具有聯繫表格的自定義Wordpress頁面

Question

我正在嘗試爲Wordpress網站創建聯繫表單。僅供參考：客戶希望表單是靜態的，所以他們不需要在將來能夠改變它。我在網上找到了這個表單。我把它放到我的Wordpress自定義頁面中。我也在我的服務器上放了一個mail.php文件。當我點擊提交時，它會將我劫持到我的主頁/主題頁面，並且我的消息永遠不會發送。我不明白爲什麼需要我參加我如何解決這個問題。

<table width="400" border="0" align="center" cellpadding="3" cellspacing="1"> 
<tr> 
<td><strong>Contact Form </strong></td> 
</tr> 
</table> 
<table width="400" border="0" align="center" cellpadding="0" cellspacing="1"> 
<tr> 
<td><form name="form1" method="post" action="mail.php"> 
<table width="100%" border="0" cellspacing="1" cellpadding="3"> 
<tr> 
<td width="16%">Subject</td> 
<td width="2%">:</td> 
<td width="82%"><input name="subject" type="text" id="subject" size="50"></td> 
</tr> 
<tr> 
<td>Detail</td> 
<td>:</td> 
<td><textarea name="detail" cols="50" rows="4" id="detail"></textarea></td> 
</tr> 
<tr> 
<td>Name</td> 
<td>:</td> 
<td><input name="name" type="text" id="name" size="50"></td> 
</tr> 
<tr> 
<td>Email</td> 
<td>:</td> 
<td><input name="customer_mail" type="text" id="customer_mail" size="50"></td> 
</tr> 
<tr> 
<td>&nbsp;</td> 
<td>&nbsp;</td> 
<td><input type="submit" name="Submit" value="Submit"> <input type="reset" name="Submit2" value="Reset"></td> 
</tr> 
</table> 
</form> 
</td> 
</tr> 
</table> 

Mail.php

<?php 

// Contact subject 
$subject ="$subject"; 

// Details 
$message="$detail"; 

// Mail of sender 
$mail_from="$customer_mail"; 

// From 
$header="from: $name <$mail_from>"; 

// Enter your email address 
$to ='someone@somewhere.com'; 
$mail=mail($to,$subject,$message,$header); 

// Check, if message sent to your email 
// display message "We've recived your information" 
if($mail){ 
echo "We've recived your contact information"; 
} 
else { 
echo "ERROR"; 
} 
?> 

Answer 1

這是最簡單的形式，它是開放的，以注射..

$subject ="write something here"; 

// Details 
$message = "write something here"; 

// Mail of sender 
$mail_from = $_POST['customer_mail']; 

// From 
$header="fromfrom: yourname <yourdomain@yourdomain.con>"; 

// Enter your email address 
$to ='$mail_from'; 

而把其餘代碼後， ..

編輯：

$subject = $_POST['details']; 

// Mail of sender 
$mail_from = $_POST['customer_mail']; 

// From 
$name = $_POST['name']; 

// Details 
$message = 'E-mail sent from: '.$mail_from.'\r\nName: '.$nane.'\r\n'.$_POST['details']; 

// Enter your email address 
$to ='yourdomain@yourdomain.com'; 

$mail=mail($to,$subject,$message); 

最後編輯：

<? 

if (isset($_POST['customer_mail'])) { 

    $subject = $_POST['detail']; 

    // Mail of sender 
    $mail_from = $_POST['customer_mail']; 

    // From 
    $name = $_POST['name']; 

    // Details 
    $message = 'E-mail sent from: '.$mail_from.'\r\nName: '.$name.'\r\n'.$_POST['detail']; 

    // Enter your email address 
    $to ='yourdomain@yourdomain.com'; //edit this 

    $mail=mail($to,$subject,$message); 

    echo "Your mail has been sent"; 

} else { 

?> 

<table width="400" border="0" align="center" cellpadding="3" cellspacing="1"> 
    <tr> 
    <td><strong>Contact Form </strong></td> 
    </tr> 
</table> 

<table width="400" border="0" align="center" cellpadding="0" cellspacing="1"> 
    <tr> 
    <td> 
     <form name="form1" method="post" action="<? echo $_SERVER['PHP_SELF']; ?>"> 

     <table width="100%" border="0" cellspacing="1" cellpadding="3"> 
      <tr> 
      <td width="16%">Subject</td> 
      <td width="2%">:</td> 
      <td width="82%"> 
       <input name="subject" type="text" id="subject" size="50"> 
      </td> 
      </tr> 
      <tr> 
      <td>Detail</td> 
      <td>:</td> 
      <td> 
       <textarea name="detail" cols="50" rows="4" id="detail"></textarea> 
      </td> 
      </tr> 
      <tr> 
      <td>Name</td> 
      <td>:</td> 
      <td> 
       <input name="name" type="text" id="name" size="50"> 
      </td> 
      </tr> 
      <tr> 
      <td>Email</td> 
      <td>:</td> 
      <td> 
       <input name="customer_mail" type="text" id="customer_mail" size="50"> 
      </td> 
      </tr> 
      <tr> 
      <td>&nbsp;</td> 
      <td>&nbsp;</td> 
      <td> 
       <input type="submit" name="Submit" value="Submit"> 
       <input type="reset" name="Submit2" value="Reset"> 
      </td> 
      </tr> 
     </table> 
     </form> 
    </td> 
    </tr> 
</table> 


<? 
} 
?>