0) { //******************************* function for header injection security***************************** function check_mail_var($value, $mailfield) { $pattern=array(); $invalid=0; $debug=0; // function checkmail_var(x,y) // -- this function validates values passed to the mail() function // -- if invalid data is encountered php will not send e-mail and // -- an error will be returned // x: // the data you want to check // y: // the mail() field type you want to validate, should be one of // o to // the 'to' verification here rejects: // - newlines // - spurious header values // - spaces // - commas // o subject // per the php manual for mail(), subject must not contain newline characters // o header // should not contain a value passed from a form. this should contain static information // so as to prevent mail injection exploits. // the 'header' verification here rejects: // - to: // - cc: // - bcc: // - content-type: // - hex-encoded new line characters // this function must be placed just prior to the mail() function to validate fields // before they are passed to mail(). // function mail() syntax is: mail(to, subject, message, headers) // switch ($mailfield) { case "to" : $pattern[0]= '\r'; $pattern[1]= '\n'; $pattern[2]= '%0a'; $pattern[3]= '%0d'; $pattern[4]= 'cc:'; $pattern[5]= 'bcc:'; $pattern[6]= 'content-type:'; $pattern[7]= ','; $pattern[8]= ' '; break; case "subject": $pattern[0]= '\r'; $pattern[1]= '\n'; $pattern[2]= '%0a'; $pattern[3]= '%0d'; break; case "header": $pattern[0]= 'to:'; $pattern[1]= 'cc:'; $pattern[2]= 'bcc:'; $pattern[3]= 'content-type:'; $pattern[4]= '%0a'; $pattern[5]= '%0d'; break; default: die("ERROR: Invalid function value check_mail_var(): ".__FILE__.":".__LINE__); } foreach ($pattern as $key) { if ( strpos(strtolower($value), $key) > 0) { $invalid=1; } } if ($invalid==1) { if ($debug==1) { echo "field: ".$mailfield."
"; echo "value: ".$value."
"; } die("ERROR: Invalid characters detected. Please go back and re-submit."); } } //********************************************************************************************* ini_set('sendmail_from', 'sample@secureserver.net'); // Set only on Windows ini_set('SMTP', 'relay-hosting.secureserver.net'); $admin = "Drkez@kezmed.com, kezmed1963@kezmed.com"; $to = $_POST['EmailAddress']; $FullName = $_POST['FullName']; $PhoneNumber = $_POST['PhoneNumber']; $ReferralSource = $_POST['ReferralSource']; $subject = 'Thank you for contacting KezMed Medical PC'; $subject1 = 'Appointment List KezMed Medical PC'; $HTML = ""; $HTML = $HTML.""; $HTML = $HTML.""; $HTML = $HTML."Thank you for contacting KezMed Medical PC"; $HTML = $HTML.""; $HTML = $HTML.""; $HTML = $HTML.""; $HTML = $HTML.""; $HTML = $HTML.""; $HTML = $HTML.""; $HTML = $HTML.""; $HTML = $HTML."

Full Name: ".$FullName."

Email Address: ".$to."

Phone Number: ".$PhoneNumber."

Referral Source: ".$ReferralSource."

You have just received a email from ".$_SERVER["HTTP_HOST"]."

"; $HTML = $HTML." "; //********************************** *********** **************************************************** $headers = "MIME-Version: 1.0\n"; $headers .= "Content-type: text/html; charset=iso-8859-1\n"; $headers .= "X-Priority: 3\n"; $headers .= "X-MSMail-Priority: Normal\n"; $headers .= "X-Mailer: php\n"; $headers .= "From: \n"; //Check To for header injection. check_mail_var($to,'to'); // Mail it mail($to, $subject, $HTML, $headers); mail($admin, $subject1, $HTML, $headers); //******************************************************************************** // Redirect if($_POST['path'] == "https") { header("Location: https://".$_SERVER["HTTP_HOST"]."/$redirect"); }else{ header("Location: http://".$_SERVER["HTTP_HOST"]."/$redirect"); } }else{ ?> Lifestyle Habits for Your Heart Archives - KezMed Medical PC in Bronx, NY

Default Template

If this template is displaying:

The site is likely currently being set-up;
The homepage has been deleted or had its name changed;
The homepage has not been selected under Settings - > Reading - > Static Home Page
A page template has not been properly selected for the current post or page
A content import has recently been completed but there was an error assigning page templates

Please log in to the WP backend and confirm that the correct template has been chosen.

            
              1963 Williamsbridge Rd.

              Bronx, NY 10461
              
            Get Directions
          
              Book Today!

              (646) 530-8447
            
            Request Appointment
          
Comments or 

            Suggestions?
            
            Contact Us

Default Template

If this template is displaying:

Please log in to the WP backend and confirm that the correct template has been chosen.

Your Bronx Cardiologist

Office

Contact