%@ include file="globalPaths.jsp" %>
<%@ include file="globalDefinitions.jsp" %>
<%
String logged=(String)session.getValue("logged");
boolean userLogged = true;
if ((logged==null)||(!logged.equals("yes")))
{
//sendRedirect(globalErrorPage + "?"+"errorDescription=" + URLencode("No logged on"));
//return;
userLogged = false;
}
String remoteIP = "UndefinedIP";
if (request.getRemoteAddr() != null)
{
remoteIP = request.getRemoteAddr();
}
%>
<%
Connection connection = null;
String referrer = null;
String firstname = null;
String lastname = null;
String email = null;
String fullname = null;
String errorDescription = null;
String query = "";
Statement statement = null;
boolean ok = false;
ResultSet resultSet = null;
boolean enableCaptcha=true;
String captchaResponseToken = request.getParameter("resptoken");
if (request.getParameter("submit")==null)
{
referrer = request.getHeader("referer");
}
else
{
referrer = request.getParameter("ref");
}
if (userLogged && (request.getParameter("submit")==null))
{
try
{
connection = openConnection();
statement = connection.createStatement();
ok=statement.execute("SELECT firstName, lastName, email FROM galleryArtist WHERE id=" + quoteString(getParameter("loggedartist")));
if (ok)
{
resultSet = statement.getResultSet();
if (resultSet.next())
{
firstname=resultSet.getString("firstName");
lastname=resultSet.getString("lastName");
email=resultSet.getString("email");
fullname=firstname + " " + lastname;
}
else
{
sendRedirect(globalErrorPage + "?"+"errorDescription=" + URLencode("Artist not found"));
return;
}
resultSet.close();
}
else
{
//out.println("Error: statement.execute() returned false");
}
}
catch(Exception e)
{
//out.println("Exception: " + e.toString());
//sendRedirect(globalErrorPage + "?"+"errorDescription=" + URLencode("Exception: " + e.toString()));
}
finally
{
if (connection != null && !connection.isClosed())
connection.close();
}
}
%>
<%
if (request.getParameter("submit") != null)
{
if (request.getParameter("name").equals(""))
{
sendRedirect(globalErrorPage+"?"+"errorDescription=" + URLencode("Please specify name"));
return;
}
if (request.getParameter("name").indexOf(" ") == -1)
{
sendRedirect(globalErrorPage+"?log=0&"+"errorDescription=" + URLencode("Please specify first and last name"));
return;
}
if ((request.getParameter("email")==null)||(!checkEmail(request.getParameter("email")))||(request.getParameter("email").equals("")))
{
sendRedirect(globalErrorPage+"?"+"errorDescription=" + URLencode("Please specify a correct email address"));
return;
}
if (request.getParameter("comments").equals(""))
{
sendRedirect(globalErrorPage+"?"+"errorDescription=" + URLencode("Please specify comments"));
return;
}
String comments = request.getParameter("comments");
boolean scam = false;
try
{
if (isSpam(comments, true, false))
{
scam = true;
}
if (!"true".equals(request.getParameter("jscheck")))
{
scam = true;
}
if (scam)
{
throw new UserInputException("There was a problem submitting your message");
}
if (enableCaptcha)
{
if (captchaResponseToken == null)
{
throw new UserInputException("Missing required captcha parameter");
}
boolean flag = verifyCaptchaResponse(captchaResponseToken, remoteIP, null);
if (!flag)
{
throw new UserInputException("\"I'm not a robot\" challenge failed");
}
}
}
catch(UserInputException e)
{
if (!scam)
errorLog(e);
errorDescription = e.getMessage() + ".";
}
catch(Exception e)
{
errorLog(e, query);
sendRedirect(globalErrorPage + "?errorDescription="
+ URLEncoder.encode(e.getMessage() + "."));
return;
}
if (referrer == null || "null".equals(referrer))
{
referrer = globalSite + "/comments.jsp";
}
if (errorDescription == null)
{
plainContent="User " + request.getParameter("name") + " sent a comment:"+"\n\n"
+ request.getParameter("comments")+"\n\n"
+ "User page: " + referrer + "\n\n";
String subject = "Comment by MesArt user";
if (!send(htmlContent, plainContent, companyName, contactUsEmail, subject,
request.getParameter("name"), request.getParameter("email")))
{
sendRedirect(globalErrorPage+"?"+"errorDescription=" + URLencode("Please specify a correct email address"));
return;
}
plainContent="Your comments have been submitted to " +
"MesArt. Thank you!";
if (!send(htmlContent, plainContent, getParameter("name"), getParameter("email"),
"Your comments have been submitted to MesArt.", companyName, contactUsEmail))
{
//sendRedirect(globalErrorPage+"?"+"errorDescription=" + URLencode("Error sending message"));
}
sendRedirect("sendComments.shtml");
}
}
%>
Comments
<%@ include file="inc/head.txt" %>
<%@ include file="inc/top.txt" %>
<%@ include file="inc/bottom.txt" %>
<%@ include file="globalFinally.jsp" %>