protected function _preSaveEntry(array &$entry, array $data, $action)
{
$iaAcl = $this->_iaCore->factory('acl');
iaUtil::loadUTF8Functions('ascii', 'validation', 'bad', 'utf8_to_ascii');
$entry['id'] = $iaAcl->obtainFreeId();
$entry['assignable'] = $data['visible'];
$entry['visible'] = $data['visible'];
if (iaCore::ACTION_ADD == $action) {
if (empty($data['name'])) {
$this->addMessage('error_usergroup_incorrect');
} else {
$entry['name'] = strtolower(iaSanitize::paranoid($data['name']));
if (!iaValidate::isAlphaNumericValid($entry['name'])) {
$this->addMessage('error_usergroup_incorrect');
} elseif ($this->_iaDb->exists('`name` = :name', array('name' => $entry['name']))) {
$this->addMessage('error_usergroup_exists');
}
}
}
foreach ($this->_iaCore->languages as $iso => $title) {
if (empty($data['title'][$iso])) {
$this->addMessage(iaLanguage::getf('error_lang_title', array('lang' => $this->_iaCore->languages[$iso])), false);
} elseif (!utf8_is_valid($data['title'][$iso])) {
$data['title'][$iso] = utf8_bad_replace($data['title'][$iso]);
}
}
if (!$this->getMessages()) {
foreach ($this->_iaCore->languages as $iso => $title) {
iaLanguage::addPhrase('usergroup_' . $entry['name'], $data['title'][$iso], $iso);
}
}
return !$this->getMessages();
}
public function createQueue($fromName, $fromMail, $subject, $body, $html, $groups, $status)
{
$error = false;
$rcptsPerRun = 15;
$messages = array();
$data = array();
$data['from_name'] = $fromName;
$data['subj'] = $subject;
$data['html'] = $html;
if (empty($fromMail) || !iaValidate::isEmail($fromMail)) {
$error = true;
$messages[] = iaLanguage::get('from_email_err');
} else {
$data['from_mail'] = $fromMail;
}
if (empty($body)) {
$error = true;
$messages[] = iaLanguage::get('err_message');
} else {
$data['body'] = $body;
}
$usergrp = empty($groups) ? 0 : array_sum($groups);
$status = empty($status) ? array() : $status;
$status = implode("','", $status);
$rcpt = $this->iaDb->onefield('email', "`usergroup_id` & {$usergrp} AND `status` IN ('{$status}')", 0, 0, 'members');
if (empty($rcpt)) {
$error = true;
$messages[] = iaLanguage::get('no_rcpt');
}
if (!$error) {
$data['total'] = count($rcpt);
$messageId = $this->iaDb->insert($data, null, self::getTableMessages());
foreach ($rcpt as $index => $addr) {
$rcptCart[] = $addr;
if (($index + 1) % $rcptsPerRun == 0 || $index + 1 == $data['total']) {
$this->iaDb->insert(array('message_id' => $messageId, 'recipients' => implode(',', $rcptCart)), null, self::getTableRecipients());
$rcptCart = array();
}
}
$messages[] = iaLanguage::get('queue_added');
}
return array($error, $messages);
}
protected function _preSaveEntry(array &$entry, array $data, $action)
{
$entry['assignable'] = (int) $data['visible'];
$entry['visible'] = (int) $data['visible'];
if (iaCore::ACTION_ADD == $action) {
if (empty($data['name'])) {
$this->addMessage('error_usergroup_incorrect');
} else {
$entry['name'] = strtolower(iaSanitize::paranoid($data['name']));
if (!iaValidate::isAlphaNumericValid($entry['name'])) {
$this->addMessage('error_usergroup_incorrect');
} elseif ($this->_iaDb->exists('`name` = :name', array('name' => $entry['name']))) {
$this->addMessage('error_usergroup_exists');
}
}
}
foreach ($this->_iaCore->languages as $code => $language) {
if (empty($data['title'][$code])) {
$this->addMessage(iaLanguage::getf('error_lang_title', array('lang' => $language['title'])), false);
}
}
return !$this->getMessages();
}
if (!iaValidate::isCaptchaValid()) {
$error = true;
$messages[] = iaLanguage::get('confirmation_code_incorrect');
}
}
$iaView->assign('email', $email);
$iaView->assign('form', $form);
} else {
$iaField = $iaCore->factory('field');
$iaPlan = $iaCore->factory('plan');
$iaView->assign('plans', $iaPlan->getPlans($iaUsers->getItemName()));
$iaView->assign('sections', $iaField->filterByGroup($itemData, $iaUsers->getItemName()));
if (isset($_POST['register'])) {
$fields = $iaField->filter($itemData, $iaUsers->getItemName());
list($itemData, $error, $messages, ) = $iaField->parsePost($fields);
if (!iaValidate::isCaptchaValid()) {
$error = true;
$messages[] = iaLanguage::get('confirmation_code_incorrect');
}
if (isset($_POST['plan_id'])) {
$itemData[iaPlan::SPONSORED_PLAN_ID] = (int) $_POST['plan_id'];
}
if (isset($_POST['username'])) {
if ($iaDb->exists('`username` = :value', array('value' => $_POST['username']), iaUsers::getTable())) {
$error = true;
$messages[] = iaLanguage::get('username_already_exists');
}
}
if (isset($_POST['email'])) {
if ($iaDb->exists('`email` = :value', array('value' => $_POST['email']), iaUsers::getTable())) {
$error = true;
public function parsePost(array $fields, $previousValues = null)
{
$iaCore =& $this->iaCore;
$error = false;
$messages = array();
$invalidFields = array();
$item = array();
$data =& $_POST;
// access to the data source by link
if (iaCore::ACCESS_ADMIN == $this->iaCore->getAccessType()) {
if (isset($data['sponsored'])) {
$item['sponsored'] = (int) $data['sponsored'];
$item['sponsored_plan_id'] = $item['sponsored'] ? (int) $data['plan_id'] : 0;
$item['sponsored_start'] = $item['sponsored'] ? date(iaDb::DATETIME_SHORT_FORMAT) : null;
$item['sponsored_end'] = $item['sponsored'] ? $data['sponsored_end'] : null;
}
if (isset($data['featured'])) {
$item['featured'] = (int) $data['featured'];
if ($item['featured']) {
if (isset($data['featured_end']) && $data['featured_end']) {
$item['featured_start'] = date(iaDb::DATETIME_SHORT_FORMAT);
$item['featured_end'] = iaSanitize::html($data['featured_end']);
} else {
$error = true;
$messages[] = iaLanguage::get('featured_status_finished_date_is_empty');
$invalidFields[] = 'featured_end';
}
} else {
$item['featured_start'] = null;
$item['featured_end'] = null;
}
}
if (isset($data['status'])) {
$item['status'] = iaSanitize::html($data['status']);
}
if (isset($data['date_added'])) {
$time = strtotime($data['date_added']);
if (!$time) {
$error = true;
$messages[] = iaLanguage::get('added_date_is_incorrect');
} elseif ($time > time()) {
$error = true;
$messages[] = iaLanguage::get('future_date_specified_for_added_date');
} else {
$item['date_added'] = date(iaDb::DATETIME_SHORT_FORMAT, $time);
}
}
if (isset($data['owner'])) {
if (empty($data['owner'])) {
$error = true;
$messages[] = iaLanguage::get('owner_is_not_specified');
} else {
if ($memberId = $iaCore->iaDb->one_bind('id', '`username` = :name OR `fullname` = :name', array('name' => iaSanitize::sql($_POST['owner'])), iaUsers::getTable())) {
$item['member_id'] = $memberId;
} else {
$error = true;
$messages[] = iaLanguage::get('incorrect_owner_specified');
}
}
}
if (isset($data['locked'])) {
$item['locked'] = (int) $data['locked'];
}
}
// the code block below filters fields based on parent/dependent structure
$activeFields = array();
$parentFields = array();
foreach ($fields as $field) {
$activeFields[$field['name']] = $field;
if (iaField::RELATION_PARENT == $field['relation']) {
$parentFields[$field['name']] = $field['children'];
}
}
foreach ($parentFields as $fieldName => $dependencies) {
if (isset($data[$fieldName])) {
$value = $data[$fieldName];
foreach ($dependencies as $dependentFieldName => $values) {
if (!in_array($value, $values)) {
unset($activeFields[$dependentFieldName]);
}
}
}
}
//
$iaCore->factory('util');
iaUtil::loadUTF8Functions('validation', 'bad');
foreach ($activeFields as $fieldName => $field) {
isset($data[$fieldName]) || ($data[$fieldName] = '');
// Check the UTF-8 is well formed
if (!is_array($data[$fieldName]) && !utf8_is_valid($data[$fieldName])) {
$data[$fieldName] = utf8_bad_replace($data[$fieldName]);
}
if ($field['extra_actions']) {
if (false === eval($field['extra_actions'])) {
continue;
// make possible to stop further processing of this field by returning FALSE
}
}
if (in_array($field['type'], array(self::TEXT, self::TEXTAREA, self::NUMBER, self::RADIO, self::CHECKBOX, self::COMBO))) {
if ($field['required']) {
if ($field['required_checks']) {
eval($field['required_checks']);
}
if (empty($data[$fieldName])) {
$error = true;
$messages[] = in_array($field['type'], array(self::RADIO, self::CHECKBOX, self::COMBO)) ? iaLanguage::getf('field_is_not_selected', array('field' => iaLanguage::get('field_' . $fieldName))) : iaLanguage::getf('field_is_empty', array('field' => iaLanguage::get('field_' . $fieldName)));
$invalidFields[] = $fieldName;
}
}
switch ($field['type']) {
case self::NUMBER:
$item[$fieldName] = (double) str_replace(' ', '', $data[$fieldName]);
break;
case self::TEXT:
$item[$fieldName] = iaSanitize::tags($data[$fieldName]);
break;
case self::TEXTAREA:
$item[$fieldName] = $field['use_editor'] ? iaUtil::safeHTML($data[$fieldName]) : iaSanitize::tags($data[$fieldName]);
break;
default:
$item[$fieldName] = is_array($data[$fieldName]) ? implode(',', $data[$fieldName]) : $data[$fieldName];
}
} elseif (self::DATE == $field['type']) {
if ($field['required'] && $field['required_checks']) {
eval($field['required_checks']);
} elseif ($field['required'] && empty($data[$fieldName])) {
$error = true;
$messages[] = iaLanguage::getf('field_is_empty', array('field' => iaLanguage::get('field_' . $fieldName)));
$invalidFields[] = $fieldName;
}
$data[$fieldName] = trim($data[$fieldName]);
if (empty($data[$fieldName])) {
$item[$fieldName] = $field['allow_null'] ? null : '';
} else {
if (strpos($data[$fieldName], ' ') === false) {
$date = $data[$fieldName];
$time = false;
} else {
list($date, $time) = explode(' ', $data[$fieldName]);
}
// FIXME: f*****g shit
$array = explode('-', $date);
$year = (int) $array[0];
$month = max(1, (int) $array[1]);
$day = max(1, (int) $array[2]);
$year = strlen($year) == 4 ? $year : 2000;
$month = strlen($month) < 2 ? '0' . $month : $month;
$day = strlen($day) < 2 ? '0' . $day : $day;
$item[$fieldName] = $year . '-' . $month . '-' . $day;
if ($field['timepicker'] && $time) {
$time = explode(':', $time);
$hour = max(1, (int) $time[0]);
$minute = max(1, (int) $time[1]);
$seconds = max(1, (int) $time[2]);
$hour = strlen($hour) < 2 ? '0' . $hour : $hour;
$minute = strlen($minute) < 2 ? '0' . $minute : $minute;
$seconds = strlen($seconds) < 2 ? '0' . $seconds : $seconds;
$item[$fieldName] .= ' ' . $hour . ':' . $minute . ':' . $seconds;
}
}
} elseif (self::URL == $field['type']) {
$validProtocols = array('http://', 'https://');
$item[$fieldName] = '';
$req_error = false;
if ($field['required']) {
if ($field['required_checks']) {
eval($field['required_checks']);
} elseif (empty($data[$fieldName]['url']) || in_array($data[$fieldName]['url'], $validProtocols)) {
$error = $req_error = true;
$messages[] = iaLanguage::getf('field_is_empty', array('field' => iaLanguage::get('field_' . $fieldName)));
$invalidFields[] = $fieldName;
}
}
if (!$req_error && !empty($data[$fieldName]['url']) && !in_array($data[$fieldName]['url'], $validProtocols)) {
if (false === stripos($data[$fieldName]['url'], 'http://') && false === stripos($data[$fieldName]['url'], 'https://')) {
$data[$fieldName]['url'] = 'http://' . $data[$fieldName]['url'];
}
if (iaValidate::isUrl($data[$fieldName]['url'])) {
$item[$fieldName] = array();
$item[$fieldName]['url'] = iaSanitize::tags($data[$fieldName]['url']);
$item[$fieldName]['title'] = empty($data[$fieldName]['title']) ? str_replace($validProtocols, '', $data[$fieldName]['url']) : $data[$fieldName]['title'];
$item[$fieldName] = implode('|', $item[$fieldName]);
} else {
$error = true;
$messages[] = iaLanguage::get('field_' . $fieldName) . ': ' . iaLanguage::get('error_url');
$invalidFields[] = $fieldName;
}
}
} elseif (in_array($field['type'], array(self::IMAGE, self::STORAGE, self::PICTURES)) && is_array($_FILES[$fieldName]['tmp_name']) && !empty($_FILES[$fieldName]['tmp_name'])) {
if (!is_writable(IA_UPLOADS)) {
$error = true;
$messages[] = iaLanguage::get('error_directory_readonly');
} else {
// run required field checks
if ($field['required'] && $field['required_checks']) {
eval($field['required_checks']);
} elseif ($field['required'] && empty($_FILES[$fieldName]['tmp_name'])) {
$error = true;
$messages[] = iaLanguage::getf('field_is_empty', array('field' => iaLanguage::get('field_' . $fieldName)));
$invalidFields[] = $fieldName;
}
// custom folder for uploaded images
if (!empty($field['folder_name'])) {
if (!is_dir(IA_UPLOADS . $field['folder_name'])) {
mkdir(IA_UPLOADS . $field['folder_name']);
}
$path = $field['folder_name'] . IA_DS;
} else {
$path = iaUtil::getAccountDir();
}
$item[$fieldName] = isset($data[$fieldName]) && $data[$fieldName] ? $data[$fieldName] : array();
// initialize class to work with images
$methodName = self::STORAGE == $field['type'] ? '_processFileField' : '_processImageField';
// process uploaded files
foreach ($_FILES[$fieldName]['tmp_name'] as $id => $tmp_name) {
if ($_FILES[$fieldName]['error'][$id]) {
continue;
}
// files limit exceeded or rewrite image value
if (self::IMAGE != $field['type'] && count($item[$fieldName]) >= $field['length']) {
break;
}
$file = array();
foreach ($_FILES[$fieldName] as $key => $value) {
$file[$key] = $_FILES[$fieldName][$key][$id];
}
$processing = self::$methodName($field, $file, $path);
// 0 - filename, 1 - error, 2 - textual error description
if (!$processing[1]) {
$fieldValue = array('title' => isset($data[$fieldName . '_title'][$id]) ? substr(trim($data[$fieldName . '_title'][$id]), 0, 100) : '', 'path' => $processing[0]);
if (self::IMAGE == $field['type']) {
$item[$fieldName] = $fieldValue;
} else {
$item[$fieldName][] = $fieldValue;
}
} else {
$error = true;
$messages[] = $processing[2];
}
}
}
// If already has images, append them.
$item[$fieldName] = empty($item[$fieldName]) ? '' : serialize(array_merge($item[$fieldName]));
// array_merge is used to reset numeric keys
}
if (isset($item[$fieldName])) {
// process hook if field value exists
$iaCore->startHook('phpParsePostAfterCheckField', array('field_name' => $fieldName, 'item' => &$item[$fieldName], 'value' => $field, 'error' => &$error, 'error_fields' => &$invalidFields, 'msg' => &$messages));
}
}
return array($item, $error, $messages, implode(',', $invalidFields));
}
protected function _jsonAction()
{
$output = array('error' => false, 'message' => array());
$transaction = array('member_id' => (int) $_POST['member'], 'plan_id' => (int) $_POST['plan'], 'email' => $_POST['email'], 'item_id' => (int) $_POST['itemid'], 'gateway' => (string) $_POST['gateway'], 'sec_key' => uniqid('t'), 'reference_id' => empty($_POST['reference_id']) ? date('mdyHis') : $_POST['reference_id'], 'amount' => (double) $_POST['amount'], 'currency' => $this->_iaCore->get('currency'), 'date' => $_POST['date'] . ' ' . $_POST['time']);
if ($transaction['plan_id']) {
$this->_iaCore->factory('plan');
if ($plan = $this->_iaDb->row(iaDb::ALL_COLUMNS_SELECTION, iaDb::convertIds($transaction['plan_id']), iaPlan::getTable())) {
$transaction['item'] = $plan['item'];
$transaction['operation'] = iaLanguage::get('plan_title_' . $plan['id']);
} else {
$output['error'] = true;
$output['message'][] = iaLanguage::get('error_plan_not_exists');
}
} else {
$transaction['item'] = iaTransaction::TRANSACTION_MEMBER_BALANCE;
$transaction['operation'] = iaLanguage::get('funds');
}
if (isset($_POST['username']) && $_POST['username']) {
if ($memberId = $this->_iaDb->one_bind(iaDb::ID_COLUMN_SELECTION, '`username` = :user', array('user' => $_POST['username']), iaUsers::getTable())) {
$transaction['member_id'] = $memberId;
} else {
$output['error'] = true;
$output['message'][] = iaLanguage::get('incorrect_username');
}
}
if ($transaction['email'] && !iaValidate::isEmail($transaction['email'])) {
$output['error'] = true;
$output['message'][] = iaLanguage::get('error_email_incorrect');
}
if (isset($transaction['item']) && in_array($transaction['item'], array(iaTransaction::TRANSACTION_MEMBER_BALANCE, 'members'))) {
$transaction['item_id'] = $transaction['member_id'];
}
if (!$output['error']) {
$output['success'] = (bool) $this->_iaDb->insert($transaction);
$output['message'] = $output['success'] ? iaLanguage::get('transaction_added') : iaLanguage::get('invalid_parameters');
}
return $output;
}
protected function _gridRead($params)
{
switch ($_POST['action']) {
case 'request':
$email = $this->_iaCore->get('site_email');
if (isset($_POST['feedback_email']) && iaValidate::isEmail($_POST['feedback_email'])) {
$email = $_POST['feedback_email'];
}
$footer = PHP_EOL;
$footer .= '<br />------<br />' . PHP_EOL;
$footer .= 'Site: ' . IA_URL . '<br />' . PHP_EOL;
if (isset($_POST['feedback_fullname'])) {
$footer .= 'Full Name: ' . $_POST['feedback_fullname'] . '<br />' . PHP_EOL;
}
$footer .= 'Email: ' . $email . '<br />' . PHP_EOL;
$footer .= 'Script version: ' . $this->_iaCore->get('version') . '<br />' . PHP_EOL;
$result = (bool) mail('*****@*****.**', $this->_iaCore->get('site') . ' - ' . $_POST['feedback_subject'], $_POST['feedback_body'] . $footer, 'From: ' . $email);
return array('result' => $result, 'message' => iaLanguage::get($result ? 'request_submitted' : 'failed'));
break;
case 'menu':
$iaView =& $this->_iaCore->iaView;
$iaView->loadSmarty(true);
$page = $this->_iaCore->factory('page', iaCore::ADMIN)->getByName($_POST['page']);
$core = array('page' => array('info' => array('active_menu' => $page['name'], 'group' => $page['group'], 'menu' => $iaView->getAdminMenu())));
$iaView->iaSmarty->assign('core', $core);
return array('menus' => $iaView->iaSmarty->fetch('menu.tpl'));
}
}
}
}
}
}
}
break;
case 'send_email':
$output['message'] = array();
$memberInfo = $iaCore->factory('users')->getInfo((int) $_POST['author_id']);
if (empty($memberInfo) || $memberInfo['status'] != iaCore::STATUS_ACTIVE) {
$output['message'][] = iaLanguage::get('member_doesnt_exist');
}
if (empty($_POST['from_name'])) {
$output['message'][] = iaLanguage::get('incorrect_fullname');
}
if (empty($_POST['from_email']) || !iaValidate::isEmail($_POST['from_email'])) {
$output['message'][] = iaLanguage::get('error_email_incorrect');
}
if (empty($_POST['email_body'])) {
$output['message'][] = iaLanguage::get('err_message');
}
if ($captchaName = $iaCore->get('captcha_name')) {
$iaCaptcha = $iaCore->factoryPlugin($captchaName, iaCore::FRONT, 'captcha');
if (!$iaCaptcha->validate()) {
$output['message'][] = iaLanguage::get('confirmation_code_incorrect');
}
}
if (empty($output['message'])) {
$iaMailer = $iaCore->factory('mailer');
$subject = iaLanguage::getf('author_contact_request', array('title' => $_POST['regarding']));
$iaMailer->FromName = $_POST['from_name'];
protected function _jsonAction()
{
$this->_iaCore->factory('validate');
$output = array('result' => false, 'message' => iaLanguage::get('invalid_parameters'));
if (isset($_POST['action']) && 'save' == $_POST['action']) {
$type = $_POST['type'];
$global = (int) $_POST['global'];
$page = (int) $_POST['page'];
$name = $_POST['name'];
$pagename = $_POST['pagename'];
if (!iaValidate::isAlphaNumericValid($name) || !iaValidate::isAlphaNumericValid($pagename)) {
return $output;
}
// convert blocks to id
if ('blocks' == $type) {
$name = $this->_iaDb->one('id', "`name` = '{$name}'");
}
if (in_array($type, array('positions', 'blocks'))) {
$this->_iaDb->setTable('objects_pages');
if (!$global) {
// get previous state
if (!$this->_iaDb->exists("`object_type` = '{$type}' && `page_name` = '' && `object` = '{$name}' && `access` = 0")) {
// delete previous settings
$this->_iaDb->delete("`object_type` = '{$type}' && `object` = '{$name}'");
// hide for all pages
$this->_iaDb->insert(array('object_type' => $type, 'page_name' => '', 'object' => $name, 'access' => 0));
}
if ($page) {
$this->_iaDb->insert(array('object_type' => $type, 'page_name' => $pagename, 'object' => $name, 'access' => $page));
} else {
$this->_iaDb->delete("`object_type` = '{$type}' && `page_name` = '{$pagename}' && `object` = '{$name}'");
}
} else {
if ($this->_iaDb->exists("`object_type` = '{$type}' && `page_name` = '' && `object` = '{$name}' && `access` = 0")) {
// delete previous settings
$this->_iaDb->delete("`object_type` = '{$type}' && `object` = '{$name}'");
}
if (!$page) {
$this->_iaDb->insert(array('object_type' => $type, 'page_name' => $pagename, 'object' => $name, 'access' => $page));
} else {
$this->_iaDb->delete("`object_type` = '{$type}' && `page_name` = '{$pagename}' && `object` = '{$name}'");
}
}
$this->_iaDb->resetTable();
}
}
if (isset($_GET['get']) && 'access' == $_GET['get']) {
$type = $_GET['type'];
$object = $_GET['object'];
$page = $_GET['page'];
if (!iaValidate::isAlphaNumericValid($_GET['object']) || !iaValidate::isAlphaNumericValid($_GET['page'])) {
return $output;
}
// convert blocks to id
if ('blocks' == $type) {
$object = $this->_iaDb->one('id', "`name` = '{$object}'");
}
$sql = "SELECT IF(`page_name` = '', 'global', 'page'), `access` FROM `{$this->_iaDb->prefix}objects_pages` ";
$sql .= "WHERE `object_type` = '{$type}' && `object` = '{$object}' && `page_name` IN ('', '{$page}')";
if ($access = $this->_iaDb->getKeyValue($sql)) {
$output['result'] = array_merge(array('global' => 1, 'page' => isset($access['page']) ? $access['page'] : $access['global']), $access);
} else {
$output['result']['global'] = 1;
$output['result']['page'] = 1;
}
} elseif ($_GET) {
$params = $_GET;
$positions = array_keys($this->_iaDb->assoc(array('name', 'menu', 'movable'), null, 'positions'));
foreach ($positions as $p) {
if (isset($params[$p . 'Blocks']) && is_array($params[$p . 'Blocks']) && $params[$p . 'Blocks']) {
foreach ($params[$p . 'Blocks'] as $k => $v) {
$blockName = str_replace('start_block_', '', 'start_' . $v);
$this->_iaCore->startHook('phpOrderChangeBeforeUpdate', array('block' => &$blockName, 'position' => &$p));
is_numeric($blockName) ? $this->_iaDb->update(array('id' => $blockName, 'position' => $p, 'order' => $k + 1)) : $this->_iaDb->update(array('position' => $p, 'order' => $k + 1), iaDb::convertIds($blockName, 'name'));
}
}
}
$output['result'] = true;
$output['message'] = iaLanguage::get('saved');
}
return $output;
}
protected function _preSaveEntry(array &$entry, array $data, $action)
{
$this->_iaCore->startHook('adminAddBlockValidation');
iaUtil::loadUTF8Functions('ascii', 'validation', 'bad', 'utf8_to_ascii');
// validate block name
if (iaCore::ACTION_ADD == $action) {
if (empty($data['name'])) {
$entry['name'] = 'block_' . mt_rand(1000, 9999);
} else {
$entry['name'] = strtolower(iaSanitize::paranoid($data['name']));
if (!iaValidate::isAlphaNumericValid($entry['name'])) {
$this->addMessage('error_block_name');
} elseif ($this->_iaDb->exists('`name` = :name', array('name' => $entry['name']))) {
$this->addMessage('error_block_name_duplicate');
}
}
}
$entry['classname'] = $data['classname'];
$entry['position'] = $data['position'];
$entry['type'] = $data['type'];
$entry['status'] = isset($data['status']) ? in_array($data['status'], array(iaCore::STATUS_ACTIVE, iaCore::STATUS_INACTIVE)) ? $data['status'] : iaCore::STATUS_ACTIVE : iaCore::STATUS_ACTIVE;
$entry['header'] = (int) $data['header'];
$entry['collapsible'] = (int) $data['collapsible'];
$entry['collapsed'] = (int) $data['collapsed'];
$entry['multilingual'] = (int) $data['multilingual'];
$entry['sticky'] = (int) $data['sticky'];
$entry['external'] = (int) $data['external'];
$entry['filename'] = $data['filename'];
$entry['pages'] = isset($data['pages']) ? $data['pages'] : array();
$entry['title'] = $data['title'];
$entry['contents'] = $data['content'];
if ($entry['multilingual']) {
if (empty($entry['title'])) {
$this->addMessage('title_is_empty');
} elseif (!utf8_is_valid($entry['title'])) {
$entry['title'] = utf8_bad_replace($entry['title']);
}
if (empty($entry['contents']) && !$entry['external']) {
$this->addMessage('error_contents');
} elseif (empty($entry['filename']) && $entry['external']) {
$this->addMessage('error_filename');
}
if (iaBlock::TYPE_HTML != $entry['type']) {
if (!utf8_is_valid($entry['contents'])) {
$entry['contents'] = utf8_bad_replace($entry['contents']);
}
}
} else {
$this->_multilingualContent = $data['content'];
if (isset($data['languages']) && $data['languages']) {
$entry['languages'] = $data['languages'];
$entry['titles'] = $data['titles'];
$entry['contents'] = $data['contents'];
foreach ($entry['languages'] as $langCode) {
if (isset($entry['titles'][$langCode])) {
if (empty($entry['titles'][$langCode])) {
$this->addMessage(iaLanguage::getf('error_lang_title', array('lang' => $this->_iaCore->languages[$langCode]['title'])), false);
} elseif (!utf8_is_valid($entry['titles'][$langCode])) {
$entry['titles'][$langCode] = utf8_bad_replace($entry['titles'][$langCode]);
}
}
if (isset($entry['contents'][$langCode])) {
if (empty($entry['contents'][$langCode])) {
$this->addMessage(iaLanguage::getf('error_lang_contents', array('lang' => $this->_iaCore->languages[$langCode]['title'])), false);
}
if (iaBlock::TYPE_HTML != $entry['type']) {
if (!utf8_is_valid($entry['contents'][$langCode])) {
$entry['contents'][$langCode] = utf8_bad_replace($entry['contents'][$langCode]);
}
}
}
}
} else {
$this->addMessage('block_languages_empty');
}
}
$this->_iaCore->startHook('phpAdminBlocksEdit', array('block' => &$entry));
return !$this->getMessages();
}
if (utf8_is_valid($guestbook['author_name'])) {
$guestbook['author_name'] = utf8_bad_replace($guestbook['author_name']);
}
if (isset($_FILES['image']['tmp_name']) && $_FILES['image']['tmp_name']) {
$iaPicture = $iaCore->factory('picture');
$info = array('image_width' => 500, 'image_height' => 500, 'thumb_width' => 150, 'thumb_height' => 150, 'resize_mode' => iaPicture::CROP);
if ($image = $iaPicture->processImage($_FILES['image'], '', iaUtil::generateToken(), $info)) {
empty($guestbook['avatar']) || $iaPicture->delete($guestbook['avatar']);
// already has an assigned image
$guestbook['avatar'] = $image;
}
}
if (isset($_POST['status'])) {
$guestbook['status'] = isset($_POST['status']) && !empty($_POST['status']) && in_array($_POST['status'], array(iaCore::STATUS_ACTIVE, iaCore::STATUS_INACTIVE)) ? $_POST['status'] : 'inactive';
}
if (isset($_POST['email']) && iaValidate::isEmail($_POST['email'])) {
$guestbook['email'] = $_POST['email'];
}
if (!$error && iaCore::ACTION_EDIT == $pageAction) {
$id = $guestbook['id'] = (int) $iaCore->requestPath[0];
$result = $iaDb->update($guestbook);
$messages[] = iaLanguage::get('saved');
if ($result) {
$iaCore->factory('log')->write(iaLog::ACTION_UPDATE, array('item' => '', 'name' => iaLanguage::get('guestbook_message'), 'id' => $id, 'module' => 'guestbook'));
}
}
$iaView->setMessages($messages, $error ? iaView::ERROR : iaView::SUCCESS);
iaUtil::go_to(IA_ADMIN_URL . 'guestbook/');
}
$iaView->assign('guestbook', $guestbook);
$iaView->display('index');
}
// checking email
if (isset($_POST['email']) && $_POST['email']) {
$entry['email'] = $_POST['email'];
if (!iaValidate::isEmail($entry['email'])) {
$error = true;
$messages[] = iaLanguage::get('error_gb_email');
}
} else {
$error = true;
$messages[] = iaLanguage::get('error_gb_email');
}
// checking email
if (isset($_POST['aurl']) && !empty($_POST['aurl']) && 'http://' != $_POST['aurl']) {
$entry['author_url'] = $_POST['aurl'];
if (!iaValidate::isUrl($entry['author_url'])) {
$error = true;
$messages[] = iaLanguage::get('error_url');
}
}
// checking body
$entry['body'] = $_POST['message'];
if (!utf8_is_valid($entry['body'])) {
$entry['body'] = utf8_bad_replace($entry['body']);
}
$length = utf8_is_ascii($entry['body']) ? strlen($entry['body']) : utf8_strlen($entry['body']);
if ($iaCore->get('gb_min_chars') > 0) {
if ($length < $iaCore->get('gb_min_chars')) {
$error = true;
$messages[] = iaLanguage::getf('error_min_gb', array('length' => $iaCore->get('gb_min_chars')));
}
