Keskustelu: Nettisivujen teko: Lomakkeen validointi

<script type="text/javascript">

function validateForm()
{
var a=document.forms["myForm"]["asianumero"].value
var v=document.forms["myForm"]["viesti"].value;

                                if (a==null || a=="")
                                    {
                                    alert("Asianumero on pakollinen tieto!");
                                    return false;
                                    }
                                if (v==null || v=="")
                                    {
                                    alert("Viesti on pakollinen tieto!");
                                    return false;
                                    }
                            }
</script>

<?php
                            if($_POST['submit']) {
                                $con = mysql_connect("xxx", "xxx", "xxx");
                                if (!$con)
                                    {
                                        die('Could not connect: ' . mysql_error());
                                    }
                                        mysql_select_db("xxx", $con);
                                        $sql="INSERT INTO Persons (asianumero, etunimi, sukunimi, puhelin, sahkoposti, viesti, tekstiviesti, pvm)
                                        VALUES
                                        ('$_POST[asianumero]','$_POST[etunimi]','$_POST[sukunimi]','$_POST[puhelin]','$_POST[sahkoposti]','$_POST[viesti]','$_POST[tekstiviesti]','$_POST[pvm]')";
                                        if (!mysql_query($sql,$con))
                                            {
                                                die('Error: ' . mysql_error());
                                            }
                                        echo "Kiitos!";
                                mysql_close($con);
                            }
                        ?>

<?php
$yhteys = mysql_connect("localhost", "käyttäjä", "salasana") or die(mysql_error());
mysql_select_db("tietokanta");

$arvot = array();
foreach($_POST as $posti => $arvo) {
	$arvot[] = "'" . mysql_real_escape_string($arvo) . "'";

	if(empty($arvo))
		die("Täytä {$posti}!");
}

if(!mysql_query("INSERT INTO Persons(asianumero, etunimi, sukunimi, puhelin, sahkoposti, viesti, tekstiviesti, pvm) VALUES " . implode(", ", $arvot)))
	die("Henkilön lisäys epäonnistui!");

mysql_close($yhteys);
?>

<?php
function check_input($value)
{
// Stripslashes
if (get_magic_quotes_gpc())
  {
  $value = stripslashes($value);
  }
// Quote if not a number
if (!is_numeric($value))
  {
  $value = "'" . mysql_real_escape_string($value) . "'";
  }
return $value;
}

$con = mysql_connect("localhost", "peter", "abc123");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

// Make a safe SQL
$user = check_input($_POST['user']);
$pwd = check_input($_POST['pwd']);

$sqlYKSI = "SELECT * FROM users WHERE
user=$user AND password=$pwd";
mysql_query($sqlYKSI);


if(strlen($_POST["kentta"]) > $maxpituus)
{
    die("Liian pitkä viesti!");
}


$sqlKAKSI="INSERT INTO Persons (asianumero, etunimi, sukunimi, puhelin, sahkoposti, viesti, tekstiviesti, pvm)
VALUES
('$_POST[asianumero]','$_POST[etunimi]','$_POST[sukunimi]','$_POST[puhelin]','$_POST[sahkoposti]','$_POST[viesti]','$_POST[tekstiviesti]','$_POST[pvm]')";
if (!mysql_query($sqlKAKSI))
{
die('Error: ' . mysql_error());
}
echo "Kiitos!";


mysql_close($con);
?>

<script type="text/javascript">

                           function virhe(viesti) {
                           alert(viesti);
                           return false;
                           }
                           function tarkista(form) {

                           if (form.asianumero.value.length > 8)
                                   return virhe("Asianumero 7 numeroa!");

                           if (!form.asianumero.value.match(/^[0-9]{7,7}$/))
                                   return virhe("Tarkista asianumero!");



                           if (form.viesti.value.length > 5)
                                   return virhe("Viesti 1-5 kirjainta!");

                           if (!form.viesti.value.match(/^[a-zA-z0-9]{1,5}$/))
                                   return virhe("Kirjoita viesti!");

                           return true;
                           }

                       </script>

<?php $pvm = mktime(0,0,0,date("m"),date("d"),date("Y")); ?>
                           <?php
                           if($_POST['submit']) {

                               $asno = $_POST["asianumero"];
                               if ($asno < 5000000)
                                   {
                                       echo "virhe1!";
                                   }
                               elseif ($asno > 5999999)
                                   {
                                       echo "virhe2!";
                                   }
                               else
                                   {

                                       $yhteys = mysql_connect("localhost", "käyttäjä", "salasana") or die(mysql_error());
                                       mysql_select_db("tietokanta", $yhteys);


                                       $arvot = array();
                                       foreach($_POST as $posti => $arvo) {
                                       $arvot[] = "'" . mysql_real_escape_string($arvo) . "'";

                                       if(empty($arvo))
                                       die("Täytä {$posti}!");
                                       }

                                       if(!mysql_query("INSERT INTO Persons(asianumero, etunimi, sukunimi, puhelin, sahkoposti, viesti, tekstiviesti, pvm) VALUES " . implode(", ", $arvot)))
                                       die("Henkilön lisäys epäonnistui!");


                                       mysql_close($yhteys);
                                   }
                           }
                           ?>

<form method='post' action='TÄMÄ SAMA LOMAKE' onsubmit="return tarkista(this);">
                                <dl>
                                    <dt><label for="asianumero">Asianumero (*)</label></dt>
                                    <dd><input type="number" name='asianumero' id="asianumero" maxlength="7" /></dd>

                                    <dt><label for="etunimi">Etunimi</label></dt>
                                    <dd><input type="text" name='etunimi' size='50' maxlength="32" /></dd>

                                    <dt><label for="sukunimi">Sukunimi</label></dt>
                                    <dd><input type="text" name='sukunimi' size='50' maxlength="32" /></dd>

                                    <dt><label for="puhelin">Puhelin</label></dt>
                                    <dd><input type="text" name='puhelin' size='50' maxlength="32" /></dd>

                                    <dt><label for="sahkoposti">Sahkoposti</label></dt>
                                    <dd><input type="text" name='sahkoposti' size='50' maxlength="32" /></dd>

                                    <dt><label for="viesti">Viesti (*) 1-5 merkki&auml;..</label></dt>
                                    <dd><textarea name='viesti' id="viesti" rows="5" cols="60"></textarea></dd>

                                    <dt><label for="tekstiviesti">Haluan saada maksutietoja tekstiviestin&auml;</label></dt>
                                    <dd><input type="radio" name='tekstiviesti' value="kylla" /> kyll&auml; <input type="radio" name="tekstiviesti" value="ei" checked="checked" /> ei</dd>

                                    <input type='hidden' name='pvm' value='<?php echo "".date("d/m/Y", $pvm); ?>' />
                                    <input type="submit" name="submit" value="L&auml;het&auml; tiedot &raquo;" style="cursor:pointer; float:right;">
                                </dl>
                            </form>

<?php $pvm = mktime(0,0,0,date("m"),date("d"),date("Y")); ?>
                            <?php
                            if($_POST['submit']) {

                                $asno = $_POST["asianumero"];
                                if ($asno < 5000000)
                                    {
                                        echo "virhe1!";
                                    }
                                elseif ($asno > 5999999)
                                    {
                                        echo "virhe2!";
                                    }
                                else
                                    {


                                    function check_input($value)
                                    {
                                    // Stripslashes
                                    if (get_magic_quotes_gpc())
                                      {
                                      $value = stripslashes($value);
                                      }
                                    // Quote if not a number
                                    if (!is_numeric($value))
                                      {
                                      $value = "'" . mysql_real_escape_string($value) . "'";
                                      }
                                    return $value;
                                    }

                                    $con = mysql_connect("localhost", "XXX", "XXX");
                                        if (!$con)
                                            {
                                                die('Could not connect: ' . mysql_error());
                                            }

                                                mysql_select_db("XXX", $con);

                                    // Make a safe SQL
                                    $asianumero = check_input($_POST['asianumero']);
                                    $etunimi = check_input($_POST['etunimi']);
                                    $sukunimi = check_input($_POST['sukunimi']);
                                    $puhelin = check_input($_POST['puhelin']);
                                    $viesti = check_input($_POST['viesti']);
                                    $tekstiviesti = check_input($_POST['tekstiviesti']);
                                    $pvm = check_input($_POST['pvm']);

                                    $sql="INSERT INTO Persons (asianumero, etunimi, sukunimi, puhelin,
                                    sahkoposti, viesti, tekstiviesti, pvm)
                                                VALUES
                                                ('$_POST[asianumero]','$_POST[etunimi]','$_POST[sukunimi]','$_POST[puhelin]','$_POST[sahkoposti]','$_POST[viesti]','$_POST[tekstiviesti]','$_POST[pvm]')";



                                    if (!mysql_query($sql,$con))
                                            {
                                                die('Error: ' . mysql_error());
                                            }

                                                echo "kiitos!";

                                    mysql_close($con);
                                    }
                            }
                            ?>

function check_input($value)
                                    {
                                    // Stripslashes
                                    if (get_magic_quotes_gpc())
                                      {
                                      $value = stripslashes($value);
                                      }
                                    // Quote if not a number
                                    if (!is_numeric($value))
                                      {
                                      $value = "'" . mysql_real_escape_string($value) . "'";
                                      }
                                    return $value;
                                    }

                                    $con = mysql_connect("localhost", "xxx", "xxx");
                                        if (!$con)
                                            {
                                                die('Could not connect: ' . mysql_error());
                                            }

                                                mysql_select_db("xxx", $con);

                                    // Make a safe SQL
                                    $asianumero = check_input($_POST['asianumero']);
                                    $etunimi = check_input($_POST['etunimi']);
                                    $sukunimi = check_input($_POST['sukunimi']);
                                    $puhelin = check_input($_POST['puhelin']);
                                    $sahkoposti = check_input($_POST['sahkoposti']);
                                    $viesti = check_input($_POST['viesti']);
                                    $tekstiviesti = check_input($_POST['tekstiviesti']);
                                    $pvm = check_input($_POST['pvm']);


                                    $sql="INSERT INTO Persons (asianumero, etunimi, sukunimi, puhelin, sahkoposti, viesti, tekstiviesti, pvm)
                                                VALUES
                                                ($asianumero,$etunimi,$sukunimi,$puhelin,$sahkoposti,$viesti,$tekstiviesti,$pvm)";

<script type="text/javascript">

                            function virhe(viesti) {
                            alert(viesti);
                            return false;
                            }
                            function tarkista(form) {

                            if (form.asianumero.value.length > 8)
                                    return virhe("Asianumero 7 numeroa!");

                            if (!form.asianumero.value.match(/^[0-9]{7,7}$/))
                                    return virhe("Tarkista asianumero!");

                            if (form.viesti.value.length > 5)
                                    return virhe("Viesti 1-5 kirjainta!");

                            if (!form.viesti.value.match(/^[a-zA-z0-9]{1,5}$/))
                                    return virhe("Kirjoita viesti!");

                            return true;
                            }

                        </script>

<?php $pvm = mktime(0,0,0,date("m"),date("d"),date("Y")); ?>
                            <?php

                            $maxpituus = 5;

                            if($_POST['submit']) {

                                $asno = $_POST["asianumero"];
                                if ($asno < 5000000 || $asno > 5999999)
                                    {
                                        echo "virhe1!";
                                    }
                                else if (strlen($_POST["viesti"]) > $maxpituus)
                                    {
                                        echo "virhe2!";
                                    }
                                else
                                    {

                                    function check_input($value)
                                    {
                                    // Stripslashes
                                    if (get_magic_quotes_gpc())
                                      {
                                      $value = stripslashes($value);
                                      }
                                    // Quote if not a number
                                    if (!is_numeric($value))
                                      {
                                      $value = "'" . mysql_real_escape_string($value) . "'";
                                      }
                                    return $value;
                                    }

                                    $con = mysql_connect("localhost", "XXX", "XXX");
                                        if (!$con)
                                            {
                                                die('Could not connect: ' . mysql_error());
                                            }

                                                mysql_select_db("XXX", $con);

                                    // Make a safe SQL
                                    $asianumero = check_input($_POST['asianumero']);
                                    $etunimi = check_input($_POST['etunimi']);
                                    $sukunimi = check_input($_POST['sukunimi']);
                                    $puhelin = check_input($_POST['puhelin']);
                                    $sahkoposti = check_input($_POST['sahkoposti']);
                                    $viesti = check_input($_POST['viesti']);
                                    $tekstiviesti = check_input($_POST['tekstiviesti']);
                                    $pvm = check_input($_POST['pvm']);

                                    $sql="INSERT INTO Persons (asianumero, etunimi, sukunimi, puhelin, sahkoposti, viesti, tekstiviesti, pvm)
                                                VALUES
                                                ($asianumero,$etunimi,$sukunimi,$puhelin,$sahkoposti,$viesti,$tekstiviesti,$pvm)";

                                    if (!mysql_query($sql,$con))
                                            {
                                                die('Error: ' . mysql_error());
                                            }

                                                echo "<p>Kiitos!</p>";

                                    mysql_close($con);
                                    }
                                }
                            ?>

<form method='post' action='TÄMÄ SAMA LOMAKE' onsubmit="return tarkista(this);">
                                <dl>
                                    <dt><label for="asianumero">Asianumero (*)</label></dt>
                                    <dd><input type="number" name="asianumero" id="asianumero" maxlength="7" /></dd>

                                    <dt><label for="etunimi">Etunimi</label></dt>
                                    <dd><input type="text" name="etunimi" size='50' maxlength="32" /></dd>

                                    <dt><label for="sukunimi">Sukunimi</label></dt>
                                    <dd><input type="text" name="sukunimi" size='50' maxlength="32" /></dd>

                                    <dt><label for="puhelin">Puhelin</label></dt>
                                    <dd><input type="text" name="puhelin" size='50' maxlength="32" /></dd>

                                    <dt><label for="sahkoposti">Sahkoposti</label></dt>
                                    <dd><input type="text" name="sahkoposti" size='50' maxlength="32" /></dd>

                                    <dt><label for="viesti">Viesti (*) 1-5 merkki&auml;..</label></dt>
                                    <dd><textarea name="viesti" id="viesti" rows="5" cols="60"></textarea></dd>

                                    <dt><label for="tekstiviesti">Haluan saada maksutietoja tekstiviestin&auml;</label></dt>
                                    <dd><input type="radio" name="tekstiviesti" value="kylla" /> kyll&auml; <input type="radio" name="tekstiviesti" value="ei" checked="checked" /> ei</dd>

                                    <input type='hidden' name="pvm" value='<?php echo "".date("d/m/Y", $pvm); ?>' />
                                    <input type="submit" name="submit" value="LÄHETÄ">
                                </dl>
                            </form>

*** FormFactory.php
<?php

class FormFactory {
	static private $default_method = 'post';
	static private $default_action = '';

	static function form($id, $form_class=null, $handler_class=null) {
		if (empty($form_class))
			$form_class = 'Form';

		$attrs = array(
			'action' => self::$default_action,
			'method' => self::$default_method,
		);

		if (($form = Form::restoreSession($id)) == false)
			$form = new $form_class($id, $attrs);

		if (!empty($handler_class))
			$form->setHandler(new $handler_class());

		return $form;
	}

	static function setDefaultMethod($method) {
		self::$default_method = $method;
	}

	static function defaultMethod() {
		return self::$default_method;
	}

	static function setDefaultAction($action) {
		self::$default_action = $action;
	}

	static function defaultAction() {
		return self::$default_action;
	}
}

?>

*** Form.php
<?php

/**
 * Printable form for user input.
 */
class Form {
	/**
	 * Contains all elements in a form.
	 **/
	private $nodes;

	/**
	 * References of node values.
	 **/
	private $values;

	/**
	 * Identifier of a form.
	 **/
	private $id;

	/**
	 * URL to which the form data will be sent.
	 **/
	private $action;

	/**
	 * Method used to submit the data (get/post).
	 **/
	private $method;

	/**
	 * Vector of references to input fields in the node tree.
	 */
	private $fields;

	/**
	 * Handler provides validating and processing for the form.
	 **/
	private $handler;

	/**
	 * @param $id id attribute for this form
	 * @param $action URL to which the form data will be sent
	 * @param $method method used to submit the data
	 **/
	public function __construct($id, $attrs=array()) {
		$this->id = $id;
		$this->method = $attrs['method'];

		// Initializes $nodes and $values
		$this->reset(true);

		if (isset($attrs['action']))
			$this->action = $attrs['action'];
		else {

			if (isset($_SERVER['REDIRECT_URL']))
				$this->action = $_SERVER['REDIRECT_URL'];
			else
				$this->action = $_SERVER['SCRIPT_FILENAME'];
		}

		$this->init();

		$this->setHandler(new DefaultHandler());
	}

	/**
	 * Handle trivial get/set methods here.
	 *
	 * @param $name name of the method that was called
	 * @param $args array of arguments supplied for the method
	 **/
	public function __call($name, $params) {
		switch ($name) {
			case 'action':
			case 'handler':
			case 'id':
			case 'method':
			case 'nodes':
			case 'values':
				return $this->$name;

			case 'setHandler':
				$this->handler = $params[0];
				$this->handler->setForm($this);
				break;

			case 'setValue':
				if (array_key_exists($params[0], $this->values))
					$this->values[$params[0]] = $params[1];

				break;

			default:
				trigger_error('Form: No method ' . $name, E_USER_WARNING);
				return null;
		}
	}

	final public function validate() {
		if (!$this->handler)
			return false;

		return $this->handler->validate($this);
	}

	final public function process() {
		if (!$this->handler)
			return false;

		return $this->handler->process($this);
	}

	public function value($field) {
		if (empty($this->values[$field]))
			return false;

		return $this->values[$field];
	}

	public function fields() {
		return array_keys($this->values);
	}

	public function clearSession() {
		$id = 'FORM_' . $this->id;

		if (isset($_SESSION[$id]))
			unset($_SESSION[$id]);
	}

	/**
	 * Matches a value against another value or an array of values.
	 * If an array is supplied, a match means the first value is contained in it.
	 *
	 * @param $value scalar value being tested
	 * @param $options scalar or an array to be matched with
	 * @return boolean
	 **/
	static public function valueMatches($value, $options) {
		return is_array($options) ? in_array($value, $options) : $value == $options;
	}

	/**
	 * Restores a form from user's session data.
	 *
	 * @param $id identifier of the form
	 * @param $clear whether or not the form should be removed from cache. Defaults to TRUE
	 * @return form object or FALSE if no form found
	 **/
	static public function restoreSession($id, $clear=false) {
		$id = 'FORM_' . $id;

		if (!isset($_SESSION[$id]))
			return false;

		$form = $_SESSION[$id];

		if ($clear)
			unset($_SESSION[$id]);

		$form->saveSession();

		if (!is_a($form, 'Form')) {
			trigger_error(
				'Form::restoreSession(): corrupted form! ' .
				'Remember to load the class file before session_start()!'
			);

			return false;
		}

		return $form;
	}

	/**
	 * Appends a new group into the form. Might be rendered e.g. as a fieldset.
	 *
	 * @param $label Name and label for the group
	 * @return boolean
	 **/
	public function addGroup($label) {
		if (isset($this->nodes[$label]))
			return false;

		$this->nodes[$label] = array();

		return true;
	}

	/**
	 * Inserts a form element into the form. The element will be appended to its
	 * group.
	 *
	 * @param $type HTML type of the field (checkbox, text, button, ...)
	 * @param $label label for the element
	 * @param $id id attribute for the element. By default lower-case $label.
	 * @param $required Set to true if this value is required to accept the input
	 * @param $group the group this element belongs to. (See {@link addGroup})
	 * @param $value pre-defined value or HTML for a non-input element
	 * @param $options allowed values or additional definions for a non-input element.
	 **/
	public function addNode(array $node) {

		if (empty($node['id']) && empty($node['name'])) {
			trigger_error('Form::addNode(): Invalid node!');
			return;
		}

		if (empty($node['name']))
			$node['name'] = $node['id'];

		// Name has to be unique
		if (array_key_exists($node['name'], $this->values))
			return false;

		$defaults = array(
			'type' => 'text',
			'required' => false,
			'options' => null,
			'group' => '_TOP_',
			'label' => null,
			'value' => null,
		);

		foreach ($defaults as $key => $value) {
			if (!array_key_exists($key, $node))
				$node[$key] = $value;
		}

		extract($node, EXTR_PREFIX_ALL, '');

		if (!isset($this->nodes[$_group]))
			return false;

		$i = count($this->nodes[$_group]);

		$this->nodes[$_group][$i] = array(
			'type' => $_type,
			'label' => $_label,
			'required' => $_required,
			'name' => $_name,
		);

		if (isset($_id))
			$this->nodes[$_group][$i]['id'] = $_id;

		if (is_array($_options)) {
			$i = count($this->nodes[$_group]) - 1;
			$this->nodes[$_group][$i]['options'] = $_options;

			if (is_array($_value)) {
				foreach ($_value as $j => $val) {
					if (!isset($_options[$val])) {
						unset($_value[$j]);
					}
				}

				if (empty($_value))
					$_value = null;

			} elseif (!isset($_options[$value]))
				$_value = null;
		}

		$this->nodes[$_group][$i]['value'] = $_value;
		$this->fields[$_name] = &$this->nodes[$_group][$i];
		$this->values[$_name] = &$this->nodes[$_group][$i]['value'];
	}

	/**
	 * Remove all fields and their values.
	 *
	 * @param $setDefaults should the default set of fields be restored
	 **/
	public function reset($setDefaults=true) {
		$this->values = array();
		$this->nodes = array('_TOP_' => array());
		$this->fields = array();

		if ($setDefaults) {
			$this->addHiddenField('action', 'submit_form');
			$this->addHiddenField('form_id', $this->id);
			$this->addHiddenField('form_url', $_SERVER['REQUEST_URI']);
			$this->init();
		}
	}

	/**
	 * Clear all values.
	 **/
	public function clear() {
		foreach ($this->values as $key => $value)
			$this->values[$key] = null;
	}

	/**
	 * Reads user input into the form.
	 *
	 * @param $variable input variable to read from. Defaults to $_REQUEST
	 **/
	public function readUserInput(&$variable=null) {
		if (is_null($variable))
			$variable = &$_REQUEST;

		foreach ($variable as $key => $val) {
			if (!array_key_exists($key, $this->values))
				continue;

			$this->values[$key] = htmlspecialchars_decode($val);
		}
	}

	/**
	 * Saves form into the current session.
	 **/
	public function saveSession() {
		$_SESSION['FORM_' . $this->id] = $this;
	}

	/**
	 * Convenience function for adding a hidden field.
	 **/
	public function addHiddenField($name, $value) {
		$this->addNode(array(
			'type' => 'hidden',
			'name' => $name,
			'value' => $value,
		));
	}

	/**
	 * Convenience function for adding a hidden field that indicates to which
	 * URL redirect after a succesfull form processing.
	 **/
	public function setRedirect($url) {
		$key = 'form_redirect';

		if (isset($this->values[$key]))
			$this->values[$key] = $url;
		else
			$this->addHiddenField($key, $url);
	}

	protected function init() {

	}
}

?>

*** FormHandler.php
<?php

const NO_ERROR = 0;

abstract class FormHandler {

	abstract function validate();
	abstract function process();

	private $invalid_fields;
	private $validated;

	function __construct() {
		$this->setForm(null);
	}

	public function setForm($form) {
		$this->form = $form;
		$this->validated = false;
		$this->invalid_fields = array();
	}

	protected function form() {
		return $this->form;
	}

	function invalidFields() {
		return $this->invalid_fields;
	}

	function isValid() {
		return count($this->invalid_fields) == 0;
	}

	function runProcedure($procedure) {
		$this->invalid_fields = array();

		foreach ($procedure as $phase) {
			$params = array();

			if (!is_array($phase['fields']))
				$phase['fields'] = array($phase['fields']);

			if (!isset($phase['params']))
				$phase['params'] = array();

			foreach ($phase['fields'] as $p)
				$params[] = $this->form()->value($p);

			foreach ($phase['params'] as $p)
				$params[] = $p;

			$function = 'validate' . ucfirst($phase['type']);

			$status = call_user_func_array('FormHandler::' . $function, $params);

			if ($status != NO_ERROR)
				$this->invalid_fields = array_merge($this->invalid_fields, $phase['fields']);
		}

		$this->validated = true;

		return count($this->invalid_fields) == 0;
	}

	static function validateEmail($value) {
		return FormHandler::validateRegex($value, '/^[\w_\.]+@[\w]+\.[\w]+$/')
			== NO_ERROR ? NO_ERROR : 5;
	}

	static function validatePassword($value1, $value2=null) {
		if (strlen($value1) < 8)
			return 2;

		if (!is_null($value2) && $value1 != $value2)
			return 3;

		return NO_ERROR;
	}

	static function validateRegex($value, $regex) {
		return preg_match($regex, $value) ? NO_ERROR : 31;
	}

	static function validateNumber($value) {
		return ctype_digit($value) ? NO_ERROR : 101;
	}

	static function validateString($string, $minLength=0, $maxLength=0) {
		return self::validateLength($string, $minLength, $maxLength);
	}

	static function validateLength($value, $minimum, $maximum=0) {
		$len = strlen($value);

		return $len < $minimum ? 102 : ($len <= $maximum || !$maximum ? NO_ERROR : 103);
	}
}

?>

*** MyForm.php
<?php

class MyForm extends Form {

	function __construct($id, $attrs=array()) {
		parent::__construct($id, $attrs);

		$this->addNode(array(
			'id' => 'username',
			'label' => _('Username'),
			'required' => true,
		));

		$this->addNode(array(
			'name' => 'password',
			'label' => _('Password'),
			'type' => 'password',
			'required' => true,
		));

		$this->addNode(array(
			'name' => 'password2',
			'label' => _('Password again'),
			'type' => 'password',
			'required' => true,
		));

		$this->addNode(array(
			'name' => 'email',
			'label' => _('Email address'),
		));

		$this->addNode(array(
			'name' => 'birthday',
			'label' => _('Birthday'),
		));

		$this->addNode(array(
			'name' => 'shoe',
			'label' => _('Shoe size'),
		));

		$this->addNode(array(
			'type' => 'textarea',
			'name' => 'description',
			'label' => _('Informal description'),
			'attributes' => array('rows' => 6, 'cols' => 15),
		));

		$this->setHandler(new MyHandler());
	}
}

?>

*** MyHandler.php
<?php

class MyHandler extends FormHandler {

	function validate() {
		$procedure = array(
			array(
				'fields' => 'username',
				'type' => 'string',
				'params' => array(3, 32),
			),

			array(
				'fields' => array('password', 'password2'),
				'type' => 'password',
				'trim' => false,
			),

			array(
				'fields' => 'email',
				'type' => 'email',
			),

			array(
				'fields' => 'birthday',
				'type' => 'regex',
				'params' => array('/^\d{4}-\d{2}-\d{2}$/'),
			),

			array(
				'fields' => 'shoe',
				'type' => 'number',
			),

			array(
				'fields' => 'description',
				'type' => 'string',
			),

		);

		return $this->runProcedure($procedure);
	}

	function process() {
		return true;
	}
}

?>

*** FormView.php
<?php

class FormView {

	private $form;

	function __construct() {

	}

	function setForm(Form $form) {
		$this->form = $form;
	}

	function form() {
		return $this->form;
	}

	function show() {

		$id = $this->form->id();
		$action = $this->form->action();
		$method = $this->form->method();

		printf(
			'<form id="%s" action="%s" method="%s">',
			$this->form()->id(),
			$this->form()->action(),
			$this->form()->method()
		);

		$nodes = $this->form->nodes();

		foreach ($nodes as $group => $fields) {
			$tmp = '';

			foreach ($fields as $field)
				$tmp .= $this->renderFormField($field);

			if ($group != '_TOP_') {
				$tmp = <<<BLOCK

<fieldset>
	<legend>{$group}</legend>
	{$tmp}
</fieldset>

BLOCK;
			}

			print $tmp;
		}

		print '
				<div class="form-buttons">
					<button type="submit">Send</button>
				</div>
			</form>
		';
	}

	/**
	 * Renders a form element into HTML
	 *
	 * @param $data array of specs for the element
	 * @return HTML for the element
	 **/
	protected function renderFormField($data) {
		$type = $data['type'];
		$id = isset($data['id']) ? $data['id'] : '';
		$label = Util::escapeHtml($data['label']);
		$value = Util::escapeHtml($data['value']);
		$html = '';
		$class = 'field';
		$name = $data['name'];

		$label_text = $label;

		if ($data['required'])
			$class .= ' required-field';

		if (!empty($data['error']))
			$class .= ' error';

		$class = trim($class);

		if (!in_array($type, array('radio', 'checkbox', 'hidden'))) {
			$html .= "<label for=\"{$id}\"";

			if (!empty($class))
				$html .= " class=\"{$class}\"";

			$html .= ">{$label_text}</label>" . PHP_EOL;
		}

		switch ($type) {
			case 'text':
			case 'radio':
			case 'checkbox':
			case 'password':

				$name = $data['name'];

				if ($type == 'checkbox')
					$name .= '[]';

				if ($type == 'text' || $type == 'password') {
					$html .= sprintf(
						'<input title="Input Field" type="%s" name="%s" id="%s"',
						$type, $name, $id
					);

					if (!empty($class))
						$html .= sprintf(' class="%s"', $class);

					if (!empty($value))
						$html .= sprintf(' value="%s"', $value);

					$html .= '/>' . PHP_EOL;
				} else {
					$i = 1;

					foreach ($data['options'] as $val => $label) {
						$val = Util::escapeHtml($val);
						$label = Util::escapeHtml($label);
						$for = $id . '-' . $i;
						$check = Form::valueMatches($val, $value) ? ' checked="checked"' : '';

						$html .= <<<BLOCK

<span class="tick-wrap">
	<label for="{$for}">{$label}</label>
	<input type="{$type}" name="{$name}" id="{$for}" value="{$val}" {$check}/>
</span>

BLOCK;
						$i++;
					}
				}

				break;

			case 'textarea':
				$html .= "<textarea name=\"{$id}\" id=\"{$id}\"";

				if (!empty($class))
					$html .= " class=\"{$class}\"";

				$html .= ">{$value}</textarea>";
				break;

			case 'select':
				$html .= "<select name=\"{$id}\" id=\"{$id}\">" . PHP_EOL;

				foreach ($data['options'] as $val => $label) {
					$val = Util::escapeHtml($val);
					$name = Util::escapeHtml($label);

					$check = Form::valueMatches($val, $value) ? 'selected="selected"' : '';
					$html .= "<option value=\"{$val}\" {$check}>{$label}</option>" . PHP_EOL;
				}

				$html .= '</select>' . PHP_EOL;

				break;

			case 'hidden':

				if (is_array($value))
					$name .= '[]';

				else
					$value = array($value);

				foreach ($value as $val)
					$html .= "<input type=\"hidden\" name=\"{$name}\" value=\"{$val}\"/>" . PHP_EOL;

				break;
		}

		if (!empty($data['error'])) {
			ob_start();
			$this->html('input_error');

			$html .= ob_get_contents();
			ob_end_clean();
		}

		return $html;
	}

	protected function renderError($message) {
		return '<div class="error-message">' . $message . '</div>' . PHP_EOL;
	}


}

class Util {

	/**
	 * Prepares a string or an array of values to be printed.
	 *
	 * @param $value scalar or array value
	 * @return printable version of given value
	 **/
	static function escapeHtml($value) {
		if (is_array($value)) {
			foreach ($value as $key => $val)
				$value[$key] = htmlspecialchars($val);
		} else
			$value = htmlspecialchars($value);

		return $value;
	}

}

?>

*** test.php
<?php

$classes = array(
	'Form',
	'FormHandler',
	'FormView',
	'MyHandler',
	'MyForm',
	'FormFactory',
);

foreach ($classes as $c) {
	require sprintf('classes/%s.php', $c);
}

session_start();

$form = FormFactory::form('TestForm', 'MyForm');
$view = new FormView();
$view->setForm($form);

$form->readUserInput();
$form->saveSession();

if (isset($_REQUEST['action']) && $_REQUEST['action'] == 'submit_form')
	var_dump($form->validate());
?>
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTX XHTML 1.1//EN"
	"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
	<title>Forms2</title>

	<style type="text/css">

	form {
		width: 30em;
		border: 4px solid red;
	}

	label {
		width: 10em;
		display: inline-block;
		clear: left;
	}

	input {
		width: 15em;
	}

	.error-message {
		color: red;
		font-weight: bold;
	}

	</style>
</head>
<body>

<div id="wrap">
	<?php $view->show() ?>
</div>

</body>
</html>