From 63cd5cd6052e560fb5d0acedac9071466b298c8f Mon Sep 17 00:00:00 2001
From: "alexandre.l" <alexandre.l@teleqom.org>
Date: Sat, 22 Apr 2023 15:41:53 -0400
Subject: [PATCH] insert newsletter form in database

---
 .gitignore                            |  2 ++
 config/PRIVATE/NEWSLETTER.php.example |  6 ------
 php/newsletter.php                    | 19 ++++++-------------
 3 files changed, 8 insertions(+), 19 deletions(-)
 create mode 100644 .gitignore
 delete mode 100644 config/PRIVATE/NEWSLETTER.php.example

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ca4839c
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+/config/PRIVATE/*
+!/config/PRIVATE/*.example
\ No newline at end of file
diff --git a/config/PRIVATE/NEWSLETTER.php.example b/config/PRIVATE/NEWSLETTER.php.example
deleted file mode 100644
index 2cc6bc1..0000000
--- a/config/PRIVATE/NEWSLETTER.php.example
+++ /dev/null
@@ -1,6 +0,0 @@
-<?php
-
-$_ENV['newsletter_url_fr'] ='';
-$_ENV['newsletter_url_en'] ='';
-
-?>
\ No newline at end of file
diff --git a/php/newsletter.php b/php/newsletter.php
index a75bd4d..ac3d4f4 100644
--- a/php/newsletter.php
+++ b/php/newsletter.php
@@ -1,22 +1,15 @@
 <?php
-require_once $_SERVER['DOCUMENT_ROOT'].'/config/PRIVATE/NEWSLETTER.php';
+require_once $_SERVER['DOCUMENT_ROOT'].'/config/PRIVATE/DB.php';
 $lang_folder = $_GET['newsletter-language']=="fr"?"/pages/fr/":"/pages/en/";
-$contact_form_url = $_GET['newsletter-language']=="fr"?$_ENV['newsletter_url_fr']:$_ENV['newsletter_url_en'];
 
-if(!str_contains($_GET['newsletter-email'], "@") || !str_contains($_GET['newsletter-email'], ".") || strlen($_GET['newsletter-email']) < 6 || $_GET['newsletter-email-2'] != "") {
+if(!filter_var($_GET['newsletter-email'], FILTER_VALIDATE_EMAIL) || $_GET['newsletter-email-2'] != "") {
     header('Location: '.$lang_folder.'err/general.html');
     die();
 }
-$ch = curl_init($contact_form_url);
-curl_setopt($ch, CURLOPT_POSTFIELDS,  urlencode('email').'='.urlencode($_GET['newsletter-email']));
-curl_setopt($ch, CURLOPT_HEADER, 0);
-curl_setopt($ch, CURLOPT_POST, 1);
-curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
-curl_setopt($ch, CURLOPT_RETURNTRANSFER, false);
-curl_exec($ch);
-$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-curl_close($ch);
-if($httpcode==200){
+
+$insert_email = $pdo->prepare('INSERT IGNORE INTO newsletter(email,language) VALUES (?,?)');
+$insert_email->execute(array($_GET['newsletter-email'],$_GET['newsletter-language']));
+if($insert_email->rowCount()==1){
     header('Location: '.$lang_folder.'confirmation.html');
     die();
 }