confirm.php

php+mysql做的调查问卷管理系统php+mysql做的调查问卷管理系统

<?
################################################################################
# phpQuestionnaire                           Version 2.2                       #
# Copyright 2003-2005 chumpsoft, inc.        March 28, 2005                    #
################################################################################
#              SCRiPTMAFiA 2005 - THE DiRTY HANDS ON YOUR SCRiPTS              #
################################################################################

#-->> Include Files

require("inc/init.php");
require("inc/mysql.php");
require("inc/functions.php");
require("inc/pfunctions.php");
require("inc/qfunctions.php");
require("inc/vfunctions.php");

#-->> Setting Variables

$varnames = array("sid", "uid", "upasswd", "csubmit");
SetVars($varnames);

#-->> Check UID and SID

$relocateURL = "error.php";

if (!$uid || !$sid) {
	header("Location: $relocateURL");
	exit();
}

$mqsurvey = mysql_query("select * from phpQSurvey where SID = \"".ProtectMySQL($sid)."\"");
if (!($masurvey = mysql_fetch_array($mqsurvey))) {
	header("Location: $relocateURL");
	exit();
}

if (strlen(ini_get("sendmail_path")) == 0 && strlen(ini_get("SMTP")) == 0) {
	header("Location: $relocateURL?errormsg=NoMailSupport");
	exit();
}

#-->> Set Language...

SetLanguage($masurvey['Language']);

#-->> Create Form

$errorstyle = ($masurvey["ErrorStyle"]) ? $masurvey["ErrorStyle"] : "color: red;";
if ($upasswd) {
	$upasswd = ProtectMySQL($upasswd);

	$mquser = mysql_query("select * from phpQUser where UID = \"".ProtectMySQL($uid)."\" and SID = \"".ProtectMySQL($sid)."\" and Confirm = \"$upasswd\"");
	if (!($mauser = mysql_fetch_array($mquser))) {
		$errormsg = sprintf($phpQlang["ConfirmIncorrect"], ProtectHTML($upasswd));
	}
	else {
		mysql_query("update phpQUser set EmailConfirm = \"y\" where UID = \"".ProtectMySQL($uid)."\" and SID = \"".ProtectMySQL($sid)."\"");
			
		if ($masurvey["OnComplete"] == 1 && $masurvey["SurveyResults"]) {
			header("Location: stats.php?sid=$sid");
			exit();
		}
		elseif ($masurvey["OnComplete"] == 2 && $masurvey["RedirectURL"]) {
			header("Location: ".ProtectHTML($masurvey["RedirectURL"]));
			exit();
		}
		elseif ($masurvey["OnComplete"] == '3') {
			$contents = $phpQlang["YourResponse"].'<BR><BR>';
			$contents .= RecreateSurvey($sid, $uid, $masurvey["Width"], $masurvey, 1);
		}
		elseif ($masurvey["Completed"]) { $contents = $masurvey["Completed"]; }
		else { $contents = PrintMessage($phpQlang["SurveyCompleted"]); }
	}
}

if (!$upasswd || $errormsg) {
	$buttonsubmit = GetButton($masurvey, 'submit');
	$contents = "<TABLE BORDER=0 CELLPADDING=0 CELLSPACING=0 WIDTH=".$masurvey["Width"]."><TR><TD ALIGN=center><TABLE CELLSPACING=0 CELLPADDING=2 BORDER=0>\n";
	if (!$errormsg && $csubmit) {
		$errormsg = $phpQlang["ConfirmEmpty"];
	}
	$contents .= "<TR><TD>".$phpQlang["ConfirmRequest"]."</TD></TR>\n";
	$contents .= "</TABLE>\n";
	$contents .= "<TABLE CELLPADDING=2 CELLSPACING=0 BORDER=0>\n";
	if ($errormsg) {
	 $contents .= "<TR><TD COLSPAN=3 STYLE=\"$errorstyle\">$errormsg</TD></TR>\n";
	}
	$contents .= "<FORM ACTION=confirm.php METHOD=POST>\n";
	$contents .= "<INPUT TYPE=hidden NAME=sid VALUE=$sid>\n";
	$contents .= "<INPUT TYPE=hidden NAME=uid VALUE=$uid>\n";
	$contents .= "<INPUT TYPE=hidden NAME=csubmit VALUE=1>\n";
	$contents .= "<TR>\n";
	$contents .= "<TD>".$phpQlang["ConfirmPrompt"]."</TD>\n";
	$contents .= "<TD><INPUT TYPE=text NAME=upasswd VALUE=\"".ProtectHTML($upasswd)."\"></TD>\n";
	$contents .= "<TD>$buttonsubmit</TD>\n";
	$contents .= "</TR>\n";
	$contents .= "</FORM>\n";
	$contents .= "</TABLE></TD></TR></TABLE>\n";
}

#-->> Output Page

CreatePage($sid, sprintf($phpQlang["ConfirmTitle"], $masurvey["Name"]), $contents, false, "");

?>