$form->makeReadOnly(); } if ($trial->record->isSigned() || $trial->record->isPreSigned()) { $form->disableForm(); } } $form->addClass('crf'); $form->addInput('hidden', 'page', $trial->getPage()); $form->addInput('hidden', 'link_id', $link_id); $_SESSION['csrfToken'] = $token = base64_encode(openssl_random_pseudo_bytes(32)); $form->addInput('hidden', 'csrfToken', $token); $centre = new Centre($trial->record->getCentre()); if ($centre->isLocked() && !$trial->user->isCentralAdmin()) { $form->disableForm(); } if ($centre->getID() !== $user->getCentre() && !$trial->user->isCentralAdmin()) { $form->disableForm(); } if ($page !== 'audit') { echo $form->writeHTML(); } if ($trial->getSubPage()) { echo "</div>"; } echo "</div>"; echo "</div>"; echo "</div>"; if ($page != 'signpt') { echo <<<_END <div id="flagForm" class="modal hide fade"> <div class="modal-header">