Ciao, il file php della pagina dove è inserito il form è scritto cosi:
PHP:
<?php include("_partials/_xsrf.php") ?>
<!doctype html>
<html class="no-js" lang="it">
<head>
<?php include("_partials/_head.php") ?>
<title>Bettega – Contatti</title>
<meta name="description" content="Bettega realizza case in legno straordinarie. Contattaci per qualsiasi informazione.">
</head>
<body>
<header class="c-masthead">
<?php include("_partials/_header.php") ?>
<div class="c-hero">
<div class="c-hero__background rellax" data-rellax-speed="-4" style="background-image: url('assets/images/hero/interni.jpg');"></div>
</div>
</header>
<div class="t-theme-primary">
<div class="o-grid o-grid--bottom o-grid--half@ms o-bridge-vertical o-bridge-horizontal o-bridge-horizontal-3x@ls o-constrained">
<div class="u-centered">
<img class="c-evil-logo" src="assets/images/logo_plain.svg" alt="">
</div>
<div class="u-centered¬ms">
<p class="c-evil-title">Bettega Legnami S.r.l.</p>
<ul class="o-item-list">
<li>Via Meatoli 20 - 38050 Imer (TN)</li>
<li>tel 0439 67286</li>
<li>fax 0439 725797</li>
<li>P.Iva 02371800224</li>
<li><a href="mailto:info@bettegalegnami.it">info@bettegalegnami.it</a></li>
</ul>
</div>
</div>
<section class="c-box o-island o-island-triple@ms o-constrained">
<?php include("_partials/_contacts.php") ?>
</section>
</div>
<section class="o-bridge-vertical o-bridge-horizontal o-bridge-horizontal-3x@ms o-constrained u-centered">
<h2 class="c-main-title">Dove siamo</h2>
<a target="_blank" href="https://www.google.it/maps/place/Bettega+Atmosfera+Legno/@46.1490741,11.7938165,17z/data=!4m12!1m6!3m5!1s0x4778f6dbcb5b3b97:0xd0bba64b2e1d487c!2sBettega+Atmosfera+Legno!8m2!3d46.1490704!4d11.7960052!3m4!1s0x4778f6dbcb5b3b97:0xd0bba64b2e1d487c!8m2!3d46.1490704!4d11.7960052">
<img src="assets/images/mappa.png" alt="">
</a>
</section>
<?php include("_partials/_footer.php") ?>
</body>
</html>
ED E PRESENTE UN FILE _XSRF COSI:
$name = '';
$email = '';
$city = '';
$message = '';
$errors = false;
$_SESSION['flash'] = ['errors' => [], 'success' => null];
// ready to validate
if (array_key_exists('name', $_POST)) {
$name = filter_var($_POST['name'], FILTER_SANITIZE_STRING);
if ($name === false) {
$_SESSION['flash']['errors'][] = 'name';
}
} else {
$_SESSION['flash']['errors'][] = 'name';
}
if (array_key_exists('email', $_POST)) {
$email = filter_var($_POST['email'], FILTER_SANITIZE_EMAIL);
$email = filter_var($email, FILTER_VALIDATE_EMAIL);
if($email === false) {
$_SESSION['flash']['errors'][] = 'email';
}
} else {
$_SESSION['flash']['errors'][] = 'email';
}
if (array_key_exists('city', $_POST)) {
$city = filter_var($_POST['city'], FILTER_SANITIZE_STRING);
if ($city === false) {
$_SESSION['flash']['errors'][] = 'city';
}
} else {
$_SESSION['flash']['errors'][] = 'city';
}
if (array_key_exists('message', $_POST)) {
$message = filter_var($_POST['message'], FILTER_SANITIZE_STRING);
if ($message === false) {
$_SESSION['flash']['errors'][] = 'name';
}
} else {
$_SESSION['flash']['errors'][] = 'message';
}
if(!$errors) {
$transport = (new Swift_SmtpTransport(getenv('MAIL_DRIVER') . '.' .getenv('MAIL_HOST'), getenv('MAIL_PORT'), getenv('MAIL_SECURITY')))
->setUsername(getenv('MAIL_USERNAME'))
->setPassword(getenv('MAIL_PASSWORD'));
$mailer = new Swift_Mailer($transport);
$message = (new Swift_Message('Nuova Richiesta di Contatto'))
->setFrom([$email => $name])
->setTo([getenv('MAIL_TO') => getenv('MAIL_TO_NAME')])
->setBody($message);
$result = $mailer->send($message);
$_SESSION['flash'] = ['errors' => [], 'success' => 'Grazie per averci contattato!'];
// SEND ALL THE EMAILS
}
header('Location: ' . $_SERVER['HTTP_REFERER']);
}