function formbuilder_process_form($form_id, $data = false)
{
global $wpdb;
if (!defined('SID')) {
define('SID', '');
}
$formBuilderTextStrings = formbuilder_load_strings();
$siteurl = get_option('siteurl');
$relative_path = str_replace(ABSOLUTE_PATH, "/", FORMBUILDER_PLUGIN_PATH);
//$page_path = $siteurl . $relative_path;
$page_path = plugin_dir_url(__DIR__);
// Pull the form data from the db for the selected form ID.
$sql = "SELECT * FROM " . FORMBUILDER_TABLE_FORMS . " WHERE id='{$form_id}';";
$results = $wpdb->get_results($sql, ARRAY_A);
if ($results) {
$form = $results[0];
}
if (!isset($form) or !$form) {
return "";
}
// Pass the form through a filter that converts all fields to proper htmlentities.
$form = formbuilder_array_htmlentities($form);
$allFields = array();
// If no form action is defined, use a blank string. (indicates standard process)
if (!isset($form['action'])) {
$form['action'] = "";
}
$module_status = false;
// Load the Form Action module, if different than the standard.
if ($form['action'] != "") {
if (include_once FORMBUILDER_PLUGIN_PATH . "modules/" . $form['action']) {
$startup_funcname = "formbuilder_startup_" . preg_replace("#\\..+#is", "", $form['action']);
$processor_funcname = "formbuilder_process_" . preg_replace("#\\..+#is", "", $form['action']);
if (function_exists("{$startup_funcname}")) {
$module_status = $startup_funcname($form);
}
}
} else {
$module_status = true;
}
if (!isset($form['action_target'])) {
$form['action_target'] = "";
}
$formID = clean_field_name($form['name']);
$formCSSID = "formBuilderCSSID{$formID}";
if (!$form['action_target'] or $form['action_target'] == "") {
$form['action_target'] = $_SERVER['REQUEST_URI'] . "#{$formCSSID}";
}
$session_id = session_id();
$sessName = session_name();
if (SID != "" and strpos($form['action_target'], $sessName) === false) {
if (strpos($form['action_target'], "?") === false) {
$form['action_target'] .= "?" . htmlspecialchars(SID);
} else {
$form['action_target'] .= "&" . htmlspecialchars(SID);
}
}
if ($module_status !== false) {
// Retrieve the tags for the form and use as additional CSS classes in order to allow forms with specific tags to use alternate stylesheets.
$formTags = array();
$sql = "SELECT * FROM " . FORMBUILDER_TABLE_TAGS . " WHERE form_id = '{$form_id}' ORDER BY tag ASC;";
$results = $wpdb->get_results($sql, ARRAY_A);
foreach ($results as $r) {
$formTags[] = preg_replace('/[^a-z0-9_-]/isU', '', $r['tag']);
}
$formTags = implode(' ', $formTags);
$formDisplay = "";
$post_errors = '';
$formDisplay = apply_filters('formbuilder_prepend_formDisplay', $formDisplay);
$formDisplayID = "formBuilder{$formID}";
$formDisplayID = apply_filters('formbuilder_formDisplayID', $formDisplayID);
$formDisplay .= "\n<form class='formBuilderForm form-horizontal {$formTags}' id='{$formDisplayID}' " . "action='" . $form['action_target'] . "' method='" . strtolower($form['method']) . "' onsubmit='return fb_disableForm(this);'>" . "<input type='hidden' name='formBuilderForm[FormBuilderID]' value='" . $form_id . "' />";
$formDisplay = apply_filters('formbuilder_formDisplay_formStart', $formDisplay);
// Paged form related controls for CSS and Javascript
$page_id = 1;
$new_page = false;
$formDisplay .= "<div id='formbuilder-{$form_id}-page-{$page_id}'>";
$formDisplay .= '<script type="text/javascript">
function toggleVis(boxid)
{
if(document.getElementById(boxid).isVisible == "true")
{
toggleVisOff(boxid);
}
else
{
toggleVisOn(boxid);
}
}
function toggleVisOn(boxid)
{
document.getElementById(boxid).setAttribute("class", "formBuilderHelpTextVisible");
document.getElementById(boxid).isVisible = "true";
}
function toggleVisOff(boxid)
{
document.getElementById(boxid).setAttribute("class", "formBuilderHelpTextHidden");
document.getElementById(boxid).isVisible = "false";
}
</script>';
// The $module_status variable is considered to be an error, if it contains a string.
if (is_string($module_status)) {
$formDisplay .= $module_status;
}
// Get the fields for the form.
$sql = "SELECT * FROM " . FORMBUILDER_TABLE_FIELDS . " WHERE form_id = '" . $form['id'] . "' ORDER BY display_order ASC;";
$related = $wpdb->get_results($sql, ARRAY_A);
// Filter the fields as needed.
$related = apply_filters('formbuilder_filter_fields_processing', $related);
$formDisplay = apply_filters('formbuilder_formDisplay_post_field_filter', $formDisplay);
$submit_button_set = false;
// Check for duplicate form submissions.
if (isset($_POST['formBuilderForm']['FormBuilderID']) and $_POST['formBuilderForm']['FormBuilderID'] == $form_id) {
$duplicate_check_hash = $form_id . formbuilder_get_hash();
$old_hash = get_option('formBuilder_duplicate_hash');
if ($duplicate_check_hash == $old_hash) {
$post_errors = true;
$tmp_msg = "\n<div class='formBuilderFailure alert alert-error'><h4>" . $formBuilderTextStrings['form_problem'] . "</h4><p>" . $formBuilderTextStrings['already_submitted'] . "</p>";
$tmp_msg .= "\n</div>\n" . $formDisplay;
$formDisplay = $tmp_msg;
} else {
update_option('formBuilder_duplicate_hash', $duplicate_check_hash);
}
}
// Begin going through each field on the form and checking it against the submitted data.
if (count($related) > 0) {
foreach ($related as $field) {
$error_msg = "";
$divClass = "control-group formBuilderField " . preg_replace("#[^a-z0-9]#isU", "-", $field['field_type']);
$divID = "formBuilderField" . clean_field_name($field['field_name']);
$lb = "<br/>";
$visibility = "";
// Define short versions of the more used form variables.
$field['name'] = "formBuilderForm[" . $field['field_name'] . "]";
// If the field type is a checkbox with no predefined field value, give it a field value of "checked".
if ($field['field_type'] == "checkbox" and $field['field_value'] == "") {
$field['field_value'] = "checked";
}
if ($field['field_type'] == "required checkbox" and $field['field_value'] == "") {
$field['field_value'] = "checked";
}
// Fill unset POST vars with empty strings. Not sure what this was used for, but it is now disabled so as not to mess with other plugins that may also check _POST data. (James: Oct. 19, 2011)
//if(!isset($_POST['formBuilderForm'][$field['field_name']])) $_POST['formBuilderForm'][$field['field_name']] = "";
// Determine what submitted value to give to the field values.
if ($field['field_type'] == 'system field') {
// Manually assign value to system fields before anything else.
$field['value'] = $field['field_value'];
} elseif ($field['field_type'] == 'wp user id') {
// Manually assign value to system fields before anything else.
$wpuser = wp_get_current_user();
if ($wpuser->id != 0) {
$field['value'] = $wpuser->user_login;
}
$wpuser = null;
} elseif (isset($_POST['formBuilderForm']['FormBuilderID']) and $_POST['formBuilderForm']['FormBuilderID'] == $form_id) {
// If there is a POST value, assign it to the field.
if (!isset($_POST['formBuilderForm'][$field['field_name']])) {
$field['value'] = '';
} else {
$field['value'] = htmlentities(stripslashes($_POST['formBuilderForm'][$field['field_name']]), ENT_QUOTES, get_option('blog_charset'));
}
} elseif (isset($_GET[$field['field_name']])) {
// If there is a GET value, assign it to the field.
$field['value'] = htmlentities(stripslashes($_GET[$field['field_name']]), ENT_QUOTES, get_option('blog_charset'));
} else {
// Required passwords should not display the default field value.
if ($field['field_type'] != 'required password') {
// In this case, there is neither a POST nor a GET value, therefore we assign the field value to be whatever the default value was for the field.
$field['value'] = $field['field_value'];
} else {
$field['value'] = "";
}
}
// Validate POST results against validators.
if (isset($_POST['formBuilderForm']['FormBuilderID']) and $_POST['formBuilderForm']['FormBuilderID'] == $form_id) {
$duplicate_check_hash .= md5($field['value']);
if ($field['field_type'] == "spam blocker") {
// Check Spam Blocker for any submitted data.
if (trim($field['value']) != "") {
$post_errors = true;
}
} elseif ($field['field_type'] == "recipient selection") {
// Check to ensure we have been given a valid recipient selection
$options = explode("\n", $field['field_value']);
if (strpos($options[$field['value']], "|") !== false) {
list($option_value, $option_label) = explode("|", $options[$field['value']], 2);
} else {
$option_value = $option_label = $options[$field['value']];
}
if (!preg_match('#' . FORMBUILDER_PATTERN_EMAIL . '#isU', $option_value)) {
$error_msg = $field['error_message'];
$post_errors = true;
$missing_post_fields[$divID] = $field['field_label'];
}
} elseif ($field['field_type'] == "captcha field" and function_exists('imagecreate')) {
// Check CAPTCHA to ensure it is correct
if (isset($_SESSION['security_code']) and $_SESSION['security_code'] == $field['value'] && !empty($_SESSION['security_code'])) {
// Insert you code for processing the form here, e.g emailing the submission, entering it into a database.
unset($_SESSION['security_code']);
} else {
if (!isset($_SERVER['HTTP_COOKIE'])) {
$post_errors = true;
$missing_post_fields[$divID] = $formBuilderTextStrings['captcha_cookie_problem'];
} else {
// Insert your code for showing an error message here
$post_errors = true;
$error_msg = $field['error_message'];
$missing_post_fields[$divID] = $field['field_label'];
}
}
} elseif ($field['field_type'] == 'required password') {
if ($field['value'] != $field['field_value']) {
$post_errors = true;
if (!$field['error_message']) {
$field['error_message'] = __("The password you entered is incorrect.", 'formbuilder');
}
$error_msg = $field['error_message'];
$missing_post_fields[$divID] = $field['field_label'];
}
} else {
// Check the values of any other required fields.
if (!formbuilder_validate_field($field)) {
$error_msg = $field['error_message'];
$post_errors = true;
$missing_post_fields[$divID] = $field['field_label'];
}
}
}
// Prepopulate fields with user details if available
if ($field['value'] == "") {
$wpuser = wp_get_current_user();
if ($wpuser->ID != 0) {
// User is logged in. Prepopulate with data.
if (preg_match('#^(yourname|name|your_name|display_name|nickname)$#i', $field['field_name'], $regs)) {
$field['value'] = $wpuser->display_name;
}
if (preg_match('#^(firstname|first_name)$#i', $field['field_name'], $regs)) {
$field['value'] = $wpuser->first_name;
}
if (preg_match('#^(lastname|last_name)$#i', $field['field_name'], $regs)) {
$field['value'] = $wpuser->last_name;
}
if (preg_match('#^(email)$#i', $field['field_name'], $regs)) {
$field['value'] = $wpuser->user_email;
}
if (preg_match('#^(full_name|fullname)$#i', $field['field_name'], $regs)) {
$field['value'] = trim($wpuser->first_name . " " . $wpuser->last_name);
}
}
$wpuser = null;
}
// Display any necessary error msgs.
if ($error_msg) {
$formError = "<div class='formBuilderError'>{$error_msg}</div>";
} else {
$formError = "";
}
// Check for required fields, and change the class label details if necessary
if (isset($field['required_data']) and $field['required_data'] != "none" and $field['required_data'] != "") {
$formLabelCSS = "formBuilderLabelRequired control-label";
} else {
$formLabelCSS = "formBuilderLabel control-label";
}
// Determine if we need to show help text.
if ($field['help_text']) {
if (DEFINED('FORMBUILDER_HELPTEXT_LABEL')) {
$formHelp = "<div class='formBuilderHelpText help-block' id='formBuilderHelpText{$divID}'>" . $field['help_text'] . "</div>";
$formHelpJava = "<a href='javascript:;' " . "class='formBuilderHelpTextToggle' " . "onClick='toggleVis(\"formBuilderHelpText{$divID}\");' " . ">" . FORMBUILDER_HELPTEXT_LABEL . "</a>{$formHelp}";
} else {
$formHelp = "<div class='formBuilderHelpText help-block' id='formBuilderHelpText{$divID}'>" . $field['help_text'] . "</div>";
$formHelpJava = "<a href='javascript:;' " . "class='formBuilderHelpTextToggle' " . "onClick='toggleVis(\"formBuilderHelpText{$divID}\");' " . ">?</a>{$formHelp}";
}
} else {
$formHelpJava = "";
$formHelp = "";
}
// Display assorted form fields depending on the type of field.
switch ($field['field_type']) {
case "comments area":
$formLabel = "";
$formInput = "<div class='formBuilderCommentsField controls'>" . decode_html_entities($field['field_value'], ENT_NOQUOTES, get_option('blog_charset')) . "</div> {$formHelpJava}";
$divClass = "formBuilderComment";
break;
case "hidden field":
$formLabel = "";
$formInput = "<div class='formBuilderHiddenField controls'><input type='hidden' name='" . $field['name'] . "' value='" . $field['value'] . "' /></div>";
$divClass = "formBuilderHidden";
break;
case "small text area":
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " {$formHelpJava}</div>";
$formInput = "<div class='formBuilderSmallTextarea controls'><textarea name='" . $field['name'] . "' rows='4' cols='50' " . "id='field{$divID}' onblur=\"fb_ajaxRequest('" . $page_path . "php/formbuilder_parser.php', " . "'formid=" . $form['id'] . "&fieldid=" . $field['id'] . "&val='+document.getElementById('field{$divID}').value, 'formBuilderErrorSpace{$divID}')\" >" . $field['value'] . "</textarea></div>";
break;
case "large text area":
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " {$formHelpJava}</div>";
$formInput = "<div class='formBuilderLargeTextarea controls'><textarea name='" . $field['name'] . "' rows='10' cols='80' " . "id='field{$divID}' onblur=\"fb_ajaxRequest('" . $page_path . "php/formbuilder_parser.php', " . "'formid=" . $form['id'] . "&fieldid=" . $field['id'] . "&val='+document.getElementById('field{$divID}').value, " . "'formBuilderErrorSpace{$divID}')\" >" . $field['value'] . "</textarea></div>";
break;
case "password box":
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderInput controls'><input type='password' name='" . $field['name'] . "' value='" . $field['value'] . "' id='field{$divID}' onblur=\"fb_ajaxRequest('" . $page_path . "php/formbuilder_parser.php', 'formid=" . $form['id'] . "&fieldid=" . $field['id'] . "&val='+document.getElementById('field{$divID}').value, 'formBuilderErrorSpace{$divID}')\" /> {$formHelpJava}</div>";
break;
case "required password":
$formLabel = "<div class='formBuilderLabelRequired'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderInput controls'><input type='password' name='" . $field['name'] . "' value='' id='field{$divID}' /> {$formHelpJava}</div>";
break;
case "checkbox":
if (isset($_POST['formBuilderForm'][$field['field_name']]) and htmlentities(stripslashes($_POST['formBuilderForm'][$field['field_name']]), ENT_NOQUOTES, get_option('blog_charset')) == $field['field_value']) {
$selected = "checked";
} else {
$selected = "";
}
$formLabel = "<div class='{$formLabelCSS}'><label for='field{$divID}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </label></div>";
$formInput = "<div class='formBuilderInput controls'><input type='checkbox' name='" . $field['name'] . "' id='field{$divID}' value='" . $field['field_value'] . "' {$selected} /> <span class='formBuilderCheckboxDescription'>";
if ($field['field_value'] != "checked") {
$formInput .= "<label for='field{$divID}'>" . decode_html_entities($field['field_value'], ENT_NOQUOTES, get_option('blog_charset')) . "</label>";
}
$formInput .= "</span> {$formHelpJava}</div>";
break;
case "required checkbox":
if (isset($_POST['formBuilderForm'][$field['field_name']]) and htmlentities(stripslashes($_POST['formBuilderForm'][$field['field_name']]), ENT_NOQUOTES, get_option('blog_charset')) == $field['field_value']) {
$selected = "checked";
} else {
$selected = "";
}
$formLabel = "<div class='formBuilderLabelRequired'><label for='field{$divID}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </label></div>";
$formInput = "<div class='formBuilderInput controls'><input type='checkbox' name='" . $field['name'] . "' id='field{$divID}' value='" . $field['field_value'] . "' {$selected} /> <span class='formBuilderCheckboxDescription'>";
if ($field['field_value'] != "checked") {
$formInput .= "<label for='field{$divID}'>" . decode_html_entities($field['field_value'], ENT_NOQUOTES, get_option('blog_charset')) . "</label>";
}
$formInput .= "</span> {$formHelpJava}</div>";
break;
case "radio buttons":
$options = explode("\n", $field['field_value']);
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " {$formHelpJava}</div>";
$formInput = "<div class='formBuilderInput controls'>";
foreach ($options as $option_value => $roption) {
// Check for a pipe, and if it exists, split the value into value, label.
if (strpos($roption, "|") !== FALSE) {
list($option_original_value, $option_label) = explode("|", $roption, 2);
} else {
$option_label = $roption;
}
$option_label = trim(stripslashes($option_label));
$option_label = str_replace("<", "<", $option_label);
$option_label = str_replace(">", ">", $option_label);
if (isset($_POST['formBuilderForm'][$field['field_name']]) and htmlentities(stripslashes($_POST['formBuilderForm'][$field['field_name']]), ENT_QUOTES, get_option('blog_charset')) == $option_value) {
$selected = "checked";
} else {
$selected = "";
}
$formInput .= "<div class='formBuilderRadio'><label><input type='radio' name='" . $field['name'] . "' value='{$option_value}' {$selected} /> {$option_label}</label></div>";
}
$formInput .= "</div>";
break;
case "selection dropdown":
$options = explode("\n", $field['field_value']);
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderSelect controls'>\n<select name='" . $field['name'] . "'>";
foreach ($options as $option_value => $roption) {
// Check for a pipe, and if it exists, split the value into value|label.
if (strpos($roption, "|") !== FALSE) {
list($option_original_value, $option_label) = explode("|", $roption, 2);
} else {
$option_label = $roption;
}
$option_label = trim(stripslashes($option_label));
$option_label = str_replace("<", "<", $option_label);
$option_label = str_replace(">", ">", $option_label);
// Check to see if the posted data is the same as the value.
if (isset($_POST['formBuilderForm'][$field['field_name']]) and htmlentities(stripslashes($_POST['formBuilderForm'][$field['field_name']]), ENT_QUOTES, get_option('blog_charset')) == $option_value) {
$selected = "selected = 'selected'";
} elseif ($field['value'] == $option_value) {
$selected = "selected = 'selected'";
} else {
$selected = "";
}
$formInput .= "\n<option value='{$option_value}' {$selected}>{$option_label}</option>";
}
$formInput .= "\n</select>\n {$formHelpJava}</div>";
break;
case "captcha field":
if (function_exists('imagecreate')) {
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderInput controls'><div class='formBuilderCaptcha'>" . "<img src='" . FORMBUILDER_PLUGIN_URL . "captcha/display.php?" . SID . "' " . "alt='" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . "' />" . "<br/><input type='text' name='" . $field['name'] . "' value=''/> {$formHelpJava}</div></div>";
} else {
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderInput'>" . $formBuilderTextStrings['captcha_unavailable'] . "</div>";
}
break;
case "spam blocker":
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderInput controls'><input type='text' name='" . $field['name'] . "' value=''/> {$formHelpJava}</div>";
$divClass = get_option('formbuilder_spam_blocker');
break;
case "followup page":
$formLabel = "";
$formInput = "";
break;
case "recipient selection":
$formLabelCSS = "formBuilderLabelRequired";
$options = explode("\n", $field['field_value']);
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderSelect controls'>\n<select name='" . $field['name'] . "'>";
foreach ($options as $option_value => $roption) {
// Check for a pipe, and if it exists, split the value into value|label.
if (strpos($roption, "|") !== FALSE) {
list($option_original_value, $option_label) = explode("|", $roption, 2);
} else {
$option_label = $roption;
}
$option_label = trim(stripslashes($option_label));
$option_label = str_replace("<", "<", $option_label);
$option_label = str_replace(">", ">", $option_label);
// Check to see if the posted data is the same as the value.
if (isset($_POST['formBuilderForm'][$field['field_name']]) and htmlentities(stripslashes($_POST['formBuilderForm'][$field['field_name']]), ENT_QUOTES, get_option('blog_charset')) == $option_value) {
$selected = "selected = 'selected'";
} elseif ($field['value'] == $option_value) {
$selected = "selected = 'selected'";
} else {
$selected = "";
}
$formInput .= "\n<option value='{$option_value}' {$selected}>{$option_label}</option>";
}
$formInput .= "\n</select>\n {$formHelpJava}</div>";
break;
case "page break":
$new_page = true;
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderPageBreak'>";
$previous_page_insert = "";
if ($page_id > 1) {
$previous_page_insert = "<input type='button' name='formbuilder_page_break' value='" . $formBuilderTextStrings['previous'] . "' onclick=" . '" fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . $page_id . '\'); fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . ($page_id - 1) . '\'); "' . " />";
}
$formInput .= "{$previous_page_insert} <input type='button' name='formbuilder_page_break' value='" . $formBuilderTextStrings['next'] . "' onclick=" . '" fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . $page_id . '\'); fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . ($page_id + 1) . '\'); "' . " />" . "</div>";
$page_id++;
break;
case "reset button":
$formLabel = "";
$formInput = "<div class='formBuilderSubmit controls'>{$previous_page_insert}<input type='reset' name='" . $field['name'] . "' value='" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . "' /> {$formHelpJava}</div>";
break;
case "submit button":
$formLabel = "";
$previous_page_insert = "";
if ($page_id > 1) {
$previous_page_insert = "<input type='button' name='formbuilder_page_break' value='" . $formBuilderTextStrings['previous'] . "' onclick=" . '" fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . $page_id . '\'); fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . ($page_id - 1) . '\'); "' . " />";
}
$formInput = "<div class='formBuilderSubmit controls'>{$previous_page_insert}<input type='submit' name='" . $field['name'] . "' value='" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . "' /> {$formHelpJava}</div>";
$submit_button_set = true;
break;
case "submit image":
$formLabel = "";
$previous_page_insert = "";
if ($page_id > 1) {
$previous_page_insert = "<input type='button' name='formbuilder_page_break' value='" . $formBuilderTextStrings['previous'] . "' onclick=" . '" fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . $page_id . '\'); fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . ($page_id - 1) . '\'); "' . " /> {$formHelpJava}";
}
$formInput = "<div class='formBuilderSubmit controls'>{$previous_page_insert}<input type='image' name='" . $field['name'] . "' src='" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . "' value='" . $field['value'] . "' alt='" . $field['value'] . "' /></div>";
$submit_button_set = true;
break;
case "datestamp":
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
if (isset($calendar_loaded) and $calendar_loaded == true) {
$calendar_loading_code = "";
} else {
$calendar_loading_code = "<script src=\"" . $page_path . "js/calendar.js\" type=\"text/javascript\"></script>";
$calendar_loaded = true;
}
$formInput = "<div class='formBuilderDateStamp controls'><input type='text' name='" . $field['name'] . "' value='" . $field['value'] . "' id='field{$divID}' />\n\t\t\t\t\t\t\t\t{$calendar_loading_code}\n\t\t\t\t\t\t\t\t<script type=\"text/javascript\">\n\t\t\t\t\t\t\t\tfb_calendar.set(\"field{$divID}\");\n\t\t\t\t\t\t\t\t</script> {$formHelpJava}\n\t\t\t\t\t\t\t</div>";
break;
case "unique id":
$unique = uniqid();
$formLabel = "";
$formInput = "<div class='formBuilderHiddenField'><input type='hidden' name='" . $field['name'] . "' value='" . uniqid() . "' /></div>";
$divClass = "formBuilderHidden";
break;
case "system field":
$formLabel = "";
$formInput = "";
break;
case "wp user id":
$formLabel = "";
$formInput = "";
break;
default:
$formLabel = "<div class='{$formLabelCSS}'>" . decode_html_entities($field['field_label'], ENT_NOQUOTES, get_option('blog_charset')) . " </div>";
$formInput = "<div class='formBuilderInput controls'><input type='text' " . "name='" . $field['name'] . "' " . "value='" . $field['value'] . "' " . "id='field{$divID}' " . "onblur=\"fb_ajaxRequest('" . $page_path . "php/formbuilder_parser.php', 'formid=" . $form['id'] . "&fieldid=" . $field['id'] . "&val='+document.getElementById('field{$divID}').value, 'formBuilderErrorSpace{$divID}')\"/> {$formHelpJava}</div>";
break;
}
// Additional processing of form fields
$formFieldDisplay = '';
$formFieldDisplay = apply_filters('formbuilder_display_field_filter', $formFieldDisplay, $field);
if (empty($formFieldDisplay) && $field['field_type'] != 'system field' && $field['field_type'] != 'wp user id') {
$formFieldDisplay .= "\n<div class='{$divClass}' id='{$divID}' title='" . $field['error_message'] . "' {$visibility}><a name='{$divID}'></a>";
if (isset($_POST['formBuilderForm']['FormBuilderID']) and $_POST['formBuilderForm']['FormBuilderID'] == $form_id) {
$formFieldDisplay .= "\n<span id='formBuilderErrorSpace{$divID}'>{$formError}</span>";
} elseif (!isset($_GET['supress_errors']) and !isset($_GET['suppress_errors'])) {
$formFieldDisplay .= "\n<span id='formBuilderErrorSpace{$divID}'>{$formError}</span>";
}
$formFieldDisplay .= "\n{$formLabel}";
$formFieldDisplay .= "\n{$formInput}";
$formFieldDisplay .= "\n</div>";
}
// Allow for other methods of displaying the form field
$formDisplay .= $formFieldDisplay;
// Check for new page of form details.
if ($new_page == true) {
$formDisplay .= "</div><div id='formbuilder-{$form_id}-page-{$page_id}' title='formbuilder-{$form_id}-page-{$page_id}' style='display:none;'>";
}
$new_page = false;
$allFields[] = $field;
}
}
$referrer_info = get_option('formBuilder_referrer_info');
if ($referrer_info == 'Enabled') {
// Hidden fields to include referer, and page uri
$formDisplay .= "<input type='hidden' name='REFERER' value='" . __('Not Available', 'formbuilder') . "' />";
if (isset($_SERVER['HTTP_HOST']) and isset($_SERVER['REQUEST_URI'])) {
$formDisplay .= "<input type='hidden' name='PAGE' value='http://" . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] . "' />";
}
// Using JavaScript to populate the referrer field, allows this to work even when pages are served from a cached location on the server.
$formDisplay .= "\n\t\t\t\t<script type=\"text/javascript\">\n\t\t\t\t\tfunction updateReferrerInfo()\n\t\t\t\t\t{\n\t\t\t\t\t\toFormObject = document.forms['formBuilder{$formID}'];\n\t\t\t\t\t\toFormElement = oFormObject.elements['REFERER'];\n\t\t\t\t\t\toFormElement.value = document.referrer;\n\t\t\t\t\t}\n\t\t\t\t</script>\n\t\t\t\t";
}
// Submit Button
if (!$submit_button_set) {
$previous_page_insert = "";
if ($page_id > 1) {
$previous_page_insert = "<input type='button' name='formbuilder_page_break' " . "value='" . $formBuilderTextStrings['previous'] . "' " . "onclick=" . '" fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . $page_id . '\'); ' . ' fb_toggleLayer(\'formbuilder-' . $form_id . '-page-' . ($page_id - 1) . '\'); "' . " />";
}
$formDisplay .= "\n<div class='formBuilderSubmit form-actions'>{$previous_page_insert}<input type='submit' name='Submit' value='" . $formBuilderTextStrings['send'] . "' /></div>";
} else {
$formDisplay .= "";
}
$formDisplay .= "\n</div>\n</form>";
// End of paged CSS
$formDisplay = apply_filters('formbuilder_append_formDisplay', $formDisplay);
// Check posted form data to ensure that we don't have any blacklisted material
$blacklist_enabled = get_option('formbuilder_blacklist');
if ($blacklist_enabled == "Enabled") {
if (isset($_POST['formBuilderForm']['FormBuilderID'])) {
foreach ($_POST['formBuilderForm'] as $key => $value) {
if (formbuilder_on_blacklist($value)) {
$post_errors = "There is a word in your form submission that the owners of this site deem to be probable spam.";
break;
}
}
}
}
// Check posted form data to ensure that we don't have any greylisted material
$greylist_enabled = get_option('formbuilder_greylist');
if ($greylist_enabled == "Enabled") {
if (isset($_POST['formBuilderForm']['FormBuilderID'])) {
foreach ($_POST['formBuilderForm'] as $key => $value) {
if (formbuilder_on_greylist($value)) {
$form['subject'] = "POSSIBLE SPAM: " . $form['subject'];
break;
}
}
}
}
// Check posted form data to ensure that we don't have any greylisted material
$excessive_links_enabled = get_option('formbuilder_excessive_links');
if ($excessive_links_enabled == "Enabled") {
if (isset($_POST['formBuilderForm']['FormBuilderID'])) {
foreach ($_POST['formBuilderForm'] as $key => $value) {
if (formbuilder_excessive_links($value)) {
$form['subject'] = "POSSIBLE SPAM: " . $form['subject'];
break;
}
}
}
}
// Check posted form data to ensure that we don't have any greylisted material
$formbuilder_spammer_ip_checking = get_option('formbuilder_spammer_ip_checking');
if ($formbuilder_spammer_ip_checking == "Enabled") {
if (isset($_POST['formBuilderForm']['FormBuilderID'])) {
$response = formbuilder_check_spammer_ip($_SERVER['REMOTE_ADDR']);
if ($response > 0) {
$form['subject'] = "POSSIBLE SPAMMER IP: " . $form['subject'];
}
}
}
// Check posted form data for Akismet Spam
$akismet_enabled = get_option('formbuilder_akismet');
if ($akismet_enabled == "Enabled" and function_exists('akismet_http_post')) {
if (isset($_POST['formBuilderForm']['FormBuilderID'])) {
if (formbuilder_check_akismet($allFields) == 'true') {
$form['subject'] = "POSSIBLE AKISMET SPAM: " . $form['subject'];
}
}
}
// Create extended form variable.
$extendedForm = $form;
$extendedForm['allFields'] = $allFields;
if (isset($_POST['formBuilderForm']['FormBuilderID']) && $_POST['formBuilderForm']['FormBuilderID'] == $form_id) {
// Final check of fields before marking form as successfully submitted...
$extendedForm = apply_filters('formbuilder_submit_final_check', $extendedForm);
$post_errors = apply_filters('formbuilder_final_errors_filter', $post_errors);
}
// Process Form Results if necessary
if (empty($post_errors) && isset($_POST['formBuilderForm']['FormBuilderID']) && $_POST['formBuilderForm']['FormBuilderID'] == $form_id) {
// Apply filter to fields after successful form submission.
$extendedForm = apply_filters('formbuilder_submit_success_pre_value_parsing', $extendedForm);
// Convert numeric selection values to the real form values
// Iterate through the form fields to add values to the email sent to the recipient.
foreach ($extendedForm['allFields'] as $key => $field) {
// If select box or radio buttons, we need to translate the posted value into the real value.
if ($field['field_type'] == "recipient selection" or $field['field_type'] == "selection dropdown" or $field['field_type'] == "radio buttons") {
$options = explode("\n", $field['field_value']);
$roption = $options[$field['value']];
// Check for a pipe, and if it exists, split the value into value|label.
if (strpos($roption, "|") !== FALSE) {
list($option_value, $option_label) = explode("|", $roption, 2);
} else {
$option_value = $option_label = $roption;
}
$extendedForm['allFields'][$key]['value'] = trim($option_value);
}
}
$extendedForm = apply_filters('formbuilder_submit_success_post_value_parsing', $extendedForm);
$msg = "";
// If enabled, put backup copies of the form data into a database.
if (get_option('formbuilder_db_xml') != '0') {
$msg = formbuilder_process_db($form, $extendedForm['allFields']);
}
// Check if an alternate form processing system is used.
// Otherwise just use the default which sends an email to the recipiant.
if ($form['action'] != "") {
if (function_exists("{$processor_funcname}")) {
$msg = $processor_funcname($form, $extendedForm['allFields']);
$func_run = true;
} else {
$msg = formbuilder_process_email($form, $extendedForm['allFields']);
}
} else {
$msg = formbuilder_process_email($form, $extendedForm['allFields']);
}
// Check for and process any redirections at this point.
if (!$msg) {
formbuilder_check_redirection($form, $extendedForm['allFields']);
}
if (!isset($func_run)) {
if (!$msg) {
if (!$form['thankyoutext']) {
$form['thankyoutext'] = "<h4>" . $formBuilderTextStrings['success'] . "</h4><p>" . $formBuilderTextStrings['send_success'] . "</p>";
}
// Populate ~variable~ tags in the autoresponse with values submitted by the user.
$txtAllFields = "";
foreach ($extendedForm['allFields'] as $field) {
if (trim($field['field_name']) != "" and $field['field_type'] != "recipient selection" and $field['field_type'] != "comments area" and $field['field_type'] != "followup page" and $field['field_type'] != "spam blocker" and $field['field_type'] != "page break" and $field['field_type'] != "reset button" and $field['field_type'] != "submit button" and $field['field_type'] != "submit image" and $field['field_type'] != "captcha field") {
$key = $field['field_name'];
$value = $field['value'];
$form['thankyoutext'] = str_replace("~" . $key . "~", $value, $form['thankyoutext']);
$txtAllFields .= $key . ": " . $value . "\n";
}
}
$form['thankyoutext'] = str_replace("~FullForm~", nl2br(trim($txtAllFields)), $form['thankyoutext']);
$formDisplay = "\n<div class='formBuilderSuccess alert alert-success'>" . decode_html_entities($form['thankyoutext'], ENT_QUOTES, get_option('blog_charset')) . "</div>";
} else {
$formDisplay = "\n<div class='formBuilderFailure alert alert-error'><h4>" . $formBuilderTextStrings['failed'] . "</h4><p>" . $formBuilderTextStrings['send_failed'] . "<br/>{$msg}</p></div>";
}
} elseif ($msg) {
// Only shown if the function returned some sort of failure.
$formDisplay = "\n<div class='formBuilderFailure alert alert-error'><h4>" . $formBuilderTextStrings['failed'] . "</h4><p>{$msg}</p></div>{$formDisplay}";
} else {
$formDisplay = "\n<div class='formBuilderSuccess moduleSuccess alert alert-success'>" . decode_html_entities($form['thankyoutext'], ENT_QUOTES, get_option('blog_charset')) . "</div>";
}
} else {
if (!empty($post_errors) and !empty($missing_post_fields)) {
$msg = "\n<div class='formBuilderFailure alert alert-error'><h4>" . $formBuilderTextStrings['form_problem'] . "</h4><p>" . $formBuilderTextStrings['send_mistakes'] . "</p>";
$msg .= "\n<ul>";
foreach ($missing_post_fields as $idValue => $field_label) {
$msg .= "\n<li><a href='#{$idValue}'>{$field_label}</a></li>";
}
$msg .= "\n</ul></div>\n" . $formDisplay;
$formDisplay = $msg;
} elseif (!empty($post_errors) and is_string($post_errors)) {
$msg = "\n<div class='formBuilderFailure alert alert-error'><h4>" . $formBuilderTextStrings['form_problem'] . "</h4>";
$msg .= "\n<p>{$post_errors}</p></div>\n" . $formDisplay;
$formDisplay = $msg;
}
}
$formDisplay = apply_filters('formbuilder_formDisplay_final', $formDisplay);
return "<div id='{$formCSSID}'>{$formDisplay}</div>";
} else {
return $formBuilderTextStrings['display_error'];
}
}
*/
$basepath = dirname(dirname(dirname(dirname(dirname($_SERVER['SCRIPT_FILENAME']))))) . '/';
$wp_load = $basepath . 'wp-load.php';
$wp_conf = $basepath . 'wp-config.php';
if (file_exists($wp_load)) {
include_once $wp_load;
} elseif (file_exists($wp_conf)) {
include_once $wp_conf;
} else {
die;
}
// Define the field ID
if (preg_match("#^[0-9]+\$#isU", trim($_GET['fieldid']))) {
$field_id = trim($_GET['fieldid']);
} else {
die;
}
session_start();
$sql = "SELECT * FROM " . FORMBUILDER_TABLE_FIELDS . " WHERE id = '" . $_GET['fieldid'] . "';";
$results = $wpdb->get_results($sql, ARRAY_A);
$field = $results[0];
$field['value'] = trim($_GET['val']);
if (!formbuilder_validate_field($field)) {
$error_msg = $field['error_message'];
$post_errors = true;
}
if (isset($error_msg)) {
echo "<div class='formBuilderError'>{$error_msg}</div>";
} else {
echo "";
}