';
$sql = 'SELECT question, answer FROM ' . QUESTIONS_TABLE . ' q
LEFT JOIN ' . ATTENDEE_ANSWERS . ' ans ON q.id = ans.questionID AND ans.attendeeID = %d
WHERE (q.permissionLevel = \'public\' OR
(q.permissionLevel = \'private\' AND q.id IN (SELECT questionID FROM ' . QUESTION_ATTENDEES_TABLE . ' WHERE attendeeID = %d)))
ORDER BY q.sortOrder, q.id';
$a_rs = $wpdb->get_results( $wpdb->prepare( $sql, $attendee_id, $attendee_id ) );
if ( count( $a_rs ) > 0 ) {
foreach ( $a_rs as $ans ) {
$body .= stripslashes( $ans->question ) . ': ' . stripslashes( $ans->answer ) . ' ';
}
$body .= ' ';
}
$sql = 'SELECT firstName, lastName, rsvpStatus, id, email FROM ' . ATTENDEES_TABLE .
' WHERE id IN (SELECT attendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' WHERE associatedAttendeeID = %d)
OR id in (SELECT associatedAttendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' WHERE attendeeID = %d)';
$associations = $wpdb->get_results( $wpdb->prepare( $sql, $attendee_id, $attendee_id ) );
if ( count( $associations ) > 0 ) {
$body .= '
--== ' . __( 'Associated Attendees', 'rsvp' ) . ' ==-- ';
foreach ( $associations as $a ) {
$body .= stripslashes_deep( $a->firstName . ' ' . $a->lastName ) . ' rsvp status: ' . $a->rsvpStatus . "\r\n";
$sql = 'SELECT question, answer FROM ' . QUESTIONS_TABLE . ' q
LEFT JOIN ' . ATTENDEE_ANSWERS . ' ans ON q.id = ans.questionID AND ans.attendeeID = %d
WHERE (q.permissionLevel = \'public\' OR
(q.permissionLevel = \'private\' AND q.id IN (SELECT questionID FROM ' . QUESTION_ATTENDEES_TABLE . ' WHERE attendeeID = %d)))
ORDER BY q.sortOrder, q.id';
$a_rs = $wpdb->get_results( $wpdb->prepare( $sql, $a->id, $a->id ) );
if ( count( $a_rs ) > 0 ) {
foreach ( $a_rs as $ans ) {
$body .= stripslashes_deep( $ans->question ) . ': ' . stripslashes_deep( $ans->answer ) . "\r\n";
}
$body .= ' ';
}
}
}
$email_addy = get_option( OPTION_NOTIFY_EMAIL );
$headers = array( 'Content-Type: text/html; charset=UTF-8' );
if ( ! empty( $email_addy ) && ( get_option( OPTION_RSVP_DISABLE_CUSTOM_EMAIL_FROM ) != 'Y' ) ) {
$headers[] = 'From: ' . $email_addy . "\r\n";
}
wp_mail( $attendee->email, __( 'RSVP Confirmation', 'rsvp' ), $body, $headers );
}
}
}
/**
* Handles saving of an existing attendee.
*
* @param string &$output The current output that needs to be sent to the user.
* @param string &$text The original page/post text for this page.
*
* @return string The formatted text that needs to get displayed to the user.
*/
function rsvp_handlersvp( &$output, &$text ) {
global $wpdb;
$thank_you_primary = '';
$thank_you_associated = array();
if ( ! isset( $_POST['rsvp_nonce_name'] ) || ! isset( $_POST['rsvp_nonce_value'] ) ||
! WPSimpleNonce::checkNonce( $_POST['rsvp_nonce_name'], $_POST['rsvp_nonce_value'] )
) {
return rsvp_handle_output( $text, rsvp_frontend_greeting() );
}
if ( is_numeric( $_POST['attendeeID'] ) && ( absint( $_POST['attendeeID'] ) > 0 ) ) {
// update their information and what not....
if ( strToUpper( sanitize_text_field( wp_unslash( $_POST['mainRsvp'] ) ) ) == 'Y' ) {
$rsvp_status = 'Yes';
} else {
$rsvp_status = 'No';
}
$attendee_id = absint( $_POST['attendeeID'] );
// Get Attendee first name.
$thank_you_primary = $wpdb->get_var( $wpdb->prepare( 'SELECT firstName FROM ' . ATTENDEES_TABLE . ' WHERE id = %d', absint( $attendee_id ) ) );
if ( get_option( OPTION_RSVP_HIDE_EMAIL_FIELD ) != 'Y' ) {
$wpdb->update(
ATTENDEES_TABLE,
array(
'rsvpDate' => date( 'Y-m-d' ),
'rsvpStatus' => $rsvp_status,
'note' => isset( $_POST['rsvp_note'] ) ? sanitize_text_field( wp_unslash( $_POST['rsvp_note'] ) ) : '',
'email' => isset( $_POST['mainEmail'] ) ? sanitize_email( wp_unslash( $_POST['mainEmail'] ) ) : '',
'kidsMeal' => ( ( isset( $_POST['mainKidsMeal'] ) && ( strToUpper( sanitize_text_field( wp_unslash( $_POST['mainKidsMeal'] ) ) ) == 'Y' ) ) ? 'Y' : 'N' ),
'veggieMeal' => ( ( isset( $_POST['mainVeggieMeal'] ) && ( strToUpper( sanitize_text_field( wp_unslash( $_POST['mainVeggieMeal'] ) ) ) == 'Y' ) ) ? 'Y' : 'N' ),
),
array( 'id' => absint( $attendee_id ) ),
array(
'%s',
'%s',
'%s',
'%s',
'%s',
'%s',
),
array( '%d' )
);
} else {
$wpdb->update(
ATTENDEES_TABLE,
array(
'rsvpDate' => date( 'Y-m-d' ),
'rsvpStatus' => sanitize_text_field( $rsvp_status ),
'note' => isset( $_POST['rsvp_note'] ) ? sanitize_text_field( wp_unslash( $_POST['rsvp_note'] ) ) : '',
'kidsMeal' => ( ( isset( $_POST['mainKidsMeal'] ) && ( strToUpper( sanitize_text_field( wp_unslash( $_POST['mainKidsMeal'] ) ) ) == 'Y' ) ) ? 'Y' : 'N' ),
'veggieMeal' => ( ( isset( $_POST['mainVeggieMeal'] ) && ( strToUpper( sanitize_text_field( wp_unslash( $_POST['mainVeggieMeal'] ) ) ) == 'Y' ) ) ? 'Y' : 'N' ),
),
array( 'id' => absint( $attendee_id ) ),
array(
'%s',
'%s',
'%s',
'%s',
'%s',
),
array( '%d' )
);
}
rsvp_handleAdditionalQuestions( $attendee_id, 'mainquestion' );
$sql = 'SELECT id, firstName FROM ' . ATTENDEES_TABLE .
' WHERE (id IN (SELECT attendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' WHERE associatedAttendeeID = %d)
OR id in (SELECT associatedAttendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' WHERE attendeeID = %d) OR
id IN (SELECT waa1.attendeeID FROM ' . ASSOCIATED_ATTENDEES_TABLE . ' waa1
INNER JOIN ' . ASSOCIATED_ATTENDEES_TABLE . ' waa2 ON waa2.attendeeID = waa1.attendeeID OR
waa1.associatedAttendeeID = waa2.attendeeID
WHERE waa2.associatedAttendeeID = %d AND waa1.attendeeID <> %d))';
$associations = $wpdb->get_results( $wpdb->prepare( $sql, absint( $attendee_id ), absint( $attendee_id ), absint( $attendee_id ), absint( $attendee_id ) ) );
foreach ( $associations as $a ) {
if ( isset( $_POST[ 'attending' . $a->id ] ) && ( ( sanitize_text_field( wp_unslash( $_POST[ 'attending' . $a->id ] ) ) == 'Y' ) || ( sanitize_text_field( wp_unslash( $_POST[ 'attending' . $a->id ] ) ) == 'N' ) ) ) {
$thank_you_associated[] = sanitize_text_field( stripslashes_deep( $a->firstName ) );
if ( $_POST[ 'attending' . $a->id ] == 'Y' ) {
$rsvp_status = 'Yes';
} else {
$rsvp_status = 'No';
}
if ( get_option( OPTION_RSVP_HIDE_EMAIL_FIELD ) != 'Y' ) {
$wpdb->update(
ATTENDEES_TABLE,
array(
'rsvpDate' => date( 'Y-m-d' ),
'rsvpStatus' => sanitize_text_field( wp_unslash( $rsvp_status ) ),
'email' => sanitize_email( wp_unslash( $_POST[ 'attending' . $a->id . 'Email' ] ) ),
'kidsMeal' => ( ( strToUpper( ( isset( $_POST[ 'attending' . $a->id . 'KidsMeal' ] ) ? sanitize_text_field( wp_unslash( $_POST[ 'attending' . $a->id . 'KidsMeal' ] ) ) : 'N' ) ) == 'Y' ) ? 'Y' : 'N' ),
'veggieMeal' => ( ( strToUpper( ( isset( $_POST[ 'attending' . $a->id . 'VeggieMeal' ] ) ? sanitize_text_field( wp_unslash( $_POST[ 'attending' . $a->id . 'VeggieMeal' ] ) ) : 'N' ) ) == 'Y' ) ? 'Y' : 'N' ),
),
array( 'id' => absint( $a->id ) ),
array(
'%s',
'%s',
'%s',
'%s',
'%s',
),
array( '%d' )
);
} else {
$wpdb->update(
ATTENDEES_TABLE,
array(
'rsvpDate' => date( 'Y-m-d' ),
'rsvpStatus' => sanitize_text_field( wp_unslash( $rsvp_status ) ),
'kidsMeal' => ( ( strToUpper( ( isset( $_POST[ 'attending' . $a->id . 'KidsMeal' ] ) ? sanitize_text_field( wp_unslash( $_POST[ 'attending' . $a->id . 'KidsMeal' ] ) ) : 'N' ) == 'Y' ) ? 'Y' : 'N' ) ),
'veggieMeal' => ( ( strToUpper( ( isset( $_POST[ 'attending' . $a->id . 'VeggieMeal' ] ) ? sanitize_text_field( wp_unslash( $_POST[ 'attending' . $a->id . 'VeggieMeal' ] ) ) : 'N' ) ) == 'Y' ) ? 'Y' : 'N' ),
),
array( 'id' => absint( $a->id ) ),
array(
'%s',
'%s',
'%s',
'%s',
),
array( '%d' )
);
}
rsvp_handleAdditionalQuestions( $a->id, $a->id . 'question' );
}
}
if ( get_option( OPTION_HIDE_ADD_ADDITIONAL ) != 'Y' ) {
if ( is_numeric( $_POST['additionalRsvp'] ) && ( absint( $_POST['additionalRsvp'] ) > 0 ) ) {
for ( $i = 1; $i <= absint( $_POST['additionalRsvp'] ); $i ++ ) {
$num_guests = 3;
if ( get_option( OPTION_RSVP_NUM_ADDITIONAL_GUESTS ) != '' ) {
$num_guests = get_optioN( OPTION_RSVP_NUM_ADDITIONAL_GUESTS );
if ( ! is_numeric( $num_guests ) || ( $num_guests < 0 ) ) {
$num_guests = 3;
}
}
if ( ( $i <= $num_guests ) &&
! empty( $_POST[ 'newAttending' . $i . 'FirstName' ] ) &&
! empty( $_POST[ 'newAttending' . $i . 'LastName' ] ) ) {
$thank_you_associated[] = sanitize_text_field( wp_unslash( $_POST[ 'newAttending' . $i . 'FirstName' ] ) );
$wpdb->insert(
ATTENDEES_TABLE,
array(
'firstName' => sanitize_text_field( wp_unslash( $_POST[ 'newAttending' . $i . 'FirstName' ] ) ),
'lastName' => sanitize_text_field( wp_unslash( $_POST[ 'newAttending' . $i . 'LastName' ] ) ),
'email' => sanitize_email( wp_unslash( $_POST[ 'newAttending' . $i . 'Email' ] ) ),
'rsvpDate' => date( 'Y-m-d' ),
'rsvpStatus' => ( ( $_POST[ 'newAttending' . $i ] == 'Y' ) ? 'Yes' : 'No' ),
'kidsMeal' => ( isset( $_POST[ 'newAttending' . $i . 'KidsMeal' ] ) ? sanitize_text_field( wp_unslash( $_POST[ 'newAttending' . $i . 'KidsMeal' ] ) ) : 'N' ),
'veggieMeal' => ( isset( $_POST[ 'newAttending' . $i . 'VeggieMeal' ] ) ? sanitize_text_field( wp_unslash( $_POST[ 'newAttending' . $i . 'VeggieMeal' ] ) ) : 'N' ),
'additionalAttendee' => 'Y',
),
array(
'%s',
'%s',
'%s',
'%s',
'%s',
'%s',
'%s',
)
);
$new_aid = $wpdb->insert_id;
rsvp_handleAdditionalQuestions( $new_aid, $i . 'question' );
// Add associations for this new user.
$wpdb->insert(
ASSOCIATED_ATTENDEES_TABLE,
array(
'attendeeID' => absint( $new_aid ),
'associatedAttendeeID' => absint( $attendee_id ),
),
array(
'%d',
'%d',
)
);
$sql = 'INSERT INTO ' . ASSOCIATED_ATTENDEES_TABLE . '(attendeeID, associatedAttendeeID)
SELECT ' . $new_aid . ', associatedAttendeeID
FROM ' . ASSOCIATED_ATTENDEES_TABLE .
' WHERE attendeeID = %d';
$wpdb->query( $wpdb->prepare( $sql, absint( $attendee_id ) ) );
}
}
}
}
rsvp_handle_notifications( $attendee_id );
return rsvp_handle_output( $text, frontend_rsvp_thankyou( $thank_you_primary, $thank_you_associated ) );
} else {
return rsvp_handle_output( $text, rsvp_frontend_greeting() );
}
}
/**
* Checks to see if an attendee is coming back and if so we give them a prompt to edit.
*
* @param string &$output The output that needs to be displayed.
* @param string &$text The original text.
*
* @return string The output that is ready for the user to see.
*/
function rsvp_editAttendee( &$output, &$text ) {
global $wpdb;
if ( is_numeric( $_POST['attendeeID'] ) && ( absint( $_POST['attendeeID'] ) > 0 ) ) {
// Try to find the user.
$attendee = $wpdb->get_row(
$wpdb->prepare(
'SELECT id, firstName, lastName, rsvpStatus
FROM ' . ATTENDEES_TABLE .
' WHERE id = %d',
absint( $_POST['attendeeID'] )
)
);
if ( $attendee != null ) {
$output .= RSVP_START_CONTAINER;
$output .= RSVP_START_PARA . sprintf( __( 'Welcome back %s!', 'rsvp' ), esc_html( stripslashes_deep( $attendee->firstName . ' ' . $attendee->lastName ) ) ) . RSVP_END_PARA;
$output .= rsvp_frontend_main_form( $attendee->id );
return rsvp_handle_output( $text, $output . RSVP_END_CONTAINER );
}
}
}
/**
* Displays the form if an attendee has been found.
*
* @param string &$output The output that needs to be displayed to the user.
* @param string &$text The original text.
*
* @return string The HTML ready to be displayed to the user.
*/
function rsvp_foundAttendee( &$output, &$text ) {
global $wpdb;
if ( is_numeric( $_POST['attendeeID'] ) && ( absint( $_POST['attendeeID'] ) > 0 ) ) {
$sql = 'SELECT id, firstName, lastName, rsvpStatus FROM ' . ATTENDEES_TABLE . ' WHERE id = %d';
$attendee = $wpdb->get_row( $wpdb->prepare( $sql, absint( $_POST['attendeeID'] ) ) );
if ( $attendee != null ) {
$output = RSVP_START_CONTAINER;
if ( strtolower( $attendee->rsvpStatus ) == 'noresponse' ) {
$output .= RSVP_START_PARA . sprintf(
__( 'Hi %1$s %2$s!', 'rsvp' ),
htmlspecialchars( stripslashes_deep( $attendee->firstName ) ),
htmlspecialchars( stripslashes_deep( $attendee->lastName ) )
) . RSVP_END_PARA;
if ( trim( get_option( OPTION_WELCOME_TEXT ) ) != '' ) {
$output .= RSVP_START_PARA . trim( get_option( OPTION_WELCOME_TEXT ) ) . RSVP_END_PARA;
} else {
$output .= RSVP_START_PARA . __( 'There are a few more questions we need to ask you if you could please fill them out below to finish up the RSVP process.', 'rsvp' ) . RSVP_END_PARA;
}
$output .= rsvp_frontend_main_form( $attendee->id );
} else {
$output .= rsvp_frontend_prompt_to_edit( $attendee );
}
return rsvp_handle_output( $text, $output . RSVP_END_CONTAINER );
}
return rsvp_handle_output( $text, rsvp_frontend_greeting() );
} else {
return rsvp_handle_output( $text, rsvp_frontend_greeting() );
}
}
/**
* Displays the thank you confirmation prompt for existing attendees.
*
* @param string $thank_you_primary The name of the primary attendee.
* @param array $thank_you_associated An array of associated attendee names.
*
* @return string The thank you confirmation page.
*/
function frontend_rsvp_thankyou( $thank_you_primary, $thank_you_associated ) {
$custom_ty = get_option( OPTION_THANKYOU );
if ( ! empty( $custom_ty ) ) {
return nl2br( $custom_ty );
} else {
$ty_text = sprintf( __( 'Thank you %1$s for RSVPing.', 'rsvp' ), esc_html( $thank_you_primary ) );
if ( count( $thank_you_associated ) > 0 ) {
$ty_text .= __( ' You have also RSVPed for - ', 'rsvp' );
foreach ( $thank_you_associated as $name ) {
$ty_text .= htmlspecialchars( ' ' . $name ) . ', ';
}
$ty_text = rtrim( trim( $ty_text ), ',' ) . '.';
}
return RSVP_START_CONTAINER . RSVP_START_PARA . $ty_text . RSVP_END_PARA . RSVP_END_CONTAINER;
}
}
/**
* Displays the thank you confirmation message for new attendees.
*
* @param string $thank_you_primary The name of the primary attendee.
* @param array $thank_you_associated An array of associated attendee names.
* @param string $password The optional passcode that the new attendee will need to edit their RSVP.
*
* @return string The HTML that should be displayed to the user.
*/
function rsvp_frontend_new_atendee_thankyou( $thank_you_primary, $thank_you_associated, $password = '' ) {
$thank_you_text = sprintf( __( 'Thank you %1$s for RSVPing. To modify your RSVP just come back to this page and enter in your first and last name.', 'rsvp' ), esc_html( $thank_you_primary ) );
if ( ! empty( $password ) ) {
$thank_you_text .= ' ' . __( 'You will also need to know your passcode which is', 'rsvp' ) .
" - $password";
}
if ( count( $thank_you_associated ) > 0 ) {
$thank_you_text .= __( '
You have also RSVPed for - ', 'rsvp' );
foreach ( $thank_you_associated as $name ) {
$thank_you_text .= htmlspecialchars( ' ' . $name ) . ', ';
}
$thank_you_text = rtrim( trim( $thank_you_text ), ',' ) . '.';
}
return RSVP_START_CONTAINER . RSVP_START_PARA . $thank_you_text . RSVP_END_PARA . RSVP_END_CONTAINER;
}
/**
* Returns a substring of the string based on the max length passed in.
*
* @param string $name The name we want the first X characters of.
* @param int $max_length The max length of the string we want.
*
* @return string The substring of the name.
*/
function rsvp_chomp_name( $name, $max_length ) {
for ( $i = $max_length; $max_length >= 1; $i -- ) {
if ( strlen( $name ) >= $i ) {
return substr( $name, 0, $i );
}
}
}
/**
* Gets the opening tag for a form field container.
*
* @param string $id An option HTML ID value.
* @param string $additional_classes Optional CSS classes for this div container.
*
* @return string The opening div tag for a form field.
*/
function rsvp_BeginningFormField( $id, $additional_classes ) {
return '
';
}
/**
* Displays the front-end greeting for the user.
*
* @return string The HTML that will be used to greet the user.
*/
function rsvp_frontend_greeting( $email = false ) {
global $rsvp_form_action;
$custom_greeting = get_option( OPTION_GREETING );
$fname = isset( $_REQUEST['firstName'] ) ? $_REQUEST['firstName'] : "";
$lname = isset( $_REQUEST['lastName'] ) ? $_REQUEST['lastName'] : "";
if ( rsvp_require_only_passcode_to_register() ) {
$output = RSVP_START_PARA . __( 'Please enter your passcode to RSVP.', 'rsvp' ) . RSVP_END_PARA;
} elseif ( rsvp_require_passcode() ) {
$output = RSVP_START_PARA . __( 'Please enter your first name, last name and passcode to RSVP.', 'rsvp' ) . RSVP_END_PARA;
} elseif ( $email ) {
$output = RSVP_START_PARA . __( 'Please enter your first name, last name and email address to RSVP.', 'rsvp' ) . RSVP_END_PARA;
} else {
$output = RSVP_START_PARA . __( 'Please enter your first and last name to RSVP.', 'rsvp' ) . RSVP_END_PARA;
}
if ( ! empty( $custom_greeting ) ) {
$output = RSVP_START_PARA . nl2br( $custom_greeting ) . RSVP_END_PARA;
}
$output .= RSVP_START_CONTAINER;
if ( get_option( OPTION_RSVP_OPEN_REGISTRATION ) == 'Y' ) {
$output .= "\r\n";
$output .= '';
$output .= RSVP_START_PARA . __( 'Need to modify your registration? Start with the below form.', 'rsvp' ) . RSVP_END_PARA;
}
$output .= "\r\n";
$output .= RSVP_END_CONTAINER;
return $output;
}
/**
* Adds in the JavaScript for adding additional attendees.
*
* @param int $attendee_id The main attendee ID that we will be adding attendees to.
*
* @return string The JavaScript to add additional attendees.
*/
function rsvp_inject_add_guests_js( $attendee_id ) {
if ( get_option( OPTION_HIDE_ADD_ADDITIONAL ) != 'Y' ) {
$yes_text = __( 'Yes', 'rsvp' );
$no_text = __( 'No', 'rsvp' );
$num_guests = 3;
if ( get_option( OPTION_RSVP_NUM_ADDITIONAL_GUESTS ) != '' ) {
$num_guests = get_option( OPTION_RSVP_NUM_ADDITIONAL_GUESTS );
if ( ! is_numeric( $num_guests ) || ( $num_guests < 0 ) ) {
$num_guests = 3;
}
}
echo '';
}
}