芝麻web文件管理V1.00

编辑当前文件:/home/p/r/i/prismawe/clients/canaldegap.fr_old/modules/FormBuilder/FormBuilder.module.php

<?php
#-------------------------------------------------------------------------
# Module: FormBuilder
# Version: 0.6, released 2008
#
# Copyright (c) 2007, Samuel Goldstein <sjg@cmsmodules.com>
# For Information, Support, Bug Reports, etc, please visit the
# CMS Made Simple Forge:
# http://dev.cmsmadesimple.org/projects/formbuilder/
#
#-------------------------------------------------------------------------
# CMS - CMS Made Simple is (c) 2006 by Ted Kulp (wishy@cmsmadesimple.org)
# This project's homepage is: http://www.cmsmadesimple.org
#-------------------------------------------------------------------------
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
# Or read it online: http://www.gnu.org/licenses/licenses.html#GPL
#
#-------------------------------------------------------------------------
class FormBuilder extends CMSModule
{

var $field_types;
	var $disp_field_types;
	var $std_field_types;
	var $all_validation_types;
	var $module_ptr;
	var $module_id;
	var $email_regex;
	var $email_regex_relaxed;
	var $dbHandle;

function FormBuilder()
	{
		global $gCms;
		$this->CMSModule();
		
		$this->module_ptr = &$this;
		$this->dbHandle =  $this->GetDb();
		$this->module_id = '';
		$this->email_regex = "/^([\w\d\.\-\_])+\@([\w\d\.\-\_]+)\.(\w+)$/i";
		$this->email_regex_relaxed="/^([\w\d\.\-\_])+\@([\w\d\.\-\_])+$/i";
		require_once dirname(__FILE__).'/classes/Form.class.php';
		require_once dirname(__FILE__).'/classes/FieldBase.class.php';
	}

function AllowAutoInstall()
	{
		return FALSE;
	}

function AllowAutoUpgrade()
	{
		return FALSE;
	}

function GetName()
	{
		return 'FormBuilder';
	}
	
	function GetFriendlyName()
	{
		return $this->Lang('friendlyname');
	}

function GetVersion()
	{
		return '0.6b2';
	}

function GetAuthor()
	{
		return 'SjG';
	}

function GetAuthorEmail()
	{
		return 'sjg@cmsmodules.com';
	}

function GetAdminDescription($lang = 'en_US')
	{
		return $this->Lang('admindesc');
	}

function GetChangeLog()
	{
		$fn = dirname(__FILE__).'/changelog.inc';
		return @file_get_contents($fn);
	}

function IsPluginModule()
	{
		return true;
	}

function HasAdmin()
	{
		return true;
	}

function VisibleToAdminUser()
	{
		return $this->CheckPermission('Modify Forms');
	}

function SetParameters()
	{
		$this->RegisterModulePlugin();
		$this->RestrictUnknownParams();
		$this->CreateParameter('fbrp_*','null',$this->Lang('formbuilder_params_general'));
		$this->SetParameterType(CLEAN_REGEXP.'/fbrp_.*/',CLEAN_STRING);
		$this->CreateParameter('form_id','null',$this->Lang('formbuilder_params_form_id'));
		$this->SetParameterType('form_id',CLEAN_INT);
		$this->CreateParameter('form','null',$this->Lang('formbuilder_params_form_name'));
		$this->SetParameterType('form',CLEAN_STRING);
		
		$this->CreateParameter('field_id','null',$this->Lang('formbuilder_params_field_id'));
		$this->SetParameterType('field_id',CLEAN_INT);
		
		$this->CreateParameter('value_*','null',$this->Lang('formbuilder_params_passed_from_tag'));
		$this->SetParameterType(CLEAN_REGEXP.'/value_.*/',CLEAN_STRING);
		
		$this->CreateParameter('response_id','null',$this->Lang('formbuilder_params_response_id'));
		$this->SetParameterType('response_id',CLEAN_INT);
	}

function DoAction($name,$id,$params,$returnid='')
	{
		$this->module_id = $id;
		parent::DoAction($name,$id,$params,$returnid);
	}

function GetDependencies()
	{
		return array('CMSMailer'=>'1.73');
	}

// may be too stringent, but better safe than sorry.
	function MinimumCMSVersion()
	{
		return '1.1';
	}

function InstallPostMessage()
	{
		return $this->Lang('post_install');
	}

function CheckAccess($permission='Modify Forms')
	{
		$access = $this->CheckPermission($permission);
		if (!$access)  {
			echo "<p class=\"error\">".$this->Lang('you_need_permission',$permission)."</p>";
			return false;
		}
		else return true;
	}

/*
	DO NOT allow parameters to be used for passing the order_by! It is not escaped before
	database access. If we let ADODB quote it, the SQL is not valid (not that MySQL cares,
	but Postgres does).
	*/
	function GetForms($order_by='name')
	{
		$db = $this->GetDb();
		$sql = "SELECT * FROM ".cms_db_prefix().'module_fb_form ORDER BY '.$order_by;
		$result = array();
		$rs = $db->Execute($sql);
		if($rs && $rs->RecordCount() > 0)
		{
			$result = $rs->GetArray();
		}
		return $result;
	}

function GetFormIDFromAlias($form_alias)
	{
		$db = $this->GetDb();
		$sql = 'SELECT form_id from '.cms_db_prefix().'module_fb_form WHERE alias = ?';
		$rs = $db->Execute($sql, array($form_alias));
		if($rs && $rs->RecordCount() > 0)
		{
			$result = $rs->FetchRow();
			return $result['form_id'];
		}
		return -1;
	}

function GetFormNameFromID($form_id)
	{
		$db = $this->GetDb();
		$sql = 'SELECT name from '.cms_db_prefix().'module_fb_form WHERE form_id = ?';
		$rs = $db->Execute($sql, array($form_id));
		if($rs && $rs->RecordCount() > 0)
		{
			$result = $rs->FetchRow();
		}
		return $result['name'];
	}

function GetFormByID($form_id, $loadDeep=false)
	{
		$params = array('form_id'=>$form_id);
		return new fbForm($this, $params, $loadDeep);
	}

function GetFormByParams(&$params, $loadDeep=false)
	{
		return new fbForm($this, $params, $loadDeep);
	}

function GetHelp($lang = 'en_US')
	{
		return $this->Lang('help');
	}

function GetResponse($form_id,$response_id,$field_list=array(), $dateFmt='d F y')
	{
		$names = array();
		$values = array();
		$db = $this->GetDb();
		$fbField = $this->GetFormBrowserField($form_id);
		if ($fbField == false)
			{
			// error handling goes here.
			echo($this->Lang('error_has_no_fb_field'));
			}

$dbresult = $db->Execute('SELECT * FROM '.cms_db_prefix().
					'module_fb_formbrowser WHERE fbr_id=?', array($response_id));

$oneset = new stdClass();
		if ($dbresult && $row = $dbresult->FetchRow())
		{
			$oneset->id = $row['fbr_id'];
			$oneset->user_approved = (empty($row['user_approved'])?'':date($dateFmt,$db->UnixTimeStamp($row['user_approved']))); 
			$oneset->admin_approved = (empty($row['admin_approved'])?'':date($dateFmt,$db->UnixTimeStamp($row['admin_approved'])));
			$oneset->submitted = date($dateFmt,$db->UnixTimeStamp($row['submitted']));
			$oneset->xml = $row['response'];
			$oneset->fields = array();
			$oneset->names = array();
			$oneset->fieldsbyalias = array();
		}
		
		$populate_names = true;
		$this->HandleResponseFromXML($fbField, $oneset);
		list($fnames, $aliases, $vals) = $this->ParseResponseXML($oneset->xml);
		foreach ($fnames as $id=>$name)
			{
			if (isset($field_list[$id]) && $field_list[$id] > -1)
				{
				$oneset->values[$field_list[$id]]=$vals[$id];
				$oneset->names[$field_list[$id]]=$fnames[$id];
				}
			if (isset($aliases[$id]))
				{
				$oneset->fieldsbyalias[$aliases[$id]] = $vals[$id];
				}
			}			
		return $oneset;
	}

function GetFormBrowserField($form_id)
	{
		$db = $this->GetDb();
		$sql = 'SELECT * FROM ' . cms_db_prefix().'module_fb_field WHERE form_id=? and type=?';
		$rs = $this->module_ptr->dbHandle->Execute($sql, array($form_id,'DispositionFormBrowser'));
		$result = array();
		if (! $rs || $rs->RecordCount() == 0)
			{
			return false;
			}
		$thisRes = $rs->GetArray();
		$params = array();
		$aeform = new fbForm($this,$params,false);

$className = $aeform->MakeClassName($thisRes[0]['type'], '');
		// create the field object
		$field = $aeform->NewField($thisRes[0]);
		return $field;		
	}
	
	
	function HandleResponseFromXML(&$fbField, &$responseObj)
	{
		$crypt = $fbField->GetOption('crypt','0');
		if ($crypt == '1')
			{
			$cryptlib = $fbField->GetOption('crypt_lib');
			$keyfile = $fbField->GetOption('keyfile');
			if ($cryptlib == 'openssl')
				{
				$openssl = $this->GetModuleInstance('OpenSSL');
				$pkey = $fbField->GetOption('private_key');
				$openssl->Reset();
				$openssl->load_private_keyfile($pkey,$keyfile);
				}
			else
				{
				if (file_exists($keyfile))
			    	{
			        $keyfile = file_get_contents($keyfile);
			        }
				}
			}

if ($crypt == '1')
			{
			if ($cryptlib == 'openssl')
				{
				$responseObj->xml = $openssl->decrypt_from_payload($responseObj->xml);
				if ($responseObj->xml == false)
					{
					debug_display($openssl->openssl_errors());
					}
				}
			else
				{
				$responseObj->xml = $this->fbdecrypt($responseObj->xml,$keyfile);
				}
			}
	}

$dbcount = $db->Execute('SELECT COUNT(*) as num '.$sql,array($form_id));

$records = 0;
		if ($dbcount && $row = $dbcount->FetchRow())
		{
			$records = $row['num'];
		}

if ($number > -1)
			{
			$dbresult = $db->SelectLimit('SELECT * '.$sql, $number, $start_point, array($form_id));
			}
		else
			{
			$dbresult = $db->Execute('SELECT * '.$sql, array($form_id));	
			}
		while ($dbresult && $row = $dbresult->FetchRow())
		{
			$oneset = new stdClass();
			$oneset->id = $row['fbr_id'];
			$oneset->user_approved = (empty($row['user_approved'])?'':date($dateFmt,$db->UnixTimeStamp($row['user_approved']))); 
			$oneset->admin_approved = (empty($row['admin_approved'])?'':date($dateFmt,$db->UnixTimeStamp($row['admin_approved']))); 
			$oneset->submitted = date($dateFmt,$db->UnixTimeStamp($row['submitted']));
			$oneset->xml = $row['response'];
			$oneset->fields = array();
			$oneset->fieldsbyalias = array();
			array_push($values,$oneset);
		}
		$fbField = $this->GetFormBrowserField($form_id);
		if ($fbField == false)
			{
			// error handling goes here.
			echo($this->Lang('error_has_no_fb_field'));
			}
		
		$populate_names = true;
		$mapfields = (count($field_list) > 0);
		for ($i=0;$i<count($values);$i++)
		{
			$this->HandleResponseFromXML($fbField, $values[$i]);
			list($fnames, $aliases, $vals) = $this->ParseResponseXML($values[$i]->xml);
			foreach ($fnames as $id=>$name)
				{
				if ($mapfields)
					{
					if (isset($field_list[$id]) && $field_list[$id] > -1)
						{
						if ($populate_names)
							{
							$names[$field_list[$id]] = $name;
							}
						$values[$i]->fields[$field_list[$id]]=$vals[$id];
						}
					if (isset($aliases[$id]))
						{
						$values[$i]->fieldsbyalias[$aliases[$id]] = $vals[$id];
						}
					}
				else
					{
					if ($populate_names)
						{
						$names[$id] = $name;
						}
					$values[$i]->fields[$id]=$vals[$id];
					if (isset($aliases[$id]))
						{
						$values[$i]->fieldsbyalias[$aliases[$id]] = $vals[$id];
						}
					}
				}
			$populate_names = false;
		}
		return array($records, $names, $values);
	}

function GetSortableFields($form_id)
	{
		$ret = array();
		$parm = array('form_id'=>$form_id);
		$aeform = new fbForm($this, $parm, true);
		$fbField = $aeform->GetFormBrowserField();
		if ($fbField == false)
			{
			// error handling goes here.
			return $ret;	
			}
		return $fbField->getSortFieldList();
	}

function getFEUIDFromResponseID($response_id)
	{
	$db = $this->GetDb();
    $sql = 'SELECT feuid FROM ' . cms_db_prefix().
      'module_fb_formbrowser where fbr_id=?';
    if($result = $db->GetRow($sql, array($response_id)))
      {
	    return $result['feuid'];
      }
    return -1;
	}

function getResponseIDFromFEUID($feu_id)
	{
	$db = $this->GetDb();
    $sql = 'SELECT fbr_id FROM ' . cms_db_prefix().
      'module_fb_formbrowser where feuid=?';
    if($result = $db->GetRow($sql, array($feu_id)))
      {
	    return $result['fbr_id'];
      }
    return false;
 	}

function field_sorter_asc($a, $b)
	{
		return strcasecmp($a->fields[$a->sf], $b->fields[$b->sf]);
	}

function field_sorter_desc($a, $b)
	{
		return strcasecmp($b->fields[$b->sf], $a->fields[$a->sf]);
	}

// For a given form, returns an array of response objects
	function ListResponses($form_id, $sort_order='submitted')
	{
		$db = $this->GetDb();
		$ret = array();
		$sql = 'SELECT * FROM '.cms_db_prefix().
				'module_fb_resp WHERE form_id=? ORDER BY ?';
		$dbresult = $db->Execute($query, array($form_id,$sort_order));
		while ($dbresult && $row = $dbresult->FetchRow())
		{
			$oneset = new stdClass();
			$oneset->id = $result['resp_id'];
			$oneset->user_approved = $db->UnixTimeStamp($result['user_approved']); 
			$oneset->admin_approved = $db->UnixTimeStamp($result['admin_approved']); 
			$oneset->submitted = $db->UnixTimeStamp($result['submitted']); 
			array_push($ret,$oneset);
		}
		return $ret;
	}

function ClearFileLock()
	{
		$db = $this->GetDb();
		$sql = "DELETE from ".cms_db_prefix().'module_fb_flock';
		$rs = $db->Execute($sql);
	}

function ReturnFileLock()
	{
		$this->ClearFileLock();
	}

function GetEventDescription ( $eventname )
	{
		return $this->Lang('event_info_'.$eventname );
	}

function GetEventHelp ( $eventname )
	{
		return $this->Lang('event_help_'.$eventname );
	}

function CreatePageDropdown($id,$name,$current='',
								$addtext='',$markdefault =true)
	{
		// we get here (hopefully) when the template is changed
		// in the dropdown.
		$db = $this->GetDb();
		$defaultid = '';
		if( $markdefault )
		{
			$contentops = $gCms->GetContentOperations();
			$defaultid = $contentops->GetDefaultPageID();
		}
		
		// get a list of the pages used by this template
		$mypages = array();

if ($this->GetPreference('mle_version','0') == '1')
			{
			global $mleblock;
			$q = "SELECT content_id,content_name$mleblock as content_name FROM ".
				cms_db_prefix()."content WHERE type = ? AND active = 1";	
			}
		else
			{
			$q = "SELECT content_id,content_name FROM ".cms_db_prefix().
				"content WHERE type = ? AND active = 1";
			}
		$dbresult = $db->Execute( $q, array('content') );
		while( $row = $dbresult->FetchRow() )
		{
			if( $defaultid != '' && $row['content_id'] == $defaultid )
			{
				// use a star instead of a word here so I don't have to
				// worry about translation stuff
				$mypages[$row['content_name'].' (*)'] = $row['content_id'];
			}
			else
			{
				$mypages[$row['content_name']] = $row['content_id'];
			}
		}
		return $this->CreateInputDropdown($id,'fbrp_'.$name,$mypages,-1,$current,$addtext);
	}

function fbdecrypt($crypt,$key)
      {
      $crypt = base64_decode($crypt);
      $td = mcrypt_module_open ('tripledes', '', 'ecb', '');
      $key = substr(md5($key),0,24);
      $iv = mcrypt_create_iv (mcrypt_enc_get_iv_size ($td), MCRYPT_RAND);
      mcrypt_generic_init ($td, $key, $iv);
      $plain = mdecrypt_generic ($td, $crypt);
      mcrypt_generic_deinit ($td);
      mcrypt_module_close ($td);
      return $plain;
      }

function fbCreateInputText($id, $name, $value='', $size='10', $maxlength='255', $addttext='')
	{
  	$value = cms_htmlentities($value);
  	$id = cms_htmlentities($id);
  	$name = cms_htmlentities($name);
  	$size = cms_htmlentities($size);
  	$maxlength = cms_htmlentities($maxlength);

$value = str_replace('"', '"', $value);

$text = '<input type="text" name="'.$id.$name.'" value="'.$value.'" size="'.$size.'" maxlength="'.$maxlength.'"';
  	if ($addttext != '')
    	{
      	$text .= ' ' . $addttext;
    	}
  	$text .= " />\n";
  	return $text;
	}

} // End of Class

# vim:ts=4 sw=4 noet
?>