tonyair
/
silverstripe-userforms
mirror of https://github.com/silverstripe/silverstripe-userforms.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

BUG: Fixes #69 by adding a check to see if the form has been processed

This commit is contained in:
Kirk Mayo 2013-12-19 15:56:10 +13:00
parent 972ee075f6
commit 4c88f1acf9
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
code/model/UserDefinedForm.php
View File

@ -1044,6 +1044,9 @@ JS
Session::clear("FormInfo.{$form->FormName()}.data");
$referrer = (isset($data['Referrer'])) ? '?referrer=' . urlencode($data['Referrer']) : "";
// set a session variable from the security ID to stop people accessing the finished method directly
Session::set('FormProcessed',$data['SecurityID']);
return $this->redirect($this->Link() . 'finished' . $referrer);
}
@ -1055,6 +1058,23 @@ JS
* @return ViewableData
*/
public function finished() {
$formProcessed = Session::get('FormProcessed');
if (!isset($formProcessed)) {
$referrer = (isset($data['Referrer'])) ? '?referrer=' .
urlencode($data['Referrer']) : "";
return $this->redirect($this->Link() . $referrer);
} else {
$securityID = Session::get('SecurityID');
// make sure the session matches the SecurityID and is not left over from another form
if ($formProcessed != $securityID) {
$referrer = (isset($data['Referrer'])) ? '?referrer=' .
urlencode($data['Referrer']) : "";
return $this->redirect($this->Link() . $referrer);
}
}
// remove the session variable as we do not want it to be re-used
Session::clear('FormProcessed');
$referrer = isset($_GET['referrer']) ? urldecode($_GET['referrer']) : null;
return $this->customise(array(