<?php
// Basic mail handler for Bonight contact form (Plesk-friendly)

// ----- CONFIG -----
$to = "hello@bonight.com";          // TODO: change to your inbox
$subject_prefix = "[Bonight Contact] ";
$redirect_ok = "/contact/?sent=1";
$redirect_err = "/contact/?error=1";

// ----- HELPERS -----
function clean($v) {
  $v = trim($v ?? "");
  $v = preg_replace("/[\r\n]+/", " ", $v); // prevent header injection
  return htmlspecialchars($v, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
}

// ----- VALIDATION -----
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
  header("Location: $redirect_err"); exit;
}

$name    = clean($_POST['name'] ?? "");
$email   = trim($_POST['email'] ?? "");
$subject = clean($_POST['subject'] ?? "Message from contact form");
$message = trim($_POST['message'] ?? "");
$consent = isset($_POST['consent']) ? "yes" : "no";
$honeypot= trim($_POST['website'] ?? "");

// honeypot check
if ($honeypot !== "") {
  // likely bot
  header("Location: $redirect_ok"); exit;
}

// required fields
if (strlen($name) < 2 || !filter_var($email, FILTER_VALIDATE_EMAIL) || strlen($message) < 10 || $consent !== "yes") {
  header("Location: $redirect_err"); exit;
}

// ----- BUILD EMAIL -----
$ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
$ua = $_SERVER['HTTP_USER_AGENT'] ?? 'unknown';

$body  = "New message from Bonight contact form\n\n";
$body .= "Name:    $name\n";
$body .= "Email:   $email\n";
$body .= "Subject: $subject\n\n";
$body .= "Message:\n$message\n\n";
$body .= "-----\n";
$body .= "Consent: $consent\n";
$body .= "IP:      $ip\n";
$body .= "Agent:   $ua\n";
$body .= "Time:    " . date('c') . "\n";

$headers  = "From: Bonight Contact <no-reply@bonight.com>\r\n";
$headers .= "Reply-To: " . $email . "\r\n";
$headers .= "Content-Type: text/plain; charset=UTF-8\r\n";

// ----- SEND -----
$ok = @mail($to, $subject_prefix . $subject, $body, $headers);

if ($ok) {
  header("Location: $redirect_ok"); exit;
} else {
  header("Location: $redirect_err"); exit;
}