SIMON Master Console Rebuild

File viewer

guarded to /htdocs

/message.php

<?php
declare(strict_types=1);

/**
 * /message.php — SIMON Message Portal
 * Sends visitor messages to admin@gaylordsinclair.com
 * PHP 8.0+ compatible. No database required.
 */

header('Content-Type: text/html; charset=utf-8');
header('X-Robots-Tag: index, follow');
header('X-Frame-Options: SAMEORIGIN');
header('X-Content-Type-Options: nosniff');
header('Referrer-Policy: strict-origin-when-cross-origin');
header('Permissions-Policy: geolocation=(), microphone=(), camera=()');
header("Cross-Origin-Opener-Policy: same-origin");
header("Cross-Origin-Resource-Policy: same-origin");

/* ============================================================
   SIMON CONFIG
   ============================================================ */
const SITE_NAME = 'Gaylord Sinclair';
const APP_NAME = 'SIMON Message Portal';
const ADMIN_EMAIL = 'admin@gaylordsinclair.com';
const FROM_EMAIL = 'admin@gaylordsinclair.com';
const SUBJECT_PREFIX = '[SIMON MESSAGE]';
const MAX_MESSAGE_CHARS = 6000;
const RATE_LIMIT_SECONDS = 60;

$SIMON_CONFIG = [
    'GA4_ID' => 'G-S6MEHB4BEY',
    'IMPACT_VERIFICATION' => 'e8ec6683-663c-421a-a30d-f8c0fe517345',
    'WEBHOOK_BASE' => '/connlink/test1/ui/webhook_inbox.php',
    'VISIT_STREAM' => 'visits',
    'PULSE_STREAM' => 'default',
    'SIMON_KEY' => '',
    'APP' => APP_NAME,
    'SOURCE' => 'message.php',
];

/* ============================================================
   HELPERS
   ============================================================ */
function h(string $s): string {
    return htmlspecialchars($s, ENT_QUOTES, 'UTF-8');
}

function clean_line(string $value): string {
    return trim(str_replace(["\r", "\n", "\0"], ' ', $value));
}

function clean_text(string $value, int $max = 6000): string {
    $value = str_replace("\0", '', $value);
    $value = trim($value);
    if (function_exists('mb_substr')) {
        return mb_substr($value, 0, $max, 'UTF-8');
    }
    return substr($value, 0, $max);
}

function request_id(int $bytes = 8): string {
    try {
        return bin2hex(random_bytes($bytes));
    } catch (Throwable $e) {
        return substr(hash('sha256', uniqid('', true)), 0, $bytes * 2);
    }
}

function scheme(): string {
    if (!empty($_SERVER['HTTP_X_FORWARDED_PROTO'])) return strtolower((string)$_SERVER['HTTP_X_FORWARDED_PROTO']);
    if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') return 'https';
    return 'http';
}

function current_url(): string {
    $host = clean_line((string)($_SERVER['HTTP_HOST'] ?? ''));
    $uri = clean_line((string)($_SERVER['REQUEST_URI'] ?? '/message.php'));
    return scheme() . '://' . $host . $uri;
}

function logs_dir(): string {
    $root = rtrim((string)($_SERVER['DOCUMENT_ROOT'] ?? ''), '/');
    if ($root === '') $root = __DIR__;
    $dir = $root . '/_logs';
    if (!is_dir($dir)) @mkdir($dir, 0755, true);
    return $dir;
}

function append_ndjson(string $file, array $row): bool {
    $json = json_encode($row, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
    if ($json === false) return false;
    return @file_put_contents($file, $json . PHP_EOL, FILE_APPEND | LOCK_EX) !== false;
}

function rate_limited(string $ip, int $ttl = RATE_LIMIT_SECONDS): bool {
    $dir = logs_dir();
    if (!is_dir($dir) || !is_writable($dir)) return false;
    $bucket = floor(time() / max(10, $ttl));
    $key = hash('sha256', 'message|' . $bucket . '|' . $ip);
    $marker = $dir . '/_msg_rl_' . substr($key, 0, 40);
    if (is_file($marker)) return true;
    @file_put_contents($marker, '1', LOCK_EX);
    @chmod($marker, 0644);
    return false;
}

function valid_email(string $email): bool {
    return filter_var($email, FILTER_VALIDATE_EMAIL) !== false;
}

function send_admin_message(array $data, string $rid): bool {
    $name = clean_line($data['name'] ?? '');
    $email = clean_line($data['email'] ?? '');
    $phone = clean_line($data['phone'] ?? '');
    $topic = clean_line($data['topic'] ?? 'General Message');
    $priority = clean_line($data['priority'] ?? 'normal');
    $message = clean_text($data['message'] ?? '', MAX_MESSAGE_CHARS);

$safeTopic = $topic !== '' ? $topic : 'General Message';
    $subject = SUBJECT_PREFIX . ' ' . $safeTopic . ' · ' . $rid;

$replyTo = valid_email($email) ? $email : FROM_EMAIL;
    $headers = implode("\r\n", [
        'From: ' . FROM_EMAIL,
        'Reply-To: ' . $replyTo,
        'MIME-Version: 1.0',
        'Content-Type: text/plain; charset=UTF-8',
        'X-SIMON-RID: ' . $rid,
    ]);

$body = implode("\n", [
        'SIMON MESSAGE PORTAL',
        '====================',
        '',
        'RID: ' . $rid,
        'Time UTC: ' . gmdate('c'),
        'Priority: ' . $priority,
        'Topic: ' . $safeTopic,
        '',
        'CONTACT',
        'Name: ' . ($name !== '' ? $name : '(not provided)'),
        'Email: ' . ($email !== '' ? $email : '(not provided)'),
        'Phone: ' . ($phone !== '' ? $phone : '(not provided)'),
        '',
        'MESSAGE',
        $message,
        '',
        'REQUEST CONTEXT',
        'URL: ' . current_url(),
        'IP: ' . client_ip(),
        'User Agent: ' . clean_line((string)($_SERVER['HTTP_USER_AGENT'] ?? '')),
        'Referrer: ' . clean_line((string)($_SERVER['HTTP_REFERER'] ?? '(direct)')),
        '',
        'Powered by SIMON',
    ]);

return @mail(ADMIN_EMAIL, clean_line($subject), $body, $headers);
}

/* ============================================================
   REQUEST HANDLING
   ============================================================ */
$rid = request_id();
$ip = client_ip();
$status = 'idle';
$notice = '';
$errors = [];

$prefillRid = clean_line((string)($_GET['rid'] ?? ''));
$prefillCode = clean_line((string)($_GET['code'] ?? ''));
$prefillMessage = '';
if ($prefillRid !== '' || $prefillCode !== '') {
    $prefillMessage = trim("Issue report\nCode: {$prefillCode}\nLog/RID: {$prefillRid}\n\nDescribe what happened:");
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $honeypot = trim((string)($_POST['website'] ?? ''));
    $name = clean_line((string)($_POST['name'] ?? ''));
    $email = clean_line((string)($_POST['email'] ?? ''));
    $phone = clean_line((string)($_POST['phone'] ?? ''));
    $topic = clean_line((string)($_POST['topic'] ?? 'General Message'));
    $priority = clean_line((string)($_POST['priority'] ?? 'normal'));
    $message = clean_text((string)($_POST['message'] ?? ''), MAX_MESSAGE_CHARS);

if ($honeypot !== '') $errors[] = 'Spam filter triggered.';
    if (rate_limited($ip)) $errors[] = 'Please wait one minute before sending another message.';
    if ($name === '') $errors[] = 'Name is required.';
    if ($email === '' || !valid_email($email)) $errors[] = 'A valid email is required.';
    if ($message === '') $errors[] = 'Message is required.';
    if (strlen($message) < 8) $errors[] = 'Message is too short.';

$event = [
        'rid' => $rid,
        'event_type' => 'message_submit_attempt',
        'time' => gmdate('c'),
        'source' => 'message.php',
        'status' => empty($errors) ? 'validated' : 'rejected',
        'errors' => $errors,
        'contact' => [
            'name' => $name,
            'email_hash' => $email !== '' ? hash('sha256', strtolower($email)) : '',
            'phone_present' => $phone !== '',
        ],
        'message' => [
            'topic' => $topic,
            'priority' => $priority,
            'length' => strlen($message),
        ],
        'request' => [
            'url' => current_url(),
            'ip' => $ip,
            'user_agent' => clean_line((string)($_SERVER['HTTP_USER_AGENT'] ?? '')),
            'referrer' => clean_line((string)($_SERVER['HTTP_REFERER'] ?? '')),
        ],
    ];
    append_ndjson(logs_dir() . '/message_events.ndjson', $event);

if (empty($errors)) {
        $ok = send_admin_message([
            'name' => $name,
            'email' => $email,
            'phone' => $phone,
            'topic' => $topic,
            'priority' => $priority,
            'message' => $message,
        ], $rid);

append_ndjson(logs_dir() . '/message_events.ndjson', [
            'rid' => $rid,
            'event_type' => 'message_send_result',
            'time' => gmdate('c'),
            'sent' => $ok,
            'to' => ADMIN_EMAIL,
        ]);

if ($ok) {
            $status = 'sent';
            $notice = 'Message sent to SIMON Command. Reference ID: ' . $rid;
            $_POST = [];
            $prefillMessage = '';
        } else {
            $status = 'failed';
            $notice = 'The server could not send the email. The attempt was logged. Reference ID: ' . $rid;
        }
    } else {
        $status = 'error';
        $notice = implode(' ', $errors);
    }
}

$csp = "default-src 'self'; " .
       "script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; " .
       "style-src 'self' 'unsafe-inline'; " .
       "img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com; " .
       "connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; " .
       "font-src 'self' data:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'";
header('Content-Security-Policy: ' . $csp);
header('X-SIMON-RID: ' . $rid);

$old = static function(string $key, string $fallback = ''): string {
    return h((string)($_POST[$key] ?? $fallback));
};
?>
<!doctype html>
<html lang="en" data-site="gaylord-sinclair" data-system="simon">
<head>
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"/>
<title>Message SIMON · Gaylord Sinclair</title>
<meta name="description" content="Send a message to Gaylord Sinclair through the SIMON command portal."/>
<meta name="theme-color" content="#050816"/>
<meta name="impact-site-verification" value="<?= h($SIMON_CONFIG['IMPACT_VERIFICATION']) ?>"/>
<link rel="canonical" href="/message.php"/>

<main class="shell">
  <section class="panel" aria-label="SIMON message portal">
    <aside class="hero">
      <div>
        <div class="badge"><span class="dot"></span> SIMON Command Link</div>
        <div class="title">MESSAGE</div>
        <p class="subtitle">Send a direct signal to Gaylord Sinclair admin. SIMON records the request, tags the session, and routes the message for human review.</p>
        <div class="metrics">
          <div class="metric"><b>Admin Route</b><span><?= h(ADMIN_EMAIL) ?></span></div>
          <div class="metric"><b>Telemetry</b><span>GA4 · Impact · SIMON Pulse</span></div>
          <div class="metric"><b>Protection</b><span>Honeypot · rate limit · log ID</span></div>
          <div class="metric"><b>Reference</b><span>RID attached to every message</span></div>
        </div>
      </div>
      <div class="rid">RID <?= h($rid) ?> · <?= h(gmdate('Y-m-d\TH:i:s\Z')) ?></div>
    </aside>

<section class="formbox">
      <div class="toprow">
        <div>
          <h1>Contact SIMON Command</h1>
          <p>Use this form for support, business, books, art, Web360, SIMON AI, site issues, or general messages.</p>
        </div>
        <div class="status <?= h($status) ?>"><?= h($status === 'idle' ? 'Ready' : $status) ?></div>
      </div>

<?php if ($notice !== ''): ?>
        <div class="notice <?= h($status) ?>"><?= h($notice) ?></div>
      <?php endif; ?>

<form method="post" action="/message.php" id="messageForm" novalidate>
        <div class="hidden-field" aria-hidden="true">
          <label>Website <input type="text" name="website" tabindex="-1" autocomplete="off"></label>
        </div>

<div class="grid2">
          <label>Name
            <input name="name" required maxlength="120" autocomplete="name" value="<?= $old('name') ?>" placeholder="Your name">
          </label>
          <label>Email
            <input name="email" type="email" required maxlength="180" autocomplete="email" value="<?= $old('email') ?>" placeholder="you@example.com">
          </label>
        </div>

<div class="grid2">
          <label>Phone optional
            <input name="phone" maxlength="80" autocomplete="tel" value="<?= $old('phone') ?>" placeholder="Phone number">
          </label>
          <label>Topic
            <select name="topic">
              <?php
              $topics = ['General Message','Support / Site Issue','Books / Publishing','Art / Tilo Gallery','SIMON AI','Web360','Business Services','Legal / Admin','Partnership','Urgent'];
              $selectedTopic = (string)($_POST['topic'] ?? ($prefillCode !== '' ? 'Support / Site Issue' : 'General Message'));
              foreach ($topics as $topic):
              ?>
                <option value="<?= h($topic) ?>" <?= $selectedTopic === $topic ? 'selected' : '' ?>><?= h($topic) ?></option>
              <?php endforeach; ?>
            </select>
          </label>
        </div>

<label>Priority
          <select name="priority">
            <?php
            $priorities = ['normal' => 'Normal', 'high' => 'High', 'urgent' => 'Urgent'];
            $selectedPriority = (string)($_POST['priority'] ?? ($prefillCode !== '' ? 'high' : 'normal'));
            foreach ($priorities as $value => $label):
            ?>
              <option value="<?= h($value) ?>" <?= $selectedPriority === $value ? 'selected' : '' ?>><?= h($label) ?></option>
            <?php endforeach; ?>
          </select>
        </label>

<label>Message
          <textarea name="message" required maxlength="<?= h((string)MAX_MESSAGE_CHARS) ?>" placeholder="Tell SIMON what you need, what happened, or what to review."><?= $old('message', $prefillMessage) ?></textarea>
        </label>

<div class="actions">
          <button class="send" type="submit">Send Message</button>
          <a class="linkbtn" href="/">Home</a>
          <a class="linkbtn" href="/sitemap.php">Sitemap</a>
        </div>
      </form>

<div class="helpgrid" aria-label="Helpful links">
        <a class="help" href="/sitemap.php" data-track="help_sitemap"><b>Find a Page</b><span>Open the public SIMON site map.</span></a>
        <a class="help" href="/simon_ai/" data-track="help_simon_ai"><b>SIMON AI</b><span>Ask the assistant or review AI tools.</span></a>
        <a class="help" href="/web360/" data-track="help_web360"><b>Web360</b><span>Go to the web builder and app tools.</span></a>
      </div>
    </section>
  </section>
  <div class="foot">© <?= h(date('Y')) ?> Gaylord Sinclair · Powered by SIMON · Message route: <?= h(ADMIN_EMAIL) ?></div>
</main>

function beacon(stream, payload){
    try{
      fetch(base + '?stream=' + encodeURIComponent(stream) + key, {
        method:'POST',
        headers:{'Content-Type':'application/json'},
        keepalive:true,
        body:JSON.stringify(Object.assign({
          title:'SIMON Message · ' + (payload.event || 'event'),
          source:'message.php',
          rid:PAGE.rid || '',
          at:new Date().toISOString(),
          url:location.href,
          referrer:document.referrer || '',
          ua:navigator.userAgent,
          screen:innerWidth + 'x' + innerHeight,
          tz:Intl.DateTimeFormat().resolvedOptions().timeZone || 'Local'
        }, payload || {}))
      }).catch(()=>{});
    }catch(e){}
  }

beacon(visit, {event:'message_page_view', status:PAGE.status || 'idle'});
  beacon(pulse, {event:'message_portal_ready', status:PAGE.status || 'idle'});

Quick jump

open a path

True command center for SIMON + WEB360

File viewer

Quick jump