HEX
Server: Apache
System: Linux WWW 6.1.0-40-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.153-1 (2025-09-20) x86_64
User: web11 (1011)
PHP: 8.2.29
Disabled: NONE
Upload Files
File: /var/www/apklausos/application/controllers/admin/ExpressionValidate.php
<?php

/*
* Offer some way to validate Expression in survey
*
* @copyright 2014 The LimeSurvey Project Team
* @license http://www.gnu.org/licenses/gpl-3.0.txt
* @todo : Add any expression
* @version : 1.1
*/
class ExpressionValidate extends SurveyCommonAction
{
    /**
     * @var string : Default layout is popup : less header, no footer
     */
    public $layout = 'popup';

    /**
     * @var integer : The survey ID to start to fill know vars
     */
    private $iSurveyId;
    /**
     * @var string : The language for the survey
     */
    private $sLang;

    public function index()
    {
        throw new CHttpException(400);
    }

    /**
     * Check the Expression in quota
     * @param integer $iSurveyId : the survey ID : can be sid/surveyid url GET parameters
     * @param integer $quota : the quota id
     * @param string $lang : the survey language, optional : if not set get all language of survey
     *
     * @author Denis Chenu
     * @version 1.0
     */
    public function quota($iSurveyId, $quota, $lang = null)
    {
        $oSurvey = Survey::model()->findByPk($iSurveyId);
        if (!Permission::model()->hasSurveyPermission($iSurveyId, 'quotas', 'read')) {
            throw new CHttpException(401, "401 Unauthorized");
        }
        $iQuotaId = $quota;
        if (is_string($lang)) {
            $oValidator = new LSYii_Validators();
            $aLangs = array($oValidator->languageFilter($lang));
        } else {
            $aLangs = $oSurvey->allLanguages;
        }
        $aExpressions = array();
        $this->iSurveyId = $iSurveyId;
        foreach ($aLangs as $sLang) {
            $oQuotaLanguageSetting = QuotaLanguageSetting::model()->find("quotals_quota_id =:quota_id and quotals_language=:language", array(':quota_id' => $iQuotaId, ':language' => $sLang));
            // We don't need to go to step since new feature #8823, maybe need to be fixed ?
            if ($oQuotaLanguageSetting) {
                $this->sLang = $sLang;
                $aExpressions['name_' . $sLang] = array(
                    'title' => sprintf(gT("Quota name (%s)"), $sLang),
                    'expression' => $this->getHtmlExpression($oQuotaLanguageSetting->quotals_name, array(), __METHOD__),
                );
                $aExpressions['message_' . $sLang] = array(
                    'title' => sprintf(gT("Quota message (%s)"), $sLang),
                    'expression' => $this->getHtmlExpression($oQuotaLanguageSetting->quotals_message, array(), __METHOD__),
                );
                $aExpressions['url_' . $sLang] = array(
                    'title' => sprintf(gT("URL (%s)"), $sLang),
                    'expression' => $this->getHtmlExpression($oQuotaLanguageSetting->quotals_url, array(), __METHOD__),
                );
                $aExpressions['urldescrip_' . $sLang] = array(
                    'title' => sprintf(gT("URL description (%s)"), $sLang),
                    'expression' => $this->getHtmlExpression($oQuotaLanguageSetting->quotals_urldescrip, array(), __METHOD__),
                );
            }
        }
        $aData = array(
            'aExpressions' => $aExpressions,
        );
        $this->getController()->layout = $this->layout;
        $this->getController()->pageTitle = gT("Validate quota");

        $this->getController()->renderPartial("/admin/expressions/validationList", $aData);
    }
    /**
     * Check the Expression in email
     * @param integer $iSurveyId : the survey ID : can be sid/surveyid url GET parameters
     * @param string $lang : the mail language
     *
     * @author Denis Chenu
     * @version 1.1
     */
    public function email($iSurveyId, $lang)
    {
        if (!Permission::model()->hasSurveyPermission($iSurveyId, 'surveysettings', 'read')) {
                    throw new CHttpException(401, "401 Unauthorized");
        }
        $sType = Yii::app()->request->getQuery('type');
        $this->sLang = $sLang = $lang;
        $this->iSurveyId = $iSurveyId; // This start the survey before Expression : is this always needed ?

        $aTypeAttributes = array(
            'invitation' => array(
                'subject' => array(
                    'attribute' => 'surveyls_email_invite_subj',
                    'title' => gT('Invitation email subject'),
                ),
                'message' => array(
                    'attribute' => 'surveyls_email_invite',
                    'title' => gT('Invitation email body'),
                ),
            ),
            'reminder' => array(
                'subject' => array(
                    'attribute' => 'surveyls_email_remind_subj',
                    'title' => gT('Reminder email subject'),
                ),
                'message' => array(
                    'attribute' => 'surveyls_email_remind',
                    'title' => gT('Reminder email body'),
                ),
            ),
            'confirmation' => array(
                'subject' => array(
                    'attribute' => 'surveyls_email_confirm_subj',
                    'title' => gT('Confirmation email subject'),
                ),
                'message' => array(
                    'attribute' => 'surveyls_email_confirm',
                    'title' => gT('Confirmation email body'),
                ),
            ),
            'registration' => array(
                'subject' => array(
                    'attribute' => 'surveyls_email_register_subj',
                    'title' => gT('Registration email subject'),
                ),
                'message' => array(
                    'attribute' => 'surveyls_email_register',
                    'title' => gT('Registration email body'),
                ),
            ),
            'admin_notification' => array(
                'subject' => array(
                    'attribute' => 'email_admin_notification_subj',
                    'title' => gT('Basic admin notification subject'),
                ),
                'message' => array(
                    'attribute' => 'email_admin_notification',
                    'title' => gT('Basic admin notification body'),
                ),
            ),
            'admin_detailed_notification' => array(
                'subject' => array(
                    'attribute' => 'email_admin_responses_subj',
                    'title' => gT('Detailed admin notification subject'),
                ),
                'message' => array(
                    'attribute' => 'email_admin_responses',
                    'title' => gT('Detailed admin notification body'),
                ),
            ),
        );
        $aSurveyInfo = getSurveyInfo($iSurveyId, $sLang);
        // Replaced before email edit
        $aReplacement = array(
            'ADMINNAME' => $aSurveyInfo['admin'],
            'ADMINEMAIL' => $aSurveyInfo['adminemail'],
        );
        // Not needed : templatereplace do the job : but this can/must be fixed for invitaton/reminder/registration (#9424)
        $aReplacement["SURVEYNAME"] = gT("Survey title");
        $aReplacement["SURVEYDESCRIPTION"] = gT("Survey description");
        // Replaced when sending email with Survey
        $aAttributes = getTokenFieldsAndNames($iSurveyId, true);
        $aReplacement["TOKEN"] = gT("Participant - Access code");
        $aReplacement["TOKEN:EMAIL"] = gT("Participant - Email address");
        $aReplacement["TOKEN:FIRSTNAME"] = gT("Participant - First name");
        $aReplacement["TOKEN:LASTNAME"] = gT("Participant - Last name");
        $aReplacement["TOKEN:TOKEN"] = gT("Participant - Access code");
        $aReplacement["TOKEN:LANGUAGE"] = gT("Participant - Language");
        foreach ($aAttributes as $sAttribute => $aAttribute) {
            $aReplacement['TOKEN:' . strtoupper((string) $sAttribute) . ''] = sprintf(gT("Participant attribute: %s"), $aAttribute['description']);
        }

        switch ($sType) {
            case 'invitation':
            case 'reminder':
            case 'registration':
                // Replaced when sending email (registration too ?)
                $aReplacement["EMAIL"] = gT("Participant - Email address");
                $aReplacement["FIRSTNAME"] = gT("Participant - First name");
                $aReplacement["LASTNAME"] = gT("Participant - Last name");
                $aReplacement["LANGUAGE"] = gT("Participant - Language");
                $aReplacement["OPTOUTURL"] = gT("URL for a respondent to opt-out of this survey");
                $aReplacement["GLOBALOPTOUTURL"] = gT("URL for a respondent to opt-out of central participant list for this site");
                $aReplacement["OPTINURL"] = gT("URL for a respondent to opt-in to this survey");
                $aReplacement["GLOBALOPTINURL"] = gT("URL for a respondent to opt-in to the central participant list for this site");
                $aReplacement["SURVEYURL"] = gT("Survey URL");
                $aReplacement['SURVEYIDURL'] = gT("Survey URL based on survey ID");
                foreach ($aAttributes as $sAttribute => $aAttribute) {
                    $aReplacement['' . strtoupper((string) $sAttribute) . ''] = sprintf(gT("Participant - Attribute: %s"), $aAttribute['description']);
                }
                break;
            case 'confirmation':
                $aReplacement["EMAIL"] = gT("Participant - Email address");
                $aReplacement["FIRSTNAME"] = gT("Participant - Last name");
                $aReplacement["LASTNAME"] = gT("Participant - First name");
                $aReplacement["SURVEYURL"] = gT("Survey URL");
                $aReplacement['SURVEYIDURL'] = gT("Survey URL without alias");
                foreach ($aAttributes as $sAttribute => $aAttribute) {
                    $aReplacement['' . strtoupper((string) $sAttribute) . ''] = sprintf(gT("Participant - Attribute: %s"), $aAttribute['description']);
                }
                // $moveResult = LimeExpressionManager::NavigateForwards(); // Seems OK without, nut need $LEM::StartSurvey
                break;
            case 'admin_notification':
            case 'admin_detailed_notification':
                $aReplacement["RELOADURL"] = gT("Reload URL");
                $aReplacement["VIEWRESPONSEURL"] = gT("View response URL");
                $aReplacement["EDITRESPONSEURL"] = gT("Edit response URL");
                $aReplacement["STATISTICSURL"] = gT("Statistics URL");
                $aReplacement["ANSWERTABLE"] = gT("Answers in this response");
                // $moveResult = LimeExpressionManager::NavigateForwards(); // Seems OK without, nut need $LEM::StartSurvey
                break;
            default:
                throw new CHttpException(400, gT('Invalid type.'));
                break;
        }

        $aData = array();
        //$oSurveyLanguage=SurveyLanguageSetting::model()->find("surveyls_survey_id=:sid and surveyls_language=:language",array(":sid"=>$iSurveyId,":language"=>$sLang));
        $aExpressions = array();
        foreach ($aTypeAttributes[$sType] as $key => $aAttribute) {
            $sAttribute = $aAttribute['attribute'];
            // Email send do : templatereplace + ReplaceField to the Templatereplace done : we need 2 in one
            // $LEM::ProcessString($oSurveyLanguage->$sAttribute,null,$aReplacement,1,1,false,false,true); // This way : ProcessString don't replace coreReplacements
            $aExpressions[$key] = array(
                'title' => $aAttribute['title'],
                'expression' => $this->getHtmlExpression($aSurveyInfo[$sAttribute], $aReplacement, __METHOD__),
            );
        }
        $aData['aExpressions'] = $aExpressions;
        $this->getController()->layout = $this->layout;
        $this->getController()->pageTitle = sprintf(gT("Validate expressions in email: %s"), $sType);

        $this->getController()->renderPartial("/admin/expressions/validationList", $aData);
    }

    /**
     * Get the complete HTML from a string
     * @param string $sExpression : the string to parse
     * @param array $aReplacement : optional array of replacemement
     * @param string $sDebugSource : optional debug source (for templatereplace)
     * @uses ExpressionValidate::$iSurveyId
     * @uses ExpressionValidate::$sLang
     *
     * @author Denis Chenu
     * @version 1.0
     */
    private function getHtmlExpression($sExpression, $aReplacement = array(), $sDebugSource = __CLASS__)
    {
        $LEM = LimeExpressionManager::singleton();
        $LEM::SetDirtyFlag(); // Not sure it's needed
        $LEM::SetPreviewMode('logic');

        $aReData = array();
        if ($this->iSurveyId) {
            $LEM::StartSurvey($this->iSurveyId, 'survey', array('hyperlinkSyntaxHighlighting' => true)); // replace QCODE
            $aReData['thissurvey'] = getSurveyInfo($this->iSurveyId, $this->sLang);
        }
        // TODO : Find error in class name, style etc ....
        // need: templatereplace without any filter and find if there are error but $bHaveError=$LEM->em->HasErrors() is Private
        templatereplace(viewHelper::filterScript($sExpression), $aReplacement, $aReData, $sDebugSource, false, null, array(), true);
        $oFilter = new CHtmlPurifier();

        return $oFilter->purify($LEM::GetLastPrettyPrintExpression());
    }
}