PageRenderTime 57ms CodeModel.GetById 14ms RepoModel.GetById 0ms app.codeStats 0ms

/plugins/content/mosforme/mosforme.php

https://bitbucket.org/organicdevelopment/joomla-2.5
PHP | 699 lines | 500 code | 136 blank | 63 comment | 136 complexity | 943762f128238ca1785668febbf1eda9 MD5 | raw file
Possible License(s): LGPL-3.0, GPL-2.0, MIT, BSD-3-Clause, LGPL-2.1 
    

  1. <?php
    2. 

  2. /**
    3. 

  3. * @version 1.0.6
    4. 

  4. * @package RSform! 1.0.6
    5. 

  5. * @copyright (C) 2007 www.rsjoomla.com
    6. 

  6. * @license GPL, http://www.gnu.org/copyleft/gpl.html
    7. 

  7. */
    8. 

  8. 

  9. @session_start();
    10. 

  10. 

  11. $mainframe->registerEvent( 'onPrepareContent', 'plgMosForme' );
    12. 

  12. /**
    13. 

  13. * Mambot that loads module positions within content
    14. 

  14. */
    15. 

  15. function plgMosForme( &$row, &$params, $page=0 ) {
    16. 

  16. 

  17. 	$database =& JFactory::getDBO();
    18. 

  18. 

  19. 

  20. 	$plugin =& JPluginHelper::getPlugin('content', 'mosforme');
    21. 

  21. 

  22. 	// simple performance check to determine whether bot should process further
    23. 

  23. 	if ( strpos( $row->text, 'mosforme' ) === false ) {
    24. 

  24. 		return true;
    25. 

  25. 	}
    26. 

  26. 

  27.  	// expression to search for
    28. 

  28.  	$regex = '/{mosforme\s*.*?}/i';
    29. 

  29. 

  30. 

  31. 	// find all instances of mambot and put in $matches
    32. 

  32. 	preg_match_all( $regex, $row->text, $matches );
    33. 

  33. 

  34. 	// Number of mambots
    35. 

  35.  	$count = count( $matches[0] );
    36. 

  36. 

  37.  	// mambot only processes if there are any instances of the mambot in the text
    38. 

  38.  	if ( $count ) {
    39. 

  39. 		if (file_exists(JPATH_SITE.DS.'components'.DS.'com_forme'.DS.'forme.php'))
    40. 

  40. 			processForme( $row, $matches, $count, $regex );
    41. 

  41. 		else
    42. 

  42. 			JError::raiseWarning(500, 'The mosforme Plugin works only with RSForm! (different product than RSForm! Pro), which you do not have installed. Aborting...');
    43. 

  43. 	}
    44. 

  44. }
    45. 

  45. 

  46. function processForme ( &$row, &$matches, $count, $regex ) {
    47. 

  47. 	$my = & JFactory::getUser();
    48. 

  48. 	$CONFIG = new JConfig();
    49. 

  49. 	$database =& JFactory::getDBO();
    50. 

  50. 

  51. 

  52. 		$func 			= JRequest::getVar( 'func' );
    53. 

  53. 		$did			= JRequest::getVar('did','');
    54. 

  54. 	for ( $i=0; $i < $count; $i++ ) {
    55. 

  55. 		$load = str_replace( 'mosforme', '', $matches[0][$i] );
    56. 

  56.  		$load = str_replace( '{', '', $load );
    57. 

  57.  		$load = str_replace( '}', '', $load );
    58. 

  58.  		$load = trim( $load );
    59. 

  59. 

  60. 

  61. 

  62. 

  63. 		switch ($func) {
    64. 

  64. 			case 'thankyou':
    65. 

  65. 				//thankyou($option, $did);
    66. 

  66. 				$row->text 	= thankyou('com_forme', $did);//str_replace($matches[0][$i], thankyou('com_forme', $did), $row->text);
    67. 

  67. 			break;
    68. 

  68. 			default:
    69. 

  69. 				$row->text 	= str_replace($matches[0][$i], showForm('com_forme',$load), $row->text);
    70. 

  70. 			break;
    71. 

  71. 		}
    72. 

  72. 

  73. 

  74. 

  75. 

  76. 	}
    77. 

  77. 

  78. 

  79. 

  80.   	// removes tags without matching module positions
    81. 

  81. 	$row->text = preg_replace( $regex, '', $row->text );
    82. 

  82. }
    83. 

  83. 

  84. 

  85. 

  86. 

  87. 

  88. 

  89. 

  90. if(!function_exists('showForm')){
    91. 

  91. 	//require_once( dirname(__FILE__)  .'/../../plugins/system/legacy/functions.php' );
    92. 

  92. 

  93. 	function processForm($fid, $processform){
    94. 

  94. 		global  $Itemid, $mainframe;
    95. 

  95. 

  96. 		if(!$Itemid) $Itemid = 999999;
    97. 

  97. 		$my = & JFactory::getUser();
    98. 

  98. 		$CONFIG = new JConfig();
    99. 

  99. 		$database =& JFactory::getDBO();
    100. 

  100. 

  101. 		require_once( $mainframe->getPath( 'class','com_forme' ) );
    102. 

  102. 

  103. 		$row = new forme_data($database);
    104. 

  104. 		$row->form_id = $fid;
    105. 

  105. 		$data_id = 0;
    106. 

  106. 

  107. 		$form = new forme_forms($database);
    108. 

  108. 		$form->load($fid);
    109. 

  109. 

  110. 

  111. 

  112. 		eval($form->script_process);
    113. 

  113. 

  114. 		if(!empty($processform)){
    115. 

  115. 			$errors = false;
    116. 

  116. 			$form_data = JRequest::getVar('form',array(),'POST');
    117. 

  117. 			if(!empty($form_data)){
    118. 

  118. 				foreach($form_data as $key=>$value){
    119. 

  119. 					$form_data[$key] = RemoveXSS($form_data[$key]);
    120. 

  120. 				}
    121. 

  121. 			}
    122. 

  122. 

  123. 			$row->uip = $_SERVER['REMOTE_ADDR'];
    124. 

  124. 			$row->date_added = date('Y-m-d H:i:s');
    125. 

  125. 			$_SESSION['formmsg'] = array();
    126. 

  126. 

  127. 			//check captcha if any
    128. 

  128. 			$database->setQuery("SELECT * FROM #__forme_fields WHERE form_id = '$fid' AND published = 1");
    129. 

  129. 			$fields = $database->loadObjectList();
    130. 

  130. 

  131. 

  132. 			//load input data
    133. 

  133. 			foreach($fields as $field){
    134. 

  134. 				if(isset($form_data[$field->name])){
    135. 

  135. 					$_SESSION['formdata'][$field->name] = $form_data[$field->name];
    136. 

  136. 				}else{
    137. 

  137. 					$_SESSION['formdata'][$field->name] = array();
    138. 

  138. 				}
    139. 

  139. 			}
    140. 

  140. 

  141. 			foreach($fields as $i=>$field){
    142. 

  142. 				//check captcha
    143. 

  143. 				if($field->inputtype == 'captcha'){
    144. 

  144. 					//check session
    145. 

  145. 					if(isset($_SESSION['CAPTCHA'])){
    146. 

  146. 						if(isset($form_data[$field->name])){
    147. 

  147. 							if(strtoupper($form_data[$field->name])!=$_SESSION['CAPTCHA']){
    148. 

  148. 								$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ? _FORME_FRONTEND_REGISTRA_CAPTCHA : $field->validation_message;
    149. 

  149. 							}
    150. 

  150. 						}
    151. 

  151. 						else
    152. 

  152. 							$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ? _FORME_FRONTEND_REGISTRA_CAPTCHA : $field->validation_message;
    153. 

  153. 					}else{
    154. 

  154. 						$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ? _FORME_FRONTEND_REGISTRA_CAPTCHA : $field->validation_message;
    155. 

  155. 					}
    156. 

  156. 				}
    157. 

  157. 

  158. 

  159. 				//check mandatory
    160. 

  160. 				if($field->validation_rule == 'mandatory'){
    161. 

  161. 					if($field->inputtype!='file upload'){
    162. 

  162. 						if(isset($form_data[$field->name])){
    163. 

  163. 							if(is_array($form_data[$field->name])){
    164. 

  164. 								if(empty($form_data[$field->name])||(count($form_data[$field->name])==1&&$form_data[$field->name][0]=='')) $_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  sprintf(_FORME_FRONTEND_REGISTRA_CANNOT_EMPTY,$field->title) : $field->validation_message;
    165. 

  165. 							}else{
    166. 

  166. 								if($form_data[$field->name]=='')  $_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  sprintf(_FORME_FRONTEND_REGISTRA_CANNOT_EMPTY,$field->title) : $field->validation_message;
    167. 

  167. 							}
    168. 

  168. 						}else{
    169. 

  169. 							$_SESSION['formmsg'][$field->name][] =  $_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  sprintf(_FORME_FRONTEND_REGISTRA_CANNOT_EMPTY,$field->title) : $field->validation_message;
    170. 

  170. 						}
    171. 

  171. 					}else{
    172. 

  172. 						$field_exists = false;
    173. 

  173. 						foreach($_FILES['form']['name'] as $field_name=>$field_value){
    174. 

  174. 							if($field_name==$field->name){
    175. 

  175. 								if($_FILES['form']['tmp_name'][$field_name]!='')	$field_exists = true;
    176. 

  176. 							}
    177. 

  177. 						}
    178. 

  178. 						if(!$field_exists){
    179. 

  179. 							$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  sprintf(_FORME_FRONTEND_REGISTRA_FILE_CANNOT_EMPTY) : $field->validation_message;
    180. 

  180. 						}
    181. 

  181. 					}
    182. 

  182. 

  183. 				}
    184. 

  184. 				//check alphanum
    185. 

  185. 				if($field->validation_rule == 'alphanum'){
    186. 

  186. 					if(eregi('[^a-zA-Z0-9 ]', $form_data[$field->name] )|| $form_data[$field->name] == ''){
    187. 

  187. 						$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  sprintf(_FORME_FRONTEND_REGISTRA_ALPHANUMERIC,$field->title) : $field->validation_message;
    188. 

  188. 					}
    189. 

  189. 				}
    190. 

  190. 

  191. 				//check alpha
    192. 

  192. 				if($field->validation_rule == 'alpha'){
    193. 

  193. 					if(eregi('[^a-zA-Z ]', $form_data[$field->name] )|| $form_data[$field->name] == ''){
    194. 

  194. 						$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  sprintf(_FORME_FRONTEND_REGISTRA_ALPHA,$field->title) : $field->validation_message;
    195. 

  195. 					}
    196. 

  196. 				}
    197. 

  197. 

  198. 				//check email
    199. 

  199. 				if($field->validation_rule == 'email'){
    200. 

  200. 					if(!eregi ("^[[:alnum:]][a-z0-9_.-]*@[a-z0-9.-]+\.[a-z]{2,6}$", stripslashes(trim($form_data[$field->name]))) || $form_data[$field->name] == ''){
    201. 

  201. 						$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  _FORME_FRONTEND_REGISTRA_EMAIL : $field->validation_message;
    202. 

  202. 					}
    203. 

  203. 				}
    204. 

  204. 

  205. 				//check number
    206. 

  206. 				if($field->validation_rule == 'number'){
    207. 

  207. 					if(!is_numeric($form_data[$field->name] )|| $form_data[$field->name] == ''){
    208. 

  208. 						$_SESSION['formmsg'][$field->name][] = ($field->validation_message == '') ?  sprintf(_FORME_FRONTEND_REGISTRA_NUMERIC,$field->title) : $field->validation_message;
    209. 

  209. 					}
    210. 

  210. 				}
    211. 

  211. 

  212. 				//check file type compatibility
    213. 

  213. 				if($field->inputtype== 'file upload'){
    214. 

  214. 					foreach($_FILES['form']['name'] as $field_name=>$field_value){
    215. 

  215. 						if($field_name == $field->name){
    216. 

  216. 							$field_rules = explode(',',$field->default_value);
    217. 

  217. 							if( $field_rules[0] != '' || $field->default_value!=''){
    218. 

  218. 								$type_match = false;
    219. 

  219. 								foreach($field_rules as $rule){
    220. 

  220. 									//check for size
    221. 

  221. 									$size = explode('/',$rule);
    222. 

  222. 									if($size[0]=='size'){
    223. 

  223. 										if(!isset($size[1])) $size[1] = 0;
    224. 

  224. 										if($size[1]){
    225. 

  225. 											if($_FILES['form']['size'][$field->name] > (int)$size[1]*1024){
    226. 

  226. 												$_SESSION['formmsg'][$field->name][] = sprintf(_FORME_FRONTEND_REGISTRA_SIZE,$size[1]);
    227. 

  227. 											}
    228. 

  228. 										}
    229. 

  229. 									}
    230. 

  230. 

  231. 									//check for file type
    232. 

  232. 									if($rule==$_FILES['form']['type'][$field->name]){
    233. 

  233. 										$type_match = true;
    234. 

  234. 									}
    235. 

  235. 								}
    236. 

  236. 								if($_FILES['form']['type'][$field->name]=='') $type_match = true;
    237. 

  237. 								if(!$type_match){
    238. 

  238. 									$_SESSION['formmsg'][$field->name][] = _FORME_FRONTEND_REGISTRA_NOT_ALLOWED;
    239. 

  239. 								}
    240. 

  240. 							}
    241. 

  241. 						}
    242. 

  242. 					}
    243. 

  243. 				}
    244. 

  244. 

  245. 			}
    246. 

  246. 			if(!empty($_SESSION['formmsg'])){
    247. 

  247. 				$mainframe->redirect(str_replace( '&amp;', '&', $_SERVER['REQUEST_URI']));
    248. 

  248. 			}
    249. 

  249. 

  250. 

  251. 			//build params
    252. 

  252. 			$params_field = '';
    253. 

  253. 			foreach($form_data as $key=>$value){
    254. 

  254. 				if(is_array($value)) $value = implode(',',$value);
    255. 

  255. 				$params_field .= $key.'='.$value."||\n";
    256. 

  256. 			}
    257. 

  257. 

  258. 			//files
    259. 

  259. 			foreach($fields as $field){
    260. 

  260. 				if($field->inputtype=='file upload'){
    261. 

  261. 

  262. 						$target_file = time().'_'.$_FILES['form']['name'][$field->name];
    263. 

  263. 

  264. 						if(!move_uploaded_file($_FILES['form']['tmp_name'][$field->name],JPATH_SITE.'/components/com_forme/uploads/'.$target_file)){
    265. 

  265. 

  266. 						}else{
    267. 

  267. 							@chmod(JPATH_SITE.'/components/com_forme/uploads/'.$target_file,0755);
    268. 

  268. 							if(!isset($array_files)) $array_files = array();
    269. 

  269. 							$array_files[] = JPATH_SITE.'/components/com_forme/uploads/'.$target_file;
    270. 

  270. 							$params_field .= $field->name . '=' . $target_file ."||\n";
    271. 

  271. 						}
    272. 

  272. 				}
    273. 

  273. 			}
    274. 

  274. 

  275. 

  276. 

  277. 

  278. 			// bind it to the table
    279. 

  279. 			if (!$row -> bind($form_data)) {
    280. 

  280. 				echo "<script> alert('"
    281. 

  281. 				.$row -> getError()
    282. 

  282. 					."'); window.history.go(-1); </script>\n";
    283. 

  283. 				exit();
    284. 

  284. 			}else{
    285. 

  285. 				$row->params = $params_field;
    286. 

  286. 			}
    287. 

  287. 			if($my->id) $row->uid = $my->id;
    288. 

  288. 

  289. 			// store it in the db
    290. 

  290. 			if (!$row -> store()) {
    291. 

  291. 				echo "<script> alert('"
    292. 

  292. 					.$row -> getError()
    293. 

  293. 					."'); window.history.go(-1); </script>\n";
    294. 

  294. 				exit();
    295. 

  295. 			}else{
    296. 

  296. 				//$data_id = mysql_insert_id();
    297. 

  297. 				$data_id = $row->id;
    298. 

  298. 				if($form->emailto!=''&&$form->email!=''){
    299. 

  299. 					$emailto = explode(',',str_replace(' ','',$form->emailto));
    300. 

  300. 

  301. 					$fields = populateGlobal($fields);
    302. 

  302. 

  303. 					$params = prepareParams($data_id);
    304. 

  304. 					foreach($fields as $field){
    305. 

  305. 						if(!isset($params[$field->name])) $params[$field->name] = '';
    306. 

  306. 						$form->email = str_replace('{'.$field->name.'}',$params[$field->name],$form->email);
    307. 

  307. 						$form->emailsubject = str_replace('{'.$field->name.'}',$params[$field->name],$form->emailsubject);
    308. 

  308. 						$form->emailfrom = str_replace('{'.$field->name.'}',$params[$field->name],$form->emailfrom);
    309. 

  309. 						$form->emailfromname = str_replace('{'.$field->name.'}',$params[$field->name],$form->emailfromname);
    310. 

  310. 						foreach($emailto as $i=>$to){
    311. 

  311. 							$emailto[$i] = str_replace('{'.$field->name.'}',$params[$field->name],$emailto[$i]);
    312. 

  312. 						}
    313. 

  313. 					}
    314. 

  314. 

  315. 					if($form->emailfrom=='')$form->emailfrom = $CONFIG->mailfrom;
    316. 

  316. 					if($form->emailfromname=='')$form->emailfromname = $CONFIG->sitename;
    317. 

  317. 

  318. 

  319. 					foreach($emailto as $to){
    320. 

  320. 						JUtility::sendMail($form->emailfrom,$form->emailfromname,$to,$form->emailsubject,$form->email,$form->emailmode,null,null,$array_files);
    321. 

  321. 					}
    322. 

  322. 				}
    323. 

  323. 			}
    324. 

  324. 

  325. 			//check if there is a thank you message
    326. 

  326. 			if(strlen($form->thankyou)!=0){
    327. 

  327. 				if(isset($_SESSION['formdata'])){
    328. 

  328. 					unset($_SESSION['formdata']);
    329. 

  329. 				}
    330. 

  330. 				//$mainframe->redirect( str_replace( '&amp;', '&', "index.php?option=com_forme&func=thankyou&did=" . md5( $data_id.$row->date_added )."&Itemid=$Itemid"));
    331. 

  331. 				if(stristr($_SERVER['REQUEST_URI'],'?')) $sign = '&';
    332. 

  332. 				else $sign = '?';
    333. 

  333. 				$mainframe->redirect( $_SERVER['REQUEST_URI'] . $sign . "func=thankyou&did=" . md5( $data_id.$row->date_added ));
    334. 

  334. 			}else {
    335. 

  335. 				if(isset($_SESSION['formdata'])){
    336. 

  336. 					unset($_SESSION['formdata']);
    337. 

  337. 				}
    338. 

  338. 				//if there is a return url
    339. 

  339. 				if($form->return_url!=''){
    340. 

  340. 

  341. 					$params = prepareParams($data_id);
    342. 

  342. 					$fields = populateGlobal($fields);
    343. 

  343. 					foreach($fields as $field){
    344. 

  344. 						if(!isset($params[$field->name])) $params[$field->name] = '';
    345. 

  345. 						$form->return_url = str_replace('{'.$field->name.'}',$params[$field->name],$form->return_url);
    346. 

  346. 					}
    347. 

  347. 					$mainframe->redirect(str_replace( '&amp;', '&', $form->return_url), _FORME_FRONTEND_REGISTRA_SUCCESS." ");
    348. 

  348. 				}else{
    349. 

  349. 					if(isset($_SESSION['formdata'])){
    350. 

  350. 						unset($_SESSION['formdata']);
    351. 

  351. 					}
    352. 

  352. 					if(stristr($_SERVER['REQUEST_URI'],'?')) $sign = '&';
    353. 

  353. 					else $sign = '?';
    354. 

  354. 					$mainframe->redirect( $_SERVER['REQUEST_URI'],_FORME_FRONTEND_REGISTRA_SUCCESS);
    355. 

  355. 				}
    356. 

  356. 			}
    357. 

  357. 		}
    358. 

  358. 

  359. 	}
    360. 

  360. 

  361. 	function showForm($option, $fid){
    362. 

  362. 		global $mainframe, $limitstart, $processform;
    363. 

  363. 

  364. 		$fid = (int) $fid;
    365. 

  365. 		$my = & JFactory::getUser();
    366. 

  366. 		$CONFIG = new JConfig();
    367. 

  367. 		$database =& JFactory::getDBO();
    368. 

  368. 		$elpath = JPATH_SITE.'/components/com_forme';
    369. 

  369. 

  370. 		$processform	= JRequest::getVar( 'form', array(), 'POST');
    371. 

  371. 		if(!empty($processform)){
    372. 

  372. 			foreach($processform as $key=>$value){
    373. 

  373. 				$processform[$key] = RemoveXSS($processform[$key]);
    374. 

  374. 			}
    375. 

  375. 		}
    376. 

  376. 		$check = false;
    377. 

  377. 		if(isset($_COOKIE['mbfcookie']['lang'])) $check = $_COOKIE['mbfcookie']['lang'];
    378. 

  378. 		if(isset($_COOKIE['jfcookie']['lang'])) $check = $_COOKIE['jfcookie']['lang'];
    379. 

  379. 		if(isset($_REQUEST['lang'])) $check = JRequest::getWord('lang',false);
    380. 

  380. 		if($check){
    381. 

  381. 			if(file_exists($elpath.'/languages/'.$check.'.php')){
    382. 

  382. 				require_once($elpath.'/languages/'.$check.'.php');
    383. 

  383. 			}else{
    384. 

  384. 				require_once($elpath.'/languages/en.php');
    385. 

  385. 			}
    386. 

  386. 		}else{
    387. 

  387. 			require_once($elpath.'/languages/en.php');
    388. 

  388. 		}
    389. 

  389. 

  390. 		require_once( $mainframe->getPath( 'front_html','com_forme' ) );
    391. 

  391. 

  392. 		if(!$fid){
    393. 

  393. 			//get first cid
    394. 

  394. 			$database->setQuery("SELECT id FROM #__forme_forms WHERE published = 1 LIMIT 1");
    395. 

  395. 			$fid = (int)$database->loadResult();
    396. 

  396. 		}
    397. 

  397. 

  398. 		//check language
    399. 

  399. 		//first check global joomfish
    400. 

  400. 		$check = false;
    401. 

  401. 		if(isset($_COOKIE['mbfcookie']['lang'])) $check = $_COOKIE['mbfcookie']['lang'];
    402. 

  402. 		if(isset($_COOKIE['jfcookie']['lang'])) $check = $_COOKIE['jfcookie']['lang'];
    403. 

  403. 		if(isset($_REQUEST['lang'])) $check = JRequest::getWord('lang',false);
    404. 

  404. 		if($check){
    405. 

  405. 			$database->setQuery("SELECT name FROM #__forme_forms WHERE id = '$fid'");
    406. 

  406. 			$old_name = $database->loadResult();
    407. 

  407. 

  408. 			//check if we find something similar
    409. 

  409. 			$database->setQuery("SELECT id FROM #__forme_forms WHERE lang='".$database->getEscaped($check)."' AND name='".$database->getEscaped($old_name)."' ");
    410. 

  410. 			$newfid = $database->loadResult();
    411. 

  411. 			if($newfid) $fid = $newfid;
    412. 

  412. 		}
    413. 

  413. 

  414. 

  415. 		processForm($fid, $processform);
    416. 

  416. 

  417. 

  418. 

  419. 		$query = "SELECT * FROM #__forme_forms WHERE id = '{$fid}' AND published = '1'";
    420. 

  420. 		$database->setQuery($query);
    421. 

  421. 

  422. 		$form = $database->loadObject();
    423. 

  423. 

  424. 		//load fields
    425. 

  425. 		$query = "SELECT * FROM #__forme_fields WHERE form_id = '{$fid}' AND published = '1' ORDER BY ordering";
    426. 

  426. 		$database->setQuery($query);
    427. 

  427. 

  428. 		$fields = $database->loadObjectList();
    429. 

  429. 

  430. 		if(!$form->published) $mainframe->redirect(JRoute::_(JURI :: base(),_NOT_EXIST));
    431. 

  431. 

  432. 		//Output
    433. 

  433. 		global $Itemid, $mainframe, $params, $hide_js, $pop, $formeConfig;
    434. 

  434. 

  435. 		$html = '';
    436. 

  436. 		if(isset($form->id)){
    437. 

  437. 

  438. 			//mosCommonHTML::loadCalendar();
    439. 

  439. 			eval($form->script_display);
    440. 

  440. 

  441. 	    	//if we have upload file fields, add enctype
    442. 

  442. 	    	$enctype='';
    443. 

  443. 		    foreach($fields as $field){
    444. 

  444. 		    	if($field->inputtype=='file upload') $enctype = ' enctype="multipart/form-data"';
    445. 

  445. 		    }
    446. 

  446. 

  447. 			//load calendar if calendar field exists
    448. 

  448. 			$calexists = false;
    449. 

  449. 			foreach($fields as $field){
    450. 

  450. 				if($field->inputtype=='calendar') $calexists = true;
    451. 

  451. 			}
    452. 

  452. 

  453. 			//parse field template
    454. 

  454. 			$formfields = '';
    455. 

  455. 			foreach($fields as $field){
    456. 

  456. 				if($form->fieldstyle=='') $form->fieldstyle = _FORME_BACKEND_EDITFORMS_FIELDSTYLE_DEFAULT;
    457. 

  457. 				if($field->fieldstyle=='') $field->fieldstyle = $form->fieldstyle;
    458. 

  458. 				$formfields .= forme_HTML::parseFields($field);
    459. 

  459. 			}
    460. 

  460. 

  461. 			if($calexists){
    462. 

  462. 

  463. 				$check = false;
    464. 

  464. 				if(isset($_COOKIE['mbfcookie']['lang'])) $check = $_COOKIE['mbfcookie']['lang'];
    465. 

  465. 				if(isset($_COOKIE['jfcookie']['lang'])) $check = $_COOKIE['jfcookie']['lang'];
    466. 

  466. 				if(isset($_REQUEST['lang'])) $check = JRequest::getWord('lang',false);
    467. 

  467. 				if($check){
    468. 

  468. 					if(file_exists(JPATH_SITE.'/components/com_forme/calendar/initcal-'.$check.'.php'))
    469. 

  469. 					require_once(JPATH_SITE.'/components/com_forme/calendar/initcal-'.$check.'.php');
    470. 

  470. 					else require_once(JPATH_SITE.'/components/com_forme/calendar/initcal.php');
    471. 

  471. 				}
    472. 

  472. 				else require_once(JPATH_SITE.'/components/com_forme/calendar/initcal.php');
    473. 

  473. 				$html .='
    474. 

  474. 					<script language="javascript">
    475. 

  475. 						function init() {';
    476. 

    477. 

  477. 							foreach($fields as $field){
    478. 

  478. 								if($field->inputtype=='calendar'){
    479. 

  479. 							$html.='
    480. 

    481. 

  481. 								function handleSelect'.$field->name.'(type,args,obj) {
    482. 

  482. 									var dates = args[0];
    483. 

  483. 									var date = dates[0];
    484. 

  484. 									var year = date[0], month = date[1], day = date[2];
    485. 

  485. 									var txtDate = document.getElementById("txt'.$field->name.'");
    486. 

  486. 									txtDate.value = month + "/" + day + "/" + year;
    487. 

  487. 								}
    488. 

  488. 

  489. 

  490. 								YAHOO.example.calendar.'.$field->name.' = new YAHOO.widget.Calendar("'.$field->name.'","'.$field->name.'Container");
    491. 

  491. 								YAHOO.example.calendar.'.$field->name.'.selectEvent.subscribe(handleSelect'.$field->name.', YAHOO.example.calendar.'.$field->name.', true);
    492. 

  492. 

  493. 

  494. 								var txt'.$field->name.' = document.getElementById("txt'.$field->name.'");
    495. 

  495. 

  496. 								if (txt'.$field->name.'.value != "") {
    497. 

  497. 									YAHOO.example.calendar.'.$field->name.'.select(txt'.$field->name.'.value);
    498. 

  498. 								}
    499. 

  499. 

  500. 						    	YAHOO.example.calendar.'.$field->name.'.render();';
    501. 

    502. 

  502. 								}
    503. 

  503. 							}
    504. 

  504. 						    $html .='
    505. 

  505. 						}
    506. 

  506. 

  507. 						YAHOO.util.Event.addListener(window, "load", init);
    508. 

  508. 					</script>';
    509. 

    510. 

  510. 			}
    511. 

  511. 

  512. 

  513. 			$action = '';
    514. 

  514. 

  515. 			//parse form template
    516. 

  516. 			if($form->formstyle == '') $form->formstyle = _FORME_BACKEND_EDITFORMS_STYLE_DEFAULT;
    517. 

  517. 			$form->formstyle = str_replace('{formtitle}',$form->title,$form->formstyle);
    518. 

  518. 			$form->formstyle = str_replace('{formname}',$form->name,$form->formstyle);
    519. 

  519. 			$form->formstyle = str_replace('{enctype}',$enctype,$form->formstyle);
    520. 

  520. 			$form->formstyle = str_replace('{action}',$action,$form->formstyle);
    521. 

  521. 

  522. 			$form->formstyle = str_replace('{formfields}',$formfields,$form->formstyle);
    523. 

  523. 

  524. 			$html .= $form->formstyle;
    525. 

  525. 

  526. 		}
    527. 

  527. 	 	return $html;
    528. 

  528. 	}
    529. 

  529. 

  530. 	function populateGlobal($fields){
    531. 

  531. 		$fields[]->name = 'jos_sitename';
    532. 

  532. 		$fields[]->name = 'jos_siteurl';
    533. 

  533. 		$fields[]->name = 'jos_userip';
    534. 

  534. 		$fields[]->name = 'jos_user_id';
    535. 

  535. 		$fields[]->name = 'jos_username';
    536. 

  536. 		$fields[]->name = 'jos_email';
    537. 

  537. 

  538. 		return $fields;
    539. 

  539. 	}
    540. 

  540. 

  541. 	function prepareParams($did){
    542. 

  542. 		$my = & JFactory::getUser();
    543. 

  543. 		$CONFIG = new JConfig();
    544. 

  544. 		$database =& JFactory::getDBO();
    545. 

  545. 

  546. 

  547. 

  548. 		$database->setQuery("SELECT * FROM #__forme_data WHERE id = '".$database->getEscaped($did)."'");
    549. 

  549. 		$data_row = $database->loadObject();
    550. 

  550. 		$params = $data_row->params;
    551. 

  551. 

  552. 		$database->setQuery("SELECT * FROM #__users WHERE id = '$data_row->uid'");
    553. 

  553. 		$user = $database->loadObject();
    554. 

  554. 

  555. 

  556. 		$result['jos_sitename'] = $CONFIG->sitename;
    557. 

  557. 		$result['jos_siteurl'] = JURI :: base();
    558. 

  558. 		$result['jos_userip'] = $data_row->uip;
    559. 

  559. 		$result['jos_user_id'] = $data_row->uid;
    560. 

  560. 		$result['jos_username'] = (isset($user->username)) ? $user->username : 0;
    561. 

  561. 		$result['jos_email'] = (isset($user->email)) ? $user->email : 0;
    562. 

  562. 

  563. 		$result_explode = explode("||\n",$params);
    564. 

  564. 		foreach($result_explode as $param_row){
    565. 

  565. 			$param_row = explode('=',$param_row,2);
    566. 

  566. 			if(isset($param_row[1])){
    567. 

  567. 				$result[$param_row[0]] = $param_row[1];
    568. 

  568. 			}else{
    569. 

  569. 				$result[$param_row[0]] = '';
    570. 

  570. 			}
    571. 

  571. 		}
    572. 

  572. 		return $result;
    573. 

  573. 	}
    574. 

  574. 

  575. 	function RemoveXSS($val) {
    576. 

  576. 	   // remove all non-printable characters. CR(0a) and LF(0b) and TAB(9) are allowed
    577. 

  577. 	   // this prevents some character re-spacing such as <java\0script>
    578. 

  578. 	   // note that you have to handle splits with \n, \r, and \t later since they *are* allowed in some inputs
    579. 

  579. 	   $val = preg_replace('/([\x00-\x08][\x0b-\x0c][\x0e-\x20])/', '', $val);
    580. 

  580. 

  581. 	   // straight replacements, the user should never need these since they're normal characters
    582. 

  582. 	   // this prevents like <IMG SRC=&#X40&#X61&#X76&#X61&#X73&#X63&#X72&#X69&#X70&#X74&#X3A&#X61&#X6C&#X65&#X72&#X74&#X28&#X27&#X58&#X53&#X53&#X27&#X29>
    583. 

  583. 	   $search = 'abcdefghijklmnopqrstuvwxyz';
    584. 

  584. 	   $search .= 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
    585. 

  585. 	   $search .= '1234567890!@#$%^&*()';
    586. 

  586. 	   $search .= '~`";:?+/={}[]-_|\'\\';
    587. 

  587. 	   for ($i = 0; $i < strlen($search); $i++) {
    588. 

  588. 	      // ;? matches the ;, which is optional
    589. 

  589. 	      // 0{0,7} matches any padded zeros, which are optional and go up to 8 chars
    590. 

  590. 

  591. 	      // &#x0040 @ search for the hex values
    592. 

  592. 	      $val = preg_replace('/(&#[x|X]0{0,8}'.dechex(ord($search[$i])).';?)/i', $search[$i], $val); // with a ;
    593. 

  593. 	      // &#00064 @ 0{0,7} matches '0' zero to seven times
    594. 

  594. 	      $val = preg_replace('/(&#0{0,8}'.ord($search[$i]).';?)/', $search[$i], $val); // with a ;
    595. 

  595. 	   }
    596. 

  596. 

  597. 	   // now the only remaining whitespace attacks are \t, \n, and \r
    598. 

  598. 	   $ra1 = Array('javascript', 'vbscript', 'expression', 'applet', 'meta', 'xml', 'blink', 'link', 'style', 'script', 'embed', 'object', 'iframe', 'frame', 'frameset', 'ilayer', 'layer', 'bgsound', 'title', 'base');
    599. 

  599. 	   $ra2 = Array('onabort', 'onactivate', 'onafterprint', 'onafterupdate', 'onbeforeactivate', 'onbeforecopy', 'onbeforecut', 'onbeforedeactivate', 'onbeforeeditfocus', 'onbeforepaste', 'onbeforeprint', 'onbeforeunload', 'onbeforeupdate', 'onblur', 'onbounce', 'oncellchange', 'onchange', 'onclick', 'oncontextmenu', 'oncontrolselect', 'oncopy', 'oncut', 'ondataavailable', 'ondatasetchanged', 'ondatasetcomplete', 'ondblclick', 'ondeactivate', 'ondrag', 'ondragend', 'ondragenter', 'ondragleave', 'ondragover', 'ondragstart', 'ondrop', 'onerror', 'onerrorupdate', 'onfilterchange', 'onfinish', 'onfocus', 'onfocusin', 'onfocusout', 'onhelp', 'onkeydown', 'onkeypress', 'onkeyup', 'onlayoutcomplete', 'onload', 'onlosecapture', 'onmousedown', 'onmouseenter', 'onmouseleave', 'onmousemove', 'onmouseout', 'onmouseover', 'onmouseup', 'onmousewheel', 'onmove', 'onmoveend', 'onmovestart', 'onpaste', 'onpropertychange', 'onreadystatechange', 'onreset', 'onresize', 'onresizeend', 'onresizestart', 'onrowenter', 'onrowexit', 'onrowsdelete', 'onrowsinserted', 'onscroll', 'onselect', 'onselectionchange', 'onselectstart', 'onstart', 'onstop', 'onsubmit', 'onunload');
    600. 

  600. 	   $ra = array_merge($ra1, $ra2);
    601. 

  601. 

  602. 	   $found = true; // keep replacing as long as the previous round replaced something
    603. 

  603. 	   while ($found == true) {
    604. 

  604. 	      $val_before = $val;
    605. 

  605. 	      for ($i = 0; $i < sizeof($ra); $i++) {
    606. 

  606. 	         $pattern = '/';
    607. 

  607. 	         for ($j = 0; $j < strlen($ra[$i]); $j++) {
    608. 

  608. 	            if ($j > 0) {
    609. 

  609. 	               $pattern .= '(';
    610. 

  610. 	               $pattern .= '(&#[x|X]0{0,8}([9][a][b]);?)?';
    611. 

  611. 	               $pattern .= '|(&#0{0,8}([9][10][13]);?)?';
    612. 

  612. 	               $pattern .= ')?';
    613. 

  613. 	            }
    614. 

  614. 	            $pattern .= $ra[$i][$j];
    615. 

  615. 	         }
    616. 

  616. 	         $pattern .= '/i';
    617. 

  617. 	         $replacement = substr($ra[$i], 0, 2).'<x>'.substr($ra[$i], 2); // add in <> to nerf the tag
    618. 

  618. 	         $val = preg_replace($pattern, $replacement, $val); // filter out the hex tags
    619. 

  619. 	         if ($val_before == $val) {
    620. 

  620. 	            // no replacements were made, so exit the loop
    621. 

  621. 	            $found = false;
    622. 

  622. 	         }
    623. 

  623. 	      }
    624. 

  624. 	   }
    625. 

  625. 	   return $val;
    626. 

  626. 	}
    627. 

  627. 

  628. 	function thankyou($option, $did){
    629. 

  629. 		global $mainframe, $limitstart, $Itemid;
    630. 

  630. 

  631. 		$result = '';
    632. 

  632. 

  633. 		$elpath = JPATH_SITE.'/components/com_forme';
    634. 

  634. 		$check = false;
    635. 

  635. 		if(isset($_COOKIE['mbfcookie']['lang'])) $check = $_COOKIE['mbfcookie']['lang'];
    636. 

  636. 		if(isset($_COOKIE['jfcookie']['lang'])) $check = $_COOKIE['jfcookie']['lang'];
    637. 

  637. 		if(isset($_REQUEST['lang'])) $check = JRequest::getWord('lang',false);
    638. 

  638. 		if($check){
    639. 

  639. 			require_once($elpath.'/languages/'.$check.'.php');
    640. 

  640. 		}else{
    641. 

  641. 			require_once($elpath.'/languages/en.php');
    642. 

  642. 		}
    643. 

  643. 

  644. 		require_once( $mainframe->getPath( 'front_html','com_forme' ) );
    645. 

  645. 		$my = & JFactory::getUser();
    646. 

  646. 		$CONFIG = new JConfig();
    647. 

  647. 		$database =& JFactory::getDBO();
    648. 

  648. 

  649. 		//get the submission & form id
    650. 

  650. 		$database->setQuery("SELECT * FROM #__forme_data WHERE MD5(CONCAT(id,date_added)) = '".$database->getEscaped($did)."'");
    651. 

  651. 		$formdata = $database->loadOBject();
    652. 

  652. 		if(isset($formdata->form_id)){
    653. 

  653. 			//get form_id
    654. 

  654. 			//$database->setQuery("SELECT * FROM #__forme_data WHERE id = '$did'");
    655. 

  655. 			//$formdata = $database->loadObject();
    656. 

  656. 

  657. 			//check if form has a thank you message
    658. 

  658. 			$database->setQuery("SELECT * FROM #__forme_forms WHERE id = '$formdata->form_id'");
    659. 

  659. 			$form = $database->loadObject();
    660. 

  660. 

  661. 			$params = prepareParams($formdata->id);
    662. 

  662. 

  663. 			//load fields
    664. 

  664. 			$database->setQuery("SELECT * FROM #__forme_fields WHERE form_id = '$formdata->form_id' AND published = 1");
    665. 

  665. 			$fields = $database->loadObjectList();
    666. 

  666. 

  667. 			$fields = populateGlobal($fields);
    668. 

  668. 

  669. 			foreach($fields as $field){
    670. 

  670. 				if(!isset($params[$field->name])) $params[$field->name] = '';
    671. 

  671. 				$form->thankyou = str_replace('{'.$field->name.'}',$params[$field->name],$form->thankyou);
    672. 

  672. 				$form->return_url = str_replace('{'.$field->name.'}',$params[$field->name],$form->return_url);
    673. 

  673. 

  674. 			}
    675. 

  675. 				if(stristr($_SERVER['REQUEST_URI'],'?')) $sign = '&';
    676. 

  676. 				else $sign = '?';
    677. 

  677. 

  678. 			if($form->thankyou!='') {
    679. 

  679. 				$return_url = ($form->return_url == '') ?  $_SERVER['HTTP_REFERER'] : $form->return_url;
    680. 

  680. 				$result .= '<div class="thankyou">'.stripslashes($form->thankyou).'</div>';//
    681. 

  681. 				$result .= '<input type="button" name="ok" value="'._FORME_FRONTEND_THANKYOU_BUTTON.'" onclick="window.location=\''.$return_url.'\';"/>';
    682. 

  682. 				return $result;
    683. 

  683. 			}else{
    684. 

  684. 				//if there is a return url
    685. 

  685. 				if($form->return_url!=''){
    686. 

  686. 					$mainframe->redirect($form->return_url, _FORME_FRONTEND_REGISTRA_SUCCESS." ");
    687. 

  687. 				}else{
    688. 

  688. 					$mainframe->redirect(JRoute::_("index.php?option=com_forme&Itemid=$Itemid", false), _FORME_FRONTEND_REGISTRA_SUCCESS." ");
    689. 

  689. 				}
    690. 

  690. 			}
    691. 

  691. 		}else{
    692. 

  692. 			$mainframe->redirect(JRoute::_("index.php?option=com_forme&Itemid=$Itemid", false), _FORME_FRONTEND_REGISTRA_SUCCESS." ");
    693. 

  693. 		}
    694. 

  694. 	}
    695. 

  695. 

  696. 

  697. }
    698. 

  698. 

  699. ?>
    700.