submit-event.php

<?php
$_SERVER['BASE_PAGE'] = 'submit-event.php';
include_once __DIR__ . '/include/prepend.inc';
include_once __DIR__ . '/include/posttohost.inc';
include_once __DIR__ . '/include/email-validation.inc';
site_header("Submit an Event", ["current" => "community"]);

// No errors, processing depends on POST data
$errors = [];
$process = [] !== $_POST;

// Avoid E_NOTICE errors on incoming vars if not set
$vars = [
    'sday', 'smonth', 'syear', 'eday',
    'emonth', 'eyear', 'recur', 'recur_day',
];
foreach ($vars as $varname) {
    if (empty($_POST[$varname])) {
        $_POST[$varname] = 0;
    }
}
$vars = [
    'type', 'country', 'category', 'email', 'url', 'ldesc', 'sdesc',
];
foreach ($vars as $varname) {
    if (!isset($_POST[$varname])) {
        $_POST[$varname] = "";
    }
}

// We need to process some form data
if ($process) {

    // Clean and validate data
    if (!is_emailable_address($_POST['email'])) {
        $errors[] = 'You must supply a valid email address.';
    }

    /**
     * Lockout of addresses and domains known to SPAM us.
     * Add, edit, or remove blacklisted users or domains
     * in include/email-validation.inc :: blacklisted().
     */
    $uemail = isset($_POST['email']) ? strtolower($_POST['email']) : '';
    if (blacklisted($uemail)) {
        $errors[] = 'An expected error has been encountered.  Please don\'t try again later.';
    }

    $_POST['sdesc'] = trim($_POST['sdesc']);
    if (!$_POST['sdesc']) {
        $errors[] = "You must supply a short description of the event.";
    }

    $_POST['ldesc'] = trim(strip_tags($_POST['ldesc'], '<a><i><b><br><p>'));
    $_POST['ldesc'] = preg_replace("/(style|on\\w+?)\s*=[^>]*/i", "", $_POST['ldesc']);
    if (!$_POST['ldesc']) {
        $errors[] = "You must supply a long description of the event.";
    }
    elseif (stripos($_POST['ldesc'], 'PHP') === false) {
        $errors[] = "This does not look like a 'PHP' event";
    }

    $valid_schemes = ['http', 'https', 'ftp'];

    $_POST['url'] = trim($_POST['url']);
    $pu = parse_url($_POST['url']);
    $pu['host'] = isset($pu['host']) ? trim($pu['host']) : '';

    if (!$_POST['url']) {
        $errors[] = "You must supply a URL with more information about the event.";
    }
    elseif (empty($pu['host']) || !in_array($pu['scheme'], $valid_schemes, false)) {
        $errors[] = "The URL you supplied was invalid.";
    }

    if (!$_POST['country']) {
        $errors[] = 'You must specify a country for the event.';
    }

    if (!$_POST['category']) {
        $errors[] = 'You must specify a category for the event.';
    }

    if (!checkdate($_POST['smonth'], $_POST['sday'], $_POST['syear'])) {
      $errors[] = "You must specify a valid start date.";
    }
    else {
        $sdate = mktime(0, 0, 1, $_POST['smonth'], $_POST['sday'], $_POST['syear']);
        if ($sdate < time()) {
            $errors[] = "You must specify a start date that is in the future.";
        }
    }

    if ($_POST['type'] == 'multi' && !checkdate($_POST['emonth'], $_POST['eday'], $_POST['eyear'])) {
        $errors[] = "You must specify a valid end date for a multi-day event.";
    }
    elseif ($_POST['type'] == 'multi' && checkdate($_POST['smonth'], $_POST['sday'], $_POST['syear'])) {
        $sdate = mktime(0, 0, 1, $_POST['smonth'], $_POST['sday'], $_POST['syear']);
        $edate = mktime(0, 0, 1, $_POST['emonth'], $_POST['eday'], $_POST['eyear']);
        if ($edate < time()) {
            $errors[] = "You must specify an end date that is in the future.";
        }
        elseif ($edate < $sdate) {
            $errors[] = "You must specify an end date that is after the start date.";
        }
    }

    if ($_POST['type'] == 'recur' && !($_POST['recur'] && $_POST['recur_day'])) {
        $errors[] = "You must specify a valid day of the month for a recurring event.";
    }

    // Spam question
    if ($_POST["sane"] != 3) {
        $errors[] = "It's OK. I'm not real either";
    }

    if (isset($_POST['action']) && $_POST['action'] === 'Submit' && empty($errors)) {
        // Submit to main.php.net
        $result = posttohost("https://main.php.net/entry/event.php", $_POST);
        if ($result) {
            $errors[] = "There was an error processing your submission: $result";
        }
        if (count($errors) === 0) {
            echo "<p>\n Thank you for your submission! You should hear back soon\n" .
                 " as to whether your event has been accepted for inclusion in\n" .
                 " our calendar.\n</p>";
            site_footer();
            exit;
        }
    }

    if (count($errors) === 0) {
        echo "<p>\n The following is a preview of your event submission.\n" .
             " Please double-check it to make sure all of the information is correct.\n</p>";
    }
}

// No form data to process
else {
    echo "<p>\n Have an upcoming PHP user group meeting?\n" .
         " Submit your event here, and after it has been approved, it will be listed in\n" .
         " our event calendar.\n</p>";
    echo "<p>Please note that conference submissions should be emailed to php-webmaster@lists.php.net</p>\n";
    echo '<div class="warning">' . "\n" .
         "<p>\n All submissions will be <strong>reviewed by human</strong>. Do not waste " .
         "our and your own time on submitting events unrelated to PHP. Thank you.</p>\n" .
         "</div>\n";
}

// Display errors if found
if (count($errors)) { display_errors($errors); }

// Generate days and months arrays for form
for ($i = 1; $i <= 7; $i++) {
    $days[$i] = date('l', mktime(12, 0, 0, 4, $i));
}
for ($i = 1; $i <= 12; $i++) {
    $months[$i] = date('F', mktime(12, 0, 0, $i, 1));
}

// Possibilities to recur
$re = [
    1 => 'First',
    2 => 'Second',
    3 => 'Third',
    4 => 'Fourth',
    -1 => 'Last',
    -2 => '2nd Last',
    -3 => '3rd Last',
];

// If we have data, display preview
if ($process && count($errors) === 0) {
    echo "<p><strong>Preview:</strong></p>\n";
    display_event($_POST);
    echo "<p><strong>Change:</strong></p>\n";
}

?>
<form action="/submit-event.php" method="post">
<table border="0" cellpadding="3" class="standard">
 <tr>
  <th class="subr">Start Date</th>
  <td>
   <select name="smonth"><option></option><?php display_options($months, $_POST['smonth'])?></select>
   <input type="text" name="sday" size="2" maxlength="2" value="<?php echo htmlentities($_POST['sday'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>">
   <input type="text" name="syear" size="4" maxlength="4" value="<?php echo $_POST['syear'] ? htmlentities($_POST['syear'], ENT_QUOTES | ENT_IGNORE, 'UTF-8') : date("Y")?>">
   <input type="radio" id="single" name="type" value="single"<?php if ($_POST['type'] == 'single' || !$_POST['type']) echo ' checked="checked"';?>>
   <label for="single">One day (no end-date required)</label>
  </td>
 </tr>
 <tr>
  <th class="subr">End Date</th>
  <td>
   <select name="emonth"><option></option><?php display_options($months, $_POST['emonth'])?></select>
   <input type="text" name="eday" size="2" maxlength="2" value="<?php echo htmlentities($_POST['eday'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>">
   <input type="text" name="eyear" size="4" maxlength="4" value="<?php echo $_POST['eyear'] ? htmlentities($_POST['eyear'], ENT_QUOTES | ENT_IGNORE, 'UTF-8') : date("Y")?>">
   <input type="radio" id="multi" name="type" value="multi"<?php if ($_POST['type'] == 'multi') echo ' checked="checked"';?>>
   <label for="multi">Multi-day event</label>
  </td>
 </tr>
 <tr>
  <th class="subr">OR Recurring</th>
  <td>
   <select name="recur"><option></option><?php display_options($re, $_POST['recur'])?></select>
   <select name="recur_day"><option></option><?php display_options($days, $_POST['recur_day'])?></select>
   <input type="radio" id="recur" name="type" value="recur"<?php if ($_POST['type'] == 'recur') echo ' checked="checked"';?>>
   <label for="recur">Recurring (every month)</label>
  </td>
 </tr>
 <tr>
  <th class="subr">Short Description</th>
  <td><input type="text" name="sdesc" class="max" value="<?php echo htmlentities($_POST['sdesc'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>" size="32" maxlength="32"></td>
 </tr>
 <tr>
  <th class="subr">URL</th>
  <td><input type="text" name="url" size="40" maxlength="128" class="max" value="<?php echo htmlentities($_POST['url'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>"></td>
 </tr>
 <tr>
  <th class="subr">Country</th>
  <td>
   <select name="country" class="max">
    <option value="">- Select a country -</option>
    <?php display_options($COUNTRIES, $_POST['country']);?>
   </select>
  </td>
 </tr>
 <tr>
  <th class="subr">Event Category</th>
  <td>
   <select name="category" class="max">
<?php
        $cat = ["- Select a category -", "User Group Event", 3 => "Training"]; // 2 = conference.. which should be on php.net/conferences instead
        display_options($cat, $_POST['category']);
?>
   </select>
  </td>
 </tr>
 <tr>
  <th class="subr">Email</th>
  <td>
   <input type="text" name="email" size="40" maxlength="128" class="max" value="<?php echo htmlentities($_POST['email'], ENT_QUOTES | ENT_IGNORE, 'UTF-8')?>"><br>
   <small>This email address is only used to contact you about the listing, it will not displayed along with the listing.</small>
  </td>
 </tr>
 <tr>
  <th class="subr">Long Description</th>
  <td><textarea name="ldesc" cols="60" rows="10" wrap="virtual" class="max"><?php echo htmlentities($_POST['ldesc'], ENT_QUOTES | ENT_IGNORE, 'UTF-8');?></textarea></td>
 </tr>
 <tr>
  <th colspan="2">
    <input type="submit" name="action" value="Preview">
<?php if ($process && count($errors) == 0) {?>
    <input type="submit" name="action" value="Submit">
<?php }?>
  </th>
 </tr>
 <tr>
  <th class="subr">Are you real?</th>
  <td><select name="sane"><?php display_options(["I, Robot", "I used to be", "WTF?", "Yes", "No, but I'd still want to submit this"], "2"); ?></select></td>
 </tr>
</table>
</form>
<?php
site_footer();

// Display an option list with one selected
function display_options($options, $current): void
{
    foreach ($options as $k => $v) {
        echo '<option value="', $k, '"',
             ($k == $current ? ' selected="selected"' : ''),
             '>', htmlentities($v, ENT_QUOTES | ENT_IGNORE, 'UTF-8'), "</option>\n";
    }
}

?>