[], 'blocked_until' => 0]; if (file_exists($rateLimitFile)) { $content = @file_get_contents($rateLimitFile); if ($content) { $data = json_decode($content, true) ?: $data; } } if ($data['blocked_until'] > $now) { return ['allowed' => false, 'wait' => $data['blocked_until'] - $now]; } $data['attempts'] = array_filter($data['attempts'], function($t) use ($now) { return $t > ($now - RATE_LIMIT_WINDOW); }); if (count($data['attempts']) >= RATE_LIMIT_MAX) { $data['blocked_until'] = $now + RATE_LIMIT_WINDOW; @file_put_contents($rateLimitFile, json_encode($data), LOCK_EX); return ['allowed' => false, 'wait' => RATE_LIMIT_WINDOW]; } return ['allowed' => true, 'data' => $data, 'file' => $rateLimitFile]; } function recordAttempt($rateData) { $rateData['data']['attempts'][] = time(); @file_put_contents($rateData['file'], json_encode($rateData['data']), LOCK_EX); } function validateHoneypot($postData) { if (!isset($postData['honeypot_field'])) { return false; } if ($postData['honeypot_field'] !== '') { return false; } if (!isset($postData['form_time'])) { return false; } $submitTime = (int)$postData['form_time']; if ($submitTime <= 0 || (time() - $submitTime) < 3) { return false; } return true; } if ($_SERVER['REQUEST_METHOD'] === 'POST') { $ip = $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0'; if (!validateHoneypot($_POST)) { header('HTTP/1.1 400 Bad Request'); exit; } $rateCheck = checkRateLimit($ip); if (!$rateCheck['allowed']) { $waitMin = ceil($rateCheck['wait'] / 60); $flashContact = "Zu viele Anfragen. Bitte warte {$waitMin} Minuten."; } else { $csrfToken = $_POST['csrf_token'] ?? ''; $validCsrf = isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $csrfToken); if (!$validCsrf) { $flashContact = 'Sitzung abgelaufen. Bitte Seite neu laden.'; } else { $name = trim($_POST['name'] ?? ''); $email = filter_var($_POST['email'] ?? '', FILTER_VALIDATE_EMAIL); $subject = trim($_POST['subject'] ?? ''); $message = trim($_POST['message'] ?? ''); if (strlen($name) < 2 || strlen($name) > 100) { $flashContact = 'Name muss zwischen 2 und 100 Zeichen lang sein.'; } elseif (!$email) { $flashContact = 'Bitte gib eine gültige E-Mail-Adresse ein.'; } elseif (strlen($subject) < 3 || strlen($subject) > 200) { $flashContact = 'Betreff muss zwischen 3 und 200 Zeichen lang sein.'; } elseif (strlen($message) < 10 || strlen($message) > 5000) { $flashContact = 'Nachricht muss zwischen 10 und 5000 Zeichen lang sein.'; } else { recordAttempt($rateCheck); mysqli_report(MYSQLI_REPORT_OFF); $mysqli = @new mysqli(env('DB_HOST','localhost'),env('DB_USER','websiteuser'),env('DB_PASS','starkesPasswort123'),env('DB_NAME','website'),env('DB_PORT',3306)); if (!$mysqli->connect_errno) { $mysqli->set_charset('utf8mb4'); $ua = substr($_SERVER['HTTP_USER_AGENT'] ?? '', 0, 500); $ref = substr($_SERVER['HTTP_REFERER'] ?? '', 0, 500); $stmt = $mysqli->prepare("INSERT INTO contact_messages (name,email,subject,message_text,ip_address,user_agent,referer) VALUES (?,?,?,?,?,?,?)"); if ($stmt) { $stmt->bind_param('sssssss', $name, $email, $subject, $message, $ip, $ua, $ref); $ok = $stmt->execute(); $flashContact = $ok ? 'Nachricht gesendet!' : 'Senden fehlgeschlagen.'; $formSuccess = $ok; $stmt->close(); } else { $flashContact = 'Technischer Fehler. Bitte per E-Mail kontaktieren.'; } $mysqli->close(); } else { $flashContact = 'Nachricht konnte nicht gesendet werden. Bitte per E-Mail kontaktieren.'; } } } } } $_SESSION['csrf_token'] = bin2hex(random_bytes(32)); $formTime = time(); ?> Kontakt – TribeVibe Events

Kontakt

Schreib uns

Antwort in der Regel innerhalb von 24–48 Stunden.

Kontaktdaten

  • E-Mailcontact@tribevibeevents.de
  • Instagram@tribevibe_events
  • StandortNürnberg, Deutschland

Booking Anfragen

Für Kollaborationen nutze bitte das Kontaktformular mit dem Betreff "Kollaboration".