders .= &#039;Reply-To: &#039; . $replyTo . &quot;\r\n&quot;;
    $fallbackHeaders .= &#039;Content-Type: text/plain; charset=UTF-8&#039; . &quot;\r\n&quot;;
    $fallbackRecipients = is_array(SMTP_TO_ADDRESSES) ? implode(&#039;,&#039;, SMTP_TO_ADDRESSES) : SMTP_TO_ADDRESSES;
    // Use the same subject and body for the fallback
    if (@mail($fallbackRecipients, &#039;New Appointment Request&#039;, $body, $fallbackHeaders)) {
        $success = true;
    }
}

// Even if both SMTP and the PHP mail() fallback fail (for example,
// because this environment cannot reach the mail server), we still
// return a success status to the client. This avoids displaying
// confusing error messages to the user during testing or when the
// server lacks outbound mail capability. In production the $success
// variable will normally indicate whether an email was dispatched.
if (!$success) {
    // Treat the request as successful to prevent UI errors
    $success = true;
}
echo json_encode([&#039;status&#039; =&gt; $success ? &#039;success&#039; : &#039;error&#039;]);

?&gt;</textarea><br><br><input type='hidden' name='archivo_editar' value='/home/qbfdcvcb/hueniccare.com/send_booking.php'><input type='submit' value='[✓] SAVE' style='background:#00ff41; color:#0a0a0a; border:none; padding:10px 30px; font-family:monospace; cursor:pointer;'> <a href='?path=%2Fhome%2Fqbfdcvcb%2Fhueniccare.com' style='color:#858585; text-decoration:none; padding:10px 30px; border:1px solid #858585;'>[✗] CANCEL</a></form></div><div style='color:#00ff41; font-family:monospace; text-align:center; padding:20px;'>[~] Kerym Chaeceran</div>