hcuForms.prg

<?php
  /*
   * File: hcuForms
   *
   * Purpose:  Get the custom content for a credit union's secure forms. Simply display the content
   *           or a message if no content exists.
   *
   */

  // ** SET SCRIPT LEVEL VARIABLES
  $serviceShowInfo = true;
  $serviceLoadMenu = true;
  $serviceShowMenu = true;
  $serviceAllowReadonly = false;

  // ** INCLUDE MAIN GLOBAL SCRIPT -- Handles security / global variable values
  require_once(dirname(__FILE__) . '/../library/hcuService.i');

  /*
   * ** CHECK USER FEATURE PERMISSIONS **
   * NOTE: DOES NOT RETURN ON FAILURE
   */
  PermCheckFeatureScreen($dbh, $HB_ENV, $MC, FEATURE_BASIC);


  // ** INCLUDE PRE CONTENT SCRIPT
  require_once(dirname(__FILE__) . '/../includes/hcuPreContent.i');

  // ** INSERT BUSINESS LOGIC FOR THIS FORM
  $Cu = $HB_ENV["Cu"];
  $Cn = $HB_ENV["Cn"];
  $chome = $HB_ENV["chome"];
  $Flang = $HB_ENV["Flang"];

  // get any passed variables
  $dms_ok = array( "target" => "string", "x" => "string" );

  dms_import_v2($HB_ENV, 'HCUPOST', $dms_ok);

  try {
    $Flang = (trim($Flang) == "" ? "en_US" : trim($Flang));

    if ( $HB_ENV['offline'] != "N" ) {
      $thisPageErrors = $HB_ENV["offlinemsg"];
      throw new Exception( json_encode( $thisPageErrors ) );
    }

    /*
     * RETRIEVE the secure forms page. NOTE: Never a popup.
     *
     */
    // see if opening a specific target form
    $target = $HB_ENV["HCUPOST"]["target"];
    if ( strlen( $target ) ) {
      // build a path to the file
      $formFileName = basename(trim($target));     // NOTE: the file name is what is passed in (nothing added)
      $formFileDir = "/home/{$HB_ENV['chome']}/public_html/bankingIncludes/";

      $displayContent = "";

      // try to read the language file, or english if no language
      $formFilePath = "";
      if (is_readable($formFileDir . "/" . $Flang . "/" . $formFileName)) {
        $formFilePath = $formFileDir . "/" . $Flang . "/" . $formFileName;
      } else if (is_readable($formFileDir . "/en_US/" . $formFileName)) {
        $formFilePath = $formFileDir . "/en_US/" . $formFileName;
      } else {
        // ** NO FILE TO READ
      }

      if ( $formFilePath != "" && is_readable($formFilePath)) {
        $displayContent = file_get_contents($formFilePath);
      }

      if ( $displayContent == "" ) {
        $displayContent = $MC->msg( "Not Found", HCU_DISPLAY_AS_HTML );
      }

    } else if ( strlen( $HB_ENV["HCUPOST"]["x"] ) ) {
      /* Note: This functionality isn't used for now. 04/10/2014
       *
       */

      $valuesJsonString = hcu_decrypturl($HB_ENV['HCUPOST']['x'], $GLOBALS['hcuViewNoticeKey']);
      $formValues = json_decode($valuesJsonString, true);
      $formFileName = basename(trim($formValues["target"]));     // NOTE: the file name is what is passed in as the target (nothing added)
      $formFileDir = "/home/{$HB_ENV['chome']}/public_html/";
      $formFileDir = "/fi/{$HB_ENV['chome']}";

      print "Form Name: $formFileName<br>";

      $displayContent = "";

      // try to read the file
      $formFilePath = $formFileDir . "/" . $formFileName;

      if ( $formFilePath != "" ) {
      //$displayContent = file_get_contents($formFilePath);
      //$displayContent = "<iframe src=\"$formFilePath\"></iframe>";
        $displayContent = "<iframe src=\"$formFilePath\" width='700px' height='200px' id='iframe1' marginheight='0' frameborder='0' onLoad=\"autoResize('iframe1');\"></iframe>";
      }

      if ( $displayContent == "" ) {
        $displayContent = $MC->msg( "Not Found", HCU_DISPLAY_AS_HTML );
      }
    } else {
      // see if there is an extra file on the path
      $formFileName = basename( HCU_array_key_value("PATH_INFO", $_SERVER) );
      // print "<br>Form: $formFileName";

      if ( strlen( $formFileName ) && $formFileName != __FILE__ ) {
        $formFileDir = "/home/{$HB_ENV['chome']}/public_html/";

        // make sure user didn't try to get to bankingIncludes directory
        $tryingBankingIncludes = strstr( HCU_array_key_value("PATH_INFO", $_SERVER), "bankingIncludes" );

        //print "Form Name: $formFileName<br>";

        $displayContent = "";

        // try to read the file
        $formFilePath = $formFileDir . "/" . $formFileName;
        if ( $formFilePath != "" && !$tryingBankingIncludes && is_readable($formFilePath)) {
          $displayContent = file_get_contents($formFilePath);
        }

        if ( $displayContent == "" || $tryingBankingIncludes ) {
          $displayContent = $MC->msg( "Not Found", HCU_DISPLAY_AS_HTML );
        }
      } else {
        $formsContentAry = Get_NoticeInfo($dbh, $HB_ENV, $MC, "R", "SecureForms", true);

        $displayContent = "";
        if ( $formsContentAry["status"]["code"] == "000" && $formsContentAry["notice"][0]["notice_id"] ) {
          $displayContent = $formsContentAry['notice'][0]["notice_text"];
        }

        if ( $displayContent == "" ) {
          $displayContent = $MC->msg( "Verify routing no match", HCU_DISPLAY_AS_HTML );
        }

        /*
         * We were thinking of encrypting the url so the users wouldn't see secure form file names.
         *
        $secureFormOptions = Array (
               'target'      => "e_noticefrmB.html"
           );

         $encryptedOptions = hcu_encrypturl(json_encode($secureFormOptions), $GLOBALS['hcuViewNoticeKey']);

         print "Test e_noticefrm: x=" . urlencode($encryptedOptions);

        $secureFormOptions = Array (
               'target'      => "addchangefrm.html"
           );

         $encryptedOptions = hcu_encrypturl(json_encode($secureFormOptions), $GLOBALS['hcuViewNoticeKey']);

         print "<br>Test addchangefrm: x=" . urlencode($encryptedOptions);
         */
      }
    }
?>

<!-- prevents zoom on mobile that covers up submit buttons -->
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"/> <!--320-->

<style>
ul {
  list-style-type: none;
  font-size: 14px;
}
li {
  font-size: 14px;
}
</style>
    <div class="k-content" style='font-size:12px;'>

      <div class="container-fluid">

        <?php echo $displayContent; ?>

      </div>

    </div>

    <script>

      // Arg1: content (url), Arg2: title, Arg3: width, Arg4: height
      function ShowSecureForm(noticeContent) {
        var noticeTitle;
        var filePath = arguments[0];

        if ( arguments.length > 1 ) {
          // ** Argument 2 is the noticeTitle
          if (arguments[1]) {
            noticeTitle = arguments[1];
          }
        }

        var windowWidth = 700;
        if ( arguments.length > 2 ) {
          // ** Argument 3 is the notice window width
          if (arguments[2]) {
            windowWidth = arguments[2];
          }
        } else {
            windowWidth = "85%";
        }

        var windowHeight = 300;
        if ( arguments.length > 3 ) {
          // ** Argument 4 is the notice window height
          if (arguments[3]) {
            windowHeight = arguments[3];
          }
        } else {
            windowHeight = "85%";
        }

          $(document.body).append('<div id="formWindow" ></div>');

          // set up a indeterminate progress bar
          ShowWaitWindow();

          // window will need to be closed manually
          $('#formWindow').kendoWindow({
            visible: false,
            iframe: true,
            height: windowHeight,
            width: windowWidth,
            title: noticeTitle,
            modal: true,
            resizable: true,
            refresh: function() {
              this.center();
            },
            close: function(e) {
              var dialog = $("#formWindow").data("kendoWindow");
              dialog.destroy();
            },
            activate: function(e) {
              CloseWaitWindow();
            },
            content: noticeContent
          });

          // doing it this way for IE8
          var dialog = $("#formWindow").data('kendoWindow');
          dialog.center().open();

      }

    </script>

<?php
  /*
   * ** END CONTENT
   */
  } catch (Exception $ex) {
    //Return error message
    $thisPageErrors = json_decode($ex->getMessage());
    // ** Handle Errors on this screen
    $serviceErrorCode = '917';
    $serviceErrorMsgs = $thisPageErrors;

    require_once(dirname(__FILE__) . '/../includes/hcuErrorPage.i');
    // drop through to close the page
  }

  // ** INCLUDE POST CONTENT SCRIPT
  require_once(dirname(__FILE__) . '/../includes/hcuPostContent.i');