1
0
mirror of https://github.com/php/web-php.git synced 2026-03-23 23:02:13 +01:00
Files
archived-web-php/submit-event.php
Louis-Arnaud 9516d640ba Fix weekday dropdown mismatch in submit-event form (#1218) (#1809)
The $days array in submit-event.php used the current year implicitly
while layout.inc hardcoded 2012, causing weekday index mismatches
in the recurring event preview.
2026-03-17 11:01:52 +00:00

278 lines
10 KiB
PHP

<?php
$_SERVER['BASE_PAGE'] = 'submit-event.php';
include_once __DIR__ . '/include/prepend.inc';
include_once __DIR__ . '/include/posttohost.inc';
include_once __DIR__ . '/include/email-validation.inc';
site_header("Submit an Event", ["current" => "community"]);
// No errors, processing depends on POST data
$errors = [];
$process = [] !== $_POST;
// Avoid E_NOTICE errors on incoming vars if not set
$vars = [
'sday', 'smonth', 'syear', 'eday',
'emonth', 'eyear', 'recur', 'recur_day',
];
foreach ($vars as $varname) {
if (empty($_POST[$varname])) {
$_POST[$varname] = 0;
}
}
$vars = [
'type', 'country', 'category', 'email', 'url', 'ldesc', 'sdesc',
];
foreach ($vars as $varname) {
if (!isset($_POST[$varname])) {
$_POST[$varname] = "";
}
}
// We need to process some form data
if ($process) {
// Clean and validate data
if (!is_emailable_address($_POST['email'])) {
$errors[] = 'You must supply a valid email address.';
}
/**
* Lockout of addresses and domains known to SPAM us.
* Add, edit, or remove blacklisted users or domains
* in include/email-validation.inc :: blacklisted().
*/
$uemail = isset($_POST['email']) ? strtolower($_POST['email']) : '';
if (blacklisted($uemail)) {
$errors[] = 'An expected error has been encountered. Please don\'t try again later.';
}
$_POST['sdesc'] = trim($_POST['sdesc']);
if (!$_POST['sdesc']) {
$errors[] = "You must supply a short description of the event.";
}
$_POST['ldesc'] = trim(strip_tags($_POST['ldesc'], '<a><i><b><br><p>'));
$_POST['ldesc'] = preg_replace("/(style|on\\w+?)\s*=[^>]*/i", "", $_POST['ldesc']);
if (!$_POST['ldesc']) {
$errors[] = "You must supply a long description of the event.";
}
elseif (stripos($_POST['ldesc'], 'PHP') === false) {
$errors[] = "This does not look like a 'PHP' event";
}
$valid_schemes = ['http', 'https', 'ftp'];
$_POST['url'] = trim($_POST['url']);
$pu = parse_url($_POST['url']);
$pu['host'] = isset($pu['host']) ? trim($pu['host']) : '';
if (!$_POST['url']) {
$errors[] = "You must supply a URL with more information about the event.";
}
elseif (empty($pu['host']) || !in_array($pu['scheme'], $valid_schemes, false)) {
$errors[] = "The URL you supplied was invalid.";
}
if (!$_POST['country']) {
$errors[] = 'You must specify a country for the event.';
}
if (!$_POST['category']) {
$errors[] = 'You must specify a category for the event.';
}
if (!checkdate($_POST['smonth'], $_POST['sday'], $_POST['syear'])) {
$errors[] = "You must specify a valid start date.";
}
else {
$sdate = mktime(0, 0, 1, $_POST['smonth'], $_POST['sday'], $_POST['syear']);
if ($sdate < time()) {
$errors[] = "You must specify a start date that is in the future.";
}
}
if ($_POST['type'] == 'multi' && !checkdate($_POST['emonth'], $_POST['eday'], $_POST['eyear'])) {
$errors[] = "You must specify a valid end date for a multi-day event.";
}
elseif ($_POST['type'] == 'multi' && checkdate($_POST['smonth'], $_POST['sday'], $_POST['syear'])) {
$sdate = mktime(0, 0, 1, $_POST['smonth'], $_POST['sday'], $_POST['syear']);
$edate = mktime(0, 0, 1, $_POST['emonth'], $_POST['eday'], $_POST['eyear']);
if ($edate < time()) {
$errors[] = "You must specify an end date that is in the future.";
}
elseif ($edate < $sdate) {
$errors[] = "You must specify an end date that is after the start date.";
}
}
if ($_POST['type'] == 'recur' && !($_POST['recur'] && $_POST['recur_day'])) {
$errors[] = "You must specify a valid day of the month for a recurring event.";
}
// Spam question
if ($_POST["sane"] != 3) {
$errors[] = "It's OK. I'm not real either";
}
if (isset($_POST['action']) && $_POST['action'] === 'Submit' && empty($errors)) {
// Submit to main.php.net
$result = posttohost("https://main.php.net/entry/event.php", $_POST);
if ($result) {
$errors[] = "There was an error processing your submission: $result";
}
if (count($errors) === 0) {
echo "<p>\n Thank you for your submission! You should hear back soon\n" .
" as to whether your event has been accepted for inclusion in\n" .
" our calendar.\n</p>";
site_footer();
exit;
}
}
if (count($errors) === 0) {
echo "<p>\n The following is a preview of your event submission.\n" .
" Please double-check it to make sure all of the information is correct.\n</p>";
}
}
// No form data to process
else {
echo "<p>\n Have an upcoming PHP user group meeting?\n" .
" Submit your event here, and after it has been approved, it will be listed in\n" .
" our event calendar.\n</p>";
echo "<p>Please note that conference submissions should be emailed to php-webmaster@lists.php.net</p>\n";
echo '<div class="warning">' . "\n" .
"<p>\n All submissions will be <strong>reviewed by human</strong>. Do not waste " .
"our and your own time on submitting events unrelated to PHP. Thank you.</p>\n" .
"</div>\n";
}
// Display errors if found
if (count($errors)) { display_errors($errors); }
// Generate days and months arrays for form
for ($i = 1; $i <= 7; $i++) {
$days[$i] = date('l', mktime(12, 0, 0, 4, $i, 2012));
}
for ($i = 1; $i <= 12; $i++) {
$months[$i] = date('F', mktime(12, 0, 0, $i, 1));
}
// Possibilities to recur
$re = [
1 => 'First',
2 => 'Second',
3 => 'Third',
4 => 'Fourth',
-1 => 'Last',
-2 => '2nd Last',
-3 => '3rd Last',
];
// If we have data, display preview
if ($process && count($errors) === 0) {
echo "<p><strong>Preview:</strong></p>\n";
display_event($_POST);
echo "<p><strong>Change:</strong></p>\n";
}
?>
<form action="/submit-event.php" method="post">
<table border="0" cellpadding="3" class="standard">
<tr>
<th class="subr">Start Date</th>
<td>
<select name="smonth"><option></option><?php display_options($months, $_POST['smonth'])?></select>
<input type="text" name="sday" size="2" maxlength="2" value="<?php echo htmlentities($_POST['sday'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>">
<input type="text" name="syear" size="4" maxlength="4" value="<?php echo $_POST['syear'] ? htmlentities($_POST['syear'], ENT_QUOTES | ENT_IGNORE, 'UTF-8') : date("Y")?>">
<input type="radio" id="single" name="type" value="single"<?php if ($_POST['type'] == 'single' || !$_POST['type']) echo ' checked="checked"';?>>
<label for="single">One day (no end-date required)</label>
</td>
</tr>
<tr>
<th class="subr">End Date</th>
<td>
<select name="emonth"><option></option><?php display_options($months, $_POST['emonth'])?></select>
<input type="text" name="eday" size="2" maxlength="2" value="<?php echo htmlentities($_POST['eday'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>">
<input type="text" name="eyear" size="4" maxlength="4" value="<?php echo $_POST['eyear'] ? htmlentities($_POST['eyear'], ENT_QUOTES | ENT_IGNORE, 'UTF-8') : date("Y")?>">
<input type="radio" id="multi" name="type" value="multi"<?php if ($_POST['type'] == 'multi') echo ' checked="checked"';?>>
<label for="multi">Multi-day event</label>
</td>
</tr>
<tr>
<th class="subr">OR Recurring</th>
<td>
<select name="recur"><option></option><?php display_options($re, $_POST['recur'])?></select>
<select name="recur_day"><option></option><?php display_options($days, $_POST['recur_day'])?></select>
<input type="radio" id="recur" name="type" value="recur"<?php if ($_POST['type'] == 'recur') echo ' checked="checked"';?>>
<label for="recur">Recurring (every month)</label>
</td>
</tr>
<tr>
<th class="subr">Short Description</th>
<td><input type="text" name="sdesc" class="max" value="<?php echo htmlentities($_POST['sdesc'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>" size="32" maxlength="32"></td>
</tr>
<tr>
<th class="subr">URL</th>
<td><input type="text" name="url" size="40" maxlength="128" class="max" value="<?php echo htmlentities($_POST['url'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>"></td>
</tr>
<tr>
<th class="subr">Country</th>
<td>
<select name="country" class="max">
<option value="">- Select a country -</option>
<?php display_options($COUNTRIES, $_POST['country']);?>
</select>
</td>
</tr>
<tr>
<th class="subr">Event Category</th>
<td>
<select name="category" class="max">
<?php
$cat = ["- Select a category -", "User Group Event", 3 => "Training"]; // 2 = conference.. which should be on php.net/conferences instead
display_options($cat, $_POST['category']);
?>
</select>
</td>
</tr>
<tr>
<th class="subr">Email</th>
<td>
<input type="text" name="email" size="40" maxlength="128" class="max" value="<?php echo htmlentities($_POST['email'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>"><br>
<small>This email address is only used to contact you about the listing, it will not displayed along with the listing.</small>
</td>
</tr>
<tr>
<th class="subr">Long Description</th>
<td><textarea name="ldesc" cols="60" rows="10" wrap="virtual" class="max"><?php echo htmlentities($_POST['ldesc'], ENT_QUOTES | ENT_IGNORE, 'UTF-8');?></textarea></td>
</tr>
<tr>
<th colspan="2">
<input type="submit" name="action" value="Preview">
<?php if ($process && count($errors) == 0) {?>
<input type="submit" name="action" value="Submit">
<?php }?>
</th>
</tr>
<tr>
<th class="subr">Are you real?</th>
<td><select name="sane"><?php display_options(["I, Robot", "I used to be", "WTF?", "Yes", "No, but I'd still want to submit this"], "2"); ?></select></td>
</tr>
</table>
</form>
<?php
site_footer();
// Display an option list with one selected
function display_options($options, $current): void
{
foreach ($options as $k => $v) {
echo '<option value="', $k, '"',
($k == $current ? ' selected="selected"' : ''),
'>', htmlentities($v, ENT_QUOTES | ENT_IGNORE, 'UTF-8'), "</option>\n";
}
}
?>