1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
<?php require_once('webadmin/basic_info.php');
if (!isset($_SESSION["id"]) || (int)$_SESSION["id"] <= 0) { echo "<script type='text/javascript'>alert('Cannot find survey information.'); location.href=document.referrer; </script>"; exit; }
$id = (int)$_SESSION["id"]; check_user_has_fill_form($id); $campaign = get_campaign($id); check_campaign_date($campaign);
//loop question $message = ""; $questions = get_question($id); foreach ($questions as $question) { //form checking if (empty($_POST[$question["name"]])) { $question["label"] = str_replace("||", " / ", $question["label"]); $message .= "Please enter " . $question["label"] . ".\\n\\n"; } }
if (!empty($message)) { echo "<script type='text/javascript'>alert('" . $message . "'); location.href=history.back(); </script>"; exit; }
//record user info $ip = $_SERVER['REMOTE_ADDR']; $browser = $_SERVER['HTTP_USER_AGENT']; $referrer = $_SERVER['HTTP_REFERER'];
$user_browser_info = array("ip" => $ip, "browser" => $browser, "referrer" => $referrer);
//valid form foreach ($questions as $question) {
//inset form data if ($question["type"] == "text" || $question["type"] == "radio-group") { $sql = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)"; $parameters = array(session_id(), $id, $question["name"], $question["type"], $_POST[$question["name"]], json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']); bind_pdo($sql, $parameters); } else if ($question["type"] == "checkbox-group") { foreach ($_POST[$question["name"]] as $answer) { $sql = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)"; $parameters = array(session_id(), $id, $question["name"], $question["type"], $answer, json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']); bind_pdo($sql, $parameters); } }else{ $sql = "insert into answer (session_id, campaign_id, question_name, question_type, answer_value, user_browser_info, campaign_info, createdate, createby) values (?,?,?,?,?,?,?,?,?)"; $parameters = array(session_id(), $id, $question["name"], $question["type"], $_POST[$question["name"]], json_encode($user_browser_info), json_encode($campaign), $nowdate, $_SESSION['cmsloginid']); bind_pdo($sql, $parameters); } }
header("Location: user_info.php");
|