mirror of
https://github.com/php/web-php.git
synced 2026-03-23 23:02:13 +01:00
The $days array in submit-event.php used the current year implicitly while layout.inc hardcoded 2012, causing weekday index mismatches in the recurring event preview.
278 lines
10 KiB
PHP
278 lines
10 KiB
PHP
<?php
|
|
$_SERVER['BASE_PAGE'] = 'submit-event.php';
|
|
include_once __DIR__ . '/include/prepend.inc';
|
|
include_once __DIR__ . '/include/posttohost.inc';
|
|
include_once __DIR__ . '/include/email-validation.inc';
|
|
site_header("Submit an Event", ["current" => "community"]);
|
|
|
|
// No errors, processing depends on POST data
|
|
$errors = [];
|
|
$process = [] !== $_POST;
|
|
|
|
// Avoid E_NOTICE errors on incoming vars if not set
|
|
$vars = [
|
|
'sday', 'smonth', 'syear', 'eday',
|
|
'emonth', 'eyear', 'recur', 'recur_day',
|
|
];
|
|
foreach ($vars as $varname) {
|
|
if (empty($_POST[$varname])) {
|
|
$_POST[$varname] = 0;
|
|
}
|
|
}
|
|
$vars = [
|
|
'type', 'country', 'category', 'email', 'url', 'ldesc', 'sdesc',
|
|
];
|
|
foreach ($vars as $varname) {
|
|
if (!isset($_POST[$varname])) {
|
|
$_POST[$varname] = "";
|
|
}
|
|
}
|
|
|
|
// We need to process some form data
|
|
if ($process) {
|
|
|
|
// Clean and validate data
|
|
if (!is_emailable_address($_POST['email'])) {
|
|
$errors[] = 'You must supply a valid email address.';
|
|
}
|
|
|
|
/**
|
|
* Lockout of addresses and domains known to SPAM us.
|
|
* Add, edit, or remove blacklisted users or domains
|
|
* in include/email-validation.inc :: blacklisted().
|
|
*/
|
|
$uemail = isset($_POST['email']) ? strtolower($_POST['email']) : '';
|
|
if (blacklisted($uemail)) {
|
|
$errors[] = 'An expected error has been encountered. Please don\'t try again later.';
|
|
}
|
|
|
|
$_POST['sdesc'] = trim($_POST['sdesc']);
|
|
if (!$_POST['sdesc']) {
|
|
$errors[] = "You must supply a short description of the event.";
|
|
}
|
|
|
|
$_POST['ldesc'] = trim(strip_tags($_POST['ldesc'], '<a><i><b><br><p>'));
|
|
$_POST['ldesc'] = preg_replace("/(style|on\\w+?)\s*=[^>]*/i", "", $_POST['ldesc']);
|
|
if (!$_POST['ldesc']) {
|
|
$errors[] = "You must supply a long description of the event.";
|
|
}
|
|
elseif (stripos($_POST['ldesc'], 'PHP') === false) {
|
|
$errors[] = "This does not look like a 'PHP' event";
|
|
}
|
|
|
|
$valid_schemes = ['http', 'https', 'ftp'];
|
|
|
|
$_POST['url'] = trim($_POST['url']);
|
|
$pu = parse_url($_POST['url']);
|
|
$pu['host'] = isset($pu['host']) ? trim($pu['host']) : '';
|
|
|
|
if (!$_POST['url']) {
|
|
$errors[] = "You must supply a URL with more information about the event.";
|
|
}
|
|
elseif (empty($pu['host']) || !in_array($pu['scheme'], $valid_schemes, false)) {
|
|
$errors[] = "The URL you supplied was invalid.";
|
|
}
|
|
|
|
if (!$_POST['country']) {
|
|
$errors[] = 'You must specify a country for the event.';
|
|
}
|
|
|
|
if (!$_POST['category']) {
|
|
$errors[] = 'You must specify a category for the event.';
|
|
}
|
|
|
|
if (!checkdate($_POST['smonth'], $_POST['sday'], $_POST['syear'])) {
|
|
$errors[] = "You must specify a valid start date.";
|
|
}
|
|
else {
|
|
$sdate = mktime(0, 0, 1, $_POST['smonth'], $_POST['sday'], $_POST['syear']);
|
|
if ($sdate < time()) {
|
|
$errors[] = "You must specify a start date that is in the future.";
|
|
}
|
|
}
|
|
|
|
if ($_POST['type'] == 'multi' && !checkdate($_POST['emonth'], $_POST['eday'], $_POST['eyear'])) {
|
|
$errors[] = "You must specify a valid end date for a multi-day event.";
|
|
}
|
|
elseif ($_POST['type'] == 'multi' && checkdate($_POST['smonth'], $_POST['sday'], $_POST['syear'])) {
|
|
$sdate = mktime(0, 0, 1, $_POST['smonth'], $_POST['sday'], $_POST['syear']);
|
|
$edate = mktime(0, 0, 1, $_POST['emonth'], $_POST['eday'], $_POST['eyear']);
|
|
if ($edate < time()) {
|
|
$errors[] = "You must specify an end date that is in the future.";
|
|
}
|
|
elseif ($edate < $sdate) {
|
|
$errors[] = "You must specify an end date that is after the start date.";
|
|
}
|
|
}
|
|
|
|
if ($_POST['type'] == 'recur' && !($_POST['recur'] && $_POST['recur_day'])) {
|
|
$errors[] = "You must specify a valid day of the month for a recurring event.";
|
|
}
|
|
|
|
// Spam question
|
|
if ($_POST["sane"] != 3) {
|
|
$errors[] = "It's OK. I'm not real either";
|
|
}
|
|
|
|
if (isset($_POST['action']) && $_POST['action'] === 'Submit' && empty($errors)) {
|
|
// Submit to main.php.net
|
|
$result = posttohost("https://main.php.net/entry/event.php", $_POST);
|
|
if ($result) {
|
|
$errors[] = "There was an error processing your submission: $result";
|
|
}
|
|
if (count($errors) === 0) {
|
|
echo "<p>\n Thank you for your submission! You should hear back soon\n" .
|
|
" as to whether your event has been accepted for inclusion in\n" .
|
|
" our calendar.\n</p>";
|
|
site_footer();
|
|
exit;
|
|
}
|
|
}
|
|
|
|
if (count($errors) === 0) {
|
|
echo "<p>\n The following is a preview of your event submission.\n" .
|
|
" Please double-check it to make sure all of the information is correct.\n</p>";
|
|
}
|
|
}
|
|
|
|
// No form data to process
|
|
else {
|
|
echo "<p>\n Have an upcoming PHP user group meeting?\n" .
|
|
" Submit your event here, and after it has been approved, it will be listed in\n" .
|
|
" our event calendar.\n</p>";
|
|
echo "<p>Please note that conference submissions should be emailed to php-webmaster@lists.php.net</p>\n";
|
|
echo '<div class="warning">' . "\n" .
|
|
"<p>\n All submissions will be <strong>reviewed by human</strong>. Do not waste " .
|
|
"our and your own time on submitting events unrelated to PHP. Thank you.</p>\n" .
|
|
"</div>\n";
|
|
}
|
|
|
|
// Display errors if found
|
|
if (count($errors)) { display_errors($errors); }
|
|
|
|
// Generate days and months arrays for form
|
|
for ($i = 1; $i <= 7; $i++) {
|
|
$days[$i] = date('l', mktime(12, 0, 0, 4, $i, 2012));
|
|
}
|
|
for ($i = 1; $i <= 12; $i++) {
|
|
$months[$i] = date('F', mktime(12, 0, 0, $i, 1));
|
|
}
|
|
|
|
// Possibilities to recur
|
|
$re = [
|
|
1 => 'First',
|
|
2 => 'Second',
|
|
3 => 'Third',
|
|
4 => 'Fourth',
|
|
-1 => 'Last',
|
|
-2 => '2nd Last',
|
|
-3 => '3rd Last',
|
|
];
|
|
|
|
// If we have data, display preview
|
|
if ($process && count($errors) === 0) {
|
|
echo "<p><strong>Preview:</strong></p>\n";
|
|
display_event($_POST);
|
|
echo "<p><strong>Change:</strong></p>\n";
|
|
}
|
|
|
|
?>
|
|
<form action="/submit-event.php" method="post">
|
|
<table border="0" cellpadding="3" class="standard">
|
|
<tr>
|
|
<th class="subr">Start Date</th>
|
|
<td>
|
|
<select name="smonth"><option></option><?php display_options($months, $_POST['smonth'])?></select>
|
|
<input type="text" name="sday" size="2" maxlength="2" value="<?php echo htmlentities($_POST['sday'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>">
|
|
<input type="text" name="syear" size="4" maxlength="4" value="<?php echo $_POST['syear'] ? htmlentities($_POST['syear'], ENT_QUOTES | ENT_IGNORE, 'UTF-8') : date("Y")?>">
|
|
<input type="radio" id="single" name="type" value="single"<?php if ($_POST['type'] == 'single' || !$_POST['type']) echo ' checked="checked"';?>>
|
|
<label for="single">One day (no end-date required)</label>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">End Date</th>
|
|
<td>
|
|
<select name="emonth"><option></option><?php display_options($months, $_POST['emonth'])?></select>
|
|
<input type="text" name="eday" size="2" maxlength="2" value="<?php echo htmlentities($_POST['eday'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>">
|
|
<input type="text" name="eyear" size="4" maxlength="4" value="<?php echo $_POST['eyear'] ? htmlentities($_POST['eyear'], ENT_QUOTES | ENT_IGNORE, 'UTF-8') : date("Y")?>">
|
|
<input type="radio" id="multi" name="type" value="multi"<?php if ($_POST['type'] == 'multi') echo ' checked="checked"';?>>
|
|
<label for="multi">Multi-day event</label>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">OR Recurring</th>
|
|
<td>
|
|
<select name="recur"><option></option><?php display_options($re, $_POST['recur'])?></select>
|
|
<select name="recur_day"><option></option><?php display_options($days, $_POST['recur_day'])?></select>
|
|
<input type="radio" id="recur" name="type" value="recur"<?php if ($_POST['type'] == 'recur') echo ' checked="checked"';?>>
|
|
<label for="recur">Recurring (every month)</label>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">Short Description</th>
|
|
<td><input type="text" name="sdesc" class="max" value="<?php echo htmlentities($_POST['sdesc'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>" size="32" maxlength="32"></td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">URL</th>
|
|
<td><input type="text" name="url" size="40" maxlength="128" class="max" value="<?php echo htmlentities($_POST['url'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>"></td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">Country</th>
|
|
<td>
|
|
<select name="country" class="max">
|
|
<option value="">- Select a country -</option>
|
|
<?php display_options($COUNTRIES, $_POST['country']);?>
|
|
</select>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">Event Category</th>
|
|
<td>
|
|
<select name="category" class="max">
|
|
<?php
|
|
$cat = ["- Select a category -", "User Group Event", 3 => "Training"]; // 2 = conference.. which should be on php.net/conferences instead
|
|
display_options($cat, $_POST['category']);
|
|
?>
|
|
</select>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">Email</th>
|
|
<td>
|
|
<input type="text" name="email" size="40" maxlength="128" class="max" value="<?php echo htmlentities($_POST['email'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>"><br>
|
|
<small>This email address is only used to contact you about the listing, it will not displayed along with the listing.</small>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">Long Description</th>
|
|
<td><textarea name="ldesc" cols="60" rows="10" wrap="virtual" class="max"><?php echo htmlentities($_POST['ldesc'], ENT_QUOTES | ENT_IGNORE, 'UTF-8');?></textarea></td>
|
|
</tr>
|
|
<tr>
|
|
<th colspan="2">
|
|
<input type="submit" name="action" value="Preview">
|
|
<?php if ($process && count($errors) == 0) {?>
|
|
<input type="submit" name="action" value="Submit">
|
|
<?php }?>
|
|
</th>
|
|
</tr>
|
|
<tr>
|
|
<th class="subr">Are you real?</th>
|
|
<td><select name="sane"><?php display_options(["I, Robot", "I used to be", "WTF?", "Yes", "No, but I'd still want to submit this"], "2"); ?></select></td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
<?php
|
|
site_footer();
|
|
|
|
// Display an option list with one selected
|
|
function display_options($options, $current): void
|
|
{
|
|
foreach ($options as $k => $v) {
|
|
echo '<option value="', $k, '"',
|
|
($k == $current ? ' selected="selected"' : ''),
|
|
'>', htmlentities($v, ENT_QUOTES | ENT_IGNORE, 'UTF-8'), "</option>\n";
|
|
}
|
|
}
|
|
|
|
?>
|