function testFormIsInValidIfTimeStampExpires()
{
// GET
$form = new T_Form_Post('test', 'label');
$form->setForward(new T_Url('http', 'example.com'));
$env = $this->getEnvironment('GET');
$filter = new T_Form_PostHandler($form, $env, new T_Filter_RepeatableHash(), 'lock', -1);
// tiemstamp of -1 means form has already run out!!
$filter->preFilter($response = new T_Test_ResponseStub());
// add checking inputs
$filter->postFilter($response);
$post = $this->getActionSaltTimeoutAndLockArray($form);
// POST
$form = new T_Form_Post('test', 'label');
$form->setForward(new T_Url('http', 'example.com'));
$env = $this->getEnvironment('POST', $post);
$filter = new T_Form_PostHandler($form, $env, new T_Filter_RepeatableHash(), 'lock');
$filter->preFilter($response = new T_Test_ResponseStub());
$this->assertTrue($form->isPresent(), 'form is present');
$this->assertFalse($form->isValid(), 'form is NOT valid');
}
$email->attachFilter(new T_Validate_Email());
$fieldset->addChild($email);
$fieldset = new T_Form_Fieldset('prev_jobs', 'Your Previous Jobs');
$form->addChild($fieldset);
$repeated = new T_Form_Repeated('jobs', 'Add Another Job', 1, 6);
$repeated->addChild(new T_Form_Text('title', 'Title'));
$repeated->addChild(new T_Form_Text('company', 'Company'));
$start = new T_Form_Text('start', 'Start Date');
$start->setHelp('Enter date in format dd/mm/yyyy');
$start->setOptional()->attachFilter(new T_Validate_UnixDate('d|m|y'));
$repeated->addChild($start);
$fieldset->addChild($repeated);
$skills = new T_Form_TextArea('skills', 'Additional Info');
$skills->setOptional()->setHelp('Describe any additional career achievements, etc.');
$fieldset->addChild($skills);
$form->setForward($env->getRequestUrl());
// VALIDATE FORM
if ($env->isMethod('POST')) {
$form->validate($env->input('POST'));
}
// ACTION FORM
if ($form->isPresent() && $form->isValid()) {
$f = new T_Filter_Xhtml();
// action (e.g. email, etc.)
echo '<h2>CV for <a href="mailto:', $form->search('email')->getValue($f), '">', $form->search('name')->getValue($f), '</a></h2>';
foreach ($form->search('jobs') as $job) {
$date = $job->search('start');
if ($date->isPresent()) {
$date = ' (from ' . date('d-m-Y', $date->getValue()) . ')';
} else {
$date = null;
/**
* Pre-filter actions any submission, or prepares the form.
*
* @param T_Response $response encapsulated response to filter
*/
protected function doPreFilter(T_Response $response)
{
$t_field = $this->form->getAlias() . '_timeout';
$l_field = $this->form->getAlias() . '_thread_lock';
$s_field = $this->form->getAlias() . '_salt';
// prepare form:
// (a) add thread lock if required
// (b) add timeout
$timeout = new T_Form_Hidden($t_field, $this->timeout + time());
$this->form->addChild($timeout);
if ($this->lock_to) {
$lock_to = new T_Form_Hidden($l_field, $this->lock_to);
$this->form->addChild($lock_to);
}
// process form if is POST:
if ($this->env->isMethod('POST')) {
try {
// create salt field and validate to get salt
$salt = new T_Form_Hidden($s_field, null);
if ($salt->isSubmitted($this->env->input('POST'))) {
$salt->validate($this->env->input('POST'));
}
// salt form and validate
if ($salt->isPresent() && $salt->isValid()) {
$salt = $salt->getValue();
$this->form->setFieldnameSalt($salt, $this->hash);
if ($this->form->isSubmitted($this->env->input('POST'))) {
$this->form->validate($this->env->input('POST'));
}
}
// check timeout and thread lock
if ($this->form->isPresent() && $this->form->isValid()) {
// check timeout
$timeout = $this->form->search($t_field)->getValue();
if ($timeout < time()) {
$msg = 'This form has expired. Please submit the form ' . 'again to complete your request.';
throw new T_Exception_Filter($msg);
}
// check lock thread
if ($this->lock_to) {
$lock_to = $this->form->search($l_field)->getValue();
if (strcmp($lock_to, $this->lock_to) !== 0) {
$msg = 'A technical error occurred at our end, sorry. ' . 'Please submit the form again.';
throw new T_Exception_Filter($msg);
}
}
}
} catch (T_Exception_Filter $e) {
$this->form->setError(new T_Form_Error($e->getMessage()));
}
}
// ready form for redisplay (remember an error may be added in the POST
// method so make even a valid form ready for display).
// (a) Set form forward as same page
// (b) Salt form and add salt hidden input
// (c) Reset timeout from now
$this->form->setForward($this->env->getRequestUrl()->setParameters($this->env->input('GET')->uncage()));
$salt = uniqid(rand(), true);
$this->form->setFieldnameSalt($salt, $this->hash);
$this->form->addChild(new T_Form_Hidden($s_field, $salt));
// note that the salt hidden input is added *after* the form is
// salted as this input needs to be plain.
$this->form->search($t_field)->setValue($this->timeout + time());
}
