Exemplo n.º 1
0
 public function PHPValidate($values)
 {
     $app = JFactory::getApplication();
     if ($app->isAdmin()) {
         return true;
     }
     if (($values === "" || $values === null) && !$this->isRequired()) {
         return true;
     }
     $captchaId = $app->input->getString($this->getId() . "_captcha_namespace", "");
     if (!JUDirectoryFrontHelperCaptcha::checkCaptcha($captchaId, $values)) {
         $message = (string) $this->params->get('invalid_message');
         if ($message) {
             return JText::sprintf($message, $this->getCaption(true));
         } else {
             return JText::sprintf('COM_JUDIRECTORY_FIELD_VALUE_IS_INVALID', $this->getCaption(true));
         }
     }
     return true;
 }
Exemplo n.º 2
0
 public function addComment()
 {
     JSession::checkToken() or die(JText::_('JINVALID_TOKEN'));
     $user = JFactory::getUser();
     $model = $this->getModel();
     $rootComment = JUDirectoryFrontHelperComment::getRootComment();
     $data = $_POST;
     $listingId = $data['listing_id'];
     $params = JUDirectoryHelper::getParams(null, $listingId);
     $parentId = $data['parent_id'];
     $model->setSessionCommentForm($listingId);
     if (strlen($data['title']) < 6) {
         $this->setError(JText::_('COM_JUDIRECTORY_COMMENT_INVALID_TITLE'));
         $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
         return false;
     }
     if (strlen($data['guest_name']) < 1) {
         $this->setError(JText::_('COM_JUDIRECTORY_COMMENT_INVALID_NAME'));
         $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
         return false;
     }
     if (isset($data['guest_email'])) {
         if (!preg_match('/^[\\w\\.-]+@[\\w\\.-]+\\.[\\w\\.-]{2,6}$/', $data['guest_email'])) {
             $this->setError(JText::_('COM_JUDIRECTORY_COMMENT_INVALID_EMAIL'));
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
     }
     if (isset($data['website'])) {
         if (!preg_match('/^(https?:\\/\\/)?([\\w\\.-]+)\\.([\\w\\.-]{2,6})([\\/\\w \\.-]*)*\\/?$/i', $data['website'])) {
             $this->setError(JText::_('COM_JUDIRECTORY_COMMENT_INVALID_WEBSITE'));
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
     }
     if (isset($data['comment_language'])) {
         $langArray = JHtml::_('contentlanguage.existing');
         $langKey = array_keys($langArray);
         array_unshift($langKey, '*');
         if (!in_array($data['comment_language'], $langKey)) {
             $this->setError(JText::_('COM_JUDIRECTORY_COMMENT_INVALID_LANGUAGE'));
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
     }
     $minCharacter = $params->get('min_comment_characters', 20);
     $maxCharacter = $params->get('max_comment_characters', 1000);
     $comment = $data['comment'];
     $comment = JUDirectoryFrontHelperComment::parseCommentText($comment, $listingId);
     $comment = strip_tags($comment);
     $commentCharacter = strlen($comment);
     if ($commentCharacter < $minCharacter || $commentCharacter > $maxCharacter) {
         $this->setError(JText::_('COM_JUDIRECTORY_COMMENT_INVALID_COMMENT'));
         $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
         return false;
     }
     $showCaptcha = JUDirectoryFrontHelperPermission::showCaptchaWhenComment($listingId);
     if ($showCaptcha) {
         $validCaptcha = JUDirectoryFrontHelperCaptcha::checkCaptcha();
         if (!$validCaptcha) {
             if ($parentId == $rootComment->id) {
                 $form = '#judir-comment-form';
             } else {
                 $form = '#comment-reply-wrapper-' . $parentId;
             }
             $this->setError(JText::_('COM_JUDIRECTORY_INVALID_CAPTCHA'));
             $this->setMessage($this->getError(), 'error');
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId . $form, false));
             return false;
         }
     }
     if ($user->get('guest')) {
         if (!$model->checkNameOfGuest($listingId)) {
             $this->setError(JText::_('COM_JUDIRECTORY_YOU_ARE_NOT_AUTHORIZED_TO_COMMENT_ON_THIS_LISTING'));
             $this->setMessage($model->getError(), 'error');
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
         if (!$model->checkEmailOfGuest()) {
             $this->setMessage($model->getError(), 'error');
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
     }
     if ($parentId == $rootComment->id) {
         $canComment = JUDirectoryFrontHelperPermission::canComment($listingId, $data['guest_email']);
         if (!$canComment) {
             $this->setError(JText::_('COM_JUDIRECTORY_YOU_ARE_NOT_AUTHORIZED_TO_COMMENT_ON_THIS_LISTING'));
             $this->setMessage($this->getError(), 'error');
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
     } elseif ($parentId > 0 && $parentId != $rootComment->id) {
         $canReplyComment = JUDirectoryFrontHelperPermission::canReplyComment($listingId, $parentId);
         if (!$canReplyComment) {
             $this->setError(JText::_('COM_JUDIRECTORY_YOU_ARE_NOT_AUTHORIZED_TO_REPLY_THIS_COMMENT'));
             $this->setMessage($this->getError(), 'error');
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
     } else {
         $this->setError(JText::_('COM_JUDIRECTORY_INVALID_DATA'));
         $this->setMessage($this->getError(), 'error');
         $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
         return false;
     }
     $dataValid = array();
     if ($parentId == $rootComment->id) {
         $canRateListing = JUDirectoryFrontHelperPermission::canRateListing($listingId);
         if ($canRateListing) {
             $dataValid = $this->validateCriteria($data, $parentId);
             if (!$dataValid) {
                 $this->setError(JText::_('COM_JUDIRECTORY_INVALID_RATING_VALUE'));
                 $this->setMessage($this->getError(), 'error');
                 $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
                 return false;
             }
         }
     }
     $requiredPostNames = array('title', 'guest_name', 'guest_email', 'comment', 'parent_id', 'listing_id');
     if ($params->get('website_field_in_comment_form', 0) == 2) {
         array_push($requiredPostNames, 'website');
     }
     if ($parentId == $rootComment->id && $params->get('filter_comment_language', 0)) {
         array_push($requiredPostNames, 'comment_language');
     }
     foreach ($requiredPostNames as $requiredPostName) {
         if (trim($data[$requiredPostName]) == '') {
             $this->setError(JText::_('COM_JUDIRECTORY_INVALID_INPUT_DATA'));
             $this->setMessage($this->getError(), 'error');
             $this->setRedirect(JRoute::_('index.php?option=' . $this->option . '&view=' . $this->view_item . '&id=' . $listingId, false));
             return false;
         }
     }
     $acceptedPostNames = array('title', 'guest_name', 'guest_email', 'language', 'website', 'comment', 'parent_id', 'listing_id', 'subscribe');
     if ($params->get('website_field_in_comment_form', 0) == 2 || $params->get('website_field_in_comment_form', 0) == 1) {
         array_push($acceptedPostNames, 'website');
     }
     if ($params->get('filter_comment_language', 0)) {
         array_push($acceptedPostNames, 'comment_language');
     }
     foreach ($acceptedPostNames as $acceptedPostName) {
         if (isset($data[$acceptedPostName])) {
             $dataValid[$acceptedPostName] = $data[$acceptedPostName];
         }
     }
     $newCommentId = $model->saveComment($dataValid);
     if (!$newCommentId) {
         $this->setError($model->getError());
         $this->setMessage($this->getError(), 'error');
         $redirectUrl = JRoute::_(JUDirectoryHelperRoute::getListingRoute($listingId), false);
         $this->setRedirect($redirectUrl);
         return false;
     }
     $session = JFactory::getSession();
     $timeNow = JFactory::getDate()->toSql();
     $timeNowStamp = strtotime($timeNow);
     $sessionCommentOnListingTime = 'judir-commented-' . $listingId;
     $sessionCommentTime = 'judir-commented';
     $session->set($sessionCommentOnListingTime, $timeNowStamp);
     $session->set($sessionCommentTime, $timeNowStamp);
     $session->clear('judirectory_commentform_' . $listingId);
     $this->setMessage(JText::_('COM_JUDIRECTORY_ADD_COMMENT_SUCCESSFULLY'));
     $redirectUrl = JRoute::_(JUDirectoryHelperRoute::getListingRoute($listingId) . '#comment-item-' . $newCommentId, false);
     $this->setRedirect($redirectUrl);
     return true;
 }