Your IP : 216.73.216.134
<?php
/**
* @package RSForm! Pro
* @copyright (C) 2007-2014 www.rsjoomla.com
* @license GPL, http://www.gnu.org/copyleft/gpl.html
*/
defined('_JEXEC') or die('Restricted access');
class RSFormModelDirectory extends JModelLegacy
{
protected $fields;
/**
* Main constructor
*/
public function __construct($config = array()) {
$this->_app = JFactory::getApplication();
$this->_db = JFactory::getDbo();
$this->params = $this->_app->getParams('com_rsform');
$this->itemid = $this->getItemid();
$this->context = 'com_rsform.directory'.$this->itemid;
// Check for a valid form
if (!$this->isValid()) {
JError::raiseWarning(500, $this->getError());
$this->_app->redirect(JURI::root());
}
$this->getFields();
parent::__construct();
}
/**
* Check if we are allowed to show content
*/
public function isValid() {
if (!$this->params->get('enable_directory', 0)) {
$this->setError(JText::_('RSFP_VIEW_DIRECTORY_NOT_ENABLED_FORGOT'));
return false;
}
// Do we have a valid formId
$formId = $this->params->get('formId',0);
if (empty($formId)) {
$this->setError(JText::sprintf('RSFP_VIEW_DIRECTORY_NO_VALID_FORMID', $formId));
return false;
}
// Check if the directory exists
$this->_db->setQuery('SELECT COUNT('.$this->_db->qn('formId').') FROM '.$this->_db->qn('#__rsform_directory').' WHERE '.$this->_db->qn('formId').' = '.(int) $formId.'');
if (!$this->_db->loadResult()) {
$this->setError(JText::_('RSFP_VIEW_DIRECTORY_NOT_SAVED_YET'));
return false;
}
return true;
}
/**
* Get directory fields
*/
public function getFields() {
if (!is_array($this->fields)) {
$this->fields = RSFormProHelper::getDirectoryFields($this->params->get('formId'));
}
return $this->fields;
}
/**
* Submissions query
*/
public function getListQuery() {
// Get query
$db = &$this->_db;
$query = $db->getQuery(true);
// Get headers
$fields = $this->getFields();
$headers = RSFormProHelper::getDirectoryStaticHeaders();
// Check if it's a search.
$search = $this->getSearch();
// Get the SubmissionId
$query->select($db->qn('s.SubmissionId'))
->from($db->qn('#__rsform_submission_values', 'sv'))
->join('left', $db->qn('#__rsform_submissions', 's').' ON ('.$db->qn('sv.SubmissionId').'='.$db->qn('s.SubmissionId').')')
->where($db->qn('s.FormId').'='.$db->q($this->params->get('formId')))
->group($db->qn('s.SubmissionId'))
->order($db->qn($this->getListOrder()).' '.$db->escape($this->getListDirn()));
// Show only confirmed submissions?
if ($this->params->get('show_confirmed', 0)) {
$query->where($db->qn('s.confirmed').'='.$db->q(1));
}
// Show only submissions for selected language
if ($lang = $this->params->get('lang', '')) {
$query->where($db->qn('s.Lang').'='.$db->q($lang));
}
// Check if we need to show only submissions related to UserId.
$userId = $this->params->def('userId', 0);
if ($userId == 'login') {
// Get only logged in user's submissions
$user = JFactory::getUser();
// Do not continue if he's a guest.
if ($user->guest) {
return false;
}
$query->where($db->qn('s.UserId').'='.$db->q($user->get('id')));
} elseif ($userId) {
// Show only the submissions of these users
$userIds = explode(',', $userId);
JArrayHelper::toInteger($userIds);
$query->where($db->qn('s.UserId').' IN ('.implode(',', $userIds).')');
}
// Iterate through fields to build the query
foreach ($fields as $field) {
// If the field is viewable or searchable, we need to select() it.
if ($field->viewable || $field->searchable) {
if ($field->componentId < 0 && isset($headers[$field->componentId])) {
// Static headers.
// Select the value.
if ($field->FieldName == 'confirmed') {
// Make sure we display a text instead of 0 and 1.
$query->select('IF('.$db->qn('s.confirmed').' = '.$db->q(1).', '.$db->q(JText::_('RSFP_YES')).', '.$db->q(JText::_('RSFP_NO')).') AS '.$db->qn('confirmed'));
} else {
$query->select($db->qn('s.'.$field->FieldName));
}
} else {
// Dynamic headers.
// Select the value.
$query->select('GROUP_CONCAT(IF('.$db->qn('sv.FieldName').'='.$db->q($field->FieldName).', '.$db->qn('sv.FieldValue').', NULL)) AS '.$db->qn($field->FieldName));
}
// If we're searching, add the field to the having() query.
if ($search && $field->searchable) {
// DateSubmitted doesn't play well with LIKE
if ($field->FieldId == '-1' && preg_match('#([^0-9\-: ])#', $search)) {
continue;
}
$query->having($db->qn($field->FieldName).' LIKE '.$db->q('%'.$db->escape($search, true).'%', false), 'OR');
}
}
}
return $query;
}
/**
* Get Submissions
*/
public function getItems() {
if ($query = $this->getListQuery()) {
$this->_db->setQuery($query, $this->getStart(), $this->getLimit());
$items = $this->_db->loadObjectList();
} else {
$items = array();
}
list($multipleSeparator, $uploadFields, $multipleFields, $secret) = RSFormProHelper::getDirectoryFormProperties($this->params->get('formId'));
$this->uploadFields = $uploadFields;
$this->multipleFields = $multipleFields;
if ($items) {
foreach ($items as $i => $item) {
foreach ($uploadFields as $field) {
if (isset($item->$field)) {
$item->$field = '<a href="'.JRoute::_('index.php?option=com_rsform&task=submissions.view.file&hash='.md5($item->SubmissionId.$secret.$field)).'">'.htmlspecialchars(basename($item->$field)).'</a>';
}
}
foreach ($multipleFields as $field) {
if (isset($item->$field)) {
$item->$field = str_replace("\n", $multipleSeparator, htmlentities($item->$field, ENT_COMPAT, 'utf-8'));
}
}
$items[$i] = $item;
}
}
return $items;
}
/**
* Get directory details
*/
public function getDirectory() {
$formId = $this->params->get('formId',0);
$table = JTable::getInstance('RSForm_Directory', 'Table');
$table->load($formId);
return $table;
}
public function getTemplate() {
$cid = $this->_app->input->getInt('id',0);
$format = $this->_app->input->get('format');
$user = JFactory::getUser();
$userId = $this->params->def('userId', 0);
$directory = $this->getDirectory();
$template = $directory->ViewLayout;
if ($userId != 'login' && $userId != 0) {
$userId = explode(',', $userId);
JArrayHelper::toInteger($userId);
}
// Grab submission
$this->_db->setQuery("SELECT * FROM #__rsform_submissions WHERE SubmissionId='".$cid."'");
$submission = $this->_db->loadObject();
// Submission doesn't exist
if (!$submission) {
JError::raiseWarning(500, JText::sprintf('RSFP_SUBMISSION_DOES_NOT_EXIST', $cid));
return $this->_app->redirect(JURI::root());
}
// Submission doesn't belong to the configured form ID OR
// can view only own submissions and not his own OR
// can view only specified user IDs and this doesn't belong to any of the IDs
if (($submission->FormId != $this->params->get('formId')) || ($userId == 'login' && $submission->UserId != $user->get('id')) || (is_array($userId) && !in_array($user->get('id'), $userId))) {
JError::raiseWarning(500, JText::sprintf('RSFP_SUBMISSION_NOT_ALLOWED', $cid));
return $this->_app->redirect(JURI::root());
}
if ($this->params->get('show_confirmed', 0) && !$submission->confirmed) {
JError::raiseWarning(500, JText::sprintf('RSFP_SUBMISSION_NOT_CONFIRMED', $cid));
return $this->_app->redirect(JURI::root());
}
$confirmed = $submission->confirmed ? JText::_('RSFP_YES') : JText::_('RSFP_NO');
list($replace, $with) = RSFormProHelper::getReplacements($cid, true);
list($replace2, $with2) = $this->getReplacements($submission->UserId);
$replace = array_merge($replace, $replace2, array('{global:userip}', '{global:date_added}', '{global:submissionid}', '{global:submission_id}', '{global:confirmed}', '{global:lang}'));
$with = array_merge($with, $with2, array($submission->UserIp, RSFormProHelper::getDate($submission->DateSubmitted), $cid, $cid, $confirmed, $submission->Lang));
if ($format == 'pdf') {
if (strpos($template, ':path}') !== false) {
$template = str_replace(':path}',':localpath}',$template);
}
}
if (strpos($template, '{/if}') !== false) {
require_once JPATH_ADMINISTRATOR.'/components/com_rsform/helpers/scripting.php';
RSFormProScripting::compile($template, $replace, $with);
}
$detailsLayout = str_replace($replace, $with, $template);
eval($directory->DetailsScript);
return $detailsLayout;
}
public function getReplacements($user_id) {
static $sitename, $siteurl, $mailfrom, $fromname;
if (is_null($siteurl)) {
$config = JFactory::getConfig();
$sitename = $config->get('sitename');
$siteurl = JURI::root();
$mailfrom = $config->get('mailfrom');
$fromname = $config->get('fromname');
}
$user = JFactory::getUser((int) $user_id);
$replace = array('{global:sitename}', '{global:siteurl}', '{global:userid}', '{global:username}', '{global:email}', '{global:useremail}', '{global:fullname}', '{global:mailfrom}', '{global:fromname}');
$with = array($sitename, $siteurl, $user->id, $user->username, $user->email, $user->email, $user->name, $mailfrom, $fromname);
return array($replace, $with);
}
public function save() {
jimport('joomla.filesystem.file');
jimport('joomla.filesystem.folder');
$cid = JRequest::getInt('id');
$form = JRequest::getVar('form', array(), 'post', 'none', JREQUEST_ALLOWRAW);
$static = JRequest::getVar('formStatic', array(), 'post', 'none', JREQUEST_ALLOWRAW);
$formId = JRequest::getInt('formId');
$files = JRequest::getVar('form', array(), 'files', 'none', JREQUEST_ALLOWRAW);
$validation = RSFormProHelper::validateForm($formId, 'directory', $cid);
if (!empty($validation)) {
return false;
}
$formFields = RSFormProHelper::getDirectoryFields($formId);
$headers = RSFormProHelper::getDirectoryStaticHeaders();
$staticFields = array();
$allowed = array();
foreach ($formFields as $field) {
if ($field->editable) {
if ($field->componentId < 0 && isset($headers[$field->componentId])) {
$staticFields[] = $field->FieldName;
} else {
$allowed[] = $field->FieldName;
}
}
}
//Trigger Event - onBeforeDirectorySave
$this->_app->triggerEvent('rsfp_f_onBeforeDirectorySave', array(array('SubmissionId'=>&$cid,'formId'=>$formId,'post'=>&$form)));
// Handle file uploads first
if (!empty($files['error']))
foreach ($files['error'] as $field => $error)
{
if (!in_array($field, $allowed) || $error) {
continue;
}
// The above $validation should suffice
$this->_db->setQuery("SELECT FieldValue FROM #__rsform_submission_values WHERE FieldName='".$this->_db->escape($field)."' AND SubmissionId='".$cid."' LIMIT 1");
$original = $this->_db->loadResult();
// Prefix
$componentId = RSFormProHelper::getComponentId($field, $formId);
$data = RSFormProHelper::getComponentProperties($componentId);
$prefix = uniqid('').'-';
if (isset($data['PREFIX']) && strlen(trim($data['PREFIX'])) > 0)
$prefix = RSFormProHelper::isCode($data['PREFIX']);
// Path
$realpath = realpath($data['DESTINATION'].DIRECTORY_SEPARATOR);
if (substr($realpath, -1) != DIRECTORY_SEPARATOR)
$realpath .= DIRECTORY_SEPARATOR;
// Filename
$file = $realpath.$prefix.$files['name'][$field];
// Upload File
if (JFile::upload($files['tmp_name'][$field], $file) && $file != $original) {
// Remove the original file to save up space
if (file_exists($original) && is_file($original)) {
JFile::delete($original);
}
// Add to db (submission value)
$form[$field] = $file;
}
}
// Update fields
foreach ($form as $field => $value)
{
if (!in_array($field, $allowed)) {
continue;
}
if (is_array($value)) {
$value = implode("\n", $value);
}
// Dynamic field - update value.
$this->_db->setQuery("SELECT SubmissionValueId, FieldValue FROM #__rsform_submission_values WHERE FieldName='".$this->_db->escape($field)."' AND SubmissionId='".$cid."' LIMIT 1");
$original = $this->_db->loadObject();
if (!$original)
{
$this->_db->setQuery("INSERT INTO #__rsform_submission_values SET FormId='".$formId."', SubmissionId='".$cid."', FieldName='".$this->_db->escape($field)."', FieldValue='".$this->_db->escape($value)."'");
$this->_db->execute();
}
else
{
// Update only if we've changed something
if ($original->FieldValue != $value)
{
$this->_db->setQuery("UPDATE #__rsform_submission_values SET FieldValue='".$this->_db->escape($value)."' WHERE SubmissionValueId='".$original->SubmissionValueId."' LIMIT 1");
$this->_db->execute();
}
}
}
$offset = JFactory::getConfig()->get('offset');
if ($static && $staticFields) {
// Static, update submission
$query = $this->_db->getQuery(true);
$query->update('#__rsform_submissions')
->where($this->_db->qn('SubmissionId').'='.$this->_db->q($cid));
foreach ($staticFields as $field) {
if (!isset($static[$field])) {
$static[$field] = '';
}
if ($field == 'DateSubmitted') {
$static[$field] = JFactory::getDate($static[$field], $offset)->toSql();
}
$query->set($this->_db->qn($field).'='.$this->_db->q($static[$field]));
}
$this->_db->setQuery($query);
$this->_db->execute();
}
// Checkboxes don't send a value if nothing is checked
$checkboxesWhere = '';
if ($editFields = $this->getEditFields()) {
$allowedFields = array();
foreach ($editFields as $field) {
$allowedFields[] = $this->_db->q($field[3]);
}
if (!empty($allowedFields)) {
$checkboxesWhere = "AND p.PropertyValue IN (".implode(',',$allowedFields).")";
}
}
$this->_db->setQuery("SELECT p.PropertyValue FROM #__rsform_components c LEFT JOIN #__rsform_properties p ON (c.ComponentId=p.ComponentId) WHERE c.ComponentTypeId='4' AND p.PropertyName='NAME' AND c.FormId='".$formId."' ".$checkboxesWhere);
$checkboxes = $this->_db->loadColumn();
foreach ($checkboxes as $checkbox) {
$value = isset($form[$checkbox]) ? $form[$checkbox] : '';
if (is_array($value))
$value = implode("\n", $value);
$this->_db->setQuery("UPDATE #__rsform_submission_values SET FieldValue='".$this->_db->escape($value)."' WHERE FieldName='".$this->_db->escape($checkbox)."' AND FormId='".$formId."' AND SubmissionId='".$cid."' LIMIT 1");
$this->_db->execute();
}
// Send emails
$this->sendEmails($formId, $cid);
return true;
}
public function sendEmails($formId, $SubmissionId) {
$directory = $this->getDirectory();
$this->_db->setQuery("SELECT Lang FROM #__rsform_submissions WHERE FormId='".$formId."' AND SubmissionId='".$SubmissionId."'");
$lang = $this->_db->loadResult();
list($placeholders,$values) = RSFormProHelper::getReplacements($SubmissionId);
$this->_db->setQuery("SELECT * FROM #__rsform_emails WHERE `type` = 'directory' AND `formId` = ".$formId." AND `from` != ''");
if ($emails = $this->_db->loadObjectList()) {
$etranslations = RSFormProHelper::getTranslations('emails', $formId, $lang);
foreach ($emails as $email) {
if (isset($etranslations[$email->id.'.fromname'])) {
$email->fromname = $etranslations[$email->id.'.fromname'];
}
if (isset($etranslations[$email->id.'.subject'])) {
$email->subject = $etranslations[$email->id.'.subject'];
}
if (isset($etranslations[$email->id.'.message'])) {
$email->message = $etranslations[$email->id.'.message'];
}
if (empty($email->fromname) || empty($email->subject) || empty($email->message)) {
continue;
}
// RSForm! Pro Scripting - Additional Email Text
// performance check
if (strpos($email->message, '{/if}') !== false) {
require_once JPATH_ADMINISTRATOR.'/components/com_rsform/helpers/scripting.php';
RSFormProScripting::compile($email->message, $placeholders, $values);
}
$directoryEmail = array(
'to' => str_replace($placeholders, $values, $email->to),
'cc' => str_replace($placeholders, $values, $email->cc),
'bcc' => str_replace($placeholders, $values, $email->bcc),
'from' => str_replace($placeholders, $values, $email->from),
'replyto' => str_replace($placeholders, $values, $email->replyto),
'fromName' => str_replace($placeholders, $values, $email->fromname),
'text' => str_replace($placeholders, $values, $email->message),
'subject' => str_replace($placeholders, $values, $email->subject),
'mode' => $email->mode,
'files' => array()
);
// additional cc
if (strpos($directoryEmail['cc'], ',') !== false)
$directoryEmail['cc'] = explode(',', $directoryEmail['cc']);
// additional bcc
if (strpos($directoryEmail['bcc'], ',') !== false)
$directoryEmail['bcc'] = explode(',', $directoryEmail['bcc']);
//Trigger Event - beforeDirectoryEmail
$this->_app->triggerEvent('rsfp_beforeDirectoryEmail', array(array('directory' => &$directory, 'placeholders' => &$placeholders, 'values' => &$values, 'submissionId' => $SubmissionId, 'directoryEmail'=>&$directoryEmail)));
eval($directory->EmailsScript);
// mail users
$recipients = explode(',',$directoryEmail['to']);
if(!empty($recipients))
foreach($recipients as $recipient)
if(!empty($recipient))
RSFormProHelper::sendMail($directoryEmail['from'], $directoryEmail['fromName'], $recipient, $directoryEmail['subject'], $directoryEmail['text'], $directoryEmail['mode'], !empty($directoryEmail['cc']) ? $directoryEmail['cc'] : null, !empty($directoryEmail['bcc']) ? $directoryEmail['bcc'] : null, $directoryEmail['files'], !empty($directoryEmail['replyto']) ? $directoryEmail['replyto'] : '');
}
}
}
public function getUploadFields() {
return $this->uploadFields;
}
public function getMultipleFields() {
return $this->multipleFields;
}
public function getTotal() {
if ($query = $this->getListQuery()) {
$this->_db->setQuery($query);
$this->_db->execute();
return $this->_db->getNumRows();
} else {
return 0;
}
}
public function getPagination() {
jimport('joomla.html.pagination');
return new JPagination($this->getTotal(), $this->getStart(), $this->getLimit());
}
public function getStart() {
static $limitstart;
if (is_null($limitstart)) {
$limitstart = JRequest::getVar('limitstart', 0, '', 'int');
}
return $limitstart;
}
public function getLimit() {
static $limit;
if (is_null($limit)) {
$limit = JRequest::getVar('limit', $this->params->get('display_num'), '', 'int');
}
return $limit;
}
public function getSearch() {
return $this->_app->getUserStateFromRequest($this->context.'.filter.search', 'filter_search', '', 'string');
}
public function getListOrder() {
return $this->_app->getUserStateFromRequest($this->context.'.filter.filter_order', 'filter_order', 'SubmissionId', '');
}
public function getListDirn() {
return $this->_app->getUserStateFromRequest($this->context.'.filter.filter_order_Dir', 'filter_order_Dir', 'desc', 'word');
}
public function getEditFields() {
$id = $this->_app->input->getInt('id',0);
return RSFormProHelper::getEditFields($id);
}
// Get current Itemid
public function getItemid() {
if ($menu = $this->_app->getMenu()) {
$active = $menu->getActive();
return $active->id;
} else {
return 0;
}
}
}