FALSE, ]; } /** * {@inheritdoc} */ public function buildConfigurationForm(array $form, FormStateInterface $form_state) { $form = parent::buildConfigurationForm($form, $form_state); $t_args = [ '%type' => $this->label(), ':injection_href' => 'https://www.google.com/search?q=spreadsheet+formula+injection', ':excel_href' => 'https://www.drupal.org/project/webform_xlsx_export', ]; // Alter the warning if the safer format is already available. if (\Drupal::moduleHandler()->moduleExists('webform_xlsx_export')) { $warning = $this->t('Warning: Opening %type files with spreadsheet applications may expose you to formula injection or other security vulnerabilities. When the submissions contain data from untrusted users and the downloaded file will be used with Microsoft Excel, use the XLSX export format.', $t_args); } else { $warning = $this->t('Warning: Opening %type files with spreadsheet applications may expose you to formula injection or other security vulnerabilities. When the submissions contain data from untrusted users and the downloaded file will be used with Microsoft Excel, use the Webform XLSX export module.', $t_args); } $form['warning'] = [ '#type' => 'webform_message', '#message_type' => 'warning', '#message_message' => $warning, ]; $form['excel'] = [ '#type' => 'checkbox', '#title' => $this->t('Open HTML table in Excel'), '#description' => $this->t('If checked, the download file extension will be change from .html to .xls.'), '#return_value' => TRUE, '#default_value' => $this->configuration['excel'], ]; return $form; } /** * {@inheritdoc} */ public function writeHeader() { $header = $this->buildHeader(); $file_handle = $this->fileHandle; if ($this->configuration['source_entity']) { $title = $this->configuration['source_entity']->label(); } elseif ($this->configuration['webform']) { $title = $this->configuration['webform']->label(); } else { $title = ''; } $thead = []; foreach ($header as $item) { $thead[] = '' . htmlentities($item) . ''; } fwrite($file_handle, ''); fwrite($file_handle, ''); fwrite($file_handle, ''); // Force Excel to keep field values containing p- or br-tags within the same // cell. fwrite($file_handle, ''); fwrite($file_handle, ''); if ($title) { fwrite($file_handle, ''); } fwrite($file_handle, ''); fwrite($file_handle, ''); fwrite($file_handle, ''); fwrite($file_handle, ''); fwrite($file_handle, implode(PHP_EOL, $thead)); fwrite($file_handle, ''); fwrite($file_handle, ''); } /** * {@inheritdoc} */ public function writeSubmission(WebformSubmissionInterface $webform_submission) { $record = $this->buildRecord($webform_submission); $file_handle = $this->fileHandle; $row = []; foreach ($record as $item) { $row[] = ''; } fwrite($file_handle, ''); fwrite($file_handle, implode(PHP_EOL, $row)); fwrite($file_handle, ''); } /** * {@inheritdoc} */ public function writeFooter() { $file_handle = $this->fileHandle; fwrite($file_handle, ''); fwrite($file_handle, '

' . ($item ? nl2br(htmlentities($item)) : '') . '

'); fwrite($file_handle, ''); fwrite($file_handle, ''); } /** * {@inheritdoc} */ public function getFileExtension() { return ($this->configuration['excel']) ? 'xls' : 'html'; } }