Program: CWE-79
Project: CVE-2020-25797
Buggy source:
<?php
/**
* Add token entry
*/
?>
<div class='container-fluid <?php if (!isset($ajax) || $ajax = false):?> col-12 side-body <?php echo getSideBodyClass(false); ?> <?php endif; ?>'>

<?php if (!isset($ajax) || $ajax = false) { ?>
  <h3>
  <?php

    if ($token_subaction == "edit") {
        eT("Edit survey participant");
    } else {
        eT("Add survey participant");
    }

    ?>
  </h3>
<?php } ?>
<?php
foreach ($tokendata as $Key => $Value) {
    $$Key = $Value;
}
?>

<div class="row">
  <div class="col-md-12 content-right">
    <?php echo CHtml::form(array("admin/tokens/sa/{$token_subaction}/surveyid/{$surveyid}/tokenid/{$tokenid}"), 'post', array('id'=>'edittoken', 'class'=>'')); ?>
      <!-- Tabs -->
      <?php if( count($attrfieldnames) > 0 ):?>
        <ul class="nav nav-tabs" id="edit-survey-text-element-language-selection">

          <!-- Common  -->
          <li role="presentation" class="active">
            <a data-toggle="tab" href="#general" aria-expanded="true">
              <?php eT('General'); ?>
            </a>
          </li>

          <!-- Custom attibutes -->
          <li role="presentation" class="">
            <a data-toggle="tab" href="#custom" aria-expanded="false">
              <?php eT('Additional attributes'); ?>
            </a>
          </li>
        </ul>
      <?php endif; ?>

      <!-- Tabs content-->
      <div class="tab-content">
        <div id="general" class="tab-pane fade in active">
            <div class="ls-flex-column ls-space padding left-5 right-35 col-md-6">
            <!-- General -->
                <!-- ID,Completed  -->
                <div class="form-group">
                <!-- ID  -->
                <label class=" control-label">ID:</label>
                <div class="">
                    <p class="form-control-static">
                    <?php
                    if ($token_subaction == "edit") {
                        echo $tokenid;
                    } else {
                        eT("Auto");
                    }
                    ?>
                    </p>
                </div>
                </div>
                <div class="form-group">
                <!--
                TODO:
                To take in account the anonomyzed survey case (completed field contain no date, but a {Y,N}), the code become more complexe
                It will need a refactorisation .
                maybe a widget? At least, a lot of variable should be set in the controller (classes etc)
                -->
                <?php $sCointainerClass = ($oSurvey->anonymized != 'Y') ? 'yes-no-date-container' : 'yes-no-container'; ?>
                <!-- Completed -->
                <label class=" control-label" for='completed'>
                    <?php eT("Completed?"); ?>
                </label>
                <div class="selector__yesNoContainer <?php echo $sCointainerClass; ?>" id="completed-yes-no-date-container" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                    <div class="row">
                    <?php if ($oSurvey->anonymized != 'Y'):?>

                        <?php
                        $bCompletedValue = "0";
                        if (isset($completed) && $completed != 'N')
                        {
                            $completedDBFormat     = $completed;
                            $bCompletedValue       = "1";
                            $completed             = convertToGlobalSettingFormat($completed, true);
                        }
                        ?>

                        <div class="">
                        <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                            'name' => "completed-switch",
                            'id'=>"completed-switch",
                            'htmlOptions'=>array('class'=>"YesNoDateSwitch action_toggle_bootstrap_switch"),
                            'value' => $bCompletedValue,
                            'onLabel'=>gT('Yes'),
                            'offLabel' => gT('No')));
                        ?>
                        </div>
                    <?php else: ?>
                        <div class="">
                        <?php
                        $completedDBFormat = $completed;
                        $bCompletedValue   = (isset($completed) && $completed != 'N') ? "1" : "0";
                        $completed         = (isset($completed) && $completed != 'N') ? 'Y' : 'N';
                        ?>

                        <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                            'name' => "completed-switch",
                            'id'=>"completed-switch",
                            'htmlOptions'=>array('class'=>"YesNoSwitch action_toggle_bootstrap_switch"),
                            'value' => $bCompletedValue,
                            'onLabel'=>gT('Yes'),
                            'offLabel' => gT('No')));
                        ?>
                        </div>
                    <?php endif; ?>

                    <?php if ($oSurvey->anonymized != 'Y'):?>
                        <div class="">
                            <div id="sent-date-container" class="date-container"  <?php if (!$bCompletedValue):?>style="display: none;"<?php endif; ?>>
                            <div id="completed-date_datetimepicker" class="input-group date">
                                <input class="YesNoDatePicker form-control" id="completed-date" type="text" value="<?php echo isset($completed) ? $completed : ''?>" name="completed-date" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm">
                                <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                            </div>
                            </div>
                        </div>
                        <?php endif; ?>
                    </div>
                    <input class='form-control hidden YesNoDateHidden' type='text' size='20' id='completed' name='completed' value="<?php if (isset($completed)) {echo $completed; } else {echo " N "; }?>" />
                </div>

            </div>

            <!-- First name, Last name -->            
            <div class="form-group">
                <label class=" control-label" for='firstname'>
                <?php eT("First name:"); ?>
                </label>
                <div class="">
                <input class='form-control' type='text' size='30' id='firstname' name='firstname' value="<?php if (isset($firstname)) {echo $firstname; } ?>" />
                </div>
            </div>
            <div class="form-group">
                <label class=" control-label" for='lastname'>
                <?php eT("Last name:"); ?>
                </label>
                <div class="">
                <input class='form-control' type='text' size='30' id='lastname' name='lastname' value="<?php if (isset($lastname)) {echo $lastname; } ?>" />
                </div>
            </div>


            <!-- Token, language -->
            <div class="form-group">
                <label class=" control-label" for='token'>
                <?php eT("Token:"); ?>
                </label>
                <div class="">
                <input class='form-control' type='text' maxlength="<?php echo $iTokenLength; ?>" size='20' name='token' id='token' value="<?php if (isset($token)) {echo $token; } ?>" />
                <?php if ($token_subaction == "addnew"): ?>
                    <span id="helpBlock" class="help-block"><?php eT("You can leave this blank, and automatically generate tokens using 'Generate Tokens'"); ?></span>
                <?php endif; ?>
                </div>
            </div>
            <div class="form-group">
                <label class=" control-label" for='language'>
                <?php eT("Language:"); ?>
                </label>
                <div class="">
                <?php if (isset($language)) {echo languageDropdownClean($surveyid, $language); } else {echo languageDropdownClean($surveyid, Survey::model()->findByPk($surveyid)->language); }?>
                </div>
            </div>
        </div>
        <div class="ls-flex-column ls-space padding left-5 right-35 col-md-6">

            <!-- Email, Email Status  -->
            <div class="form-group">
            <label class=" control-label" for='email'>
                <?php eT("Email:"); ?>
            </label>
            <div class="">
                <input class='form-control' type='text' maxlength='320' size='50' id='email' name='email' value="<?php if (isset($email)) {echo $email; } ?>" />
            </div>
            </div>

            <!-- Email Status -->
            <div class="form-group">
            <label class=" control-label" for='emailstatus'>
                <?php eT("Email status:"); ?>
            </label>
            <div class="">
                <input class='form-control' type='text' maxlength='320' size='50' id='emailstatus' name='emailstatus' placeholder='OK' value="<?php if (isset($emailstatus)) {echo $emailstatus; } else {echo " OK "; }?>" />
            </div>
            </div>

            <!-- Invitation sent, Reminder sent -->
            <div class="form-group">
            <!-- Invitation sent -->
            <label class=" control-label" for='sent'>
                <?php eT("Invitation sent?"); ?>
            </label>
            <div class="selector__yesNoContainer <?php echo $sCointainerClass; ?>" id="sent-yes-no-date-container" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                <div class="row">
                <div class="">
                    <?php if ($oSurvey->anonymized != 'Y'):?>
                    <?php
                        // TODO: move to controller
                        $bSwitchValue       = (isset($sent) && $sent != 'N') ? "1" : "0";
                        $bRemindSwitchValue = (isset($remindersent) && $remindersent != 'N') ? "1" : "0";

                        $bSwitchValue = "0";
                        if (isset($sent) && $sent != 'N')
                        {
                            $bSwitchValue     = "1";
                            $sentDBValue      = $sent;
                            $sent             = convertToGlobalSettingFormat($sent, true);
                        }

                        $bRemindSwitchValue = "0";
                        if (isset($remindersent) && $remindersent != 'N')
                        {
                            $bRemindSwitchValue       = "1";
                            $remindersentDBValue      = $remindersent;
                            $remindersent             = convertToGlobalSettingFormat($remindersent, true);
                        }
                    ?>

                    <?php
                        $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                        'name' => "sent-switch",
                        'id'=>"sent-switch",
                        'htmlOptions'=>array('class'=>"YesNoDateSwitch action_toggle_bootstrap_switch"),
                        'value' => $bSwitchValue,
                        'onLabel'=>gT('Yes'),
                        'offLabel' => gT('No')));
                    ?>
                    <?php else:?>
                        <?php
                            $sentDBValue = $sent;
                            $remindersentDBValue = $remindersent;
                            $bSwitchValue       = (isset($sent) && $sent != 'N') ? "1" : "0";
                            $bRemindSwitchValue = (isset($remindersent) && $remindersent != 'N') ? "1" : "0";
                        ?>

                            <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                                'name' => "sent-switch",
                                'id'=>"sent-switch",
                                'htmlOptions'=>array('class'=>"YesNoSwitch action_toggle_bootstrap_switch"),
                                'value' => $bSwitchValue,
                                'onLabel'=>gT('Yes'),
                                'offLabel' => gT('No')));
                            ?>
                    <?php endif; ?>
                </div>

                <div class="">
                    <div id="sent-date-container" data-parent="#sent-switch" class="selector__date-container_hidden date-container" <?php if (!$bSwitchValue){ echo "style='display:none;'"; }?> >
                        <!-- Sent Date -->
                        <div id="sent-date_datetimepicker" class="input-group date">
                        <input class="YesNoDatePicker form-control" id="sent-date" type="text" value="<?php echo isset($sent) ? $sent : ''?>" name="sent-date" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm">
                        <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                        </div>
                    </div>
                </div>
                </div>
                <input class='form-control hidden YesNoDateHidden' type='text' size='20' id='sent' name='sent' value="<?php if (isset($sent)) {echo $sent; } else {echo " N "; }?>" />
            </div>
            </div>
            <div class="form-group">
            <!-- Reminder sent -->
            <label class=" control-label" for='remindersent'>
                <?php eT("Reminder sent?"); ?>
            </label>
            <div class="selector__yesNoContainer <?php echo $sCointainerClass; ?>" id="remind-yes-no-date-container" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">

                <div class="row">
                <div class="">
                    <?php if ($oSurvey->anonymized != 'Y') {
                        ?>
                    <?php
                        $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                        'name' => "remind-switch",
                        'id'=>"remind-switch",
                        'htmlOptions'=>array('class'=>"YesNoDateSwitch action_toggle_bootstrap_switch"),
                        'value' => $bRemindSwitchValue,
                        'onLabel'=>gT('Yes'),
                        'offLabel' => gT('No')));
                    ?>
                    <?php } else { ?>
                        <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                            'name' => "sent-switch",
                            'id'=>"sent-switch",
                            'htmlOptions'=>array('class'=>"YesNoSwitch action_toggle_bootstrap_switch"),
                            'value' => $bSwitchValue,
                            'onLabel'=>gT('Yes'),
                            'offLabel' => gT('No')));
                        ?>
                    <?php } ?>
                </div>

                <div class="">
                    <div id="remind-date-container" data-parent="#remind-switch" class="selector__date-container_hidden date-container" <?php if (!$bRemindSwitchValue){ echo "style='display:none;'"; }?> >

                        <div id="remind-date_datetimepicker" class="input-group date">
                        <input class="YesNoDatePicker form-control" id="remind-date" type="text" value="<?php echo isset($remindersent) ? $remindersent : ''?>" name="remind-date" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm">
                        <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                        </div>
                    </div>
                </div>
                </div>
                <input class='form-control hidden YesNoDateHidden' type='text' size='20' id='remindersent' name='remindersent' value="<?php if (isset($remindersent)) {echo $remindersent; } else {echo " N "; }?>" />
            </div>
                
            <!-- Reminder count, Uses left -->
            <div class="form-group">
                <!-- Reminder count -->
                <?php if ($token_subaction == "edit"): ?>
                <label class=" control-label" for='remindercount'>
                    <?php eT("Reminder count:"); ?>
                </label>
                <div class="">
                    <input class='form-control' type='number' size='6' id='remindercount' name='remindercount' value="<?php echo $remindercount; ?>" />
                </div>
                <?php endif; ?>
            </div>

                <!-- Uses left -->
            <div class="form-group">
                <label class=" control-label" for='usesleft'>
                <?php eT("Uses left:"); ?>
                </label>
                <div class="">
                <input class='form-control' type='number' size='20' id='usesleft' name='usesleft' value="<?php if (isset($usesleft)) {echo $usesleft; } else {echo " 1 "; }?>" />
                </div>
            </div>
            </div>
        </div>

        <div class="ls-flex-column ls-space padding left-5 right-35 col-md-12">
            <!-- Valid from to  -->
            <div class="form-group">
            <?php
                if (isset($validfrom) && $validfrom != 'N')
                {
                    $validfrom = convertToGlobalSettingFormat($validfrom, true);
                }

                if (isset($validuntil) && $validuntil != 'N')
                {
                    $validuntil = convertToGlobalSettingFormat($validuntil, true);
                }
            ?>

            <!-- From -->
            <label class=" control-label" for='validfrom'>
                <?php eT("Valid from"); ?>:</label>
            <div class=" has-feedback">
                <div id="validfrom_datetimepicker" class="input-group date">
                <input class="YesNoDatePicker form-control" id="validfrom" type="text" value="<?php echo isset($validfrom) ? $validfrom : ''?>" name="validfrom" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                </div>
            </div>
            </div>

            <div class="form-group">
            <!-- To -->
            <label class=" control-label" for='validuntil'>
                <?php eT('Until:'); ?>
            </label>
            <div class=" has-feedback">
                <div id="validuntil_datetimepicker" class="input-group date">
                <input class="YesNoDatePicker form-control" id="validuntil" type="text" value="<?php echo isset($validuntil) ? $validuntil : ''?>" name="validuntil" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                </div>
            </div>
            </div>
        </div>
    </div>

    <!-- Custom attibutes -->
    <div id="custom" class="tab-pane fade in">
        <!-- Attributes -->
        <?php foreach ($attrfieldnames as $attr_name => $attr_description): ?>
            <div class="form-group">
                <label class=" control-label" for='<?php echo $attr_name; ?>'>
                    <?php echo $attr_description['description'].($attr_description['mandatory'] == 'Y' ? '*' : '') ?>:
                </label>
                <div class="">
                    <input class='form-control' type='text' size='55' id='<?php echo $attr_name; ?>' name='<?php echo $attr_name; ?>' value='<?php if (isset($$attr_name)){echo htmlspecialchars($$attr_name, ENT_QUOTES, 'utf-8');}?>' />
                </div>
            </div>
            <?php endforeach; ?>
        </div>
</div>

  <!-- Buttons -->
  <p>
    <?php
    switch ($token_subaction)
    {
        case "edit":?>
          <input type='submit' class="hidden" value='<?php eT("Update token entry"); ?>' />
          <input type='hidden' name='subaction' value='updatetoken' />
          <input type='hidden' name='tid' value='<?php echo $tokenid; ?>' />
        <?php break;
        case "addnew": ?>
          <input type='submit' class='hidden' value='<?php eT("Add token entry"); ?>' />
          <input type='hidden' name='subaction' value='inserttoken' />
        <?php break;
    } ?>
          <input type='hidden' name='sid' value='<?php echo $surveyid; ?>' />
  </p>
  </form>
</div>
</div>


  <div style="display: none;">
    <?php
        Yii::app()->getController()->widget('yiiwheels.widgets.datetimepicker.WhDateTimePicker', array(
        'name' => "no",
        'id'   => "no",
        'value' => '',

        ));
    ?>
  </div>
</div>
<?php
App()->getClientScript()->registerScript('TokenformViewBSSwitcher', "
LS.renderBootstrapSwitch();
", LSYii_ClientScript::POS_POSTSCRIPT);
?>


Fixed version (ground truth):
<?php
/**
* Add token entry
*/
?>
<div class='container-fluid <?php if (!isset($ajax) || $ajax = false):?> col-12 side-body <?php echo getSideBodyClass(false); ?> <?php endif; ?>'>

<?php if (!isset($ajax) || $ajax = false) { ?>
  <h3>
  <?php

    if ($token_subaction == "edit") {
        eT("Edit survey participant");
    } else {
        eT("Add survey participant");
    }

    ?>
  </h3>
<?php } ?>
<?php
foreach ($tokendata as $Key => $Value) {
    $$Key = $Value;
}
?>

<div class="row">
  <div class="col-md-12 content-right">
    <?php echo CHtml::form(array("admin/tokens/sa/{$token_subaction}/surveyid/{$surveyid}/tokenid/{$tokenid}"), 'post', array('id'=>'edittoken', 'class'=>'')); ?>
      <!-- Tabs -->
      <?php if( count($attrfieldnames) > 0 ):?>
        <ul class="nav nav-tabs" id="edit-survey-text-element-language-selection">

          <!-- Common  -->
          <li role="presentation" class="active">
            <a data-toggle="tab" href="#general" aria-expanded="true">
              <?php eT('General'); ?>
            </a>
          </li>

          <!-- Custom attibutes -->
          <li role="presentation" class="">
            <a data-toggle="tab" href="#custom" aria-expanded="false">
              <?php eT('Additional attributes'); ?>
            </a>
          </li>
        </ul>
      <?php endif; ?>

      <!-- Tabs content-->
      <div class="tab-content">
        <div id="general" class="tab-pane fade in active">
            <div class="ls-flex-column ls-space padding left-5 right-35 col-md-6">
            <!-- General -->
                <!-- ID,Completed  -->
                <div class="form-group">
                <!-- ID  -->
                <label class=" control-label">ID:</label>
                <div class="">
                    <p class="form-control-static">
                    <?php
                    if ($token_subaction == "edit") {
                        echo $tokenid;
                    } else {
                        eT("Auto");
                    }
                    ?>
                    </p>
                </div>
                </div>
                <div class="form-group">
                <!--
                TODO:
                To take in account the anonomyzed survey case (completed field contain no date, but a {Y,N}), the code become more complexe
                It will need a refactorisation .
                maybe a widget? At least, a lot of variable should be set in the controller (classes etc)
                -->
                <?php $sCointainerClass = ($oSurvey->anonymized != 'Y') ? 'yes-no-date-container' : 'yes-no-container'; ?>
                <!-- Completed -->
                <label class=" control-label" for='completed'>
                    <?php eT("Completed?"); ?>
                </label>
                <div class="selector__yesNoContainer <?php echo $sCointainerClass; ?>" id="completed-yes-no-date-container" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                    <div class="row">
                    <?php if ($oSurvey->anonymized != 'Y'):?>

                        <?php
                        $bCompletedValue = "0";
                        if (isset($completed) && $completed != 'N')
                        {
                            $completedDBFormat     = $completed;
                            $bCompletedValue       = "1";
                            $completed             = convertToGlobalSettingFormat($completed, true);
                        }
                        ?>

                        <div class="">
                        <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                            'name' => "completed-switch",
                            'id'=>"completed-switch",
                            'htmlOptions'=>array('class'=>"YesNoDateSwitch action_toggle_bootstrap_switch"),
                            'value' => $bCompletedValue,
                            'onLabel'=>gT('Yes'),
                            'offLabel' => gT('No')));
                        ?>
                        </div>
                    <?php else: ?>
                        <div class="">
                        <?php
                        $completedDBFormat = $completed;
                        $bCompletedValue   = (isset($completed) && $completed != 'N') ? "1" : "0";
                        $completed         = (isset($completed) && $completed != 'N') ? 'Y' : 'N';
                        ?>

                        <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                            'name' => "completed-switch",
                            'id'=>"completed-switch",
                            'htmlOptions'=>array('class'=>"YesNoSwitch action_toggle_bootstrap_switch"),
                            'value' => $bCompletedValue,
                            'onLabel'=>gT('Yes'),
                            'offLabel' => gT('No')));
                        ?>
                        </div>
                    <?php endif; ?>

                    <?php if ($oSurvey->anonymized != 'Y'):?>
                        <div class="">
                            <div id="sent-date-container" class="date-container"  <?php if (!$bCompletedValue):?>style="display: none;"<?php endif; ?>>
                            <div id="completed-date_datetimepicker" class="input-group date">
                                <input class="YesNoDatePicker form-control" id="completed-date" type="text" value="<?php echo isset($completed) ? $completed : ''?>" name="completed-date" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm">
                                <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                            </div>
                            </div>
                        </div>
                        <?php endif; ?>
                    </div>
                    <input class='form-control hidden YesNoDateHidden' type='text' size='20' id='completed' name='completed' value="<?php if (isset($completed)) {echo $completed; } else {echo " N "; }?>" />
                </div>

            </div>

            <!-- First name, Last name -->            
            <div class="form-group">
                <label class=" control-label" for='firstname'>
                <?php eT("First name:"); ?>
                </label>
                <div class="">
                    <?=TbHtml::textField('firstname', $firstname, [
                        'class' => 'form-control',
                        'size' => '30',
                    ]);?>
                </div>
            </div>
            <div class="form-group">
                <label class=" control-label" for='lastname'>
                <?php eT("Last name:"); ?>
                </label>
                <div class="">
                    <?=TbHtml::textField('lastname', $lastname, [
                        'class' => 'form-control',
                        'size' => '30',
                    ]);?>
                </div>
            </div>


            <!-- Token, language -->
            <div class="form-group">
                <label class=" control-label" for='token'>
                <?php eT("Token:"); ?>
                </label>
                <div class="">
                <input class='form-control' type='text' maxlength="<?php echo $iTokenLength; ?>" size='20' name='token' id='token' value="<?php if (isset($token)) {echo $token; } ?>" />
                <?php if ($token_subaction == "addnew"): ?>
                    <span id="helpBlock" class="help-block"><?php eT("You can leave this blank, and automatically generate tokens using 'Generate Tokens'"); ?></span>
                <?php endif; ?>
                </div>
            </div>
            <div class="form-group">
                <label class=" control-label" for='language'>
                <?php eT("Language:"); ?>
                </label>
                <div class="">
                <?php if (isset($language)) {echo languageDropdownClean($surveyid, $language); } else {echo languageDropdownClean($surveyid, Survey::model()->findByPk($surveyid)->language); }?>
                </div>
            </div>
        </div>
        <div class="ls-flex-column ls-space padding left-5 right-35 col-md-6">

            <!-- Email, Email Status  -->
            <div class="form-group">
            <label class=" control-label" for='email'>
                <?php eT("Email:"); ?>
            </label>
            <div class="">
                <?=TbHtml::emailField('email', $email, [
                        'class' => 'form-control',
                        'size' => '50',
                        'maxlength' => '320' 
                ]);?>
            </div>
            </div>

            <!-- Email Status -->
            <div class="form-group">
            <label class=" control-label" for='emailstatus'>
                <?php eT("Email status:"); ?>
            </label>
            <div class="">
                <?=TbHtml::textField('emailstatus', $emailstatus, [
                        'class' => 'form-control',
                        'size' => '50',
                        'maxlength' => '320',
                        'placeholder' => 'OK'
                ]);?>
            </div>
            </div>

            <!-- Invitation sent, Reminder sent -->
            <div class="form-group">
            <!-- Invitation sent -->
            <label class=" control-label" for='sent'>
                <?php eT("Invitation sent?"); ?>
            </label>
            <div class="selector__yesNoContainer <?php echo $sCointainerClass; ?>" id="sent-yes-no-date-container" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                <div class="row">
                <div class="">
                    <?php if ($oSurvey->anonymized != 'Y'):?>
                    <?php
                        // TODO: move to controller
                        $bSwitchValue       = (isset($sent) && $sent != 'N') ? "1" : "0";
                        $bRemindSwitchValue = (isset($remindersent) && $remindersent != 'N') ? "1" : "0";

                        $bSwitchValue = "0";
                        if (isset($sent) && $sent != 'N')
                        {
                            $bSwitchValue     = "1";
                            $sentDBValue      = $sent;
                            $sent             = convertToGlobalSettingFormat($sent, true);
                        }

                        $bRemindSwitchValue = "0";
                        if (isset($remindersent) && $remindersent != 'N')
                        {
                            $bRemindSwitchValue       = "1";
                            $remindersentDBValue      = $remindersent;
                            $remindersent             = convertToGlobalSettingFormat($remindersent, true);
                        }
                    ?>

                    <?php
                        $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                        'name' => "sent-switch",
                        'id'=>"sent-switch",
                        'htmlOptions'=>array('class'=>"YesNoDateSwitch action_toggle_bootstrap_switch"),
                        'value' => $bSwitchValue,
                        'onLabel'=>gT('Yes'),
                        'offLabel' => gT('No')));
                    ?>
                    <?php else:?>
                        <?php
                            $sentDBValue = $sent;
                            $remindersentDBValue = $remindersent;
                            $bSwitchValue       = (isset($sent) && $sent != 'N') ? "1" : "0";
                            $bRemindSwitchValue = (isset($remindersent) && $remindersent != 'N') ? "1" : "0";
                        ?>

                            <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                                'name' => "sent-switch",
                                'id'=>"sent-switch",
                                'htmlOptions'=>array('class'=>"YesNoSwitch action_toggle_bootstrap_switch"),
                                'value' => $bSwitchValue,
                                'onLabel'=>gT('Yes'),
                                'offLabel' => gT('No')));
                            ?>
                    <?php endif; ?>
                </div>

                <div class="">
                    <div id="sent-date-container" data-parent="#sent-switch" class="selector__date-container_hidden date-container" <?php if (!$bSwitchValue){ echo "style='display:none;'"; }?> >
                        <!-- Sent Date -->
                        <div id="sent-date_datetimepicker" class="input-group date">
                        <input class="YesNoDatePicker form-control" id="sent-date" type="text" value="<?php echo isset($sent) ? $sent : ''?>" name="sent-date" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm">
                        <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                        </div>
                    </div>
                </div>
                </div>
                <input class='form-control hidden YesNoDateHidden' type='text' size='20' id='sent' name='sent' value="<?php if (isset($sent)) {echo $sent; } else {echo " N "; }?>" />
            </div>
            </div>
            <div class="form-group">
            <!-- Reminder sent -->
            <label class=" control-label" for='remindersent'>
                <?php eT("Reminder sent?"); ?>
            </label>
            <div class="selector__yesNoContainer <?php echo $sCointainerClass; ?>" id="remind-yes-no-date-container" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">

                <div class="row">
                <div class="">
                    <?php if ($oSurvey->anonymized != 'Y') {
                        ?>
                    <?php
                        $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                        'name' => "remind-switch",
                        'id'=>"remind-switch",
                        'htmlOptions'=>array('class'=>"YesNoDateSwitch action_toggle_bootstrap_switch"),
                        'value' => $bRemindSwitchValue,
                        'onLabel'=>gT('Yes'),
                        'offLabel' => gT('No')));
                    ?>
                    <?php } else { ?>
                        <?php
                            $this->widget('yiiwheels.widgets.switch.WhSwitch', array(
                            'name' => "sent-switch",
                            'id'=>"sent-switch",
                            'htmlOptions'=>array('class'=>"YesNoSwitch action_toggle_bootstrap_switch"),
                            'value' => $bSwitchValue,
                            'onLabel'=>gT('Yes'),
                            'offLabel' => gT('No')));
                        ?>
                    <?php } ?>
                </div>

                <div class="">
                    <div id="remind-date-container" data-parent="#remind-switch" class="selector__date-container_hidden date-container" <?php if (!$bRemindSwitchValue){ echo "style='display:none;'"; }?> >

                        <div id="remind-date_datetimepicker" class="input-group date">
                        <input class="YesNoDatePicker form-control" id="remind-date" type="text" value="<?php echo isset($remindersent) ? $remindersent : ''?>" name="remind-date" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm">
                        <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                        </div>
                    </div>
                </div>
                </div>
                <input class='form-control hidden YesNoDateHidden' type='text' size='20' id='remindersent' name='remindersent' value="<?php if (isset($remindersent)) {echo $remindersent; } else {echo " N "; }?>" />
            </div>
                
            <!-- Reminder count, Uses left -->
            <div class="form-group">
                <!-- Reminder count -->
                <?php if ($token_subaction == "edit"): ?>
                <label class=" control-label" for='remindercount'>
                    <?php eT("Reminder count:"); ?>
                </label>
                <div class="">
                    <input class='form-control' type='number' size='6' id='remindercount' name='remindercount' value="<?php echo $remindercount; ?>" />
                </div>
                <?php endif; ?>
            </div>

                <!-- Uses left -->
            <div class="form-group">
                <label class=" control-label" for='usesleft'>
                <?php eT("Uses left:"); ?>
                </label>
                <div class="">
                <input class='form-control' type='number' size='20' id='usesleft' name='usesleft' value="<?php if (isset($usesleft)) {echo $usesleft; } else {echo " 1 "; }?>" />
                </div>
            </div>
            </div>
        </div>

        <div class="ls-flex-column ls-space padding left-5 right-35 col-md-12">
            <!-- Valid from to  -->
            <div class="form-group">
            <?php
                if (isset($validfrom) && $validfrom != 'N')
                {
                    $validfrom = convertToGlobalSettingFormat($validfrom, true);
                }

                if (isset($validuntil) && $validuntil != 'N')
                {
                    $validuntil = convertToGlobalSettingFormat($validuntil, true);
                }
            ?>

            <!-- From -->
            <label class=" control-label" for='validfrom'>
                <?php eT("Valid from"); ?>:</label>
            <div class=" has-feedback">
                <div id="validfrom_datetimepicker" class="input-group date">
                <input class="YesNoDatePicker form-control" id="validfrom" type="text" value="<?php echo isset($validfrom) ? $validfrom : ''?>" name="validfrom" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                </div>
            </div>
            </div>

            <div class="form-group">
            <!-- To -->
            <label class=" control-label" for='validuntil'>
                <?php eT('Until:'); ?>
            </label>
            <div class=" has-feedback">
                <div id="validuntil_datetimepicker" class="input-group date">
                <input class="YesNoDatePicker form-control" id="validuntil" type="text" value="<?php echo isset($validuntil) ? $validuntil : ''?>" name="validuntil" data-date-format="<?php echo $dateformatdetails['jsdate']; ?> HH:mm" data-locale="<?php echo convertLStoDateTimePickerLocale(Yii::app()->session['adminlang']); ?>">
                <span class="input-group-addon"><span class="fa fa-calendar"></span></span>
                </div>
            </div>
            </div>
        </div>
    </div>

    <!-- Custom attibutes -->
    <div id="custom" class="tab-pane fade in">
        <!-- Attributes -->
        <?php foreach ($attrfieldnames as $attr_name => $attr_description): ?>
            <div class="form-group">
                <label class=" control-label" for='<?php echo $attr_name; ?>'>
                    <?php echo $attr_description['description'].($attr_description['mandatory'] == 'Y' ? '*' : '') ?>:
                </label>
                <div class="">
                    <input class='form-control' type='text' size='55' id='<?php echo $attr_name; ?>' name='<?php echo $attr_name; ?>' value='<?php if (isset($$attr_name)){echo htmlspecialchars($$attr_name, ENT_QUOTES, 'utf-8');}?>' />
                </div>
            </div>
            <?php endforeach; ?>
        </div>
</div>

  <!-- Buttons -->
  <p>
    <?php
    switch ($token_subaction)
    {
        case "edit":?>
          <input type='submit' class="hidden" value='<?php eT("Update token entry"); ?>' />
          <input type='hidden' name='subaction' value='updatetoken' />
          <input type='hidden' name='tid' value='<?php echo $tokenid; ?>' />
        <?php break;
        case "addnew": ?>
          <input type='submit' class='hidden' value='<?php eT("Add token entry"); ?>' />
          <input type='hidden' name='subaction' value='inserttoken' />
        <?php break;
    } ?>
          <input type='hidden' name='sid' value='<?php echo $surveyid; ?>' />
  </p>
  </form>
</div>
</div>


  <div style="display: none;">
    <?php
        Yii::app()->getController()->widget('yiiwheels.widgets.datetimepicker.WhDateTimePicker', array(
        'name' => "no",
        'id'   => "no",
        'value' => '',

        ));
    ?>
  </div>
</div>
<?php
App()->getClientScript()->registerScript('TokenformViewBSSwitcher', "
LS.renderBootstrapSwitch();
", LSYii_ClientScript::POS_POSTSCRIPT);
?>