HOME

Mini Shell 1.0
DIR:/home/htlwork.com/www/dev/kaufmanit/wp-content/themes/astra-child/
Current File : /home/htlwork.com/www/dev/kaufmanit/wp-content/themes/astra-child/thankyou.php
<?php /* Template Name: email security Thankyou Template */ ?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Email Security | KaufmanIT</title>
    <link rel="stylesheet" href="css/thankYou.css">
	<link href="https://fonts.googleapis.com/css2?family=Lato:wght@100;300;400;700;900&display=swap" rel="stylesheet"> 
	<link href="https://fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet"> 

    <script src="https://code.jquery.com/jquery-3.6.4.min.js"></script>
   <script src="<?php echo get_stylesheet_directory_uri(); ?>/js/thankYou.js"></script>


    <style>
        body {
            font-family: 'Poppins', sans-serif; font-weight: 400; 
            text-align: center;
            margin: 50px;
			height:100%;
			display:flex;
        }
		html { height: 100%; }
        h1 {color: #e90029;}
        p {margin-bottom: 20px;}

        .load-wrapp {
            display: flex;
            align-items: center;
            justify-content: center;
            height: 42vh;
        }

        .load-9 {
            text-align: center;
            margin-top: 0;
        }

        .spinner {
            border: 8px solid #e90029;
            border-top: 8px solid transparent;
            border-radius: 50%;
            width: 50px;
            height: 50px;
            animation: spin 1s linear infinite;
        }

        @keyframes spin {
            0% { transform: rotate(0deg); }
            100% { transform: rotate(360deg); }
        }
		
		body {
  margin: 0;
  padding: 25px;
}

.demo-container {
  width: 300px;
  margin: auto;
}

.progress-bar {
  height: 4px;
  background-color: rgba(5, 114, 206, 0.2);
  width: 100%;
  overflow: hidden;
}

.progress-bar-value {
  width: 100%;
  height: 100%;
  background-color: rgb(233, 0, 41);
  animation: indeterminateAnimation 1s infinite linear;
  transform-origin: 0% 50%;
}

@keyframes indeterminateAnimation {
  0% {
	transform:  translateX(0) scaleX(0);
  }
  40% {
	transform:  translateX(0) scaleX(0.4);
  }
  100% {
	transform:  translateX(100%) scaleX(0.5);
  }
}
.demo-container img {width:100%;}
.demo-container {
    display: flex;
    flex-wrap: wrap;
    align-items: center;
    justify-content: center;
    gap: 30px;
}
    </style>
</head>
<body>
	
	<div class="demo-container">
	<img src="<?php echo home_url(); ?>/wp-content/uploads/2024/05/KaufmanIT-Managed-IT-Support-Cyber-Security-WebP.webp">
  <div class="progress-bar">
	<div class="progress-bar-value"></div>
  </div>
   <div class="status-text" id="statusText">Resolving findings…</div>
</div>


<?php
session_start();
$email = $_SESSION['email'];
$domem = explode('@',$email);
$domain = $domem[1];

$apiKey = 'b40fb8ca-e2ed-4656-b8d1-69b0bfbebea1';

$DKIMContingency = false;
$hasDMARC = false;
//$domain = $_SESSION['domain'] ?? null;
$_SESSION['domain'] = $domain;
$_SESSION['email'] = $email;
$_SESSION['EmailServiceProvider'] = "";
$_SESSION['DNSHostingProvider'] = "";
$_SESSION['SPFIdentifier'] = "";
$_SESSION['DMARCPolicy'] = "";
$_SESSION['DKIMStatus'] = "";
$_SESSION['DNSSEC'] = "";
$_SESSION['SecurityScore'] = "";


getEmailServiceProvider($domain,$apiKey);
checkAndStoreSPFIDentifier($domain,$apiKey);
checkAndStoreDMARCPolicyStatus($domain,$apiKey);
checkAndStoreDNSSECStatus($domain,$apiKey);
checkAndStoreDKIMPolicyStatus($domain,$apiKey);
calculateEmailSecurityScore();

function getEmailServiceProvider($domain, $apiKey) {

$url = "https://mxtoolbox.com/api/v1/lookup/mx/".$domain;

$curl = curl_init($url);
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);

$headers = array(
   "Authorization: ".$apiKey,
);
curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
//for debug only!
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);

$resp = curl_exec($curl);
curl_close($curl);

    $responseArray = json_decode($resp, true);

    if ($responseArray !== null) {
        // Check if the desired key exists in the response
        if (isset($responseArray['EmailServiceProvider'])) {
            session_start();
             $_SESSION['EmailServiceProvider'] = $responseArray['EmailServiceProvider'];
            
            //return $emailServiceProvider;
        } else {
           
            return "Email service provider information not found.";
        }
    } else {
        // Failed to decode JSON response
        return "Failed to decode JSON response.";
    }
	
}



function checkAndStoreSPFIDentifier($domain, $apiKey) {

$url = "https://mxtoolbox.com/api/v1/lookup/spf/".$domain;

$curl = curl_init($url);
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);

$headers = array(
   "Authorization: ".$apiKey,
);
curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
//for debug only!
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);

$resp = curl_exec($curl);
curl_close($curl);

    $responseArray = json_decode($resp, true);

    if ($responseArray !== null) {
        
		        $spfRecord = null;

        foreach ($responseArray['Information'] as $item) {
            if ($item['Type'] === 'record' && strpos($item['Description'], 'v=spf1') !== false) {
                $spfRecord = $item;
                break;
            }
        }

        if ($spfRecord) {
            $spfEndingMatch = [];
            preg_match('/([-~+?])all/i', $spfRecord['Description'], $spfEndingMatch);
            $spfEnding = isset($spfEndingMatch[1]) ? $spfEndingMatch[1] : null;

            if ($spfEnding) {
                $_SESSION['SPFIdentifier'] = $spfEnding;
            } else {
                 $_SESSION['SPFIdentifier'] = 'ERROR';
            }
        } else {
             $_SESSION['SPFIdentifier'] = 'NONE';
        }
		
    } else {
        // Failed to decode JSON response
        return "Failed to decode JSON response.";
    }
	
}



function checkAndStoreDMARCPolicyStatus($domain, $apiKey) {

$url = "https://mxtoolbox.com/api/v1/lookup/dmarc/".$domain;

$curl = curl_init($url);
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);

$headers = array(
   "Authorization: ".$apiKey,
);
curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
//for debug only!
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);

$resp = curl_exec($curl);
curl_close($curl);

    $responseArray = json_decode($resp, true);

    if ($responseArray !== null) {
			$policyStatus = "NONE";
					foreach ($responseArray['Passed'] as $item) {
						if ($item['ID'] === 441) {
							$dmarcPolicyItem = null;
							foreach ($responseArray['Information'] as $info) {
								if ($info['Tag'] === 'p') {
									$dmarcPolicyItem = $info;
									break;
								}
							}
							$policyStatus = $dmarcPolicyItem ? $dmarcPolicyItem['TagValue'] : "NONE";
							break;
						}
					}

		 $_SESSION['DMARCPolicy'] = $policyStatus;
    } else {
        // Failed to decode JSON response
        return "Failed to decode JSON response.";
    }
	
}


function checkAndStoreDNSSECStatus($domain, $apiKey) {

$url = "https://mxtoolbox.com/api/v1/lookup/dnskey/".$domain;

$curl = curl_init($url);
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);

$headers = array(
   "Authorization: ".$apiKey,
);
curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
//for debug only!
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);

$resp = curl_exec($curl);
curl_close($curl);

    $responseArray = json_decode($resp, true);

    if ($responseArray !== null) {
$dnssecenabled = !empty($responseArray['Information']);
        $dnsHostingProvider = $responseArray['DnsServiceProvider'] ?? "";
        session_start();
         $_SESSION['DNSSEC'] = $dnssecenabled ? "true" : "false";
         $_SESSION['DNSHostingProvider'] = $dnsHostingProvider;
    } else {
        // Failed to decode JSON response
        return "Failed to decode JSON response.";
    }
	
}

function checkAndStoreDKIMPolicyStatus($domain, $apiKey) {
    $apiUrl = 'https://mxtoolbox.com/api/v1/lookup/dkim/';
    $foundSelector = false;

    $selectorsToCheck = [];
    $localStorageItem = ""; // Assuming localStorage is not available in PHP

   $emailServiceProvider = $_SESSION['EmailServiceProvider'] ?? '';

    if (strpos($emailServiceProvider, 'Microsoft') !== false) {
        $selectorsToCheck = ["selector1", "selector2", "selector3"];
    } else if (strpos($emailServiceProvider, 'Google') !== false) {
        $selectorsToCheck = ["google"];
    }

    $apiRequests = [];
    foreach ($selectorsToCheck as $currentSelector) {
        $fullDomain = $currentSelector . '._domainkey.' . $domain;
        $fullApiUrl = $apiUrl . $fullDomain;

        $ch = curl_init($fullApiUrl);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_HTTPHEADER, array("Authorization: $apiKey"));

        $response = curl_exec($ch);
        $error = curl_error($ch);

        curl_close($ch);

        if ($error) {
            echo "cURL Error: " . $error . "\n";
        } else {
            $result = json_decode($response, true);

            if ($result && isset($result['Passed']) && count($result['Passed']) > 0) {
                // Assuming localStorage is not available in PHP, so not storing DKIMStatus
                // localStorage.setItem('DKIMStatus', 'true');
                 $_SESSION['DKIMStatus'] = true;
            }
        }
    }

}




function calculateEmailSecurityScore() {
    $SPFIdentifier = $_SESSION['SPFIdentifier'];
    $DMARCPolicy = $_SESSION['DMARCPolicy'];
    $DKIMStatus = $_SESSION['DKIMStatus'];
    $DNSSEC = $_SESSION['DNSSEC'];
    $emailServiceProvider = $_SESSION['EmailServiceProvider'];
    $score = 0;
    $providerFound = false;

    /* DMARC: Increment 30 if response is "reject"; increment 24 if response is "quarantine; score remains for any other condition." */
    if ($DMARCPolicy == 'reject') {
        $score += 30;
        $GLOBALS['hasDMARC'] = true;
    } elseif ($DMARCPolicy == 'quarantine') {
        $score += 24;
        $GLOBALS['hasDMARC'] = true;
    } else {
        $score += 2;
    }

    /* DNSSEC: Increment 10 if response is "true"; score remains for any other condition. */
    if ($DNSSEC == 'true') {
        $score += 10;
    } else {
        $score += 2;
    }

    /* DKIM: Increment 30 if response is "true"; score remains for any other condition. */
    if ($DKIMStatus == 'true') {
        $score += 30;
    } elseif ($DKIMStatus == 'false') {
        if (strpos($emailServiceProvider, 'Proofpoint') !== false ||
            strpos($emailServiceProvider, 'IPHmx') !== false ||
            strpos($emailServiceProvider, 'Barracuda') !== false ||
            strpos($emailServiceProvider, 'Amazon') !== false ||
            strpos($emailServiceProvider, 'Mimecast') !== false
        ) {
            $providerFound = true;
            $GLOBALS['DKIMContingency'] = true;
            //echo 'Provider found, contingency hit.';
            //$_SESSION['providerFound'] = $providerFound;
        }

        if ($providerFound && $GLOBALS['hasDMARC'] == true) {
            $score += 15;
        }
    } else {
        $score += 2;
    }

    /* SPF: Increment 30 if response is "-" or "~"; score remains for any other condition.*/
    if ($SPFIdentifier == '-') {
        $score += 30;
    } elseif ($SPFIdentifier == '~') {
        $score += 24;
    } else {
        $score += 2;
    }
   
     $_SESSION['providerFound'] = $providerFound;
     $_SESSION['SecurityScore'] = $score;
     
}
?>

<script>
    const statusText = document.getElementById('statusText');

    const messages = [
      { text: 'Verifying email service…', duration: 2000 },
      { text: 'Checking SPF…', duration: 250 },
      { text: 'Validating DKIM…', duration: 750 },
      { text: 'DMARC engaged…', duration: 250 },
      { text: 'Checking DNS…', duration: 350 },
      { text: 'Resolving findings…', duration: -1 } // -1 indicates the final message that stays
    ];

    function updateText() {
      let currentIndex = 0;

      function updateMessage() {
        const currentMessage = messages[currentIndex];
        statusText.textContent = currentMessage.text;

        if (currentMessage.duration !== -1) {
          setTimeout(() => {
            currentIndex++;
            if (currentIndex < messages.length) {
              updateMessage();
            }
          }, currentMessage.duration);
        }
      }

      updateMessage();
    }

    // Start updating the text
    updateText();
  </script>
  

  </body>
</html>