<?php
session_start();

require_once('inc/config.php');

$decryptedfocus = filter_input(INPUT_POST, 'focus', FILTER_SANITIZE_STRING);

$stmt = $mysqli->prepare("SELECT websitename, websiteemail, fromname, fromemail, replyname, replyemail FROM settings ORDER BY settingsid DESC LIMIT 1") or die('An error occurred. Please try after some time.');
$stmt->execute();
$stmt->store_result();
$stmt->bind_result($websitename, $websiteemail, $fromname, $fromemail, $replyname, $replyemail);
$stmt->fetch();
$stmt->close();

if ($_SERVER['REQUEST_METHOD'] === 'POST' && $decryptedfocus === '[CONTACT_SUPPLIER]') {
	if (!isset($_POST['zipcode']) or $_POST['zipcode'] !== '' or strlen($_POST['zipcode']) > 0) {
		die(json_encode(array('text' => 'You are not authorized user.')));
	}

	$pagename = filter_input(INPUT_POST, 'pagename', FILTER_SANITIZE_STRING);
	$pagename = $mysqli->real_escape_string($pagename);

	$country = filter_input(INPUT_POST, 'country', FILTER_SANITIZE_STRING);
	$country = $mysqli->real_escape_string($country);

	$phonecode = filter_input(INPUT_POST, 'phonecode', FILTER_SANITIZE_STRING);
	$phonecode = $mysqli->real_escape_string($phonecode);

	$phone = filter_input(INPUT_POST, 'phone', FILTER_SANITIZE_STRING);
	$phone = $mysqli->real_escape_string($phone);

	$email = filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL);
	$email = $mysqli->real_escape_string($email);

	$answer = filter_input(INPUT_POST, 'answer', FILTER_SANITIZE_EMAIL);
	$answer = $mysqli->real_escape_string($answer);

	if (empty($country)) {
		die(json_encode(array('text' => 'Country missing.', 'field' => 'country')));
	} elseif (empty($phonecode)) {
		die(json_encode(array('text' => 'Country missing.', 'field' => 'country')));
	} elseif (empty($phone) && strlen($phone) == 0) {
		die(json_encode(array('text' => 'Mobile number missing.', 'field' => 'phone')));
	} elseif (empty($email)) {
		die(json_encode(array('text' => 'Please enter your email ID.', 'field' => 'email')));
	} elseif (filter_var($email, FILTER_VALIDATE_EMAIL) == false) {
		die(json_encode(array('text' => 'Please enter a valid email ID.', 'field' => 'email')));
	} elseif (empty($answer)) {
		die(json_encode(array('text' => 'Please enter anti spam answer.', 'field' => 'answer')));
	} elseif (filter_var($answer, FILTER_VALIDATE_INT) == false) {
		die(json_encode(array('text' => 'Please enter a valid answer.', 'field' => 'answer')));
	} elseif (md5($answer) !== $_SESSION['randomnr']) {
		die(json_encode(array('text' => 'You entered a invalid answer.', 'field' => 'answer')));
	} else {
		$stmt = $mysqli->prepare("SELECT title FROM pages WHERE name = ? LIMIT 1") or die('An error occurred. Please try after some time.');
		$stmt->bind_param('s', $pagename);
		$stmt->execute();
		$stmt->store_result();
		$stmt->bind_result($pagetitle);
		$stmt->fetch();
		$stmt->close();

		$opts = array(
            'http' =>
            array(
                'method' => 'POST',
                'header' => 'Content-type: application/x-www-form-urlencoded',
                'content' => http_build_query(array('country' => $country, 'phone' => $phonecode . '-' . $phone, 'email' => $email, 'pagename' => $pagetitle))
            )
        );
        file_get_contents('https://www.akinik.co.in/akiniksubs/api/submitsupplierenquiries', false, stream_context_create($opts));

		die(json_encode(array('text' => 'Thank you, Your enquiry has been submitted!', 'stat' => true)));
	}
} else {
	header('location:' . $baseurl);
	exit();
}