Project

General

Profile

1 560 Ruebenwurz
<?php
2
3
// $Id$
4
5
/*
6
7
 Website Baker Project <http://www.websitebaker.org/>
8
 Copyright (C) 2004-2008, Ryan Djurovich
9
10
 Website Baker is free software; you can redistribute it and/or modify
11
 it under the terms of the GNU General Public License as published by
12
 the Free Software Foundation; either version 2 of the License, or
13
 (at your option) any later version.
14
15
 Website Baker is distributed in the hope that it will be useful,
16
 but WITHOUT ANY WARRANTY; without even the implied warranty of
17
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18
 GNU General Public License for more details.
19
20
 You should have received a copy of the GNU General Public License
21
 along with Website Baker; if not, write to the Free Software
22
 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
23
24
*/
25
26
/*
27
The Website Baker Project would like to thank Rudolph Lartey <www.carbonect.com>
28
for his contributions to this module - adding extra field types
29
*/
30
31
// Must include code to stop this file being access directly
32
if(defined('WB_PATH') == false) { exit("Cannot access this file directly"); }
33
34
// check if frontend.css file needs to be included into the <body></body> of view.php
35 570 doc
if((!function_exists('register_frontend_modfiles') || !defined('MOD_FRONTEND_CSS_REGISTERED')) &&
36
	file_exists(WB_PATH .'/modules/form/frontend.css')) {
37
	echo '<style type="text/css">';
38
	include(WB_PATH .'/modules/form/frontend.css');
39
	echo "\n</style>\n";
40 560 Ruebenwurz
}
41
42 596 thorn
require_once(WB_PATH.'/include/captcha/captcha.php');
43
44 789 doc
// obtain the settings of the output filter module
45
if(file_exists(WB_PATH.'/modules/output_filter/filter-routines.php')) {
46
	include_once(WB_PATH.'/modules/output_filter/filter-routines.php');
47
	$filter_settings = get_output_filter_settings();
48
} else {
49
	// no output filter used, define default settings
50
	$filter_settings['email_filter'] = 0;
51
}
52
53 560 Ruebenwurz
// Function for generating an optionsfor a select field
54 570 doc
if (!function_exists('make_option')) {
55 618 thorn
function make_option(&$n, $k, $values) {
56 560 Ruebenwurz
	// start option group if it exists
57
	if (substr($n,0,2) == '[=') {
58
	 	$n = '<optgroup label="'.substr($n,2,strlen($n)).'">';
59
	} elseif ($n == ']') {
60
		$n = '</optgroup>';
61
	} else {
62 760 Ruebenwurz
		if(in_array($n, $values)) {
63 618 thorn
			$n = '<option selected="selected" value="'.$n.'">'.$n.'</option>';
64 760 Ruebenwurz
		} else {
65 618 thorn
			$n = '<option value="'.$n.'">'.$n.'</option>';
66 760 Ruebenwurz
		}
67 560 Ruebenwurz
	}
68
}
69
}
70
// Function for generating a checkbox
71 570 doc
if (!function_exists('make_checkbox')) {
72 560 Ruebenwurz
function make_checkbox(&$n, $idx, $params) {
73 618 thorn
	$field_id = $params[0][0];
74
	$seperator = $params[0][1];
75 760 Ruebenwurz
	$label_id = 'wb_'.str_replace(" ", "_", $n);
76
	if(in_array($n, $params[1])) {
77
		$n = '<input class="field_checkbox" type="checkbox" id="'.$label_id.'" name="field'.$field_id.'['.$idx.']" value="'.$n.'" checked="checked" />'.'<label for="'.$label_id.'" class="checkbox_label">'.$n.'</lable>'.$seperator;
78
	} else {
79
		$n = '<input class="field_checkbox" type="checkbox" id="'.$label_id.'" name="field'.$field_id.'['.$idx.']" value="'.$n.'" />'.'<label for="'.$label_id.'" class="checkbox_label">'.$n.'</label>'.$seperator;
80
	}
81 560 Ruebenwurz
}
82
}
83
// Function for generating a radio button
84 570 doc
if (!function_exists('make_radio')) {
85 560 Ruebenwurz
function make_radio(&$n, $idx, $params) {
86
	$field_id = $params[0];
87
	$group = $params[1];
88
	$seperator = $params[2];
89 760 Ruebenwurz
	$label_id = 'wb_'.str_replace(" ", "_", $n);
90
	if($n == $params[3]) {
91
		$n = '<input class="field_radio" type="radio" id="'.$label_id.'" name="field'.$field_id.'" value="'.$n.'" checked="checked" />'.'<label for="'.$label_id.'" class="radio_label">'.$n.'</label>'.$seperator;
92
	} else {
93
		$n = '<input class="field_radio" type="radio" id="'.$label_id.'" name="field'.$field_id.'" value="'.$n.'" />'.'<label for="'.$label_id.'" class="radio_label">'.$n.'</label>'.$seperator;
94
	}
95 560 Ruebenwurz
}
96
}
97 864 aldus
98
if (!function_exists("new_submission_id") ) {
99
	function new_submission_id() {
100
		$submission_id = '';
101
		$salt = "abchefghjkmnpqrstuvwxyz0123456789";
102
		srand((double)microtime()*1000000);
103
		$i = 0;
104
		while ($i <= 7) {
105
			$num = rand() % 33;
106
			$tmp = substr($salt, $num, 1);
107
			$submission_id = $submission_id . $tmp;
108
			$i++;
109
		}
110
		return $submission_id;
111 560 Ruebenwurz
	}
112
}
113
// Work-out if the form has been submitted or not
114
if($_POST == array()) {
115
116
// Set new submission ID in session
117
$_SESSION['form_submission_id'] = new_submission_id();
118
119
// Get settings
120
$query_settings = $database->query("SELECT header,field_loop,footer,use_captcha FROM ".TABLE_PREFIX."mod_form_settings WHERE section_id = '$section_id'");
121
if($query_settings->numRows() > 0) {
122
	$fetch_settings = $query_settings->fetchRow();
123
	$header = str_replace('{WB_URL}',WB_URL,$fetch_settings['header']);
124
	$field_loop = $fetch_settings['field_loop'];
125
	$footer = str_replace('{WB_URL}',WB_URL,$fetch_settings['footer']);
126
	$use_captcha = $fetch_settings['use_captcha'];
127
} else {
128
	$header = '';
129
	$field_loop = '';
130
	$footer = '';
131
}
132
133
?>
134 760 Ruebenwurz
<form name="form" action="<?php echo htmlspecialchars(strip_tags($_SERVER['PHP_SELF'])); ?>" method="post">
135 560 Ruebenwurz
<input type="hidden" name="submission_id" value="<?php echo $_SESSION['form_submission_id']; ?>" />
136
<?php
137 596 thorn
if(ENABLED_ASP) { // first add some honeypot-fields
138
?>
139
<input type="hidden" name="submitted_when" value="<?php $t=time(); echo $t; $_SESSION['submitted_when']=$t; ?>" />
140 739 thorn
<p class="nixhier">
141 596 thorn
email address:
142 762 thorn
<label for="email">Leave this field email-address blank:</label>
143 596 thorn
<input id="email" name="email" size="56" value="" /><br />
144
Homepage:
145 762 thorn
<label for="homepage">Leave this field homepage blank:</label>
146 596 thorn
<input id="homepage" name="homepage" size="55" value="" /><br />
147
URL:
148 762 thorn
<label for="url">Leave this field url blank:</label>
149 596 thorn
<input id="url" name="url" size="61" value="" /><br />
150
Comment:
151 762 thorn
<label for="comment">Leave this field comment blank:</label>
152 760 Ruebenwurz
<textarea id="comment" name="comment" cols="50" rows="10"></textarea><br />
153 596 thorn
</p>
154 760 Ruebenwurz
155 596 thorn
<?php }
156
157 760 Ruebenwurz
// Print header
158
echo $header;
159
160 560 Ruebenwurz
// Get list of fields
161
$query_fields = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_form_fields WHERE section_id = '$section_id' ORDER BY position ASC");
162 760 Ruebenwurz
163 560 Ruebenwurz
if($query_fields->numRows() > 0) {
164
	while($field = $query_fields->fetchRow()) {
165
		// Set field values
166
		$field_id = $field['field_id'];
167
		$value = $field['value'];
168
		// Print field_loop after replacing vars with values
169
		$vars = array('{TITLE}', '{REQUIRED}');
170 760 Ruebenwurz
		if (($field['type'] == "radio") || ($field['type'] == "checkbox")) {
171
			$field_title = $field['title'];
172 560 Ruebenwurz
		} else {
173 760 Ruebenwurz
			$field_title = '<label for="field'.$field_id.'">'.$field['title'].'</label>';
174
		}
175
		$values = array($field_title);
176
		if ($field['required'] == 1) {
177
			$values[] = '<span class="required">*</span>';
178
		} else {
179 560 Ruebenwurz
			$values[] = '';
180
		}
181
		if($field['type'] == 'textfield') {
182
			$vars[] = '{FIELD}';
183 618 thorn
			$values[] = '<input type="text" name="field'.$field_id.'" id="field'.$field_id.'" maxlength="'.$field['extra'].'" value="'.(isset($_SESSION['field'.$field_id])?$_SESSION['field'.$field_id]:$value).'" class="textfield" />';
184 560 Ruebenwurz
		} elseif($field['type'] == 'textarea') {
185
			$vars[] = '{FIELD}';
186 760 Ruebenwurz
			$values[] = '<textarea name="field'.$field_id.'" id="field'.$field_id.'" class="textarea" cols="25" rows="5">'.(isset($_SESSION['field'.$field_id])?$_SESSION['field'.$field_id]:$value).'</textarea>';
187 560 Ruebenwurz
		} elseif($field['type'] == 'select') {
188
			$vars[] = '{FIELD}';
189
			$options = explode(',', $value);
190 618 thorn
			array_walk($options, 'make_option', (isset($_SESSION['field'.$field_id])?$_SESSION['field'.$field_id]:array()));
191 760 Ruebenwurz
			$field['extra'] = explode(',',$field['extra']);
192 839 Ruebenwurz
			$values[] = '<select name="field'.$field_id.'" id="field'.$field_id.'" size="'.$field['extra'][0].'" '.$field['extra'][1].' class="select">'.implode($options).'</select>';
193 560 Ruebenwurz
		} elseif($field['type'] == 'heading') {
194
			$vars[] = '{FIELD}';
195
			$values[] = '<input type="hidden" name="field'.$field_id.'" id="field'.$field_id.'" value="===['.$field['title'].']===" />';
196
			$tmp_field_loop = $field_loop;		// temporarily modify the field loop template
197
			$field_loop = $field['extra'];
198
		} elseif($field['type'] == 'checkbox') {
199
			$vars[] = '{FIELD}';
200
			$options = explode(',', $value);
201 618 thorn
			array_walk($options, 'make_checkbox', array(array($field_id,$field['extra']),(isset($_SESSION['field'.$field_id])?$_SESSION['field'.$field_id]:array())));
202 560 Ruebenwurz
			$options[count($options)-1]=substr($options[count($options)-1],0,strlen($options[count($options)-1])-strlen($field['extra']));
203
			$values[] = implode($options);
204
		} elseif($field['type'] == 'radio') {
205
			$vars[] = '{FIELD}';
206
			$options = explode(',', $value);
207 618 thorn
			array_walk($options, 'make_radio', array($field_id,$field['title'],$field['extra'], (isset($_SESSION['field'.$field_id])?$_SESSION['field'.$field_id]:'')));
208 560 Ruebenwurz
			$options[count($options)-1]=substr($options[count($options)-1],0,strlen($options[count($options)-1])-strlen($field['extra']));
209
			$values[] = implode($options);
210
		} elseif($field['type'] == 'email') {
211
			$vars[] = '{FIELD}';
212 760 Ruebenwurz
			$values[] = '<input type="text" name="field'.$field_id.'" id="field'.$field_id.'" value="'.(isset($_SESSION['field'.$field_id])?$_SESSION['field'.$field_id]:'').'" maxlength="'.$field['extra'].'" class="email" />';
213 560 Ruebenwurz
		}
214 618 thorn
		if(isset($_SESSION['field'.$field_id])) unset($_SESSION['field'.$field_id]);
215 560 Ruebenwurz
		if($field['type'] != '') {
216
			echo str_replace($vars, $values, $field_loop);
217
		}
218
		if (isset($tmp_field_loop)) $field_loop = $tmp_field_loop;
219
	}
220
}
221
222
// Captcha
223 596 thorn
if($use_captcha) { ?>
224
	<tr>
225
	<td class="field_title"><?php echo $TEXT['VERIFICATION']; ?>:</td>
226
	<td><?php call_captcha(); ?></td>
227
	</tr>
228 560 Ruebenwurz
	<?php
229
}
230
231
// Print footer
232
echo $footer;
233
234 789 doc
/**
235
	NOTE: comment out the line ob_end_flush() if you indicate problems (e.g. when using ob_start in the index.php of your template)
236
	With ob_end_flush(): output filter will be disabled for this page (and all sections embedded on this page)
237
	Without ob_end_flush(): emails are rewritten (e.g. name@domain.com --> name(at)domain(dot)com) if output filter is enabled
238
	All replacements made by the Output-Filter module will be reverted before the email is send out
239
*/
240
if($filter_settings['email_filter'] && !($filter_settings['at_replacement']=='@' && $filter_settings['dot_replacement']=='.')) {
241
	ob_end_flush();
242
}
243
244 560 Ruebenwurz
// Add form end code
245
?>
246
</form>
247
<?php
248
249
} else {
250
251
	// Check that submission ID matches
252
	if(isset($_SESSION['form_submission_id']) AND isset($_POST['submission_id']) AND $_SESSION['form_submission_id'] == $_POST['submission_id']) {
253
254
		// Set new submission ID in session
255
		$_SESSION['form_submission_id'] = new_submission_id();
256
257 596 thorn
		if(ENABLED_ASP && ( // form faked? Check the honeypot-fields.
258
			(!isset($_POST['submitted_when']) OR !isset($_SESSION['submitted_when'])) OR
259
			($_POST['submitted_when'] != $_SESSION['submitted_when']) OR
260
			(!isset($_POST['email']) OR $_POST['email']) OR
261
			(!isset($_POST['homepage']) OR $_POST['homepage']) OR
262
			(!isset($_POST['comment']) OR $_POST['comment']) OR
263
			(!isset($_POST['url']) OR $_POST['url'])
264
		)) {
265
			exit(header("Location: ".WB_URL.PAGES_DIRECTORY.""));
266
		}
267
268 560 Ruebenwurz
		// Submit form data
269
		// First start message settings
270
		$query_settings = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_form_settings WHERE section_id = '$section_id'");
271
		if($query_settings->numRows() > 0) {
272
			$fetch_settings = $query_settings->fetchRow();
273
			$email_to = $fetch_settings['email_to'];
274
			$email_from = $fetch_settings['email_from'];
275
			if(substr($email_from, 0, 5) == 'field') {
276
				// Set the email from field to what the user entered in the specified field
277 656 thorn
				$email_from = htmlspecialchars($wb->add_slashes($_POST[$email_from]));
278 560 Ruebenwurz
			}
279 638 thorn
			$email_fromname = $fetch_settings['email_fromname'];
280 560 Ruebenwurz
			$email_subject = $fetch_settings['email_subject'];
281
			$success_page = $fetch_settings['success_page'];
282
			$success_email_to = $fetch_settings['success_email_to'];
283
			if(substr($success_email_to, 0, 5) == 'field') {
284
				// Set the success_email to field to what the user entered in the specified field
285 656 thorn
				$success_email_to = htmlspecialchars($wb->add_slashes($_POST[$success_email_to]));
286 560 Ruebenwurz
			}
287
			$success_email_from = $fetch_settings['success_email_from'];
288 638 thorn
			$success_email_fromname = $fetch_settings['success_email_fromname'];
289 560 Ruebenwurz
			$success_email_text = $fetch_settings['success_email_text'];
290
			$success_email_subject = $fetch_settings['success_email_subject'];
291
			$max_submissions = $fetch_settings['max_submissions'];
292
			$stored_submissions = $fetch_settings['stored_submissions'];
293
			$use_captcha = $fetch_settings['use_captcha'];
294
		} else {
295
			exit($TEXT['UNDER_CONSTRUCTION']);
296
		}
297
		$email_body = '';
298
299
		// Create blank "required" array
300
		$required = array();
301
302 618 thorn
		// Captcha
303
		if($use_captcha) {
304
			if(isset($_POST['captcha']) AND $_POST['captcha'] != ''){
305
				// Check for a mismatch
306
				if(!isset($_POST['captcha']) OR !isset($_SESSION['captcha']) OR $_POST['captcha'] != $_SESSION['captcha']) {
307
					$captcha_error = $MESSAGE['MOD_FORM']['INCORRECT_CAPTCHA'];
308
				}
309
			} else {
310
				$captcha_error = $MESSAGE['MOD_FORM']['INCORRECT_CAPTCHA'];
311
			}
312
		}
313
		if(isset($_SESSION['captcha'])) { unset($_SESSION['captcha']); }
314
315 560 Ruebenwurz
		// Loop through fields and add to message body
316
		// Get list of fields
317
		$query_fields = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_form_fields WHERE section_id = '$section_id' ORDER BY position ASC");
318
		if($query_fields->numRows() > 0) {
319
			while($field = $query_fields->fetchRow()) {
320
				// Add to message body
321
				if($field['type'] != '') {
322
					if(!empty($_POST['field'.$field['field_id']])) {
323 760 Ruebenwurz
						if (is_array($_POST['field'.$field['field_id']])) {
324
							$_SESSION['field'.$field['field_id']] = $_POST['field'.$field['field_id']];
325
						} else {
326
							$_SESSION['field'.$field['field_id']] = htmlspecialchars($_POST['field'.$field['field_id']]);
327
						}
328 789 doc
						// if the output filter is active, we need to revert (dot) to . and (at) to @ (using current filter settings)
329
						// otherwise the entered mail will not be accepted and the recipient would see (dot), (at) etc.
330
						if ($filter_settings['email_filter']) {
331
							$field_value = $_POST['field'.$field['field_id']];
332
							$field_value = str_replace($filter_settings['at_replacement'], '@', $field_value);
333
							$field_value = str_replace($filter_settings['dot_replacement'], '.', $field_value);
334
							$_POST['field'.$field['field_id']] = $field_value;
335
						}
336 560 Ruebenwurz
						if($field['type'] == 'email' AND $admin->validate_email($_POST['field'.$field['field_id']]) == false) {
337
							$email_error = $MESSAGE['USERS']['INVALID_EMAIL'];
338
						}
339
						if($field['type'] == 'heading') {
340
							$email_body .= $_POST['field'.$field['field_id']]."\n\n";
341
						} elseif (!is_array($_POST['field'.$field['field_id']])) {
342
							$email_body .= $field['title'].': '.$_POST['field'.$field['field_id']]."\n\n";
343
						} else {
344
							$email_body .= $field['title'].": \n";
345
							foreach ($_POST['field'.$field['field_id']] as $k=>$v) {
346
								$email_body .= $v."\n";
347
							}
348
							$email_body .= "\n";
349
						}
350
					} elseif($field['required'] == 1) {
351
						$required[] = $field['title'];
352
					}
353
				}
354
			}
355
		}
356 760 Ruebenwurz
357 560 Ruebenwurz
		// Check if the user forgot to enter values into all the required fields
358
		if($required != array()) {
359
			if(!isset($MESSAGE['MOD_FORM']['REQUIRED_FIELDS'])) {
360
				echo 'You must enter details for the following fields';
361
			} else {
362
				echo $MESSAGE['MOD_FORM']['REQUIRED_FIELDS'];
363
			}
364
			echo ':<br /><ul>';
365
			foreach($required AS $field_title) {
366
				echo '<li>'.$field_title;
367
			}
368 760 Ruebenwurz
			if(isset($email_error)) {
369
				echo '<li>'.$email_error.'</li>';
370
			}
371
			if(isset($captcha_error)) {
372
				echo '<li>'.$captcha_error.'</li>';
373
			}
374
			echo '</ul><a href="'.htmlspecialchars(strip_tags($_SERVER['PHP_SELF'])).'">'.$TEXT['BACK'].'</a>';
375 560 Ruebenwurz
		} else {
376
			if(isset($email_error)) {
377
				echo '<br /><ul>';
378
				echo '<li>'.$email_error.'</li>';
379 760 Ruebenwurz
				echo '</ul><a href="'.htmlspecialchars(strip_tags($_SERVER['PHP_SELF'])).'">'.$TEXT['BACK'].'</a>';
380 560 Ruebenwurz
			} elseif(isset($captcha_error)) {
381
				echo '<br /><ul>';
382
				echo '<li>'.$captcha_error.'</li>';
383 760 Ruebenwurz
				echo '</ul><a href="'.htmlspecialchars(strip_tags($_SERVER['PHP_SELF'])).'">'.$TEXT['BACK'].'</a>';
384 560 Ruebenwurz
			} else {
385
				// Check how many times form has been submitted in last hour
386
				$last_hour = time()-3600;
387
				$query_submissions = $database->query("SELECT submission_id FROM ".TABLE_PREFIX."mod_form_submissions WHERE submitted_when >= '$last_hour'");
388
				if($query_submissions->numRows() > $max_submissions) {
389
					// Too many submissions so far this hour
390
					echo $MESSAGE['MOD_FORM']['EXCESS_SUBMISSIONS'];
391
					$success = false;
392
				} else {
393
					// Now send the email
394
					if($email_to != '') {
395
						if($email_from != '') {
396 638 thorn
							if($wb->mail($email_from,$email_to,$email_subject,$email_body,$email_fromname)) {
397 560 Ruebenwurz
								$success = true;
398
							}
399
						} else {
400 638 thorn
							if($wb->mail('',$email_to,$email_subject,$email_body,$email_fromname)) {
401 560 Ruebenwurz
								$success = true;
402
							}
403
						}
404
					}
405
					if($success_email_to != '') {
406
						if($success_email_from != '') {
407 638 thorn
							if($wb->mail($success_email_from,$success_email_to,$success_email_subject,$success_email_text,$success_email_fromname)) {
408 560 Ruebenwurz
								$success = true;
409
							}
410
						} else {
411 638 thorn
							if($wb->mail('',$success_email_to,$success_email_subject,$success_email_text,$success_email_fromname)) {
412 560 Ruebenwurz
								$success = true;
413
							}
414
						}
415
					}
416
417
					// Write submission to database
418 596 thorn
					if(isset($admin) AND $admin->is_authenticated() AND $admin->get_user_id() > 0) {
419
						$submitted_by = $admin->get_user_id();
420 560 Ruebenwurz
					} else {
421
						$submitted_by = 0;
422
					}
423
					$email_body = $wb->add_slashes($email_body);
424
					$database->query("INSERT INTO ".TABLE_PREFIX."mod_form_submissions (page_id,section_id,submitted_when,submitted_by,body) VALUES ('".PAGE_ID."','$section_id','".mktime()."','$submitted_by','$email_body')");
425
					// Make sure submissions table isn't too full
426
					$query_submissions = $database->query("SELECT submission_id FROM ".TABLE_PREFIX."mod_form_submissions ORDER BY submitted_when");
427
					$num_submissions = $query_submissions->numRows();
428
					if($num_submissions > $stored_submissions) {
429
						// Remove excess submission
430
						$num_to_remove = $num_submissions-$stored_submissions;
431
						while($submission = $query_submissions->fetchRow()) {
432
							if($num_to_remove > 0) {
433
								$submission_id = $submission['submission_id'];
434
								$database->query("DELETE FROM ".TABLE_PREFIX."mod_form_submissions WHERE submission_id = '$submission_id'");
435
								$num_to_remove = $num_to_remove-1;
436
							}
437
						}
438
					}
439
					if(!$database->is_error()) {
440
						$success = true;
441
					}
442
				}
443
			}
444
		}
445
	}
446
447
	// Now check if the email was sent successfully
448
	if(isset($success) AND $success == true) {
449 760 Ruebenwurz
	   if ($success_page=='none') {
450 560 Ruebenwurz
			echo str_replace("\n","<br />",$success_email_text);
451
  		} else {
452
			$query_menu = $database->query("SELECT link,target FROM ".TABLE_PREFIX."pages WHERE `page_id` = '$success_page'");
453
			if($query_menu->numRows() > 0) {
454 760 Ruebenwurz
  	        	$fetch_settings = $query_menu->fetchRow();
455
			   $link = WB_URL.PAGES_DIRECTORY.$fetch_settings['link'].PAGE_EXTENSION;
456
			   echo "<script type='text/javascript'>location.href='".$link."';</script>";
457 560 Ruebenwurz
			}
458
		}
459 760 Ruebenwurz
		// clearing session on success
460
		$query_fields = $database->query("SELECT field_id FROM ".TABLE_PREFIX."mod_form_fields WHERE section_id = '$section_id' AND required = 1");
461
		while($field = $query_fields->fetchRow()) {
462
			$field_id = $field[0];
463
			if(isset($_SESSION['field'.$field_id])) unset($_SESSION['field'.$field_id]);
464
		}
465 560 Ruebenwurz
	} else {
466 760 Ruebenwurz
		if(isset($success) AND $success == false) {
467
			echo $TEXT['ERROR'];
468
		}
469
	}
470 560 Ruebenwurz
}
471
472 760 Ruebenwurz
?>