Closes #224: Install now using failsafe views. Please test from scratch (including blanking setup) and make sure it works for you!

git-svn-id: https://code.elgg.org/elgg/trunk@1940 36083f99-b078-4883-b0ff-0f9b5a30f544

1 files changed, 31 insertions, 0 deletions

diff --git a/views/failsafe/input/form.php b/views/failsafe/input/form.php
new file mode 100644
index 000000000..a640619bb
--- /dev/null
+++ b/views/failsafe/input/form.php
@@ -0,0 +1,31 @@
+<?php
+	/**
+	 * Create a form for data submission.
+	 * Use this view for forms rather than creating a form tag in the wild as it provides
+	 * extra security which help prevent CSRF attacks.
+	 * 
+	 * @package Elgg
+	 * @subpackage Core
+	 * @license http://www.gnu.org/licenses/old-licenses/gpl-2.0.html GNU Public License version 2
+	 * @author Curverider Ltd
+	 * @copyright Curverider Ltd 2008
+	 * @link http://elgg.org/
+	 * 
+	 * @uses $vars['body'] The body of the form (made up of other input/xxx views and html
+	 * @uses $vars['method'] Method (default POST)
+	 * @uses $vars['enctype'] How the form is encoded, default blank
+	 * @uses $vars['action'] URL of the action being called
+	 * 
+	 */
+	
+	if (isset($vars['internalid'])) { $id = $vars['internalid']; } else { $id = ''; }
+	if (isset($vars['internalname'])) { $name = $vars['internalname']; } else { $name = ''; }
+	$body = $vars['body'];
+	$action = $vars['action'];
+	if (isset($vars['enctype'])) { $enctype = $vars['enctype']; } else { $enctype = ''; }
+	if (isset($vars['method'])) { $method = $vars['method']; } else { $method = 'POST'; }
+
+?>
+<form <?php if ($id) { ?>id="<?php echo $id; ?>" <?php } ?> <?php if ($name) { ?>name="<?php echo $name; ?>" <?php } ?> action="<?php echo $action; ?>" method="<?php echo $method; ?>" <?php if ($enctype!="") echo "enctype=\"$enctype\""; ?>>
+<?php echo $body; ?>
+</form>
\ No newline at end of file