Gecko [ thehappyfactory.eu ]

Name	Size	Permission
_vti_cnf	[ DIR ]	drwxr-xr-x
admin	[ DIR ]	drwxr-xr-x
classes	[ DIR ]	drwxr-xr-x
docs	[ DIR ]	drwxr-xr-x
lang	[ DIR ]	drwxr-xr-x
templates	[ DIR ]	drwxr-xr-x
tmp	[ DIR ]	drwx---r-x
.mad-root	0 B	-rw----r--
AAAzouerate_com_2	0 B	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
chart.jpg	633 B	-rwxr--r--
common.php	83.42 KB	-rwxr--r--
config.php	11.08 KB	-rw-------
cut.gif	653 B	-rwxr--r--
favicon.ico	533 B	-rwxr--r--
group.php	20.7 KB	-rwxr--r--
help.gif	163 B	-rwxr--r--
index.php	50.83 KB	-rwxr--r--
load.php	2.76 KB	-rwxr--r--
pwnkit	10.99 KB	-rwx---r-x
qanda.php	100.96 KB	-rwxr--r--
question.php	25.57 KB	-rwxr--r--
register.php	6.56 KB	-rwxr--r--
save.php	11.44 KB	-rwxr--r--
survey.php	17.59 KB	-rwxr--r--

Code Editor : index.php

<?php
/*
	#############################################################
	# >>> PHPSurveyor  											#
	#############################################################
	# > Author:  Jason Cleeland									#
	# > E-mail:  jason@cleeland.org								#
	# > Mail:    Box 99, Trades Hall, 54 Victoria St,			#
	# >          CARLTON SOUTH 3053, AUSTRALIA					#
	# > Date: 	 20 February 2003								#
	#															#
	# This set of scripts allows you to develop, publish and	#
	# perform data-entry on surveys.							#
	#############################################################
	#															#
	#	Copyright (C) 2003  Jason Cleeland						#
	#															#
	# This program is free software; you can redistribute 		#
	# it and/or modify it under the terms of the GNU General 	#
	# Public License as published by the Free Software 			#
	# Foundation; either version 2 of the License, or (at your 	#
	# option) any later version.								#
	#															#
	# This program is distributed in the hope that it will be 	#
	# useful, but WITHOUT ANY WARRANTY; without even the 		#
	# implied warranty of MERCHANTABILITY or FITNESS FOR A 		#
	# PARTICULAR PURPOSE.  See the GNU General Public License 	#
	# for more details.											#
	#															#
	# You should have received a copy of the GNU General 		#
	# Public License along with this program; if not, write to 	#
	# the Free Software Foundation, Inc., 59 Temple Place - 	#
	# Suite 330, Boston, MA  02111-1307, USA.					#
	#############################################################
*/

session_start();
//ini_set("session.bug_compat_warn", 0); //Turn this off until first "Next" warning is worked out
require_once(dirname(__FILE__).'/config.php');

if ( $embedded_inc != '' )
	require_once( $embedded_inc );

if (!isset($surveyid)) {$surveyid=returnglobal('sid');}
//This next line is for security reasons. It ensures that the $surveyid value is never anything but a number.
if (_PHPVERSION >= '4.2.0') {settype($surveyid, "int");} else {settype($surveyid, "integer");}

//DEFAULT SETTINGS FOR TEMPLATES
if (!$publicdir) {$publicdir=".";}
$tpldir="$publicdir/templates";

//CHECK FOR REQUIRED INFORMATION (sid)
if (!$surveyid)
	{
	$langfilename="$publicdir/lang/$defaultlang.lang.php";
	require($langfilename);
	//A nice exit
	sendcacheheaders();
	doHeader();
	$output=file("$tpldir/default/startpage.pstpl");
	foreach($output as $op)
		{
		echo templatereplace($op);
		}
	echo "\t\t<center><br />\n"
		."\t\t\t<font color='RED'><strong>ERROR</strong></font><br />\n"
		."\t\t\t"._NOSID."<br />\n"
		."\t\t\t"._CONTACT1." $siteadminname ( $siteadminemail ) "._CONTACT2."\n"
		."\t\t</center><br />\n";
	$output=file("$tpldir/default/endpage.pstpl");
	foreach($output as $op)
		{
		echo templatereplace($op);
		}
	doFooter();
	exit;
	}

if (!isset($token)) {$token=trim(returnglobal('token'));}
//GET BASIC INFORMATION ABOUT THIS SURVEY
$thissurvey=getSurveyInfo($surveyid);
if (is_array($thissurvey)) {$surveyexists=1;} else {$surveyexists=0;}

//SEE IF SURVEY USES TOKENS
$i = 0; $tokensexist = 0;
$tresult = @mysql_list_tables($databasename) or die ("Error getting tokens<br />".mysql_error());
while($tbl = @mysql_tablename($tresult, $i++))
	{
	if ($tbl == "{$dbprefix}tokens_$surveyid") {$tokensexist = 1;}
	}

//SET THE TEMPLATE DIRECTORY
if (!$thissurvey['templatedir']) {$thistpl=$tpldir."/default";} else {$thistpl=$tpldir."/{$thissurvey['templatedir']}";}
if (!is_dir($thistpl)) {$thistpl=$tpldir."/default";}

//REQUIRE THE LANGUAGE FILE
$langdir="$publicdir/lang";
$langfilename="$langdir/{$thissurvey['language']}.lang.php";
//Use the default language file if the $thissurvey['language'] file doesn't exist
if (!is_file($langfilename)) {$langfilename="$langdir/$defaultlang.lang.php";}
require_once($langfilename);
$saveerror=error_reporting(3);
require_once("$langdir/english.lang.php"); //Load missing values from english file
error_reporting ($saveerror);

//MAKE SURE SURVEY HASN'T EXPIRED
if ($thissurvey['expiry'] < date("Y-m-d") && $thissurvey['useexpiry'] == "Y")
	{
	sendcacheheaders();
	doHeader();
	$output=file("$tpldir/default/startpage.pstpl");
	foreach ($output as $op)
		{
		echo templatereplace($op);
		}
	echo "\t\t<center><br />\n"
		."\t\t\t"._SURVEYEXPIRED."<br /><br />\n"
		."\t\t\t"._CONTACT1." <i>{$thissurvey['adminname']}</i> (<i>{$thissurvey['adminemail']}</i>) "
		._CONTACT2."<br /><br />\n";
	$output=file("$tpldir/default/endpage.pstpl");
	foreach ($output as $op)
		{
		echo templatereplace($op);
		}
	doFooter();
	exit;
	}
	
//CHECK FOR PREVIOUSLY COMPLETED COOKIE
//If cookies are being used, and this survey has been completed, a cookie called "PHPSID[sid]STATUS" will exist (ie: SID6STATUS) and will have a value of "COMPLETE"
$cookiename="PHPSID".returnglobal('sid')."STATUS";
if (isset($_COOKIE[$cookiename]) && $_COOKIE[$cookiename] == "COMPLETE" && $thissurvey['usecookie'] == "Y" && $tokensexist != 1 && (!isset($_GET['newtest']) || $_GET['newtest'] != "Y"))
	{
	sendcacheheaders();
	doHeader();
	$output=file("$tpldir/default/startpage.pstpl");
	foreach($output as $op)
		{
		echo templatereplace($op);
		}
	echo "\t\t<center><br />\n"
		."\t\t\t<font color='RED'><strong>"._ERROR_PS."</strong></font><br />\n"
		."\t\t\t"._SURVEYCOMPLETE."<br /><br />\n"
		."\t\t\t"._CONTACT1." <i>{$thissurvey['adminname']}</i> (<i>{$thissurvey['adminemail']}</i>) "
		._CONTACT2."<br /><br />\n";
	$output=file("$tpldir/default/endpage.pstpl");
	foreach($output as $op)
		{
		echo templatereplace($op);
		}
	doFooter();
	exit;
	}

//CHECK IF SURVEY ID DETAILS HAVE CHANGED
if (isset($_SESSION['oldsid'])) {$oldsid=$_SESSION['oldsid'];}

if (!isset($oldsid)) {$_SESSION['oldsid'] = $surveyid;}

if (isset($oldsid) && $oldsid && $oldsid != $surveyid)
	{
	session_unset();
	$_SESSION['oldsid']=$surveyid;
	}

//Save and clear session if requested
if (isset($_POST['saveall']) && $_POST['saveall'] == _SAVE_AND_RETURN) 
	{
	require_once("save.php");
	}

if (isset($_GET['loadall']) && $_GET['loadall'] == "reload")
	{
    if (returnglobal('loadname') && returnglobal('loadpass'))
		{
        $_POST['loadall']="reload";
		$_POST['loadname']=returnglobal('loadname');
		$_POST['loadpass']=returnglobal('loadpass');
		$_POST['scid']=returnglobal('scid');
		}
	}
//Load saved survey
if (isset($_POST['loadall']) && $_POST['loadall'] == "reload")
	{
	$errormsg="";
	// if (loadname is not set) or if ((loadname is set) and (loadname is NULL))
	if (!isset($_POST['loadname']) || (isset($_POST['loadname']) && ($_POST['loadname'] == null)))		
		{
	    $errormsg .= _LOADNONAME."<br />\n";
		}
	// if (loadpass is not set) or if ((loadpass is set) and (loadpass is NULL))
	if (!isset($_POST['loadpass']) || (isset($_POST['loadpass']) && ($_POST['loadpass'] == null)))
		{
		$errormsg .= _LOADNOPASS."<br />\n";
		}
		
	// Load session before loading the values from the saved data	
	if (isset($_GET['loadall']))
		{
		buildsurveysession();
		}
	$query = "SELECT * FROM {$dbprefix}saved, {$dbprefix}saved_control
			  WHERE {$dbprefix}saved.scid={$dbprefix}saved_control.scid 
			  AND {$dbprefix}saved_control.sid=$surveyid\n";
	if (isset($_POST['scid'])) {
	    $query .= "AND {$dbprefix}saved.scid=".auto_escape($_POST['scid'])."\n";
	}		  
	$query .="AND {$dbprefix}saved_control.identifier='".auto_escape($_POST['loadname'])."'
			  AND {$dbprefix}saved_control.access_code='".md5(auto_unescape($_POST['loadpass']))."'\n";
	$result = mysql_query($query) or die ("Error loading results<br />$query<br />".mysql_error());
	if (mysql_num_rows($result) > 0)
		{
		//A match has been found. Let's load the values if there are saved responses!
		//If this is from an email,  surveysession was build first
		while($row=mysql_fetch_array($result))
			{
			if ($row['fieldname'] == "token")
				{
			    $_POST['token']=$row['value'];
				$token=$row['value'];
				}
			else
				{
				$_SESSION[$row['fieldname']]=$row['value'];
				$_POST['thisstep']=$row['saved_thisstep']-1;
				$_SESSION['scid']=$row['scid'];
				}
			} // while
		}
		else
    		{
    		$errormsg .= _LOADNOMATCH."<br />\n";
    		}			
	$_SESSION['savename']=$_POST['loadname']; //This session variable hangs around
                                              //for later use.
	$_POST['move'] = " "._NEXT." >> ";

if ($errormsg)
		{
	    $_POST['loadall'] = _LOAD_SAVED;
		}
	}
//Allow loading of saved survey
if (isset($_POST['loadall']) && $_POST['loadall'] == _LOAD_SAVED)
	{
    require_once("load.php");
	}

//Check if TOKEN is used for EVERY PAGE
//This function fixes a bug where users able to submit two surveys/votes
//by checking that the token has not been used at each page displayed.
if ($tokensexist == 1 && returnglobal('token'))
	{
	//check if token actually does exist
	
	$tkquery = "SELECT * FROM {$dbprefix}tokens_$surveyid WHERE token='".trim(returnglobal('token'))."' AND (completed = 'N' or completed='')";
	$tkresult = mysql_query($tkquery);
	$tkexist = mysql_num_rows($tkresult);
	if (!$tkexist)
		{
		sendcacheheaders();
		doHeader();
		//TOKEN DOESN'T EXIST OR HAS ALREADY BEEN USED. EXPLAIN PROBLEM AND EXIT
		foreach(file("$thistpl/startpage.pstpl") as $op)
			{
			echo templatereplace($op);
			}
		foreach(file("$thistpl/survey.pstpl") as $op)
			{
			echo "\t".templatereplace($op);
			}
		echo "\t<center><br />\n"
			."\t"._NOTOKEN1."<br /><br />\n"
			."\t"._NOTOKEN3."\n"
			."\t"._FURTHERINFO." {$thissurvey['adminname']} "
			."(<a href='mailto:{$thissurvey['adminemail']}'>"
			."{$thissurvey['adminemail']}</a>)<br /><br />\n"
			."\t<a href='javascript: self.close()'>"._CLOSEWIN_PS."</a><br />&nbsp;\n";
		foreach(file("$thistpl/endpage.pstpl") as $op)
			{
			echo templatereplace($op);
			}
		exit;
		}
	}
//CLEAR SESSION IF REQUESTED
if (isset($_GET['move']) && $_GET['move'] == "clearall")
	{
	session_unset();
	session_destroy();
	sendcacheheaders();
	if (isset($_GET['redirect'])) {
	    session_write_close();
	    header("Location: {$_GET['redirect']}");
	}
	doHeader();
	foreach(file("$thistpl/startpage.pstpl") as $op)
		{
		echo templatereplace($op);
		}
	echo "\n\n\n"
		."\t<script type='text/javascript'>\n"
		."\t\n"
		."\t</script>\n\n";

//Present the clear all page using clearall.pstpl template
	foreach(file("$thistpl/clearall.pstpl") as $op)
		{
		echo templatereplace($op);
		}
	
	foreach(file("$thistpl/endpage.pstpl") as $op)
		{
		echo templatereplace($op);
		}
	doFooter();
	exit;	
	}

if (isset($_GET['newtest']) && $_GET['newtest'] == "Y")
	{
	foreach ($_SESSION as $SES)
		{
		session_unset();
		}
	//DELETE COOKIE (allow to use multiple times)
	setcookie("$cookiename", "INCOMPLETE", time()-120);
	//echo "Reset Cookie!";
	}

sendcacheheaders();
//CALL APPROPRIATE SCRIPT
switch ($thissurvey['format'])
	{
	case "A": //All in one
		require_once("survey.php");
		break;
	case "S": //One at a time
		require_once("question.php");
		break;
	case "G": //Group at a time
		require_once("group.php");
		break;		
	default:
		require_once("question.php");
	}

function addtoarray_single($array1, $array2)
	{
	//Takes two single element arrays and adds second to end of first if value exists
	if (is_array($array2)) 
		{
		foreach ($array2 as $ar)
			{
			if ($ar && $ar !== null)
				{
			    $array1[]=$ar;
				}
			}
		}
	return $array1;
	}

//FUNCTIONS USED WHEN SUBMITTING RESULTS:
function createinsertquery()
	{
	global $thissurvey;
	global $deletenonvalues, $thistpl;
	global $surveyid;
	$fieldmap=createFieldMap($surveyid); //Creates a list of the legitimate questions for this survey
	
	if (isset($_SESSION['insertarray']) && is_array($_SESSION['insertarray']))
		{
		$inserts=array_unique($_SESSION['insertarray']);
	    foreach ($inserts as $value)
			{
			//Work out if the field actually exists in this survey
			$fieldexists = arraySearchByKey($value, $fieldmap, "fieldname");
			//Iterate through possible responses
			if (isset($_SESSION[$value]) && !empty($fieldexists))
				{
				//If deletenonvalues is ON, delete any values that shouldn't exist
				if($deletenonvalues==1) {checkconfield($value);}
				//Only create column name and data entry if there is actually data!
				$colnames[]=$value;
			    $values[]=mysql_escape_string($_SESSION[$value]);
				}
			}
		if (!isset($colnames) || !is_array($colnames)) //If something went horribly wrong - ie: none of the insertarray fields exist for this survey, crash out
			{
			echo submitfailed();
			
			exit;		
		    }
		$query = "INSERT INTO {$thissurvey['tablename']}\n"
				."(`".implode("`, `", $colnames)."`)\n"
				."VALUES ('".implode("', '", $values)."')";
		return $query;
		}
	else
		{
		sendcacheheaders();
		doHeader();
		foreach(file("$thistpl/startpage.pstpl") as $op)
			{
			echo templatereplace($op);
			}
		echo "<br /><center><font face='verdana' size='2'><font color='red'><strong>"._ERROR_PS."</strong></font><br /><br />\n";
		echo _BADSUBMIT1."<br /><br />\n";
		echo "<font size='1'>"._BADSUBMIT2."<br />\n";
		echo "</font></center><br /><br />";
		exit;		
		}
	}

$subject=Replacefields($subject, $fieldsarray);

if ($thissurvey['email_confirm']) 
			{
			$message=$thissurvey['email_confirm'];
			}
		else
			{
			//Get the default email_confirm from the default admin lang file
			global $defaultlang, $homedir, $homeurl;
			$langdir="$homeurl/lang/$defaultlang";
			$langdir2="$homedir/lang/$defaultlang";
			if (!is_dir($langdir2)) 
				{
				$langdir="$homeurl/lang/english"; //default to english if there is no matching language dir
				$langdir2="$homedir/lang/english";
				}
			require("$langdir2/messages.php");
			$message = _TC_EMAILCONFIRM;
			}

$message=Replacefields($message, $fieldsarray);
        
		//Only send confirmation email if there is a valid email address
		if (validate_email($cnfrow['email'])) {MailTextMessage($message, $subject, $to, $from, $sitename);} 
		}	
	}
	
function sendsubmitnotification($sendnotification)
	{
	global $thissurvey;
	global $savedid, $dbprefix;
	global $sitename, $homeurl, $surveyid;

$subject = "$sitename Survey Submitted";
	$message = _CONFIRMATION_MESSAGE1." {$thissurvey['name']}\r\n"
			 . _CONFIRMATION_MESSAGE2."\r\n\r\n"
			 . _CONFIRMATION_MESSAGE3."\r\n"
			 . "  $homeurl/browse.php?sid=$surveyid&action=id&id=$savedid\r\n\r\n"
             // Add link to edit individual responses from notification email  
			 . _CONFIRMATION_MESSAGE5."\r\n"
             . " $homeurl/dataentry.php?sid=$surveyid&action=edit&surveytable=survey_$surveyid&id=$savedid\r\n\r\n"  
			 . _CONFIRMATION_MESSAGE4."\r\n"
			 . "  $homeurl/statistics.php?sid=$surveyid\r\n\r\n";
	if ($sendnotification > 1)
		{ //Send results as well. Currently just bare-bones - will be extended in later release
		$message .= "----------------------------\r\n";
		foreach ($_SESSION['insertarray'] as $value)
			{
			$questiontitle=returnquestiontitlefromfieldcode($value);
			$message .= "$questiontitle:   ";
			if (isset($_SESSION[$value]))
				{
			    $message .= getextendedanswer($value, $_SESSION[$value]);
				}
			$message .= "\r\n";
			}
		$message .= "----------------------------\r\n\r\n";
		}
	$message.= "PHPSurveyor";
	$from = $thissurvey['adminname'].' <'.$thissurvey['adminemail'].'>';
	
	if ($recips=explode(";", $thissurvey['adminemail'])) 
		{
	    foreach ($recips as $rc) 
			{
			MailTextMessage($message, $subject, trim($rc), $from, $sitename);
			}
		}
	else
		{
		MailTextMessage($message, $subject, $thissurvey['adminemail'], $from, $sitename);			
		}
	}

$tkquery = "SELECT * FROM {$dbprefix}tokens_$surveyid WHERE token='".trim(returnglobal('token'))."' AND (completed = 'N' or completed='')";
		
		$tkresult = mysql_query($tkquery);
		$tkexist = mysql_num_rows($tkresult);
		if (!$tkexist)
			{
			sendcacheheaders();
			doHeader();
			//TOKEN DOESN'T EXIST OR HAS ALREADY BEEN USED. EXPLAIN PROBLEM AND EXIT
			foreach(file("$thistpl/startpage.pstpl") as $op)
				{
				echo templatereplace($op);
				}
			foreach(file("$thistpl/survey.pstpl") as $op)
				{
				echo "\t".templatereplace($op);
				}
			echo "\t<center><br />\n"
				."\t"._NOTOKEN1."<br /><br />\n"
				."\t"._NOTOKEN3."\n"
				."\t"._FURTHERINFO." {$thissurvey['adminname']} "
				."(<a href='mailto:{$thissurvey['adminemail']}'>"
				."{$thissurvey['adminemail']}</a>)<br /><br />\n"
				."\t<a href='javascript: self.close()'>"._CLOSEWIN_PS."</a><br />&nbsp;\n";
			foreach(file("$thistpl/endpage.pstpl") as $op)
				{
				echo templatereplace($op);
				}
			exit;
			}
		}

//RESET ALL THE SESSION VARIABLES AND START AGAIN
	unset($_SESSION['grouplist']);
	unset($_SESSION['fieldarray']);
	unset($_SESSION['insertarray']);
	unset($_SESSION['thistoken']);
	//1. SESSION VARIABLE: grouplist
	//A list of groups in this survey, ordered by group name.

$query = "SELECT * FROM {$dbprefix}groups WHERE sid=$surveyid ORDER BY group_name";
	$result = mysql_query($query) or die ("Couldn't get group list<br />$query<br />".mysql_error());
	while ($row = mysql_fetch_array($result))
		{
		$_SESSION['grouplist'][]=array($row['gid'], $row['group_name'], $row['description']);
		}

$query = "SELECT * FROM {$dbprefix}questions, {$dbprefix}groups\n"
			."WHERE {$dbprefix}questions.gid={$dbprefix}groups.gid\n"
			."AND {$dbprefix}questions.sid=$surveyid\n"
			."ORDER BY group_name";
	$result = mysql_query($query);
	$totalquestions = mysql_num_rows($result);

//2. SESSION VARIABLE: totalsteps
	//The number of "pages" that will be presented in this survey
	//The number of pages to be presented will differ depending on the survey format
	switch($thissurvey['format'])
		{
		case "A":
			$_SESSION['totalsteps']=1;
			break;
		case "G":
			$_SESSION['totalsteps']=count($_SESSION['grouplist']);
			break;
		case "S":
			$_SESSION['totalsteps']=$totalquestions;
		}
	
	if ($totalquestions == "0")	//break out and crash if there are no questions!
		{
		sendcacheheaders();
		doHeader();
		foreach(file("$thistpl/startpage.pstpl") as $op)
			{
			echo templatereplace($op);
			}
		foreach(file("$thistpl/survey.pstpl") as $op)
			{
			echo "\t".templatereplace($op);
			}
		echo "\t<center><br />\n"
			."\t"._NOQUESTIONS."<br /><br />\n"
			."\t"._FURTHERINFO." {$thissurvey['adminname']}"
			." (<a href='mailto:{$thissurvey['adminemail']}'>"
			."{$thissurvey['adminemail']}</a>)<br /><br />\n"
			."\t<a href='javascript: self.close()'>"._CLOSEWIN_PS."</a><br />&nbsp;\n";
		foreach(file("$thistpl/endpage.pstpl") as $op)
			{
			echo templatereplace($op);
			}
		exit;
		}

$arows = array(); //Create an empty array in case mysql_fetch_array does not return any rows
	while ($row = mysql_fetch_assoc($result)) 
		{
		$arows[] = $row;
		} // Get table output into array
	
	//Perform a case insensitive natural sort on group name then question title of a multidimensional array
	usort($arows, 'CompareGroupThenTitle'); 
	
	//3. SESSION VARIABLE - insertarray
	//An array containing information about used to insert the data into the db at the submit stage
	//4. SESSION VARIABLE - fieldarray
	//See rem at end..
	if ($thissurvey['private'] == "N")
		{
		$_SESSION['token'] = returnglobal('token');
		$_SESSION['insertarray'][]= "token";
		}
	
	if ($tokensexist == 1 && $thissurvey['private'] == "N") 
		{
		//Gather survey data for "non anonymous" surveys, for use in presenting questions
	    $_SESSION['thistoken']=getTokenData($surveyid, returnglobal('token'));
		}
	
	foreach ($arows as $arow)
		{
		//WE ARE CREATING A SESSION VARIABLE FOR EVERY FIELD IN THE SURVEY
		$fieldname = "{$arow['sid']}X{$arow['gid']}X{$arow['qid']}";
		if ($arow['type'] == "M" || $arow['type'] == "A" || $arow['type'] == "B" || 
			$arow['type'] == "C" || $arow['type'] == "E" || $arow['type'] == "F" || 
			$arow['type'] == "H" || $arow['type'] == "P" || $arow['type'] == "^") 
			{
			$abquery = "SELECT {$dbprefix}answers.*, {$dbprefix}questions.other\n"
					 . "FROM {$dbprefix}answers, {$dbprefix}questions\n"
					 . "WHERE {$dbprefix}answers.qid={$dbprefix}questions.qid\n"
					 . "AND sid=$surveyid AND {$dbprefix}questions.qid={$arow['qid']}\n"
					 . "ORDER BY {$dbprefix}answers.sortorder, {$dbprefix}answers.answer";
			$abresult = mysql_query($abquery);
			while ($abrow = mysql_fetch_array($abresult))
				{
				$_SESSION['insertarray'][] = $fieldname.$abrow['code'];
				$alsoother = "";
				if ($abrow['other'] == "Y") {$alsoother = "Y";}
				if ($arow['type'] == "P")
					{
					$_SESSION['insertarray'][] = $fieldname.$abrow['code']."comment";	
					}
				}
			if ($alsoother) //Add an extra field for storing "Other" answers
				{
				$_SESSION['insertarray'][] = $fieldname."other";
				if ($arow['type'] == "P")
					{
					$_SESSION['insertarray'][] = $fieldname."othercomment";	
					}
				}
			} 
		elseif ($arow['type'] == "R") 
			{
			$abquery = "SELECT {$dbprefix}answers.*, {$dbprefix}questions.other\n"
					 . "FROM {$dbprefix}answers, {$dbprefix}questions\n"
					 . "WHERE {$dbprefix}answers.qid={$dbprefix}questions.qid\n"
					 . "AND sid=$surveyid\n"
					 . "AND {$dbprefix}questions.qid={$arow['qid']}\n"
					 . "ORDER BY {$dbprefix}answers.sortorder, {$dbprefix}answers.answer";
			$abresult = mysql_query($abquery) or die("ERROR:<br />".$abquery."<br />".mysql_error());
			$abcount = mysql_num_rows($abresult);
			for ($i=1; $i<=$abcount; $i++)
				{
				$_SESSION['insertarray'][] = "$fieldname".$i;
				}			
			}
		elseif ($arow['type'] == "Q")
			{
			$abquery = "SELECT {$dbprefix}answers.*, {$dbprefix}questions.other\n"
					 . "FROM {$dbprefix}answers, {$dbprefix}questions\n"
					 . "WHERE {$dbprefix}answers.qid={$dbprefix}questions.qid\n"
					 . "AND sid=$surveyid\n"
					 . "AND {$dbprefix}questions.qid={$arow['qid']}\n"
					 . "ORDER BY {$dbprefix}answers.sortorder, {$dbprefix}answers.answer";
			$abresult = mysql_query($abquery);
			while ($abrow = mysql_fetch_array($abresult))
				{
				$_SESSION['insertarray'][] = $fieldname.$abrow['code'];
				}
			}
		elseif ($arow['type'] == "O")	
			{
			$_SESSION['insertarray'][] = $fieldname;
			$fn2 = $fieldname."comment";
			$_SESSION['insertarray'][] = $fn2;
			}
		elseif ($arow['type'] == "L" || $arow['type'] == "!")
			{
			$_SESSION['insertarray'][] = $fieldname;
			if ($arow['other'] == "Y") { $_SESSION['insertarray'][] = $fieldname."other";}
			//go through answers, and if there is a default, register it now so that conditions work properly the first time
			$abquery = "SELECT {$dbprefix}answers.*\n"
					 . "FROM {$dbprefix}answers, {$dbprefix}questions\n"
					 . "WHERE {$dbprefix}answers.qid={$dbprefix}questions.qid\n"
					 . "AND sid=$surveyid\n"
					 . "AND {$dbprefix}questions.qid={$arow['qid']}\n"
					 . "ORDER BY {$dbprefix}answers.sortorder, {$dbprefix}answers.answer";
			$abresult = mysql_query($abquery);
			while($abrow = mysql_fetch_array($abresult))
				{
				if ($abrow['default_value'] == "Y") 
					{
				    $_SESSION[$fieldname] = $abrow['code'];
					}
				}
			}
		else
			{
			$_SESSION['insertarray'][] = $fieldname;
			}

//Check to see if there are any conditions set for this question
		if (conditionscount($arow['qid']) > 0)
			{
			$conditions = "Y";
			}
		else
			{
			$conditions = "N";
			}

//3(b) See if any of the insertarray values have been passed in the query URL
		
		if (isset($_SESSION['insertarray']))
		{foreach($_SESSION['insertarray'] as $field)
			{
			if (isset($_GET[$field]))
				{
				$_SESSION[$field]=$_GET[$field];
			    }
			}
		}

//4. SESSION VARIABLE: fieldarray
		//NOW WE'RE CREATING AN ARRAY CONTAINING EACH FIELD AND RELEVANT INFO
		//ARRAY CONTENTS - 	[0]=questions.qid, 
		//					[1]=fieldname, 
		//					[2]=questions.title, 
		//					[3]=questions.question
		//                 	[4]=questions.type, 
		//					[5]=questions.gid, 
		//					[6]=questions.mandatory, 
		//					[7]=conditionsexist
		$_SESSION['fieldarray'][] = array($arow['qid'], 
										  $fieldname, 
										  $arow['title'], 
										  $arow['question'], 
										  $arow['type'], 
										  $arow['gid'], 
										  $arow['mandatory'], 
										  $conditions);
		}
	return $totalquestions;
	}

${this.title}

Code Editor : index.php