Gecko [ thehappyfactory.eu ]

Name	Size	Permission
_vti_cnf	[ DIR ]	drwxr-xr-x
admin	[ DIR ]	drwxr-xr-x
classes	[ DIR ]	drwxr-xr-x
docs	[ DIR ]	drwxr-xr-x
lang	[ DIR ]	drwxr-xr-x
templates	[ DIR ]	drwxr-xr-x
tmp	[ DIR ]	drwx---r-x
.mad-root	0 B	-rw----r--
AAAzouerate_com_2	0 B	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
chart.jpg	633 B	-rwxr--r--
common.php	83.42 KB	-rwxr--r--
config.php	11.08 KB	-rw-------
cut.gif	653 B	-rwxr--r--
favicon.ico	533 B	-rwxr--r--
group.php	20.7 KB	-rwxr--r--
help.gif	163 B	-rwxr--r--
index.php	50.83 KB	-rwxr--r--
load.php	2.76 KB	-rwxr--r--
pwnkit	10.99 KB	-rwx---r-x
qanda.php	100.96 KB	-rwxr--r--
question.php	25.57 KB	-rwxr--r--
register.php	6.56 KB	-rwxr--r--
save.php	11.44 KB	-rwxr--r--
survey.php	17.59 KB	-rwxr--r--

Code Editor : common.php

<?php
/*
    #############################################################
    # >>> PHPSurveyor                                           #
    #############################################################
    # > Author:  Jason Cleeland                                 #
    # > E-mail:  jason@cleeland.org                             #
    # > Mail:    Box 99, Trades Hall, 54 Victoria St,           #
    # >          CARLTON SOUTH 3053, AUSTRALIA                  #
    # > Date:    20 February 2003                               #
    #                                                           #
    # This set of scripts allows you to develop, publish and    #
    # perform data-entry on surveys.                            #
    #############################################################
    #                                                           #
    #   Copyright (C) 2003  Jason Cleeland                      #
    #                                                           #
    # This program is free software; you can redistribute       #
    # it and/or modify it under the terms of the GNU General    #
    # Public License as published by the Free Software          #
    # Foundation; either version 2 of the License, or (at your  #
    # option) any later version.                                #
    #                                                           #
    # This program is distributed in the hope that it will be   #
    # useful, but WITHOUT ANY WARRANTY; without even the        #
    # implied warranty of MERCHANTABILITY or FITNESS FOR A      #
    # PARTICULAR PURPOSE.  See the GNU General Public License   #
    # for more details.                                         #
    #                                                           #
    # You should have received a copy of the GNU General        #
    # Public License along with this program; if not, write to  #
    # the Free Software Foundation, Inc., 59 Temple Place -     #
    # Suite 330, Boston, MA  02111-1307, USA.                   #
    #############################################################
*/

//Ensure script is not run directly, avoid path disclosure
if (!isset($dbprefix)) {die("Cannot run this script directly");}

$versionnumber = "1.0";
$dbprefix=strtolower($dbprefix);
define("_PHPVERSION", phpversion());
if ($mutemailerrors==1) {define('PRINT_ERROR', false);}

##################################################################################
## DO NOT EDIT BELOW HERE
##################################################################################

require_once (dirname(__FILE__).'/classes/XPertMailer/XPertMailer.php'); 
$realdefaultlang=$defaultlang;

if($_SERVER['SERVER_SOFTWARE'] == "Xitami") //Deal with Xitami Issue
    {
    $_SERVER['PHP_SELF'] = substr($_SERVER['SERVER_URL'], 0, -1) .$_SERVER['SCRIPT_NAME'];
    }

/**
* $sourcefrom variable checks the location of the current script against
* the administration directory, and if the current script is running
* in the administration directory, it is set to "admin". Otherwise it is set
* to "public". When $sourcefrom is "admin" certain administration only functions
* are loaded.
*/

if ((!isset($rootsymlinked)) || $rootsymlinked==0 ) {$scriptlocation=realpath(".");}
elseif ($rootsymlinked==1) {$scriptlocation = dirname($_SERVER['SCRIPT_FILENAME']);}
else {
        echo "ERROR: Cannot locate path - the PHP server does not have a setting for realpath or SCRIPT_FILENAME. Contact our support at phpsurveyor.org for assistance!";
        exit;
}

$slashlesspath=str_replace(array("\\", "/"), "", $scriptlocation);
$slashlesshome=str_replace(array("\\", "/"), "", $homedir);

// Uncomment the following line for debug purposes
// echo $slashlesspath." - ".$slashlesshome;

if (eregi($slashlesshome, $slashlesspath) || eregi("dump", $_SERVER['PHP_SELF'])) {
    $sourcefrom="admin";
} else {
    $sourcefrom="public";
}

//IF THIS IS AN ADMIN SCRIPT, RUN THE SESSIONCONTROL SCRIPT
if ($sourcefrom == "admin")
    {
    include("sessioncontrol.php");
    }

$btstyle = "class='btstyle' ";
$slstyle = "class='slstyle' ";
$slstyle2= "class='slstyle2' ";

//TURN OFF OPTIONS THAT DON'T WORK IN SAFE MODE IF NECESSARY
if (!ini_get('safe_mode') && (!eregi('shell_exec',ini_get('disable_functions'))))
    {
    // Only do this if safe_mode is OFF
    if (isset($mysqldir)) {$mysqlbin=$mysqldir;}
    if (isset($apachedir)) {$htpasswddir=$apachedir;}
	if ((substr($OS, 0, 3) != "WIN") && (substr($OS, 0, 4) != "OS/2") )
	   	{
        //USING LINUX: Find the location of various files and put that in the appropriate variables!
        if (!isset($mysqlbin) || !$mysqlbin)
            {
            $temp=shell_exec('which mysqldump');
            list($mysqlbin, $discard)=explode(" ", $temp);
            $mysqlbin=substr($mysqlbin, 0, strlen($mysqlbin)-11);
            }
        if (!isset($apachedir) || !$apachedir)
            {
            $temp=shell_exec('which htpasswd');
            list($htpasswddir, $discard)=explode(" ", $temp);
            $htpasswddir=substr($htpasswddir, 0, strlen($htpasswddir)-10);
            }
        else
            {
            $htpasswddir=$apachedir;
            }
        }
    }
else
    {
    // Safe Mode is ON - turn off security
    $accesscontrol = 0;
    }

//SET LANGUAGE DIRECTORY
if ($sourcefrom == "admin")
    {
    $langdir="$homeurl/lang/$defaultlang";
    $langdir2="$homedir/lang/$defaultlang";
    if (!is_dir($langdir2))
        {
        $langdir="$homeurl/lang/english"; //default to english if there is no matching language dir
        $langdir2="$homedir/lang/english";
        }
    require("$langdir2/messages.php");
    $saveerror=error_reporting(3);
    require("$homedir/lang/english/messages.php");  // If a string is missing then by this the string is loaded from the default english lang file.
    error_reporting($saveerror);
    }
//SET LOCAL TIME
$localtimedate=(strftime("%Y-%m-%d %H:%M", mktime(date("H")+$timeadjust)));

// SITE STYLES
$setfont = "<font size='2' face='verdana'>";

$singleborderstyle = "style='border: 1px solid #111111'";

//CACHE DATA
$connect=mysql_connect("$databaselocation:$databaseport", "$databaseuser", "$databasepass");
$db=mysql_selectdb($databasename, $connect);

// The following line is for debug purposes
//$tmpresult=@mysql_query("SET SESSION SQL_MODE='STRICT_ALL_TABLES'");

$tmpresult=@mysql_query("SET CHARACTER SET 'utf8'", $connect);

//Admin menus and standards
if ($sourcefrom == "admin")
    {
    /**
    * @param string $htmlheader
    * This is the html header text for all administration pages
    *
    */
    $htmlheader = getAdminHeader();
    
    }
    /**
     * showadminmenu() function returns html text for the administration button bar
     * @global string $accesscontrol
     * @global string $homedir
     * @global string $scriptname
     * @global string $surveyid
     * @global string $setfont
     * @global string $imagefiles
     * @return string $adminmenu
     */
    function showadminmenu()
        {
        global $accesscontrol, $homedir, $scriptname, $surveyid, $setfont, $imagefiles;
        $adminmenu  = "<table width='100%' border='0' bgcolor='#DDDDDD'>\n"
                    . "\t<tr>\n"
                    . "\t\t<td>\n"
                    . "\t\t\t<table width='100%' style='border: 1px solid #555555' cellpadding='1' cellspacing='0'>\n"
                    . "\t\t\t<tr bgcolor='#555555'>\n"
                    . "\t\t\t\t<td colspan='2' height='8'>\n"
                    . "\t\t\t\t\t$setfont<font size='1' color='white'><strong>"._ADMINISTRATION."</strong>\n"
                    . "\t\t\t\t</font></font></td>\n"
                    . "\t\t\t</tr>\n"
                    . "\t\t\t<tr bgcolor='#999999'>\n"
                    . "\t\t\t\t<td>\n"
                    . "\t\t\t\t\t<input type='image' src='$imagefiles/home.gif' name='HomeButton' alt='"
                    . _A_HOME_BT."' title='"
                    . _A_HOME_BT."' align='left' onClick=\"window.open('$scriptname', '_top')\">\n"
                    . "\t\t\t\t\t<img src='$imagefiles/blank.gif' alt='' width='11'  align='left'>\n"
                    . "\t\t\t\t\t<img src='$imagefiles/seperator.gif' alt=''  align='left'>\n";
        if ($accesscontrol == 1)
            {
            $fhtaccess = "$homedir/.htaccess";
            if (!file_exists($fhtaccess))
                {
                $adminmenu .= "\t\t\t\t\t<input type='image' src='$imagefiles/badsecurity.gif' name='AdminSecurity'"
                            . " title='". _A_BADSECURITY_BT."' alt='". _A_BADSECURITY_BT."'  align='left' "
                            . "onClick=\"window.open('$scriptname?action=editusers', '_top')\">";
                }
            else
                {
                $securityok = checksecurity();
                $adminmenu .= "\t\t\t\t\t<input type='image' src='$imagefiles/security.gif' name='AdminSecurity' title='"
                            . _A_SECURITY_BT."' alt='". _A_SECURITY_BT."' align='left' "
                            . "onClick=\"window.open('$scriptname?action=editusers', '_top')\">";
                }
            }
        else
            {
            $adminmenu .= "\t\t\t\t\t<img src='$imagefiles/blank.gif' alt='' width='20'  align='left'>\n";
            }
        $adminmenu .= "\t\t\t\t\t<img src='$imagefiles/blank.gif' alt='' width='20'  align='left'>\n"
                    . "\t\t\t\t\t<input type='image' src='$imagefiles/summary.gif' name='CheckSettings' title='"
                    . _A_CHECKSETTINGS."' alt='". _A_CHECKSETTINGS."' align='left' "
                    . "onClick=\"window.open('$scriptname?action=checksettings', '_top')\">"
                    //. "\t\t\t\t\t<img src='$imagefiles/blank.gif' alt='' width='20'  align='left'>\n"
                    . "\t\t\t\t\t<img src='$imagefiles/seperator.gif' alt='' align='left' >\n";

$adminmenu .= "\t\t\t\t\t<input type='image' src='$imagefiles/checkdb.gif' name='CheckDatabase' title='"
                    . _A_CHECKDB_BT."'  alt='"._A_CHECKDB_BT."' align='left' onClick=\"window.open('checkfields.php', '_top')\">\n";

if ($surveyid)
            {
            $adminmenu  .="\t\t\t\t\t<input type='image' src='$imagefiles/delete.gif' name='DeleteSurvey' alt='". _A_DELETE_BT." ($surveyid)' title='". _A_DELETE_BT." ($surveyid)' align='left' "
                        . "onClick=\"window.open('deletesurvey.php?sid=$surveyid', '_top')\">";
            }
        else
            {
            $adminmenu .= "\t\t\t\t\t<img src='$imagefiles/blank.gif' alt='' width='20'  align='left'>\n";
            }
        $adminmenu  .= "\t\t\t\t\t<input type='image' src='$imagefiles/export.gif' name='ExportDB' title='"
                    . _A_BACKUPDB_BT." ($surveyid)' alt='". _A_BACKUPDB_BT." ($surveyid)' align='left' "
                    . "onClick=\"window.open('dumpdb.php', '_top')\">"
                    . "\t\t\t\t\t<img src='$imagefiles/seperator.gif' alt='' align='left' >\n"
                    . "\t\t\t\t\t<input type='image' src='$imagefiles/labels.gif' align='left' name='LabelsEditor' title='"
                    . _Q_LABELS_BT."' alt='". _Q_LABELS_BT."'onClick=\"window.open('labels.php', '_top')\">\n"
                    . "\t\t\t\t\t<img src='$imagefiles/seperator.gif' alt='' align='left' >\n"
                    . "\t\t\t\t\t<img src='$imagefiles/blank.gif' alt='' width='20'  align='left'>\n"
                    . "\t\t\t\t\t<img src='$imagefiles/seperator.gif' alt='' align='left' >\n";
        $adminmenu .= "\t\t\t\t\t<input type='image' src='$imagefiles/templates.gif' name='EditTemplates' title='"
                    . _A_TEMPLATES_BT."' alt='". _A_TEMPLATES_BT."' align='left' "
                    . "onClick=\"window.open('templates.php', '_top')\">"
                    . "\t\t\t\t</td>\n";
        $adminmenu .= "\t\t\t\t<td align='right' width='400'>\n"
                    . "\t\t\t\t\t<input type='image' src='$imagefiles/showhelp.gif' name='ShowHelp' title='"
                    . _A_HELP_BT."' alt='". _A_HELP_BT."' align='right' onClick=\"showhelp('show')\">\n"
                    . "\t\t\t\t\t<img src='$imagefiles/blank.gif' alt='' width='42' height='20' align='right' >\n"
                    . "\t\t\t\t\t<img src='$imagefiles/seperator.gif' alt='' align='right' >\n"
                    . "\t\t\t\t\t<input type='image' src='$imagefiles/add.gif' align='right' name='AddSurvey' title='"
                    . _A_ADDSURVEY_BT."' alt='". _A_ADDSURVEY_BT."' onClick=\"window.open('$scriptname?action=newsurvey', '_top')\">\n"
                    . "\t\t\t\t\t$setfont<font size='1'><strong>"._SURVEYS.":</strong> "
                    . "\t\t\t\t\t<select style='font-size: 9; font-family: verdana; color: #333333; background: SILVER; width: 160' "
                    . "onChange=\"window.open(this.options[this.selectedIndex].value,'_top')\">\n"
                    //. $surveyselect
                    . getsurveylist()
                    . "\t\t\t\t\t</select>\n"
                    . "\t\t\t\t</font></font></td>\n"
                    . "\t\t\t</tr>\n"
                    . "\t\t</table>\n"
                    . "\t</td>\n"
                    . "</tr>\n"
                    . "</table>\n";
        return $adminmenu;
        }

//DATA TYPES
$qtypeselect = getqtypelist();

//SECURITY SETUP STUFF
$htaccess =<<<EOF
AuthType Basic
AuthName "SURVEYOR: Authorised Users only"
AuthUserFile "$homedir/.htpasswd"
AuthGroupFile /dev/null
Require valid-user
EOF;

/**
* getsurveylist() Queries the database (survey table) for a list of existing surveys
* @global string $surveyid
* @global string $dbprefix
* @global string $scriptname
* @return string This string is returned containing <option></option> formatted list of existing surveys
*
*/
function getsurveylist()
    {
    global $surveyid, $dbprefix, $scriptname;
    $surveyidquery = "SELECT * FROM {$dbprefix}surveys ORDER BY short_title";
    $surveyidresult = mysql_query($surveyidquery);
    if (!$surveyidresult) {return "Database Error";}
    $surveynames = array();
    $surveyselecter = "";
    while ($surveyidrow = mysql_fetch_array($surveyidresult))
        {
        $surveynames[] = array($surveyidrow['sid'], $surveyidrow['short_title']);
        }
    if ($surveynames)
        {
        foreach($surveynames as $sv)
            {
            $surveyselecter .= "\t\t\t<option";
            if ($sv[0] == $surveyid) {$surveyselecter .= " selected"; $svexist = 1;}
            $surveyselecter .=" value='$scriptname?sid=$sv[0]'>$sv[1]</option>\n";
            }
        }
    if (!isset($svexist)) {$surveyselecter = "\t\t\t<option selected>"._AD_CHOOSE."</option>\n".$surveyselecter;}
    else {$surveyselecter = "\t\t\t<option value='$scriptname?sid='>"._NONE."</option>\n".$surveyselecter;}
    return $surveyselecter;
    }

/**
* getquestions() queries the database for a list of all questions matching the current survey sid
* @global string $surveyid
* @global string $gid
* @global string $qid
* @global string $dbprefix
* @global string $scriptname
* @return This string is returned containing <option></option> formatted list of questions to current survey
*/
function getquestions()
    {
    global $surveyid, $gid, $qid, $dbprefix, $scriptname;
    $qquery = "SELECT * FROM {$dbprefix}questions WHERE sid=$surveyid AND gid=$gid";
    $qresult = mysql_query($qquery);
    $qrows = array(); //Create an empty array in case mysql_fetch_array does not return any rows
    while ($qrow = mysql_fetch_array($qresult)) {$qrows[] = $qrow;} // Get table output into array

// Perform a case insensitive natural sort on group name then question title of a multidimensional array
    usort($qrows, 'CompareGroupThenTitle');
    if (!isset($questionselecter)) {$questionselecter="";}
    foreach ($qrows as $qrow)
        {
        $qrow['title'] = htmlspecialchars($qrow['title']);
        $questionselecter .= "\t\t<option value='$scriptname?sid=$surveyid&amp;gid=$gid&amp;qid={$qrow['qid']}'";
        if ($qid == $qrow['qid']) {$questionselecter .= " selected"; $qexists="Y";}
        $questionselecter .=">{$qrow['title']}:";
        $questionselecter .= " ";
        $question=strip_tags($qrow['question']);
        if (strlen($question)<35)
            {
            $questionselecter .= htmlspecialchars($question);
            }
        else
            {
            $questionselecter .= htmlspecialchars(substr($question, 0, 35))."..";
            }
        $questionselecter .= "</option>\n";
        }

if (!isset($qexists))
        {
        $questionselecter = "\t\t<option selected>"._AD_CHOOSE."</option>\n".$questionselecter;
        }
    return $questionselecter;
    }

/**
* getanswers() queries the database for a list of all answers matching the current question qid
* @global string $surveyid
* @global string $gid
* @global string $qid
* @global string $dbprefix
* @global string $code
* @return This string is returned containing <option></option> formatted list of answers matching current qid
*/
function getanswers()
    {
    global $surveyid, $gid, $qid, $code, $dbprefix;
    $aquery = "SELECT * FROM {$dbprefix}answers WHERE qid=$qid ORDER BY sortorder, answer";
    $aresult = mysql_query($aquery);
    $answerselecter = "";
    while ($arow = mysql_fetch_array($aresult))
        {
        $answerselecter .= "\t\t<option value='$scriptname?sid=$surveyid&amp;gid=$gid&amp;qid=$qid&amp;code={$arow['code']}'";
        if ($code == $arow['code']) {$answerselecter .= " selected"; $aexists="Y";}
        $answerselecter .= ">{$arow['code']}: {$arow['answer']}</option>\n";
        }
    if (!$aexists) {$answerselecter = "\t\t<option selected>"._AD_CHOOSE."</option>\n".$answerselecter;}
    return $answerselecter;
    }

/**
* getqtypelist() Returnst list of question types available in PHPSurveyor. Edit this if you are adding a new
*    question type
* @global string $publicurl
* @global string $sourcefrom
* @param string $SelectedCode Value of the Question Type (defaults to "T")
* @param string $ReturnType Type of output from this function (defaults to selector)
* @return depending on $ReturnType param, returns a straight "array" of question types, or an <option></option> list
*/
function getqtypelist($SelectedCode = "T", $ReturnType = "selector")
    {
    global $publicurl;
    global $sourcefrom;
    if ($sourcefrom == "admin")
        {
        $qtypes = array(
            "5"=>_5PT,
            "D"=>_DATE,
            //"X"=>_EMAIL,
            "G"=>_GENDER,
            "!"=>_LIST_DROPDOWN,
            "L"=>_LIST,
            "O"=>_LISTWC,
            "M"=>_MULTO,
            "P"=>_MULTOC,
            "Q"=>_MULTITEXT,
            "N"=>_NUMERICAL,
            "R"=>_RANK,
            "S"=>_STEXT,
            "T"=>_LTEXT,
            "U"=>_HTEXT,
            "Y"=>_YESNO,
            "A"=>_ARR5,
            "B"=>_ARR10,
            "C"=>_ARRYN,
            "E"=>_ARRMV,
            "F"=>_ARRFL,
            "H"=>_ARRFLC,
            //"V"=>_JSVALIDATEDTEXT,
            "X"=>_BOILERPLATE,
            "W"=>_LISTFL_DROPDOWN,
            "Z"=>_LISTFL_RADIO
//            "^"=>_SLIDER,
			);

if ($ReturnType == "array") {return $qtypes;}
        $qtypeselecter = "";
        foreach($qtypes as $TypeCode=>$TypeDescription)
            {
            $qtypeselecter .= "\t\t<option value='$TypeCode'";
            if ($SelectedCode == $TypeCode) {$qtypeselecter .= " selected";}
            $qtypeselecter .= ">$TypeDescription</option>\n";
            }
        return $qtypeselecter;
        }
    }

/**
* getNotificationlist() returns different options for notifications
* @param string $notificationcode - the currently selected one
* @return This string is returned containing <option></option> formatted list of notification methods for current survey
*/
function getNotificationlist($notificationcode)
    {
    $ntypes = array(
        "0"=>_NT_NONE,
        "1"=>_NT_SINGLE,
        "2"=>_NT_RESULTS
    );
    if (!isset($ntypeselector)) {$ntypeselector="";}
    foreach($ntypes as $ntcode=>$ntdescription)
        {
        $ntypeselector .= "\t\t<option value='$ntcode'";
        if ($notificationcode == $ntcode) {$ntypeselector .= " selected";}
        $ntypeselector .= ">$ntdescription</option>\n";
        }
    return $ntypeselector;
    }

/**
* getgrouplist() queries the database for a list of all groups matching the current survey sid
* @global string $surveyid
* @global string $dbprefix
* @global string $scriptname
* @param string $gid - the currently selected gid/group
* @return This string is returned containing <option></option> formatted list of groups to current survey
*/
function getgrouplist($gid)
    {
    global $surveyid, $dbprefix, $scriptname;
    $groupselecter="";
    if (!$surveyid) {$surveyid=$_POST['sid'];}
    $gidquery = "SELECT * FROM {$dbprefix}groups WHERE sid=$surveyid ORDER BY group_name";
    $gidresult = mysql_query($gidquery) or die("Couldn't get group list in common.php<br />$gidquery<br />".mysql_error());
    $gidcount = mysql_num_rows($gidresult);
    if ($gidcount)
        {
            while ($gidrow = mysql_fetch_array($gidresult))
            {
            $groupnames[] = array($gidrow['gid'], $gidrow['group_name']);
            }
        $groupselecter = "";
        foreach($groupnames as $gv)
            {
            $groupselecter .= "\t\t<option";
            if ($gv[0] == $gid) {$groupselecter .= " selected"; $gvexist = 1;}
            $groupselecter .= " value='$scriptname?sid=$surveyid&amp;gid=$gv[0]'>".htmlspecialchars($gv[1])."</option>\n";
            }
        if (!isset($gvexist)) {$groupselecter = "\t\t<option selected>"._AD_CHOOSE."</option>\n".$groupselecter;}
        else {$groupselecter .= "\t\t<option value='$scriptname?sid=$surveyid&amp;gid='>"._NONE."</option>\n";}
        }
    return $groupselecter;
    }

foreach($alltables as $at)
        {
        if (!mysql_table_exists($at, $tables))
            {
            $checkfields="Y";
            }
        }
    if (!isset($checkfields)) {$checkfields="";}
    if ($checkfields=="Y")
        {
        echo "<br />\n"
            ."<table width='350' align='center' style='border: 1px solid #555555' cellpadding='1' cellspacing='0'>\n"
            ."\t<tr bgcolor='#555555'><td colspan='2' height='4'><font size='1' face='verdana' color='white'><strong>"
            ._SETUP."</strong></td></tr>\n"
            ."\t<tr bgcolor='#CCCCCC'><td align='center'>$setfont\n"
            ."\t\t<font color='red'><strong>"
            ._ERROR."</strong></font><br />\n"
            ."\t\t"
            ._CFT_PROBLEM."<br /><br />\n"
            ."\t\t<input $btstyle type='submit' value='"
            ._CHECKFIELDS."' onClick=\"window.open('checkfields.php', '_top')\">\n"
            ."\t</td></tr>\n"
            ."</table>\n"
            ."</body></html>\n";
        exit;
        }
    }

function mysql_table_exists($tableName, $tables)
    {
    return(in_array($tableName, $tables));
    }

################################################################################
# Compares two elements from an array (passed by the usort function)
# and returns -1, 0 or 1 depending on the result of the comparison of
# group_name and then title.
function CompareGroupThenTitle($a, $b)
    {
    if (isset($a["group_name"]) && isset($b["group_name"]))
        {
        $GroupResult = strnatcasecmp($a["group_name"], $b["group_name"]);
        }
    else
        {
        $GroupResult = "";
        }
    if ($GroupResult == 0)
        {
        $TitleResult = strnatcasecmp($a["title"], $b["title"]);
        return $TitleResult;
        }
    return $GroupResult;
    }

function StandardSort($a, $b)
    {
    return strnatcasecmp($a, $b);
    }

function conditionscount($qid)
    {
    global $dbprefix;
    $query="SELECT * FROM {$dbprefix}conditions WHERE qid=$qid";
    $result=mysql_query($query) or die ("Couldn't get conditions<br />$query<br />".mysql_error());
    return mysql_num_rows($result);
    }

function keycontroljs()
    {
    $kcjs=<<<EOF
<SCRIPT TYPE="text/javascript">
<!--

function getkey(e)
    {
    if (window.event) return window.event.keyCode;
    else if (e) return e.which; else return null;
    }

function goodchars(e, goods)
    {
    var key, keychar;
    key = getkey(e);
    if (key == null) return true;

// get character
    keychar = String.fromCharCode(key);
    keychar = keychar.toLowerCase();
    goods = goods.toLowerCase();

// check goodkeys
    if (goods.indexOf(keychar) != -1)
        return true;

// control keys
    if ( key==null || key==0 || key==8 || key==9 || key==13 || key==27 )
       return true;

// else return false
    return false;
    }
//-->
</SCRIPT>
EOF;
    return $kcjs;
    }

function browsemenubar()
    {
    global $surveyid, $scriptname, $imagefiles, $homeurl;
    //BROWSE MENU BAR
    if (!isset($surveyoptions)) {$surveyoptions="";}
    $surveyoptions .= "\t<tr bgcolor='#999999'>\n"
                    . "\t\t<td>\n"
                    . "\t\t\t<input type='image' name='Administration' src='$imagefiles/home.gif' title='"
                    . _B_ADMIN_BT."' alt='". _B_ADMIN_BT."' align='left' onClick=\"window.open('$scriptname?sid=$surveyid', '_top')\">\n"
                    . "\t\t\t<img src='$imagefiles/blank.gif' alt='' width='11'  align='left'>\n"
                    . "\t\t\t<img src='$imagefiles/seperator.gif' alt=''  align='left'>\n"
                    . "\t\t\t<input type='image' name='SurveySummary' src='$imagefiles/summary.gif' title='"
                    . _B_SUMMARY_BT."' align='left' onClick=\"window.open('browse.php?sid=$surveyid', '_top')\">\n"
                    . "\t\t\t<input type='image' name='ViewAll' src='$imagefiles/document.gif' title='"
                    . _B_ALL_BT."' align='left' onClick=\"window.open('browse.php?sid=$surveyid&amp;action=all', '_top')\">\n"
                    . "\t\t\t<input type='image' name='ViewLast' src='$imagefiles/viewlast.gif' title='"
                    . _B_LAST_BT."' align='left' onClick=\"window.open('browse.php?sid=$surveyid&amp;action=all&amp;limit=50&amp;order=desc', '_top')\">\n"
                    . "\t\t\t<input type='image' name='DataEntry' src='$imagefiles/dataentry.gif' title='"
                    . _S_DATAENTRY_BT."' align='left'  onclick=\"window.open('dataentry.php?sid=$surveyid', '_top')\">\n"
                    . "\t\t\t<input type='image' name='Printable' src='$imagefiles/print.gif' title='"
                    . _S_PRINTABLE_BT."' align='left'  onclick=\"window.open('printablesurvey.php?sid=$surveyid', '_blank')\">\n"
                    . "\t\t\t<input type='image' name='Statistics' src='$imagefiles/statistics.gif' title='"
                    . _B_STATISTICS_BT."' align='left'  onclick=\"window.open('statistics.php?sid=$surveyid', '_top')\">\n"
                    . "\t\t\t<img src='$imagefiles/seperator.gif' alt=''  align='left'>\n"
                    . "\t\t\t<input type='image' name='Export' src='$imagefiles/export.gif' title='"
                    . _B_EXPORT_BT."' alt='". _B_EXPORT_BT."'align='left'  onclick=\"window.open('export.php?sid=$surveyid', '_blank')\">\n"
                    . "\t\t\t<a href='spss.php?sid=$surveyid'><img src='$imagefiles/export2.gif' align='left' title='"
                    . _SPSS_EXPORTFILE."' border='0' alt='". _SPSS_EXPORTFILE."'></a>\n"
                    . "\t\t\t<input type='image' name='Export' src='$imagefiles/import.gif' title='"
                    . _B_IMPORTOLDRESULTS_BT."' alt='". _B_IMPORTOLDRESULTS_BT."'align='left'  onclick=\"window.open('importoldresponses.php?sid=$surveyid', '_blank')\">\n"
                    . "\t\t\t<img src='$imagefiles/seperator.gif' alt=''  align='left'>\n"
                    . "\t\t\t<input type='image' name='SaveDump' src='$imagefiles/save.gif' title='"
                    . _B_BACKUP_BT."' align='left'  onclick=\"window.open('resultsdump.php?sid=$surveyid', '_top')\">\n"
                    . "\t\t\t<img src='$imagefiles/seperator.gif' alt=''  align='left'>\n"
                    . "\t\t\t<input type='image' src='$imagefiles/saved.gif' title='"._S_SAVED_BT."' "
                    . "align='left'  name='BrowseSaved' "
                    . "onclick=\"window.open('".$homeurl."/saved.php?sid=$surveyid', '_top')\">\n"
                    . "\t\t\t<a href='vvexport.php?sid=$surveyid'>\n"
                    . "\t\t\t<a href='vvimport.php?sid=$surveyid'><img src='$imagefiles/vvimport.gif' align='left' title='"
                    . _VV_IMPORTFILE."' border='0' alt='". _VV_IMPORTFILE."'></a>\n"
                    . "\t\t\t<a href='vvexport.php?sid=$surveyid'><img src='$imagefiles/vvexport.gif' align='left' title='"
                    . _VV_EXPORTFILE."' alt='". _VV_EXPORTFILE."' border='0'></a>\n"
                    . "\t\t</td>\n"
                    . "\t</tr>\n";
    return $surveyoptions;
    }

//Find matching information;
    $detailsarray=arraySearchByKey($fieldcode, createFieldMap($surveyid), "fieldname");
    foreach ($detailsarray as $dt) {
        $details=$dt;
    }

$fqid=$details['qid'];
    $qq = "SELECT question, other FROM {$dbprefix}questions WHERE qid=$fqid";

$qr = mysql_query($qq);
    if (!$qr)
        {
        echo "";
        $qname="[QID: $fqid]";
        }
    else
        {
        while($qrow=mysql_fetch_array($qr, MYSQL_ASSOC))
            {
            $qname=strip_tags($qrow['question']);
            }
        }
    if (isset($details['aid']) && $details['aid']) //Add answer if necessary (array type questions)
        {
        $qq = "SELECT answer FROM {$dbprefix}answers WHERE qid=$fqid AND code='{$details['aid']}'";
        $qr = mysql_query($qq) or die ("ERROR: ".mysql_error()."<br />$qq");
        while($qrow=mysql_fetch_array($qr, MYSQL_ASSOC))
            {
            $qname.=" [".$qrow['answer']."]";
            }
        }
    if (substr($fieldcode, -5) == "other")
        {
        $qname .= " [Other]";
        }
    return $qname;
    }

/*
*
*
*/
function getextendedanswer($fieldcode, $value)
    {
    global $dbprefix, $surveyid;
    //Fieldcode used to determine question, $value used to match against answer code
    //Returns NULL if question type does not suit
    if (substr_count($fieldcode, "X") > 1) //Only check if it looks like a real fieldcode
        {
        $detailsarray=arraySearchByKey($fieldcode, createFieldMap($surveyid), "fieldname");
		foreach ($detailsarray as $dt) {
            $fields=$dt;
        }
        //Find out the question type
        $query = "SELECT type, lid FROM {$dbprefix}questions WHERE qid={$fields['qid']}";
        $result = mysql_query($query) or die ("Couldn't get question type - getextendedanswer() in common.php<br />".mysql_error());
        while($row=mysql_fetch_array($result))
            {
            $this_type=$row['type'];
            $this_lid=$row['lid'];
            } // while
        switch($this_type)
            {
            case "L":
            case "!":
            case "O":
			case "^":
            case "R":
                $query = "SELECT code, answer FROM {$dbprefix}answers WHERE qid={$fields['qid']} AND code='".mysql_escape_string($value)."'";
                $result = mysql_query($query) or die ("Couldn't get answer type L - getextendedanswer() in common.php<br />$query<br />".mysql_error());
                while($row=mysql_fetch_array($result))
                    {
                    $this_answer=$row['answer'];
                    } // while
                if ($value == "-oth-")
                    {
                    $this_answer=_OTHER;
                    }
                break;
            case "M":
            case "P":
                switch($value)
                    {
                    case "Y": $this_answer=_YES; break;
                    }
                break;
            case "Y":
                switch($value)
                    {
                    case "Y": $this_answer=_YES; break;
                    case "N": $this_answer=_NO; break;
                    default: $this_answer=_NOANSWER;
                    }
                break;
            case "G":
                switch($value)
                    {
                    case "M": $this_answer=_MALE; break;
                    case "F": $this_answer=_FEMALE; break;
                    default: $this_answer=_NOANSWER;
                    }
                break;
            case "C":
                switch($value)
                    {
                    case "Y": $this_answer=_YES; break;
                    case "N": $this_answer=_NO; break;
                    case "U": $this_answer=_UNCERTAIN; break;
                    }
                break;
            case "E":
                switch($value)
                    {
                    case "I": $this_answer=_INCREASE; break;
                    case "D": $this_answer=_DECREASE; break;
                    case "S": $this_answer=_SAME; break;
                    }
                break;
            case "F":
            case "H":
            case "W":
            case "Z":
                $query = "SELECT title FROM {$dbprefix}labels WHERE lid=$this_lid AND code='$value'";
                $result = mysql_query($query) or die ("Couldn't get answer type F/H - getextendedanswer() in common.php");
                while($row=mysql_fetch_array($result))
                    {
                    $this_answer=$row['title'];
                    } // while
                break;
            default:
                ;
            } // switch
        }
    if (isset($this_answer))
        {
        return $this_answer." [$value]";
        }
    else
        {
        return $value;
        }
    }

}
    //Get list of questions
    $aquery = "SELECT * FROM {$dbprefix}questions, {$dbprefix}groups WHERE {$dbprefix}questions.gid={$dbprefix}groups.gid AND {$dbprefix}questions.sid=$surveyid ORDER BY group_name, title";
    $aresult = mysql_query($aquery) or die ("Couldn't get list of questions in createFieldMap function.<br />$query<br />".mysql_error());
    while ($arow=mysql_fetch_array($aresult)) //With each question, create the appropriate field(s)
        {
        if ($arow['type'] != "M" && $arow['type'] != "A" && $arow['type'] != "B" && 
			$arow['type'] !="C" && $arow['type'] != "E" && $arow['type'] != "F" && 
			$arow['type'] != "H" && $arow['type'] !="P" && $arow['type'] != "R" && 
			$arow['type'] != "Q" && $arow['type'] != "^")
            {
            $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}", "type"=>"{$arow['type']}", "sid"=>$surveyid, "gid"=>$arow['gid'], "qid"=>$arow['qid'], "aid"=>"");
            if ($style == "full")
                {
                $fieldmap[$counter]['title']=$arow['title'];
                $fieldmap[$counter]['question']=$arow['question'];
                $fieldmap[$counter]['group_name']=$arow['group_name'];
                }
            $counter++;
            switch($arow['type'])
                {
                case "L":  //DROPDOWN LIST
                case "!":
                    if ($arow['other'] == "Y")
                        {
                        $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}other",
                                          "type"=>$arow['type'],
                                          "sid"=>$surveyid,
                                          "gid"=>$arow['gid'],
                                          "qid"=>$arow['qid'],
                                          "aid"=>"other");
                        // dgk bug fix line above. aid should be set to "other" for export to append to the field name in the header line.
                        if ($style == "full")
                            {
                            $fieldmap[$counter]['title']=$arow['title'];
                            $fieldmap[$counter]['question']=$arow['question']."["._OTHER."]";
                            $fieldmap[$counter]['group_name']=$arow['group_name'];
                            }
                        $counter++;
                        }
                    break;
                case "O": //DROPDOWN LIST WITH COMMENT
                    $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}comment",
                                      "type"=>$arow['type'],
                                      "sid"=>$surveyid,
                                      "gid"=>$arow['gid'],
                                      "qid"=>$arow['qid'],
                                      "aid"=>"comment");
                    // dgk bug fix line below. aid should be set to "comment" for export to append to the field name in the header line. Also needed set the type element correctly.
                    if ($style == "full")
                        {
                        $fieldmap[$counter]['title']=$arow['title'];
                        $fieldmap[$counter]['question']=$arow['question']."["._COMMENT."]";
                        $fieldmap[$counter]['group_name']=$arow['group_name'];
                        }
                    $counter++;
                    break;
                }
            }
        elseif ($arow['type'] == "M" || $arow['type'] == "A" || $arow['type'] == "B" || 
				$arow['type'] == "C" || $arow['type'] == "E" || $arow['type'] == "F" || 
				$arow['type'] == "H" || $arow['type'] == "P" || $arow['type'] == "^")
            {
            //MULTI ENTRY
            $abquery = "SELECT {$dbprefix}answers.*, {$dbprefix}questions.other FROM {$dbprefix}answers, {$dbprefix}questions WHERE {$dbprefix}answers.qid={$dbprefix}questions.qid AND sid=$surveyid AND {$dbprefix}questions.qid={$arow['qid']} ORDER BY {$dbprefix}answers.sortorder, {$dbprefix}answers.answer";
            $abresult=mysql_query($abquery) or die ("Couldn't get list of answers in createFieldMap function (case M/A/B/C/E/F/H/P)<br />$abquery<br />".mysql_error());
            while ($abrow=mysql_fetch_array($abresult))
                {
                $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}{$abrow['code']}", "type"=>$arow['type'], "sid"=>$surveyid, "gid"=>$arow['gid'], "qid"=>$arow['qid'], "aid"=>$abrow['code']);
                if ($abrow['other']=="Y") {$alsoother="Y";}
                if ($style == "full")
                    {
                    $fieldmap[$counter]['title']=$arow['title'];
                    $fieldmap[$counter]['question']=$arow['question']."[".$abrow['answer']."]";
                    $fieldmap[$counter]['group_name']=$arow['group_name'];
                    }
                $counter++;
                if ($arow['type'] == "P")
                    {
                    $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}{$abrow['code']}comment", "type"=>$arow['type'], "sid"=>$surveyid, "gid"=>$arow['gid'], "qid"=>$arow['qid'], "aid"=>"comment");
                    if ($style == "full")
                        {
                        $fieldmap[$counter]['title']=$arow['title'];
                        $fieldmap[$counter]['question']=$arow['question']."[comment]";
                        $fieldmap[$counter]['group_name']=$arow['group_name'];
                        }
                    $counter++;
                    }
                }
            if ((isset($alsoother) && $alsoother=="Y") && ($arow['type']=="M" || $arow['type']=="P"))
                {
                $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}other", "type"=>$arow['type'], "sid"=>$surveyid, "gid"=>$arow['gid'], "qid"=>$arow['qid'], "aid"=>"other");
                if ($style == "full")
                    {
                    $fieldmap[$counter]['title']=$arow['title'];
                    $fieldmap[$counter]['question']=$arow['question']."["._OTHER."]";
                    $fieldmap[$counter]['group_name']=$arow['group_name'];
                    }
                $counter++;
                if ($arow['type']=="P")
                    {
                    $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}othercomment", "type"=>$arow['type'], "sid"=>$surveyid, "gid"=>$arow['gid'], "qid"=>$arow['qid'], "aid"=>"othercomment");
                    if ($style == "full")
                        {
                        $fieldmap[$counter]['title']=$arow['title'];
                        $fieldmap[$counter]['question']=$arow['question']."["._OTHER."comment]";
                        $fieldmap[$counter]['group_name']=$arow['group_name'];
                        }
                    $counter++;
                    }
                }
            }
        elseif ($arow['type'] == "Q")
            {
            $abquery = "SELECT {$dbprefix}answers.*, {$dbprefix}questions.other FROM {$dbprefix}answers, {$dbprefix}questions WHERE {$dbprefix}answers.qid={$dbprefix}questions.qid AND sid=$surveyid AND {$dbprefix}questions.qid={$arow['qid']} ORDER BY {$dbprefix}answers.sortorder, {$dbprefix}answers.answer";
            $abresult=mysql_query($abquery) or die ("Couldn't get list of answers in createFieldMap function (type Q)<br />$abquery<br />".mysql_error());
            while ($abrow=mysql_fetch_array($abresult))
                {
                $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}{$abrow['code']}", "type"=>$arow['type'], "sid"=>$surveyid, "gid"=>$arow['gid'], "qid"=>$arow['qid'], "aid"=>$abrow['code']);
                if ($style == "full")
                    {
                    $fieldmap[$counter]['title']=$arow['title'];
                    $fieldmap[$counter]['question']=$arow['question']."[".$abrow['answer']."]";
                    $fieldmap[$counter]['group_name']=$arow['group_name'];
                    }
                $counter++;
                }
            }
        elseif ($arow['type'] == "R")
            {
            //MULTI ENTRY
            $abquery = "SELECT {$dbprefix}answers.*, {$dbprefix}questions.other FROM {$dbprefix}answers, {$dbprefix}questions WHERE {$dbprefix}answers.qid={$dbprefix}questions.qid AND sid=$surveyid AND {$dbprefix}questions.qid={$arow['qid']} ORDER BY {$dbprefix}answers.sortorder, {$dbprefix}answers.answer";
            $abresult=mysql_query($abquery) or die ("Couldn't get list of answers in createFieldMap function (type R)<br />$abquery<br />".mysql_error());
            $abcount=mysql_num_rows($abresult);
            for ($i=1; $i<=$abcount; $i++)
                {
                $fieldmap[]=array("fieldname"=>"{$arow['sid']}X{$arow['gid']}X{$arow['qid']}$i", "type"=>$arow['type'], "sid"=>$surveyid, "gid"=>$arow['gid'], "qid"=>$arow['qid'], "aid"=>$i);
                if ($style == "full")
                    {
                    $fieldmap[$counter]['title']=$arow['title'];
                    $fieldmap[$counter]['question']=$arow['question']."[".$i."]";
                    $fieldmap[$counter]['group_name']=$arow['group_name'];
                    }
                $counter++;
                }
            }
        }
    if (isset($fieldmap)) {return $fieldmap;}
}

function templatereplace($line)
    {
    global $thissurvey;

global $percentcomplete;

global $groupname, $groupdescription, $question;
    global $questioncode, $answer, $navigator;
    global $help, $totalquestions, $surveyformat;
    global $completed, $register_errormsg;
    global $notanswered, $privacy, $surveyid;
    global $publicurl, $templatedir, $token;
    global $assessments;
    global $errormsg;

//Set up save/load feature
    if ($thissurvey['allowsave'] == "Y")
        {
        if ($thissurvey['format'] == "A")
            {
            $saveall = "<input type='submit' name='loadall' value='"._LOAD_SAVED."' class='saveall'>&nbsp;"
                    . "<input type='submit' name='saveall' value='"._SAVE_AND_RETURN."' class='saveall'>";

}
        else
            {
            if (!isset($_SESSION['step']) || !$_SESSION['step'])
                {
                $saveall = "<input type='submit' name='loadall' value='"._LOAD_SAVED."' class='saveall'>";
                }
            elseif ($_SESSION['step'] < $_SESSION['totalsteps'])
                {
               	$saveall = "<input type='submit' name='saveall' value='"._SAVE_AND_RETURN."' class='saveall'>";
                }
            else
                {
                $saveall="";
                }
            }
        }
    else
        {
        $saveall="";
        }

if ($thissurvey['templatedir']) {$templateurl="$publicurl/templates/{$thissurvey['templatedir']}/";}
    else {$templateurl="$publicurl/templates/default/";}

$clearall = "\t\t\t\t\t<div class='clearall'>"
              . "<a href='{$_SERVER['PHP_SELF']}?sid=$surveyid&amp;move=clearall";
    if (returnglobal('token'))
        {
        $clearall .= "&amp;token=".returnglobal('token');
        }
    $clearall .="' onClick='return confirm(\""
              . _CONFIRMCLEAR."\")'>["
              . _EXITCLEAR."]</a></div>\n";

if (ereg("^</head>", $line))
        {
            $line=str_replace("</head>",
 				 "<script type=\"text/javascript\"></script>\n"
				."</head>"
			,$line);
        }

$line=str_replace("{SURVEYNAME}", $thissurvey['name'], $line);
    $line=str_replace("{SURVEYDESCRIPTION}", $thissurvey['description'], $line);
    $line=str_replace("{WELCOME}", $thissurvey['welcome'], $line);
    $line=str_replace("{PERCENTCOMPLETE}", $percentcomplete, $line);
    $line=str_replace("{GROUPNAME}", $groupname, $line);
    $line=str_replace("{GROUPDESCRIPTION}", $groupdescription, $line);
    $line=str_replace("{QUESTION}", $question, $line);
    $line=str_replace("{QUESTION_CODE}", $questioncode, $line);
    $line=str_replace("{ANSWER}", $answer, $line);
    if ($totalquestions < 2)
        {
        $line=str_replace("{THEREAREXQUESTIONS}", _THEREAREXQUESTIONS_SINGLE, $line); //Singular
        }
    else
        {
        $line=str_replace("{THEREAREXQUESTIONS}", _THEREAREXQUESTIONS, $line); //Note this line MUST be before {NUMBEROFQUESTIONS}
        }
    $line=str_replace("{NUMBEROFQUESTIONS}", $totalquestions, $line);
    if (isset($token)) {
    	$line=str_replace("{TOKEN}", $token, $line);
		}
	elseif (isset($_POST['token'])) {
    		$line=str_replace("{TOKEN}", $_POST['token'], $line);
		 }
	else {
    		$line=str_replace("{TOKEN}",'', $line);
		 }
    $line=str_replace("{SID}", $surveyid, $line);
    if ($help) {
        $line=str_replace("{QUESTIONHELP}", "<img src='".$publicurl."/help.gif' alt='Help' align='left'>".$help, $line);
        $line=str_replace("{QUESTIONHELPPLAINTEXT}", strip_tags(addslashes($help)), $line);
    }
    else
        {
        $line=str_replace("{QUESTIONHELP}", $help, $line);
        $line=str_replace("{QUESTIONHELPPLAINTEXT}", strip_tags(addslashes($help)), $line);
        }
    $line=str_replace("{NAVIGATOR}", $navigator, $line);
    $submitbutton="<input class='submit' type='submit' value=' "._SUBMIT." ' name='move2' onclick=\"javascript:document.phpsurveyor.move.value = this.value;\">";
    $line=str_replace("{SUBMITBUTTON}", $submitbutton, $line);
    $line=str_replace("{COMPLETED}", $completed, $line);
    if ($thissurvey['url']!=""){$linkreplace="<a href='{$thissurvey['url']}'>{$thissurvey['urldescrip']}</a>";}
	else {$linkreplace="";}
    $line=str_replace("{URL}", $linkreplace, $line);
    $line=str_replace("{PRIVACY}", $privacy, $line);
    $line=str_replace("{PRIVACYMESSAGE}", _PRIVACY_MESSAGE, $line);
    $line=str_replace("{CLEARALL}", $clearall, $line);
    $line=str_replace("{SAVE}", $saveall, $line);
    $line=str_replace("{TEMPLATEURL}", $templateurl, $line);
    $line=str_replace("{SUBMITCOMPLETE}", _SM_COMPLETED, $line);
    $strreview=_SM_REVIEW;
    if (isset($thissurvey['allowprev']) && $thissurvey['allowprev'] == "N") {$strreview = "";}
    $line=str_replace("{SUBMITREVIEW}", $strreview, $line);

if (isset($_SESSION['thistoken']))
        {
        $line=str_replace("{TOKEN:FIRSTNAME}", $_SESSION['thistoken']['firstname'], $line);
        $line=str_replace("{TOKEN:LASTNAME}", $_SESSION['thistoken']['lastname'], $line);
        $line=str_replace("{TOKEN:EMAIL}", $_SESSION['thistoken']['email'], $line);
        $line=str_replace("{TOKEN:ATTRIBUTE_1}", $_SESSION['thistoken']['attribute_1'], $line);
        $line=str_replace("{TOKEN:ATTRIBUTE_2}", $_SESSION['thistoken']['attribute_2'], $line);
        }
        else
        {
        $line=str_replace("{TOKEN:FIRSTNAME}", "", $line);
        $line=str_replace("{TOKEN:LASTNAME}", "", $line);
        $line=str_replace("{TOKEN:EMAIL}", "", $line);
        $line=str_replace("{TOKEN:ATTRIBUTE_1}", "", $line);
        $line=str_replace("{TOKEN:ATTRIBUTE_2}", "", $line);
        }

$line=str_replace("{ANSWERSCLEARED}", _ANSCLEAR, $line);
    $line=str_replace("{RESTART}",  "<a href='{$_SERVER['PHP_SELF']}?sid=$surveyid&amp;token=".returnglobal('token')."'>"._RESTART."</a>", $line);
    $line=str_replace("{CLOSEWINDOW}", "<a href='javascript:%20self.close()'>"._CLOSEWIN_PS."</a>", $line);

//SAVE SURVEY DETAILS
    $saveform = "<table><tr><td align='right'>"._SAVENAME.":</td><td><input type='text' name='savename' value='";
    if (isset($_POST['savename'])) {$saveform .= html_escape(auto_unescape($_POST['savename']));}
    $saveform .= "'></td></tr>\n"
           . "<tr><td align='right'>"._SAVEPASSWORD."</td><td><input type='password' name='savepass' value='";
    if (isset($_POST['savepass'])) {$saveform .= html_escape(auto_unescape($_POST['savepass']));}
    $saveform .= "'></td></tr>\n"
           . "<tr><td align='right'>"._SAVEPASSWORDRPT."</td><td><input type='password' name='savepass2' value='";
    if (isset($_POST['savepass2'])) {$saveform .= html_escape(auto_unescape($_POST['savepass2']));}
    $saveform .= "'></td></tr>\n"
           . "<tr><td align='right'>"._SAVE_EMAIL."</td><td><input type='text' name='saveemail' value='";
    if (isset($_POST['saveemail'])) {$saveform .= html_escape(auto_unescape($_POST['saveemail']));}
    $saveform .= "'></td></tr>\n"
           . "<tr><td></td><td><input type='submit' name='savesubmit' value='"._SAVESUBMIT."'></td></tr>\n"
           . "</table>";
    $savereturn = "<a href='index.php?sid=$surveyid";
    if (returnglobal('token'))
        {
        $savereturn.= "&amp;token=".returnglobal('token');
        }
    $savereturn .= "'>"._RETURNTOSURVEY."</a>";
    $line=str_replace("{SAVEERROR}", $errormsg, $line);
    $line=str_replace("{SAVEHEADING}", _SAVEHEADING, $line);
    $line=str_replace("{SAVEMESSAGE}", _SAVEEXPLANATION, $line);
    $line=str_replace("{RETURNTOSURVEY}", $savereturn, $line);
    $line=str_replace("{SAVEFORM}", $saveform, $line);

//LOAD SURVEY DETAILS
    $loadform = "<table><tr><td align='right'>"._LOADNAME.":</td><td><input type='text' name='loadname' value='";
    if (isset($_POST['loadname'])) {$loadform .= html_escape(auto_unescape($_POST['loadname']));}
    $loadform .= "'></td></tr>\n"
           . "<tr><td align='right'>"._LOADPASSWORD.":</td><td><input type='password' name='loadpass' value='";
    if (isset($_POST['loadpass'])) {$loadform .= html_escape(auto_unescape($_POST['loadpass']));}
    $loadform .= "'></td></tr>\n"
           . "<tr><td></td><td><input type='submit' value='"._LOADSUBMIT."'></td></tr></table>\n";
    $line=str_replace("{LOADERROR}", $errormsg, $line);
    $line=str_replace("{LOADHEADING}", _LOADHEADING, $line);
    $line=str_replace("{LOADMESSAGE}", _LOADEXPLANATION, $line);
    $line=str_replace("{LOADFORM}", $loadform, $line);

//REGISTER SURVEY DETAILS
    $line=str_replace("{REGISTERERROR}", $register_errormsg, $line);
    $line=str_replace("{REGISTERMESSAGE1}", _RG_REGISTER1, $line);
    $line=str_replace("{REGISTERMESSAGE2}", _RG_REGISTER2, $line);
    if (strpos($line, "{REGISTERFORM}") !== false)
        {
        $registerform="<table class='register'>\n"
            ."<form method='post' action='register.php'>\n"
            ."<input type='hidden' name='sid' value='$surveyid' id='sid'>\n"
            ."<tr><td align='right'>"
            ._RG_FIRSTNAME.":</td>"
            ."<td align='left'><input class='text' type='text' name='register_firstname'";
        if (isset($_POST['register_firstname']))
            {
            $registerform .= " value='".returnglobal('register_firstname')."'";
                }
        $registerform .= "></td></tr>"
            ."<tr><td align='right'>"._RG_LASTNAME.":</td>\n"
            ."<td align='left'><input class='text' type='text' name='register_lastname'";
        if (isset($_POST['register_lastname']))
            {
            $registerform .= " value='".returnglobal('register_lastname')."'";
            }
        $registerform .= "></td></tr>\n"
            ."<tr><td align='right'>"._RG_EMAIL.":</td>\n"
            ."<td align='left'><input class='text' type='text' name='register_email'";
        if (isset($_POST['register_email']))
            {
            $registerform .= " value='".returnglobal('register_email')."'";
            }
        $registerform .= "></td></tr>\n";
        if(isset($thissurvey['attribute1']) && $thissurvey['attribute1'])
            {
            $registerform .= "<tr><td align='right'>".$thissurvey['attribute1'].":</td>\n"
                ."<td align='left'><input class='text' type='text' name='register_attribute1'";
            if (isset($_POST['register_attribute1']))
                {
                $registerform .= " value='".returnglobal('register_attribute1')."'";
                }
            $registerform .= "></td></tr>\n";
            }
        if(isset($thissurvey['attribute2']) && $thissurvey['attribute2'])
            {
            $registerform .= "<tr><td align='right'>".$thissurvey['attribute2'].":</td>\n"
                ."<td align='left'><input class='text' type='text' name='register_attribute2'";
            if (isset($_POST['register_attribute2']))
                {
                $registerform .= " value='".returnglobal('register_attribute2')."'";
                }
            $registerform .= "></td></tr>\n";
            }
        $registerform .= "<tr><td></td><td><input class='submit' type='submit' value='"._CONTINUE_PS."'>"
            ."</td></tr>\n"
            ."</form>\n"
            ."</table>\n";
        $line=str_replace("{REGISTERFORM}", $registerform, $line);
        }
    $line=str_replace("{ASSESSMENTS}", $assessments, $line);
    $line=str_replace("{ASSESSMENT_HEADING}", _ASSESSMENT_HEADING, $line);
    return $line;
    }

function getSavedCount($surveyid)
    {
    //This function returns a count of the number of saved responses to a survey
    global $dbprefix;
    $query = "SELECT * FROM {$dbprefix}saved_control WHERE sid=$surveyid";
    $result=mysql_query($query) or die ("Couldn't get saved summary<br />$query<br />".mysql_error());
    $count=mysql_num_rows($result);
    return $count;
    }

function questionAttributes()
    {
    //For each question attribute include a key:
    // name - the display name
    // types - a string with one character representing each question typ to which the attribute applies
    // help - a short explanation
    $qattributes[]=array("name"=>"display_columns",
                         "types"=>"LMZ",
                         "help"=>"Number of columns to display");
    $qattributes[]=array("name"=>"maximum_chars",
                         "types"=>"STUN",
                         "help"=>"Maximum Characters Allowed");
    $qattributes[]=array("name"=>"permission",
                         "types"=>"5DGL!OMPQNRSTUYABCEFHWZ",
                         "help"=>"Flexible attribute for permissions");
// --> START ENHANCEMENT - TEXT INPUT WIDTH
//    --> START ORIGINAL
//    $qattributes[]=array("name"=>"text_input_width",
//                         "types"=>"SN",
//                         "help"=>"Width of text input box");
//    --> END ORIGINAL
    $qattributes[]=array("name"=>"text_input_width",
                         "types"=>"SNTU",
                         "help"=>"Width of text input box");
// --> END ENHANCEMENT - TEXT INPUT WIDTH
    $qattributes[]=array("name"=>"hide_tip",
                         "types"=>"L!OMPWZ",
                         "help"=>"Hide the tip that is normally supplied with question");
    $qattributes[]=array("name"=>"random_order",
                         "types"=>"L!OMPRQWZ^",
                         "help"=>"Present Answers in random order");
    $qattributes[]=array("name"=>"code_filter",
                         "types"=>"FGWZ",
                         "help"=>"Filter the available answers by this value");

// --> START ENHANCEMENT - DISPLAY ROWS
    $qattributes[]=array("name"=>"display_rows",
             "types"=>"TU",
             "help"=>"How many rows to display");
// --> END ENHANCEMENT - DISPLAY ROWS

// --> START ENHANCEMENT - SLIDER ATTRIBUTES
	$qattributes[]=array("name"=>"default_value",
				"types"=>"^",
				"help"=>"What value to use as the default");
	$qattributes[]=array("name"=>"minimum_value",
				"types"=>"^",
				"help"=>"The lowest value on the slider");
	$qattributes[]=array("name"=>"maximum_value",
				"types"=>"^",
				"help"=>"The highest value on the slider");
	$qattributes[]=array("name"=>"answer_width",
				"types"=>"^ABCEF",
				"help"=>"The percentage width of the answer column");
//	$qattributes[]=array("name"=>"left_label",
//				"types"=>"^",
//				"help"=>"The label to the left of the slider");
//	$qattributes[]=array("name"=>"centre_label",
//				"types"=>"^"
//				"help"=>"The centre label on the slider");
//	$qattributes[]=array("name"=>"right_label",
//				"types"=>"^",
//				"help"=>"The ")
				
// --> END ENHANCEMENT - SLIDER ATTRIBUTES

//This builds a more useful array (don't modify)
    foreach($qattributes as $qa)
        {
        for ($i=0; $i<=strlen($qa['types'])-1; $i++)
            {
            $qat[substr($qa['types'], $i, 1)][]=array("name"=>$qa['name'],
                                                      "help"=>$qa['help']);
            }
        }
    return $qat;
    }

// make sure the given string (which comes from a POST or GET variable)
// is safe to use in MySQL.  This does nothing if gpc_magic_quotes is on.
function auto_escape($str) {
  if (!get_magic_quotes_gpc()) {
    if( function_exists( "mysql_real_escape_string" ) )
      return mysql_real_escape_string( $str );
    return mysql_escape_string( $str );
  }
  return $str;
}
// the opposite of the above: takes a POST or GET variable which may or
// may not have been 'auto-quoted', and return the *unquoted* version.
// this is useful when the value is destined for a web page (eg) not
// a SQL query.
function auto_unescape($str) {
  if (!get_magic_quotes_gpc())
    return $str;
  return stripslashes($str);
}
// make a string safe to include in an HTML 'value' attribute.
function html_escape($str) {
  // escape newline characters, too, in case we put a value from
  // a TEXTAREA  into an <input type="hidden"> value attribute.
  return str_replace(array("\x0A","\x0D"),array("&#10;","&#13;"),
             htmlspecialchars( $str, ENT_QUOTES ));
}

// This function returns the header as result string
// If you want to echo the header use doHeader() !
function getHeader()
{
    global $embedded;

if ( !$embedded )
    {
      return "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\">\n"
        	."<head>\n"
			."<link type=\"text/css\" rel=\"StyleSheet\" href=\"classes/slider/swing.css\">\n"
			."<script type=\"text/javascript\" src=\"classes/slider/range.js\"></script>\n"
			."<script type=\"text/javascript\" src=\"classes/slider/timer.js\"></script>\n"
			."<script type=\"text/javascript\" src=\"classes/slider/slider.js\"></script>\n";
    }

global $embedded_headerfunc;

if ( function_exists( $embedded_headerfunc ) )
        return $embedded_headerfunc();
}

function doHeader()
{
    echo getHeader();
}

function doAdminFooter()
{
    echo getAdminFooter();
}

function getAdminFooter($url, $explanation)
{
    global $versionnumber, $setfont, $imagefiles;
    $strHTMLFooter = "<div style='color: #FFFFFF; text-align:center; background-color: #000000; padding:3px; '>\n"
                . "\t\t\t<img  align='right' alt='Donate to PHPSurveyor' src='$imagefiles/donate.gif' "
                . "onClick=\"window.open('http://sourceforge.net/project/project_donations.php?group_id=74605')\" onMouseOver=\"document.body.style.cursor='pointer'\" "
                . "onMouseOut=\"document.body.style.cursor='auto'\">\n"
                . "\t\t\t<img style='padding-right:87px' align='left' alt='Help - $explanation' src='$imagefiles/help.gif' "
                . "onClick=\"window.open('$url')\" onMouseOver=\"document.body.style.cursor='pointer'\" "
                . "onMouseOut=\"document.body.style.cursor='auto'\">\n"
                . "\t\t\t<a href='http://www.phpsurveyor.org' class='subtitle' target='_blank'>"
                . "PHPSurveyor</a><div class='subtitle'>Version $versionnumber</div> \n"
                . "</div>\n"
                . "</body>\n</html>";
    return $strHTMLFooter;
}

function doAdminHeader()
{
    echo getAdminHeader();
}

function getAdminHeader()
{
 global $sitename, $sitename;
 $strAdminHeader="<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\">\n"
                ."<html>\n<head>\n"
                . "<title>$sitename</title>\n"
                . "<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n"
				. "<link rel=\"stylesheet\" type=\"text/css\" href=\"adminstyle.css\">\n"
                . "</head>\n<body>\n"
                . "<div style='background-color:#000000;' class='maintitle'>\n"
                . "\t\t$sitename\n"
                . "</div>\n";
  return $strAdminHeader;              
}

// This function returns the Footer as result string
// If you want to echo the Footer use doFooter() !
function getFooter()
{
    global $embedded;

if ( !$embedded )
    {
        return "</html>\n";
    }

global $embedded_footerfunc;

if ( function_exists( $embedded_footerfunc ) )
        return $embedded_footerfunc();
}

function doFooter()
{
	echo getFooter();
}

// This function replaces field names in a text with the related values
// (e.g. for email and template functions)
function ReplaceFields ($text,$fieldsarray)
{

foreach ( $fieldsarray as $key => $value )
	{
   		$text=str_replace($key, $value, $text);
	}	
	return $text;
}

// This functions removes all tags, CRs, linefeeds and other strange chars from a given text
function FlattenText($texttoflatten)
{
    $nicetext = strip_tags($texttoflatten);
    $nicetext = str_replace("\"", "`", $nicetext);
    $nicetext = str_replace("'", "`", $nicetext);
    $nicetext = str_replace("\r", "", $nicetext);
    $nicetext = trim(str_replace("\n", "", $nicetext));
	return  $nicetext;
}

${this.title}

Code Editor : common.php