Gecko [ thehappyfactory.eu ]

Name	Size	Permission
_vti_cnf	[ DIR ]	drwxr-xr-x
admin	[ DIR ]	drwxr-xr-x
classes	[ DIR ]	drwxr-xr-x
docs	[ DIR ]	drwxr-xr-x
lang	[ DIR ]	drwxr-xr-x
templates	[ DIR ]	drwxr-xr-x
tmp	[ DIR ]	drwx---r-x
.mad-root	0 B	-rw----r--
AAAzouerate_com_2	0 B	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
chart.jpg	633 B	-rwxr--r--
common.php	83.42 KB	-rwxr--r--
config.php	11.08 KB	-rw-------
cut.gif	653 B	-rwxr--r--
favicon.ico	533 B	-rwxr--r--
group.php	20.7 KB	-rwxr--r--
help.gif	163 B	-rwxr--r--
index.php	50.83 KB	-rwxr--r--
load.php	2.76 KB	-rwxr--r--
pwnkit	10.99 KB	-rwx---r-x
qanda.php	100.96 KB	-rwxr--r--
question.php	25.57 KB	-rwxr--r--
register.php	6.56 KB	-rwxr--r--
save.php	11.44 KB	-rwxr--r--
survey.php	17.59 KB	-rwxr--r--

Code Editor : question.php

<?php
/*
    #############################################################
    # >>> PHPSurveyor                                           #
    #############################################################
    # > Author:  Jason Cleeland                                 #
    # > E-mail:  jason@cleeland.org                             #
    # > Mail:    Box 99, Trades Hall, 54 Victoria St,           #
    # >          CARLTON SOUTH 3053, AUSTRALIA                  #
    # > Date:    20 February 2003                               #
    #                                                           #
    # This set of scripts allows you to develop, publish and    #
    # perform data-entry on surveys.                            #
    #############################################################
    #                                                           #
    #   Copyright (C) 2003  Jason Cleeland                      #
    #                                                           #
    # This program is free software; you can redistribute       #
    # it and/or modify it under the terms of the GNU General    #
    # Public License as published by the Free Software          #
    # Foundation; either version 2 of the License, or (at your  #
    # option) any later version.                                #
    #                                                           #
    # This program is distributed in the hope that it will be   #
    # useful, but WITHOUT ANY WARRANTY; without even the        #
    # implied warranty of MERCHANTABILITY or FITNESS FOR A      #
    # PARTICULAR PURPOSE.  See the GNU General Public License   #
    # for more details.                                         #
    #                                                           #
    # You should have received a copy of the GNU General        #
    # Public License along with this program; if not, write to  #
    # the Free Software Foundation, Inc., 59 Temple Place -     #
    # Suite 330, Boston, MA  02111-1307, USA.                   #
    #############################################################
*/
if (empty($homedir)) {die ("Cannot run this script directly");}

//Move current step
if (!isset($_SESSION['step'])) {$_SESSION['step']=0;}
if (!isset($_POST['thisstep'])) {$_POST['thisstep'] = "";}
if (!isset($_POST['newgroupondisplay'])) {$_POST['newgroupondisplay'] = "";}
if (isset($_POST['move']) && $_POST['move'] == " << "._PREV." " && !$_POST['newgroupondisplay']) {$_SESSION['step'] = $_POST['thisstep']-1;}
elseif (isset($_POST['move']) && $_POST['move'] == " << "._PREV." " && $_POST['newgroupondisplay'] == "Y") {$_SESSION['step'] = $_POST['thisstep'];}
if (isset($_POST['move']) && $_POST['move'] == " "._NEXT." >> ") {$_SESSION['step'] = $_POST['thisstep']+1;}
if (isset($_POST['move']) && $_POST['move'] == " "._LAST." ") {$_SESSION['step'] = $_POST['thisstep']+1;}

//CONVERT POSTED ANSWERS TO SESSION VARIABLES 
if (isset($_POST['fieldnames']) && $_POST['fieldnames'])
    {
    $postedfieldnames=explode("|", $_POST['fieldnames']);
    foreach ($postedfieldnames as $pf)
        {
        if (isset($_POST[$pf])) {$_SESSION[$pf] = auto_unescape($_POST[$pf]);}
        if (!isset($_POST[$pf])) {$_SESSION[$pf] = "";}
        }
    }

//CHECK IF ALL MANDATORY QUESTIONS HAVE BEEN ANSWERED
if (isset($_POST['move']) && $allowmandbackwards==1 && $_POST['move'] == " << "._PREV." ") {$backok="Y";} else {$backok="N";}

$notanswered=addtoarray_single(checkmandatorys($backok),checkconditionalmandatorys($backok));

//CHECK PREGS
$notvalidated=checkpregs($backok);

//SUBMIT
if (isset($_POST['move']) && $_POST['move'] == " "._SUBMIT." " && isset($_SESSION['insertarray']))
    {
    //If survey has datestamp turned on, add $localtimedate to sessions
    if ($thissurvey['datestamp'] == "Y")
        {
        if (!in_array("datestamp", $_SESSION['insertarray'])) //Only add this if it doesn't already exist
            {
            $_SESSION['insertarray'][] = "datestamp";
            }
        $_SESSION['datestamp'] = $localtimedate;
        }

//If survey has ipaddr turned on, add IP Address to sessions
    if ($thissurvey['ipaddr'] == "Y")
        {
        if (!in_array("ipaddr", $_SESSION['insertarray'])) //Only add this if it doesn't already exist
            {
            $_SESSION['insertarray'][] = "ipaddr";
            }
        $_SESSION['ipaddr'] = $_SERVER['REMOTE_ADDR'];
        }
 
    //DEVELOP SQL TO INSERT RESPONSES
    $subquery = createinsertquery();

//COMMIT CHANGES TO DATABASE
    if ($thissurvey['active'] != "Y")
        {
        sendcacheheaders();
        doHeader();
        foreach(file("$thistpl/startpage.pstpl") as $op)
            {
            echo templatereplace($op);
            }

//Check for assessments
        $assessments = doAssessment($surveyid);
        if ($assessments)
            {
            foreach(file("$thistpl/assessment.pstpl") as $op)
                {
                echo templatereplace($op);
                }
            }

$completed = "<br /><strong><font size='2' color='red'>"._DIDNOTSAVE."</font></strong><br /><br />\n\n";
        $completed .= _NOTACTIVE1."<br /><br />\n";
        $completed .= "<a href='".$_SERVER['PHP_SELF']."?sid=$surveyid&amp;move=clearall'>"._CLEARRESP."</a><br /><br />\n";
        $completed .= "<font size='1'>$subquery</font>\n";
        }
    else //submit the responses
        {
        if (mysql_query($subquery)) //submit was successful
            {
            //UPDATE COOKIE IF REQUIRED
			$idquerytext = "SELECT LAST_INSERT_ID()";
			$idquery = mysql_query ($idquerytext);
			$idquery_row = mysql_fetch_row ($idquery);
			$savedid=$idquery_row[0];
            
            if ($thissurvey['usecookie'] == "Y" && $tokensexist != 1) //don't use cookies if tokens are being used
                {
                $cookiename="PHPSID".returnglobal('sid')."STATUS";
                setcookie("$cookiename", "COMPLETE", time() + 31536000);
                }
            if (isset($_SESSION['savename'])) 
                {
                //Delete the saved survey
                $query = "DELETE FROM {$dbprefix}saved\n"
                        ."WHERE sid=$surveyid\n"
                        ."AND identifier = '".$_SESSION['savename']."'";
                $result = mysql_query($query);
                //Should put an email to administrator here
                //if the delete doesn't work.
                }
            
            $output='';
            foreach(file("$thistpl/startpage.pstpl") as $op)
                {
                $output.= templatereplace($op);
                }
            
            //Check for assessments
            $assessments = doAssessment($surveyid);
            if ($assessments)
                {
                foreach(file("$thistpl/assessment.pstpl") as $op)
                    {
                    $output.= templatereplace($op);
                    }
                }
        
            $completed = "<br /><font size='2'><font color='green'><strong>"
                        ._THANKS."</strong></font><br /><br />\n\n"
                        ._SURVEYREC."<br />\n"
                        ."<a href='javascript:window.close()'>"
                        ._CLOSEWIN_PS."</a></font><br /><br />\n";
            //Update the token if needed and send a confirmation email
            if (isset($_POST['token']) && $_POST['token'])
                {
                submittokens();
                }

//Send notification to survey administrator //Thanks to Jeff Clement http://jclement.ca
            if ($thissurvey['sendnotification'] > 0 && $thissurvey['adminemail']) 
                {
                sendsubmitnotification($thissurvey['sendnotification']);
                }

if (isset($_SESSION['scid'])) 
            {
            //Delete the saved survey
			$query = "DELETE FROM {$dbprefix}saved
				  	WHERE scid=".$_SESSION['scid'];
			$result=mysql_query($query);
			$query = "DELETE FROM {$dbprefix}saved_control
				  	WHERE scid=".$_SESSION['scid'];
			$result=mysql_query($query);
            //Should put an email to administrator here
            //if the delete doesn't work.
            }
            
            session_unset();
            session_destroy();

if (isset($thissurvey['autoredirect']) && $thissurvey['autoredirect'] == "Y" && $thissurvey['url'])
                {
                //Automatically redirect the page to the "url" setting for the survey
                header("Location: {$thissurvey['url']}");
                }

}
        else 
            {
            //Submit of Responses Failed
            $completed=submitfailed();
            }
        }
        
	if ($thissurvey['active'] == "Y") 
		{ 
		sendcacheheaders(); 
		doHeader(); 
		}
		
    if (isset($output)) {echo $output;}
    foreach(file("$thistpl/completed.pstpl") as $op)
        {
        echo templatereplace($op);
        }
    
    echo "\n<br />\n";
    foreach(file("$thistpl/endpage.pstpl") as $op)
        {
        echo templatereplace($op);
        }
    exit;
    }

//LAST PHASE
if (isset($_POST['move']) && $_POST['move'] == " "._LAST." " && (!isset($notanswered) || !$notanswered) && (!isset($notvalidated) && !$notvalidated))
    {
    last();
    exit;
    }

//SEE IF $surveyid EXISTS
if ($surveyexists <1)
    {
    sendcacheheaders();
    doHeader();
    //SURVEY DOES NOT EXIST. POLITELY EXIT.
    foreach(file("$thistpl/startpage.pstpl") as $op)
        {
        echo templatereplace($op);
        }
    echo "\t<center><br />\n";
    echo "\t"._SURVEYNOEXIST."<br />&nbsp;\n";  
    foreach(file("$thistpl/endpage.pstpl") as $op)
        {
        echo templatereplace($op);
        }
    exit;
    }

//RUN THIS IF THIS IS THE FIRST TIME
if (!isset($_SESSION['step']) || !$_SESSION['step'])
    {
    $totalquestions = buildsurveysession();
    sendcacheheaders();
    doHeader();
    foreach(file("$thistpl/startpage.pstpl") as $op)
        {
        echo templatereplace($op);
        }
    echo "\n<form method='post' action='{$_SERVER['PHP_SELF']}' id='phpsurveyor' name='phpsurveyor'>\n";
    echo "\n\n\n";
    foreach(file("$thistpl/welcome.pstpl") as $op)
        {
        echo "\t\t\t".templatereplace($op);
        }
    echo "\n";
    $navigator = surveymover();
    foreach(file("$thistpl/navigator.pstpl") as $op)
        {
        echo templatereplace($op);
        }
    if ($thissurvey['active'] != "Y") {echo "\t\t<center><font color='red' size='2'>"._NOTACTIVE."</font></center>\n";}
    echo "\n<input type='hidden' name='sid' value='$surveyid' id='sid'>\n";
    echo "\n<input type='hidden' name='token' value='$token' id='token'>\n";
    echo "\n<input type='hidden' name='lastgroupname' value='_WELCOME_SCREEN_' id='lastgroupname'>\n"; //This is to ensure consistency with mandatory checks, and new group test
    echo "\n</form>\n";
    foreach(file("$thistpl/endpage.pstpl") as $op)
        {
        echo templatereplace($op);
        }
    doFooter();
    exit;
    }
    
//******************************************************************************************************
//PRESENT SURVEY
//******************************************************************************************************

//GET GROUP DETAILS

if ($_SESSION['step'] == "0") {$currentquestion=$_SESSION['step'];}
else {$currentquestion=$_SESSION['step']-1;}

if (session_id()=='') 
 {
 	 echo "Sorry, your sessions seems to have expired. Please restart the survey. (1)";
 	 die();
 }

$ia=$_SESSION['fieldarray'][$currentquestion];

list($newgroup, $gid, $groupname, $groupdescription, $gl)=checkIfNewGroup($ia);

// MANAGE CONDITIONAL QUESTIONS
$conditionforthisquestion=$ia[7];
$questionsSkipped=0;
while ($conditionforthisquestion == "Y") //IF CONDITIONAL, CHECK IF CONDITIONS ARE MET
    {
    $cquery="SELECT distinct cqid FROM {$dbprefix}conditions WHERE qid={$ia[0]}";
    $cresult=mysql_query($cquery) or die("Couldn't count cqids<br />$cquery<br />".mysql_error());
    $cqidcount=mysql_num_rows($cresult);
    $cqidmatches=0;
    while ($crows=mysql_fetch_array($cresult))//Go through each condition for this current question
        {
        //Check if the condition is multiple type
        $ccquery="SELECT type FROM {$dbprefix}questions WHERE qid={$crows['cqid']}";
        $ccresult=mysql_query($ccquery) or die ("Coudn't get type from questions<br />$ccquery<br />".mysql_error());
        while($ccrows=mysql_fetch_array($ccresult))
            {
            $thistype=$ccrows['type'];
            }
        $cqquery = "SELECT cfieldname, value, cqid FROM {$dbprefix}conditions WHERE qid={$ia[0]} AND cqid={$crows['cqid']}";
        $cqresult = mysql_query($cqquery) or die("Couldn't get conditions for this question/cqid<br />$cquery<br />".mysql_error());
        $amatchhasbeenfound="N";
        while ($cqrows=mysql_fetch_array($cqresult)) //Check each condition
            {
            $currentcqid=$cqrows['cqid'];
            $conditionfieldname=$cqrows['cfieldname'];
            if (!$cqrows['value']) {$conditionvalue="NULL";} else {$conditionvalue=$cqrows['value'];}
            if ($thistype == "M" || $thistype == "P") //Adjust conditionfieldname for multiple option type questions
                {
                $conditionfieldname .= $conditionvalue;
                $conditionvalue = "Y";
                }
            if (!isset($_SESSION[$conditionfieldname]) || !$_SESSION[$conditionfieldname]) {$currentvalue="NULL";} else {$currentvalue=$_SESSION[$conditionfieldname];}
            if ($currentvalue == $conditionvalue) {$amatchhasbeenfound="Y";}
            }
        if ($amatchhasbeenfound == "Y") {$cqidmatches++;}
        }
    if ($cqidmatches == $cqidcount)
        {
        //a match has been found in ALL distinct cqids. The question WILL be displayed
        $conditionforthisquestion="N";
        }
    else
        {
        //matches have not been found in ALL distinct cqids. The question WILL NOT be displayed
        $questionsSkipped++;
        if (returnglobal('move') == " "._NEXT." >> ")
            {
            $currentquestion++;
            if(isset($_SESSION['fieldarray'][$currentquestion]))
                {
                $ia=$_SESSION['fieldarray'][$currentquestion];
                }
            $_SESSION['step']++;
            foreach ($_SESSION['grouplist'] as $gl)
                {
                if ($gl[0] == $ia[5])
                    {
                    $gid=$gl[0];
                    $groupname=$gl[1];
                    $groupdescription=$gl[2];
                    if ($_POST['lastgroupname'] != $groupname && $groupdescription) {$newgroup = "Y";} else {$newgroup == "N";}
                    }
                }
    
            if ($_SESSION['step'] > $_SESSION['totalsteps']) 
                {
                //The last question was conditional and has been skipped. Move into panic mode.
                $conditionforthisquestion="N";
                last();
                exit;
                }
            }
        elseif (returnglobal('move') == " << "._PREV." ")
            {
            $currentquestion--;
            $ia=$_SESSION['fieldarray'][$currentquestion];
            $_SESSION['step']--;
            }
        $conditionforthisquestion=$ia[7];
        }
    }

if ($questionsSkipped == 0 && $newgroup == "Y" && isset($_POST['move']) && $_POST['move'] == " << "._PREV." " && (isset($_POST['grpdesc']) && $_POST['grpdesc']=="Y")) //a small trick to manage moving backwards from a group description
    {
    //This does not work properly in all instances.
    $currentquestion++; 
    $ia=$_SESSION['fieldarray'][$currentquestion]; 
    $_SESSION['step']++;
    }

list($newgroup, $gid, $groupname, $groupdescription, $gl)=checkIfNewGroup($ia);

require_once("qanda.php");
$mandatorys=array();
$mandatoryfns=array();
$conmandatorys=array();
$conmandatoryfns=array();
$conditions=array();
$inputnames=array();

list($plus_qanda, $plus_inputnames)=retrieveAnswers($ia);
if ($plus_qanda)
    {
        $qanda[]=$plus_qanda;
    }
if ($plus_inputnames)
    {
    $inputnames = addtoarray_single($inputnames, $plus_inputnames);
    }

//Display the "mandatory" popup if necessary
if (isset($notanswered)) 
    {
    list($mandatorypopup, $popup)=mandatory_popup($ia, $notanswered);
    }

if (isset($notvalidated))
    {
    list($validationpopup, $vpopup)=validation_popup($ia, $notvalidated);
    }

//Get list of mandatory questions
list($plusman, $pluscon)=create_mandatorylist($ia);
if ($plusman !== null)
    {
    list($plus_man, $plus_manfns)=$plusman;
    $mandatorys=addtoarray_single($mandatorys, $plus_man);
    $mandatoryfns=addtoarray_single($mandatoryfns, $plus_manfns);
    }
if ($pluscon !== null)
    {
    list($plus_conman, $plus_conmanfns)=$pluscon;
    $conmandatorys=addtoarray_single($conmandatorys, $plus_conman);
    $conmandatoryfns=addtoarray_single($conmandatoryfns, $plus_conmanfns);
    }

//Build an array containing the conditions that apply for this page
$plus_conditions=retrieveConditionInfo($ia); //Returns false if no conditions
if ($plus_conditions)
    {
    $conditions = addtoarray_single($conditions, $plus_conditions);
    }
//------------------------END DEVELOPMENT OF QUESTION

$percentcomplete = makegraph($_SESSION['step'], $_SESSION['totalsteps']);

//READ TEMPLATES, INSERT DATA AND PRESENT PAGE
sendcacheheaders();
doHeader();
if (isset($popup)) {echo $popup;}
if (isset($vpopup)) {echo $vpopup;}
foreach(file("$thistpl/startpage.pstpl") as $op)
    {
    echo templatereplace($op);
    }
echo "\n<form method='post' action='{$_SERVER['PHP_SELF']}' id='phpsurveyor' name='phpsurveyor'>\n";

echo "\n\n\n";
foreach(file("$thistpl/survey.pstpl") as $op)
    {
    echo "\t".templatereplace($op);
    }

if ($newgroup == "Y" && $groupdescription && $_POST['move'] != " << "._PREV." ")
    {
    $presentinggroupdescription = "yes";
    echo "\n\n\n";
    echo "\t\t\t<input type='hidden' name='grpdesc' value='Y' id='grpdesc'>\n";
    foreach(file("$thistpl/startgroup.pstpl") as $op)
        {
        echo "\t".templatereplace($op);
        }
    echo "\n<br />\n";
    
    if ($groupdescription)
        {
        foreach(file("$thistpl/groupdescription.pstpl") as $op)
            {
            echo "\t\t".templatereplace($op);
            }
        }
    echo "\n";
    
    echo "\n\n\n";
    echo "\t<script type='text/javascript'>\n";
    echo "\t\n";
    echo "\t</script>\n\n";
    echo "\n\n\n";
    foreach(file("$thistpl/endgroup.pstpl") as $op)
        {
        echo "\t\t\t\t".templatereplace($op);
        }
    echo "\n";

$_SESSION['step']--;
    echo "\t\t\t<input type='hidden' name='newgroupondisplay' value='Y' id='newgroupondisplay'>\n";
    }
else
    {
    echo "\n\n\n";
    foreach(file("$thistpl/startgroup.pstpl") as $op)
        {
        echo "\t".templatereplace($op);
        }
    echo "\n";
    
    echo "\n\n\n";
    echo "\t<script type='text/javascript'>\n";
    echo "\t\n";
    echo "\t</script>\n\n";
    
    echo "\n\n\n";
    if (is_array($qanda))
        {
        foreach ($qanda as $qa)
            {
            echo "\n\t\n";
            echo "\n\t\n";
            echo "\t\t\t\t<div id='question$qa[4]'>";
            $question="<label for='$ia[7]'>" . $qa[0] . "</label>";
            $answer=$qa[1];
            $help=$qa[2];
            $questioncode=$qa[5];
            foreach(file("$thistpl/question.pstpl") as $op)
                {
                echo "\t\t\t\t\t".templatereplace($op)."\n";
                }
            echo "\t\t\t\t</div>\n";
            }
        }
    echo "\n\n\n";
    foreach(file("$thistpl/endgroup.pstpl") as $op)
        {
        echo "\t\t\t\t".templatereplace($op);
        }
    echo "\n";
    }
$navigator = surveymover();
echo "\n\n\n";
foreach(file("$thistpl/navigator.pstpl") as $op)
    {
    echo "\t\t".templatereplace($op);
    }
echo "\n";

if ($thissurvey['active'] != "Y") {echo "\t\t<center><font color='red' size='2'>"._NOTACTIVE."</font></center>\n";}
echo "\n";
    
if (isset($conditions) && is_array($conditions)) //if conditions exist, create hidden inputs for previously answered questions
    {
    foreach (array_keys($_SESSION) as $SESak)
        {
        if (in_array($SESak, $_SESSION['insertarray']))
            {
            echo "<input type='hidden' name='java$SESak' id='java$SESak' value='" . htmlspecialchars($_SESSION[$SESak],ENT_QUOTES) . "'>\n";
            }
        }
    }

//PUT LIST OF FIELDS INTO HIDDEN FORM ELEMENT (But only when a question is showing)
if ($newgroup == "Y" && $groupdescription && $_POST['move'] != " << "._PREV." ")
    {}
else
    {echo "<input type='hidden' name='fieldnames' id='fieldnames' value='";
    echo implode("|", $inputnames);
    echo "'>\n";
    }
//SOME STUFF FOR MANDATORY QUESTIONS
if (remove_nulls_from_array($mandatorys) && $newgroup != "Y")
    {
    $mandatory=implode("|", remove_nulls_from_array($mandatorys));
    echo "<input type='hidden' name='mandatory' value='$mandatory' id='mandatory'>\n";
    }
if (remove_nulls_from_array($conmandatorys))
    {
    $conmandatory=implode("|", remove_nulls_from_array($conmandatorys));
    echo "<input type='hidden' name='conmandatory' value='$conmandatory' id='conmandatory'>\n";
    }
if (remove_nulls_from_array($mandatoryfns))
    {
    $mandatoryfn=implode("|", remove_nulls_from_array($mandatoryfns));
    echo "<input type='hidden' name='mandatoryfn' value='$mandatoryfn' id='mandatoryfn'>\n";
    }
if (remove_nulls_from_array($conmandatoryfns))
    {
    $conmandatoryfn=implode("|", remove_nulls_from_array($conmandatoryfns));
    echo "<input type='hidden' name='conmandatoryfn' value='$conmandatoryfn' id='conmandatoryfn'>\n";
    }

echo "<input type='hidden' name='thisstep' value='{$_SESSION['step']}' id='thisstep'>\n";
echo "<input type='hidden' name='sid' value='$surveyid' id='sid'>\n";
echo "<input type='hidden' name='token' value='$token' id='token'>\n";
echo "<input type='hidden' name='lastgroupname' value='".htmlspecialchars($groupname)."' id='lastgroupname'>\n";
echo "</form>\n";
foreach(file("$thistpl/endpage.pstpl") as $op)
    {
    echo templatereplace($op);
    }
doFooter();

${this.title}

Code Editor : question.php