1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
<?php require_once('webadmin/basic_info.php'); error_reporting(E_ALL); ini_set('display_errors', 1);
$id = (int)$_SESSION["id"]; //check_user_has_fill_form($id); $campaign = get_campaign($id, 1);
if (!isset($_SESSION["id"]) || (int)$_SESSION["id"] <= 0 || empty($campaign)) { missing_campaign_id(); }
?> <!DOCTYPE html> <html> <head> <?php require_once('html_head.php'); ?> </head> <body>
<div class="container" style="border: none;"></div>
<?php require_once('html_footer.php'); ?> </body> </html> <?php check_campaign_date($campaign);
$sql = "select * from answer where campaign_id = ? and session_id = ? and temp = ?"; $parameters = array($id, session_id(), 1); $result = bind_pdo($sql, $parameters, "selectone");
if(!empty($result)){ echo "<script type='text/javascript'>alert('You have fill the survey before. Please complete your personal information.\\n你已填妥問卷,請填寫你的個人資料以完成問卷。'); location.href='user_info.php?id=".$id."'</script>"; exit; } //loop question $message = ""; $questions = get_question($id); foreach ($questions as $question) { //form checking //var_dump($_POST[$question["name"]]);
if (!isset($_POST[$question["name"]]) && $question["required"] == 1) { /* if($question["type"] == "date"){ var_dump($_POST[$question["name"]]); if(!empty($_POST[$question["name"]])){ $date_data = new DateTime($_POST[$question["name"]]); $_POST[$question["name"]] = $date_data->format("d/m/Y");
var_dump($_POST[$question["name"]]); if(!validateDate($_POST[$question["name"]], "d/m/Y")){ $question["label"] = str_replace("||", " / ", $question["label"]); $message .= $question["label"] . " format is not correct.\\n" . $question["label"] . "格式不正確。\\n\\n"; } }else{ $question["label"] = str_replace("||", " / ", $question["label"]); $message .= $question["label"] . " format is not correct.\\n" . $question["label"] . "格式不正確。\\n\\n"; } }else{*/ $question["label"] = addslashes(str_replace("||", " / ", $question["label"]));
$message .= "Please enter 請輸入 [" . $question["label"] . "].\\n\\n"; //} } }
if(isset($_POST["show_other_error"]) && $_POST["show_other_error"] == 1){ $message .= "Please enter Other 請輸入其他。\\n\\n"; }
//var_dump($message);
if (!empty($message)) { echo "<script type='text/javascript'>alert('" . $message . "'); history.back(); </script>"; exit; } //exit;
//record user info $ip = $_SERVER['REMOTE_ADDR']; $browser = $_SERVER['HTTP_USER_AGENT']; $referrer = $_SERVER['HTTP_REFERER'];
$user_browser_info = array("ip" => $ip, "browser" => $browser, "referrer" => $referrer);
//valid form foreach ($questions as $question) {
/*if($question["type"] == "date"){ if(!empty($_POST[$question["name"]])){ var_dump($_POST[$question["name"]]); $date_data = new DateTime($_POST[$question["name"]]); $_POST[$question["name"]] = $date_data->format("d/m/Y"); var_dump($_POST[$question["name"]]); } }*/
//inset form data if ($question["type"] == "text" || $question["type"] == "radio-group" || $question["type"] == "date") { $sql = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)"; $parameters = array(session_id(), $id, $question["name"], $question["type"], $_POST[$question["name"]], json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']); bind_pdo($sql, $parameters); } else if ($question["type"] == "checkbox-group") { foreach ($_POST[$question["name"]] as $answer) { $sql = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)"; $parameters = array(session_id(), $id, $question["name"], $question["type"], $answer, json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']); bind_pdo($sql, $parameters); } } }
header("Location: user_info.php?id=".$id);
|