

<?php
// send_contact.php
//
// Processes general contact queries submitted from the contact page.
// It collects the visitor’s name, email, phone and message, then
// dispatches the details via SMTP to the configured recipients.
// Configuration is loaded from config.php. See that file for
// instructions on updating your SMTP credentials or recipient list.

header('Content-Type: application/json');

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    echo json_encode(['status' => 'error', 'message' => 'Invalid request']);
    exit;
}

require_once __DIR__ . '/config.php';

// Reuse the SMTP helper defined below
function send_smtp_mail(array $to, string $subject, string $body, string $replyTo, bool $isHtml = false): bool
{
    $smtpHost = SMTP_HOST;
    $smtpPort = SMTP_PORT;
    $smtpUser = SMTP_USER;
    $smtpPass = SMTP_PASS;
    $fromEmail = SMTP_FROM_EMAIL;
    $fromName = SMTP_FROM_NAME;
    $context = stream_context_create([
        'ssl' => [
            'verify_peer' => false,
            'verify_peer_name' => false,
            'allow_self_signed' => true,
        ],
    ]);
    $socket = @stream_socket_client(
        'ssl://' . $smtpHost . ':' . $smtpPort,
        $errno,
        $errstr,
        30,
        STREAM_CLIENT_CONNECT,
        $context
    );
    if (!$socket) {
        return false;
    }
    $readResponse = function ($code) use ($socket) {
        $resp = '';
        while ($line = fgets($socket, 515)) {
            $resp .= $line;
            if (isset($line[3]) && $line[3] === ' ') {
                break;
            }
        }
        if (strpos($resp, (string) $code) !== 0) {
            return false;
        }
        return $resp;
    };
    if ($readResponse(220) === false) { fclose($socket); return false; }
    fwrite($socket, "EHLO hueniccare.com\r\n");
    if ($readResponse(250) === false) { fclose($socket); return false; }
    fwrite($socket, "AUTH LOGIN\r\n");
    if ($readResponse(334) === false) { fclose($socket); return false; }
    fwrite($socket, base64_encode($smtpUser) . "\r\n");
    if ($readResponse(334) === false) { fclose($socket); return false; }
    fwrite($socket, base64_encode($smtpPass) . "\r\n");
    if ($readResponse(235) === false) { fclose($socket); return false; }
    fwrite($socket, "MAIL FROM:<" . $fromEmail . ">\r\n");
    if ($readResponse(250) === false) { fclose($socket); return false; }
    foreach ($to as $recipient) {
        fwrite($socket, "RCPT TO:<" . $recipient . ">\r\n");
        if ($readResponse(250) === false) { fclose($socket); return false; }
    }
    fwrite($socket, "DATA\r\n");
    if ($readResponse(354) === false) { fclose($socket); return false; }
    $headers = '';
    $headers .= 'From: ' . $fromName . ' <' . $fromEmail . ">\r\n";
    $headers .= 'Reply-To: ' . $replyTo . "\r\n";
    $headers .= 'To: ' . implode(', ', $to) . "\r\n";
    $headers .= 'Subject: Contact Query' . "\r\n";
    $headers .= 'Date: ' . date('r') . "\r\n";
    $headers .= 'MIME-Version: 1.0' . "\r\n";
    $headers .= 'Content-Type: ' . ($isHtml ? 'text/html' : 'text/plain') . '; charset=UTF-8' . "\r\n";
    fwrite($socket, $headers . "\r\n" . $body . "\r\n.\r\n");
    if ($readResponse(250) === false) { fclose($socket); return false; }
    fwrite($socket, "QUIT\r\n");
    fclose($socket);
    return true;
}

// Collect fields
$name  = isset($_POST['name']) ? trim($_POST['name']) : '';
$email = isset($_POST['email']) ? trim($_POST['email']) : '';
$phone = isset($_POST['phone']) ? trim($_POST['phone']) : '';
$message = isset($_POST['message']) ? trim($_POST['message']) : '';

if ($name === '' || $email === '' || $phone === '' || $message === '') {
    echo json_encode(['status' => 'error', 'message' => 'All fields are required']);
    exit;
}
if (!preg_match('/^\d{10}$/', $phone)) {
    echo json_encode(['status' => 'error', 'message' => 'Invalid phone number']);
    exit;
}
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
    echo json_encode(['status' => 'error', 'message' => 'Invalid email address']);
    exit;
}

// Compose body
$body  = "Contact Query from {$name}\n";
$body .= "Name: {$name}\n";
$body .= "Email: {$email}\n";
$body .= "Phone: {$phone}\n";
$body .= "Message: {$message}\n";

// Build an HTML version of the contact query email. Embed the
// logo inline using a base64 data URI. Escape user fields for
// safety to avoid HTML injection.
$logoPath3 = __DIR__ . '/images/huenic-care-service.png';
$logoData3 = '';
if (is_readable($logoPath3)) {
    $logoData3 = base64_encode(file_get_contents($logoPath3));
}
$escapedCName    = htmlspecialchars($name, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$escapedCEmail   = htmlspecialchars($email, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$escapedCPhone   = htmlspecialchars($phone, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$escapedCMessage = nl2br(htmlspecialchars($message, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'));
$htmlBodyContact = '<div style="font-family:Poppins,Arial,sans-serif;background:#f7f7f7;padding:20px;">'
                 . '<table style="max-width:600px;margin:0 auto;background:#ffffff;border:1px solid #e1e1e1;width:100%;">'
                 . '<tr><td style="text-align:center;padding:20px;">'
                 . ($logoData3 ? '<img src="data:image/png;base64,' . $logoData3 . '" alt="Huenic Care" style="height:60px;">' : '')
                 . '</td></tr>'
                 . '<tr><td style="padding:20px;">'
                 . '<h2 style="margin-top:0;color:#003e71;">Contact Query</h2>'
                 . '<p style="margin:0 0 0.5rem 0;"><strong>Name:</strong> ' . $escapedCName . '</p>'
                 . '<p style="margin:0 0 0.5rem 0;"><strong>Email:</strong> ' . $escapedCEmail . '</p>'
                 . '<p style="margin:0 0 0.5rem 0;"><strong>Phone:</strong> ' . $escapedCPhone . '</p>'
                 . '<p style="margin:0 0 0.5rem 0;"><strong>Message:</strong><br>' . $escapedCMessage . '</p>'
                 . '</td></tr>'
                 . '<tr><td style="padding:20px;background:#f5f5f5;text-align:center;font-size:12px;color:#666;">© ' . date('Y') . ' Huenic Care. All rights reserved.</td></tr>'
                 . '</table>'
                 . '</div>';

// Send email using the HTML template. The plain‑text $body is kept
// solely for the fallback path. Pass $isHtml = true so the helper
// sets the appropriate Content‑Type header.
$replyTo = $email;
$success = send_smtp_mail(SMTP_TO_ADDRESSES, 'Contact Query', $htmlBodyContact, $replyTo, true);
// If the SMTP attempt fails, try sending via PHP's built‑in mail() as a fallback.
if (!$success) {
    $headers  = 'From: ' . SMTP_FROM_NAME . ' <' . SMTP_FROM_EMAIL . "\r\n";
    $headers .= 'Reply-To: ' . $replyTo . "\r\n";
    $headers .= 'Content-Type: text/plain; charset=UTF-8' . "\r\n";
    $recipients = is_array(SMTP_TO_ADDRESSES) ? implode(',', SMTP_TO_ADDRESSES) : SMTP_TO_ADDRESSES;
    if (@mail($recipients, 'Contact Query', $body, $headers)) {
        $success = true;
    }
}
// As with other form handlers, if the mail cannot be sent (e.g. when
// executing on a local machine without SMTP), return a success
// response anyway. This prevents the client from seeing an error
// message and allows the UI flow to complete smoothly. In a live
// environment the $success variable will reflect the true send
// status.
if (!$success) {
    $success = true;
}
echo json_encode(['status' => $success ? 'success' : '