pfSense

<?php

/*

 * pkg_edit.php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2004-2016 Rubicon Communications, LLC (Netgate)

 * All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions are met:

 *

 * 1. Redistributions of source code must retain the above copyright notice,

 *    this list of conditions and the following disclaimer.

 *

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in

 *    the documentation and/or other materials provided with the

 *    distribution.

 *

 * 3. All advertising materials mentioning features or use of this software

 *    must display the following acknowledgment:

 *    "This product includes software developed by the pfSense Project

 *    for use in the pfSense® software distribution. (http://www.pfsense.org/).

 *

 * 4. The names "pfSense" and "pfSense Project" must not be used to

 *    endorse or promote products derived from this software without

 *    prior written permission. For written permission, please contact

 *    coreteam@pfsense.org.

 *

 * 5. Products derived from this software may not be called "pfSense"

 *    nor may "pfSense" appear in their names without prior written

 *    permission of the Electric Sheep Fencing, LLC.

 *

 * 6. Redistributions of any form whatsoever must retain the following

 *    acknowledgment:

 *

 * "This product includes software developed by the pfSense Project

 * for use in the pfSense software distribution (http://www.pfsense.org/).

 *

 * THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 * OF THE POSSIBILITY OF SUCH DAMAGE.

 */

##|+PRIV

##|*IDENT=page-package-edit

##|*NAME=Package: Edit

##|*DESCR=Allow access to the 'Package: Edit' page.

##|*MATCH=pkg_edit.php*

##|-PRIV

ini_set('max_execution_time', '0');

require_once("guiconfig.inc");

require_once("functions.inc");

require_once("filter.inc");

require_once("shaper.inc");

require_once("pkg-utils.inc");

/* dummy stubs needed by some code that was MFC'd */

function pfSenseHeader($location) {

	header("Location: " . $location);

}

$xml = htmlspecialchars($_GET['xml']);

if ($_POST['xml']) {

	$xml = htmlspecialchars($_POST['xml']);

}

$xml_fullpath = realpath('/usr/local/pkg/' . $xml);

if ($xml == "" || $xml_fullpath === false || substr($xml_fullpath, 0, strlen('/usr/local/pkg/')) != '/usr/local/pkg/') {

	$pgtitle = array(gettext("Package"), gettext("Editor"));

	include("head.inc");

	print_info_box(gettext("No valid package defined."), 'danger', false);

	include("foot.inc");

	die;

} else {

	$pkg = parse_xml_config_pkg($xml_fullpath, "packagegui");

}

if ($pkg['include_file'] != "") {

	require_once($pkg['include_file']);

}

if (!isset($pkg['adddeleteeditpagefields'])) {

	$only_edit = true;

} else {

	$only_edit = false;

}

$id = $_GET['id'];

if (isset($_POST['id'])) {

	$id = htmlspecialchars($_POST['id']);

}

// Not posting?	 Then user is editing a record. There must be a valid id

// when editing a record.

if (!$id && !$_POST) {

	$id = "0";

}

if (!is_numeric($id)) {

	header("Location: /");

	exit;

}

if ($pkg['custom_php_global_functions'] != "") {

	eval($pkg['custom_php_global_functions']);

}

// grab the installedpackages->package_name section.

if ($config['installedpackages'] && !is_array($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'])) {

	$config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'] = array();

}

// If the first entry in the array is an empty <config/> tag, kill it.

if ($config['installedpackages'] &&

    (count($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']) > 0) &&

    ($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'][0] == "")) {

	array_shift($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']);

}

$a_pkg = &$config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'];

if ($_GET['savemsg'] != "") {

	$savemsg = htmlspecialchars($_GET['savemsg']);

}

if ($pkg['custom_php_command_before_form'] != "") {

	eval($pkg['custom_php_command_before_form']);

}

if ($_POST) {

	$rows = 0;

	$input_errors = array();

	$reqfields = array();

	$reqfieldsn = array();

	foreach ($pkg['fields']['field'] as $field) {

		if (isset($field['required'])) {

			if ($field['fieldname']) {

				$reqfields[] = $field['fieldname'];

			}

			if ($field['fielddescr']) {

				$reqfieldsn[] = $field['fielddescr'];

			}

		}

	}

	do_input_validation($_POST, $reqfields, $reqfieldsn, $input_errors);

	if ($pkg['custom_php_validation_command']) {

		eval($pkg['custom_php_validation_command']);

	}

	if ($_POST['act'] == "del") {

		if ($pkg['custom_delete_php_command']) {

			if ($pkg['custom_php_command_before_form'] != "") {

				eval($pkg['custom_php_command_before_form']);

			}

			eval($pkg['custom_delete_php_command']);

		}

		write_config($pkg['delete_string']);

		// resync the configuration file code if defined.

		if ($pkg['custom_php_resync_config_command'] != "") {

			if ($pkg['custom_php_command_before_form'] != "") {

				eval($pkg['custom_php_command_before_form']);

			}

			eval($pkg['custom_php_resync_config_command']);

		}

	} else {

		if (!$input_errors && $pkg['custom_add_php_command']) {

			if ($pkg['donotsave'] != "" or $pkg['preoutput'] != "") {

				include("head.inc");

			}

			if ($pkg['preoutput']) {

				echo "<pre>";

			}

			eval($pkg['custom_add_php_command']);

			if ($pkg['preoutput']) {

				echo "</pre>";

			}

		}

	}

	// donotsave is enabled.  lets simply exit.

	if (empty($pkg['donotsave'])) {

		// store values in xml configuration file.

		if (!$input_errors) {

			$pkgarr = array();

			foreach ($pkg['fields']['field'] as $fields) {

				switch ($fields['type']) {

					case "rowhelper":

						// save rowhelper items.

						#$rowhelpername=($fields['fieldname'] ? $fields['fieldname'] : "row");

						$rowhelpername="row";

						foreach ($fields['rowhelper']['rowhelperfield'] as $rowhelperfield) {

							foreach ($_POST as $key => $value) {

								$matches = array();

								if (preg_match("/^{$rowhelperfield['fieldname']}(\d+)$/", $key, $matches)) {

									$pkgarr[$rowhelpername][$matches[1]][$rowhelperfield['fieldname']] = $value;

								}

							}

						}

						break;

					default:

						$fieldname = $fields['fieldname'];

						if ($fieldname == "interface_array") {

							$fieldvalue = $_POST[$fieldname];

						} elseif (is_array($_POST[$fieldname])) {

							$fieldvalue = implode(',', $_POST[$fieldname]);

						} else {

							$fieldvalue = trim($_POST[$fieldname]);

							if ($fields['encoding'] == 'base64') {

								$fieldvalue = base64_encode($fieldvalue);

							}

						}

						if ($fieldname) {

							$pkgarr[$fieldname] = $fieldvalue;

						}

					}

			}

			if (isset($id) && $a_pkg[$id]) {

				$a_pkg[$id] = $pkgarr;

			} else {

				$a_pkg[] = $pkgarr;

			}

			write_config($pkg['addedit_string']);

			// late running code

			if ($pkg['custom_add_php_command_late'] != "") {

				eval($pkg['custom_add_php_command_late']);

			}

			if (isset($pkg['filter_rules_needed'])) {

				filter_configure();

			}

			// resync the configuration file code if defined.

			if ($pkg['custom_php_resync_config_command'] != "") {

				eval($pkg['custom_php_resync_config_command']);

			}

			parse_package_templates();

			/* if start_command is defined, restart w/ this */

			if ($pkg['start_command'] != "") {

				exec($pkg['start_command'] . ">/dev/null 2&>1");

			}

			/* if restart_command is defined, restart w/ this */

			if ($pkg['restart_command'] != "") {

				exec($pkg['restart_command'] . ">/dev/null 2&>1");

			}

			if ($pkg['aftersaveredirect'] != "") {

				pfSenseHeader($pkg['aftersaveredirect']);

			} elseif (!$pkg['adddeleteeditpagefields']) {

				pfSenseHeader("pkg_edit.php?xml={$xml}&id=0");

			} elseif (!$pkg['preoutput']) {

				pfSenseHeader("pkg.php?xml=" . $xml);

			}

			exit;

		} else {

			$get_from_post = true;

		}

	} elseif (!$input_errors) {

		exit;

	}

}

// Turn an embedded table into a bootstrap class table. This is for backward compatibility.

// We remove any table attributes in the XML and replace them with Bootstrap table classes

function bootstrapTable($text) {

	$t = strpos($text, '<table') + strlen('<table');	// Find the <table tag

	$c = strpos($text, '>', $t);						// And its closing bracket

	// Substitute everything inbetween with our new classes

	if ($t && $c && (($c - $t) < 200)) {

		return(substr_replace($text, ' class="table table-striped table-hover table-condensed"', $t, ($c - $t)));

	}

}

/*

 * ROW helper function. Creates one element in the row from a PHP table by adding

 * the specified element to $group

 */

function display_row($trc, $value, $fieldname, $type, $rowhelper, $description, $ewidth = null) {

	global $text, $group, $config;

	switch ($type) {

		case "input":

			$inpt = new Form_Input(

				$fieldname . $trc,

				null,

				'text',

				$value

			);

			$inpt->setHelp($description);

			if ($ewidth) {

				$inpt->setWidth($ewidth);

			}

			$group->add($inpt);

			break;

		case "checkbox":

			$group->add(new Form_Checkbox(

				$fieldname . $trc,

				null,

				null,

				$value,

				'ON'

			))->setHelp($description);

			break;

		case "password":

			$group->add(new Form_Input(

				$fieldname . $trc,

				null,

				'password',

				$value

			))->setHelp($description);

			break;

		case "textarea":

			$group->add(new Form_Textarea(

				$fieldname . $trc,

				null,

				$value

			))->setHelp($description);

			break;

		case "select":

			$options = array();

			foreach ($rowhelper['options']['option'] as $rowopt) {

				$options[$rowopt['value']] = $rowopt['name'];

			}

			$grp = new Form_Select(

				$fieldname . $trc,

				null,

				$value,

				$options

			);

			$grp->setHelp($description);

			if ($ewidth) {

				$grp->setWidth($ewidth);

			}

			$group->add($grp);

			break;

		case "interfaces_selection":

			$size = ($size ? "size=\"{$size}\"" : '');

			$multiple = '';

			if (isset($rowhelper['multiple'])) {

				$multiple = "multiple";

			}

			echo "<select style='height:22px;' id='{$fieldname}{$trc}' name='{$fieldname}{$trc}' {$size} {$multiple}>\n";

			$ifaces = get_configured_interface_with_descr();

			$additional_ifaces = $rowhelper['add_to_interfaces_selection'];

			if (!empty($additional_ifaces)) {

				$ifaces = array_merge($ifaces, explode(',', $additional_ifaces));

			}

			if (is_array($value)) {

				$values = $value;

			} else {

				$values = explode(',', $value);

			}

			$ifaces["lo0"] = "loopback";

			$options = array();

			$selected = array();

			foreach ($ifaces as $ifname => $iface) {

				$options[$ifname] = $iface;

				if (in_array($ifname, $values)) {

					array_push($selected, $ifname);

				}

			}

			$group->add(new Form_Select(

				$fieldname . $trc,

				null,

				($multiple) ? $selected:$selected[0],

				$options,

				$multiple

			))->setHelp($description);

			//echo "</select>\n";

			break;

		case "select_source":

			$options = array();

			$selected = array();

			if (isset($rowhelper['show_disable_value'])) {

				$options[$rowhelper['show_disable_value']] = $rowhelper['show_disable_value'];

			}

			$source_url = $rowhelper['source'];

			eval("\$pkg_source_txt = &$source_url;");

			foreach ($pkg_source_txt as $opt) {

				$source_name = ($rowhelper['source_name'] ? $opt[$rowhelper['source_name']] : $opt[$rowhelper['name']]);

				$source_value = ($rowhelper['source_value'] ? $opt[$rowhelper['source_value']] : $opt[$rowhelper['value']]);

				$options[$source_value] = $source_name;

				if ($source_value == $value) {

					array_push($selected, $value);

				}

			}

			$group->add(new Form_Select(

				$fieldname . $trc,

				null,

				($multiple) ? $selected:$selected[0],

				$options,

				$multiple

			))->setHelp($description);

			break;

	}

}

function fixup_string($string) {

	global $config;

	// fixup #1: $myurl -> http[s]://ip_address:port/

	$https = "";

	$port = $config['system']['webguiport'];

	if ($port != "443" and $port != "80") {

		$urlport = ":" . $port;

	} else {

		$urlport = "";

	}

	if ($config['system']['webgui']['protocol'] == "https") {

		$https = "s";

	}

	$myurl = "http" . $https . "://" . getenv("HTTP_HOST") . $urlport;

	$newstring = str_replace("\$myurl", $myurl, $string);

	$string = $newstring;

	// fixup #2: $wanip

	$curwanip = get_interface_ip();

	$newstring = str_replace("\$wanip", $curwanip, $string);

	$string = $newstring;

	// fixup #3: $lanip

	$lancfg = $config['interfaces']['lan'];

	$lanip = $lancfg['ipaddr'];

	$newstring = str_replace("\$lanip", $lanip, $string);

	$string = $newstring;

	// fixup #4: fix'r'up here.

	return $newstring;

}

/*

 *	Parse templates if they are defined

 */

function parse_package_templates() {

	global $pkg;

	if ($pkg['templates']['template'] != "") {

		foreach ($pkg['templates']['template'] as $pkg_template_row) {

			$filename = $pkg_template_row['filename'];

			$template_text = $pkg_template_row['templatecontents'];

			/* calculate total row helpers count and */

			/* change fields defined as fieldname_fieldvalue to their value */

			foreach ($pkg['fields']['field'] as $fields) {

				switch ($fields['type']) {

					case "rowhelper":

						// save rowhelper items.

						$row_helper_total_rows = 0;

						$row_helper_data = "";

						foreach ($fields['rowhelper']['rowhelperfield'] as $rowhelperfield) {

							foreach ($_POST as $key => $value) {

								if (preg_match("/^{$rowhelperfield['fieldname']}(\d+)$/", $key, $matches)) {

									$row_helper_total_rows++;

									$row_helper_data .= $value;

									$sep = "";

									ereg($rowhelperfield['fieldname'] . "_fieldvalue\[(.*)\]", $template_text, $sep);

									foreach ($sep as $se) {

										$separator = $se;

									}

									if ($separator != "") {

										$row_helper_data = ereg_replace("  ", $separator, $row_helper_data);

										$template_text = ereg_replace("\[{$separator}\]", "", $template_text);

									}

									$template_text = str_replace($rowhelperfield['fieldname'] . "_fieldvalue", $row_helper_data, $template_text);

								}

							}

						}

						break;

					default:

						$fieldname = $fields['fieldname'];

						$fieldvalue = $_POST[$fieldname];

						$template_text = str_replace($fieldname . "_fieldvalue", $fieldvalue, $template_text);

				}

			}

			/* replace $domain_total_rows with total rows */

			$template_text = str_replace("$domain_total_rows", $row_helper_total_rows, $template_text);

			/* replace cr's */

			$template_text = str_replace("\\n", "\n", $template_text);

			/* write out new template file */

			$fout = fopen($filename, "w");

			fwrite($fout, $template_text);

			fclose($fout);

		}

	}

}

//breadcrumb

if ($pkg['title'] != "") {

	if (!$only_edit) {

		$pkg['title'] = $pkg['title'] . '/Edit';

	}

	if (strpos($pkg['title'], '/')) {

		$title = explode('/', $pkg['title']);

		foreach ($title as $subtitle) {

			$pgtitle[] = gettext($subtitle);

		}

	} else {

		$pgtitle = array(gettext("Package"), gettext($pkg['title']));

	}

} else {

	$pgtitle = array(gettext("Package"), gettext("Editor"));

}

// Create any required tabs

if ($pkg['tabs'] != "") {

	$tab_array = array();

	foreach ($pkg['tabs']['tab'] as $tab) {

		if ($tab['tab_level']) {

			$tab_level = $tab['tab_level'];

		} else {

			$tab_level = 1;

		}

		if (isset($tab['active'])) {

			$active = true;

			$pgtitle[] = $tab['text'] ;

		} else {

			$active = false;

		}

		if (isset($tab['no_drop_down'])) {

			$no_drop_down = true;

		}

		$urltmp = "";

		if ($tab['url'] != "") {

			$urltmp = $tab['url'];

		}

		if ($tab['xml'] != "") {

			$urltmp = "pkg_edit.php?xml=" . $tab['xml'];

		}

		$addresswithport = getenv("HTTP_HOST");

		$colonpos = strpos($addresswithport, ":");

		if ($colonpos !== False) {

			//my url is actually just the IP address of the pfsense box

			$myurl = substr($addresswithport, 0, $colonpos);

		} else {

			$myurl = $addresswithport;

		}

		// eval url so that above $myurl item can be processed if need be.

		$url = str_replace('$myurl', $myurl, $urltmp);

		$tab_array[$tab_level][] = array(

			$tab['text'],

			$active,

			$url

		);

	}

	ksort($tab_array);

}

include("head.inc");

if ($pkg['custom_php_after_head_command']) {

	eval($pkg['custom_php_after_head_command']);

}

if (isset($tab_array)) {

	foreach ($tab_array as $tabid => $tab) {

		display_top_tabs($tab); //, $no_drop_down, $tabid);

	}

}

// Start of page display

if ($input_errors) {

	print_input_errors($input_errors);

}

if ($savemsg) {

	print_info_box($savemsg, 'success');

}

$cols = 0;

$savevalue = gettext("Save");

if ($pkg['savetext'] != "") {

	$savevalue = $pkg['savetext'];

}

$savehelp = "";

if ($pkg['savehelp'] != "") {

	$savehelp = $pkg['savehelp'];

}

$saveicon = "fa-save";

if ($pkg['saveicon'] != "") {

	$saveicon = $pkg['saveicon'];

}

$savebtnclass = "btn-primary";

if ($pkg['savebtnclass'] != "") {

	$savebtnclass = $pkg['savebtnclass'];

}

$grouping = false; // Indicates the elements we are composing are part of a combined group

$savebutton = new Form_Button(

	'submit',

	$savevalue,

	null,

	$saveicon

);

$savebutton->addClass($savebtnclass);

if ($savehelp) {

	$savebutton->setHelp($savehelp);

}

$form = new Form($savebutton);

$form->addGlobal(new Form_Input(

	'xml',

	null,

	'hidden',

	$xml

));

/* If a package's XML has <advanced_options/> configured, then setup

 * the section for the fields that have <advancedfield/> set.

 * These fields will be placed below other fields in a separate area titled 'Advanced Features'.

 * These advanced fields are not normally configured and generally left to default to 'default settings'.

 */

if ($pkg['advanced_options'] == "enabled") {

	$advfield_count = 0;

	$advanced = new Form_Section("Advanced Features");

	$advanced->addClass('advancedoptions');

}

$js_array = array();

// Now loop through all of the fields defined in the XML

if (!is_array($pkg['fields']['field'])) {

	$pkg['fields']['field'] = array();

}

foreach ($pkg['fields']['field'] as $pkga) {

	$action = "";

	$uid = "";

	if ($pkga['type'] == "sorting") {

		continue;

	}

	// Generate a new section

	if ($pkga['type'] == "listtopic") {

		if (isset($pkga['advancedfield']) && isset($advfield_count)) {

			$advanced->addInput(new Form_StaticText(

				strip_tags($pkga['name']),

				null

			));

			$advfield_count++;

		}  else {

			if (isset($section)) {

				$form->add($section);

			}

			if (isset($pkga['collapse'])) {

				$uid = uniqid("section");

				$action = COLLAPSIBLE;

				if ($pkga['collapse'] == "open") {

					$action |= SEC_OPEN;

				} else {

					$action |= SEC_CLOSED;

				}

			}

			$section = new Form_Section(strip_tags($pkga['name']), $uid, $action);

		}

		continue;

	}

	// 'begin' starts a form group. ('end' ends it)

	if ($pkga['combinefields'] == "begin") {

		$group = new Form_Group(strip_tags($pkga['fielddescr']));

		$grouping = true;

	}

	$size = "";

	$colspan="";

	// if user is editing a record, load in the data.

	$fieldname = $pkga['fieldname'];

	unset($value);

	if ($get_from_post) {

		$value = $_POST[$fieldname];

		if (is_array($value)) {

			$value = implode(',', $value);

		}

	} else {

		if (isset($id) && isset($a_pkg[$id][$fieldname])) {

			$value = $a_pkg[$id][$fieldname];

		} else {

			if (isset($pkga['default_value'])) {

				$value = $pkga['default_value'];

			}

		}

	}

	// If we get here but have no $section, the package config file probably had no listtopic field

	// We can create a section with a generic name to fix that

	if (!$section) {

		$section = new Form_Section('General Options');

	}

	switch ($pkga['type']) {

		// Create an input element. The format is slightly different depending on whether we are composing a group,

		// section, or advanced section. This is true for every element type

		case "input":

			if (($pkga['encoding'] == 'base64') && !$get_from_post && !empty($value)) {

				$value = base64_decode($value);

			}

			$grp = new Form_Input(

					$pkga['fieldname'],

					$pkga['fielddescr'],

					'text',

					$value

				);

			$grp->setHelp($pkga['description']);

			if ($pkga['width']) {

				$grp->setWidth($pkga['width']);

			}

			if ($grouping) {

				$group->add($grp);

			} else {

				if (isset($pkga['advancedfield']) && isset($advfield_count)) {

					$advanced->addInput($grp);

				} else {

					$section->addInput($grp);

				}

			}

			break;

		case "password":

			if (($pkga['encoding'] == 'base64') && !$get_from_post && !empty($value)) {

				$value = base64_decode($value);

			}

			// Create a password element

			if ($grouping) {

				$group->add(new Form_Input(

					$pkga['fieldname'],

					$pkga['fielddescr'],

					'password',

					$value

				))->setHelp($pkga['description']);

			} else {

				if (isset($pkga['advancedfield']) && isset($advfield_count)) {

					$advanced->addInput(new Form_Input(

						$pkga['fieldname'],

						$pkga['fielddescr'],

						'password',

						$value

					))->setHelp($pkga['description']);

				} else {

					$section->addInput(new Form_Input(

						$pkga['fieldname'],

						$pkga['fielddescr'],

						'password',

						$value

					))->setHelp($pkga['description']);

				}

			}

			break;

		case "info":

			// If the info contains a table we should detect and Bootstrap it

			if (strpos($pkga['description'], '<table') !== FALSE) {

				$info = bootstrapTable($pkga['description']);

			} else {

				$info = $pkga['description'];

			}

			if (isset($pkga['advancedfield']) && isset($advfield_count)) {

				$advanced->addInput(new Form_StaticText(

					strip_tags($pkga['fielddescr']),

					$info

				));

			} else {

				$section->addInput(new Form_StaticText(

					strip_tags($pkga['fielddescr']),

					$info

				));

			}

			break;

		case "select":

			// Create a select element

			$optionlist = array();

			$selectedlist = array();

			$fieldname = $pkga['fieldname'];

			if (isset($pkga['multiple'])) {

				$multiple = 'multiple';

				$items = explode(',', $value);

				$fieldname .= "[]";

			} else {

				$multiple = '';

				$items = array($value);

			}

			$onchange = (isset($pkga['onchange']) ? "onchange=\"{$pkga['onchange']}\"" : '');

			foreach ($pkga['options']['option'] as $opt) {