PageRenderTime 62ms CodeModel.GetById 26ms RepoModel.GetById 1ms app.codeStats 0ms

/components/com_breezingforms/breezingforms.php

https://bitbucket.org/izubizarreta/https-bitbucket.org-bityvip
PHP | 1552 lines | 491 code | 68 blank | 993 comment | 160 complexity | 3967ac3673f3bee75d141749f29cdefb MD5 | raw file
Possible License(s): LGPL-3.0, LGPL-2.0, JSON, GPL-2.0, BSD-3-Clause, LGPL-2.1, MIT

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * BreezingForms - A Joomla Forms Application
    4. 

  4.  * @version 1.8
    5. 

  5.  * @package BreezingForms
    6. 

  6.  * @copyright (C) 2008-2012 by Markus Bopp
    7. 

  7.  * @license Released under the terms of the GNU General Public License
    8. 

  8.  *
    9. 

  9.  * This is the main component entry point that will be called by joomla or mambo
    10. 

  10.  * after after calling
    11. 

  11.  *
    12. 

  12.  *     http://siteurl/index.php?option=com_breezingforms......
    13. 

  13.  * The first form is the normal call from frontend where the whole page is
    14. 

  14.  * displayed by uting the template. The second form is a display of the plain
    15. 

  15.  * form, wich is used to run in iframe or in popup windows.
    16. 

  16.  **/
    17. 

  17. defined( '_JEXEC' ) or die( 'Direct Access to this location is not allowed.' );
    18. 

  18. 

  19. if(!defined('DS')){
    20. 

  20.     define('DS', DIRECTORY_SEPARATOR);
    21. 

  21. }
    22. 

  22. 

  23. require_once(JPATH_SITE.DS.'administrator'.DS.'components'.DS.'com_breezingforms'.DS.'libraries'.DS.'crosstec'.DS.'classes'.DS.'BFJoomlaConfig.php');
    24. 

  24. 

  25. $mainframe = JFactory::getApplication();
    26. 

  26. 

  27. $cache = JFactory::getCache();
    28. 

  28. $cache->setCaching(false);
    29. 

  29. 

  30. jimport('joomla.filesystem.file');
    31. 

  31. 

  32. require_once(JPATH_SITE . '/administrator/components/com_breezingforms/libraries/crosstec/classes/BFText.php');
    33. 

  33. require_once(JPATH_SITE . '/administrator/components/com_breezingforms/libraries/crosstec/classes/BFTableElements.php');
    34. 

  34. require_once(JPATH_SITE . '/administrator/components/com_breezingforms/libraries/crosstec/functions/helpers.php');
    35. 

  35. require_once(JPATH_SITE . '/administrator/components/com_breezingforms/libraries/crosstec/constants.php');
    36. 

  36. 

  37. // declare global variables
    38. 

  38. global
    39. 

  39. $database,				// joomla/mambo database object
    40. 

  40. $ff_version,			// FacileForms version number
    41. 

  41. $ff_config,				// FacileForms configuration object
    42. 

  42. $ff_mospath,			// path to root of joomla/mambo
    43. 

  43. $ff_compath,			// path to component frontend root
    44. 

  44. $ff_mossite,			// url of the site root
    45. 

  45. $ff_request,			// array of request parameters ff_param_*
    46. 

  46. $ff_processor,			// current form procesor object
    47. 

  47. $ff_target;				// index of form on current page
    48. 

  48. 

  49. $database = $db = JFactory::getDBO();
    50. 

  50. 

  51. // declare local vars
    52. 

  52. // (1) only used in component space and not plain form)
    53. 

  53. $plainform	= 0;		// running as plain form by index.php?tmpl=component
    54. 

  54. $formid		= null;		// form id number
    55. 

  55. $formname	= null;		// form name
    56. 

  56. $task		= 'view';	// either 'view' or 'submit'
    57. 

  57. $page		= 1;		// page to display
    58. 

  58. $inframe	= 0;		// run in iframe
    59. 

  59. $border		= 0;		// show a border around the form (1)
    60. 

  60. $align		= 1;		// 0-left 1-center 2-right (1)
    61. 

  61. $left		= 0;		// left margin in px (1)
    62. 

  62. $top		= 0;		// top margin in px (1)
    63. 

  63. $suffix		= '';		// CSS class suffix
    64. 

  64. $parprv		= '';		// private parameters
    65. 

  65. $runmode	= 0;		// run mode
    66. 

  66. $pagetitle	= true;		// set page title
    67. 

  67. $editable   = 0;
    68. 

  68. $editable_override = 0;
    69. 

  69. $menu_item_title = '';
    70. 

  70. $menu_item_show_page_heading = 0;
    71. 

  71. $menu_item_page_heading = '';
    72. 

  72. $menu_item_meta_description = '';
    73. 

  73. $menu_item_meta_keywords = '';
    74. 

  74. $menu_item_robots = '';
    75. 

  75. 

  76. if(!isset($xModuleId)){
    77. 

  77. 	$xModuleId = 0;
    78. 

  78. }
    79. 

  79. 

  80. if(!isset($ff_applic)){
    81. 

  81. 	$ff_applic = '';
    82. 

  82. }
    83. 

  83. 

  84. $runmode = @JRequest::getVar('ff_runmode', $runmode);
    85. 

  85. 

  86. // get paths
    87. 

  87. $ff_mospath = JPATH_SITE;
    88. 

  88. $ff_compath = $ff_mospath.'/components/com_breezingforms';
    89. 

  89. 

  90. // load config and initialize globals
    91. 

  91. require_once($ff_compath.'/facileforms.class.php');
    92. 

  92. $ff_config = new facileFormsConf();
    93. 

  93. initFacileForms();
    94. 

  94. 

  95. // check for plain form
    96. 

  96. 

  97. $plainform = JRequest::getWord('tmpl','') == 'component';
    98. 

  98. 

  99. // create target id for this form and check if ff params are ment for this target
    100. 

  100. if (!$ff_target) $ff_target = 1; else $ff_target++;
    101. 

  101. $parent_target = @JRequest::getVar( 'ff_target', 1);
    102. 

  102. $my_ff_params = $plainform || $parent_target==$ff_target;
    103. 

  103. 

  104. // clear list of request parameters
    105. 

  105. $ff_request = array();
    106. 

  106. 

  107. if(
    108. 

  108. 	!JRequest::getBool('showSecImage') &&
    109. 

  109. 	!JRequest::getBool('bfCaptcha') &&
    110. 

  110.         !JRequest::getBool('bfReCaptcha') &&
    111. 

  111. 	!JRequest::getBool('checkCaptcha') && 
    112. 

  112. 	!JRequest::getBool('confirmPayPal')  &&
    113. 

  113.         !JRequest::getBool('confirmPayPalIpn')  &&
    114. 

  114. 	!JRequest::getBool('paypalDownload') &&
    115. 

  115. 	!JRequest::getBool('showPayPalConnectMsg') &&
    116. 

  116. 	!JRequest::getBool('successSofortueberweisung') &&
    117. 

  117. 	!JRequest::getBool('confirmSofortueberweisung') &&
    118. 

  118. 	!JRequest::getBool('sofortueberweisungDownload') &&
    119. 

  119. 	!JRequest::getBool('flashUpload')
    120. 

  120. ) {
    121. 

  121. 

  122. 	JRequest::setVar('format', 'html');
    123. 

  123. 	
    124. 

  124. 	if ($runmode==_FF_RUNMODE_FRONTEND) {
    125. 

  125. 		
    126. 

  126. 		// is this called by a module?
    127. 

  127. 		if (isset($ff_applic) && $ff_applic=='mod_facileforms') {
    128. 

  128. 			
    129. 

  129. 			// get the module parameters
    130. 

  130. 			$formname = $params->get('ff_mod_name');
    131. 

  131. 			$page     = intval($params->get('ff_mod_page', $page));
    132. 

  132. 			$inframe  = intval($params->get('ff_mod_frame', $inframe));
    133. 

  133. 			$border   = intval($params->get('ff_mod_border', $border));
    134. 

  134. 			$align    = intval($params->get('ff_mod_align', $align));
    135. 

  135. 			$left     = intval($params->get('ff_mod_left', $left));
    136. 

  136. 			$top      = intval($params->get('ff_mod_top', $top));
    137. 

  137. 			$suffix   = $params->get('ff_mod_suffix', '');
    138. 

  138. 			$parprv   = $params->get('ff_mod_parprv', '');
    139. 

  139. 			addRequestParams($params->get('ff_mod_parpub', ''));
    140. 

  140. 			$pagetitle = false;
    141. 

  141. 			
    142. 

  142. 			JFactory::getSession()->set('ff_editableMod'. $xModuleId . $formname, intval($params->get('ff_mod_editable', $editable)));
    143. 

  143. 			JFactory::getSession()->set('ff_editable_overrideMod'. $xModuleId . $formname, intval($params->get('ff_mod_editable_override', $editable_override)));
    144. 

  144. 				
    145. 

  145. 		} else if (isset($ff_applic) && $ff_applic=='plg_facileforms') {
    146. 

  146. 

  147. 			$formname = JRequest::getVar('ff_name','');
    148. 

  148. 			$page     = JRequest::getVar('ff_page',1);
    149. 

  149. 			$inframe  = JRequest::getVar('ff_frame','');
    150. 

  150. 			$border   = JRequest::getVar('ff_border','');
    151. 

  151. 			$align    = JRequest::getVar('ff_border','');
    152. 

  152. 			$editable = intval($plg_editable);
    153. 

  153. 			$editable_override = intval($plg_editable_override);
    154. 

  154. 			$left     = '';
    155. 

  155. 			$top      = '';
    156. 

  156. 			$suffix   = JRequest::getVar('ff_suffix','');
    157. 

  157. 			$parprv   = '';
    158. 

  158. 			addRequestParams('');
    159. 

  159. 				
    160. 

  160. 		} else {
    161. 

  161. 			
    162. 

  162. 			// is this called with an Itemid?
    163. 

  163. 			if (JRequest::getInt( 'Itemid', 0) > 1 && JRequest::getVar('ff_applic','') != 'mod_facileforms' && JRequest::getVar('ff_applic','') != 'plg_facileforms') {
    164. 

  164. 				jimport('joomla.version');
    165. 

  165.                                 $version = new JVersion();
    166. 

  166.                                 if(version_compare($version->getShortVersion(), '3.0', '>=')){
    167. 

  167.                                     $menu = JSite::getMenu()->getActive();
    168. 

  168.                                     $params = $menu->params;
    169. 

  169.                                 }else{
    170. 

  170.                                     // get parameters from menu
    171. 

  171.                                     $menu = JTable::getInstance('menu');
    172. 

  172.                                     $menu->load(JRequest::getInt( 'Itemid', 0));
    173. 

  173.                                     jimport( 'joomla.html.parameter' );
    174. 

  174.                                     $params   = new JParameter($menu->params);
    175. 

  175.                                 }
    176. 

  176.                                 
    177. 

  177.                                 $menu_item_title = $params->get('page_title','');
    178. 

  178.                                 $menu_item_show_page_heading = $params->get('show_page_heading',0);
    179. 

  179.                                 $menu_item_page_heading = $params->get('page_heading','');
    180. 

  180.                                 
    181. 

  181.                                 $menu_item_meta_description = $params->get('menu-meta_description','');
    182. 

  182.                                 $menu_item_meta_keywords = $params->get('menu-meta_keywords','');
    183. 

  183.                                 $menu_item_robots = $params->get('robots','');
    184. 

  184.                                 
    185. 

  185.                                 if($menu_item_meta_description){
    186. 

  186.                                     JFactory::getDocument()->setMetaData('description', $menu_item_meta_description);
    187. 

  187.                                 }
    188. 

  188.                                 
    189. 

  189.                                 if($menu_item_meta_keywords){
    190. 

  190.                                     JFactory::getDocument()->setMetaData('keywords', $menu_item_meta_keywords);
    191. 

  191.                                 }
    192. 

  192.                                 
    193. 

  193.                                 if($menu_item_robots){
    194. 

  194.                                     JFactory::getDocument()->setMetaData('robots', $menu_item_robots);
    195. 

  195.                                 }
    196. 

  196.                                 
    197. 

  197. 				$formname = $params->get('ff_com_name');
    198. 

  198. 				$page     = intval($params->get('ff_com_page', $page));
    199. 

  199. 				$inframe  = intval($params->get('ff_com_frame', $inframe));
    200. 

  200. 				$border   = intval($params->get('ff_com_border', $border));
    201. 

  201. 				$align    = intval($params->get('ff_com_align', $align));
    202. 

  202. 				$left     = intval($params->get('ff_com_left', $left));
    203. 

  203. 				$top      = intval($params->get('ff_com_top', $top));
    204. 

  204. 				$editable = intval($params->get('ff_com_editable', $editable));
    205. 

  205. 				$editable_override = intval($params->get('ff_com_editable_override', $editable_override));
    206. 

  206. 				$suffix   = $params->get('ff_com_suffix', '');
    207. 

  207. 				$parprv   = $params->get('ff_com_parprv', '');
    208. 

  208. 				addRequestParams($params->get('ff_com_parpub', ''));
    209. 

  209. 			} // if
    210. 

  210. 		}
    211. 

  211. 	} // if
    212. 

  212. 	
    213. 

  213. 	if ($my_ff_params) {
    214. 

  214. 		// allow overriding by url params
    215. 

  215. 		$formid = @JRequest::getVar( 'ff_form', $formid);
    216. 

  216. 

  217. 		if ($formid==null)
    218. 

  218. 			$formname = @JRequest::getVar('ff_name', $formname);
    219. 

  219. 		else
    220. 

  220. 			$formname = null;
    221. 

  221. 			
    222. 

  222. 		$task = @JRequest::getVar('ff_task', $task);
    223. 

  223. 		$page = @JRequest::getVar('ff_page', $page);
    224. 

  224. 		$inframe = @JRequest::getVar('ff_frame', $inframe);
    225. 

  225. 		$border = @JRequest::getVar('ff_border', $border);
    226. 

  226. 		$align1 = @JRequest::getVar('ff_align', -1);
    227. 

  227. 		if ($align1>=0) {
    228. 

  228. 			$align = @JRequest::getVar( 'ff_align', $align);
    229. 

  229. 			$left = 0;
    230. 

  230. 			if ($align>2) { $left = $align; $align = 3; }
    231. 

  231. 		} // if
    232. 

  232. 		$top = @JRequest::getVar('ff_top',$top);
    233. 

  233. 		$suffix = @JRequest::getVar('ff_suffix',$suffix);
    234. 

  234. 	}
    235. 

  235. 

  236. 	
    237. 

  237. 	
    238. 

  238. 	// load form
    239. 

  239. 	$ok = true;
    240. 

  240. 	if (is_numeric($formid)) {
    241. 

  241. 		$database->setQuery(
    242. 

  242. 			"select * from #__facileforms_forms ".
    243. 

  243. 			"where id=$formid and published=1"
    244. 

  244. 		);
    245. 

  245. 		$forms = $database->loadObjectList();
    246. 

  246. 		if (count($forms) < 1) {
    247. 

  247. 			echo '[Form '.$formid.' not found!]';
    248. 

  248. 			$ok = false;
    249. 

  249. 		} else
    250. 

  250. 		$form = $forms[0];
    251. 

  251. 	} else
    252. 

  252. 	if ($formname != null) {
    253. 

  253. 		$database->setQuery(
    254. 

  254. 				"select * from #__facileforms_forms ".
    255. 

  255. 				"where name=".$database->Quote($formname)." and published=1 ".
    256. 

  256. 				"order by ordering, id"
    257. 

  257. 				);
    258. 

  258. 				$forms = $database->loadObjectList();
    259. 

  259. 				if (count($forms) < 1) {
    260. 

  260. 					echo '[Form '.$formname.' not found!]';
    261. 

  261. 					$ok = false;
    262. 

  262. 				} else
    263. 

  263. 				$form = $forms[0];
    264. 

  264. 	} else {
    265. 

  265. 		echo '[No form id or name provided!]';
    266. 

  266. 		$ok = false;
    267. 

  267. 	} // if
    268. 

  268. 

  269. 	if ($ok) {
    270. 

  270. 		 
    271. 

  271. 		// set by plugin
    272. 

  272. 		if(isset($_SESSION['ff_editablePlg'.$form->name]) && $_SESSION['ff_editablePlg'.JRequest::getInt('ff_contentid',0) . $form->name] != 0 && ( JRequest::getVar('ff_applic')=='plg_facileforms' || ( isset($ff_applic) && $ff_applic == 'plg_facileforms' )) ){
    273. 

  273. 			$editable = $_SESSION['ff_editablePlg'.JRequest::getInt('ff_contentid',0) . $form->name];
    274. 

  274. 		}
    275. 

  275. 		
    276. 

  276. 		// set by plugin
    277. 

  277. 		if(isset($_SESSION['ff_editable_overridePlg'.$form->name]) && $_SESSION['ff_editable_overridePlg'.JRequest::getInt('ff_contentid',0) . $form->name] != 0 && ( JRequest::getVar('ff_applic')=='plg_facileforms' || ( isset($ff_applic) && $ff_applic == 'plg_facileforms' )) ){
    278. 

  278. 			$editable_override = $_SESSION['ff_editable_overridePlg'.JRequest::getInt('ff_contentid',0) . $form->name];
    279. 

  279. 		}
    280. 

  280. 		
    281. 

  281. 		// set by module
    282. 

  282. 		if(( JRequest::getVar('ff_applic')=='mod_facileforms' || ( isset($ff_applic) && $ff_applic == 'mod_facileforms' )) ){
    283. 

  283. 			if(JFactory::getSession()->get('ff_editableMod'. $xModuleId . $form->name, 0) != 0){
    284. 

  284. 				$editable = JFactory::getSession()->get('ff_editableMod'.$xModuleId . $form->name, 0);
    285. 

  285. 			} else if(JFactory::getSession()->get('ff_editableMod'. JRequest::getInt('ff_module_id',0) . $form->name, 0) != 0){
    286. 

  286. 				$editable = JFactory::getSession()->get('ff_editableMod'.JRequest::getInt('ff_module_id',0) . $form->name, 0);
    287. 

  287. 			}
    288. 

  288. 		}
    289. 

  289. 			
    290. 

  290. 		// set by module
    291. 

  291. 		if(( JRequest::getVar('ff_applic')=='mod_facileforms' || ( isset($ff_applic) && $ff_applic == 'mod_facileforms' )) ){
    292. 

  292. 			if(JFactory::getSession()->get('ff_editable_overrideMod'. $xModuleId . $form->name, 0) != 0){
    293. 

  293. 				$editable_override = JFactory::getSession()->get('ff_editable_overrideMod'.$xModuleId . $form->name, 0);
    294. 

  294. 			} else if(JFactory::getSession()->get('ff_editable_overrideMod'. JRequest::getInt('ff_module_id',0) . $form->name, 0) != 0){
    295. 

  295. 				$editable_override = JFactory::getSession()->get('ff_editable_overrideMod'.JRequest::getInt('ff_module_id',0) . $form->name, 0);
    296. 

  296. 			}
    297. 

  297. 		}
    298. 

  298. 		
    299. 

  299. 			
    300. 

  300.                 if ( (!isset($ff_applic) || $ff_applic!='plg_facileforms') && $pagetitle && $form->title != '' && !(JRequest::getInt('cb_form_id',0) || JRequest::getCmd('cb_record_id','') )) { if($menu_item_title != '') { JFactory::getDocument()->setTitle($menu_item_title); } else { JFactory::getDocument()->setTitle($form->title); } }
    301. 

  301. 		if ($form->name==$formname) addRequestParams($parprv);
    302. 

  302. 		if ($my_ff_params) {
    303. 

  303. 			reset($_REQUEST);
    304. 

  304. 			while (list($prop, $val) = each($_REQUEST))
    305. 

  305. 			if (!is_array($val) && substr($prop,0,9)=='ff_param_')
    306. 

  306. 			$ff_request[$prop] = $val;
    307. 

  307. 		} // if
    308. 

  308. 

  309. 		if ($inframe && !$plainform) {
    310. 

  310. 			
    311. 

  311. 			// open frame and detach processing
    312. 

  312. 			$divstyle = 'width:100%;';
    313. 

  313. 			switch ($align) {
    314. 

  314. 				case 0: $divstyle .= 'text-align:left;';   break;
    315. 

  315. 				case 1: $divstyle .= 'text-align:center;'; break;
    316. 

  316. 				case 2: $divstyle .= 'text-align:right;';  break;
    317. 

  317. 				case 3: if ($left > 0) $divstyle .= 'padding-left:'.$left.'px;'; break;
    318. 

  318. 				default: break;
    319. 

  319. 			} // switch
    320. 

  320. 			if ($top > 0) $divstyle .= 'padding-top:'.$top.'px;';
    321. 

  321. 			$framewidth = 'width="'.$form->width.($form->widthmode?'%" ':'" ');
    322. 

  322. 			$frameheight = '';
    323. 

  323. 			if (!$form->heightmode) $frameheight = 'height="'.$form->height.'" ';
    324. 

  324. 			$url = $ff_mossite.'/index.php'
    325. 

  325. 			.'?option=com_breezingforms'
    326. 

  326. 			.'&amp;Itemid='.((JRequest::getInt( 'Itemid', 0) > 0 && JRequest::getInt( 'Itemid', 0) < 99999999) ? JRequest::getInt( 'Itemid', 0) : 0)
    327. 

  327. 			.'&amp;ff_form='.$form->id
    328. 

  328. 			.'&amp;ff_applic='.$ff_applic
    329. 

  329. 			.'&amp;ff_module_id='.$xModuleId
    330. 

  330. 			.'&amp;format=html'
    331. 

  331.                         .'&amp;tmpl=component'
    332. 

  332. 			.'&amp;ff_frame=1';
    333. 

  333. 			if ($page != 1) $url .= '&amp;ff_page='.$page;
    334. 

  334. 			if ($border) $url .= '&amp;ff_border=1';
    335. 

  335. 			if ($parent_target > 1) $url .= '&amp;ff_target='.$parent_target;
    336. 

  336. 			reset($ff_request);
    337. 

  337. 			while (list($prop, $val) = each($ff_request)) $url .= '&amp;'.$prop.'='.urlencode($val);
    338. 

  338. 			$params =   'id="ff_frame'.$form->id.'" '.
    339. 

  339. 						'src="'.$url.'" '.
    340. 

  340. 			$framewidth.
    341. 

  341. 			$frameheight.
    342. 

  342. 						'frameborder="'.$border.'" '.
    343. 

  343. 						'allowtransparency="true" '.
    344. 

  344. 						'scrolling="no" ';
    345. 

  345. 			// DO NOT REMOVE OR CHANGE OR OTHERWISE MAKE INVISIBLE THE FOLLOWING COPYRIGHT MESSAGE
    346. 

  346. 			// FAILURE TO COMPLY IS A DIRECT VIOLATION OF THE GNU GENERAL PUBLIC LICENSE
    347. 

  347. 			// http://www.gnu.org/copyleft/gpl.html
    348. 

  348. 			echo "\n<!-- BreezingForms V".$ff_version." Copyright(c) 2008-2009 by Markus Bopp | FacileForms Copyright 2004-2006 by Peter Koch, Chur, Switzerland.  All rights reserved. -->\n";
    349. 

  349. 			// END OF COPYRIGHT
    350. 

  350. 			echo '<div class="bfClearfix" style="'.$divstyle.'">'."\n".
    351. 

  351. 				 "<iframe ".$params.">\n".
    352. 

  352. 				 "<p>Sorry, your browser cannot display frames!</p>\n".
    353. 

  353. 				 "</iframe>\n".
    354. 

  354. 				 "</div>\n";
    355. 

  355. 		} else {
    356. 

  356.                    
    357. 

  357.                         
    358. 

  358.                         if($menu_item_show_page_heading){
    359. 

  359.                             echo '<h1>'.( $menu_item_title != '' ? ( $menu_item_page_heading != '' ? $menu_item_page_heading : $menu_item_title ) : $form->title ).'</h1>'."\n";
    360. 

  360.                         }
    361. 

  361.                     
    362. 

  362. 			// process inline
    363. 

  363. 			$myUser = JFactory::getUser();
    364. 

  364. 				
    365. 

  365. 			$database->setQuery("select id from #__users where lower(username)=lower('".$myUser->get('username','')."')");
    366. 

  366. 			$id = $database->loadResult();
    367. 

  367. 			if ($id) $myUser->get('id',-1);
    368. 

  368. 			require_once($ff_compath.'/facileforms.process.php');
    369. 

  369. 			if ($task == 'view') {
    370. 

  370. 				$div1style = '';
    371. 

  371. 				$div2style = '';
    372. 

  372. 				if ($form->template_code == '') {
    373. 

  373. 					$fullwidth = $form->widthmode && $form->width>=100;
    374. 

  374. 					if ($form->widthmode) {
    375. 

  375. 						$div1style .= 'min-width:10px;';
    376. 

  376. 						$div2style .= 'min-width:10px;';
    377. 

  377. 					} // if
    378. 

  378. 					$div2style .= 'width:'.($fullwidth?'100':$form->width).($form->widthmode?'%':'px').';';
    379. 

  379. 					if (!$form->heightmode) $div2style .= 'height:'.$form->height.'px;';
    380. 

  380. 					if ($plainform) {
    381. 

  381. 						$div2style .= 'position:absolute;top:0px;left:0px;margin:0px;';
    382. 

  382. 					} else {
    383. 

  383. 						$div1style .= 'width:100%;';
    384. 

  384. 						$div2style .= 'position:relative;overflow:hidden;';
    385. 

  385. 						if ($border) $div2style .= 'border:1px solid black;';
    386. 

  386. 						if (!$fullwidth) {
    387. 

  387. 							switch ($align) {
    388. 

  388. 								case 1:
    389. 

  389. 									$div1style .= 'text-align:center;';
    390. 

  390. 									$div2style .= 'text-align:left;margin-left:auto;margin-right:auto;';
    391. 

  391. 									break;
    392. 

  392. 								case 2:
    393. 

  393. 									$div1style .= 'text-align:right;';
    394. 

  394. 									$div2style .= 'text-align:left;margin-left:auto;margin-right:0px;';
    395. 

  395. 									break;
    396. 

  396. 								case 3:
    397. 

  397. 									if ($left > 0) $div2style .= 'margin-left:'.$left.'px;';
    398. 

  398. 								default:
    399. 

  399. 									break;
    400. 

  400. 							} // switch
    401. 

  401. 						} // if
    402. 

  402. 						if ($top > 0) $div2style .= 'margin-top:'.$top.'px;';
    403. 

  403. 					} // if
    404. 

  404. 				}
    405. 

  405. 				ob_start();
    406. 

  406. 				// DO NOT REMOVE OR CHANGE OR OTHERWISE MAKE INVISIBLE THE FOLLOWING COPYRIGHT MESSAGE
    407. 

  407. 				// FAILURE TO COMPLY IS A DIRECT VIOLATION OF THE GNU GENERAL PUBLIC LICENSE
    408. 

  408. 				// http://www.gnu.org/copyleft/gpl.html
    409. 

  409. 				echo "\n<!-- BreezingForms V".$ff_version." Copyright(c) 2008-2009 by Markus Bopp | FacileForms Copyright 2004-2006 by Peter Koch, Chur, Switzerland.  All rights reserved. -->\n";
    410. 

  410. 				// END OF COPYRIGHT
    411. 

  411. 				$bfStyle = '';
    412. 

  412. 				if ($form->template_code == '') {
    413. 

  413. 					$bfStyle = ' style="'.$div1style.'"';
    414. 

  414. 				}
    415. 

  415. 				if (!$plainform) echo '<div class="bfClearfix"'.$bfStyle.'>'."\n";
    416. 

  416. 				if(trim($form->template_code_processed) == ''){
    417. 

  417. 					echo '<div class="bfClearfix" style="'.$div2style.'">'."\n";
    418. 

  418. 				}
    419. 

  419. 			} // if task = view
    420. 

  420. 			if ($left > 3) $align = $left;
    421. 

  421. 				
    422. 

  422. 			// remove temporary flash upload files if any	
    423. 

  423. 			$sourcePath = JPATH_SITE . '/components/com_breezingforms/uploads/';
    424. 

  424. 			if (@file_exists($sourcePath) && @is_readable($sourcePath) && @is_dir($sourcePath) && $handle = @opendir($sourcePath)) {
    425. 

  425. 				while (false !== ($file = @readdir($handle))) {
    426. 

  426. 					if($file!="." && $file!=".."){
    427. 

  427. 						$parts = explode('_', $file);
    428. 

  428. 						if(count($parts)>=5){
    429. 

  429. 							if($parts[count($parts)-1] == 'flashtmp'){
    430. 

  430. 								if (@JFile::exists($sourcePath.$file) && @is_readable($sourcePath.$file)){
    431. 

  431. 									$fileCreationTime = @filectime($sourcePath.$file);
    432. 

  432. 	 								$fileAge = time() - $fileCreationTime; 
    433. 

  433. 									if($fileAge >= 3600){
    434. 

  434. 										@JFile::delete($sourcePath.$file);
    435. 

  435. 									}
    436. 

  436. 								}
    437. 

  437. 							}
    438. 

  438. 						}
    439. 

  439. 					}
    440. 

  440. 				}
    441. 

  441. 				@closedir($handle);
    442. 

  442. 			}
    443. 

  443.                         // purge payment cache
    444. 

  444.                         $sourcePath = JPATH_SITE . '/media/breezingforms/payment_cache/';
    445. 

  445.                         if (@file_exists($sourcePath) && @is_readable($sourcePath) && @is_dir($sourcePath) && $handle = @opendir($sourcePath)) {
    446. 

  446.                             while (false !== ($file = @readdir($handle))) {
    447. 

  447.                                 if($file!="." && $file!="..") {
    448. 

  448.                                     $parts = explode('_', $file);
    449. 

  449.                                     if(count($parts)==4) {
    450. 

  450.                                         if (@JFile::exists($sourcePath.$file) && @is_readable($sourcePath.$file)) {
    451. 

  451.                                             $fileCreationTime = @filectime($sourcePath.$file);
    452. 

  452.                                             $fileAge = time() - $fileCreationTime;
    453. 

  453.                                             if($fileAge >= 3600) {
    454. 

  454.                                                 @JFile::delete($sourcePath.$file);
    455. 

  455.                                             }
    456. 

  456.                                         }
    457. 

  457.                                     }
    458. 

  458.                                 }
    459. 

  459.                             }
    460. 

  460.                             @closedir($handle);
    461. 

  461.                         }
    462. 

  462. 

  463. 			$ff_processor = new HTML_facileFormsProcessor(
    464. 

  464. 				$runmode, $inframe, $form->id, $page, $border,
    465. 

  465. 				$align, $top, $ff_target, $suffix, $editable, $editable_override
    466. 

  466. 			);
    467. 

  467. 			
    468. 

  468. 			if ($task == 'submit'){
    469. 

  469. 				$ff_processor->submit();
    470. 

  470. 			} else {
    471. 

  471.                             
    472. 

  472. 				$ff_processor->view();
    473. 

  473. 				if(trim($form->template_code_processed) == ''){
    474. 

  474. 					echo "</div>\n";
    475. 

  475. 				}
    476. 

  476.                                 if(trim($form->template_code_processed) == 'QuickMode') echo '<br/><br/><div align="center"><a href="http://crosstec.de/en/extensions/joomla-forms-download.html" target="_blank">Joomla!&reg; Forms Download</a></div>';
    477. 

  477. 				if (!$plainform) echo "</div>\n";
    478. 

  478. 

  479. 				if ($runmode==_FF_RUNMODE_PREVIEW) {
    480. 

  480. 						
    481. 

  481. 					$mouseOvers = '';
    482. 

  482. 					$draggableIds = '';
    483. 

  483. 					$draggableSize = count($ff_processor->draggableDivIds);
    484. 

  484. 					for($x  = 0; $x < $draggableSize;$x++){
    485. 

  485. 						if($x+1 < $draggableSize){
    486. 

  486. 							$draggableIds .= '"'.$ff_processor->draggableDivIds[$x].'",';
    487. 

  487. 						} else {
    488. 

  488. 							$draggableIds .= '"'.$ff_processor->draggableDivIds[$x].'"';
    489. 

  489. 						}
    490. 

  490. 

  491. 						$mouseOvers .= '
    492. 

  492. 						
    493. 

  493. 							var '.$ff_processor->draggableDivIds[$x].'_paddingRTmp;
    494. 

  494. 							var '.$ff_processor->draggableDivIds[$x].'_paddingLTmp;
    495. 

  495. 							var '.$ff_processor->draggableDivIds[$x].'_colorTmp;
    496. 

  496. 							
    497. 

  497. 							'.$ff_processor->draggableDivIds[$x].'_colorTmp    = document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.backgroundColor;
    498. 

  498. 							'.$ff_processor->draggableDivIds[$x].'_paddingRTmp = document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingRight;
    499. 

  499. 							'.$ff_processor->draggableDivIds[$x].'_paddingLTmp = document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingLeft;
    500. 

  500. 							'.$ff_processor->draggableDivIds[$x].'_paddingTTmp = document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingTop;
    501. 

  501. 							'.$ff_processor->draggableDivIds[$x].'_paddingBTmp = document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingBottom;
    502. 

  502. 							
    503. 

  503. 							function bfItemOver_'.$ff_processor->draggableDivIds[$x].'(e){
    504. 

  504. 								if(document.getElementById("'.$ff_processor->draggableDivIds[$x].'")){
    505. 

  505. 									
    506. 

  506. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.cursor="pointer";
    507. 

  507. 								
    508. 

  508. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingRight = "10px";
    509. 

  509. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingLeft = "10px";
    510. 

  510. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingTop = "0px";
    511. 

  511. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingBottom = "0px";
    512. 

  512. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.backgroundColor = "red";
    513. 

  513. 									
    514. 

  514. 									parent.document.getElementById("hoverItem_'.$ff_processor->draggableDivIds[$x].'").style.backgroundColor = "#cccccc";
    515. 

  515. 								}
    516. 

  516. 							}
    517. 

  517. 						
    518. 

  518. 							function bfItemOut_'.$ff_processor->draggableDivIds[$x].'(e){
    519. 

  519. 								if(document.getElementById("'.$ff_processor->draggableDivIds[$x].'")){
    520. 

  520. 								
    521. 

  521. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.cursor="";
    522. 

  522. 								
    523. 

  523. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingRight= '.$ff_processor->draggableDivIds[$x].'_paddingRTmp;
    524. 

  524. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingLeft= '.$ff_processor->draggableDivIds[$x].'_paddingLTmp;
    525. 

  525. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingTop= '.$ff_processor->draggableDivIds[$x].'_paddingTTmp;
    526. 

  526. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.paddingBottom= '.$ff_processor->draggableDivIds[$x].'_paddingBTmp;
    527. 

  527. 									document.getElementById("'.$ff_processor->draggableDivIds[$x].'").style.backgroundColor = '.$ff_processor->draggableDivIds[$x].'_colorTmp;
    528. 

  528. 									
    529. 

  529. 									parent.document.getElementById("hoverItem_'.$ff_processor->draggableDivIds[$x].'").style.backgroundColor = "";
    530. 

  530. 								}
    531. 

  531. 							}
    532. 

  532. 							
    533. 

  533. 							if(document.getElementById("'.$ff_processor->draggableDivIds[$x].'")){
    534. 

  534. 								document.getElementById("'.$ff_processor->draggableDivIds[$x].'").onmouseover = bfItemOver_'.$ff_processor->draggableDivIds[$x].';
    535. 

  535. 								document.getElementById("'.$ff_processor->draggableDivIds[$x].'").onmouseout = bfItemOut_'.$ff_processor->draggableDivIds[$x].';
    536. 

  536. 							}
    537. 

  537. 						';
    538. 

  538. 					}
    539. 

  539. 						
    540. 

  540. 					echo '
    541. 

  541. 					<script>
    542. 

  542. 					
    543. 

  543. 					SET_DHTML('.$draggableIds.');
    544. 

  544. 					
    545. 

  545. 					'.$mouseOvers.'
    546. 

  546. 					
    547. 

  547. 					function my_DragFunc(){
    548. 

  548. 						parent.document.adminForm.savepos.disabled = false;
    549. 

  549. 						// TODO: when undo is enabled, drag and drop is not possible. needs to be solved
    550. 

  550. 						//parent.document.adminForm.restpos.disabled = false;
    551. 

  551. 					}
    552. 

  552. 					
    553. 

  553. 					function my_DropFunc(){
    554. 

  554. 					
    555. 

  555. 						parent.document.getElementById("ff_itemPositions").value = "";
    556. 

  556. 					
    557. 

  557. 						for(var i = 0; i < parent.ff_coords.length;i++){
    558. 

  558. 						
    559. 

  559. 							eval("var cb = parent.document.adminForm.cb"+i+";");
    560. 

  560. 							
    561. 

  561. 							var itemComma = "";
    562. 

  562. 							if(i+1 < parent.ff_coords.length){
    563. 

  563. 								itemComma = ",";
    564. 

  564. 							} else {
    565. 

  565. 								itemComma = "";
    566. 

  566. 							}
    567. 

  567. 							
    568. 

  568. 							parent.document.getElementById("ff_itemPositions").value += 
    569. 

  569. 								cb.value+":"+document.getElementById("ff_div"+cb.value).style.zIndex+itemComma;
    570. 

  570. 						
    571. 

  571. 						}
    572. 

  572. 						
    573. 

  573. 						for(var i = 0; i < parent.ff_coords.length;i++){
    574. 

  574. 							
    575. 

  575. 							eval("var cb = parent.document.adminForm.cb"+i+";");
    576. 

  576. 							
    577. 

  577. 							if(document.getElementById("ff_div"+cb.value) == document.getElementById(dd.obj.id)){
    578. 

  578. 								
    579. 

  579. 								parent.ff_coords[i][2] = dd.obj.x;
    580. 

  580. 								parent.ff_coords[i][5] = dd.obj.y;
    581. 

  581. 								break;
    582. 

  582. 							}
    583. 

  583. 						}
    584. 

  584. 					}
    585. 

  585. 					
    586. 

  586. 					</script>';
    587. 

  587. 				}
    588. 

  588. 

  589. 				ob_end_flush();
    590. 

  590. 			} // if
    591. 

  591. 		} // if
    592. 

  592. 	} // if
    593. 

  593. 

  594. } else if(JRequest::getBool('showSecImage')) {
    595. 

  595. 

  596. 	JRequest::setVar('format', 'raw');
    597. 

  597. 	
    598. 

  598. 	header("Content-Type: image/png");
    599. 

  599. 

  600. 	$captchaDir = JPATH_SITE . '/administrator/components/com_breezingforms/captchas';
    601. 

  601. 

  602. 	if(file_exists($captchaDir) && is_dir($captchaDir)){
    603. 

  603. 

  604. 		$sizeAvailableCaptchas = count(glob("$captchaDir/*.png"));
    605. 

  605. 		$sizeAvailableCaptchas = $sizeAvailableCaptchas > mt_getrandmax() ? mt_getrandmax() : $sizeAvailableCaptchas;
    606. 

  606. 		mt_srand();
    607. 

  607. 		$captchaBgNum = mt_rand(0, $sizeAvailableCaptchas-1);
    608. 

  608. 			
    609. 

  609. 		$i = 0;
    610. 

  610. 		$handle = opendir($captchaDir);
    611. 

  611. 		while (false!==($file = readdir($handle))) {
    612. 

  612. 			if ($file != "." && $file != ".." && strtolower($file) != ".svn" && strtolower($file) != ".cvs") {
    613. 

  613. 				$pathinfo = pathinfo($file);
    614. 

  614. 				$extension = $pathinfo['extension'];
    615. 

  615. 				if(strtolower($extension) == 'png'){
    616. 

  616. 					if($captchaBgNum == $i){
    617. 

  617. 						$bbox = imagettfbbox (14, 0, $captchaDir . '/fontfile.ttf', JFactory::getSession()->get('ff_seccode'));
    618. 

  618. 						//print_r($bbox);
    619. 

  619. 						$textWidth  = $bbox[2] - $bbox[0];
    620. 

  620. 						$textHeight  = $bbox[3] - $bbox[5];
    621. 

  621. 						$imgHandle = imagecreatefrompng($captchaDir . '/' . $file);
    622. 

  622. 						imagettftext($imgHandle, 14, 0, (imagesx($imgHandle)-$textWidth)/2, (imagesy($imgHandle)+$textHeight)/2, '0x000000', $captchaDir . '/fontfile.ttf', JFactory::getSession()->get('ff_seccode'));
    623. 

  623. 						imagepng($imgHandle);
    624. 

  624. 						imagedestroy($imgHandle);
    625. 

  625. 						break;
    626. 

  626. 					}
    627. 

  627. 					$i++;
    628. 

  628. 				}
    629. 

  629. 			}
    630. 

  630. 		}
    631. 

  631. 

  632. 		closedir($handle);
    633. 

  633. 	}
    634. 

  634. 	exit;
    635. 

  635. 

  636. } else if(JRequest::getBool('bfReCaptcha')){
    637. 

  637. 

  638. 	ob_end_clean();
    639. 

  639.         require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Decoder.php');
    640. 

  640. 	require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Encoder.php');
    641. 

  641.         $db->setQuery( "Select * From #__facileforms_forms Where id = " . $db->Quote( JRequest::getInt('form',-1) ) );
    642. 

  642. 	$list = $db->loadObjectList();
    643. 

  643. 	if(count($list) == 0){
    644. 

  644. 		exit;
    645. 

  645. 	}
    646. 

  646. 	$form = $list[0];
    647. 

  647. 	$areas = Zend_Json::decode($form->template_areas);
    648. 

  648.         foreach($areas As $area){
    649. 

  649. 		foreach($area['elements'] As $element){
    650. 

  650. 

  651.                     if($element['bfType'] == 'ReCaptcha'){
    652. 

  652.                         if(!function_exists('recaptcha_check_answer')){
    653. 

  653.                             require_once(JPATH_SITE . '/administrator/components/com_breezingforms/libraries/recaptcha/recaptchalib.php');
    654. 

  654.                         }
    655. 

  655.                         
    656. 

  656.                         $publickey = $element['pubkey']; // you got this from the signup page
    657. 

  657.                         $privatekey = $element['privkey'];
    658. 

  658. 

  659.                         $resp = recaptcha_check_answer ($privatekey,
    660. 

  660.                                                         $_SERVER["REMOTE_ADDR"],
    661. 

  661.                                                         isset( $_POST["recaptcha_challenge_field"] ) ? $_POST["recaptcha_challenge_field"] : '' ,
    662. 

  662.                                                         isset($_POST["recaptcha_response_field"]) ? $_POST["recaptcha_response_field"] : '' );
    663. 

  663. 

  664.                         JFactory::getSession()->set('bfrecapsuccess',false);
    665. 

  665.                         if ($resp->is_valid) {
    666. 

  666.                             echo 'success';
    667. 

  667.                             JFactory::getSession()->set('bfrecapsuccess',true);
    668. 

  668.                         }
    669. 

  669.                         else
    670. 

  670.                         {
    671. 

  671.                             die ("The reCAPTCHA wasn't entered correctly. Go back and try it again." .
    672. 

  672.                                "(reCAPTCHA said: " . $resp->error . ")");
    673. 

  673.                         }
    674. 

  674.                         exit;
    675. 

  675.                     }
    676. 

  676.                 }
    677. 

  677.         }
    678. 

  678. 	
    679. 

  679. 	exit;
    680. 

  680. 

  681. } else if(JRequest::getBool('checkCaptcha')){
    682. 

  682. 	
    683. 

  683.         @ob_end_clean();
    684. 

  684.    
    685. 

  685.         require_once(JPATH_SITE . '/components/com_breezingforms/images/captcha/securimage.php');
    686. 

  686. 	$securimage = new Securimage();
    687. 

  687. 	if(!$securimage->check(str_replace('?','',JRequest::getVar('value', '')))){
    688. 

  688. 		echo 'capResult=>false';
    689. 

  689. 	} else {
    690. 

  690. 		echo 'capResult=>true';
    691. 

  691. 	}
    692. 

  692. 	exit;
    693. 

  693. 	
    694. 

  694. } else if(JRequest::getBool('confirmPayPalIpn') && ( !isset($ff_applic) || $ff_applic == '' ) ){
    695. 

  695. 

  696. 	JRequest::setVar('format', 'html');
    697. 

  697. 

  698. 	require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Decoder.php');
    699. 

  699. 	require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Encoder.php');
    700. 

  700. 

  701. 	$db->setQuery( "Select * From #__facileforms_forms Where id = " . $db->Quote( JRequest::getInt('form_id',-1) ) );
    702. 

  702. 	$list = $db->loadObjectList();
    703. 

  703. 	if(count($list) == 0){
    704. 

  704. 		header("Status: 200 OK");
    705. 

  705. 		exit;
    706. 

  706. 	}
    707. 

  707. 

  708. 	$form = $list[0];
    709. 

  709. 

  710. 	$areas = Zend_Json::decode($form->template_areas);
    711. 

  711. 	if(!is_array($areas)){
    712. 

  712. 		header("Status: 200 OK");
    713. 

  713.                 exit;
    714. 

  714. 	}
    715. 

  715. 

  716. 	foreach($areas As $area){
    717. 

  717. 

  718. 		foreach($area['elements'] As $element){
    719. 

  719. 			if($element['internalType'] == 'bfPayPal'){
    720. 

  720. 

  721. 				$options = $element['options'];
    722. 

  722. 

  723. 				$auth_token = $options['token'];
    724. 

  724. 				$paypal = 'https://www.paypal.com';
    725. 

  725. 				if($options['testaccount']){
    726. 

  726. 					$paypal = 'https://www.sandbox.paypal.com';
    727. 

  727. 					$auth_token = $options['testToken'];
    728. 

  728. 				}
    729. 

  729. 

  730. 				$req = 'cmd=_notify-validate';
    731. 

  731. 

  732. 				$tx_token = JRequest::getVar('txn_id', 0 );
    733. 

  733. 				foreach ($_POST as $key => $value) {
    734. 

  734.                                     $value = urlencode(stripslashes($value));
    735. 

  735.                                     $req .= "&$key=$value";
    736. 

  736.                                 }
    737. 

  737. 

  738. 				$header = "POST /cgi-bin/webscr HTTP/1.0\r\n";
    739. 

  739. 				$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
    740. 

  740. 				$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
    741. 

  741. 

  742.                                 $pointer = null;
    743. 

  743.                                 $res = '';
    744. 

  744.                                 
    745. 

  745. 				if (function_exists('curl_init')) {
    746. 

  746. 					$ch = curl_init();
    747. 

  747.                                         $pointer = $ch;
    748. 

  748. 					curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,FALSE);
    749. 

  749. 					curl_setopt($ch,CURLOPT_URL, $paypal.'/cgi-bin/webscr');
    750. 

  750. 					curl_setopt($ch,CURLOPT_POST,1);
    751. 

  751. 					curl_setopt($ch,CURLOPT_POSTFIELDS,$req);
    752. 

  752. 

  753. 					ob_start();
    754. 

  754. 					curl_exec($ch);
    755. 

  755. 					$res=ob_get_contents();
    756. 

  756. 

  757. 				} else {
    758. 

  758. 					// try fsockopen
    759. 

  759. 					$fp = fsockopen ($paypal, 80, $errno, $errstr, 30);
    760. 

  760.                                         $pointer = $fp;
    761. 

  761. 					fputs ($fp, $header . $req);
    762. 

  762. 					$headerdone = false;
    763. 

  763. 					while (!feof($fp)) {
    764. 

  764. 						$line = fgets ($fp, 1024);
    765. 

  765. 						if (strcmp($line, "\r\n") == 0) {
    766. 

  766. 							$headerdone = true;
    767. 

  767. 						}
    768. 

  768. 						else if ($headerdone)
    769. 

  769. 						{
    770. 

  770. 							$res .= $line;
    771. 

  771. 						}
    772. 

  772. 					}
    773. 

  773. 					
    774. 

  774. 				}
    775. 

  775. 

  776. 				$lines = explode("\n", $res);
    777. 

  777. 

  778. 				if (strcmp ($lines[0], "VERIFIED") == 0) {
    779. 

  779. 

  780.                                         $query = "SELECT * FROM #__facileforms_records WHERE id = '".JRequest::getInt('record_id', -1)."' LIMIT 1";
    781. 

  781.                                         $db->setQuery($query);
    782. 

  782.                                         $txid = $db->loadObjectList();
    783. 

  783. 

  784.                                         if (count($txid) != 0) {
    785. 

  785. 

  786.                                             if($txid[0]->paypal_tx_id == ''){
    787. 

  787. 

  788.                                                 $db->setQuery("
    789. 

  789. 										Update
    790. 

  790. 											#__facileforms_records
    791. 

  791. 										Set
    792. 

  792. 											paypal_tx_id = ".$db->Quote('PayPal: ' . $tx_token . ' (VALID)').",
    793. 

  793. 											paypal_payment_date = ".$db->Quote(date('Y-m-d H:i:s')).",
    794. 

  794. 											paypal_testaccount = ".$db->Quote($options['testaccount'] ? 1 : 0).",
    795. 

  795. 											paypal_download_tries = 0
    796. 

  796. 										Where
    797. 

  797. 											id = '".JRequest::getInt('record_id', -1)."'
    798. 

  798. 											");
    799. 

    800. 

  800.                                                 $db->query();
    801. 

  801. 

  802.                                                 // trigger a script after succeeded payment?
    803. 

  803.                                                 if(JFile::exists(JPATH_SITE . '/bf_paypalipn_success.php')){
    804. 

  804.                                                     require_once(JPATH_SITE . '/bf_paypalipn_success.php');
    805. 

  805.                                                 }
    806. 

  806. 

  807.                                                 // send mail after succeeded payment?
    808. 

  808. 						if( isset( $options['sendNotificationAfterPayment'] ) && $options['sendNotificationAfterPayment'] ) {
    809. 

  809.                                                     bf_sendNotificationByPaymentCache(JRequest::getInt('form_id',-1),JRequest::getInt('record_id', -1),'admin');
    810. 

  810.                                                     bf_sendNotificationByPaymentCache(JRequest::getInt('form_id',-1),JRequest::getInt('record_id', -1),'mailback');
    811. 

  811.                                                 }
    812. 

  812.                                             }
    813. 

  813.                                             
    814. 

  814.                                             header("Status: 200 OK");
    815. 

  815.                                         }
    816. 

  816. 

  817.                                         header("Status: 200 OK");
    818. 

  818. 					
    819. 

  819. 				}
    820. 

  820. 				else if (strcmp ($lines[0], "INVALID") == 0) {
    821. 

  821. 

  822.                                     $query = "SELECT * FROM #__facileforms_records WHERE id = '".JRequest::getInt('record_id', -1)."' LIMIT 1";
    823. 

  823.                                     $db->setQuery($query);
    824. 

  824.                                     $txid = $db->loadObjectList();
    825. 

  825. 

  826.                                     if (count($txid) != 0) {
    827. 

  827. 

  828.                                             $db->setQuery("
    829. 

  829. 										Update
    830. 

  830. 											#__facileforms_records
    831. 

  831. 										Set
    832. 

  832. 											paypal_tx_id = ".$db->Quote('PayPal: ' . $tx_token . ' (INVALID)').",
    833. 

  833. 											paypal_payment_date = ".$db->Quote(date('Y-m-d H:i:s')).",
    834. 

  834. 											paypal_testaccount = ".$db->Quote($options['testaccount'] ? 1 : 0).",
    835. 

  835. 											paypal_download_tries = 0
    836. 

  836. 										Where
    837. 

  837. 											id = '".JRequest::getInt('record_id', -1)."'
    838. 

  838. 											");
    839. 

    840. 

  840.                                             $db->query();
    841. 

  841.                                     }
    842. 

  842. 

  843.                                     header("Status: 200 OK");
    844. 

  844. 				}
    845. 

  845. 

  846.                                 header("Status: 200 OK");
    847. 

  847. 

  848.                                 // should be kept open until sending the status headers
    849. 

  849.                                 if (function_exists('curl_init')) {
    850. 

  850.                                     curl_close($pointer);
    851. 

  851.                                     ob_end_clean();
    852. 

  852.                                 }
    853. 

  853.                                 else
    854. 

  854.                                 {
    855. 

  855.                                     fclose ($pointer);
    856. 

  856.                                 }
    857. 

  857. 

  858. 				break;
    859. 

  859. 			}
    860. 

  860. 		}
    861. 

  861. 	}
    862. 

  862. 

  863. } else if(JRequest::getBool('confirmPayPal') && ( !isset($ff_applic) || $ff_applic == '' ) ){
    864. 

  864. 	
    865. 

  865. 	JRequest::setVar('format', 'html');
    866. 

  866. 	
    867. 

  867. 	require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Decoder.php');
    868. 

  868. 	require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Encoder.php');
    869. 

  869. 	
    870. 

  870. 	$db->setQuery( "Select * From #__facileforms_forms Where id = " . $db->Quote( JRequest::getInt('form_id',-1) ) );
    871. 

  871. 	$list = $db->loadObjectList();
    872. 

  872. 	if(count($list) == 0){
    873. 

  873. 		BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_FORM_DOES_NOT_EXIST'));
    874. 

  874. 		exit;
    875. 

  875. 	}
    876. 

  876. 	
    877. 

  877. 	$form = $list[0];
    878. 

  878. 	
    879. 

  879. 	$areas = Zend_Json::decode($form->template_areas);
    880. 

  880. 	if(!is_array($areas)){
    881. 

  881. 		BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_COULD_NOT_FIND_PAYPAL_DATA'));
    882. 

  882.                 exit;
    883. 

  883. 	}
    884. 

  884. 	
    885. 

  885. 	foreach($areas As $area){
    886. 

  886. 		$checkPP = true;
    887. 

  887. 		foreach($area['elements'] As $element){
    888. 

  888. 			if($element['name'] == 'PayPalSelect' || $element['name'] == 'BfPaymentSelect'){
    889. 

  889. 				$checkPP = false;
    890. 

  890. 				break;
    891. 

  891. 			}
    892. 

  892. 		}
    893. 

  893. 		foreach($area['elements'] As $element){
    894. 

  894. 			if($element['internalType'] == 'bfPayPal'){
    895. 

  895. 

  896. 				$options = $element['options'];
    897. 

  897. 

  898. 				$auth_token = $options['token'];
    899. 

  899. 				$paypal = 'https://www.paypal.com';
    900. 

  900. 				if($options['testaccount']){
    901. 

  901. 					$paypal = 'https://www.sandbox.paypal.com';
    902. 

  902. 					$auth_token = $options['testToken'];
    903. 

  903. 				}
    904. 

  904. 

  905. 				$req = 'cmd=_notify-synch';
    906. 

  906. 

  907. 				$tx_token = JRequest::getVar('tx', 0 );
    908. 

  908. 				$req .= "&tx=".urlencode($tx_token)."&at=".urlencode($auth_token);
    909. 

  909. 

  910. 				$header = "POST /cgi-bin/webscr HTTP/1.0\r\n";
    911. 

  911. 				$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
    912. 

  912. 				$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
    913. 

  913. 					
    914. 

  914. 				if (function_exists('curl_init')) {
    915. 

  915. 					$ch = curl_init();
    916. 

  916. 

  917. 					curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,FALSE);
    918. 

  918. 					curl_setopt($ch,CURLOPT_URL, $paypal.'/cgi-bin/webscr');
    919. 

  919. 					curl_setopt($ch,CURLOPT_POST,1);
    920. 

  920. 					curl_setopt($ch,CURLOPT_POSTFIELDS,$req);
    921. 

  921. 

  922. 					ob_start();
    923. 

  923. 					curl_exec($ch);
    924. 

  924. 					$res=ob_get_contents();
    925. 

  925. 					curl_close($ch);
    926. 

  926. 					ob_end_clean();
    927. 

  927. 

  928. 				} else {
    929. 

  929. 					// try fsockopen
    930. 

  930. 					$fp = fsockopen ($paypal, 80, $errno, $errstr, 30);
    931. 

  931. 					fputs ($fp, $header . $req);
    932. 

  932. 					$res = '';
    933. 

  933. 					$headerdone = false;
    934. 

  934. 					while (!feof($fp)) {
    935. 

  935. 						$line = fgets ($fp, 1024);
    936. 

  936. 						if (strcmp($line, "\r\n") == 0) {
    937. 

  937. 							$headerdone = true;
    938. 

  938. 						}
    939. 

  939. 						else if ($headerdone)
    940. 

  940. 						{
    941. 

  941. 							$res .= $line;
    942. 

  942. 						}
    943. 

  943. 					}
    944. 

  944. 					fclose ($fp);
    945. 

  945. 				}
    946. 

  946. 

  947. 				$lines = explode("\n", $res);
    948. 

  948. 				$keyarray = array();
    949. 

  949.                                 
    950. 

  950. 				if (strcmp ($lines[0], "SUCCESS") == 0) {
    951. 

  951. 					for ($i=1; $i<count($lines);$i++){
    952. 

  952. 						if ($lines[$i] != "") {
    953. 

  953. 							list($key,$val) = explode("=", $lines[$i]);
    954. 

  954. 							$keyarray[urldecode($key)] = urldecode($val);
    955. 

  955. 						}
    956. 

  956. 					}
    957. 

  957. 

  958. 					if ($checkPP && ( ( $options['amount'] > 0 && $keyarray['mc_gross'] != (doubleval($options['amount'])+doubleval($options['tax'])) ) || $keyarray['mc_currency'] != strtoupper($options['currencyCode']) ) ) {
    959. 

  959. 						
    960. 

  960. 						$success = false;
    961. 

  961. 						$msg = JText::_("Payment was not correct (amount/currency)");
    962. 

  962. 						require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/error.php');
    963. 

  963. 						
    964. 

  964. 					}else{
    965. 

  965. 

  966. 						$query = "SELECT * FROM #__facileforms_records WHERE id = '".JRequest::getInt('record_id', -1)."' LIMIT 1";
    967. 

  967. 						$db->setQuery($query);
    968. 

  968. 						$txid = $db->loadObjectList();
    969. 

  969. 	
    970. 

  970. 						if (count($txid) != 0) {
    971. 

  971. 								
    972. 

  972. 							if($txid[0]->paypal_tx_id == ''){
    973. 

  973. 									
    974. 

  974. 								$db->setQuery("
    975. 

  975. 										Update 
    976. 

  976. 											#__facileforms_records 
    977. 

  977. 										Set 
    978. 

  978. 											paypal_tx_id = ".$db->Quote('PayPal: ' . $tx_token).", 
    979. 

  979. 											paypal_payment_date = ".$db->Quote(date('Y-m-d H:i:s',strtotime($keyarray["payment_date"]))).",
    980. 

  980. 											paypal_testaccount = ".$db->Quote($options['testaccount'] ? 1 : 0).",
    981. 

  981. 											paypal_download_tries = 0
    982. 

  982. 										Where 
    983. 

  983. 											id = '".JRequest::getInt('record_id', -1)."'
    984. 

  984. 											");
    985. 

  985. 	
    986. 

  986. 								$db->query();
    987. 

  987. 

  988.                                                                 // trigger a script after succeeded payment?
    989. 

  989.                                                                 if(JFile::exists(JPATH_SITE . '/bf_paypal_success.php')){
    990. 

  990.                                                                     require_once(JPATH_SITE . '/bf_paypal_success.php');
    991. 

  991.                                                                 }
    992. 

  992. 

  993. 								// send mail after succeeded payment?
    994. 

  994. 								if( isset( $options['sendNotificationAfterPayment'] ) && $options['sendNotificationAfterPayment'] ){
    995. 

  995.                                                                         bf_sendNotificationByPaymentCache(JRequest::getInt('form_id',-1),JRequest::getInt('record_id', -1),'admin');
    996. 

  996.                                                                         bf_sendNotificationByPaymentCache(JRequest::getInt('form_id',-1),JRequest::getInt('record_id', -1),'mailback');
    997. 

  997. 								}
    998. 

  998. 								
    999. 

  999. 								if($options['downloadableFile']){
    1000. 

  1000. 	
    1001. 

  1001. 									$record_id = JRequest::getInt('record_id', -1);
    1002. 

  1002. 									$tries     = $options['downloadTries'];
    1003. 

  1003. 									$form_id   = JRequest::getInt('form_id',-1);
    1004. 

  1004. 									require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/download.php');
    1005. 

  1005. 	
    1006. 

  1006. 								} else {
    1007. 

  1007. 										
    1008. 

  1008. 									if($options['thankYouPage'] != ''){
    1009. 

  1009. 										BFRedirect($options['thankYouPage']);
    1010. 

  1010. 									} else {
    1011. 

  1011. 										BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_THANK_YOU_FOR_PAYING_WITH_PAYPAL'));
    1012. 

  1012. 									}
    1013. 

  1013. 								}
    1014. 

  1014. 	
    1015. 

  1015. 								$success = true;
    1016. 

  1016. 	
    1017. 

  1017. 							} else {
    1018. 

  1018.                                                                 if($options['downloadableFile']){
    1019. 

  1019. 

  1020.                                                                     $record_id = JRequest::getInt('record_id', -1);
    1021. 

  1021.                                                                     $tries     = $options['downloadTries'];
    1022. 

  1022.                                                                     $form_id   = JRequest::getInt('form_id',-1);
    1023. 

  1023.                                                                     require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/download.php');
    1024. 

  1024. 

  1025. 								}
    1026. 

  1026.                                                                 else
    1027. 

  1027.                                                                 {
    1028. 

  1028.                                                                     if($options['useIpn'])
    1029. 

  1029.                                                                     {
    1030. 

  1030.                                                                         if($options['thankYouPage'] != ''){
    1031. 

  1031. 										BFRedirect($options['thankYouPage']);
    1032. 

  1032. 									} else {
    1033. 

  1033. 										BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_THANK_YOU_FOR_PAYING_WITH_PAYPAL'));
    1034. 

  1034. 									}
    1035. 

  1035.                                                                     }
    1036. 

  1036.                                                                     else
    1037. 

  1037.                                                                     {
    1038. 

  1038.                                                                         $success = false;
    1039. 

  1039.                                                                         $msg = JText::_("This transaction was already processed");
    1040. 

  1040.                                                                         require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/error.php');
    1041. 

  1041.                                                                     }
    1042. 

  1042.                                                                 }
    1043. 

  1043. 							}
    1044. 

  1044. 						}
    1045. 

  1045. 						else
    1046. 

  1046.                                                 {
    1047. 

  1047. 							$success = false;
    1048. 

  1048. 							$msg = JText::_("Could not find record!");
    1049. 

  1049. 							require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/error.php');
    1050. 

  1050. 						}
    1051. 

  1051. 					}
    1052. 

  1052. 				}
    1053. 

  1053. 				else if (strcmp ($lines[0], "FAIL") == 0) {
    1054. 

  1054. 					$success = false;
    1055. 

  1055. 					$msg = JText::_("Verification failed");
    1056. 

  1056. 					require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/error.php');
    1057. 

  1057. 

  1058. 				}
    1059. 

  1059. 				else {
    1060. 

  1060. 					$success = false;
    1061. 

  1061. 					$msg = JText::_("Verification did not return any values");
    1062. 

  1062. 					require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/error.php');
    1063. 

  1063. 				}
    1064. 

  1064. 

  1065. 				break;
    1066. 

  1066. 			}
    1067. 

  1067. 		}	
    1068. 

  1068. 	} 
    1069. 

  1069. 	
    1070. 

  1070. } else if(JRequest::getBool('paypalDownload') && ( !isset($ff_applic) || $ff_applic == '' ) ){
    1071. 

  1071. 

  1072. 	JRequest::setVar('format', 'raw');
    1073. 

  1073. 	
    1074. 

  1074. 	require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Decoder.php');
    1075. 

  1075. 	require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Encoder.php');
    1076. 

  1076. 	
    1077. 

  1077. 	$db->setQuery( "Select * From #__facileforms_forms Where id = " . $db->Quote( JRequest::getInt('form',-1) ) );
    1078. 

  1078. 	$list = $db->loadObjectList();
    1079. 

  1079. 	if(count($list) == 0){
    1080. 

  1080. 		BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_FORM_DOES_NOT_EXIST'));
    1081. 

  1081. 		exit;
    1082. 

  1082. 	}
    1083. 

  1083. 	
    1084. 

  1084. 	$form = $list[0];
    1085. 

  1085. 	
    1086. 

  1086. 	$areas = Zend_Json::decode($form->template_areas);
    1087. 

  1087. 	if(!is_array($areas)){
    1088. 

  1088. 		BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_COULD_NOT_FIND_PAYPAL_DATA'));
    1089. 

  1089. 	}
    1090. 

  1090. 	
    1091. 

  1091. 	foreach($areas As $area){
    1092. 

  1092. 		foreach($area['elements'] As $element){
    1093. 

  1093. 			if($element['internalType'] == 'bfPayPal'){
    1094. 

  1094. 	
    1095. 

  1095. 				$options = $element['options'];
    1096. 

  1096. 

  1097. 				if($options['downloadableFile']){
    1098. 

  1098. 				
    1099. 

  1099. 					$file = $options['filepath'];
    1100. 

  1100. 				
    1101. 

  1101. 					$db->setQuery("
    1102. 

  1102. 									Select paypal_download_tries From 
    1103. 

  1103. 										#__facileforms_records 
    1104. 

  1104. 									Where 
    1105. 

  1105. 										id = '".JRequest::getInt('record_id', -1)."'
    1106. 

  1106. 									And
    1107. 

  1107. 										( 
    1108. 

  1108.                                                                                     paypal_tx_id = ".$db->Quote('PayPal: ' . JRequest::getVar('tx',''))."
    1109. 

  1109.                                                                                   Or
    1110. 

  1110.                                                                                     paypal_tx_id = ".$db->Quote('PayPal: ' . JRequest::getVar('tx','') . ' (VALID)')."
    1111. 

  1111.                                                                                 )
    1112. 

  1112. 									");
    1113. 

  1113. 					
    1114. 

  1114. 					$downloads = $db->loadObjectList();
    1115. 

  1115. 					
    1116. 

  1116. 					if(count($downloads) == 1){
    1117. 

  1117. 						
    1118. 

  1118. 						if($downloads[0]->paypal_download_tries < $options['downloadTries']){
    1119. 

  1119. 						
    1120. 

  1120. 							$db->setQuery("
    1121. 

  1121. 											Update 
    1122. 

  1122. 												#__facileforms_records 
    1123. 

  1123. 											Set
    1124. 

  1124. 												paypal_download_tries = paypal_download_tries + 1 
    1125. 

  1125. 											Where 
    1126. 

  1126. 												id = '".JRequest::getInt('record_id', -1)."'
    1127. 

  1127. 											And
    1128. 

  1128. 												(
    1129. 

  1129.                                                                                                     paypal_tx_id = ".$db->Quote('PayPal: ' . JRequest::getVar('tx',''))."
    1130. 

  1130.                                                                                                   Or
    1131. 

  1131.                                                                                                     paypal_tx_id = ".$db->Quote('PayPal: ' . JRequest::getVar('tx','') . ' (VALID)')."
    1132. 

  1132.                                                                                                 )
    1133. 

  1133. 											");
    1134. 

  1134. 										
    1135. 

  1135. 							$db->query();
    1136. 

  1136. 							
    1137. 

  1137. 							if(!file_exists($file)) {
    1138. 

  1138. 								BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_COULD_NOT_FIND_DOWNLOAD_FILE'));
    1139. 

  1139. 							}
    1140. 

  1140. 							
    1141. 

  1141. 							header('Content-Description: File Transfer');
    1142. 

  1142. 							header('Content-Type: application/octet-stream');
    1143. 

  1143. 							header('Content-Disposition: attachment; filename='.basename($file));
    1144. 

  1144. 							header('Content-Transfer-Encoding: binary');
    1145. 

  1145. 							header('Expires: 0');
    1146. 

  1146. 							header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
    1147. 

  1147. 							header('Pragma: public');
    1148. 

  1148. 							header('Content-Length: ' . filesize($file));
    1149. 

  1149. 							ob_clean();
    1150. 

  1150. 							flush();
    1151. 

  1151. 							readfile($file) or die("Error reading the file ".$file);
    1152. 

  1152. 							exit;
    1153. 

  1153. 				
    1154. 

  1154. 						} else {
    1155. 

  1155. 							
    1156. 

  1156. 							BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_MAX_DOWNLOAD_TRIES_REACHED'));
    1157. 

  1157. 						}
    1158. 

  1158. 						
    1159. 

  1159. 					} else {
    1160. 

  1160. 						
    1161. 

  1161. 						BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_DOWNLOAD_NOT_POSSIBLE'));
    1162. 

  1162. 					}
    1163. 

  1163. 					
    1164. 

  1164. 				} else {
    1165. 

  1165. 

  1166. 					BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_NO_DOWNLOADABLE_PRODUCT'));
    1167. 

  1167. 				}
    1168. 

  1168. 				
    1169. 

  1169. 				break;
    1170. 

  1170. 			}
    1171. 

  1171. 		}
    1172. 

  1172. 	}
    1173. 

  1173. 	
    1174. 

  1174. } else if(JRequest::getBool('showPayPalConnectMsg')){
    1175. 

  1175. 

  1176. 	JRequest::setVar('format', 'html');
    1177. 

  1177. 	
    1178. 

  1178. 	$style = '<link rel="stylesheet" href="'.JURI::root().'templates/'.$mainframe->getTemplate().'/css/template.css" type="text/css" />';
    1179. 

  1179. 						
    1180. 

  1180. 	echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    1181. 

  1181. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="'.strtolower(JFactory::getLanguage()->getTag()).'" lang="'.strtolower(JFactory::getLanguage()->getTag()).'" >
    1182. 

  1182. <head>'.$style.'</head>
    1183. 

  1183. <div class="payPalConnectMsg">
    1184. 

  1184. <div class="paymentConnectMsg">
    1185. 

  1185. '.BFText::_('COM_BREEZINGFORMS_PLEASE_WAIT_REQUEST').'
    1186. 

  1186. </div>
    1187. 

  1187. </div>
    1188. 

  1188. </body>';
    1189. 

  1189. 	
    1190. 

  1190. } else if(JRequest::getBool('successSofortueberweisung')){
    1191. 

  1191. 	
    1192. 

  1192. 	JRequest::setVar('format', 'html');
    1193. 

  1193. 	
    1194. 

  1194. 	$tx_token = JRequest::getVar('tx','');
    1195. 

  1195. 	if($tx_token == ''){
    1196. 

  1196. 		$msg = JText::_("This transaction id is empty!");
    1197. 

  1197. 		require_once(JPATH_SITE . '/media/breezingforms/downloadtpl/error.php');
    1198. 

  1198. 	}
    1199. 

  1199. 	else {
    1200. 

  1200. 		
    1201. 

  1201. 		$formId = JRequest::getInt('user_variable_0','');
    1202. 

  1202. 		$recordId = JRequest::getInt('user_variable_1','');
    1203. 

  1203. 		
    1204. 

  1204. 		if($formId != '' && $recordId != ''){
    1205. 

  1205. 			
    1206. 

  1206. 			require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Decoder.php');
    1207. 

  1207. 			require_once(JPATH_SITE.'/administrator/components/com_breezingforms/libraries/Zend/Json/Encoder.php');
    1208. 

  1208. 			
    1209. 

  1209. 			$db->setQuery( "Select * From #__facileforms_forms Where id = " . $db->Quote( $formId ) );
    1210. 

  1210. 			$list = $db->loadObjectList();
    1211. 

  1211. 			if(count($list) == 0){
    1212. 

  1212. 				BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_FORM_DOES_NOT_EXIST'));
    1213. 

  1213. 				exit;
    1214. 

  1214. 			}
    1215. 

  1215. 			
    1216. 

  1216. 			$form = $list[0];
    1217. 

  1217. 			
    1218. 

  1218. 			$areas = Zend_Json::decode($form->template_areas);
    1219. 

  1219. 			if(!is_array($areas)){
    1220. 

  1220. 				BFRedirect(JURI::root(), BFText::_('COM_BREEZINGFORMS_COULD_NOT_FIND_SU_DATA'));
    1221. 

  1221. 			}
    1222. 

  1222. 			
    1223. 

  1223. 			foreach($areas As $area){
    1224. 

  1224. 				foreach($area['elements'] As $element){
    1225. 

  1225. 					if($element['internalType'] == 'bfSofortueberweisung'){
    1226. 

  1226. 						$options = $element['options'];
    1227. 

  1227. 						if($opti…
    1228.

Large files files are truncated, but you can click here to view the full file