X-Git-Url: https://jasonwoof.com/gitweb/?a=blobdiff_plain;f=metaform%2Ftemplate.php;h=d8f663bd1d2e9cf69780dc798872a1aabd94804b;hb=e09ce518fa4526e8832d81e7693f30991abb0a48;hp=bdd7da1dba2156def8612b2b44e7cdbed7d4a442;hpb=c63498c465bec640bbd8a521216aa37ba178b821;p=wfpl.git

diff --git a/metaform/template.php b/metaform/template.php
index bdd7da1..d8f663b 100644
--- a/metaform/template.php
+++ b/metaform/template.php
@@ -9,10 +9,10 @@
 
 
 # SETUP
-<!--~opt_email_1 start~-->
+<!--~opt_email {~-->
 # To send results by e-mail, all you have to do is set your e-mail address here:
-$GLOBALS['~file_name~_form_recipient'] = "fixme@example.com";
-<!--~end~--><!--~opt_db_1 start~-->
+$GLOBALS['~file_name~_form_recipient'] = 'fixme@example.com';
+<!--~}~--><!--~opt_db {~-->
 # To save results to a database, you'll need to create the ~table_name~ table
 # (the file ~file_name~.sql should help with this), and create the file
 # 'code/db_connect.php' which calls db_connect() see:
@@ -20,92 +20,88 @@ $GLOBALS['~file_name~_form_recipient'] = "fixme@example.com";
 #
 # if you rename any of the database fields, you'll need to update this:
 
-define('~file_name.upper~_DB_FIELDS', '~db_fields~');
-<!--~end~--><!--~upload_settings start~-->
+define('~file_name upper~_DB_FIELDS', '~db_fields~');
+<!--~}~--><!--~upload_settings {~-->
 # Set this to the path to your uploads directory. It can be relative to the
 # location of this script. IT MUST END WITH A SLASH
 $GLOBALS['upload_directory'] = 'uploads/';
-<!--~end~--><!--~opt_http_pass_1 start~-->
-# Define the username and password required to view this form:
-define('AUTH_REALM', '~file_name~ administration area');
-define('AUTH_USER', 'fixme');
-define('AUTH_PASS', 'fixme');
-<!--~end~-->
-
-require_once('code/wfpl/template.php');
+<!--~}~--><!--~file_settings {~-->
+$GLOBALS['~name~_file_name'] = uniqid() . getmypid() . '.txt'; # comment this out to use uploader's filename
+<!--~}~--><!--~image_settings {~-->
+$GLOBALS['~name~_max_width'] = '400';
+$GLOBALS['~name~_max_height'] = '400';<!--~thumb_settings {~-->
+$GLOBALS['~name~_thumb_max_width'] = '70';
+$GLOBALS['~name~_thumb_max_height'] = '70';
+$GLOBALS['~name~_file_name'] = uniqid() . getmypid() . '.jpg'; # comment this out to use uploader's filename
+<!--~}~--><!--~}~-->
+
 require_once('code/wfpl/format.php');
-require_once('code/wfpl/messages.php');
-require_once('code/wfpl/email.php');<!--~opt_db_2 start~-->
-require_once('code/db_connect.php');<!--~end~--><!--~image_include start~-->
-require_once('code/wfpl/upload.php');<!--~end~-->
+require_once('code/wfpl/email.php');<!--~uploads_include {~-->
+require_once('code/wfpl/upload.php');<!--~}~-->
 
-function ~file_name~_get_fields() {<!--~formats start~-->
-	$~name~ = format_~format~($_REQUEST['~name~']<!--~pulldown_format_extra start~-->, '~name~'<!--~end~-->);<!--~end~--><!--~image_upload start~-->
+function ~file_name~_get_fields() {
+	$data = array();
+<!--~formats {~-->
+	$data['~name~'] = format_~format~($_REQUEST['~name~']<!--~pulldown_format_extra {~-->, '~name~'<!--~}~-->);<!--~}~--><!--~image_upload {~-->
 	if($_FILES['~name~'] && $_FILES['~name~']['error'] == 0) {
-		$~name~ = substr(save_uploaded_image('~name~', $GLOBALS['upload_directory']), strlen($GLOBALS['upload_directory']));
+		$data['~name~'] = convert_uploaded_image('~name~', $GLOBALS['upload_directory'] . $GLOBALS['~name~_file_name'], $GLOBALS['~name~_max_width'], $GLOBALS['~name~_max_height']<!--~thumb_upload_params {~-->, $GLOBALS['~name~_thumb_max_width'], $GLOBALS['~name~_thumb_max_height']<!--~}~-->);
 	} else {
 		if($_REQUEST['delete_~name~'] == 'Yes') {
-			$~name~ = '';
+			$data['~name~'] = '';
 		} else {
-			$~name~ = format_filename($_REQUEST['old_~name~']);
+			$data['~name~'] = format_image_w_h<!--~thumb_w_h {~-->_thumb_w_h<!--~}~-->($_REQUEST['old_~name~']);
 		}
-	}<!--~end~-->
-
-	~file_name~_tem_sets(~php_fields~);
+	}<!--~}~--><!--~file_upload {~-->
+	$~name~_filename_tmp = $GLOBALS['~name~_file_name'];
+	if(!$~name~_filename_tmp) {
+		$~name~_filename_tmp = format_filename($_REQUEST['~name~']);
+	}
+	if($_FILES['~name~'] && $_FILES['~name~']['error'] == 0) {
+		$data['~name~'] = save_uploaded_file('~name~', $GLOBALS['upload_directory'] . $~name~_filename_tmp);
+	} else {
+		if($_REQUEST['delete_~name~'] == 'Yes') {
+			$data['~name~'] = '';
+		} else {
+			$data['~name~'] = format_path($_REQUEST['old_~name~']);
+		}
+	}<!--~}~-->
 
-	return array(~php_fields~);
+	return $data;
 }
 
-function ~file_name~_tem_sets(~php_fields~) {<!--~tem_sets start~-->
-	tem_set('~name~', $~name~);<!--~end~-->
-}
-<!--~opt_listing_2 start~-->
+<!--~opt_listing {~-->
 # You may pass a "where clause" for the db query.
 function ~file_name~_display_listing($where = 'order by ~always_field~ limit 100') {
-	$rows = db_get_rows('~table_name~', 'id<!--~listing_fields_1 start~-->,~name~<!--~end~-->', $where);
+	$rows = db_get_assocs('~table_name~', 'id<!--~listing_fields_1 {~-->,~name~<!--~}~-->', $where);
 	if($rows == false || count($rows) == 0) {
-		tem_show('empty_listing');
-		tem_show('listings');
-		return false;
+		tem_set('listings', array('empty_listing' => true));
+		return;
 	}
 
-	foreach($rows as $row) {
-		list($id<!--~listing_fields_2 start~-->, $~name~<!--~end~-->) = $row;
-		tem_set('id', $id);
-		if($~always_field~ == '') {
-			$~always_field~ = '--';
+	# make sure there's something clickable
+	foreach($rows as &$row) {
+		if($row['~always_field~'] == '') {
+			$row['~always_field~'] = '--';
 		}
-		~file_name~_tem_sets(~php_fields~);
-		tem_show('listing_row');
 	}
-	tem_show('populated_listing');
-	tem_show('listings');
+	tem_set('listings', array(
+		'populated_listing' => true,
+		'rows' => $rows));
 	return true;
 }
-<!--~end~-->
-function ~file_name~_main() {<!--~opt_display_1 start~-->
+<!--~}~-->
+function ~file_name~_main() {<!--~opt_pass {~-->
+	if(!logged_in_as_admin()) {
+		$_REQUEST['url'] = this_url();
+		return 'admin_login';
+	}
+<!--~}~--><!--~opt_display {~-->
 	if(isset($_REQUEST['~file_name~_id'])) {
-		$ret = ~file_name~_display_main();
-		if($ret) {
-			return $ret;
-		}
-		tem_show('display_body');
+		return ~file_name~_display_main();
 	} else {
-		$ret = ~file_name~_edit_main();
-		if($ret) {
-			return $ret;
-		}
-		tem_show('edit_body');
-	}
-<!--~end~--><!--~opt_display_1_else start~-->
-	$ret = _~file_name~_main();
-	if($ret) {
-		return $ret;
+		return ~file_name~_edit_main();
 	}
-<!--~end~-->
-	# sections displayed with tem_show() will be coppied to the main template if you have one.
-	tem_show('main_body');
-}<!--~opt_display_2 start~-->
+}
 
 function ~file_name~_display_main() {
 	$id = format_int($_REQUEST['~file_name~_id']);
@@ -114,79 +110,70 @@ function ~file_name~_display_main() {
 		message('Error: Broken link');
 		return './~file_name~';
 	}
-	$row = db_get_row('~table_name~', ~file_name.upper~_DB_FIELDS, 'where id=%i', $id);
+	$row = db_get_assoc('~table_name~', 'id,'.~file_name upper~_DB_FIELDS, 'where id=%i', $id);
 	if(!$row) {
-		message('Error: ~singular.cap~ not found');
+		message('Error: ~singular cap~ not found');
 		return './~file_name~';
 	}
-	list(~php_fields~) = $row;
-	~file_name~_tem_sets(~php_fields~);
-	tem_set('id', $id);
+	tem_set('display', $row);
 }
 
-function ~file_name~_edit_main() {<!--~end~--><!--~opt_display_2_else start~-->
-
-
-function _~file_name~_main() {<!--~end~--><!--~opt_http_pass_2 start~-->
-	# To remove password protection, just delete this block:
-	if (!isset($_SERVER['PHP_AUTH_USER']) || $_SERVER['PHP_AUTH_USER'] != AUTH_USER || $_SERVER['PHP_AUTH_PW'] != AUTH_PASS) {
-		header('WWW-Authenticate: Basic realm="' . AUTH_REALM . '"');
-		header('HTTP/1.0 401 Unauthorized');
-		echo '401 Unauthorized';
-		exit;
-	}
-<!--~end~--><!--~pulldowns start~-->
-	pulldown('~name~', array('option 1', 'option 2', 'option 3'));
-<!--~end~--><!--~opt_db_3 start~-->
+function ~file_name~_edit_main() {<!--~}~--><!--~pulldowns {~-->
+	pulldown('~name~', ~pulldown_options~);
+<!--~}~--><!--~opt_db {~-->
 	$edit_id = format_int($_REQUEST['~file_name~_edit_id']);
 	unset($_REQUEST['~file_name~_edit_id']);
 	if($edit_id) {
 		# add hidden field for database id of row we're editing
 		tem_set('~file_name~_edit_id', $edit_id);
-		tem_show('editing');
+		tem_set('editing', 'show');
+		tem_set('edit_msg', 'show');
 	}
 
 	$delete_id = format_int($_REQUEST['~file_name~_delete_id']);
 	unset($_REQUEST['~file_name~_delete_id']);
 	if($delete_id) {
 		db_delete('~table_name~', 'where id=%i', $delete_id);
-		message('~singular.cap~ deleted.');
+		message('~singular cap~ deleted.');
 
 		return './~file_name~';
 	}
 
-	if(!$edit_id) {<!--~opt_listing_1 start~-->
+	if(!$edit_id) {<!--~opt_listing {~-->
 		if(!isset($_REQUEST['~file_name~_new']) && !isset($_REQUEST['~always_field~'])) {
 			~file_name~_display_listing();
 			return;
 		}
-<!--~end~-->
-		tem_show('new_msg');
-	}<!--~end~-->
-
+<!--~}~-->
+		tem_set('new_msg', 'show');
+	}
+<!--~}~-->
 	if(isset($_POST['~always_field~'])) {
-		list(~php_fields~) = ~file_name~_get_fields();
+		$data = ~file_name~_get_fields();
 
-		if("you're happy with the POSTed values") {<!--~opt_db_4 start~-->
+		if("you're happy with the POSTed values") {<!--~opt_db {~-->
 			if($edit_id) {
-				db_update('~table_name~', ~file_name.upper~_DB_FIELDS, ~php_fields~, 'where id=%i', $edit_id);
-				message('~singular.cap~ updated.');
+				db_update_assoc('~table_name~', $data, 'where id=%i', $edit_id);
+				message('~singular cap~ updated.');
 			} else {
-				db_insert('~table_name~', ~file_name.upper~_DB_FIELDS, ~php_fields~);
-				message('~singular.cap~ saved.');
-			}<!--~end~--><!--~opt_email_2 start~-->
-			if($GLOBALS['~file_name~_form_recipient'] != "fixme@example.com") {
+				db_insert_assoc('~table_name~', $data);
+				message('~singular cap~ saved.');
+			}<!--~}~--><!--~opt_email {~-->
+			if($GLOBALS['~file_name~_form_recipient'] != 'fixme@example.com') {
 				$to = $GLOBALS['~file_name~_form_recipient'];
-				$from = $to;
-				$reply_to = '';
+				$from = 'noreply@~this_domain~';
+				$reply_to = $to;
 				if(isset($_REQUEST['email']) and valid_email($_REQUEST['email'])) {
 					$reply_to = $_REQUEST['email'];
 					if($_REQUEST['name'] and ereg('^[a-zA-Z0-9_\' -]*$', $_REQUEST['name']) !== false) {
 						$reply_to = "$_REQUEST[name] <$reply_to>";
 					}
 				}
-				$subject = '~plural.cap~ form submitted';
-				$message = tem_run('~file_name~.email.txt');
+				$subject = '~plural cap~ form submitted';
+				$email_template = new tem();
+				$email_template->load('~file_name~.email.txt');
+				$email_template->sets($data);
+				$message = $email_template->run();
 				$cc = '';
 				$bcc = '';
 				if(email($from, $to, $subject, $message, $reply_to, $cc, $bcc)) {
@@ -195,7 +182,7 @@ function _~file_name~_main() {<!--~end~--><!--~opt_http_pass_2 start~-->
 				} else {
 					message('Message sent');
 				}
-			}<!--~end~-->
+			}<!--~}~-->
 			if($error !== true) {
 				return './~file_name~'; # FIXME is this the page you want to go to after successful form submission?
 			}
@@ -203,24 +190,20 @@ function _~file_name~_main() {<!--~end~--><!--~opt_http_pass_2 start~-->
 		# otherwise, we display the form again. ~file_name~_get_fields() has
 		# already put the posted values back into the template engine, so they will
 		# show up in the form fields. You should add some message asking people to
-		# fix their entry in whatever way you require.<!--~opt_db_5 start~-->
+		# fix their entry in whatever way you require.<!--~opt_db {~-->
 	} elseif($edit_id) {
 		# we've recieved an edit id, but no data. So we grab the values to be edited from the database
-		list(~php_fields~) = db_get_row('~table_name~', ~file_name.upper~_DB_FIELDS, 'where id=%i', $edit_id);
-		~file_name~_tem_sets(~php_fields~);<!--~end~-->
+		$data = db_get_assoc('~table_name~', ~file_name upper~_DB_FIELDS, 'where id=%i', $edit_id);<!--~}~-->
 	} else {
 		# form not submitted, you can set default values like so:
-		#tem_set('~always_field~', 'Yes');
-	}<!--~upload_max start~-->
-
-	tem_set('upload_max_filesize', upload_max_filesize());<!--~end~-->
+		#$data = array('~always_field~' => 'Yes');
+		$data = array();
+	}<!--~upload_max {~-->
 
-	# this has to be later in the file because it requres that ~always_field~ be set already
-	if($edit_id) {
-		tem_show('edit_msg');
-	}
+	tem_set('upload_max_filesize', upload_max_filesize());<!--~}~-->
 
-	tem_show('form');
+	tem_set('form', $data);<!--~show_extra_headers {~-->
+	tem_set('extra_headers', 'show');<!--~}~-->
 }
 
 ?>