PHP - Sending Spam Through My Hosting

Hi the user fill details and then the email his sent to me the only problem is that the emails keeps going to my spam, can someone help me out please I looked already php website and email format looks the same.
This is the link to my form.
http://www.people.eurico.co.uk/

here my form script
Code: [Select]
<?php

// Set email variables
$email_to = 'xxxxx@xxxxxxx.co.uk';
$email_subject = 'Call back form';

// Set required fields
$required_fields = array('fullname','email','telephone','comment');

// set error messages
$error_messages = array(
'fullname' => 'Please enter a Name to proceed.',
'email' => 'Please enter a valid Email.',
'telephone' => 'Please telephone.',
'comment' => 'Please enter your Message to continue.' 
);

// Set form status
$form_complete = FALSE;

// configure validation array
$validation = array();

// check form submittal
if(!empty($_POST)) {
// Sanitise POST array
foreach($_POST as $key => $value) $_POST[$key] = remove_email_injection(trim($value));

// Loop into required fields and make sure they match our needs
foreach($required_fields as $field) {
// the field has been submitted?
if(!array_key_exists($field, $_POST)) array_push($validation, $field);

// check there is information in the field?
if($_POST[$field] == '') array_push($validation, $field);

// validate the email address supplied
if($field == 'email') if(!validate_email_address($_POST[$field])) array_push($validation, $field);
}

// basic validation result
if(count($validation) == 0) {
// Prepare our content string
$email_content = 'peoplesmartlearning.co.uk: ' . "\n\n";

// simple email content
foreach($_POST as $key => $value) {
if($key != 'submit') $email_content .= $key . ': ' . $value . "\n";
}

// if validation passed ok then send the email
mail($email_to, $email_subject, $email_content);

// Update form switch
$form_complete = TRUE;
}
}

function validate_email_address($email = FALSE) {
return (preg_match('/^[^@\s]+@([-a-z0-9]+\.)+[a-z]{2,}$/i', $email))? TRUE : FALSE;
}

function remove_email_injection($field = FALSE) {
   return (str_ireplace(array("\r", "\n", "%0a", "%0d", "Content-Type:", "bcc:","to:","cc:"), '', $field));
}

?>
The HTML
Code: [Select]
<div class="call_us_form">
        <p class="title">WE'LL CALL YOU BACK</p>
<?php if($form_complete === FALSE): ?>
<form class="contact_form" id="fm-form" method="post" action="index.php" >
                <fieldset>
                    <div class="fm-req">
                        <label for="fm-firstname">Name</label>
 <input type="text" id="fullname" class="detail" name="fullname" value="<?php echo isset($_POST['fullname'])? $_POST['fullname'] : ''; ?>" />
<?php if(in_array('fullname', $validation)): ?><script type="text/javascript">alert("Please enter a Name"); history.back();</script><?php endif; ?>
                    </div>
               
                    <div class="fm-req">
                    <label for="fm-firstname">Email</label>
                 <input type="text" id="email" class="detail" name="email" value="
<?php echo isset($_POST['email'])? $_POST['email'] : ''; ?>" />
<?php if(in_array('email', $validation)): ?><script type="text/javascript">alert("Please enter a valid Email Address"); history.back();</script><?php endif; ?>
                    </div>
                   
<div class="fm-req">
                    <label for="fm-firstname">Number</label>
 <input type="text" id="telephone" class="detail" name="telephone" value="<?php echo isset($_POST['telephone'])? $_POST['telephone'] : ''; ?>" />
  <?php if(in_array('telephone', $validation)): ?><script type="text/javascript">alert("Please enter telephone number"); history.back();</script><?php endif; ?>
                    </div>

                    <div class="fm-req">
                        <label for="fm-lastname">Message</label>
<textarea cols="40" rows="5" id="comment" name="comment" class="mess"><?php echo isset($_POST['comment'])? $_POST['comment'] : ''; ?></textarea>
<?php if(in_array('comment', $validation)): ?><script type="text/javascript">alert("Please enter your message"); history.back();</script><?php endif; ?>
                    </div>
                <input class="submit_button" type="submit" value="Call us" />
                </fieldset>
            </form>
<?php else: ?>
<p>Thank you for your Message!</p>
<p>We will get back to you as soon as we can</p>

<script type="text/javascript">
setTimeout ('ourRedirect()', 5000)
function ourRedirect () {
location.href='index.php'
}
</script>
<?php endif; ?>

From our website we are connecting to GMAIL to send our emails through SMTP. For some reason it is not sending the emails to the CC or BCC email address event though GMAIL shows it was included in the email. Am I missing something in the below code?

Code: [Select]
$currentTime = time();

$emailTo = "redbrad0@domain.com";
$emailCC = "brad@domain.com";
$emailBCC = "events@domain.com";
$emailSubject = "TEST Email at (" . $currentTime . ")";
$emailBody = "This is the body of the email";

$headers = array();
if (!empty($emailTo))
$headers['TO'] = $emailTo;
if (!empty($emailCC))
$headers['CC'] = $emailCC;
if (!empty($emailBCC))
$headers['BCC'] = $emailBCC;
if (!empty($emailSubject))
$headers['Subject'] = $emailSubject;
$headers['From'] = "events@domain.com";

$mime = new Mail_mime("\n");
$mime->setTXTBody($emailBody);
$body = $mime->get();
$headers = $mime->headers($headers);

$mail = Mail::factory('smtp',
   array ('host' => 'ssl://smtp.gmail.com',
     'auth' => true,
     'port' => 465,
     'username' => 'events@domain.com',
     'password' => 'thepasswordhere'));

try {
  $result = $mail->send($emailTo, $headers, $emailBody);
} catch (TixException $ex) {     
  echo "<font color=red>Error:" . $ex->getCode() . "</font><br>";
}

echo "Emailed at (" . $currentTime . ")<br>";
die;

Hello,  I am new.  I have created a very simple webpage that has content the changes when a link is clicked.  The site works perfectly on my "localhost".  I am running Apache 2.2 and PHP 5.3 on localhost.  When I upload to my GoDaddy shared hosting, ( I beleive Apahe 1.3 and PHP 5.2) my "index.php" displays fine on load. However, when any of the links are clicked the content area where it is supposed to change disapeears. Here is a sample of the code that I am using:


// These are the links in the index.php
html code...
<li><a href="index.php?id='home'" id="home" name="home">Home</a></li>
<li><a href="index.php?id='form'" id="form" name="form">Register</a></li>
<?php
include("form1.php");
                getPage();
                ?>

html....
Then on the form1.php page is the following code...

function getPage()
{
    $linkID = $_GET['id'];
    if ($linkID == NULL)
    {
        changeBool("'home'");
    }
    else
    changeBool($linkID);
}

//end example

The function "changeBool()" has a switch structure that is determined by the $_GET[] var.
I beleive this has something to do with the php.ini settings, possibly the apache settings...any ideas would be greatly appreciated.

Hello - I have usually run my own servers, and always drop my .php files with MYSQL connection strings in a directory like /var, with webroot being /var/www/mysite.

I now find myself in a shared hosting environment for a client and wondering the safety of my connection string .php files.  Unfortunately they are sitting in a folder in the root of my hosting directory right now, and they feel vulnerable.

It seems the only thing I could do would be to put the root of my hosting into a subdirectory, point the site there, and then put my connection strings on directory back.  But seems the problem is they are still in my shared hosting.

What's the best way to secure this type of sensitive info in a shared environment?  I'm also getting ready to explore credit card processing via an API, and wondering if shared hosting is even worth it.

Thanks!!

Hello, we got a site running in to different servers, the other one is a sub domain that will  be use as internal pages and the other one is external. As of that I need to pass session to see if a user details.   Is there a another secure way to pass session data to other server without storing on the database?