JasonWoof Got questions, comments, patches, etc.? Contact Jason Woofenden
no dashes in filenames, improved image uploading, make_thumbnail()
[wfpl.git] / metaform / template.php
index 2755101..754b710 100644 (file)
@@ -1,13 +1,23 @@
 <?php
 
-# This form requires wfpl. See: http://jasonwoof.org/wfpl
+# This form requires wfpl. If you didn't recieve wfpl along with this file,
+# see: http://jasonwoof.org/wfpl
+
+# This form was auto-generated. If you would like to alter the parameters and
+# generate a new one try this URL:
+#
+# ~metaform_url~
 
 # This code can send form results by e-mail and/or save them to a database. See
 # the next two comments to enable either or both.
 
 # To send results by e-mail, all you have to do is set your e-mail address here:
 $GLOBALS['~form_name~_form_recipient'] = "fixme@example.com";
-
+<!--~upload_settings start~-->
+# Set this to the path to your uploads directory. It can be relative to the
+# location of this script. IT MUST END WITH A SLASH
+$GLOBALS['upload_directory'] = 'uploads/';
+<!--~end~-->
 # To save results to a database, you'll need to create the ~form_name~ table
 # (the file ~form_name~.sql should help with this), and create a file called
 # 'db_connect.php' which calls db_connect() see:
@@ -16,49 +26,72 @@ $GLOBALS['~form_name~_form_recipient'] = "fixme@example.com";
 if(!file_exists('code/wfpl/template.php')) { die('This form requires <a href="http://jasonwoof.org/wfpl">wfpl</a>.'); }
 require_once('code/wfpl/template.php');
 require_once('code/wfpl/format.php');
+require_once('code/wfpl/messages.php');
 require_once('code/wfpl/email.php');
-require_once('code/wfpl/db.php');
+require_once('code/wfpl/db.php');<!--~image_include start~-->
+require_once('code/wfpl/upload.php');<!--~end~-->
 
 function ~form_name~_get_fields() {
-       $fields = array();
        <!--~formats start~-->
-       $~name~ = format_~format~($_REQUEST['~name~']);<!--~end~-->
-       <!--~tem_sets~-->
+       $~name~ = format_~format~($_REQUEST['~name~']);<!--~end~--><!--~image_upload start~-->
+       if($_FILE['~name~'] && $_FILE['~name~']['error'] == 0) {
+               $~name~ = substr(save_uploaded_image('~name~', $GLOBALS['upload_directory']), strlen($GLOBALS['upload_directory']));
+       } else {
+               $~name~ = format_filename($_REQUEST['old_~name~']);
+       }<!--~end~-->
+       <!--~tem_sets start~-->
        tem_set('~name~', $~name~);<!--~end~-->
 
        return array(~php_fields~);
 }
 
 function ~form_name~() {
-       $event_id = format_int($_REQUEST['~form_name~_edit_id']);
+       $edit_id = format_int($_REQUEST['~form_name~_edit_id']);
+       unset($_REQUEST['~form_name~_edit_id']);
        if($edit_id) {
                # add hidden field for database id of row we're editing
-               tem_set('~form_name~_event_id', $edit_id);
+               tem_set('~form_name~_edit_id', $edit_id);
                tem_sub('editing');
+               tem_sub('edit_msg');
        }
 
        $delete_id = format_int($_REQUEST['~form_name~_delete_id']);
+       unset($_REQUEST['~form_name~_delete_id']);
        if($delete_id) {
-               db_delete('~form_name~', 'id = %"', $delete_id);
+               db_delete('~form_name~', 'where id=%i', $delete_id);
+               message('Entry deleted.');
 
                # FIXME: what to do after delete?
                return;
        }
 
+       if(!$edit_id && !$delet_id) {
+               tem_sub('new_msg');
+       }
+
        if(isset($_REQUEST['~always_field~'])) {
                list(~php_fields~) = ~form_name~_get_fields();
 
                if("you're happy with the POSTed values") {
                        # to enable saving to a database, create a file called 'db_connect.php'
                        # see: code/wfpl/examples/db_connect.php
-                       if(file_exists('db_connect.php') {
-                               require_once('db_connect.php');
-                               if($edit_id) {
-                                       db_update('~form_name~', '~db_fields~', ~php_fields~, 'id = %"', $edit_id);
-                                       tem_set('did', 'updated');
+                       if(file_exists('db_connect.php') || file_exists('code/db_connect.php')) {
+                               if(file_exists('db_connect.php') {
+                                       require_once('db_connect.php');
+                               } else {
+                                       require_once('code/db_connect.php');
+                               }
+                               if($edit_id) {<!--~image_db start~-->
+                                       # uploading nothing means leaving it as is.
+                                       if(!$~name~ && $delete_~name~ != 'Yes') {
+                                               $~name~ = db_get_value('~form_name~', '~name~', 'where id=%i', $edit_id);
+                                       }
+                                       <!--~end~-->
+                                       db_update('~form_name~', '~db_fields~', ~php_fields~, 'where id=%i', $edit_id);
+                                       message('Entry updated.');
                                } else {
                                        db_insert('~form_name~', '~db_fields~', ~php_fields~);
-                                       tem_set('did', 'saved');
+                                       message('Entry saved.');
                                }
                        }
                        if($GLOBALS['~form_name~_form_recipient'] != "fixme@example.com") {
@@ -75,35 +108,35 @@ function ~form_name~() {
                                $message = tem_run('~form_name~.email.txt');
                                $cc = '';
                                $bcc = '';
-                               email($from, $to, $subject, $message, $cc, $bcc);
+                               if(email($from, $to, $subject, $message, $cc, $bcc)) {
+                                       tem_set('error_message', 'Due to an internal error, your message could not be sent. Please try again later.');
+                                       tem_sub('error');
+                                       $error = true;
+                               }
+                       }
+                       if($error !== true) {
+                               tem_load('~form_name~.html');
+                               tem_sub('thankyou');
+                               tem_output();
+                               exit();
                        }
-                       tem_load('~form_name~.html');
-                       tem_sub('thankyou');
-                       tem_output();
-                       exit();
                }
                # otherwise, we display the form again. ~form_name~_get_fields() has
                # already put the posted values back into the template engine, so they will
                # show up in the form fields. You should add some message asking people to
                # fix their entry in whatever way you require.
-       }
        } elseif($edit_id) {
                # we've recieved an edit id, but no data. So we grab the values to be edited from the database
-               list(~php_fields~) = db_get_row('events', '~db_fields~', 'id = %"', $event_id);
-               ~tem_sets~
+               list(~php_fields~) = db_get_row('~form_name~', '~db_fields~', 'where id=%i', $edit_id);
+               ~tem_sets.tab~
        } else {
-               # form not submitted, you can set default values like so
+               # form not submitted, you can set default values like so:
                #tem_set('~always_field~', 'Yes');
-       }
+       }<!--~upload_max start~-->
 
-       tem_sub('form');
-}
+       tem_set('upload_max_filesize', upload_max_filesize());<!--~end~-->
 
-# emulate run.php if it's not being used
-if(!function_exists('run_php')) {
-       tem_load('~form_name~.html');
-       ~form_name~();
-       tem_output();
+       tem_sub('form');
 }
 
 ?>