1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / gulfesde / worldtechforum.org /
Filename : new-collaboration.php
back
<?php
// new-collaboration.php
// Place this file on your server. No output before <?php (no blank lines).

session_start();
header('Content-Type: application/json; charset=utf-8');

// -------- CONFIG ----------
$requireCsrf   = false; // set true if you generated CSRF in the form page
$adminEmail    = 'submissions@worldtechforum.org'; // <-- change this to your admin email
$uploadDir     = __DIR__ . '/uploads/'; // ensure this folder exists and is writable
$uploadBaseUrl = 'https://www.worldtechforum.org/uploads/'; // <-- change to your real public uploads URL
$maxFileSize   = 2 * 1024 * 1024; // 2MB

// allowed MIME types mapped to extensions
$allowedMime = [
    'image/png'  => 'png',
    'image/jpeg' => 'jpg',
    'application/pdf' => 'pdf',
];
// ---------------------------

// Optional CSRF enforcement
if ($requireCsrf) {
    if (!isset($_POST['csrf_token'], $_SESSION['csrf_token']) ||
        !hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
        http_response_code(403);
        echo json_encode(['success' => false, 'message' => 'Invalid CSRF token']);
        exit;
    }
}

// helper
function post($k) { return isset($_POST[$k]) ? trim($_POST[$k]) : ''; }

// collect inputs
$org_name         = post('org_name');
$org_links        = post('org_links');
$org_sector       = post('org_sector');
$org_location     = post('org_location');
$contact_fullname = post('contact_fullname');
$contact_role     = post('contact_role');
$contact_email    = filter_var(post('contact_email'), FILTER_SANITIZE_EMAIL);
$contact_phone    = post('contact_phone');
$benefits         = post('benefits');
$interest_raw     = $_POST['interests'] ?? null; // could be string (radio) or array (checkboxes)
$interest_other   = post('interest_other_text');
$agreement        = isset($_POST['agreement']) ? $_POST['agreement'] : null;

// normalize interest: prefer single value
if (is_array($interest_raw)) {
    // If checkbox array, use first selected (we require only one)
    $interest = count($interest_raw) ? $interest_raw[0] : '';
} else {
    $interest = is_null($interest_raw) ? '' : trim($interest_raw);
}

// validation
$errors = [];

// required checks
if ($org_name === '') $errors['org_name'] = 'Organization name is required.';
if ($org_links === '') $errors['org_links'] = 'Website or social link is required.';
if ($org_sector === '') $errors['org_sector'] = 'Industry / sector is required.';
if ($org_location === '') $errors['org_location'] = 'Headquarters location is required.';
if ($contact_fullname === '') $errors['contact_fullname'] = 'Full name is required.';
if ($contact_role === '') $errors['contact_role'] = 'Designation / role is required.';
if ($contact_email === '' || !filter_var($contact_email, FILTER_VALIDATE_EMAIL)) $errors['contact_email'] = 'A valid email is required.';
if ($contact_phone === '') $errors['contact_phone'] = 'Phone / WhatsApp is required.';
if ($benefits === '') $errors['benefits'] = 'Please tell us the benefits you seek.';
if ($interest === '') $errors['interests'] = 'Please select one collaboration interest.';
if ($interest === 'other' && trim($interest_other) === '') $errors['interest_other_text'] = 'Please specify your interest for "Other".';
if (!$agreement) $errors['agreement'] = 'You must confirm the collaboration is non-financial.';

// URL validation
if ($org_links !== '' && !filter_var($org_links, FILTER_VALIDATE_URL)) {
    $errors['org_links'] = 'Please enter a valid URL (include https://).';
}

// File upload validation
if (!isset($_FILES['org_logo'])) {
    $errors['org_logo'] = 'Company logo is required.';
} else {
    $f = $_FILES['org_logo'];
    if (!isset($f['error']) || $f['error'] !== UPLOAD_ERR_OK) {
        $errors['org_logo'] = 'Error uploading logo.';
    } else {
        if ($f['size'] > $maxFileSize) $errors['org_logo'] = 'Logo too large (max 2MB).';
        // detect mime using finfo
        $finfo = new finfo(FILEINFO_MIME_TYPE);
        $mime = $finfo->file($f['tmp_name']);
        if (!isset($allowedMime[$mime])) $errors['org_logo'] = 'Invalid file type. Allowed: PNG, JPG, PDF.';
    }
}

// If validation failed: return errors JSON
if (!empty($errors)) {
    http_response_code(400);
    echo json_encode([
        'success' => false,
        'message' => 'Please fix the highlighted fields.',
        'errors' => $errors
    ]);
    exit;
}

// Ensure upload directory exists
if (!is_dir($uploadDir)) {
    if (!mkdir($uploadDir, 0755, true)) {
        http_response_code(500);
        echo json_encode(['success' => false, 'message' => 'Server error creating upload folder.']);
        exit;
    }
}

// Save the uploaded file with sanitized organization name + random suffix
$f = $_FILES['org_logo'];
$finfo = new finfo(FILEINFO_MIME_TYPE);
$mime = $finfo->file($f['tmp_name']);
$ext = $allowedMime[$mime] ?? 'dat';

// make a safe slug from organization name
$orgSlug = preg_replace('/[^a-z0-9]+/i', '_', strtolower(mb_substr($org_name, 0, 50)));
$orgSlug = trim($orgSlug, '_');
if ($orgSlug === '') $orgSlug = 'org';
$unique = bin2hex(random_bytes(6));
$filename = $orgSlug . '_' . $unique . '.' . $ext;
$destination = $uploadDir . $filename;

if (!move_uploaded_file($f['tmp_name'], $destination)) {
    http_response_code(500);
    echo json_encode(['success' => false, 'message' => 'Failed to save uploaded file.']);
    exit;
}

// set file permissions (optional)
@chmod($destination, 0644);

// Build public URL for email (adjusted by you)
$logoUrl = rtrim($uploadBaseUrl, '/') . '/' . $filename;

// Prepare email (simple)
$subject = "New Collaboration Request from $org_name";
$body = "Organization: $org_name\nWebsite/Links: $org_links\nSector: $org_sector\nLocation: $org_location\nLogo: $logoUrl\n\nContact Name: $contact_fullname\nRole: $contact_role\nEmail: $contact_email\nPhone: $contact_phone\n\nInterest: $interest\n" . ($interest === 'other' ? "Other interest: $interest_other\n" : "") . "\nBenefits:\n$benefits\n\nAgreement confirmed.\n";

$headers = "From: noreply@" . ($_SERVER['SERVER_NAME'] ?? 'example.com') . "\r\n";
if ($contact_email && !preg_match('/[\r\n]/', $contact_email)) {
    $headers .= "Reply-To: $contact_email\r\n";
}

// send mail (best-effort)
$mailSent = @mail($adminEmail, $subject, $body, $headers);

// optional: if you were checking CSRF per-request, you may want to unset it to prevent replay:
if ($requireCsrf && isset($_SESSION['csrf_token'])) {
    unset($_SESSION['csrf_token']);
}

// success response
echo json_encode([
    'success' => true,
    'message' => 'Your collaboration request has been submitted.',
    'mail_sent' => $mailSent ? true : false,
    'logo' => $logoUrl
]);
exit;