AnonymousFox

/home/develito/httpdocs/components/com_visforms/controllers/visforms.php

<?php
/**
 * Visforms default controller
 *
 * @author       Aicha Vack
 * @package      Joomla.Site
 * @subpackage   com_visforms
 * @link         http://www.vi-solutions.de
 * @license      GNU General Public License version 2 or later; see license.txt
 * @copyright    2012 vi-solutions
 * @since        Joomla 1.6
 */

// no direct access
defined('_JEXEC') or die('Restricted access');

class VisformsControllerVisforms extends JControllerLegacy
{
	public function captcha() {
		require_once JPATH_ROOT ."/components/com_visforms/captcha/securimage.php";
		$app = JFactory::getApplication();
		$context = $app->input->getCmd('context', '');
		$model = $this->getModel('visforms', '', array('context' => $context));
		$options = array();
		// only try to set options if we have an id parameter in query else we use the captcha default options
		$formid = $this->input->get('id', null);
		if (!empty($formid)) {
			$visform = $model->getForm();
			foreach ($visform->viscaptchaoptions as $name => $value) {
				// make names shorter and set all captchaoptions as properties of form object
				$options[$name] = $value;
			}
		}
		$app->setUserState('com_visforms.' . $visform->context, null);
		$img = new Securimage($options);
		$img->namespace = 'form' . $this->input->getInt('id', 0);
		$img->ttf_file = JPATH_ROOT . "/components/com_visforms/captcha/elephant.ttf";
		$img->show();
	}

public function sendVerficationMail() {
		$app = JFactory::getApplication();
		if (!$this->checkAjaxSessionToken()) {
			header('HTTP/1.1 403 Forbidden');
			echo JText::_('JINVALID_TOKEN');
			$app->close();
		}
		require_once JPATH_ROOT . '/components/com_visforms/lib/mail/verification.php';
		$verification = new VisformsMailVerification();
		// clear buffer
		$buffer = ob_get_contents();
		ob_clean();
		echo $verification->sendVerificationMail();
		$app->close();
	}

public function checkVerificationCode() {
		$app = JFactory::getApplication();
		if (!$this->checkAjaxSessionToken()) {
			echo '0';
			$app->close();
		}
		$verificationMail = $app->input->post->get('verificationAddr', '', 'STRING');
		$code = $app->input->post->get('code', '', 'STRING');
		$valide = VisformsValidate::validate('verificationcode', array('value' => $code, 'verificationAddr' => $verificationMail));
		// clear buffer
		$buffer = ob_get_contents();
		ob_clean();
		echo (empty($valide)) ? '0' : '1';
		$app->close();
	}

public function reloadOptionList() {
		$app = JFactory::getApplication();
		// disable ajax request if we are in Yootheme Builder
		// form has hidden input previewOnly with value 1
		$previewOnly = $app->input->get('previewOnly', 0, 'int');
		if ($previewOnly) {
			$app->close();
		}
		if (!$this->checkAjaxSessionToken()) {
			header('HTTP/1.1 403 Forbidden');
			echo JText::_('JINVALID_TOKEN');
			$app->close();
		}
		$reloadFieldId = $app->input->get('reloadId', 0, 'int');
		$context = $this->getModel()->getContext();
		$db = JFactory::getDbo();
		$query = $db->getQuery(true);
		$query->select($db->qn(array('typefield', 'defaultvalue', 'uniquevaluesonly')))
			->from($db->qn('#__visfields'))
			->where($db->qn('id') . ' = ' . $reloadFieldId)
			->where($db->qn('published') . ' = ' . 1);
		try {
			$db->setQuery($query);
			$field = $db->loadObject();
		}
		catch (RuntimeException $e) {
			header('HTTP/1.1 400 Bad Request');
			echo $e->getMessage();
			$app->close();
		}
		if ($field) {
			$defaultValues = VisformsHelper::registryArrayFromString($field->defaultvalue);
			$name = 'f_' .$field->typefield . '_sql';
			$sql = $defaultValues[$name];
			$options = JHtmlVisformsselect::getOptionsFromSQL($sql, $context);
			$return = array();
			if (!empty($defaultValues['f_selectsql_render_as_datalist'])) {
				foreach ($options as $option) {
					$return[] = '<tr>';
					$return[] = '<td>';
					$return[] = $option['label'];
					$return[] = '</td>';
					$return[] = '</tr>';
				}
			}
			else {
				$chooseValueText = (empty($defaultValues['f_selectsql_customselectvaluetext'])) ? JText::_('CHOOSE_A_VALUE') : $defaultValues['f_selectsql_customselectvaluetext'];
				if ((empty($defaultValues['f_selectsql_attribute_multiple']))
					&& (empty($defaultValues['f_selectsql_attribute_size']))) {
					$return[] = '<option value="" selected>' . $chooseValueText . '</option>';
				}
				if (!empty($options)) {
					$usedOptsValues = array();
					if (!empty($field->uniquevaluesonly)) {
						$fid = $app->input->post->get('postid', 0, 'cmd');
						$cid = $app->input->get('cid', 0, 'cmd');
						$usedOpts = JHtml::_('visformsselect.getStoredUserInputs', $reloadFieldId, $fid, $cid);
						// technicly radiofields can only have one value stored in db
						// but for sake of less if then else code we treat them equally to selects and multicheckboxes, which can have multiselction
						if (!empty($usedOpts)) {
							foreach ($usedOpts as $usedOpt) {
								$usedOptValues = JHtmlVisformsselect::explodeMsDbValue($usedOpt);
								foreach ($usedOptValues as $usedOptValue) {
									$usedOptsValues[] = $usedOptValue;
								}
							}
						}
					}
					foreach ($options as $option) {
						$disabled = (in_array($option['value'], $usedOptsValues)) ? 'disabled' : '';
						$return[] = '<option value="' . $option['value'] . '" ' . $disabled . '>' . $option['label'] . '</option>';
					}
				}
			}
		}
		else {
			header('HTTP/1.1 400 Bad Request');
			echo JText::_('COM_VISFORMS_RELOAD_OPTION_LIST_FIELD_NOT_FOUND');
			$app->close();
		}
		// clear buffer
		$buffer = ob_get_contents();
		ob_clean();
		echo implode('', $return);
		$app->close();
	}

protected function checkAjaxSessionToken() {
		$token = JSession::getFormToken();
		$dataToken = JFactory::getApplication()->input->get($token, null, 'cmd');
		if ((is_null($dataToken)) || !((int) $dataToken === 1)) {
			return false;
		}
		return true;
	}

public function send() {

jimport('joomla.filesystem.folder');
		$model = $this->getModel('visforms');
		$visform = $model->getForm();
		// the display state is use in the field.php function setQueryValue in order to decide if url params from a get request should be stored in the session
		// url params (from get) are only stored if $displayStateIsNew and not in an edit view task
		// if we are in the send task, make sure, the display state is set to $displayStateIsRedisplay before any further actions are performed
		$this->setDisplayState($visform);
		$additionalSupportedFieldTypes = $this->input->post->get('addSupportedFieldType', null, 'array');
		if (!empty($additionalSupportedFieldTypes)) {
			$filter = JFilterInput::getInstance();
			foreach ($additionalSupportedFieldTypes as $add) {
				$clean = $filter->clean($add, 'cmd');
				if (!empty($clean)) {
					$model->addSupportedFieldType($clean);
				}
			}
		}
		$app = JFactory::getApplication();
		$return = $this->input->post->get('return', null, 'cmd');
		//if we come from module or plugin we remove a potential page cache created by system cache plugin of the page with the form
		$url = isset($return) ? JHTMLVisforms::base64_url_decode($return) : '';
		if (!empty($url)) {
			$cache = JFactory::getCache('page');
			$folder = JPath::clean(JPATH_CACHE . '/page');
			// clean page cache, used by system cache plugin
			if (JFolder::exists($folder)) {
				$cacheresult = $cache->remove($url, 'page');
			}
		}
		// Total length of post back data in bytes.
		$contentLength = $this->input->server->get('CONTENT_LENGTH', 0, 'INT');
		// Maximum allowed size of post back data in MB.
		$postMaxSize = VisformsmediaHelper::toBytes(ini_get('post_max_size'));
		// Maximum allowed size of script execution in MB.
		$memoryLimit = VisformsmediaHelper::toBytes(ini_get('memory_limit'));
		if (!(isset($visform->errors))) {
			$visform->errors = array();
		}
		// Check for the total size of post back data.
		if (($postMaxSize > 0 && $contentLength > $postMaxSize)
			|| ($memoryLimit != -1 && $contentLength > $memoryLimit)) {
			array_push($visform->errors, JText::_('COM_VISFORMS_ERROR_WARNUPLOADTOOLARGE'));
			return $this->getErrorRedirect($url);
		}
		$fields = $model->getValidatedFields();
		if ((!(count($_POST) > 0)) || (!isset($_POST['postid'])) || ($_POST['postid'] != $visform->id)) {
			array_push($visform->errors, JText::_('COM_VISFORMS_INVALID_POST'));
			// Show form again, keep values already typed in
			if ($url != "") {
				$this->setRedirect(JRoute::_($url, false));
				return false;
			} else {
				$this->display();
				return false;
			}
		}
		// include plugin spambotcheck
		if (isset($visform->spambotcheck) && $visform->spambotcheck == 1) {
			JPluginHelper::importPlugin('visforms');
			$results = $app->triggerEvent('onVisformsSpambotCheck', array('com_visforms.visform'));
			foreach ($results as $result) {
				if ($result === true) {
					array_push($visform->errors, JText::_('PLG_VISFORMS_SPAMBOTCHECK_USER_LOGIN_SPAM_TXT'));
					//Show form again, keep values already typed in
					return $this->getErrorRedirect($url);
				}
			}
		}
		// Check that data is ok, in case that javascript may not work properly
		foreach ($fields as $field) {
			if (isset($field->isValid) && $field->isValid == false) {
				//we have at least one invalid field
				//Show form again, keep values already typed in
				return $this->getErrorRedirect($url);
			}
		}
		// Captcha ok?	
		if ($visform->captcha == 1) {
			require_once JPATH_ROOT ."/components/com_visforms/captcha/securimage.php";
			$responseField = $visform->context . 'viscaptcha_response';
			$img = new Securimage();
			$img->namespace = 'form' . $this->input->getInt('id', 0, 'int');
			$valid = $img->check($_POST[$responseField]);
			// we may deal with an old version of vfformview plugin and the form id is missing in the request, so we fall back on form0 as namespace
			if ($valid == false) {
				$img = new Securimage();
				$img->namespace = 'form0';
				$valid = $img->check($_POST[$responseField]);
			}

if ($valid == false) {
				array_push($visform->errors, JText::_('COM_VISFORMS_RECAPTCHA_ERROR') . ' ' . JText::_("COM_VISFORMS_CODE_INVALID"));
				//Show form again, keep values already typed in
				return $this->getErrorRedirect($url);
			}
		}
		if ($visform->captcha == 2) {
			JPluginHelper::importPlugin('captcha');
			try {
				$res = $app->triggerEvent('onCheckAnswer');
			}
			catch (RuntimeException $e) {
				array_push($visform->errors, JText::_('COM_VISFORMS_RECAPTCHA_ERROR') . ' ' . $e->getMessage());
				//Show form again, keep values already typed in
				return $this->getErrorRedirect($url);
			}
			if (!$res[0]) {
				array_push($visform->errors, JText::_('COM_VISFORMS_RECAPTCHA_ERROR') . ' ' . JText::_("COM_VISFORMS_CODE_INVALID"));
				//Show form again, keep values already typed in
				return $this->getErrorRedirect($url);
			}
		}

JSession::checkToken() or jexit(JText::_('JINVALID_TOKEN'));

// trigger before save event
		JPluginHelper::importPlugin('visforms');
		$onBeforeFormSaveResults = $app->triggerEvent('onVisformsBeforeFormSave', array('com_visforms.form', $visform, $fields));
		if ((!empty($onBeforeFormSaveResults)) && is_array($onBeforeFormSaveResults)) {
			foreach ($onBeforeFormSaveResults as $onBeforeFormSaveResult) {
				if ($onBeforeFormSaveResult === false) {
					return $this->getErrorRedirect($url, $visform->id);
				}
			}
		}
		//save data to db
		try {
			$model->saveData();
		}
		catch (RuntimeException $e) {
			// ToDo Remove Uploaded files? use this event
			$app->triggerEvent('onVisformsAfterFormSaveError', array('com_visforms.form', $visform, $fields));
			$message = $e->getMessage();
			if (empty($message)) {
				$fields = $model->reloadFields();
			}
			// we get a custom error message set by visforms
			array_push($visform->errors, $e->getMessage());
			// Show form again, keep values already typed in
			return $this->getErrorRedirect($url, $visform->id);
		}

// trigger after save event
		$app->triggerEvent('onVisformsAfterFormSave', array('com_visforms.form', $visform, $fields));
		// trigger before success action event, allow to override properties in $visforms
		$app->triggerEvent('onVisformsBeforeSuccessAction', array('com_visforms.form', $visform, $fields));
		//clear user state
		$app->setUserState('com_visforms.' . $visform->context, null);
		$app->setUserState('com_visforms.urlparams.' . $visform->context, null);

// redirect to specific url no message!
		//get potential custom redirect urls from post
		$rawPlgRedirectUrl = $this->input->post->get('redirecturl', null, 'cmd');
		$plgRedirectUrl = isset($rawPlgRedirectUrl) ? JHTMLVisforms::base64_url_decode($rawPlgRedirectUrl) : '';
		if (!empty($visform->allow_content_plugin_custom_redirect) && !empty($plgRedirectUrl)) {
			$visform->redirecturl = $plgRedirectUrl;
		}
		if (!empty($visform->redirecturl)) {
			$tmpUrl = new JUri($visform->redirecturl);
			$query = $tmpUrl->getQuery(true);
			$urlParams = $model->getRedirectParams($fields, $query, $visform->context);
			if (!empty($urlParams)) {

$tmpUrl->setQuery($urlParams);
				$visform->redirecturl = $tmpUrl->toString();
			}
			$this->setRedirect(JRoute::_($visform->redirecturl, false));
			return true;
			//no redirect to specific url, a result message is displayed somewhere
		} 
		else {
			$msg = $this->createMessageText($visform, $url);
			if (!empty($visform->redirect_to_previous_page)) {
				if (empty($visform->message_position)) {
					//Joomla! message does not trigger content plugin. So we do it here, although the result may no be completely ok.
					// content plugins which need to add custom css or javascript to page cannot be used in this case!
					$msg = JHtml::_('content.prepare', $msg);
					$app->enqueueMessage($msg);
				} 
				else {
					$app->setUserState('com_visforms.messages.' . $visform->context, $msg);
				}
				if (!empty($url)) {
					$this->setRedirect(JRoute::_($url, false));
				} 
				else {
					$this->setRedirect(JRoute::_(JURI::base(), false));
				}
				return true;
			} 
			else {
				// no textresult or no menuitem for form
				$correspondingFormMenuItem = $model->checkFormViewMenuItemExists($visform->id);
				if (empty($visform->textresult) || empty($correspondingFormMenuItem)) {
					$app->enqueueMessage($msg);
					$this->setRedirect(JRoute::_(JURI::base(), false));
					return true;
				} 
				else {
					//context must be context of visforms view via menu item!
					$context = 'form' . $visform->id;
					$app->setUserState('com_visforms.messages.' . $context, $msg);
					if ($tmpl = $this->input->get('tmpl', null, 'cmd')) {
						$tmpl = "&tmpl=" . $tmpl;
					}
					$this->setRedirect(JRoute::_('index.php?option=com_visforms&view=visforms&layout=message&id=' . $visform->id . '&Itemid=' . $correspondingFormMenuItem . $tmpl, false));
					return true;
				}
			}
		}
	}

protected function getErrorRedirect($url = '', $formid = 0) {
		if ($url != '') {
			$this->setRedirect(JRoute::_($url, false));
		} 
		else {
			$this->display();
		}
		return false;
	}

//the display state is use in the field.php function setQueryValue in order to decide if url params from a get request should be stored in the session
	//url params (from get) are only stored if $displayStateIsNew
	protected function setDisplayState($visform) {
		if (isset($visform->displayState) && $visform->displayState === VisformsModelVisforms::$displayStateIsNew) {
			$visform->displayState = VisformsModelVisforms::$displayStateIsRedisplay;
			JFactory::getApplication()->setUserState('com_visforms.' . $visform->context, $visform);
		}
	}

protected function createMessageText($visform, $returnUrl) {
		$returnLink = (empty($visform->redirect_to_previous_page)) ? $this->createReturnLinkHtml($visform, $returnUrl) : '';
		$pdfDownloadLink = $this->createPdfDownloadLink($visform);
		if (empty($visform->textresult)) {
			return JText::_('COM_VISFORMS_FORM_SEND_SUCCESS') . $pdfDownloadLink . $returnLink;
		}
		$message = JHtmlVisforms::replacePlaceholder($visform, $visform->textresult);
		return $message . $pdfDownloadLink . $returnLink;
	}

protected function createReturnLinkHtml($visform, $returnUrl) {
		if (empty($returnUrl)) {
			return '';
		}
		$showReturnLink = (!empty($visform->textresult_previouspage_link)) ? $visform->textresult_previouspage_link : 0;
		if (empty($showReturnLink)) {
			return '';
		}
		$linkText = (!empty($visform->return_link_text)) ? $visform->return_link_text : JText::_('COM_VISFORMS_RETURN_TO_PREVIOUS_PAGE_LINK_TEXT');
		return '<p><a href="' . JRoute::_($returnUrl) . '" title="' . $linkText . '">' . $linkText . '</a></p>';
	}

protected function createPdfDownloadLink($visform) {
		if (empty($visform->display_pdf_download_link) || empty($visform->pdf_download_link_template)) {
			return '';
		}
		JFactory::getApplication()->setUserState('visforms'. $visform->id . '.pdf.requestdatas', $visform);
		$pdfLink = htmlspecialchars(((!empty($base = Juri::base()) ? Juri::base() : '') . 'index.php?option=com_visforms&view=visformsdata&layout=data&task=visformsdata.renderPdfFromRequestData&id='.$visform->id . '&' . JSession::getFormToken() . '=1'));
		$linkText = (!empty($visform->pdf_link_text)) ? $visform->pdf_link_text : JText::_('COM_VISFORMS_DOWNLOAD_AS_PDF_TEXT');
		return '<p><a href="' . JRoute::_($pdfLink) . '" title="' . $linkText . '">' . $linkText . '</a></p>';
	}
}