<?php /* Copyright 2007-2008 James Davis (email: james@freecharity.org.uk) Some parts copyright 2008 Nart Villeneuve (email: nart.villeneuve@gmail.

com) This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */ ?> <?php /* * Global variables and constants */ load_plugin_textdomain("fcpetition", 'wp-content/plugins/'.plugin_basename(dirna me(__FILE__))); // Define options and their default settings $options_defaults = array ( "petition_title" => '', "petition_text" => __("We the undersigned ask you to sig n our petition.","fcpetition"), "petition_confirmation" => __("Thank you for signing the petition. You m ust confirm this by visiting the following address: \n\n[[curl]]\n\nRegards","fc petition"), //"petition_confirmurl" => __("<PLEASE ENTER THE CORRECT URL>"," fcpetition"), "petition_from" => sprintf(__("Petition <%s>","fcpetiti on"),get_option('admin_email')), "petition_maximum" => 10, "petition_enabled" => 0, "petition_comments" => 0 ); /* Define the maximum comment size. You can't simply just change this for an ex isting install * you must modify the database table too */ define("MAX_COMMENT_SIZE",255); /* Disable e-mail verficiation of petitions. * THIS IS A BAD THING. ENABLING THIS FEAUTRE WILL OPEN YOUR PETITION TO ABUSE AND SPAM. * Set the option to 1 if you really want this. Otherwise, leave well alone. * This option is purposely hidden to ordinary users. */ define("OVERRIDE_VERIFICATION",0); /* Allow the administrator to manually confirm sigatures. * THIS IS A BAD THING AND MAY DECREASE TRUST PLACED IN THE RESULTS OF YOUR PET

ITION * (saying that, you could do the same by manually editting the database). * Set the option to 1 if you really want to do this. * This option is purposely hidden to ordinary users. */ define("OVERRIDE_CONFIRMATION",0); // The petition table $signature_table = $table_prefix . "petition_signatures"; $signature_table_sql = "CREATE TABLE $signature_table ( `petition` INT, `email` VARCHAR(100), `name` VARCHAR(100), `confirm` VARCHAR(100), `comment` TEXT, `fields` TEXT, `time` DATETIME, `keep_private` enum('on','off') NOT NULL default 'off', UNIQUE KEY email (email,petitio n) ) %s; "; $petitions_table = $table_prefix . "petitions"; $petitions_table_sql = "CREATE TABLE $petitions_table ( `petition` INT AUTO_INCREMENT, `petition_title` VARCHAR(100), `petition_text` TEXT, `petition_confirmation` TEXT, `petition_from` VARCHAR(100), `petition_maximum` INT, `petition_enabled` TINYINT(1), `petition_comments` TINYINT(1), PRIMARY KEY (petition) ) %s; "; $fields_table = $table_prefix . "petition_fields"; $fields_table_sql = "CREATE TABLE $fields_table ( `petition` INT, `name` VARCHAR(100), `type` VARCHAR(10), `opt` TEXT, `hide` TINYINT(1), `ts` TIMESTAMP DEFAULT CURREN T_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, UNIQUE KEY name (petition,name) ) %s; "; $old_table = $table_prefix . "petition"; /* * Actions */ add_action('init','fcpetition_widget_register'); add_action('admin_menu', 'fcpetition_add_pages'); //Action

adds pages add_action('the_content','fcpetition_filter_pages'); lay the petition to the user add_action('get_header','fcpetition_export'); for exporting the petition if ( isset($_REQUEST['petition-confirm']) ) add_action('template_redirect', 'fcpetition_confirm'); register_activation_hook(__FILE__, fcpetition_install()); /* * Functions */ function fcpetition_widget($args){ global $wpdb; global $signature_table; global $petitions_table;

//Action to disp //Action

extract($args); echo $before_widget; echo $before_title . __("Total Petition Signatures","fcpetition") . $aft er_title; $sql = "SELECT count($signature_table.email) as count,petition_t itle FROM $signature_table,$petitions_table where $signature_table.petition = $p etitions_table.petition and $signature_table.confirm = '' and petition_enabled = 1 group by petition_title;"; ?><ul><?php foreach ($wpdb->get_results($sql) as $row) { print "<li>".$row->petition_title . ": " . $row->count . "</li>"; } ?></ul> <?php echo $after_widget; } function fcpetition_widget_register() { register_sidebar_widget('Petition Count Widget','fcpetition_widget'); } /* * Displays the confirmation page */ function fcpetition_confirm(){ global $wpdb; global $signature_table; $confirm = $wpdb->escape($_GET['petition-confirm']); if ($wpdb->query("UPDATE $signature_table SET `confirm` = '' WHERE `conf irm` = '$confirm'")==1) { wp_redirect( home_url('/').'petition-complete' ); exit; } else { wp_redirect( home_url('/').'petition-error' ); exit; } die(); ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://w ww.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html> <head> <title><?php printf(__('Confirm Petition Signature - %s', "fcpet ition"), get_bloginfo('name')); ?></title> <style type="text/css" media="screen"> @import url( <?php echo get_settings('siteurl'); ?>/wp-a dmin/wp-admin.css ); </style> <link rel="stylesheet" type="text/css" media="print" href="<?php echo get_settings('siteurl'); ?>/print.css" /> <meta http-equiv="Content-Type" content="text/html;charset=<?php bloginfo('charset'); ?>" /> </head> <body> <div class="wrap"> <h2><?php printf(__('Confirm Petition Signature - %s', "fcpetiti on"), get_bloginfo('name')); ?></h2> <p> <?php if ($wpdb->query("UPDATE $signature_table SET `confirm` = '' WHERE `conf irm` = '$confirm'")==1) { print __("Your signature has now been added to the petition. Tha nk you.","fcpetition"); } else { print __("The confirmation code you supplied was invalid. Either it was incorrect or it has already been used.","fcpetition"); } ?> </p> <p> <a href="<?php bloginfo('home')?>"><?php printf(__('Take me back to "%s"', "fcpetition"),get_bloginfo('name')); ?></a> </p> </div> </body> </html> <?php die(); } /* * Installs the plugin, setting up database tables where necessary */ function fcpetition_install(){ global $wpdb; global $options_defaults; global $signature_table; global $signature_table_sql; global $petitions_table; global $petitions_table_sql; global $fields_table; global $fields_table_sql; if ( $wpdb->supports_collation() ) { if ( ! empty($wpdb->charset) ) $charset_collate = "DEFAULT CHARACTER SET $wpdb->charset"; if ( ! empty($wpdb->collate) ) $charset_collate .= " COLLATE $wpdb->collate"; }

// Create the table that holds the signatures if($wpdb->get_var("SHOW TABLES LIKE '$signature_table'") != $signature_t able) { require_once(ABSPATH . 'wp-admin/upgrade-functions.php'); dbDelta(sprintf($signature_table_sql,$charset_collate)); } // Create the table that holds the individual petition settings if($wpdb->get_var("SHOW TABLES LIKE '$petitions_table'") != $petitions_table ) { require_once(ABSPATH . 'wp-admin/upgrade-functions.php'); dbDelta(sprintf($petitions_table_sql,$charset_collate)); } // Create the table which holds the custom fields for individual petitio ns. if($wpdb->get_var("SHOW TABLES LIKE '$fields_table'") != $fields_table) { require_once(ABSPATH . 'wp-admin/upgrade-functions.php'); dbDelta(sprintf($fields_table_sql,$charset_collate)); } // Upgrade the petitions table if the custom fields column isn't present if($wpdb->get_var("SHOW COLUMNS FROM $signature_table LIKE 'fields'") != "fields") { $wpdb->get_results("ALTER TABLE $signature_table ADD `fields` TE XT;"); } // Upgrade the petitions table if the custom fields column isn't present if($wpdb->get_var("SHOW COLUMNS FROM $fields_table LIKE 'ts'") != "ts") { $wpdb->get_results("ALTER TABLE $fields_table ADD `ts` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP;"); } // Upgrade the petitions table if the hide field isn't present if($wpdb->get_var("SHOW COLUMNS FROM $fields_table LIKE 'hide'") != "hid e") { $wpdb->get_results("ALTER TABLE $fields_table ADD `hide` TINYINT (1);"); } // Upgrade the signatures table if the keep_private column isn't present if($wpdb->get_var("SHOW COLUMNS FROM $signature_table LIKE 'keep_private '") != "keep_private") { $wpdb->get_results("ALTER TABLE $signature_table ADD `keep_priva te` enum('on','off') NOT NULL default 'off';"); } // Change options to TEXT $wpdb->query("ALTER TABLE $fields_table MODIFY opt TEXT"); $wpdb->query("ALTER TABLE $signature_table MODIFY comment TEXT"); //$wpdb->query("ALTER TABLE $petitions_table MODIFY petition_confirmurl TEXT"); } /* * Imports data into a specified petition, from tables created by version 1 of t he plugin */ function fcpetition_import_version1($target) { global $wpdb; global $old_table; global $signature_table; /* * The old database tables could only store a single petition per insta

llation. Fetch these rows from the old table */ $old_rows = $wpdb->get_results("SELECT `email`,`name`,`confirm`,`comment `,`name`,`time` from $old_table"); $c = 0; foreach($old_rows as $row) { $q = "INSERT INTO $signature_table (`petition`,`email`,`name`,`c onfirm`,`comment`,`time`) values ($target,'$row->email','$row->name','$row->conf irm','$row->comment','$row->time')"; $wpdb->query($q); $c++; } // Delete the old table $wpdb->query("DROP TABLE $old_table"); return $c; } /* Show the total number of confirmed signatures. * NEEDS fixing */ function fcpetition_count($petition){ global $wpdb; global $signature_table; $results = $wpdb->get_results("SELECT count(confirm) as c FROM $signatur e_table WHERE `confirm` = '' AND `petition` = $petition"); $count = $results[0]->c; return $count; } /* Show the total numbers of unconfirmed signatures * NEEDS fixing */ function fcpetition_countu($petition){ global $wpdb; global $signature_table; $results = $wpdb->get_results("SELECT count(confirm) as c FROM $signatur e_table WHERE `petition`= $petition"); $count = $results[0]->c; return $count; } /* Return the ID of the first petition. * Used so that management and options pages are initialised to display the * earliest extant petition. */ function fcpetition_first(){ global $wpdb; global $petitions_table; $results = $wpdb->get_results("SELECT `petition` FROM $petitions_table O RDER by `petition` limit 0,1"); if (count($results)==0) return false; return $results[0]->petition; } /* * The user facing section of the code. Inserts the petition into pages/posts. */ function fcpetition_filter_pages($content) {

global $wpdb; global $signature_table; global $petitions_table; #Grab these first. This allows us to only match on the precise post. Oth erwise the next regex would match on all posts with petitions. $petition = $wpdb->escape($_POST['petition']); $petition = wp_kses($petition,array()); if( $_POST['petition_posted'] == 'Y' && preg_match("/\[\[petition-$petit ion\]\]/",$content)) { #If the petition has been posted #Clean some of the input, make SQL safe and remove HTML from nam e and comment which may be displayed later. $name = $wpdb->escape($_POST['petition_name']); $name = htmlchars(wp_kses($name,array())); $email = $wpdb->escape($_POST['petition_email']); $email = htmlchars(wp_kses($email,array())); $comment = $wpdb->escape($_POST['petition_comment']); $comment = htmlchars(wp_kses($comment,array())); #$petition = $wpdb->escape($_POST['petition']); #$petition = wp_kses($petition,array()); $keep_private = $wpdb->escape($_POST['petition_keep_private']); $keep_private = wp_kses($keep_private,array()); $fields = base64_encode(serialize(fcpetition_collectfields($peti tion))); #Make sure that no one is cheekily sending a comment when they s houldn't be $rs = $wpdb->get_results("SELECT `petition_comments` from $petit ions_table"); if($rs[0]->petition_comments == 0) $comment = ""; #Pretty much lifted from lost password code $confirm = substr( md5( uniqid( microtime() ) ), 0, 16); $wpdb->hide_errors(); if ($name == ""){ return __("Sorry, you must enter a name to sign the peti tion.","fcpetition"); } elseif (!is_email($email)){ return __("Sorry, \"$email\" does not appear to be a val id e-mail address.","fcpetition"); } else if (0) { return __("Sorry, your comment is longer than ".MAX_COMM ENT_SIZE." characters.","fcpetition"); } elseif ($wpdb->query("INSERT INTO $signature_table (`petition` ,`email`,`name`,`confirm`,`comment`,`time`,`fields`,`keep_private`) VALUES ('$pe tition','$email','$name','$confirm','$comment',NOW(),'$fields','$keep_private')" )===FALSE){ # This has almost certainly occured due to a duplicate e mail key $wpdb->show_errors(); return __("Sorry, someone has already attempted to sign the petition using this e-mail address.","fcpetition"); } else { $wpdb->show_errors(); # Successful signature, send an e-mail asking the user t o confirm

if (OVERRIDE_VERIFICATION) { $wpdb->query("UPDATE $si gnature_table SET `confirm` = '' WHERE `confirm` = '$confirm'"); return __("Your signatur e has now been added to the petition. Thank you.","fcpetition"); } else { $petition_confirmation = str_replace('[[curl]]', $confirm_url,$petition_confirmation); fcpetition_mail($email,$ petition); return __("Thank you for signing the petition. A n e-mail has been sent to you so that you may confirm your signature.","fcpetiti on"); } } } else { #If not, decide whether to display the petition if (preg_match('/\[\[petition-(.*)\]\]/',$content,$m)) { return preg_replace('/\[\[petition-(.*)\]\]/',fcpetition _form($m[1]),$content); } else if (preg_match('/\[\[signatures-(.*)\]\]/',$content,$m)) { return preg_replace('/\[\[signatures-(.*)\]\]/',fcpetiti on_form_signatures($m[1]),$content); } else { return $content; } } } /* * Sends the confirmation e-mail for petition $po to $email. */ function fcpetition_mail($email,$po){ global $wpdb; global $signature_table; global $petitions_table; $rs = $wpdb->get_results("SELECT `petition_confirmation`,`petition_from` ,`petition_title`,`confirm` from $signature_table,$petitions_table where $petiti ons_table.petition = $signature_table.petition and `email` = '$email' and $petit ions_table.petition = '$po';"); $petition_confirmation = $rs[0]->petition_confirmation; $petition_from = stripslashes($rs[0]->petition_from); $petition_title = stripslashes($rs[0]->petition_title); $confirm = $rs[0]->confirm; $confirm_url = get_bloginfo('home') . "/?petition-confirm=$confirm"; $petition_confirmation = str_replace('[[curl]]',$confirm_url,$petition_c onfirmation); $subject = sprintf(__("Petition: Confirm your signing of the petition '% s'","fcpetition"),$petition_title); wp_mail($email,"$subject","$petition_confirmation","From: $petition_from "); } /* * Returns the HTML form to be presented in a page/post. */

function fcpetition_fetchattributes($petition){ global $wpdb; global $petitions_table; $rs = $wpdb->get_results("SELECT * from $petitions_table where `petition ` = $petition"); if (count($rs) != 1) { return 0; } else { return $rs[0]; } } function fcpetition_form_top($petition,$action){ $pa = fcpetition_fetchattributes($petition); if($pa == 0) return "<strong>". __("This petition does not exist","fcpe tition"). "</strong>"; $text = wpautop(stripslashes($pa->petition_text)); $comments_enabled = $pa->petition_comments; $name = __("Name","fcpetition"); $email = __("E-mail address","fcpetition"); $privacy = __("Do not display name on website","fcpetition"); $button = __("Sign","fcpetition"); if($comments_enabled){ $comments_form = sprintf(__("Please enter an optional comment"," fcpetition")).":<br/><textarea name='petition_comment' cols='50'></textarea><br/ >"; } $custom_fields = fcpetition_livefields($petition); return " $text <form name='petition' method='post' action='$action' class='peti tion'> <input type='hidden' name='petition_posted' value='Y'/> $name:<br/><input type='text' name='petition_name' value =''/><br/> $email:<br/><input type='text' name='petition_email' val ue=''/><br/> $custom_fields $comments_form $privacy: <input type='checkbox' name='petition_keep_pri vate'/><br/> <input type='hidden' name='petition' value='$petition'/ > <input type='submit' name='Submit' value='$button'/> </form> "; /* return " $text <form name='petition' method='post' action='$action' class='peti tion'> <input type='hidden' name='petition_posted' value='Y'/> $name:<br/><input type='text' name='petition_name' value =''/><br/> $email:<br/><input type='text' name='petition_email' val

ue=''/><br/> $custom_fields $comments_form <input type='hidden' name='petition' value='$petition'/ > <input type='submit' name='Submit' value='$button'/> </form> ";*/ } function fcpetition_form_bottom($petition) { global $wpdb; global $signature_table; global $petitions_table; $pa = fcpetition_fetchattributes($petition); if($pa == 0) return "<strong>". __("This petition does not exist","fcpetiti on"). "</strong>"; $petition_maximum = $pa->petition_maximum; $comments_enabled = $pa->petition_comments; if($petition_maximum == 0) { $sql = "SELECT `name`,`comment`,`fields`,`keep_private`, `time` from $signature_table WHERE `confirm`='' AND `petition` = '$petition' ORDER BY `time `"; //$sub_title = __("Signatories"); } else { $sql = "SELECT `name`,`comment`,`fields`,`keep_private`, `time` from $signature_table WHERE `confirm`='' AND `petition` = '$petition' ORDER BY ` time` DESC limit 0,$petition_maximum"; $sub_title = sprintf(__("Showing last %d signatories of %d total signatories","fcpetition"),min(fcpetition_count($petition),$petition_maximum),f cpetition_count($petition)); $thisbit = '<p>'.$sub_title.'</p>'; } # You can edit the following emtpy string if you wish. For instance: # $sub_form .= sprintf("<table>"); $return .= sprintf(""); $return .= '<div class="signatures">'; foreach($wpdb->get_results($sql) as $row) { // Is the name private? if ($row->keep_private == 'on') { $the_name = "xxxxxxxx"; } else { $the_name = $row->name; } if ($row->fields<>""){ $fields = fcpetition_prettyvalues(unserialize(ba se64_decode($row->fields)),$petition); } // Are comments enabled and a comment exists? if ( $comments_enabled == 1 && $row->comment != "") { $comment = stripslashes($row->comment); # The following format strings can be editted if you wish. For instance: # $sub_form .= sprintf("<tr><td>%s</td><td>%s</ td><td>%s</td></tr>",$the_name,$fields,$comment); //$return .= sprintf("<p><span class='signature

'>%s, %s<br/>%s</span></p>",$the_name,$fields,$comment); $return .= "<p class='signage'><strong>".$the_n ame."</strong> signed the petition at ".date('h:ia \o\n l jS F Y', strtotime($ro w->time))."</p>"; } else { $return .= "<p class='signage'><strong>".$the_n ame."</strong> signed the petition at ".date('h:ia \o\n l jS F Y', strtotime($ro w->time))."</p>"; } } $return .= '</div>'; $return .= $thisbit; # You can edit the following emtpy string if you wish. For instance: # $sub_form .= sprintf("</table>"); $return .= sprintf(""); return $return; } function fcpetition_form($petition){ global $wpdb; global $signature_table; global $petitions_table; $pa = fcpetition_fetchattributes($petition); if($pa == 0) return "<strong>". __("This petition does not exist","fcpetiti on"). "</strong>"; // Fetch the petition's attributes $petition_maximum = $pa->petition_maximum; $petition_enabled = $pa->petition_enabled; // Check that the petition is enabled if(!$petition_enabled) return "<strong>".__("This petition is not enable d","fcpetition")."</strong>"; $action = str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); $form1 = fcpetition_form_top($petition,$action); #$form2 = fcpetition_form_bottom($petition); return "<div class='petition'>".$form1."</div>"; } function fcpetition_form_signatures($petition){ global $wpdb; global $signature_table; global $petitions_table; $pa = fcpetition_fetchattributes($petition); if($pa == 0) return "<strong>". __("This petition does not exist","fcpetiti on"). "</strong>"; // Fetch the petition's attributes $petition_maximum = $pa->petition_maximum; $petition_enabled = $pa->petition_enabled; // Check that the petition is enabled if(!$petition_enabled) return "<strong>".__("This petition is not enable

d","fcpetition")."</strong>"; $action = str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); #$form1 = fcpetition_form_top($petition,$action); $form2 = fcpetition_form_bottom($petition); return "".$form2.""; } function fcpetition_add_pages() { /* Add pages to the admin interface */ global $petitions_table; global $wpdb; #add_options_page(__("Petition Add/Delete/Edit","fcpetition"), __("Petit ion Add/Delete/Edit","fcpetition"), 8,basename(__FILE__)."_main", 'fcpetition_ma in_page'); //Remove the options page, it doesn't really maintain the look and feel in 2.7. //add_options_page(__("Petition Settings","fcpetition"), __("Petition Se ttings","fcpetition"), 8,basename(__FILE__)."_settings", 'fcpetition_settings_pa ge'); #add_options_page(__("Petition Management","fcpetition"), __("Petition M anagement","fcpetition"), 8,basename(__FILE__)."_manage", 'fcpetition_manage_pag e'); wp_enqueue_style('admin-style', OPTIONS_FRAMEWORK_DIRECTORY .'css/adminstyle.css'); } /* * Page for Adding/Deleting petitions. */ function fcpetition_main_page(){ global $wpdb; global $petitions_table; global $signature_table; global $old_table; global $options_defaults; //If a petition has been added if ($_POST['addpetition'] != ''){ $petition_title = $wpdb->escape($_POST['addpetition']); // Correctly form the SQL query $n = "(petition_title"; $v = "('$petition_title'"; foreach ($options_defaults as $option => $default) { if ($option == "petition_title") continue; $n .= ",`$option`"; $v .= ",'$default'"; } $n .= ")"; $v .= ")"; $wpdb->query("INSERT into $petitions_table $n values $v;"); } //Delete a petition if ($_POST['deletepetition'] != ''){ $petition = $wpdb->escape($_POST['deletepetition']);

$wpdb->query("DELETE FROM $petitions_table WHERE `petition` = '$ petition'"); $wpdb->query("DELETE FROM $signature_table WHERE `petition` = '$ petition'"); } ?> <div id="of_container"> <div id="header"> <div class="logo"> <h2><a href="http://www.frogsthemes.com" target= "_blank">FrogsThemes.com</a></h2> </div> <div class="version"> Petition Manager<br /><span>Version 1.0.0</span> </div> <div class="clear"></div> </div> <div id="ft-installer"> <div class="fti-sidebars"> <?php //Import petition data from version 1's database tables into a specified new petition if ($_POST['importpetition'] != '') { $target = $wpdb->escape($_POST['importpe tition']); $rows_imp = fcpetition_import_version1($ target); ?> <div id="message" class="updated fade"> <p><strong><?php printf(__("Impo rted %s signatures","fcpetition"),$rows_imp); ?></strong></p> </div> <?php } if($_POST['editpetition']) { // Ideally we'd refactor this function s o that the code was inline. // Comes from when the settings were on a seperate page to this one. fcpetition_settings_page(); } else { ?> <div> <h2><?php _e("Add New Petition", "fcpetition") ?> </h2> <p><?php _e("Adding or deleting a petition will not immediately update the structure of the administration menus .","fcpetition"); ?></p> <form name="petitionmain" method ="post" action="<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?> "> <input type="text" name=

"addpetition" style="float:left;"> <input type='submit' nam e='Submit' class="button-primary" style="float:left; clear:both;" value='<?php _ e("Add Petition","fcpetition")?>'/> </form> </div> <div class='wrap' style="margin:20px 0 0 0; float:left; width:100%; clear:both;"> <h2><?php _e("Current Petitions" ,"fcpetition") ?> </h2> <table class="widefat"> <tr><thead><th><?php _e( "Petition ID","fcpetition")?></th><th><?php _e("Petition Title","fcpetition")?>< /th><th></th><th></th></thead></tr> <?php foreach ($wpdb->get_resu lts("SELECT `petition`,`petition_title` from $petitions_table ORDER BY `petition `") as $row) { ?> <tr> <td><?ph p print $row->petition;?></td><td><?php print stripslashes($row->petition_title) ;?></td> <td> <form name="petitionmain" method="post" action="<?php echo str_replace( '%7E', ' ~', $_SERVER['REQUEST_URI']); ?>"> <input type="hidden" name="editpetition" value="<?php print $row->petition;?>"> <input type='submit' name='Submit' class="button-primary" value='<?php _e("Edit Petition","fcpetition")?>'/> </form> </td> <td> <form name="petitionmain" method="post" action="<?php echo str_replace( '%7E', ' ~', $_SERVER['REQUEST_URI']); ?>"> <input type="hidden" name="deletepetition" value="<?php print $row->petition;?>" > <input type='submit' name='Submit' class="button-primary" value='<?php _e("Delet e Petition","fcpetition")?>'/> </form> </td> </tr> <?php } ?> </table> </div> <?php $old_t = $wpdb->get_results("SHOW TABLE S FROM ".DB_NAME." LIKE '$old_table';"); if(count($old_t) > 0) { ?> <div class='wrap' style="margin:

20px 0 0 0;"> <h2>Import data from ver sion 1.</h2> <?php $plist = $wpdb->ge t_results("SELECT `petition`,`petition_title` from $petitions_table ORDER BY `pe tition`"); if(count($plist) > 0) { ?> <form name="petitionmain " method="post" action="<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_UR I']); ?>"> <?php _e("Import to petition:","fcpetition"); ?> <select name="im portpetition"> <?php foreach ($ plist as $row) {?> <option value="<?php print $row->petition;?>"><?php print stripslashes($row->petition_ti tle);?></option> <?php } ?> </select> <input type='sub mit' name='Submit' class="button-primary" value='<?php _e("Import Petition","fcp etition")?>'/> <?php } else { ?> <?php _e("You mu st first add a petition to import the data to.","fcpetition"); ?> <?php } ?> </div> <?php } ?> <?php } ?> </div> </div> </div> <?php } /* * Export the specified petition in CSV format */ function fcpetition_export(){ global $wpdb; global $signature_table; #we ought to check for admin access too if ($_GET['petition_export'] && current_user_can('manage_options')){ $po = $wpdb->escape($_GET['petition_export']); header('Content-Type: text/plain'); foreach ($wpdb->get_results("SELECT `name`,`email`,`comment`,`ti me`,`fields` from $signature_table WHERE `confirm`='' and `petition` = '$po' ORD ER BY `time` DESC") as $row) { ?> "<?php echo stripslashes($row->name); ?>","<?php echo stripslashes($row->email); ?>","<?php echo stripslashes($row->comment); ?>","<?php echo stripslashes($row>time); ?>"<?php fcpetition_csvfields(unserialize(base64_decode($row->fields))); ?> <?php } // Important that we stop WordPress here. No further output afte

r the CSV data has been displayed. exit; } else { // Simply do nothing if the user has no rights return; } } /* * A page to manage signatures to a particular petition. */ function fcpetition_manage_page() { global $wpdb; global $signature_table; global $petitions_table; global $options_defaults; if($_POST['petition_select']) { $po = $wpdb->escape($_POST['petition_select']); } else { $po = fcpetition_first(); } /* $count - number of entries to display a time * default to ten unless the user asks otherwise */ if($_POST['count']) { $count = $wpdb->escape($_POST['count']); } elseif ($_GET['count']) { $count = $wpdb->escape($_GET['count']); } else { $count = 10; } /* $n - The row number of the first entry to be displayed. * Defaults to 0, start from the first row */ if($_POST['n']) { $n = $wpdb->escape($_POST['n']); } elseif ($_GET['n']) { $n = $wpdb->escape($_GET['n']); } else { $n = 0; } /* $i - the row number of the first row of the previous page * 0 if there is no previous page */ $i = ($n-$count>0)?$n-$count:0; /* $j - the row number of the first row of the next page */ $j = $n+$count; $base_url = $_SERVER['REQUEST_URI']; $base_url = preg_replace("/\&.*/","",$base_url); ?> <div id="of_container"> <div id="header"> <div class="logo">

<h2><a href="http://www.frogsthemes.com" target= "_blank">FrogsThemes.com</a></h2> </div> <div class="version"> Petition Manager<br /><span>Version 1.0.0</span> </div> <div class="clear"></div> </div> <div id="ft-installer"> <div class="fti-sidebars"> <?php //Clear all signatures from a petition if( $_POST['clear'] == 'Y' ) { $wpdb->query("DELETE from $signa ture_table WHERE `petition`='$po'"); echo '<div id="message" class="u pdated fade"><p><strong>'; _e("Signatures cleared","fcpetit ion"); echo "</p></strong></div>"; } //Delete a specific signature from a petition if($_POST['delete'] != ''){ $email = $_POST['delete']; $wpdb->query("DELETE FROM $signature_tab le WHERE `email` = '$email' AND `petition`='$po'"); echo '<div id="message" class="updated f ade"><p><strong>'; _e("Signature Deleted.","fcpetition"); echo "</p></strong></div>"; } //Deletes a comment from a specific signature if($_POST['erase'] != ''){ $email = $_POST['erase']; $wpdb->query("UPDATE $signature_table SE T `comment`='' where `email` = '$email' AND `petition`='$po'"); echo '<div id="message" class="updated f ade"><p><strong>'; _e("Comment erased.","fcpetition"); echo "</p></strong></div>"; } //Resends a specific confirmation e-mail if($_POST['resend'] != ''){ $email = $_POST['resend']; fcpetition_mail($email,$po); echo '<div id="message" class="update d fade"><p><strong>'; _e("Confirmation e-mail resen t.","fcpetition"); echo "</p></strong></div>"; } if($_POST['manualconfirm'] != ''){ $email = $_POST['manualconfirm']; $wpdb->query("UPDATE $signature_table SE T `confirm`='' where `email` = '$email' AND `petition`='$po'"); echo '<div id="message" class="updated f ade"><p><strong>';

_e(sprintf("%s manually confirme d",$email),"fcpetition"); echo "</p></strong></div>"; } //User asks to resend confirmation e-mails to al l unconfirmed addresses from a specified petition if($_GET['resendall'] && !$_POST['resendall']){ //Fetch the petition name $nm = $wpdb->get_results("SELECT `petiti on_title` from $petitions_table where `petition` = $po"); $name = $nm[0]->petition_title; //Work out how many e-mails would be sen t, this is used to warn the user from //spamming signatories. $ct = $wpdb->get_results("SELECT count(* ) as c from $signature_table WHERE `petition`='$po' AND `confirm` != ''"); $cu = $ct[0]->c; ?> <div> <h2><?php echo sprintf(_ _('Resend all unconfirmed e-mails for "%s"',"fcpetition"),$name);?></h2> <p><?php echo sprintf(__ ('You are about to resend all unconfirmed e-mails for this particular petition. Doing so will send %s e-mail(s)',"fcpetition"),$cu); ?></p> <form method="post" acti on="<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>"> <input type='sub mit' name='submit' class="button-primary" style="float:left;" value='Yes I want to do this'/> <input type='hid den' name='resendall' value='yes'/> <input type='hid den' name='po' value='<?php echo $po;?>'/> </form> </div> <?php return; } //Do the resending of all confirmation e-mails t o all unconfirmed addresses from a specified petition. if($_POST['resendall']){ $list = $wpdb->get_results("SELECT `emai l` from $signature_table WHERE `petition`='$po' AND `confirm` != ''"); foreach($list as $addr) { fcpetition_mail($addr->email,$po ); } echo '<div id="message" class="updated f ade"><p><strong>'; _e("Confirmation e-mails resent. ","fcpetition"); echo "</p></strong></div>"; } ?> <div>

<?php $plist = $wpdb->get_results("SELEC T `petition`,`petition_title` from $petitions_table ORDER BY `petition`"); if (count($plist)>0) { ?> <form method="post" action="<?php echo s tr_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>" style="float:right;"> <?php _e("Petition:","fcpetition "); ?> <select name="petition_select" o nchange='this.form.submit()'> <?php foreach ($plist as $row) { ?> <?php if ($row->petition == $po) { ?> <option value="<?php pri nt $row->petition;?>" selected="yes"><?php print stripslashes($row->petition_tit le);?></option> <?php } else { ?> <option value="<?php pri nt $row->petition;?>"><?php print stripslashes($row->petition_title);?></option> <?php } ?> <?php } ?> </select> <noscript><input type="submit" n ame="Submit" class="button-primary" value="<?php _e("Select","fcpetition")?>" /> </noscript> </form> <?php } else { ?> <div id="message" class= "error fade"><p><strong> <?php _e ("Please add a petition.","fcpetition"); ?> </p></strong></div> <?php } ?> <?php if ($po==0) { echo "</div>"; return;} ?> <h2><?php _e("Petition Management","fcpetition") ?></h2> <?php $results = $wpdb->get_results("SELECT * FR OM $signature_table WHERE `petition`='$po' ORDER BY `time` DESC LIMIT $n,$count" ); if (count($results) < 1) { _e("There are no signatures to m anage yet","fcpetition"); return; } ?> <a href="<?php echo get_bloginfo('url') ;?>?peti tion_export=<?php echo $po;?>"><?php _e("Export petition results as a CSV file", "fcpetition");?></a> | <a href="<?php echo str_replace( '%7E', '~', $ _SERVER['REQUEST_URI']); ?>&resendall=yes&po=<?php echo $po;?>"><?php _e("Resend all e-mails","fcpetition"); ?></a>

<?php foreach ($wpdb->get_results("SELECT * FR OM $petitions_table WHERE `petition`='$po'") as $row) { foreach ($options_defaults as $o ption => $default){ $$option = $row->$option ; } } ?> <?php printf(__("<p> Showing %d to %d of %d (%d confirmed)</p>","fcpetition"),$n +1,$j,fcpetition_countu($po),fcpetiti on_count($po)); ?> <div style="margin:0 0 20px 0; f loat:left;"> <form name="changecount" method= "post" action="<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>" > <div style="float:left;" ><?php printf(__("Show %s entries at a time","fcpetition"),"<input type='text' n ame='count' value='$count' size='3' style='width:100px;'/>"); ?></div> <input type="hidden" nam e="n" value="<?php echo $n;?>"/> <input type="submit" nam e="submit" class="button-primary" style="float:left; clear:none; margin:0 0 0 15 px;" value="<?php _e("Change","fcpetition"); ?>"/> </form> </div> <?php if ($n>0) { $pager .= "<a href=' $base_url&n=$i&count=$count'>" . __("Previous $count","fcpetition") ."</a> ... " ;} if (count($results)==$count) { $ pager .= "... <a href='$base_url&n=$j&count=$count'>". __("Next $count","fcpetit ion") ."</a>";} if ($pager != '') { echo "<p>".$ pager."</p>";} ?> <table class="widefat"> <tr> <thead> <th><?php _e("Na me","fcpetition"); ?></th> <th><?php _e("Email address","fcpetition"); ?></th> <?php if ($pet ition_comments) { echo "<th>".__("Comments","fcpetition")."</th>"; } ?> <th><?php _e('Ti me',"fcpetition"); ?></th> <th> <?php _e('U ser code',"fcpetition"); ?></th>

<th><?php _e("Pr ivate?","fcpetition"); ?></th><th></th></thead></tr> <?php foreach ($result s as $row) { if ($row->confir m=='') { $confirm = "<em>".__("Confirmed.","fcpetition")."</em>"; } else { $confirm = $row->confirm; $confirm = $confirm . "<form name='resendform' method='post' action='".str_replace( '%7E ', '~', $_SERVER['REQUEST_URI'])."'> <input type='hidden' name='resend' value='$row->email'/> <input type='hidden' name='petition_select' value='$po'/> <input type='submit' name='Submit' class='button-primary' value='".__("Resend Co nfirmation e-mail","fcpetition")."'/> </form>"; if(OVERR IDE_CONFIRMATION) { $confirm .= "<form name='resendform' method='post' action='".str_replace( '%7E', '~', $_SERVER['REQUEST_URI'])."'> <input type='hidden' name='manualconfirm' value='$row->email'/> <input type='hidden' name='petition_select' value='$po'/> <input type='submit' name='Submit' class='button-primary' value='".__("Manually confirm","fcpetition")."'/> </form>"; } } ?> <tr> <td class="name"><?php e cho stripslashes($row->name); ?></td> <td class="email"><?php echo stripslashes($row->email); ?></td> <?php if ($petition_co mments) { ?> <td class=\"comment\"><?php echo stripslashes($row->comment);?> <?php if ($row->comment != "") { ?> <form name='eraseform' method='post' action='<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>'> <input type='hidden' name='erase' value='<?php echo $row->email;?>'/>

<input type='hidden' name='petition_select' value='<?php echo $po;?>'> <input type='submit' name='Submit' class="button-primary" style="float:left;" va lue='<?php _e("Erase","fcpetition");?>'/> </form> <?php } ?> </td> <?php } ?> <td class="time"><?php e cho $row->time; ?></td> <td><?php echo $confirm; ?></td> <td><?php echo $row->kee p_private; ?></td> <td> <form name='dele teform' method='post' action='<?php echo str_replace( '%7E', '~', $_SERVER['REQU EST_URI']); ?>'> <input t ype='hidden' name='delete' value='<?php echo $row->email;?>'/> <input t ype='submit' name='Submit' class="button-primary" value='<?php _e("Delete","fcpe tition"); ?>'/> <input t ype='hidden' name='petition_select' value='<?php echo $po;?>'> </form> </td> </tr> <?php } ?> </table> <form name="clearform" method="post" ion="<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>"> <p class="submit"> <input type="hidden" e="clear" value="Y"> <input type="hidden" e="petition_select" value="<?php echo $po; ?>"> <input type="submit" e="Submit" class="button-primary" style="float:left;" value="<?php _e("Clear signatures","fcpetition")?>" /> </p> </form> </div> </div> </div> </div> <?php } /* * Adds a custom field to the database */ function fcpetition_addfield($po,$fieldname,$fieldtype,$options,$hidefield){ act nam nam nam all

global $wpdb; global $fields_table; $sql = "INSERT into $fields_table (`petition`,`name`,`type`,`opt`,`hide` ) values ($po,'$fieldname','$fieldtype','$options','$hidefield')"; $wpdb->get_results($sql); } /* * Deletes a custom field from the database */ function fcpetition_deletefield($po,$fieldname){ global $wpdb; global $fields_table; $sql = "DELETE FROM $fields_table WHERE `petition` = '$po' and `name` = '$fieldname'"; $wpdb->get_results($sql); } /* * Displays the custom fields in a form suitable for the options page. * Also defines the form for deletion of fields */ function fcpetition_displayfields($po) { global $wpdb; global $fields_table; $sql = "SELECT * FROM $fields_table WHERE `petition` = '$po' ORDER BY ts "; $res = $wpdb->get_results($sql); if (count($res) > 0) { ?> <table> <tr><thead><th>Name</th><th>Type</th><th>Options</th><th >Printed</th><th></th></thead></tr> <?php foreach($res as $row){ ?> <tr> <td><?php echo $row->name; ?></td> <td> <?php echo $row->type; ?> </td> <td> <?php if ($row->type != "select") { ?> <?php echo $row->opt; ?> <?php } else { ?> <form method="post" action="<?php echo s tr_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>"/> <input type="text" name="fieldoptions" v alue="<?php echo $row->opt; ?>"/> <input type="hidden" nam e="editpetition" value="<?php print $po;?>"> <input type="hidden" nam e="fieldname" value="<?php echo $row->name; ?>"/> <input type="hidden" name="editf ieldoptions" value="yes"/> <input type="submit" name="Submit" value ="<?php _e("Change","fcpetition")?>"/> </form> <?php } ?>

</td> <td> <?php if($row->hide == 0) { ?> No <?php } else { ?> Yes <?php } ?> </td> <td> <form method="post" action="<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>"/> <input type="hidden" name="field name" value="<?php echo $row->name; ?>"/> <input type="hidden" name="editp etition" value="<?php print $po;?>"> <input type="hidden" name="delet efield" value="yes"/> <input type="hidden" name="petit ion_select" value="<?php echo $po; ?>"/> <input type="submit" name="Submi t" value="<?php _e("Delete","fcpetition")?>"/> </form> </td> </tr> <?php } } ?> </table> <?php } /* * Updates the options for a particular field */ function fcpetition_changefieldoptions($po,$fieldname,$fieldoptions){ global $wpdb; global $fields_table; $sql = "UPDATE $fields_table SET `opt` = '$fieldoptions' WHERE `petition ` = $po AND `name` = '$fieldname'"; $wpdb->query($sql); } /* * Returns the HTML for the user to input data for defined custom fields */ function fcpetition_livefields($po) { global $wpdb; global $fields_table; $sql = "SELECT * FROM $fields_table WHERE `petition` = '$po' ORDER by ts "; $res = $wpdb->get_results($sql); $output = ""; if(count($res)>0) { foreach($res as $row){ if($row->hide == 1) { $lmsg = __(" (won't be published)" ,"fcpetition");} else { $lmsg = "";} if($row->type == "text") {

$output .= "$row->name$lmsg:<br/><input type='$r ow->type' name='$row->name'/><br/>\n"; } elseif($row->type == "select") { $output .= "$row->name$lmsg:<br/><select name='$ row->name'>"; foreach(split(",",$row->opt) as $d){ $output .= "<option value='$d'>$d</optio n>\n"; } $output .= "</select><br/>"; } else { $output .= "Sorry, the type '$row->type' has not been implemented yet<br/>"; } } } return $output; } /* * Scans the HTTP headers for submitted data matching defined custom fields. * Places the results in an array/map. This is later stored in serialized form * in the signature's database row. */ function fcpetition_collectfields($po) { global $wpdb; global $fields_table; $sql = "SELECT `name` FROM $fields_table WHERE `petition` = '$po' ORDER by ts"; $res = $wpdb->get_results($sql); if(!$res) return; foreach($res as $field) { $f = str_replace(" ","_",$field->name); if($_POST[$f]){ $package[$f] = $wpdb->escape($_POST[$f]); } else { $package[$f] = ""; } } return $package; } /* * The form for adding custom fields on the options page. */ function fcpetition_fieldform($po) { ?> <form method="post" action="<?php echo str_replace( '%7E ', '~', $_SERVER['REQUEST_URI']); ?>"/> <input type="hidden" name="addfield" value="yes" /> <input type="hidden" name="petition_select" valu e="<?php echo $po; ?>"/> <input type="hidden" name="editpetition" value=" <?php print $po;?>"> Type: <select name = "fieldtype"> <option value="text">Text box</o ption> <option value="select">Drop down box</option>

</select> Name:<input type="text" name="fieldname"/> Options:<input type="text" name="options"/> Publish field <input type="checkbox" name="hide" checked/> <input type="submit" name="Submit" value="<?php _e("Add","fcpetition")?>"/> </form> <?php } /* * A pretty HTML representation of the custom field data */ function fcpetition_prettyfields($package) { if(!$package) return; foreach ($package as $field => $value) { print "<strong>$field:</strong> ".htmlchars($value)." "; } } function fcpetition_prettyvalues($package,$petition) { global $wpdb; global $fields_table; if(!$package) return; foreach($wpdb->get_results("SELECT name,hide FROM $fields_table WHERE pe tition = '$petition' ORDER BY ts") as $row) { $hide[$row->name] = $row->hide; } foreach ($package as $fieldname => $fieldvalue){ if($hide[$fieldname] == 1) { unset($package[$fieldname]); } } $custom_fields = ""; $custom_fields = htmlchars(implode(", ",$package)); return $custom_fields; } function htmlchars( $string ) { return str_replace("\n","<br/>",htmlspecialchars(trim($string),ENT_QUOTES)); } /* * CSV output of the custom field data */ function fcpetition_csvfields($package) { if(!$package) return; foreach ($package as $field => $value){ print ",\"$value\""; } } function fcpetition_settings_page() { /* Handles the petition settings */

global $wpdb; global $options_defaults; global $signature_table; global $petitions_table; if($_POST['petition_select']) { $po = $wpdb->escape($_POST['petition_select']); } elseif ($_GET['petition_select']) { $po = $wpdb->escape($_GET['petition_select']); } elseif ($_POST['editpetition']) { $po = $wpdb->escape($_POST['editpetition']); } else { $po = fcpetition_first(); } #Fetch options foreach ($wpdb->get_results("SELECT * FROM $petitions_table WHERE `petit ion`='$po'") as $row) { foreach ($options_defaults as $option => $default){ $$option = stripslashes($row->$option); } } // Test for submitted data if( $_POST['submitted'] == 'Y' ) { foreach ($options_defaults as $option => $default){ //Perform any checks here, continue over any problem inp ut if($option == "petition_confirmation" && !strpos($_POST[ $option],"[[curl]]")) { $p_error = __("[[curl]] must appear in your conf irmation email text.","fcpetition"); $petition_confirmation = $$option; continue; } //Update options table $$option = $_POST[$option]; $foo = $wpdb->escape($_POST[$option]); $wpdb->query("UPDATE $petitions_table set `$option` = '$ foo' where `petition`='$po'"); } if($p_error != "") { print " <div id=\"message\" class=\"error fade\"><p><strong> $p_error </p></strong></div> "; } ?> <div id="message" class="updated fade"><p><strong> <?php _e("Options Updated.","fcpetition") ?> </p></strong></div> <?php } if ( $_POST['addfield']) { $fieldtype = $wpdb->escape($_POST['fieldtype']);

$fieldname = $wpdb->escape($_POST['fieldname']); $fieldhide = $wpdb->escape($_POST['hide'])=='on'?1:0; $fieldoptions = $wpdb->escape($_POST['options']); fcpetition_addfield($po,$fieldname,$fieldtype,$fieldoptions,$fie ldhide); } if ( $_POST['deletefield']) { $fieldname = $wpdb->escape($_POST['fieldname']); fcpetition_deletefield($po,$fieldname); } if ( $_POST['editfieldoptions']){ $fieldname = $wpdb->escape($_POST['fieldname']); $fieldoptions = $wpdb->escape($_POST['fieldoptions']); fcpetition_changefieldoptions($po,$fieldname,$fieldoptions); } ?> <div> <?php $plist = $wpdb->get_results("SELECT `petition`,`petition_t itle` from $petitions_table ORDER BY `petition`"); if(count($plist) > 0) { ?> <form method="post" action="<?php echo str_replace( '%7E', '~', $_SERVER['REQUEST_URI']); ?>" style="float:right;"> <?php _e("Petition:","fcpetition"); ?> <select name="petition_select" onchange='this.form.submit()'> <?php foreach ($plist as $row) { ?> <?php if ($row->petition == $po) { ?> <option value="<?php print $row->petition;?>" se lected="yes"><?php print stripslashes($row->petition_title);?></option> <?php } else { ?> <option value="<?php print $row->petition;?>"><? php print stripslashes($row->petition_title);?></option> <?php } ?> <?php } ?> </select> <noscript><input type="submit" name="Submit" value="<?php _e("Se lect","fcpetition")?>" /></noscript> </form> <?php } else { ?> <div id="message" class="error fade"><p><strong> <?php _e("Please add a petition.","fcpetition"); ?> </p></strong></div> <?php } ?> <?php if($po != 0) { ?> <h2><?php _e("Petition Settings","fcpetition")?></h2> <p><?php printf(__("Place [[petition-%s]] in the page or post where you wish this petition to appear.","fcpetition"),$po); ?></p> <form name="optionsform" method="post" action="<?php echo str_re place( '%7E', '~', $_SERVER['REQUEST_URI']); ?>"> <input type="hidden" name="submitted" value="Y"> <input type="hidden" name="petition_select" value="<?php echo $p o; ?>"/> <p> <?php _e("Please enter the petition title","fcpetition")

?><br/> <input type="text" name="petition_title" value="<?php ec ho stripslashes($petition_title); ?>" size="72"/> </p> <p> <?php _e("Please enter the petition text","fcpetition")? ><br/> <textarea name="petition_text" rows="10" cols="72"><?php echo stripslashes($petition_text); ?></textarea> </p> <p> <?php _e("Please enter the confirmation email text. Inse rt [[curl]] where the confirmation URL is to appear. [[curl]] <strong>must</stro ng> appear in the text or the confirmation e-mails will not work.","fcpetition") ?><br/> <textarea name="petition_confirmation" rows="10" cols="7 2"><?php echo stripslashes($petition_confirmation); ?></textarea> </p> <p> <?php _e("Please enter the address which the confirmatio n e-mail will appear to be sent from. Any replies to the confirmation e-mail wil l be directed to this address. This <strong>must</strong> follow the same format as the example address.","fcpetition")?><br/> <input type="text" name="petition_from" value="<?php ech o stripslashes($petition_from); ?>" size="72"/> </p> <p> <?php _e("Please enter the maximum number of signatures to be displayed. Set to 0 to show all signatures.","fcpetition")?><br/> <input type="text" name="petition_maximum" value="<?php echo $petition_maximum; ?>"/> </p> <p> <?php _e("Allow signatories to leave a comment","fcpetit ion")?> <input type="checkbox" name="petition_comments" value="1 " <?php echo ($petition_comments)?'checked':'';?>> </p> <p> <?php _e("Enable Petition","fcpetition")?> <input type="checkbox" name="petition_enabled" value="1" <?php echo ($petition_enabled)?'checked':'';?>> </p> <p class="submit"> <input type="hidden" name="editpetition" value="<?php pr int $po;?>"> <input type="submit" name="Submit" class="button-primary " style="float:left;" value="<?php _e("Update Options","fcpetition")?>" /> </p> </form> <h3><?php _e("Custom Fields","fcpetition")?></h3> <p><?php _e("If you are an expert user, you may add custom field s to your petition. You could use this to gather the name of the city or state s omeone lives in. For the drop down box, place a comma seperated list of choices in the options field e.g. Apples,Oranges,Lemons","fcpetition");?></p> <?php fcpetition_displayfields($po);?><hr/><?php fcpetition_fiel dform($po); ?>

<?php } ?> <?php echo "</div>"; } ?>