<?php
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;

require 'vendor/autoload.php';

if ($_SERVER["REQUEST_METHOD"] === "POST") {
    // Sanitize input
    $name = htmlspecialchars(strip_tags(trim($_POST["name"] ?? '')));
    $email = htmlspecialchars(strip_tags(trim($_POST["email"] ?? '')));
    $message = htmlspecialchars(strip_tags(trim($_POST["message"] ?? '')));
    $recaptchaResponse = $_POST['g-recaptcha-response'] ?? '';

    // Validate input
    if (empty($name) || empty($email) || empty($message) || empty($recaptchaResponse)) {
        die("All fields are required, including reCAPTCHA.");
    }

    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        die("Invalid email format.");
    }

    // Verify reCAPTCHA
    $secretKey = getenv("RECAPTCHA_SECRET_KEY"); // Use environment variable for security
    $recaptchaURL = "https://www.google.com/recaptcha/api/siteverify?secret=$secretKey&response=$recaptchaResponse";
    $response = file_get_contents($recaptchaURL);
    $responseKeys = json_decode($response, true);

    if (!$responseKeys["success"]) {
        die("reCAPTCHA verification failed. Please try again.");
    }

    // Send email via PHPMailer
    $mail = new PHPMailer(true);

    try {
        // SMTP Configuration (Use Environment Variables for Security)
        $mail->isSMTP();
        $mail->Host = 'smtp.gmail.com';
        $mail->SMTPAuth = true;
        $mail->Username = getenv("SMTP_EMAIL");  // Get email from environment variable
        $mail->Password = getenv("SMTP_PASSWORD");  // Get password from environment variable
        $mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;
        $mail->Port = 587;

        // Set email details
        $mail->setFrom($email, $name);
        $mail->addAddress(getenv("RECEIVER_EMAIL")); // Receiver's email

        $mail->Subject = "New Contact Form Submission from $name";
        $mail->Body = "From: $name <$email>\n\n$message";

        // Send email
        $mail->send();
        echo "Message sent successfully!";
    } catch (Exception $e) {
        echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
    }
}
?>