SMTP check

2026-11-01 04:58:32 · noreply@adminsiteus.com @ adminsiteus.com:465

Conversation with the mail server

✗ Password

SMTP_PASS is empty at the top of this file - fill it in and reload

Mail settings already in the code

core/smtp_mailer.php	`SMTP_HOST`	adminsiteus.com
core/smtp_mailer.php	`SMTP_USER`	noreply@adminsiteus.com
core/smtp_mailer.php	`SMTP_PASS`	(hidden, 15 chars)
core/smtp_mailer.php	`SMTP_FROM`	noreply@adminsiteus.com

Deliverability records

adminsiteus.com · MX	mx3-hosting.jellyfish.systems (20), mx1-hosting.jellyfish.systems (5), mx2-hosting.jellyfish.systems (10)
adminsiteus.com · SPF	v=spf1 +a +mx +ip4:192.64.118.109 +ip4:198.54.121.233 include:spf.web-hosting.com ~all
adminsiteus.com · DMARC	v=DMARC1; p=none;
amtvehicles.com · MX	mx3-hosting.jellyfish.systems (20), mx2-hosting.jellyfish.systems (10), mx1-hosting.jellyfish.systems (5)
amtvehicles.com · SPF	v=spf1 +a +mx +ip4:192.64.118.109 include:spf.web-hosting.com ~all
amtvehicles.com · DMARC	v=DMARC1; p=none;

Send me this

Press COPY and paste it back in chat, so I can patch the existing mailer instead of writing a second one.

===== core/smtp_mailer.php (4858 bytes) =====
<?php
// Minimal, dependency-free SMTP mailer (implicit SSL/TLS on port 465, AUTH LOGIN).
// Used to send contact-form / vehicle-enquiry notifications to the contact email
// configured for each site, with Reply-To set to the customer's address.

defined('SMTP_HOST') || define('SMTP_HOST', 'adminsiteus.com');
defined('SMTP_PORT') || define('SMTP_PORT', 465);
defined('SMTP_USER') || define('SMTP_USER', 'noreply@adminsiteus.com');
defined('SMTP_PASS') || define('SMTP_PASS', 'ResealedTools1!');
defined('SMTP_FROM') || define('SMTP_FROM', 'noreply@adminsiteus.com');

function smtp_mime_header($str) {
    if (preg_match('/[^\x20-\x7e]/', $str)) {
        return '=?UTF-8?B?' . base64_encode($str) . '?=';
    }
    return $str;
}

/**
 * Sends a plain-text email via SMTP (SSL, AUTH LOGIN). Returns true on success,
 * false on failure (never throws - failures are logged via error_log so a mail
 * problem never breaks the page for the visitor).
 */
function smtp_send($to, $subject, $body, $replyTo = null, $fromName = null, $html = null) {
    $fp = @stream_socket_client('ssl://' . SMTP_HOST . ':' . SMTP_PORT, $errno, $errstr, 15);
    if (!$fp) {
        error_log("SMTP connect failed: $errstr ($errno)");
        return false;
    }
    stream_set_timeout($fp, 15);

    $read = function () use ($fp) {
        $data = '';
        while (($line = fgets($fp, 515)) !== false) {
            $data .= $line;
            if (isset($line[3]) && $line[3] === ' ') break;
        }
        return $data;
    };
    $write = function ($cmd) use ($fp) {
        fwrite($fp, $cmd . "\r\n");
    };

    $resp = $read();
    if (substr($resp, 0, 3) !== '220') { fclose($fp); error_log("SMTP greeting failed: $resp"); return false; }

    // Identify with the web host: receiving servers check that the EHLO name
    // looks like it belongs to the sender.
    $ehlo = $_SERVER['HTTP_HOST'] ?? SMTP_HOST;
    $ehlo = preg_replace('/[^A-Za-z0-9.\-]/', '', $ehlo) ?: SMTP_HOST;
    $write('EHLO ' . $ehlo);
    $read();

    $write('AUTH LOGIN');
    $read();
    $write(base64_encode(SMTP_USER));
    $read();
    $write(base64_encode(SMTP_PASS));
    $resp = $read();
    if (substr($resp, 0, 3) !== '235') { fclose($fp); error_log("SMTP auth failed: $resp"); return false; }

    $write('MAIL FROM:<' . SMTP_FROM . '>');
    $resp = $read();
    if (substr($resp, 0, 3) !== '250') { fclose($fp); error_log("SMTP MAIL FROM failed: $resp"); return false; }

    $write('RCPT TO:<' . $to . '>');
    $resp = $read();
    if (substr($resp, 0, 3) !== '250' && substr($resp, 0, 3) !== '251') { fclose($fp); error_log("SMTP RCPT TO failed: $resp"); return false; }

    $write('DATA');
    $resp = $read();
    if (substr($resp, 0, 3) !== '354') { fclose($fp); error_log("SMTP DATA failed: $resp"); return false; }

    $displayName = $fromName ?: 'Website';
    $domain = substr(strrchr(SMTP_FROM, '@'), 1) ?: SMTP_HOST;

    $headers = [];
    $headers[] = 'From: ' . smtp_mime_header($displayName) . ' <' . SMTP_FROM . '>';
    if ($replyTo) $headers[] = 'Reply-To: ' . $replyTo;
    $headers[] = 'To: ' . $to;
    $headers[] = 'Subject: ' . smtp_mime_header($subject);
    $headers[] = 'Date: ' . date('r');
    $headers[] = 'Message-ID: <' . bin2hex(random_bytes(12)) . '@' . $domain . '>';
    $headers[] = 'MIME-Version: 1.0';

    /* SMTP limits how long one line may be, and the HTML template is generated
       as a single very long line. Base64 splits the content into 76-character
       lines, so the length of the template stops mattering. It also removes any
       need for dot-stuffing, since base64 never starts a line with a dot. */
    $b64 = function ($s) { return chunk_split(base64_encode((string)$s), 76, "\r\n"); };

    if ($html !== null && $html !== '') {
        $boundary = 'b' . bin2hex(random_bytes(12));
        $headers[] = 'Content-Type: multipart/alternative; boundary="' . $boundary . '"';

        $parts  = '--' . $boundary . "\r\n"
                . "Content-Type: text/plain; charset=UTF-8\r\n"
                . "Content-Transfer-Encoding: base64\r\n\r\n"
                . $b64($body);
        $parts .= '--' . $boundary . "\r\n"
                . "Content-Type: text/html; charset=UTF-8\r\n"
                . "Content-Transfer-Encoding: base64\r\n\r\n"
                . $b64($html);
        $parts .= '--' . $boundary . "--\r\n";

        $message = implode("\r\n", $headers) . "\r\n\r\n" . $parts . '.';
    } else {
        $headers[] = 'Content-Type: text/plain; charset=UTF-8';
        $headers[] = 'Content-Transfer-Encoding: base64';
        $message = implode("\r\n", $headers) . "\r\n\r\n" . $b64($body) . '.';
    }

    $write($message);
    $resp = $read();
    $ok = substr($resp, 0, 3) === '250';
    if (!$ok) error_log("SMTP send failed: $resp");

    $write('QUIT');
    fclose($fp);
    return $ok;
}


===== api/contact_submit.php (from the INSERT onwards) =====
<?php
/**
 * Receives a message from a satellite's contact form and stores it in
 * contact_messages. The email notification is sent from HERE, on the admin,
 * through core/smtp_mailer.php -- so the satellite needs no open SMTP port.
 */
require_once __DIR__ . '/_api_inc.php';
require_key();

if ($_SERVER['REQUEST_METHOD'] !== 'POST') json_err('method_not_allowed', 405);

$site = require_site();

$name    = trim((string)($_POST['name'] ?? ''));
$email   = trim((string)($_POST['email'] ?? ''));
$phone   = trim((string)($_POST['phone'] ?? ''));
$message = trim((string)($_POST['message'] ?? ''));
$hp      = trim((string)($_POST['website'] ?? ''));   // honeypot: bots fill this in
// 5-digit reference from the satellite, so two enquiries about the same car
// never arrive with an identical subject line
$ref     = preg_replace('/\D/', '', (string)($_POST['ref'] ?? ''));
$ref     = ($ref !== '' && strlen($ref) <= 6) ? $ref : (string)random_int(10000, 99999);

// The bot gets ok=true and goes away, but nothing is stored.
if ($hp !== '') json_out(['ok' => true, 'ref' => $ref]);

if ($name === '' || $email === '' || $message === '') json_err('missing_fields', 422);
if (!filter_var($email, FILTER_VALIDATE_EMAIL))       json_err('invalid_email', 422);
if (mb_strlen($name) > 255 || mb_strlen($email) > 255 || mb_strlen($phone) > 50) {
    json_err('field_too_long', 422);
}
if (mb_strlen($message) > 5000) json_err('message_too_long', 422);

// vehicle, only if it really belongs to this site (the full row is used in the email)
$vehicleId = null;
$vehicle   = null;
if (!empty($_POST['vehicle_id'])) {
    $chk = db()->prepare("SELECT v.* FROM vehicles v
                          JOIN vehicle_sites vs ON vs.vehicle_id = v.id
                          WHERE v.id = ? AND vs.site_id = ? LIMIT 1");
    $chk->execute([(int)$_POST['vehicle_id'], $site['id']]);
    $row = $chk->fetch();
    if ($row) { $vehicleId = (int)$row['id']; $vehicle = $row; }
}

/* One enquiry per email address per vehicle. Asking about a second car is
   fine; asking about the same car again is a duplicate. A repeat is still
   stored, so a genuine follow-up is never lost - it just does not email the
   dealer twice about the same vehicle. The 60-second guard still covers the
   general contact form, where there is no vehicle to key on. */
$isDuplicate = false;

if ($vehicleId) {
    $dup = db()->prepare("SELECT COUNT(*) c FROM contact_messages
                          WHERE site_id = ? AND email = ? AND vehicle_id = ?");
    $dup->execute([$site['id'], $email, $vehicleId]);
    $isDuplicate = ((int)$dup->fetch()['c'] > 0);
} else {
    /* No vehicle means the general contact form, where there is nothing to key
       a duplicate on, so a short guard stops a double click sending two copies.
       It must not apply to vehicle enquiries: asking about a second car right
       after the first is ordinary behaviour, not a duplicate. */
    $dup = db()->prepare("SELECT COUNT(*) c FROM contact_messages
                          WHERE site_id = ? AND email = ? AND created_at > (NOW() - INTERVAL 60 SECOND)");
    $dup->execute([$site['id'], $email]);
    $isDuplicate = ((int)$dup->fetch()['c'] > 0);
}

/* A repeat is refused before anything is written, so the dealer never sees
   a second copy and the customer is told plainly. A different vehicle from
   the same address is not a repeat and goes through normally. */
if ($isDuplicate) {
    error_log('ENQUIRY DUPLICATE for ' . $site['domain'] . ' from ' . $email
        . ($vehicleId ? ' about vehicle #' . $vehicleId : '') . ' - refused');
    /* two different situations, two different answers */
    if ($vehicleId) json_err('already_enquired', 409);
    json_err('too_many_requests', 429);
}

$stored = 'Ref #' . $ref . "\n\n" . $message;
db()->prepare("INSERT INTO contact_messages (site_id, vehicle_id, name, email, phone, message)
               VALUES (?,?,?,?,?,?)")
    ->execute([$site['id'], $vehicleId, $name, $email, $phone, $

This file contains a mailbox password. Delete it from the server as soon as you have the answer.