ID ){
$validations[$i+$off] = 1; ### auto approved
continue;
}
}
### captcha not for logged in users
$jump = ($field_stat[1] == 'captcha') && is_user_logged_in() && $captchaopt['fo']<>'1';
$jump = $jump || ( ($field_stat[1] == 'verification') && is_user_logged_in() && $captchaopt['foqa']<>'1' );
if( $jump ) continue;
### if subscribe not shown, skip
$isSubscribed=='';
if ( class_exists('sg_subscribe') ){
global $sg_subscribe;
sg_subscribe_start();
$isSubscribed = $sg_subscribe->current_viewer_subscription_status();
}
if( in_array($field_type,array('subscribe')) && $isSubscribed<>'' )
continue;
### comment luv
get_currentuserinfo();
global $user_level;
if( in_array($field_type,array('luv')) && $user_level==10 )
continue;
### input field names & label
$custom_names = ($cformsSettings['form'.$no]['cforms'.$no.'_customnames']=='1')?true:false;
$isFieldArray = false;
if ( $custom_names ){
###preg_match('/^([^#\|]*).*/',$field_name,$input_name);
$tmpName = $field_name; ###hardcoded for now
###debug
db("\t\t ...custom names/id's...($tmpName)");
if ( strpos($tmpName,'[id:')!==false ){
$isFieldArray = strpos($tmpName,'[]');
$idPartA = strpos($tmpName,'[id:');
$idPartB = strrpos($tmpName,']',$idPartA);
if( $isFieldArray ){
$array_id = cf_sanitize_ids( substr($tmpName,$idPartA+4,($idPartB-$idPartA)-4) );
if( !$inpFieldArr[$array_id] || $inpFieldArr[$array_id]=='' ){
$inpFieldArr[$array_id]=0;
}
$field_name = cf_sanitize_ids( substr_replace($tmpName,'',$idPartA,($idPartB-$idPartA)+1) );
$current_field = $_REQUEST[ cf_sanitize_ids( substr($tmpName,$idPartA+4,($idPartB-$idPartA)-4) ) ][$inpFieldArr[$array_id]++];
//echo "f=$field_name , curr=$current_field [$array_id]
";
} else {
$field_name = cf_sanitize_ids( substr_replace($tmpName,'',$idPartA,($idPartB-$idPartA)+1) );
$current_field = $_REQUEST[ cf_sanitize_ids( substr($tmpName,$idPartA+4,($idPartB-$idPartA)-4) ) ];
}
//$field_name = cf_sanitize_ids( substr($field_name,$idPartA+4,($idPartB-$idPartA)-4) );
} else {
if( strpos($tmpName,'#')!==false && strpos($tmpName,'#')==0 )
preg_match('/^#([^\|]*).*/',$field_name,$input_name); ###special case with checkboxes w/ right label only & no ID
else
preg_match('/^([^#\|]*).*/',$field_name,$input_name); ###just take front part
$current_field = $_REQUEST[ cf_sanitize_ids($input_name[1]) ];
}
}
else
$current_field = $_REQUEST['cf'.$no.'_field_' . ((int)$i+(int)$off)];
if( in_array($field_type,array('luv','subscribe','comment','url','email','cauthor')) ) ### WP comment field name exceptions
$current_field = $_REQUEST[$field_type];
$current_field = is_array($current_field) ? $current_field : stripslashes($current_field);
if( $field_emailcheck ) { ### email field
###debug
db("\t\t ...found email field ($current_field) is_email = ".cforms_is_email( $current_field ));
### special email field in WP Commente
if ( $field_type=='email' )
$validations[$i+$off] = cforms_is_email( $_REQUEST['email']) || (!$field_required && $_REQUEST['email']=='');
else
$validations[$i+$off] = cforms_is_email( $current_field ) || (!$field_required && $current_field=='');
if ( !$validations[$i+$off] && $err==0 ) $err=1;
}
else if( $field_required && !in_array($field_type,array('verification','captcha')) ) { ### just required
###debug
db("\t\t ...is required! check: current_field=$current_field");
if( in_array($field_type,array( 'html5color','html5date','html5datetime','html5datetime-local','html5email','html5month','html5number','html5range','html5search','html5tel','html5time','html5url','html5week',
'cauthor','url','comment','pwfield','textfield','datepicker','textarea','yourname','youremail','friendsname','friendsemail')) ){
$validations[$i+$off] = ($current_field=='')?false:true;
}else if( $field_type=="checkbox" ) {
$validations[$i+$off] = ($current_field=='')?false:true;
}else if( $field_type=="selectbox" || $field_type=="emailtobox" ) {
$validations[$i+$off] = !($current_field == '-' );
}else if( $field_type=="multiselectbox" ) {
### how many multiple selects ?
$all_options = $current_field;
if ( count($all_options) <= 1 && $all_options[0]=='' )
$validations[$i+$off] = false;
else
$validations[$i+$off] = true;
}else if( $field_type=="upload" ) { ### prelim upload check
$validations[$i+$off] = !($_FILES['cf_uploadfile'.$no][name][$filefield++]=='');
if ( !$validations[$i+$off] && $err==0 )
{ $err=3; $fileerr = $cformsSettings['global']['cforms_upload_err2']; }
}else if( in_array($field_type,array('cauthor','url','email','comment')) ) {
$validations[$i+$off] = ($_REQUEST[$field_type]=='')?false:true;
}else if( $field_type=="radiobuttons" ) {
$validations[$i+$off] = ($current_field=='')?false:true;
}
if ( !$validations[$i+$off] && $err==0 ) $err=1;
}
else if( $field_type == 'verification' ){ ### visitor verification code
$validations[$i+$off] = 1;
if ( $_REQUEST['cforms_a'.$no] <> md5(rawurlencode(strtolower($_REQUEST['cforms_q'.$no]))) ) {
$validations[$i+$off] = 0;
$err = !($err)?2:$err;
}
}
else if( $field_type == 'captcha' ){ ### captcha verification
$validations[$i+$off] = 1;
$a = explode('+',$_COOKIE['turing_string_'.$no]);
$a = $a[1];
$b = md5( ($captchaopt['i'] == 'i')?strtolower($_REQUEST['cforms_captcha'.$no]):$_REQUEST['cforms_captcha'.$no]);
if ( $a <> $b ) {
$validations[$i+$off] = 0;
$err = !($err)?2:$err;
}
}
else
$validations[$i+$off] = 1;
### REGEXP now outside of 'is required'
if( in_array($field_type,array('cauthor','url','comment','pwfield','textfield','datepicker','textarea','yourname','youremail','friendsname','friendsemail')) ){
### regexp set for textfields?
$obj = explode('|', $c_title[0], 3);
if ( $obj[2] <> '') { ### check against other field!
if ( isset($_REQUEST[$obj[2]]) && $_REQUEST[$obj[2]]<>'' ){
if( $current_field <> $_REQUEST[$obj[2]] )
$validations[$i+$off] = false;
}
else { ### classic regexp
$reg_exp = str_replace('/','\/',stripslashes($obj[2]) );
### multi-line textarea regexp trick
if( $field_type == 'textarea' )
$valField = (string)str_replace(array("\r", "\r\n", "\n"), ' ', $current_field);
else
$valField = $current_field;
if( $current_field<>'' && !preg_match('/'.$reg_exp.'/', $valField) ){
$validations[$i+$off] = false;
}
}
}
if ( !$validations[$i+$off] && $err==0 ) $err=1;
}
$all_valid = $all_valid && $validations[$i+$off];
if ( $c_err[1] <> '' && $validations[$i+$off] == false ){
$c_errflag=4;
if ( $cformsSettings['global']['cforms_liID']=='1' ){
$custom_error .= ''.stripslashes($c_err[1]).' »';
} else
$custom_error .= '' . stripslashes($c_err[1]) . '';
}
}
###
### have to upload a file?
###
global $file;
$file='';
$i=0;
if( isset($_FILES['cf_uploadfile'.$no]) && $all_valid){
$file = $_FILES['cf_uploadfile'.$no];
foreach( $file[name] as $value ) {
if(!empty($value)){ ### this will check if any blank field is entered
if ( function_exists('my_cforms_logic') )
$file[name][$i] = my_cforms_logic($_REQUEST,$_FILES['cf_uploadfile'.$no][name][$i],"filename");
$fileerr = '';
### A successful upload will pass this test. It makes no sense to override this one.
if ( $file['error'][$i] > 0 )
$fileerr = $cformsSettings['global']['cforms_upload_err1'];
### A successful upload will pass this test. It makes no sense to override this one.
$fileext[$i] = strtolower( substr($value,strrpos($value, '.')+1,strlen($value)) );
$allextensions = explode(',' , preg_replace('/\s/', '', strtolower($cformsSettings['form'.$no]['cforms'.$no.'_upload_ext'])) );
if ( $cformsSettings['form'.$no]['cforms'.$no.'_upload_ext']<>'' && !in_array($fileext[$i], $allextensions) )
$fileerr = $cformsSettings['global']['cforms_upload_err5'];
### A non-empty file will pass this test.
if ( !( $file['size'][$i] > 0 ) )
$fileerr = $cformsSettings['global']['cforms_upload_err2'];
### A non-empty file will pass this test.
if ( (int)$cformsSettings['form'.$no]['cforms'.$no.'_upload_size'] > 0 ) {
if ( $file['size'][$i] >= (int)$cformsSettings['form'.$no]['cforms'.$no.'_upload_size'] * 1024 )
$fileerr = $cformsSettings['global']['cforms_upload_err3'];
}
### A properly uploaded file will pass this test. There should be no reason to override this one.
if (! @ is_uploaded_file( $file['tmp_name'][$i] ) )
$fileerr = $cformsSettings['global']['cforms_upload_err4'];
if ( $fileerr <> '' ){
$err = 3;
$all_valid = false;
} ### file uploaded
} ### if !empty
$i++;
} ### while all file
} ### no file upload triggered
###
### what kind of error message?
###
switch($err){
case 0: break;
case 1:
$usermessage_text = preg_replace ( array("|\\\'|",'/\\\"/','|\r\n|'),array(''','"','
'), ''.$cformsSettings['form'.$no]['cforms'.$no.'_failure'].'' );
break;
case 2:
$usermessage_text = preg_replace ( array("|\\\'|",'/\\\"/','|\r\n|'),array(''','"','
'), ''.$cformsSettings['global']['cforms_codeerr'].'' );
break;
case 3:
$usermessage_text = preg_replace ( array("|\\\'|",'/\\\"/','|\r\n|'),array(''','"','
'), ''.$fileerr.'');
break;
case 4:
$usermessage_text = preg_replace ( array("|\\\'|",'/\\\"/','|\r\n|'),array(''','"','
'), ''.$cformsSettings['form'.$no]['cforms'.$no.'_failure'].'' );
break;
}
if ( $err<>0 && $c_errflag )
$usermessage_text .= ''.$custom_error.'
';
### proxy functions
function cforms_is_email($string){
return preg_match("/^[_a-z0-9+-]+(\.[_a-z0-9+-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,4})$/i", $string);
}
?>