<?
///////////////////////////////////////
// sanitize.inc.php
// Sanitization functions for PHP
// by: Gavin Zuchlinski, Jamie Pratt, Hokkaido
// webpage: http://libox.net
// Last modified: September 27, 2003
//
// Many thanks to those on the webappsec list for helping me improve these functions
///////////////////////////////////////
// Function list:
// sanitize_paranoid_string($string) -- input string, returns string stripped of all non 
//           alphanumeric
// sanitize_system_string($string) -- input string, returns string stripped of special
//           characters
// sanitize_sql_string($string) -- input string, returns string with slashed out quotes
// sanitize_html_string($string) -- input string, returns string with html replacements
//           for special characters
// sanitize_int($integer) -- input integer, returns ONLY the integer (no extraneous 
//           characters
// sanitize_float($float) -- input float, returns ONLY the float (no extraneous 
//           characters)
// sanitize($input, $flags) -- input any variable, performs sanitization 
//           functions specified in flags. flags can be bitwise 
//           combination of PARANOID, SQL, SYSTEM, HTML, INT, FLOAT, LDAP, 
//           UTF8
///////////////////////////////////////
define("PARANOID", 1);
define("SQL", 2);
define("SYSTEM", 4);
define("HTML", 8);
define("INT", 16);
define("FLOAT", 32);
define("LDAP", 64);
define("UTF8", 128);

// internal function for utf8 decoding
// thanks to Jamie Pratt for noticing that PHP's function is a little 
// screwy
function my_utf8_decode($string)
{
return strtr($string, 
  "???????¥µÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖØÙÚÛÜÝßàáâãäåæçèéêëìíîïðñòóôõöøùúûüýÿ", 
  "SOZsozYYuAAAAAAACEEEEIIIIDNOOOOOOUUUUYsaaaaaaaceeeeiiiionoooooouuuuyy");
}

// paranoid sanitization -- only let the alphanumeric set through
function sanitize_paranoid_string($string, $min='', $max='')
{
  $string = preg_replace("/[^a-zA-Z0-9]/", "", $string);
  $len = strlen($string);
  if((($min != '') && ($len < $min)) || (($max != '') && ($len > $max)))
    return FALSE;
  return $string;
}

// sanitize a string in prep for passing a single argument to system() (or similar)
function sanitize_system_string($string, $min='', $max='')
{
  $pattern = '/(;|\||`|>|<|&|^|"|'."\n|\r|'".'|{|}|[|]|\)|\()/i'; // no piping, passing possible environment variables ($),
                           // seperate commands, nested execution, file redirection, 
                           // background processing, special commands (backspace, etc.), quotes
                           // newlines, or some other special characters
  $string = preg_replace($pattern, '', $string);
  $string = '"'.preg_replace('/\$/', '\\\$', $string).'"'; //make sure this is only interpretted as ONE argument
  $len = strlen($string);
  if((($min != '') && ($len < $min)) || (($max != '') && ($len > $max)))
    return FALSE;
  return $string;
}

// sanitize a string for SQL input (simple slash out quotes and slashes)
function sanitize_sql_string($string, $min='', $max='')
{
  $pattern[0] = '/(\\\\)/';
  $pattern[1] = "/\"/";
  $pattern[2] = "/'/";
  $replacement[0] = '\\\\\\';
  $replacement[1] = '\"';
  $replacement[2] = "\\'";
  $len = strlen($string);
  if((($min != '') && ($len < $min)) || (($max != '') && ($len > $max)))
    return FALSE;
  return preg_replace($pattern, $replacement, $string);
}

// sanitize a string for SQL input (simple slash out quotes and slashes)
function sanitize_ldap_string($string, $min='', $max='')
{
  $pattern = '/(\)|\(|\||&)/';
  $len = strlen($string);
  if((($min != '') && ($len < $min)) || (($max != '') && ($len > $max)))
    return FALSE;
  return preg_replace($pattern, '', $string);
}


// sanitize a string for HTML (make sure nothing gets interpretted!)
function sanitize_html_string($string)
{
  $pattern[0] = '/\&/';
  $pattern[1] = '/</';
  $pattern[2] = "/>/";
  $pattern[3] = '/\n/';
  $pattern[4] = '/"/';
  $pattern[5] = "/'/";
  $pattern[6] = "/%/";
  $pattern[7] = '/\(/';
  $pattern[8] = '/\)/';
  $pattern[9] = '/\+/';
  $pattern[10] = '/-/';
  $replacement[0] = '&amp;';
  $replacement[1] = '&lt;';
  $replacement[2] = '&gt;';
  $replacement[3] = '<br>';
  $replacement[4] = '&quot;';
  $replacement[5] = '&#39;';
  $replacement[6] = '&#37;';
  $replacement[7] = '&#40;';
  $replacement[8] = '&#41;';
  $replacement[9] = '&#43;';
  $replacement[10] = '&#45;';
  return preg_replace($pattern, $replacement, $string);
}

// make int int!
function sanitize_int($integer, $min='', $max='')
{
  $int = intval($integer);
  if((($min != '') && ($int < $min)) || (($max != '') && ($int > $max)))
    return FALSE;
  return $int;
}

// make float float!
function sanitize_float($float, $min='', $max='')
{
  $float = floatval($float);
  if((($min != '') && ($float < $min)) || (($max != '') && ($float > $max)))
    return FALSE;
  return $float;
}

// glue together all the other functions
function sanitize($input, $flags, $min='', $max='')
{
  if($flags & UTF8) $input = my_utf8_decode($input);
  if($flags & PARANOID) $input = sanitize_paranoid_string($input, $min, $max);
  if($flags & INT) $input = sanitize_int($input, $min, $max);
  if($flags & FLOAT) $input = sanitize_float($input, $min, $max);
  if($flags & HTML) $input = sanitize_html_string($input, $min, $max);
  if($flags & SQL) $input = sanitize_sql_string($input, $min, $max);
  if($flags & LDAP) $input = sanitize_ldap_string($input, $min, $max);
  if($flags & SYSTEM) $input = sanitize_system_string($input, $min, $max);
  return $input;
}

?>
<?

 // if targeted outside of index.php, kill it
if (!defined('IS_SCRIPT')) {
          header('HTTP/1.0 403 Forbidden');
          exit;
      } 

/**
 * Description: E-Mail encoder to reduce spam.
 *
 * @author Micke Johansson
 *
 * $mail. The e-mail address to encode.
 * $isLink. Set to true to create a link.
 * $display. What will be displayed in the browser. If omitted it will display the e-mail address.
 *
 * @param string $mail
 * @param bool $isLink
 * @param string $display
 * @return string Encoded e-mail or e-mail link
 */
function EncodeMail($mail, $isLink = false, $display = '')
{
	$domain = substr($mail,strpos($mail, '@')+1);
	$name = substr($mail,0, strpos($mail, '@'));
	$encodedDomain = 'ladyslipperscenicbyway.org';
	$encodedName = 'info';
	$encodedDisplay = '';
	
	for ($i=0; $i < strlen($domain); $i++)
	{
		$encodedDomain .= '&#'.ord(substr($domain,$i)).';';
	}
	for ($i=0; $i < strlen($name); $i++)
	{
		$encodedName .= '&#'.ord(substr($name,$i)).';';
	}
	for ($i=0; $i < strlen($display); $i++)
	{
		$encodedDisplay .= '&#'.ord(substr($display,$i)).';';
	}
	$script = "<script type=\"text/javascript\">";
	$script .= "d=\"".$encodedDomain."\";";
	$script .= "n=\"".$encodedName."\";";
	if ($isLink)
	{
		if ($display == '')
			$script .= "document.write('<a href=\"mailto:'+n+'@'+d+'\">'+n+'@'+d+'</a>');";
		else
			$script .= "document.write('<a href=\"mailto:'+n+'@'+d+'\">".$encodedDisplay."</a>');";
	}
	else 
	{
		$script .= "document.write(n+'@'+d);";
	}
	$script .= "</script>";
	return $script;
}

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="description" content="Lady Slipper Scenic Byway goes â€œover the river and through the woods,â€ just like the song says. The river is the Mississippi River, where it passes out of Cass Lake as a wilderness stream, close to the beginning of its long journey. The woods are the pines, aspen and birches of the Chippewa National Forest, which covers a wide expanse of north central Minnesota. This rustic route is one of the 22 Minnesota Scenic Byways." />
<meta name="keywords" content="Lady, Slipper, Scenic, Byway, Mississippi, River, Chippewa, National, Forest, Minnesota, Cass, Lake, Blackduck, beaches, trails, history, showy, ladyâ€™s, slipper, pink, pouches, Pennington, loon, state, flower, Cypripedium, Reginae, Orchid, wildflowers, swamps, bogs, W. B. Dean, camping, fishing, hiking" />
<meta name="verify-v1" content="lrno1WyMKcZYUWoqOmCnO6hX+opj6d5UFFpEemBZ+Q0=" />
<title>Lady Slipper Scenic Byway - Contact the LSSB</title>


<link rel="stylesheet" type="text/css" href="/css/global.css" media="screen" />
<link rel="stylesheet" type="text/css" href="/css/fonts/caslon_antique_regular/stylesheet.css" media="screen" />
<link rel="stylesheet" type="text/css" href="/css/ladyslipper.css" media="screen" />
<link rel="stylesheet" type="text/css" href="/css/lightbox.css">
<link rel="stylesheet" type="text/css" href="/css/print.css" media="print" />
<!-- Javascripts -->
<script type='text/javascript' src='/js/prototype.js'></script>
<script type='text/javascript' src='/js/scriptaculous.js?load=effects'></script>
<script type='text/javascript' src='/js/lightbox.js' ></script>
<script type='text/javascript' src='/js/vwd_curvycorners.js' ></script>
<script type="text/javascript">
<!--
gCurvyCorners[0]="@ordinance,10,10,10,10,1,0";
gCurvyCorners[1]="@guestbookpost,10,10,10,10,1,0";
//-->
</script></head>

<body>
<!-- DO NOT MOVE! The following AllWebMenus linking code section must always be placed right AFTER the BODY tag-->
<!-- ******** BEGIN ALLWEBMENUS CODE FOR menu ******** -->
<script type="text/javascript">var MenuLinkedBy="AllWebMenus [4]",awmMenuName="menu",awmBN="744";awmAltUrl="";</script><script charset="UTF-8" src="/menu.js" type="text/javascript"></script><script type="text/javascript">awmBuildMenu();</script>
<!-- ******** END ALLWEBMENUS CODE FOR menu ******** -->


<div class="top-bg"><img src="/images/top.png" alt="" /></div>
<div id="outer">
	<div id="container">


<div class="top"><a name="topofpage" id="topofpage" class="hide"></a>
<p>&nbsp;<img style="vertical-align: middle;" src="" alt="" />&nbsp;<strong></strong>
</p></div>

	<div id="masthead">
<img src="/images/ladyslipper-header.jpg" width="780" height="230" border="0" usemap="#Logo" alt="" />
<map name="Logo" id="Logo"><area shape="circle" coords="118,127,84" href="/index.php?pg=home"></map>

    <!--end masthead div -->
  </div>
<!-- Start nav div -->

<div id="nav">
<table border="0" cellpadding="0" cellspacing="0" class="navtable">
<tr>
<td><div id="awmAnchor-menu"><img src="/images/spacer.gif" width="193" height="375" alt="" /></div>

</td>
</tr>
</table>
<div class="twitterStatus"><p class="TwitterTitle">Lady's Slippers Update <a href="https://twitter.com/Lady_Slipper" target="_blank" class="noBdr"><img src="/images/Twitter-24x24.png" width="24" height="24" alt="On Twitter" align="absmiddle" /></a></p>
<p class="body"><a href="https://twitter.com/Lady_Slipper" target="_blank">
<? echo twitter_status('47724170', FALSE); ?></a></p>
</div>
<div class="ads">
<a href="http://www.exploreminnesota.com/" target="_blank"><img src="/images/nav/exploremn.png" width="160" height="64" /></a><br />

<a href="http://www.blackduckhistoryart.org/" target="_blank"><img src="/images/ads/BAHAC_LSSBwebAd.jpg" class="bdr" /></a><br />
<a href="mailto:info@ladyslipperscenicbyway.org?subject=Advertise Your Business Here" class="lightbox"><img src="/images/180x150.gif" class="bdr"/></a></div>
</div>
<!--end nav div -->
<!-- Start content div -->
    <div id="content">
 <div class="main">
<h1>Contact the LSSB</h1>
<p>Please use this form to send a message to the Lady Slipper Scenic Byway!</p><br />

<form method="post" action="http://ladyslipperscenicbyway.org/cgi-sys/FormMail.cgi">
              <input type="hidden" name="recipient" value="info@ladyslipperscenicbyway.org">
              <input type="hidden" name="subject" value="LSSB Contact Form">
              <input type="hidden" name="redirect" value="http://www.ladyslipperscenicbyway.org/index.php?pg=thanks">
              
<table width="100%" border="0" cellpadding="0" cellspacing="0" id="guestbook">
                        <tr>
                          <td class="left"><p>Name:</p></td>
                          <td class="right"><input name="Name" type="text" size="35">                          </td>
                        </tr>
                        <tr>
                          <td class="left"><p>E-mail:</p></td>
                          <td class="right"><input name="Email" type="text" size="35">                          </td>
                        </tr>
                        <tr>
                          <td class="left"><p>Comments:</p></td>
                          <td class="right"><textarea name="Comments" cols="45" rows="5"></textarea>                          </td>
                        </tr>
                        <tr>
                          <td colspan="2" valign="top"><p align="center">
                              <input type="submit" value="Submit">
                          </p></td>
                        </tr>
                      </table>
  </form>
</div>            
     <!--end content div-->       

   	</div>
	
	</div>
    <!--end container div-->
<div class="footerclear"></div>
</div>

<div id="footer"><img src="/images/bottom.png" class="footerbottom" /><div class="footerlinks">
<ul>
<li><a href="/index.php?pg=home">Home</a></li>
<li><a href="/index.php?pg=about">About Lady's Slippers</a></li>
<li><a href="/index.php?pg=things_to_do">Things to Do &amp; See</a></li>
<li><a href="/index.php?pg=destinations">Destinations</a></li>
<li><a href="/index.php?pg=chippewa">Chippewa National Forest</a></li>
<li><a href="/index.php?pg=stories">Stories &amp; Experiences</a></li>
</ul>
<ul>
<li><a href="/index.php?pg=guestbook">Guestbook</a></li>
<li><a href="/index.php?pg=newsletters">Newsletters</a></li>
<li><a href="/index.php?pg=whatsnew">What's New</a></li>
<li><a href="/index.php?pg=links">Additional Links</a></li>
<li><a href="/index.php?pg=contact">Contact the LSSB</a></li>
<li><a href="/pdf/lssb_webbrochure.pdf" target="_blank">Download Brochure</a></li>
</ul>
<strong>Copyright &copy; 2026 Lady Slipper Scenic Byway</strong> 
</div>
<script type='text/javascript' src='/js/scripts.js' ></script></div>

</body>
</html>