Plug-in: zem_contact_reborn

Destry · 2006-07-24 14:25:19

Thanks marios. * _goes to add to archives_ *

els · 2006-07-24 15:56:51

Destry wrote:

I don’t see Tranquillo’s pap_contact_cleaner plugin anywhere, or at his Web site. Is it needed for this version of reborn?

pap_contact_cleaner is at thebombsite. I don’t think it is needed for zem_contact_reborn to work. But for safety, why not install it?

Stuart also has some articles on his site.

Destry · 2006-07-24 18:04:06

Thanks Els. Yeah, Stuart’s done a nice job with those docs. I’m still using the original zem_contact, works fine, but mainly because I haven’t needed to switch yet. Some day. Mainly just wanted to get the archive reflecting properly, and now it does.

I’m still looking for the day when a solid, secure, customizable contact form is part of the core, but that’s probably 4.5. ;)

cbeyls · 2006-07-25 03:43:24

I tryed the original zem_contact and this one.

I have noticed that antispam is broken in this one but works in the original one. I can send the same message again and again by pressing the “refresh” button of my browser. Is it normal?

ruud · 2006-07-25 18:06:37

@cbeyls, this fixes the antispam feature (works for me):
<notextile><pre><code>safe_delete(‘txp_discuss_nonce’, ‘issue_time < date_sub(now(), interval 10 minute)’);
$nonce = mysql_real_escape_string(ps(‘zem_contact_nonce’));
if ($rs = safe_row(‘used’, ‘txp_discuss_nonce’, “nonce = ‘$nonce’”)) { if ($rs[‘used’]) { $zem_contact_error[] = zem_contact_gTxt(‘form_used’); $_POST = array(); } else { safe_update(‘txp_discuss_nonce’, “used = ‘1’, issue_time = now()”, “nonce = ‘$nonce’”); }
}
elseif (ps(‘zem_contact_submit’)) { $zem_contact_error[] = zem_contact_gTxt(‘form_expired’);
}</code></pre></notextile>

You can add it in the plugin just below this line:
<notextile><pre><code>safe_insert(‘txp_discuss_nonce’, “issue_time = now(), nonce = ‘$zem_contact_nonce’”);</code></pre></notextile>

This also introduces a new error message ‘form_used’ which requires one extra line to be added in an appropriate place in the zem_contact_lang plugin (below ‘form_expired’ makes sense). You may want to customize this a bit:

<notextile><pre><code>‘form_used’ => ‘Ouch, stop poking me. I am an experienced form and I know how to do my job. Submitting me once is enough.’,</code></pre></notextile>

<del>I’m not sure what the ‘used’ column in ‘txp_discuss_nonce’ is for. Seems to me that if you have used the nonce, it’s just as easy to delete it as it is to change ‘used’ from ‘0’ to ‘1’, but perhaps I’m overlooking something.</del>

Further down in the plugin code (in the zem_contact function) there is a block of code that starts with <code>if (ps(‘zem_contact_submit’))</code> and ends just before <code>return …</code>. It looks like that’s where the antispam checks are originally done, but it’s too late, because at that point the mail has already been sent.

edit: I’ve made some changes inspired by the comments of ‘cbeyls’ below this posting:

if a form is submitted more than once, the ‘form_used’ error is shown and the form fields are emptied (by clearing $_POST) to force the user to fill out the form from scratch.
if someone takes more than 10 minutes to fill out the form, the ‘form_expired’ error is shown but the form field contents are preserved.
when a form is succesfully submitted (email sent), ‘used’ is set to ‘1’ for this nonce and at the same time the ‘issue_time’ is reset. This makes sure that we check for 10 minutes after the submit if a duplicate submission takes place (in the old situation the 10 minutes start when you load the form, but if you take 9:59 minutes to fill out the form and submit, then the check for duplicate submissions would not trigger, because already 1 second later the nonce would be deleted… before the duplicate submit takes place)

Last edited by ruud (2006-07-26 21:27:56)

cbeyls · 2006-07-25 18:34:23

Thank you. I hope they will fix that.

The “use” column is set to “1” when a mail has been sent using this nonce, then it cannot be used again but it is still kept in the database for 10 minutes. That way you can detect when someone tries to submit the same form twice in a short amount of time (probably a spam attempt), which is different than using an outdated or unexisting nonce.

For the moment, I prefeir to use a home-made version of the original zem_contact.

DaveR · 2006-07-27 10:58:21

benbruce wrote:

I wanted to second DaveR’s comment about keeping the auxiliary plugin API.

How’s your work coming on a plugin to post the data into mysql tables? I’m interested in perhaps repurposing your efforts for use with the Email-on-Post and Newsletter Manager plugins.

Ben,

The plugin is not ready to post publically – it needs to be made more user friendly but here is the code if you want to use it as is. You’ll need to modify the php a little, and you’ll need to manually create a new database table but if you’re comfortable with that then you shouldn’t have too much trouble.

You will need to have:
zem_contact_reborn plugin installed and enabled
rss_admin_db_manager will make the mysql table creation easier and is useful to see whats in your table
ign_password_protect and mem_self_register are both used in my system. If you are not using these you can edit the plugin to remove the references.

Thisis plugin to a plugin which adds a function to zem_contact_reborn to save the form data into a database table (in addition to emailing the data).

Note: You must edit the php code to map your zem_contact_reborn field names to your database columns.

The easiest way to install this is to enale the plugin cache directory (under Textpattern’s Advanced preferences tab) and put this code as a plain textfile into that directory. Then there’s no need to base64 encode the plugin and its easy to edit and test. See the notes at http://forum.textpattern.com/viewtopic.php?id=10330

<?php

// This is a PLUGIN TEMPLATE.

// Copy this file to a new name like abc_myplugin.php. Edit the code, then
// run this file at the command line to produce a plugin for distribution:
// $ php abc_myplugin.php > abc_myplugin-0.1.txt

// Plugin name is optional. If unset, it will be extracted from the current
// file name. Uncomment and edit this line to override:
$plugin[‘name’] = ‘djr_contact_db’;

$plugin[‘version’] = ‘0.1’;
$plugin[‘author’] = ‘DaveR’;
$plugin[‘author_uri’] = ‘’;
$plugin[‘description’] = ‘zem_contact_reborn plugin to save field data into a db’;
$plugin[‘type’] = 0; // 0 for regular plugin; 1 if it includes admin-side code

@include_once(‘zem_tpl.php’);

if (0) { ?>

—- BEGIN PLUGIN HELP —-

h1. Textile-formatted help goes here

—- END PLUGIN HELP —-
<?php
}

—- BEGIN PLUGIN CODE —-

register_callback(‘djr_register_submit’,‘zemcontact.submit’);

// Add all the fields into a database tables.
function djr_register_submit() {

global $zem_contact_form;
global $ign_user,$txp_user,$sitename,$mem_profile;
global $txpcfg;

/* Set some defaults for non-required fields to keep mysql happy */
$Address_2 = ‘ ‘;
$Address_3 = ‘ ‘;
$Notes = ‘ ‘;
$Organisation = ‘ ‘;

/* extract will override the defaults if the variables are set. */
extract( $zem_contact_form );

if (isset($ign_user)) { $txp_user = $ign_user; }

$this_user_id = fetch(‘user_id’,‘ign_users’,‘name’, $txp_user);

/********* Edit the following to map your zem_contact_reborn field names to your database columns */

if (!safe_row(“*”, ‘djr_user_details’, “user_id=’$this_user_id’”) ) { $myresult = safe_insert( ‘djr_user_details’, “user_id = ‘$this_user_id’, firstName = ‘$Name’ , lastName = ‘$Surname’ , address1 = ‘$Address_1’ , address2 = ‘$Address_2’ , address3 = ‘$Address_3’ , phone = ‘$Phone’ , affiliation = ‘$Organisation’ , notes = ‘$Notes’ “); } else { $myresult = safe_update( ‘djr_user_details’, “firstName = ‘$Name’ , lastName = ‘$Surname’ , address1 = ‘$Address_1’ , address2 = ‘$Address_2’ , address3 = ‘$Address_3’ , phone = ‘$Phone’ , affiliation = ‘$Organisation’ , notes = ‘$Notes’ “, “user_id = ‘$this_user_id’” ); } }

/* Uncomment these two lines if you need some debugging output */ // dmp( $myresult) ; // dmp($zem_contact_form);

}

—- END PLUGIN CODE —-

?>

</notextile></pre></code>

Edit: Thanks for the hint Ruud!

Last edited by DaveR (2006-07-27 21:58:44)

DaveR · 2006-07-27 11:13:29

Ben,

The forum won’t play nicely with whitespace in the code above, so I’m emailing you a file as well.

Regards,
Dave

ruud · 2006-07-27 12:29:14

Dave, if you enclose the code like this, whitespace is preserved on the forum:
<notextile><pre><notextile><pre><code>
your code here
</code></pre></notextile></pre></notextile>

moslib · 2006-08-15 04:05:47

I want to add some text to the email that is sent (but not have it visible to the user filling out the form).

That is, I’d like to add some words to the form result to make it clearer to the people who will need to respond to these emails.

It’ll be breaking up the responses … e.g. “Question 1: Local Issues”, “Question 2: State Issues”, etc

How do you go about doing that?

dog_biscuits · 2006-08-16 12:03:19

Sorry if the answer to this is already in the thread, but a search didn’t give any relevant results…

Any ideas why I get two copies of the mail, sent from this plugin, when I specify a from address in the zem_contact tag?

Thanks.

Textpattern CMS

Textpattern CMS support forum

#529 2006-07-24 14:25:19

Re: Plug-in: zem_contact_reborn

#530 2006-07-24 15:56:51

Re: Plug-in: zem_contact_reborn

#531 2006-07-24 18:04:06

Re: Plug-in: zem_contact_reborn

#532 2006-07-25 03:43:24

Re: Plug-in: zem_contact_reborn

#533 2006-07-25 18:06:37

Re: Plug-in: zem_contact_reborn

#534 2006-07-25 18:34:23

Re: Plug-in: zem_contact_reborn

#535 2006-07-27 10:58:21

Re: Plug-in: zem_contact_reborn

#536 2006-07-27 11:13:29

Re: Plug-in: zem_contact_reborn

#537 2006-07-27 12:29:14

Re: Plug-in: zem_contact_reborn

#538 2006-08-15 04:05:47

Re: Plug-in: zem_contact_reborn

#539 2006-08-16 12:03:19

Re: Plug-in: zem_contact_reborn

Board footer