OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	08/21/2024 10:02:44 AM	rwxr-xr-x
📄 DKIM_gen_keys.phps	3.32 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 DKIM_sign.phps	1.77 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 README.md	8 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 azure_xoauth2.phps	4.08 KB	08/21/2024 10:02:39 AM	rw-r--r--
📄 callback.phps	2.31 KB	08/21/2024 10:02:39 AM	rw-r--r--
📄 contactform-ajax.phps	5.14 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 contactform.phps	3.61 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 contents.html	585 bytes	08/21/2024 10:02:40 AM	rw-r--r--
📄 contentsutf8.html	1.15 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 exceptions.phps	1.66 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 extending.phps	2.63 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 gmail.phps	3.76 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 gmail_xoauth.phps	3.91 KB	08/21/2024 10:02:40 AM	rw-r--r--
📁 images	-	08/21/2024 10:04:07 AM	rwxr-xr-x
📄 mail.phps	1.15 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 mailing_list.phps	3.21 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 pop_before_smtp.phps	2.43 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 send_file_upload.phps	2.08 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 send_multiple_file_upload.phps	2.04 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 sendmail.phps	1.22 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 sendoauth2.phps	4.57 KB	08/21/2024 10:02:40 AM	rw-r--r--
📄 simple_contact_form.phps	3.91 KB	08/21/2024 10:02:41 AM	rw-r--r--
📄 smime_signed_mail.phps	4.28 KB	08/21/2024 10:02:41 AM	rw-r--r--
📄 smtp.phps	2.25 KB	08/21/2024 10:02:41 AM	rw-r--r--
📄 smtp_check.phps	2.07 KB	08/21/2024 10:02:41 AM	rw-r--r--
📄 smtp_low_memory.phps	4.93 KB	08/21/2024 10:02:41 AM	rw-r--r--
📄 smtp_no_auth.phps	1.87 KB	08/21/2024 10:02:41 AM	rw-r--r--
📄 ssl_options.phps	2.36 KB	08/21/2024 10:02:41 AM	rw-r--r--

Editing: contactform-ajax.phps

<?php

/**
 * This example shows how to handle a simple contact form safely.
 */

//Import PHPMailer class into the global namespace
use PHPMailer\PHPMailer\PHPMailer;

//Don't run this unless we're handling a form submission
if (array_key_exists('email', $_POST)) {
    date_default_timezone_set('Etc/UTC');
    require '../vendor/autoload.php';
    $isAjax = !empty($_SERVER['HTTP_X_REQUESTED_WITH']) &&
        strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest';

//Create a new PHPMailer instance
    $mail = new PHPMailer();
    //Send using SMTP to localhost (faster and safer than using mail()) – requires a local mail server
    //See other examples for how to use a remote server such as gmail
    $mail->isSMTP();
    $mail->Host = 'localhost';
    $mail->Port = 25;

//Use a fixed address in your own domain as the from address
    //**DO NOT** use the submitter's address here as it will be forgery
    //and will cause your messages to fail SPF checks
    $mail->setFrom('from@example.com', 'First Last');
    //Choose who the message should be sent to
    //You don't have to use a <select> like in this example, you can simply use a fixed address
    //the important thing is *not* to trust an email address submitted from the form directly,
    //as an attacker can substitute their own and try to use your form to send spam
    $addresses = [
        'sales' => 'sales@example.com',
        'support' => 'support@example.com',
        'accounts' => 'accounts@example.com',
    ];
    //Validate address selection before trying to use it
    if (array_key_exists('dept', $_POST) && array_key_exists($_POST['dept'], $addresses)) {
        $mail->addAddress($addresses[$_POST['dept']]);
    } else {
        //Fall back to a fixed address if dept selection is invalid or missing
        $mail->addAddress('support@example.com');
    }
    //Put the submitter's address in a reply-to header
    //This will fail if the address provided is invalid,
    //in which case we should ignore the whole request
    if ($mail->addReplyTo($_POST['email'], $_POST['name'])) {
        $mail->Subject = 'PHPMailer contact form';
        //Keep it simple - don't use HTML
        $mail->isHTML(false);
        //Build a simple message body
        $mail->Body = <<<EOT
Email: {$_POST['email']}
Name: {$_POST['name']}
Message: {$_POST['message']}
EOT;

//Send the message, check for errors
        if (!$mail->send()) {
            //The reason for failing to send will be in $mail->ErrorInfo
            //but it's unsafe to display errors directly to users - process the error, log it on your server.
            if ($isAjax) {
                http_response_code(500);
            }

$response = [
                "status" => false,
                "message" => 'Sorry, something went wrong. Please try again later.'
            ];
        } else {
            $response = [
                "status" => true,
                "message" => 'Message sent! Thanks for contacting us.'
            ];
        }
    } else {
        $response = [
            "status" => false,
            "message" => 'Invalid email address, message ignored.'
        ];
    }

if ($isAjax) {
        header('Content-type:application/json;charset=utf-8');
        echo json_encode($response);
        exit();
    }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Contact form</title>
</head>
<body>
<h1>Contact us</h1>
<h2 id="status-message"><?php if (isset($response)) {
    echo $response['message'];
                        }?></h2>
<form method="POST" id="contact-form">
    <label for="name">Name: <input type="text" name="name" id="name"></label><br>
    <label for="email">Email address: <input type="email" name="email" id="email"></label><br>
    <label for="message">Message: <textarea name="message" id="message" rows="8" cols="20"></textarea></label><br>
    <label for="dept">Send query to department:</label>
    <select name="dept" id="dept">
        <option value="sales">Sales</option>
        <option value="support" selected>Technical support</option>
        <option value="accounts">Accounts</option>
    </select><br>
    <input type="submit" value="Send">
</form>

function email(data) {
        const message = document.getElementById("status-message")
        fetch("", {
            method: "POST",
            body: data,
            headers: {
               'X-Requested-With' : 'XMLHttpRequest'
            }
        })
            .then(response => response.json())
            .then(response => {message.innerHTML = response.message})
            .catch(error => {
                error.json().then(response => {
                    message.innerHTML = response.message
                })
            })
    }

const submitEvent = form.addEventListener("submit", (event) => {
        event.preventDefault();

const formData = new FormData(form);

email(formData);
    })
</script>
</body>
</html>