dbxForm.class.php

Go to the documentation of this file.

<?php

class dbxForm extends \dbxObj {

    public $oValidator;

    public $oTPL;

    public $oDB;

    public $_dbx_view = '';

    public $_view_sync = '';

    public $_view_mode = '';

    public $_mode = 'mix';

    public $_ajax = true;

    public $_store_mode = 'session';

    public $_dbx_modul_id = 0;

    public $_dbx_modul = 'modul';

    public $_dbx_lng = '';

    public $_dbx_design = '';

    public $_dbx_action = '';

    public $_dbx_work = '';

    public $_dbx_page = '';

    public $_rid = 0;

    public $_action = '';

    public $_tpl = '';

    public $_fid = '';

    public $_next_i = 0;

    public $_dd = '';

    public $_fd = '';

    public $_editor_files = array();

    public $_editor_class_file = '';

    public $_data = array();

    public $_post = array();

    public $_sys = array();

    public $_obj = array();

    public $_js = array();

    public $_css = array();

    public $_flds = array();

    public $_messages = array();

    public $_infos = array();

    public $_errors = array();

    protected $_validation_results = array();

    public $_warnings = array();

    public $_replaces = array();

    public $_general_error = '';

    public $_msg_info = '#form_msg_info#';

    public $_msg_success = '#form_msg_success#';

    public $_msg_error = '#form_msg_error#';

    public $_msg_warning = '#form_msg_warning#';

    public $_tpl_form_info = 'form-alert-info';

    public $_tpl_form_success = 'form-alert-success';

    public $_tpl_form_error = 'form-alert-danger';

    public $_tpl_form_warning = 'form-alert-warning';

    public $_tpl_fld_info = 'fld-alert-info';

    public $_tpl_fld_success = 'fld-alert-success';

    public $_tpl_fld_error = 'fld-alert-danger';

    public $_tpl_fld_warning = 'fld-alert-warning';

    public $_tpl_max_try = 'form-alert-maxtry';

    public $_try_reset = 120;

    public $_try_count_reset = 600;

    public $_try_max = 20;

    public $_try_msg = 'Max {try_count} try. Suspend for {sec} seconds';

    public $_create_flds = 1;

    public $_reload_record = 1;

    public $_reload_run = 0;

    public $_reload_transform = 0;

    protected $_module_bar_form_actions = array();

    protected $_form_help_button = '';

    public $_form_help_enabled = 1;

    public $_reload_suffix = '_rlo';

    public $_fld_change_state = 'fld';

    public $_fld_changes = -1;

    public $_form_submit = -1;

    public $_form_validate = -1;

    public $_editor_fld = '';

    public $_page_reset = 1;

    public $_confirm_delete = '';

    public $_confirm_copy = '';

    public $_activ_id = 0;

    public $_fld_id = 'id';

    public $_workflow_scope = '';

    public $_workflow_state = array();

    public function __construct($id = '', $tpl = '') {
        $this->oValidator = dbx()->get_system_obj('dbxValidator');
        $this->oTPL       = dbx()->get_system_obj('dbxTPL');
        $this->oDB        = dbx()->get_system_obj('dbxDB');
 
        if (!$tpl) {
            $tpl = $id;
        }
 
        if ($id) {
            $this->init($id, $tpl);
        }
    }

    public function __destruct() {
    }

    public function clear_sys() {
        $this->_sys = array();
    }

    public function clear() {
        $this->_forward_clear();
    }
 
 

    public function _forward_clear() {
        $this->_reload_record = 0;
        $this->_reload_run    = 0;
 
        $this->_obj       = array();
        $this->_js        = array();
        $this->_css       = array();
        $this->_flds      = array();
        $this->_messages  = array();
        $this->_infos     = array();
        $this->_errors    = array();
        $this->_validation_results = array();
        $this->_warnings  = array();
        $this->_post      = array();
        $this->_sys       = array();
        $this->_data      = array();
        $this->_replaces  = array();
        $this->_module_bar_form_actions = array();
        $this->_form_help_button = '';
        $this->_form_help_enabled = 1;
 
        $this->_fld_changes   = -1;
        $this->_form_submit   = -1;
        $this->_form_validate = -1;
        $this->_general_error = '';
        $this->_msg_info      = '#form_msg_info#';
        $this->_msg_success   = '#form_msg_success#';
        $this->_msg_error     = '#form_msg_error#';
        $this->_msg_warning   = '#form_msg_warning#';
 
        $this->_rid     = 0;
        $this->_action  = '';
        $this->_next_i  = 0;
        $this->_fld_id  = 'id';
        $this->_callback_owner = null;
        $this->_callback_id    = '';
        $this->_callbacks      = array();
 
        $this->_dd = '';
        $this->_fd = '';
        $this->_editor_files = array();
    }

    public function set_editor_class_file(string $file) {
        $this->_editor_class_file = $file;
        $this->add_editor_file('class', $file);
    }

    protected function add_editor_file(string $kind, string $file) {
        $file = trim($file);
        $kind = strtolower(trim($kind));
 
        if ($file === '' || $kind === '') {
            return;
        }
 
        $path = dbx()->editor_file_path($file);
        $key  = $kind . '|' . $path;
        $this->_editor_files[$key] = array('kind' => $kind, 'file' => $path);
        dbx()->register_editor_file($kind, $path);
    }

    protected function add_editor_markers(string $content): string {
        $edit = (int) dbx()->get_system_var('dbx_edit', 0, 'int');
 
        if (($edit >= 4 && $edit <= 8) || $edit === 9) {
            return $content;
        }
 
        if ($this->_editor_class_file !== '') {
            $this->add_editor_file('class', $this->_editor_class_file);
        }
 
        foreach (dbx()->get_editor_files() as $file) {
            if (isset($file['kind'], $file['file'])) {
                $this->add_editor_file($file['kind'], $file['file']);
            }
        }
 
        if ($content === '' || !$this->_editor_files) {
            return $content;
        }
 
        $markers = '';
 
        foreach ($this->_editor_files as $file) {
            $kind = strtolower((string) ($file['kind'] ?? ''));
 
            // FD/DD-Marker werden pro Feld in create_fld() gesetzt.
            if ($kind === 'fd' || $kind === 'dd') {
                continue;
            }
 
            $marker = dbx()->editor_marker($file['kind'], $file['file']);
            $needle = trim($marker);
 
            if ($marker !== '' && strpos($content, $needle) === false && strpos($markers, $needle) === false) {
                $markers .= $marker;
            }
        }
 
        if ($markers === '') {
            return $content;
        }
 
        return $markers . $content . "\n<!-- DBX-EDITOR-END -->\n";
    }
 
    public function set_form_callback_owner($owner): void {
        $this->set_callback_owner($owner);
    }
 
    public function set_init_callback(string $callback): void {
        $this->set_callback('init', $callback);
    }
 
    public function set_submit_callback(string $callback): void {
        $this->set_callback('submit', $callback);
    }
 
    public function set_run_callback(string $callback): void {
        $this->set_callback('run', $callback);
    }

    protected function resolve_init_callback_owner() {
        $trace = debug_backtrace(
            DEBUG_BACKTRACE_PROVIDE_OBJECT | DEBUG_BACKTRACE_IGNORE_ARGS,
            8
        );
        foreach ($trace as $frame) {
            $owner = $frame['object'] ?? null;
            if (is_object($owner)
                && $owner !== $this
                && !($owner instanceof dbxApi)) {
                return $owner;
            }
        }
 
        return dbx()->get_current_owner();
    }
 
 

    public function forward_init($fid, $tpl = '') {
        $this->clear();
 
        // Der beim Aufbau aktive Modul-/Service-Owner ist der sichere Default
        // fuer alle spaeteren Form- und Report-Callbacks. Explizites
        // set_callback_owner() kann diesen Wert weiterhin ueberschreiben.
        $owner = $this->resolve_init_callback_owner();
        if (is_object($owner) && $owner !== $this) {
            $this->set_callback_owner($owner);
        }
 
        if ($tpl == '') {
            $tpl = $fid;
        }
 
        $i = $this->next_i();
 
        $this->_fid          = $fid;
        $this->set_callback_id($fid);
        $this->_dbx_modul    = dbx()->get_system_var('dbx_activ_modul', 'modul');
        $this->_dbx_action   = dbx()->get_system_var('dbx_activ_action', 'run');
        $this->_dbx_page     = dbx()->get_system_var('dbx_page', 'default');
        $this->_dbx_design   = dbx()->get_system_var('dbx_design', 'default');
        $this->_dbx_lng      = dbx()->get_system_var('dbx_lng', 'de');
        $this->_dbx_modul_id = dbx()->get_system_var('dbx_activ_modul_id', 1);
        $this->_tpl          = $tpl;
        $this->_data         = array();
        $this->_next_i       = $i;
        $this->_form_validate = -1;
        $this->_form_submit   = -1;
 
 
        $init = array(
            'fid' => $this->_fid,
            'tpl' => $this->_tpl,
            'i'   => $this->_next_i,
        );
 
        $init = $this->callback('init', $init);
 
        if (is_array($init)) {
            if (isset($init['fid'])) $this->_fid = $init['fid'];
            if (isset($init['tpl'])) $this->_tpl = $init['tpl'];
            if (isset($init['i']))   $this->_next_i = $init['i'];
        }
 
        $this->_sys = $this->load_sysdata();
 
        $this->load_workflow_state();
 
        $secure_fld = $this->secure_fld_name();
        $this->add_fld($secure_fld, 'dbx|hidden', $secure_fld, rules: 'parameter', dd: '');
        $this->sync_secure_field($secure_fld, $this->secure_token($secure_fld));
        $this->attachAdminHelpButton();
        $this->add_default_search_rep();
    }

    public function add_module_bar(
        $title,
        $icon = 'bi-grid',
        $subtitle = '',
        $replace = false
    ) {
        if ($replace || !isset($this->_replaces['bar_title']) || (string)$this->_replaces['bar_title'] === '') {
            $this->add_rep('bar_title', (string)$title);
        }
        if ($replace || !isset($this->_replaces['bar_icon']) || (string)$this->_replaces['bar_icon'] === '') {
            $this->add_rep('bar_icon', (string)$icon);
        }
        if ($replace || !isset($this->_replaces['bar_subtitle']) || (string)$this->_replaces['bar_subtitle'] === '') {
            $this->add_rep('bar_subtitle', (string)$subtitle);
        }
    }

    public function set_form_help_enabled(bool $enabled = true): self {
        $this->_form_help_enabled = $enabled ? 1 : 0;
        if (!$enabled) {
            $this->_form_help_button = '';
            unset($this->_obj['help_button']);
        }
        return $this;
    }
 
    public function add_module_bar_form_actions(array $options = array()) {
        $defaults = array(
            'save'         => true,
            'delete'       => false,
            'reload'       => true,
            'reload_url'   => '',
            'delete_url'   => '',
            'delete_title' => 'Datensatz loeschen',
            'delete_hint'  => 'Dieser Vorgang kann nicht rueckgaengig gemacht werden.',
        );
        $this->_module_bar_form_actions = array_merge($defaults, $options);
    }
 
    public function prepare_form_shell(array $options = array()) {
        if (!isset($this->_replaces['form_shell_class'])) {
            $this->add_rep('form_shell_class', (string)($options['class'] ?? ''));
        }
        if (!isset($this->_replaces['form_class'])) {
            $this->add_rep('form_class', (string)($options['form_class'] ?? ''));
        }
        if (!isset($this->_replaces['form_attrs'])) {
            $this->add_rep('form_attrs', (string)($options['form_attrs'] ?? ''));
        }
    }
 
    protected function defaultModuleBarReplaces(): array {
        return array(
            'bar_class'               => 'dbx-module-bar',
            'bar_title_class'         => 'dbx-module-bar-titleblock',
            'bar_actions_class'       => 'dbx-module-bar-actions',
            'bar_title'               => '',
            'bar_icon'                => 'bi-grid',
            'bar_subtitle'            => '',
            'bar_title_pre'           => '',
            'bar_title_heading_attrs' => '',
            'bar_actions'             => '',
            'bar_extra'               => '',
            'bar_middle'              => '',
        );
    }
 
    protected function prepareFormFrameReplaces(int $i): void {
        $formClass = trim((string)($this->_replaces['form_class'] ?? ''));
        $formAttrs = trim((string)($this->_replaces['form_attrs'] ?? ''));
        $shellClass = trim((string)($this->_replaces['form_shell_class'] ?? ''));
        $panelClass = trim('dbxForm_wrapper ' . $shellClass);
        $frameId = trim((string)($this->_replaces['frame_id'] ?? ''));
        $formAction = dbx()->action_url((string)$this->_action);
        if ($frameId === '') {
            $frameId = 'dbx_target_' . $i;
        }
 
        $this->add_rep('frame_id', $frameId);
        if (trim((string)($this->_replaces['frame_panel_class'] ?? '')) === '') {
            $this->add_rep('frame_panel_class', $panelClass);
        }
        $this->add_rep('frame_panel_attrs', (string)($this->_replaces['frame_panel_attrs'] ?? ''));
        $this->add_rep('frame_subbar', '');
        $this->add_rep('frame_body_class', '');
        if ((string)($this->_replaces['frame_skip_form_wrap'] ?? '') !== '1') {
            $this->add_rep('frame_form_open', '<form action="' . htmlspecialchars($formAction, ENT_QUOTES) . '" method="post" id="dbx_form_' . $i . '" class="dbxAjax' . ($formClass !== '' ? ' ' . $formClass : '') . '"' . ($formAttrs !== '' ? ' ' . $formAttrs : '') . '>');
            $this->add_rep('frame_body_head', '<div class="row"><div class="col">{obj:form_msg}</div></div>');
            $this->add_rep('frame_form_close', '</form>');
        } else {
            if (!isset($this->_replaces['frame_form_open'])) {
                $this->add_rep('frame_form_open', '');
            }
            if (!isset($this->_replaces['frame_body_head'])) {
                $this->add_rep('frame_body_head', '');
            }
            if (!isset($this->_replaces['frame_form_close'])) {
                $this->add_rep('frame_form_close', '');
            }
        }
        $this->add_rep('frame_body_tail', '');
    }
 
    protected function applyModuleBarReplaces(array $values = array()): void {
        $defaults = array_merge($this->defaultModuleBarReplaces(), $values);
 
        foreach ($defaults as $key => $value) {
            $this->add_rep($key, (string) $value);
        }
    }
 
    protected function buildModuleBarFormActionsHtml() {
        if (!$this->_module_bar_form_actions) {
            return '';
        }
 
        $opts = $this->_module_bar_form_actions;
        $i = (int)$this->_next_i;
        if ($i <= 0) {
            $i = (int)$this->next_i();
        }
 
        $formId = 'dbx_form_' . $i;
        $html = '';
 
        if (!empty($opts['save'])) {
            $html .= $this->get_tpl('dbx|button-bar-save', array(
                'bar_form_id' => $formId,
            ));
        }
 
        if (!empty($opts['delete']) && trim((string)($opts['delete_url'] ?? '')) !== '') {
            $html .= $this->get_tpl('dbx|button-bar-delete', array(
                'bar_delete_url'   => htmlspecialchars((string)($opts['delete_url'] ?? ''), ENT_QUOTES),
                'bar_delete_title' => htmlspecialchars((string)($opts['delete_title'] ?? 'Datensatz loeschen'), ENT_QUOTES),
                'bar_delete_hint'  => htmlspecialchars((string)($opts['delete_hint'] ?? ''), ENT_QUOTES),
            ));
        }
 
        if (!empty($opts['reload'])) {
            $reloadUrl = trim((string)($opts['reload_url'] ?? ''));
            if ($reloadUrl === '') {
                $reloadUrl = (string)$this->_action;
            }
 
            $html .= $this->get_tpl('dbx|button-bar-reload', array(
                'bar_reload_url' => htmlspecialchars($reloadUrl, ENT_QUOTES),
            ));
        }
 
        return $html;
    }
 
    protected function buildModuleBarObj() {
        $modul = (string)dbx()->get_system_var('dbx_modul', '');
 
        try {
            $help = dbx()->get_include_obj('dbxAdminHelp', 'dbxAdmin');
            $topic = $help->resolveTopic($modul);
 
            $actions = trim((string)($this->_replaces['bar_actions'] ?? ''));
            if ($actions === '' && isset($this->_obj['bar_actions'])) {
                $actions = (string)$this->_obj['bar_actions'];
            }
 
            $formActions = $this->buildModuleBarFormActionsHtml();
            if ($formActions !== '') {
                $actions = ($actions !== '') ? ($actions . ' ' . $formActions) : $formActions;
            }
 
            $title = (string)($this->_replaces['bar_title'] ?? '');
            $icon = (string)($this->_replaces['bar_icon'] ?? 'bi-grid');
            $subtitle = (string)($this->_replaces['bar_subtitle'] ?? '');
 
            $fdTitle = $this->get_fd_message('bar_title', '');
            $fdSubtitle = $this->get_fd_message('bar_subtitle', '');
            $fdIcon = $this->get_fd_message('bar_icon', '');
            $meta = array();
 
            if ($topic !== '') {
                $meta = $help->barMeta($topic);
                if (is_array($meta) && $meta) {
                    if ($title === '') {
                        $title = (string)($meta['title'] ?? $topic);
                    }
                    if ($icon === '' || $icon === 'bi-grid') {
                        $icon = (string)($meta['icon'] ?? 'bi-grid');
                    }
                    if ($subtitle === '') {
                        $subtitle = (string)($meta['subtitle'] ?? '');
                    }
                }
            }
 
            // Eine aktive FD ist für Formulare und Reports die verbindliche
            // sprachabhängige Quelle. Sie ersetzt automatisch leere oder von
            // der generischen Admin-Hilfe stammende Metadaten. Ein Modul darf
            // weiterhin bewusst einen spezielleren, ebenfalls aus der FD
            // gelesenen Formulartitel setzen.
            $metaTitle = (string)($meta['title'] ?? '');
            $metaSubtitle = (string)($meta['subtitle'] ?? '');
            if (
                $fdTitle !== '' &&
                ($title === '' || $title === $metaTitle || $title === $fdTitle)
            ) {
                $title = $fdTitle;
            }
            if (
                $fdSubtitle !== '' &&
                (
                    $subtitle === '' ||
                    $subtitle === $metaSubtitle ||
                    $subtitle === $fdSubtitle
                )
            ) {
                $subtitle = $fdSubtitle;
            }
            if ($fdIcon !== '') {
                $icon = $fdIcon;
            }
 
            $helpButton = '';
            if ($this->_form_help_enabled) {
                if ($topic !== '') {
                    $helpButton = $help->button($topic);
                } elseif (isset($this->_obj['help_button'])) {
                    $helpButton = (string)$this->_obj['help_button'];
                }
                if ($helpButton === '' && method_exists($help, 'formButton')) {
                    $helpButton = $help->formButton($modul, (string)$this->_fid, $title);
                }
            }
            $this->_form_help_button = $helpButton;
 
            $barExtra = trim((string)($this->_replaces['bar_extra'] ?? ''));
            $visibleBarActions = $actions . $barExtra;
            if ($helpButton !== '' && strpos($visibleBarActions, 'bi-question-circle') === false) {
                $barExtra .= $helpButton;
            }
 
            $barClass = trim((string)($this->_replaces['bar_class'] ?? ''));
            if ($barClass === '') {
                $barClass = 'dbx-module-bar';
            }
 
            $this->applyModuleBarReplaces(array(
                'bar_class'    => $barClass,
                'bar_title'    => $title,
                'bar_icon'     => $icon !== '' ? $icon : 'bi-grid',
                'bar_subtitle' => $subtitle,
                'bar_actions'  => $actions,
                'bar_extra'    => $barExtra,
            ));
        } catch (\Throwable $e) {
        }
    }

    protected function ensureFormHelpBar(string $content): string {
        if (!$this->_form_help_enabled || $content === '' || $this->_form_help_button === '' || stripos($content, '<form') === false) {
            return $content;
        }
        if (strpos($content, 'bi-question-circle') !== false
            || strpos($content, 'dbx_run1=help') !== false) {
            return $content;
        }
 
        $title = trim((string)($this->_replaces['bar_title'] ?? ''));
        if ($title === '') {
            $title = ucwords(str_replace(array('-', '_', '.'), ' ', (string)$this->_fid));
        }
        $bar = $this->get_tpl('dbx|form-help-bar', array(
            'form_help_title' => htmlspecialchars($title, ENT_QUOTES, 'UTF-8'),
            'form_help_icon' => htmlspecialchars((string)($this->_replaces['bar_icon'] ?? 'bi-ui-checks'), ENT_QUOTES, 'UTF-8'),
            'form_help_button' => $this->_form_help_button,
        ));
        if (trim($bar) === '') {
            return $content;
        }
 
        return (string)preg_replace_callback('/<form\b[^>]*>/i', static function ($match) use ($bar) {
            return $match[0] . $bar;
        }, $content, 1);
    }
 
    protected function attachAdminHelpButton($topic = '') {
        $modul = (string)dbx()->get_system_var('dbx_modul', '');
        if ($modul !== 'dbxAdmin' && !str_ends_with($modul, '_admin')) {
            return;
        }
 
        try {
            $help = dbx()->get_include_obj('dbxAdminHelp', 'dbxAdmin');
            if ($topic === '') {
                $topic = $help->resolveTopic($modul);
            }
            if ($topic === '') {
                return;
            }
            $this->add_obj('help_button', $help->button($topic));
 
            $barMeta = $help->barMeta($topic);
            if (is_array($barMeta) && $barMeta) {
                $this->add_module_bar(
                    (string)($barMeta['title'] ?? ''),
                    (string)($barMeta['icon'] ?? 'bi-grid'),
                    (string)($barMeta['subtitle'] ?? '')
                );
            }
        } catch (\Throwable $e) {
        }
    }
 
    private function get_token(): string {
        try {
            return bin2hex(random_bytes(32));
        } catch (\Throwable $e) {
            return hash('sha256', uniqid('', true) . '|' . mt_rand());
        }
    }
 
    private function secure_fld_name(): string {
        return '_' . (string)$this->_fid;
    }
 
    private function secure_token(string $fld): string {
        if (!isset($this->_sys['_csrf']) || !is_array($this->_sys['_csrf'])) {
            $this->_sys['_csrf'] = array();
        }
 
        $token = (string)($this->_sys['_csrf'][$fld] ?? $this->_sys[$fld] ?? '');
        if (!preg_match('/^[a-f0-9]{64}$/', $token)) {
            $token = $this->get_token();
        }
 
        $this->_sys['_csrf'][$fld] = $token;
        $this->_sys[$fld] = $token;
        $this->_data[$fld] = $token;
 
        return $token;
    }
 
    private function sync_secure_field(string $fld, string $token): void {
        $this->_sys['_csrf'][$fld] = $token;
        $this->_sys[$fld] = $token;
        $this->_data[$fld] = $token;
 
        if (isset($this->_flds[$fld])) {
            $this->_flds[$fld]['value'] = $token;
            $this->_flds[$fld]['origin'] = 'csrf';
            $this->_flds[$fld]['verify'] = 1;
            $this->_flds[$fld]['error'] = 0;
        }
    }
 
    private function rotate_secure_token(string $fld): void {
        $this->sync_secure_field($fld, $this->get_token());
    }

    public function get_security_data(): array {
        $fld = $this->secure_fld_name();
        $token = $this->secure_token($fld);
 
        // AJAX-gesteuerte Formulare rufen nicht zwingend run() auf. Ohne
        // diese Speicherung würde ein hier erstmals erzeugter oder nach
        // submit() rotierter Token nur im aktuellen Objekt existieren und
        // der nächste Request wieder den alten Sessionstand laden.
        $this->store_sysdata();
 
        return array(
            'name' => $fld,
            'value' => $token,
        );
    }
 

    public function url_to_array($data) {
        if (!is_array($data)) {
            $first = substr((string) $data, 0, 1);
 
            if ($data && $first != '=') {
                if (strpos((string) $data, '=') !== false) {
                    parse_str($data, $xdata);
                    $data = $xdata;
                }
            }
        }
 
        return $data;
    }

    public function set_msg_info($msg) {
        $this->_msg_info = $msg;
    }

    public function set_msg_ok($msg) {
        $this->_msg_success = $msg;
    }

    public function set_msg_error($msg) {
        $this->_msg_error = $msg;
    }

    public function set_error($msg) {
        $this->_msg_error = $msg;
        $this->_general_error = $msg;
    }

    public function set_msg_warning($msg) {
        $this->_msg_warning = $msg;
    }

    public function get_fd_message(string $key, string $default = ''): string {
        if (!array_key_exists($key, $this->_messages)) {
            return $default;
        }
 
        $message = $this->_messages[$key];
 
        return is_scalar($message) ? (string)$message : $default;
    }

    public function format_fd_message(
        string $key,
        array $values = array(),
        string $default = ''
    ): string {
        $message = $this->get_fd_message($key, $default);
        if ($message === '' || $values === array()) {
            return $message;
        }
 
        $replacements = array();
        foreach ($values as $placeholder => $value) {
            if (!is_scalar($value) && $value !== null) {
                continue;
            }
            $replacements['{' . trim((string)$placeholder, '{}') . '}'] =
                (string)$value;
        }
 
        return strtr($message, $replacements);
    }

    public function load_fd_messages(string $fd = ''): array {
        $source = trim($fd);
        if ($source === '') {
            $source = trim((string)$this->_fd);
        }
        if ($source === '') {
            return $this->_messages;
        }
        if (strpos($source, 'fd:') !== 0) {
            $source = 'fd:' . $source;
        }
 
        $this->get_dd_fields_source($source);
 
        return $this->_messages;
    }

    private function apply_fd_messages(array $messages): void {
        if (
            !isset($messages['save_success']) &&
            isset($messages['save_succeass'])
        ) {
            $messages['save_success'] = $messages['save_succeass'];
        }
 
        if (
            !isset($messages['save_succeass']) &&
            isset($messages['save_success'])
        ) {
            $messages['save_succeass'] = $messages['save_success'];
        }
 
        $this->_messages = array_merge($this->_messages, $messages);
    }

    public function get_fld_id($fld) {
        return dbx()->part_select(' name="', '"', $fld);
    }

    public function add_norep($content) {
        $oTPL = dbx()->get_system_obj('dbxTPL');
        if (is_object($oTPL) && method_exists($oTPL, 'cleanup_optional_placeholders')) {
            $content = $oTPL->cleanup_optional_placeholders((string)$content);
        }
 
        if (isset($_SESSION['dbx']['norep']) && is_array($_SESSION['dbx']['norep'])) {
            $xnorep = $_SESSION['dbx']['norep'];
 
            for ($i = 0; $i < 2; $i++) {
                foreach ($xnorep as $id => $norep) {
                    $xid = '[' . $id . ']';
                    $content = str_replace($xid, $norep, $content);
                }
            }
        }
 
        return $content;
    }

    public function fast_response($response, $interpreter = 0) {
        if ($interpreter) {
            $oInterpreter = dbx()->get_system_obj('dbxInterpreter');
            $response = $oInterpreter->run($response);
            $response = $this->add_norep($response);
        }
 
        echo $response;
        exit;
    }

    public function get_tpl($tpl, $data = '', $type = 'htm', $i = 0) {
        return $this->oTPL->get_tpl($tpl, $data, $type, $i);
    }

    public function obv_value($content, $id, $value) {
        $rep = '{obv:' . $id . '}';
        $val = '';
 
        if (is_string($value)) {
            $val = htmlspecialchars($value, ENT_QUOTES);
            $content = str_replace($rep, $val, $content);
        }
 
        return $content;
    }

    public function merge_tpl_data($tpl, $i = 0) {
        $editor = dbx()->get_system_var('dbx_editor', 0, 'int');
 
        if (!$i && !$editor) {
            $i = $this->_next_i;
        }
 
        $replaces = array();
        $replaces['dbx_modul']  = $this->_dbx_modul;
        $replaces['dbx_run1']   = $this->_dbx_action;
        $replaces['dbx_page']   = $this->_dbx_page;
        $replaces['dbx_design'] = $this->_dbx_design;
        $replaces['dbx_lng']    = $this->_dbx_lng;
        $replaces['action']     = dbx()->action_url((string)$this->_action);
        $replaces['fid']        = $this->_fid;
        $replaces['rid']        = $this->_rid;
        $replaces['self']       = dbx()->get_self_url();
 
        if ($i) {
            $replaces['i'] = $i;
        }
 
        return $this->oTPL->replaces($tpl, $replaces);
    }

    public function merge_obj($content, $i = 0) {
        if (is_array($this->_obj)) {
            foreach ($this->_obj as $id => $obj) {
                $fid = '{obj:' . $id . '}';
                $obj = $this->oTPL->replaces($obj, $this->_replaces);
                $content = str_replace($fid, $obj, $content);
            }
        }
 
        return $content;
    }

    public function store_sysdata() {
        $section = $this->_fid;
        $modul   = $this->_dbx_modul;
        $mode    = $this->_store_mode;
        $value   = $this->_sys;
        $key     = 'sysdata';
 
        if ($section && $mode == 'session') {
            dbx()->set_session_var($key, $value, $section, $modul);
        }
    }

    public function load_sysdata() {
        $sysdata = array();
        $section = $this->_fid;
        $modul   = $this->_dbx_modul;
        $key     = 'sysdata';
        $empty   = array();
 
        if ($section) {
            $sysdata = dbx()->get_session_var($key, $empty, $section, $modul);
        }
 
        return is_array($sysdata) ? $sysdata : array();
    }

    public function get_activ_id($key = '') {
        if (!$key) {
            $key = $this->_dd;
        }
 
        $xkey = '_activ-row_id_' . $key;
        return dbx()->get_remember_var($xkey, 0, 'dbx');
    }

    public function set_activ_id($value, $key = '') {
        if (!$key) {
            $key = $this->_dd;
        }
 
        $xkey = '_activ-row_id_' . $key;
        dbx()->set_remember_var($xkey, $value, 'dbx');
    }

    public function add_rep($key, $val) {
        $this->_replaces[$key] = $val;
    }

    public function replaces($content, $replaces = null): string {
        if ($replaces === null) {
            $replaces = $this->_replaces;
        }
 
        return $this->oTPL->replaces(
            (string)$content,
            is_array($replaces) ? $replaces : array()
        );
    }

    public function add_js_code($javascript) {
        if ($javascript !== '') {
            $this->_js[] = $javascript;
        }
    }

    public function add_js_call($target, $function, $args = '') {
        $js = $function . "('" . addslashes((string) $target) . "'";
 
        if ($args !== '') {
            $js .= ',' . $args;
        }
 
        $js .= ');';
 
        $this->_js[] = $js;
    }

    public function update_error_fld($name, $msg) {
        foreach ($this->_flds as $no => $fld) {
            if (($fld['name'] ?? '') == $name) {
                $fld['error']  = 1;
                $fld['verify'] = 1;
                $fld['data']['class']    = trim(($fld['data']['class'] ?? '') . ' fld-error');
                $fld['data']['errormsg'] = $msg;
                $this->_flds[$no] = $fld;
                break;
            }
        }
    }

    public function add_fld_error($name, $msg = '') {
        dbx()->debug("add fld-error fld=($name) Msg=($msg)");
        $this->_errors[$name] = $msg;
        $this->update_error_fld($name, $msg);
    }

    public function get_validation_result(string $name = ''): array {
        if ($name === '') {
            return $this->_validation_results;
        }
 
        $result = $this->_validation_results[$name] ?? array();
        return is_array($result) ? $result : array();
    }

    protected function remember_validation_result(string $name, array $result): void {
        if ($name !== '') {
            $this->_validation_results[$name] = $result;
        }
    }

    public function add_fld_warning($name, $msg = '') {
        $this->_warnings[$name] = $msg;
    }

    private function resolve_fld_val($name, $default = '', $rules = '', $useRequest = true, $fallbackToState = true) {
        $stateValue = $default;
        $origin     = 'default';
 
        if (isset($this->_data[$name])) {
            $stateValue = $this->_data[$name];
            $origin     = 'data';
        }
 
        if (isset($this->_sys[$name])) {
            $stateValue = $this->_sys[$name];
            $origin     = 'sys';
        }
 
        $value = $fallbackToState ? $stateValue : $default;
 
        if (!$fallbackToState) {
            $origin = 'default';
        }
 
        if ($useRequest) {
            if (isset($_POST[$name])) {
                $value  = $_POST[$name];
                $origin = 'post';
            } elseif (isset($_GET[$name])) {
                $value  = $_GET[$name];
                $origin = 'get';
            }
        }
 
        if ($value === null) {
            $value = '';
        }
 
        $ok = true;
        $validation = array();
 
        if ($rules) {
            $validation = $this->oValidator->validateResult($value, $rules, $name);
            $ok = (bool)($validation['valid'] ?? false);
            $this->remember_validation_result((string)$name, $validation);
 
            // Normalisierung bleibt ausdrücklich opt-in. Dadurch ändern
            // bestehende Regeln keine Datentypen oder gespeicherten Werte.
            if ($ok && preg_match('/(?:^|\|)trim(?:\||$)/', (string)$rules)) {
                $value = $validation['normalized'] ?? $value;
            }
        }
 
        return array(
            'value'      => $value,
            'origin'     => $origin,
            'ok'         => $ok ? 1 : 0,
            'validation' => $validation,
        );
    }
 
    public function get_fld_val($name, $default = '', $rules = '', $submit = -1) {
        $resolved = $this->resolve_fld_val($name, $default, $rules, true, true);
        $value    = $resolved['value'];
 
        if (!$resolved['ok']) {
            $this->add_fld_error($name, 'f:' . $rules);
            $value = $default;
        }
 
        $this->_data[$name] = $value;
        $this->_sys[$name]  = $value;
 
        if (isset($this->_flds[$name])) {
            $this->_flds[$name]['value']  = $value;
            $this->_flds[$name]['origin'] = $resolved['origin'];
        }
 
        return $value;
    }
    public function get_fld_value($name, $default = '', $rules = '', $submit = -1) {
        return $this->get_fld_val($name, $default, $rules, $submit);
    }

    public function get_post_data($name, $default = '', $rules = 'parameter') {
        $danger_value = $this->_get_post_data($name, $default);
 
        if ($rules) {
            $validation = $this->oValidator->validateResult($danger_value, $rules, $name);
            $ok = (bool)($validation['valid'] ?? false);
            $this->remember_validation_result((string)$name, $validation);
 
            if (!$ok) {
                $this->add_fld_error($name, 'p:' . $rules);
                $danger_value = $default;
            } elseif (preg_match('/(?:^|\|)trim(?:\||$)/', (string)$rules)) {
                $danger_value = $validation['normalized'] ?? $danger_value;
            }
        }
 
        return $danger_value;
    }

    public function get_post($name, $default = '', $rules = 'alphanum') {
        $danger_value = $this->_get_post($name, $default);
 
        if ($rules) {
            $validation = $this->oValidator->validateResult($danger_value, $rules, $name);
            $ok = (bool)($validation['valid'] ?? false);
            $this->remember_validation_result((string)$name, $validation);
 
            if (!$ok) {
                $this->add_fld_error($name, 'p:' . $rules);
                $danger_value = $default;
            } elseif (preg_match('/(?:^|\|)trim(?:\||$)/', (string)$rules)) {
                $danger_value = $validation['normalized'] ?? $danger_value;
            }
        }
 
        return $danger_value;
    }

    private function _get_post_data($name, $default = '') {
        $set   = 0;
        $value = $default;
 
        if (isset($_POST[$name])) {
            $value = $_POST[$name];
            $set = 1;
        } elseif (isset($_GET[$name])) {
            $value = $_GET[$name];
            $set = 1;
        }
 
        if (!$set && isset($this->_data[$name])) {
            $value = $this->_data[$name];
        }
 
        return $value;
    }

    private function _get_post($name, $default = '') {
        $value = $default;
 
        if (isset($_POST[$name])) {
            $value = $_POST[$name];
        } elseif (isset($_GET[$name])) {
            $value = $_GET[$name];
        }
 
        return $value;
    }

    public function add_obj($obj, $tpl, $data = '', $data2 = '') {
        if ($tpl != 'obj-value' && $tpl != 'obv-value') {
            $tpl = $this->get_tpl($tpl, $data);
        } else {
            if ($tpl == 'obv-value') {
                $tpl = htmlspecialchars((string) $data, ENT_QUOTES);
            }
 
            if ($tpl == 'obj-value') {
                $tpl = $data;
            }
 
            $tpl = $this->oTPL->replaces((string) $tpl, $data2);
        }
 
        $tpl = str_replace('{class}', '', $tpl);
        $tpl = str_replace('{tooltip}', '', $tpl);
 
        $this->_obj[$obj] = $tpl;
    }

    public function add_action($obj, $tpl, $action = '', $data = '') {
        $xaction = $this->_action;
 
        if ($action !== '' && $action[0] == '&') {
            $x_action = $xaction . $action;
        } else {
            $x_action = $action;
        }
 
        $xdata = array();
        $xdata['action'] = dbx()->action_url((string)$x_action);
 
        if (is_array($data)) {
            $xdata = array_merge($xdata, $data);
        }
 
        $tpl = $this->get_tpl($tpl, $xdata);
        $tpl = str_replace('{class}', '', $tpl);
        $tpl = str_replace('{tooltip}', '', $tpl);
 
        $this->_obj[$obj] = $tpl;
    }

    private function get_active_field_source($source = 'fd::'): string {
        if ($source === 'fd::') {
            if ($this->_fd) {
                return (string) $this->_fd;
            }
 
            return (string) $this->_dd;
        }
 
        if ($source === 'dd::') {
            return (string) $this->_dd;
        }
 
        return (string) $source;
    }

    private function get_fld_marker_value_from_records($value, string $var, $field_record = array(), $dd_record = array()) {
        if (!is_array($field_record)) {
            $field_record = array();
        }
 
        if (!is_array($dd_record)) {
            $dd_record = array();
        }
 
        if ($value === 'fd::') {
            return $field_record[$var] ?? '';
        }
 
        if ($value === 'dd::') {
            return $dd_record[$var] ?? '';
        }
 
        return $value;
    }
 
 

    private function get_dd_fields_source(string $dd): array {
        $dd = trim($dd);
 
        if ($dd === '' || $dd === 'dd') {
            return array();
        }
 
        $mod  = 'dd';
        $name = $dd;
 
        foreach (array('cfg:', 'def:', 'mod:', 'fd:', 'dd:') as $prefix) {
            if (strpos($dd, $prefix) === 0) {
                $mod  = substr($prefix, 0, -1);
                $name = substr($dd, strlen($prefix));
                break;
            }
        }
 
        if ($mod === 'dd' && strpos($dd, '|') !== false) {
            $mod  = 'fd';
            $name = $dd;
        }
 
        if ($mod === 'dd') {
            $fields = $this->oDB->get_dd_fields($name);
            if (method_exists($this->oDB, 'get_dd_file')) {
                $this->add_editor_file('dd', $this->oDB->get_dd_file($name));
            }
            return is_array($fields) ? $fields : array();
        }
 
        $dd_file = '';
 
        switch ($mod) {
            case 'cfg':
                $dd_file = dbx()->get_base_dir() . "dbx/modules/$name/cfg/config.dd.php";
                break;
 
            case 'def':
                $dd_file = dbx()->get_base_dir() . "dbx/modules/$name/dd/$name.dd.php";
                break;
 
            case 'mod':
                $modul = dbx()->get_system_var('dbx_activ_modul', 'dbx');
                $dd_file = dbx()->get_base_dir() . "dbx/modules/$modul/dd/$name.dd.php";
                break;
 
            case 'fd':
                $fd_modul = $this->_dbx_modul ? $this->_dbx_modul : dbx()->get_system_var('dbx_activ_modul', 'dbx');
                $fd_name  = $name;
 
                if (strpos($name, '|') !== false) {
                    $parts = explode('|', $name, 2);
                    $fd_modul = trim($parts[0]);
                    $fd_name  = trim($parts[1]);
                }
 
                if ($fd_modul === '') {
                    $fd_modul = dbx()->get_system_var('dbx_activ_modul', 'dbx');
                }
 
                $dd_file = function_exists('dbx_lng_resolve_file')
                    ? dbx_lng_resolve_file(
                        dbx()->get_base_dir() . "dbx/modules/$fd_modul/fd/",
                        $fd_name,
                        'fd.php',
                        $this->_dbx_lng,
                        true
                    )
                    : dbx()->get_base_dir() . "dbx/modules/$fd_modul/fd/$fd_name.fd.php";
                if ($dd_file === '' || !is_file($dd_file)) {
                    $dd_file = dbx()->get_base_dir() . "dbx/modules/$fd_modul/fd/$fd_name.fd.php";
                }
                break;
        }
 
        return $this->read_dd_fields_direct($dd_file);
    }

    private function read_dd_fields_direct(string $dd_file): array {
        $fields  = array();
        $table   = array();
        $indexes = array();
        $messages = array();
 
        $dd_file = dbx()->os_path($dd_file);
 
        if (!file_exists($dd_file)) {
            return array();
        }
 
        $real_file = realpath($dd_file);
        if (!$real_file) {
            $real_file = $dd_file;
        }
 
        $normalized = str_replace('\\', '/', $real_file);
        $kind       = (substr($normalized, -7) === '.fd.php') ? 'fd' : 'dd';
        $mtime      = @filemtime($real_file);
        $size       = @filesize($real_file);
        $cache_key  = md5($normalized);
 
        $this->add_editor_file($kind, $real_file);
        $runtime_cache =& $this->session_cache_section('form', 'field_source_runtime');
        $field_source_cache =& $this->session_cache_section('form', 'field_source');
 
        if (isset($runtime_cache[$cache_key])) {
            $entry = $runtime_cache[$cache_key];
 
            if (
                is_array($entry) &&
                ($entry['mtime'] ?? 0) === $mtime &&
                ($entry['size'] ?? 0) === $size &&
                isset($entry['fields']) &&
                is_array($entry['fields']) &&
                isset($entry['messages']) &&
                is_array($entry['messages'])
            ) {
                if ($kind === 'fd') {
                    $this->apply_fd_messages($entry['messages']);
                }
                return $entry['fields'];
            }
        }
 
        if (
            !isset($field_source_cache[$cache_key]) &&
            isset($_SESSION['dbx']['cache']['field_source'][$cache_key]) &&
            is_array($_SESSION['dbx']['cache']['field_source'][$cache_key])
        ) {
            $field_source_cache[$cache_key] = $_SESSION['dbx']['cache']['field_source'][$cache_key];
            unset($_SESSION['dbx']['cache']['field_source'][$cache_key]);
        }
 
        if (isset($field_source_cache[$cache_key])) {
            $entry = $field_source_cache[$cache_key];
 
            if (
                is_array($entry) &&
                ($entry['mtime'] ?? 0) === $mtime &&
                ($entry['size'] ?? 0) === $size &&
                isset($entry['fields']) &&
                is_array($entry['fields']) &&
                isset($entry['messages']) &&
                is_array($entry['messages'])
            ) {
                $runtime_cache[$cache_key] = $entry;
                if ($kind === 'fd') {
                    $this->apply_fd_messages($entry['messages']);
                }
                return $entry['fields'];
            }
        }
 
        include $real_file;
 
        if (!is_array($fields)) {
            $fields = array();
        }
        if (!is_array($messages)) {
            $messages = array();
        }
 
        $entry = array(
            'path'     => $normalized,
            'kind'     => $kind,
            'mtime'    => $mtime,
            'size'     => $size,
            'fields'   => $fields,
            'messages' => $messages,
        );
 
        $runtime_cache[$cache_key] = $entry;
        $field_source_cache[$cache_key] = $entry;
 
        if ($kind === 'fd') {
            $this->apply_fd_messages($messages);
        }
 
        return $fields;
    }

    private function get_dd_fld(array $fields, string $fld): array {
        foreach ($fields as $record) {
            if (isset($record['name']) && $record['name'] === $fld) {
                return $record;
            }
        }
 
        return array();
    }
 
    private function &session_cache_section(string $bereich, string $section) {
        if (!isset($_SESSION['dbx']) || !is_array($_SESSION['dbx'])) {
            $_SESSION['dbx'] = array();
        }
 
        if (!isset($_SESSION['dbx']['cache']) || !is_array($_SESSION['dbx']['cache'])) {
            $_SESSION['dbx']['cache'] = array();
        }
 
        if (!isset($_SESSION['dbx']['cache'][$bereich]) || !is_array($_SESSION['dbx']['cache'][$bereich])) {
            $_SESSION['dbx']['cache'][$bereich] = array();
        }
 
        if (!isset($_SESSION['dbx']['cache'][$bereich][$section]) || !is_array($_SESSION['dbx']['cache'][$bereich][$section])) {
            $_SESSION['dbx']['cache'][$bereich][$section] = array();
        }
 
        return $_SESSION['dbx']['cache'][$bereich][$section];
    }

    public function get_dd(string $dd, string $fld, string $var) {
        if ($dd === '' || $dd === 'dd') {
            return '';
        }
 
        if ($fld === '') {
            return '';
        }
 
        $cache_key = md5($dd . "\0" . $fld);
        $field_cache =& $this->session_cache_section('form', 'runtime_field');
 
        if (isset($field_cache[$cache_key]) && is_array($field_cache[$cache_key])) {
            $field = $field_cache[$cache_key];
        } else {
            $fields = $this->get_dd_fields_source($dd);
 
            if (!is_array($fields)) {
                $field_cache[$cache_key] = array();
                return '';
            }
 
            $field = $this->get_dd_fld($fields, $fld);
 
            if (!is_array($field)) {
                $field = array();
            }
 
            $field_cache[$cache_key] = $field;
        }
 
        if (!$field) {
            return '';
        }
 
        if ($var === '*') {
            return $field;
        }
 
        return $field[$var] ?? '';
    }

    private function sql_dd_file_exists($modul, $dd) {
        $modul = trim((string) $modul);
        $dd    = trim((string) $dd);
 
        if ($dd === '') {
            return false;
        }
 
        if ($modul === '') {
            $modul = dbx()->get_system_var('dbx_activ_modul', 'dbx');
        }
 
        $file1 = dbx()->os_path(dbx()->get_base_dir() . 'dbx/modules/' . $modul . '/dd/' . $dd . '.dd.php');
        $file2 = dbx()->os_path(dbx()->get_base_dir() . 'dbx/modules/dbx/dd/' . $dd . '.dd.php');
 
        return file_exists($file1) || file_exists($file2);
    }
 
    private function normalize_sql_dd_name($modul, $source) {
        $source = trim((string) $source);
 
        if ($source === '') {
            return '';
        }
 
        $candidates = array(
            $source,
            str_replace('dbx_', 'dbx', $source),
            str_replace(' ', '', ucwords(str_replace('_', ' ', $source))),
            lcfirst(str_replace(' ', '', ucwords(str_replace('_', ' ', $source))))
        );
 
        foreach ($candidates as $candidate) {
            if ($this->sql_dd_file_exists($modul, $candidate)) {
                return $candidate;
            }
        }
 
        return $source;
    }
 
    private function sql_to_array($data) {
        $dd       = '';
        $xkey     = '';
        $flds     = '*';
        $where    = '';
        $order    = '';
        $limit    = 888;
        $asc_desc = 'ASC';
        $xdata    = array();
        $compact_sql_syntax = false;
 
        $data = str_replace('sql:', '', (string) $data);
        $work = explode('|', $data);
 
        if (isset($work[0])) {
            $dd = $work[0];
        }
 
        if (isset($work[1])) {
            $xkey = $work[1];
        }
 
        if ($dd && $xkey && strpos($xkey, ',') !== false) {
            $sqlSource = array_map('trim', explode(',', $xkey));
            $dd        = $this->normalize_sql_dd_name($dd, $sqlSource[0] ?? '');
            $xkey      = $sqlSource[1] ?? 'id';
            $flds      = $sqlSource[2] ?? $xkey;
            $compact_sql_syntax = true;
        }
 
        if (isset($work[2])) {
            if ($compact_sql_syntax) {
                $where = $work[2];
            } else {
                $flds = $work[2];
            }
        }
 
        if (isset($work[3])) {
            if ($compact_sql_syntax) {
                $order = $work[3];
            } else {
                $where = $work[3];
            }
        }
 
        if (isset($work[4])) {
            if ($compact_sql_syntax) {
                if ((int) $work[4] > 0) {
                    $limit = (int) $work[4];
                }
            } else {
                $order = $work[4];
            }
        }
 
        if (!$compact_sql_syntax && isset($work[5]) && (int) $work[5] > 0) {
            $limit = (int) $work[5];
        }
 
        $xdata[0] = 'Bitte auswählen';
 
        if ($order && strpos($order, ' DESC') !== false) {
            $asc_desc = 'DESC';
            $order    = str_replace(' DESC', '', $order);
        }
 
        if ($order && strpos($order, ' ASC') !== false) {
            $asc_desc = 'ASC';
            $order    = str_replace(' ASC', '', $order);
        }
 
        if ($dd) {
            $xflds = $flds;
 
            if (!$xkey) {
                $xkey = 'id';
            }
 
            if (strpos(',' . $xflds . ',', ',' . $xkey . ',') === false && $xflds !== '*') {
                $xflds .= ',' . $xkey;
            }
 
            $data = $this->oDB->select($dd, $where, $xflds, $order, $asc_desc, '', $limit, 0, 0);
 
            if (is_array($data)) {
                $displayFields = ($flds === '*') ? array() : array_map('trim', explode(',', $flds));
 
                foreach ($data as $record) {
                    $value = '';
 
                    foreach ($record as $fld => $val) {
                        $use = ($flds === '*') || in_array($fld, $displayFields, true);
 
                        if ($use) {
                            if ($value !== '') {
                                $value .= ' | ';
                            }
 
                            $value .= $val;
                        }
                    }
 
                    if (isset($record[$xkey])) {
                        $xdata[$record[$xkey]] = $value;
                    }
                }
            }
        }
 
        return $xdata;
    }
 

    public function add_flds($dd = 'fd::') {
        $source = $this->get_active_field_source($dd);
 
        if ($source === '' || $source === 'dd') {
            return 0;
        }
 
        $fields = $this->get_dd_fields_source($source);
 
        if (!is_array($fields) || !$fields) {
            return 0;
        }
 
        $count = 0;
 
        foreach ($fields as $record) {
            if (!is_array($record)) {
                continue;
            }
 
            if (!isset($record['name']) || trim((string) $record['name']) === '') {
                continue;
            }
 
            $name = trim((string) $record['name']);
            $this->add_fld($name, dd: $source);
            $count++;
        }
 
        return $count;
    }
 

    public function add_fld($name, $tpl = 'fd::', $label = 'fd::', $rules = 'fd::', $class = 'fd::', $data = 'fd::', $options = 'fd::', $tooltip = 'fd::', $placeholder = 'fd::', $errormsg = 'fd::', $dd = 'fd::', $remap = 'fd::') {
        $field_source   = $this->get_active_field_source($dd);
        $dd_source      = $this->get_active_field_source('dd::');
        $field_record   = $field_source ? $this->get_dd($field_source, $name, '*') : array();
        $dd_record      = $dd_source ? $this->get_dd($dd_source, $name, '*') : array();
        $source_data    = array();
        $source_options = array();
        $dd_data        = array();
        $dd_options     = array();
 
        if (is_array($field_record) && $field_record) {
            $source_data    = $this->process_array($field_record['data'] ?? '');
            $source_options = $this->process_array($field_record['options'] ?? '');
        }
 
        if (is_array($dd_record) && $dd_record) {
            $dd_data    = $this->process_array($dd_record['data'] ?? '');
            $dd_options = $this->process_array($dd_record['options'] ?? '');
        }
 
        if ($data === 'fd::' || $data === '' || $data === null) {
            $data = $source_data;
        } elseif ($data === 'dd::') {
            $data = $dd_data;
        } else {
            $data = $this->merge_arrays($this->process_array($data), $source_data);
        }
 
        if ($options === 'fd::' || $options === '' || $options === null) {
            $options = $source_options;
        } elseif ($options === 'dd::') {
            $options = $dd_options;
        } else {
            $options = $this->merge_arrays($this->process_array($options), $source_options);
        }
 
        if (isset($data['dd'])) {
            $field_source = $this->get_active_field_source($data['dd']);
            $field_record = $field_source ? $this->get_dd($field_source, $name, '*') : array();
        }
 
        if ($label === 'fd::' && isset($data['label'])) {
            $label = $data['label'];
        }
 
        if ($rules === 'fd::' && isset($data['rules'])) {
            $rules = $data['rules'];
        }
 
        if ($class === 'fd::' && isset($data['class'])) {
            $class = $data['class'];
        }
 
        if ($tooltip === 'fd::' && isset($data['tooltip'])) {
            $tooltip = $data['tooltip'];
        }
 
        if ($placeholder === 'fd::' && isset($data['placeholder'])) {
            $placeholder = $data['placeholder'];
        }
 
        if ($errormsg === 'fd::' && isset($data['errormsg'])) {
            $errormsg = $data['errormsg'];
        }
 
        if ($remap === 'fd::' && isset($data['remap'])) {
            $remap = $data['remap'];
        }
 
        $data['name']        = $name;
        $data['tpl']         = $this->get_fld_marker_value_from_records($tpl,         'tpl',         $field_record, $dd_record);
        $data['label']       = $this->get_fld_marker_value_from_records($label,       'label',       $field_record, $dd_record);
        $data['rules']       = $this->get_fld_marker_value_from_records($rules,       'rules',       $field_record, $dd_record);
        $data['class']       = $this->get_fld_marker_value_from_records($class,       'class',       $field_record, $dd_record);
        $data['tooltip']     = $this->get_fld_marker_value_from_records($tooltip,     'tooltip',     $field_record, $dd_record);
        $data['placeholder'] = $this->get_fld_marker_value_from_records($placeholder, 'placeholder', $field_record, $dd_record);
        $data['errormsg']    = $this->get_fld_marker_value_from_records($errormsg,    'errormsg',    $field_record, $dd_record);
        $data['remap']       = $this->get_fld_marker_value_from_records($remap,       'remap',       $field_record, $dd_record);
 
        $fld = array(
            'name'     => $name,
            'data'     => $data,
            'options'  => $options,
            'label'    => $data['label'],
            'tpl'      => $data['tpl'],
            'rules'    => $data['rules'],
            'remap'    => $data['remap'],
            'value'    => '',
            'origin'   => '',
            'errormsg' => $data['errormsg'],
            'error'    => 0,
            'changed'  => 0,
            'verify'   => 0,
            'dd'       => $field_source,
        );
 
        $this->_flds[$name] = $fld;
        $this->touch_request_state();
    }
    
    private function process_array($input) {
        if (!is_array($input)) {
            if ($input) {
                $data_first = substr((string) $input, 0, 4);
 
                if ($data_first === 'sql:') {
                    $input = $this->sql_to_array($input);
                } else {
                    $input = $this->url_to_array($input);
                }
            } else {
                $input = array();
            }
        }
 
        return is_array($input) ? $input : array();
    }

    private function merge_arrays($primary, $secondary) {
        if (!is_array($primary)) {
            $primary = array();
        }
 
        if (!is_array($secondary)) {
            $secondary = array();
        }
 
        foreach ($secondary as $key => $value) {
            if (!array_key_exists($key, $primary)) {
                $primary[$key] = $value;
            }
        }
 
        return $primary;
    }

    private function touch_request_state() {
        $this->_form_validate = -1;
        $this->_fld_changes   = -1;
        $this->_form_submit   = -1;
    }
 
 
    
    public function check_fld_data($submit, $fld) {
        if (($fld['verify'] ?? 0)) {
            return $fld;
        }
 
        $errormsg  = 'Bitte Eingabe pruefen';
        $name      = $fld['name'] ?? '';
        $fld_rules = $fld['rules'] ?? '';
 
        if (!$submit) {
            $resolved = $this->resolve_fld_val($name, '', '', false, true);
 
            $fld['value']   = $resolved['value'];
            $fld['origin']  = $resolved['origin'];
            $fld['changed'] = 0;
            $fld['error']   = 0;
            $fld['verify']  = 1;
 
            return $fld;
        }
 
        $old       = $this->resolve_fld_val($name, '', '', false, true);
        $old_value = $old['value'];
 
        $resolved = $this->resolve_fld_val($name, '', $fld_rules, true, false);
        $value    = $resolved['value'];
        $ok       = (bool) $resolved['ok'];
        $validation = is_array($resolved['validation'] ?? null)
            ? $resolved['validation']
            : array();
 
        $fld['origin'] = $resolved['origin'];
        $fld['error']  = $ok ? 0 : 1;
        $fld['value']  = $value;
        $fld['validation'] = $validation;
 
        if (!empty($fld['data']['errormsg'])) {
            $errormsg = $fld['data']['errormsg'];
        } elseif (!$ok && !empty($validation['message'])) {
            $errormsg = (string)$validation['message'];
        }
 
        if ($fld['error']) {
            $this->add_fld_error($name, $errormsg);
            $fld['data']['errormsg'] = $errormsg;
        }
 
        $value_compare = $value;
 
        if (is_array($value_compare)) {
            $values = '';
 
            foreach ($value_compare as $keyval) {
                if ($values !== '') {
                    $values .= ',';
                }
 
                $values .= $keyval;
            }
 
            $value_compare = $values;
        }
 
        $change = $this->_fld_change_state;
 
        if ($value_compare != $old_value || $change == '*') {
            $fld['changed'] = 1;
        } else {
            $fld['changed'] = 0;
        }
 
        if (!$fld['error'] && $fld['changed']) {
            $this->_post[$name] = $value_compare;
        }
 
        $fld['verify'] = 1;
 
        return $fld;
    }
 

    public function check_flds_data($submit) {
        if ($this->_form_validate == 1) {
            return;
        }
 
        $this->_post     = array();
        $this->_errors   = array();
        $this->_warnings = array();
 
        foreach ($this->_flds as $no => $fld) {
            $fld = $this->check_fld_data($submit, $fld);
            $this->_flds[$no] = $fld;
        }
 
        $this->_form_validate = 1;
        $this->_fld_changes   = -1;
    }

    private function evaluate_request() {
        if ($this->_form_validate == 1 && $this->_form_submit > -1) {
            dbx()->debug("dbxForm submit cached: fid=({$this->_fid}) submit=({$this->_form_submit})");
            return;
        }
 
        $submit = 0;
        $fld = $this->secure_fld_name();
        $secure = $this->secure_token($fld);
        $posted = '';
        $hasPost = 0;
        $match = 0;
 
        if ($fld !== '' && isset($_POST[$fld])) {
            $posted = (string)$_POST[$fld];
            $hasPost = 1;
 
            if ($secure !== '' && hash_equals($secure, $posted)) {
                $submit = 1;
                $match = 1;
            }
        }
 
        dbx()->debug(
            "dbxForm submit evaluate: fid=({$this->_fid}) field=($fld) post=($hasPost) match=($match) submit=($submit)"
        );
 
        $this->_form_submit = $submit;
        $this->check_flds_data($submit);
 
        if ($submit) {
            $this->rotate_secure_token($fld);
        } else {
            $this->sync_secure_field($fld, $secure);
        }
    }

    public function get_form_msg($mode, $msg = '') {
        if (!$msg) {
            return '';
        }
 
        $file = $this->_tpl_form_info;
        $tpl  = '';
 
        if ($mode == 'success') {
            $file = $this->_tpl_form_success;
        }
 
        if ($mode == 'error') {
            $file = $this->_tpl_form_error;
        }
 
        if ($mode == 'info') {
            $file = $this->_tpl_form_info;
        }
 
        if ($mode == 'warning') {
            $file = $this->_tpl_form_warning;
        }
 
        if ($file) {
            $tpl = $this->get_tpl($file);
            $tpl = str_replace('{msg}', $msg, $tpl);
        }
 
        return str_replace('{class}', $mode, $tpl);
    }

    public function get_fld_msg($mode, $msg = '') {
        $file = '';
        $tpl  = '';
 
        if ($mode == 'success') {
            $file = $this->_tpl_fld_success;
        }
 
        if ($mode == 'error') {
            $file = $this->_tpl_fld_error;
        }
 
        if ($mode == 'info') {
            $file = $this->_tpl_fld_info;
        }
 
        if ($mode == 'warning') {
            $file = $this->_tpl_fld_warning;
        }
 
        if ($file) {
            $tpl = $this->get_tpl($file);
            $tpl = str_replace('{msg}', $msg, $tpl);
        }
 
        return $tpl;
    }

    public function get_quartal($datum) {
        return '3/25';
    }

    public function php_date_usr($value) {
        if (trim((string) $value) !== '') {
            $timestamp = strtotime((string) $value);
 
            if ($timestamp !== false) {
                $value = date('d.m.Y', $timestamp);
                $value = substr($value, 0, 10);
            }
        }
 
        return (string) $value;
    }

    public function php_datetime_usr($value) {
        $raw = trim((string) $value);
 
        if ($raw !== '') {
            $ms = '';
 
            if (preg_match('/\.(\d+)$/', $raw, $match)) {
                $ms = '.' . $match[1];
            }
 
            $timestamp = strtotime($raw);
 
            if ($timestamp !== false) {
                if (preg_match('/^\d{2}:\d{2}(:\d{2})?(\.\d+)?$/', $raw)) {
                    $value = date('H:i' . (substr_count($raw, ':') == 2 ? ':s' : ''), $timestamp) . $ms;
                } elseif (preg_match('/^\d{4}-\d{2}-\d{2}$|^\d{2}\.\d{2}\.\d{4}$/', $raw)) {
                    $value = date('d.m.Y', $timestamp);
                } else {
                    $value = date('d.m.Y H:i' . (substr_count($raw, ':') >= 2 ? ':s' : ''), $timestamp) . $ms;
                }
            }
        }
 
        return (string) $value;
    }

    public function php_date($value) {
        if ($value) {
            if ($value != 'today') {
                $timestamp = strtotime((string) $value);
            } else {
                $timestamp = time();
            }
 
            $value = date('Y-m-d', $timestamp);
        }
 
        return (string) $value;
    }

    public function add_css($css = '') {
        if ($css) {
            $this->_css[] = $css;
        }
    }

    public function forward_submit() {
        $this->evaluate_request();
        $submit = ($this->_form_submit == 1) ? 1 : 0;
        $submit = $this->callback('submit', $submit);
        $result = ($submit == 1) ? 1 : 0;
 
        dbx()->debug("dbxForm submit result: fid=({$this->_fid}) result=($result)");
 
        return $result;
    }

    public function submit() {
        return $this->forward_submit();
    }

    public function errors() {
        $this->evaluate_request();
 
        if ($this->_general_error > '') {
            $this->_errors['general'] = 1;
        }
 
        return count($this->_errors);
    }

    public function warnings() {
        $this->evaluate_request();
        return count($this->_warnings);
    }

    public function changed($changed = 0) {
        $this->evaluate_request();
 
        if ($this->_form_submit != 1) {
            $this->_fld_changes = 0;
            return 0;
        }
 
        if ($this->_fld_changes != -1) {
            return $this->_fld_changes;
        }
 
        foreach ($this->_flds as $fld) {
            $changed += (int) ($fld['changed'] ?? 0);
        }
 
        $this->_fld_changes = $changed;
 
        return $changed;
    }

    public function get_rid() {
        $empty     = array();
        $rid       = dbx()->get_modul_var('rid', -1, 'int');
        $dbx_view  = $this->_dbx_view;
        $dbx_modul = $this->_dbx_modul;
 
        if ($dbx_view) {
            $viewsys = dbx()->get_session_var($dbx_view, $empty, 'view-sys', $dbx_modul);
 
            if (isset($viewsys['value'])) {
                $rid = $viewsys['value'];
            }
        }
 
        $this->_rid = (int) $rid;
        $this->set_state_value('rid', (int) $rid);
 
        return (int) $rid;
    }

    public function view_sync($rid) {
        $empty     = array();
        $dbx_view  = $this->_dbx_view;
        $dbx_modul = $this->_dbx_modul;
 
        if ($dbx_view) {
            $viewsys = dbx()->get_session_var($dbx_view, $empty, 'view-sys', $dbx_modul);
            $viewsys['value'] = $rid;
            dbx()->set_session_var($dbx_view, $viewsys, 'view-sys', $dbx_modul);
        }
    }

    public function wait() {
        $wait = 0;
        $tpl  = $this->_tpl;
 
        if (strpos((string) $tpl, '_wait') !== false) {
            $wait = 1;
        }
 
        return $wait;
    }

    public function set_post($key, $val) {
        if ($key != 'form-dd-field') {
            $this->_post[$key] = $val;
        }
 
        $this->_fld_changes = -1;
    }

    public function save_post($dd, $rid, $pv = '', $reread = 1) {
        $ok = 0;
 
        if ($rid === 'new') {
            $rid = 0;
        }
 
        if (is_array($pv)) {
            foreach ($pv as $key => $value) {
                $this->_post[$key] = $value;
                $this->_data[$key] = $value;
            }
        }
 
        if ($rid) {
            $this->_rid = (int) $rid;
        }
 
        $rid = (int) $this->_rid;
        $post = $this->_post;
 
        $this->oDB->_fld_id = $this->_fld_id;
        $ok = $this->oDB->save($dd, $post, $rid);
 
        if (!$ok) {
            dbx()->debug("DB-Error=(" . $this->oDB->_error . ")\nQuery=(" . $this->oDB->_query . ")");
            $saveError = $this->get_fd_message('save_error');
            if ($saveError !== '') {
                $this->_msg_error = $saveError;
            }
            $this->_general_error = $this->_msg_error;
            $this->set_form_saved(false);
            return $ok;
        }
 
        $saveSuccess = $this->get_fd_message('save_success');
        if ($saveSuccess !== '') {
            $this->_msg_success = $saveSuccess;
        }
 
        if (!$rid) {
            $rid = (int) $this->oDB->_insert_id;
            $this->_rid = $rid;
        }
 
        if ($rid > 0) {
            $this->set_state_value('rid', $rid);
        }
 
        if ($rid && $ok && $reread) {
            $new = $this->oDB->select1($dd, $rid);
 
            if (is_array($new)) {
                foreach ($new as $key => $value) {
                    $this->_data[$key] = $value;
                }
 
                $this->_reload_run = 1;
 
                foreach ($this->_flds as $no => $fld) {
                    $key = $fld['name'] ?? '';
 
                    if ($key !== '' && array_key_exists($key, $this->_data)) {
                        $this->_flds[$no]['value']  = $this->_data[$key];
                        $this->_flds[$no]['origin'] = 'reload';
                        $this->_flds[$no]['verify'] = 1;
                        $this->_flds[$no]['error']  = 0;
                    }
                }
            }
        }
 
        $this->set_form_saved(true);
        $this->set_form_complete(true);
        $this->set_form_valid(true);
        $this->bump_form_version();
        $this->store_workflow_state();
 
        dbx()->debug("#DD FORM-save#  Tab=($dd) rid=($rid)");
 
        return $ok;
    }

    public function next_i($add = 1) {
        $i = $this->_next_i;
 
        if (!$i) {
            $i = dbx()->next_id($add);
            $this->_next_i = $i;
        }
 
        $this->add_rep('i', $i);
 
        return $i;
    }

    public function set_fld_val($fld_name, $fld_val) {
        $this->_data[$fld_name] = $fld_val;
        $this->_sys[$fld_name]  = $fld_val;
 
        if (isset($this->_flds[$fld_name])) {
            $this->_flds[$fld_name]['value']  = $fld_val;
            $this->_flds[$fld_name]['origin'] = 'set';
            $this->_flds[$fld_name]['verify'] = 1;
        }
    }

    protected function add_default_search_rep(array $overrides = array()) {
        $data = $this->prepare_search_tpl_data(array_merge(array(
            'extra_attrs' => 'data-dbx="grid-search"',
        ), $overrides));
        $template = trim((string)($data['label'] ?? '')) === ''
            ? 'dbx|search'
            : 'dbx|search-label';
        $this->add_rep('dbx_search', $this->get_tpl($template, $data, 'htm', (int)$data['i']));
    }
 
    private function is_search_field_tpl($tpl): bool {
        $tpl = strtolower(trim((string) $tpl));
 
        return $tpl === 'dbx|search' || $tpl === 'search' || substr($tpl, -7) === '|search';
    }

    private function prepare_search_tpl_data(
        array $data,
        ?string $name = null,
        ?string $value = null,
        ?int $i = null
    ): array {
        $data = dbx()->search_defaults($data);
        $data['name'] = $name !== null ? $name : (string)($data['name'] ?? '');
        $data['value'] = $value !== null ? $value : (string)($data['value'] ?? '');
        $data['i'] = $i !== null ? $i : (int)($data['i'] ?? $this->_next_i);
        $data['label'] = (string)($data['label'] ?? '');
        $data['class'] = (string)($data['class'] ?? '');
        $data['style'] = (string)($data['style'] ?? '');
        if (trim((string)($data['tooltip'] ?? '')) === '') {
            $data['tooltip'] = (string)($data['title'] ?? 'Suchen');
        }
        return $data;
    }

    private function prepare_report_search_fld($name, &$tpl, array &$data): void {
        if ($name !== 'dbx_rwhere') {
            return;
        }
 
        $tpl = 'dbx|search';
        $defaults = dbx()->search_defaults();
 
        $data['label'] = '';
        $data['placeholder'] = $defaults['placeholder'];
        $data['title'] = trim((string) ($data['tooltip'] ?? '')) !== ''
            ? (string) $data['tooltip']
            : $defaults['title'];
        $data['input_class'] = $defaults['input_class'];
        $data['wrap_class'] = $defaults['wrap_class'];
        $data['data_role'] = $defaults['data_role'];
        $data['extra_attrs'] = $defaults['extra_attrs'];
    }

    public function create_fld($fld, $i = 0) {
        if (!$i) {
            $i = $this->_next_i;
        }
 
        if (!($fld['verify'] ?? 0)) {
            $fld = $this->check_fld_data($this->submit(), $fld);
        }
 
        $tpl       = $fld['tpl'] ?? '';
        $data      = is_array($fld['data'] ?? null) ? $fld['data'] : array();
        $options   = is_array($fld['options'] ?? null) ? $fld['options'] : array();
        $fld_value = $fld['value'] ?? '';
        $error     = (int) ($fld['error'] ?? 0);
        $name      = $fld['name'] ?? '';
 
        if ($error) {
            $data['class'] = trim(($data['class'] ?? '') . ' fld-error');
 
            if (!isset($data['errormsg']) || $data['errormsg'] === '') {
                $data['errormsg'] = 'Eingabe bitte prüfen !';
            }
        } else {
            $data['errormsg'] = '';
        }
 
        if (!is_array($fld_value)) {
            $fld_value = htmlspecialchars((string) $fld_value, ENT_QUOTES, 'UTF-8');
 
            if (!isset($data['checked']) && $fld_value !== '' && $fld_value !== '0') {
                $data['checked'] = 'checked';
            }
        }
        if (!isset($data['checked'])) {
            $data['checked'] = '';
        }
 
        // dbxForm validates submitted data itself; native HTML5 required would
        // mark empty fields invalid before submit and can block the request.
        $required = '';
 
        $data['required'] = $required;
        $data['class']    = $data['class']    ?? '';
        $data['style']    = $data['style']    ?? '';
        $data['tooltip']  = $data['tooltip']  ?? '';
        $data['errormsg'] = $data['errormsg'] ?? '';
 
        foreach (array('placeholder') as $htmlKey) {
            if (isset($data[$htmlKey]) && !is_array($data[$htmlKey])) {
                $data[$htmlKey] = htmlspecialchars((string)$data[$htmlKey], ENT_QUOTES, 'UTF-8');
            }
        }
 
        foreach (array('tooltip', 'errormsg') as $htmlAttributeKey) {
            if (isset($data[$htmlAttributeKey]) && !is_array($data[$htmlAttributeKey])) {
                $data[$htmlAttributeKey] = htmlspecialchars(str_replace('"', "'", (string)$data[$htmlAttributeKey]), ENT_QUOTES, 'UTF-8');
            }
        }
 
        $this->prepare_report_search_fld($name, $tpl, $data);
 
        if ($this->is_search_field_tpl($tpl)) {
            $data = $this->prepare_search_tpl_data(
                $data,
                (string)$name,
                is_array($fld_value) ? '' : (string)$fld_value,
                (int)$i
            );
            $tpl = trim((string)($data['label'] ?? '')) === ''
                ? 'dbx|search'
                : 'dbx|search-label';
        }
        $tpl = $this->get_tpl($tpl, $data, 'htm', $i);
 
        if (is_array($options)) {
            $xoptions = '';
            $oid = $name . '_options';
            $options_vals = $fld_value;
 
            if (!is_array($options_vals)) {
                $options_vals = explode(',', (string) $options_vals);
            }
 
            $selected_lookup = array();
            foreach ($options_vals as $keyval) {
                $selected_lookup[(string) $keyval] = true;
            }
 
            foreach ($options as $key => $description) {
                $selected = isset($selected_lookup[(string) $key]) ? 'selected' : '';
 
                $xoptions .= '<option value="' . htmlspecialchars((string) $key, ENT_QUOTES, 'UTF-8') . '" ' . $selected . '>' .
                             htmlspecialchars((string) $description, ENT_QUOTES, 'UTF-8') .
                             "</option>\n";
            }
 
            $tpl = str_replace('{' . $oid . '}', $xoptions, $tpl);
        }
 
        $tpl = $this->oTPL->replaces($tpl, $this->_replaces);
 
        if (!is_array($fld_value)) {
            $tpl = str_replace('{src}', $fld_value, $tpl);
            $tpl = str_replace('{value}', $fld_value, $tpl);
        }
 
        $tpl = dbx()->norep($tpl, $i);
 
        $field_markers = $this->get_field_editor_markers();
 
        if ($field_markers !== '') {
            $tpl = $field_markers . $tpl;
        }
 
        return $tpl;
    }

    public function merge_fld_data($content, $i = 0) {
        $form   = '';
        $editor = dbx()->get_system_var('dbx_editor', 0, 'int');
 
        if (!$i && !$editor) {
            $i = $this->_next_i;
        }
 
        foreach ($this->_flds as $fld_name => $fld) {
            $slot = $fld_name;
 
            if (!empty($fld['remap'])) {
                $slot = $fld['remap'];
            }
 
            $fid = '{obj:' . $slot . '}';
            $fld_content = $this->create_fld($fld, $i);
 
            if (strpos($content, $fid) !== false) {
                $content = str_replace($fid, $fld_content, $content);
            } else {
                $form .= $fld_content . "\n";
            }
        }
 
        if (strpos($content, '[dbx:form]') !== false) {
            $content = str_replace('[dbx:form]', $form, $content);
        } else {
            $content = str_replace('</form>', $form . '</form>', $content);
        }
 
        return $content;
    }

    public function check_try_count($submit, $errors, $allways = 1) {
        $content = '';
        $clear   = 0;
        $reset   = $this->_try_reset;
        $max     = $this->_try_max;
        $msg     = $this->_try_msg;
        $now     = dbx()->timestamp();
        $self    = dbx()->get_self_url();
        $ip      = (string)($_SERVER['REMOTE_ADDR'] ?? '');
        $sys     = isset($this->_sys['_try_sys']) ? $this->_sys['_try_sys'] : array();
 
        if (($sys['dbx_try_ip'] ?? '') !== $ip) {
            $sys = array(
                'dbx_try_ip' => $ip,
            );
        }
 
        $sys['dbx_try_count'] = $sys['dbx_try_count'] ?? 0;
        $sys['dbx_run_count'] = $sys['dbx_run_count'] ?? 0;
        $sys['dbx_try_lock']  = $sys['dbx_try_lock'] ?? 0;
        $sys['dbx_try_ip']    = $ip;
 
        $countReset = max(0, (int) $this->_try_count_reset);
        $lastTry    = (float) ($sys['dbx_try_last'] ?? 0);
 
        if ($countReset > 0 && $lastTry > 0 && ($now - $lastTry) > $countReset) {
            unset(
                $sys['dbx_try_first'],
                $sys['dbx_try_last'],
                $sys['dbx_try_stop'],
                $sys['dbx_try_run']
            );
            $sys['dbx_try_count'] = 0;
            $sys['dbx_try_lock']  = 0;
        }
 
        $sys['dbx_run_count']++;
 
        if ($submit) {
            if ($errors) {
                $sys['dbx_try_first'] = $sys['dbx_try_first'] ?? $now;
                $sys['dbx_try_last']  = $now;
                $sys['dbx_try_count']++;
 
                if ($sys['dbx_try_count'] >= $max) {
                    if (!isset($sys['dbx_try_stop'])) {
                        $sys['dbx_try_lock']++;
 
                        for ($i = 1; $i < $sys['dbx_try_lock']; $i++) {
                            $reset = (int) ($reset * 2);
                        }
 
                        $sys['dbx_try_stop'] = $now;
                        $sys['dbx_try_run']  = dbx()->timestamp($reset);
                    }
                }
 
                if (isset($sys['dbx_try_run']) && $now > $sys['dbx_try_run']) {
                    $clear = 1;
                }
            } else {
                $clear = 1;
            }
        }
 
        if (($submit || $allways) && !$clear) {
            if (($sys['dbx_try_count'] ?? 0) >= $max && ($sys['dbx_try_run'] ?? 0) > 0) {
                $diff = dbx()->time_diff($now, $sys['dbx_try_run']);
 
                if ($diff > 0) {
                    $data = array(
                        'sec'       => (int) $diff,
                        'self'      => $self,
                        'try_count' => $sys['dbx_try_count'],
                        'run_count' => $sys['dbx_run_count'],
                    );
                    $data['msg'] = $this->oTPL->replaces((string) $msg, $data);
 
                    $content = $this->get_tpl($this->_tpl_max_try, $data);
                } else {
                    $clear = 1;
                }
            }
        }
 
        if ($clear) {
            unset($sys['dbx_try_stop'], $sys['dbx_try_run']);
            $sys['dbx_try_count'] = 0;
        }
 
        $this->_sys['_try_sys'] = $sys;
 
        return $content;
    }

    public function forward_run() {
        $content = '';
        $editor  = dbx()->get_system_var('dbx_editor', 0, 'int');
 
        $this->evaluate_request();
 
        $submit = $this->submit();
        $errors = $this->errors();
 
        $tryContent = $this->check_try_count($submit, $errors, 1);
 
        $i = $this->next_i();
        $this->_next_i = $i;
 
        $this->buildModuleBarObj();
        $this->prepareFormFrameReplaces($i);
 
        $replaces = $this->_replaces;
        $replaces['form-id'] = $this->_dbx_modul . '-' . $this->_fid;
        foreach (array('form_shell_class' => '', 'form_class' => '', 'form_attrs' => '') as $shellKey => $shellDefault) {
            if (!isset($replaces[$shellKey]) || (string)$replaces[$shellKey] === '') {
                $replaces[$shellKey] = $shellDefault;
            }
        }
        foreach (array('shell_panel_class' => '', 'shell_panel_attrs' => '', 'shell_body_class' => '') as $shellKey => $shellDefault) {
            if (!isset($replaces[$shellKey]) || (string)$replaces[$shellKey] === '') {
                $replaces[$shellKey] = $shellDefault;
            }
        }
 
        // Ein explizites "modul|template" bleibt erhalten. Das erlaubt
        // gemeinsam genutzte dbxForm-Templates auch dann, wenn das aufrufende
        // Modul ein anderes ist.
        $templateRef = strpos((string)$this->_tpl, '|') !== false
            ? (string)$this->_tpl
            : 'modul|' . $this->_tpl;
        $content = $this->get_tpl($templateRef, $replaces, 'htm', $i);
        $content = $this->merge_tpl_data($content, $i);
        $content = $this->merge_fld_data($content, $i);
        $content = $this->merge_obj($content, $i);
        $content = $this->ensureFormHelpBar($content);
 
        $form_msg = '';
 
        if ($tryContent !== '') {
            $form_msg = $tryContent;
        } else {
            if ($submit) {
                if ($this->errors()) {
                    $form_msg = $this->get_form_msg('error', $this->_msg_error);
                } elseif ($this->warnings()) {
                    $form_msg = $this->get_form_msg('warning', $this->_msg_warning);
                } else {
                    $form_msg = $this->get_form_msg('success', $this->_msg_success);
                }
            } else {
                $form_msg = $this->get_form_msg('info', $this->_msg_info);
            }
        }
 
        $content = str_replace('{obj:form_msg}', $form_msg, $content);
 
        $norep_ids = '';
 
        if (is_array($this->_js)) {
            foreach ($this->_js as $javascript) {
                $javascript = str_replace('{i}', $this->_next_i, $javascript);
                $norep = '<script>' . $javascript . '</script> ';
                $norep_ids .= dbx()->norep($norep, $i);
            }
        }
 
        $content = str_replace('[dbx:js]', $norep_ids, $content);
 
        if (!$editor && $content && $i) {
            $content = str_replace('{i}', $i, $content);
        }
 
        $content = $this->callback('run', $content);
 
        $this->store_sysdata();
        $this->store_workflow_state();
 
        return $this->add_editor_markers($content);
    }

    protected function resolve_fd_dd_editor_file(string $source): string {
        $source = trim($source);
 
        if ($source === '') {
            return '';
        }
 
        $mod  = 'dd';
        $name = $source;
 
        foreach (array('cfg:', 'def:', 'mod:', 'fd:', 'dd:') as $prefix) {
            if (strpos($source, $prefix) === 0) {
                $mod  = substr($prefix, 0, -1);
                $name = substr($source, strlen($prefix));
                break;
            }
        }
 
        if ($mod === 'dd' && strpos($source, '|') !== false) {
            $mod  = 'fd';
            $name = $source;
        }
 
        if ($mod === 'dd') {
            if (method_exists($this->oDB, 'get_dd_file')) {
                return (string) $this->oDB->get_dd_file($name);
            }
 
            $modul = $this->_dbx_modul ? $this->_dbx_modul : dbx()->get_system_var('dbx_activ_modul', 'dbx');
 
            return dbx()->get_base_dir() . "dbx/modules/$modul/dd/$name.dd.php";
        }
 
        $dd_file = '';
 
        switch ($mod) {
            case 'cfg':
                $dd_file = dbx()->get_base_dir() . "dbx/modules/$name/cfg/config.dd.php";
                break;
 
            case 'def':
                $dd_file = dbx()->get_base_dir() . "dbx/modules/$name/dd/$name.dd.php";
                break;
 
            case 'mod':
                $modul = dbx()->get_system_var('dbx_activ_modul', 'dbx');
                $dd_file = dbx()->get_base_dir() . "dbx/modules/$modul/dd/$name.dd.php";
                break;
 
            case 'fd':
                $fd_modul = $this->_dbx_modul ? $this->_dbx_modul : dbx()->get_system_var('dbx_activ_modul', 'dbx');
                $fd_name  = $name;
 
                if (strpos($name, '|') !== false) {
                    $parts = explode('|', $name, 2);
                    $fd_modul = trim($parts[0]);
                    $fd_name  = trim($parts[1]);
                }
 
                if ($fd_modul === '') {
                    $fd_modul = dbx()->get_system_var('dbx_activ_modul', 'dbx');
                }
 
                $dd_file = function_exists('dbx_lng_resolve_file')
                    ? dbx_lng_resolve_file(
                        dbx()->get_base_dir() . "dbx/modules/$fd_modul/fd/",
                        $fd_name,
                        'fd.php',
                        $this->_dbx_lng,
                        true
                    )
                    : dbx()->get_base_dir() . "dbx/modules/$fd_modul/fd/$fd_name.fd.php";
                if ($dd_file === '' || !is_file($dd_file)) {
                    $dd_file = dbx()->get_base_dir() . "dbx/modules/$fd_modul/fd/$fd_name.fd.php";
                }
                break;
        }
 
        if ($dd_file === '') {
            return '';
        }
 
        $real_file = realpath(dbx()->os_path($dd_file));
 
        return $real_file ? $real_file : $dd_file;
    }

    protected function get_field_editor_markers(): string {
        $markers = '';
 
        foreach (array('fd' => $this->_fd, 'dd' => $this->_dd) as $kind => $source) {
            $file = $this->resolve_fd_dd_editor_file($source);
 
            if ($file === '') {
                continue;
            }
 
            $marker = dbx()->editor_marker($kind, $file);
 
            if ($marker !== '' && strpos($markers, trim($marker)) === false) {
                $markers .= $marker;
            }
        }
 
        return $markers;
    }

    public function init($fid, $tpl = '') {
        $this->forward_init($fid, $tpl);
    }

    public function run() {
        return $this->forward_run();
    }
 
    /* =====================================================
     * WORKFLOW / REMEMBER STATE
     * ===================================================== */

    public function set_workflow_scope(string $scope) {
        $this->_workflow_scope = trim($scope);
        $this->load_workflow_state();
    }

    public function get_workflow_scope(): string {
        return $this->_workflow_scope;
    }

    private function normalize_state_token(string $token): string {
        $token = trim($token);
 
        if ($token === '') {
            return 'undef';
        }
 
        return preg_replace('/[^a-zA-Z0-9._-]+/', '_', $token);
    }

    public function get_workflow_state_key(): string {
        $modul = $this->normalize_state_token((string) $this->_dbx_modul);
        $scope = $this->normalize_state_token((string) $this->_workflow_scope);
        $fid   = $this->normalize_state_token((string) $this->_fid);
 
        return 'dbx.form.state.' . $modul . '.' . $scope . '.' . $fid;
    }

    private function get_default_workflow_state(): array {
        return array(
            'rid'             => 0,
            'draft_id'        => '',
            'is_complete'     => 0,
            'is_valid'        => 0,
            'is_locked'       => 0,
            'is_saved'        => 0,
            'version'         => 0,
            'depends_on'      => array(),
            'depends_version' => array(),
        );
    }

    public function load_workflow_state(): array {
        $key   = $this->get_workflow_state_key();
        $state = dbx()->get_remember_var($key, $this->get_default_workflow_state(), 'dbx');
 
        if (!is_array($state)) {
            $state = $this->get_default_workflow_state();
        }
 
        $this->_workflow_state = array_merge($this->get_default_workflow_state(), $state);
 
        if ((int) ($this->_workflow_state['rid'] ?? 0) > 0 && !$this->_rid) {
            $this->_rid = (int) $this->_workflow_state['rid'];
        }
 
        return $this->_workflow_state;
    }

    public function store_workflow_state() {
        $key = $this->get_workflow_state_key();
        dbx()->set_remember_var($key, $this->_workflow_state, 'dbx');
    }

    public function clear_workflow_state() {
        $this->_workflow_state = $this->get_default_workflow_state();
        $this->store_workflow_state();
    }

    public function set_state_value(string $key, $value) {
        $this->_workflow_state[$key] = $value;
        $this->store_workflow_state();
    }

    public function get_state_value(string $key, $default = null) {
        if (!array_key_exists($key, $this->_workflow_state)) {
            $this->load_workflow_state();
        }
 
        return $this->_workflow_state[$key] ?? $default;
    }

    public function get_draft_id(bool $createIfMissing = false): string {
        $draftId = (string) $this->get_state_value('draft_id', '');
 
        if ($draftId === '' && $createIfMissing) {
            $draftId = $this->create_draft_id();
            $this->set_state_value('draft_id', $draftId);
        }
 
        return $draftId;
    }

    public function set_draft_id(string $draftId) {
        $this->set_state_value('draft_id', $draftId);
    }

    private function create_draft_id(): string {
        return 'dft_' . md5($this->_dbx_modul . '|' . $this->_fid . '|' . microtime(true) . '|' . mt_rand());
    }

    public function set_form_valid(bool $state) {
        $this->set_state_value('is_valid', $state ? 1 : 0);
    }

    public function is_form_valid(): bool {
        return ((int) $this->get_state_value('is_valid', 0) === 1);
    }

    public function set_form_complete(bool $state) {
        $this->set_state_value('is_complete', $state ? 1 : 0);
    }

    public function is_form_complete(): bool {
        return ((int) $this->get_state_value('is_complete', 0) === 1);
    }

    public function set_form_locked(bool $state) {
        $this->set_state_value('is_locked', $state ? 1 : 0);
    }

    public function is_form_locked(): bool {
        return ((int) $this->get_state_value('is_locked', 0) === 1);
    }

    public function set_form_saved(bool $state) {
        $this->set_state_value('is_saved', $state ? 1 : 0);
    }

    public function is_form_saved(): bool {
        return ((int) $this->get_state_value('is_saved', 0) === 1);
    }

    public function get_form_version(): int {
        return (int) $this->get_state_value('version', 0);
    }

    public function bump_form_version(): int {
        $version = $this->get_form_version() + 1;
        $this->set_state_value('version', $version);
        return $version;
    }

    public function set_dependencies(array $formIds) {
        $deps = array();
 
        foreach ($formIds as $formId) {
            $deps[] = $this->normalize_state_token((string) $formId);
        }
 
        $this->set_state_value('depends_on', $deps);
    }

    public function remember_current_dependencies(?array $formIds = null) {
        if ($formIds === null) {
            $formIds = $this->get_state_value('depends_on', array());
        }
 
        $versions = array();
 
        foreach ($formIds as $formId) {
            $state = $this->get_external_form_state((string) $formId);
            $versions[$formId] = (int) ($state['version'] ?? 0);
        }
 
        $this->set_state_value('depends_version', $versions);
    }

    public function dependencies_are_current(): bool {
        $dependsOn      = $this->get_state_value('depends_on', array());
        $dependsVersion = $this->get_state_value('depends_version', array());
 
        if (!is_array($dependsOn) || !$dependsOn) {
            return true;
        }
 
        foreach ($dependsOn as $formId) {
            $state = $this->get_external_form_state((string) $formId);
            $currentVersion = (int) ($state['version'] ?? 0);
            $savedVersion   = (int) ($dependsVersion[$formId] ?? -1);
 
            if ($currentVersion !== $savedVersion) {
                return false;
            }
 
            if ((int) ($state['is_valid'] ?? 0) !== 1) {
                return false;
            }
        }
 
        return true;
    }

    public function get_external_form_state(string $fid): array {
        $modul = $this->normalize_state_token((string) $this->_dbx_modul);
        $scope = $this->normalize_state_token((string) $this->_workflow_scope);
        $fid   = $this->normalize_state_token($fid);
 
        $key = 'dbx.form.state.' . $modul . '.' . $scope . '.' . $fid;
        $state = dbx()->get_remember_var($key, $this->get_default_workflow_state(), 'dbx');
 
        return is_array($state) ? $state : $this->get_default_workflow_state();
    }

    public function refresh_dependency_lock(): bool {
        $locked = !$this->dependencies_are_current();
        $this->set_form_locked($locked);
        return $locked;
    }
}
 
?>