PHP FilterSearch函数代码示例

    $orderby = '';
} else {
    $orderby = preg_replace("#[^a-z]#i", '', $orderby);
}
if (!isset($searchtype)) {
    $searchtype = 'titlekeyword';
} else {
    $searchtype = preg_replace("#[^a-z]#i", '', $searchtype);
}
if (!isset($keyword)) {
    if (!isset($q)) {
        $q = '';
    }
    $keyword = $q;
}
$oldkeyword = $keyword = FilterSearch(stripslashes($keyword));
//查找栏目信息
if (empty($typeid)) {
    $typenameCacheFile = DEDEDATA . '/cache/typename.inc';
    if (!file_exists($typenameCacheFile) || filemtime($typenameCacheFile) < time() - 3600 * 24) {
        $fp = fopen(DEDEDATA . '/cache/typename.inc', 'w');
        fwrite($fp, "<" . "?php\r\n");
        $dsql->SetQuery("Select id,typename,channeltype From `#@__arctype`");
        $dsql->Execute();
        while ($row = $dsql->GetArray()) {
            fwrite($fp, "\$typeArr[{$row['id']}] = '{$row['typename']}';\r\n");
        }
        fwrite($fp, '?' . '>');
        fclose($fp);
    }
    //引入栏目缓存并看关键字是否有相关栏目内容

if (!isset($sex)) {
    $sex = '';
}
if (!isset($mtype)) {
    $mtype = '';
}
if (!isset($spacesta)) {
    $spacesta = -10;
}
if (!isset($matt)) {
    $matt = 10;
}
if (!isset($keyword)) {
    $keyword = '';
} else {
    $keyword = trim(FilterSearch($keyword));
}
$mtypeform = empty($mtype) ? "<option value=''>类型</option>\r\n" : "<option value='{$mtype}'>{$mtype}</option>\r\n";
$sexform = empty($sex) ? "<option value=''>性别</option>\r\n" : "<option value='{$sex}'>{$sex}</option>\r\n";
$sortkey = empty($sortkey) ? 'mid' : preg_replace("#[^a-z]#i", '', $sortkey);
$staArr = array(-2 => '限制用户(禁言)', -1 => '未通过审核', 0 => '审核通过，提示填写完整信息', 1 => '没填写详细资料', 2 => '正常使用状态');
$staArrmatt = array(1 => '被推荐', 0 => '非普通 ');
$MemberTypes = array();
$dsql->SetQuery("Select rank,membername From `#@__arcrank` where rank>0 ");
$dsql->Execute();
while ($row = $dsql->GetObject()) {
    $MemberTypes[$row->rank] = $row->membername;
}
if ($sortkey == 'mid') {
    $sortform = "<option value='mid'>mid/注册时间</option>\r\n";
} else {

/**
 * 上传
 * 
 * @version        $Id: uploads.php 1 8:38 2010年7月9日Z tianya $
 * @package        DedeCMS.Member
 * @copyright      Copyright (c) 2007 - 2010, DesDev, Inc.
 * @license        http://help.dedecms.com/usersguide/license.html
 * @link           http://www.dedecms.com
 */
require_once dirname(__FILE__) . "/config.php";
CheckRank(0, 0);
require_once DEDEINC . "/datalistcp.class.php";
setcookie("ENV_GOBACK_URL", $dedeNowurl, time() + 3600, "/");
$menutype = 'content';
$keyword = empty($keyword) ? '' : FilterSearch($keyword);
$addsql = " where mid='" . $cfg_ml->M_ID . "' AND title LIKE '%{$keyword}%' ";
if (empty($mediatype)) {
    $mediatype = 0;
}
$mediatype = intval($mediatype);
if ($mediatype > 0) {
    $addsql .= " AND mediatype='{$mediatype}' ";
}
$sql = "SELECT * FROM `#@__uploads` {$addsql} ORDER BY aid DESC";
$dlist = new DataListCP();
$dlist->pageSize = 5;
$dlist->SetParameter("mediatype", $mediatype);
$dlist->SetParameter("keyword", $keyword);
$dlist->SetTemplate(DEDEMEMBER . "/templets/uploads.htm");
$dlist->SetSource($sql);

 $modelform = $dsql->GetOne("SELECT * FROM #@__member_model WHERE id='{$modid}' ");
 if (!is_array($modelform)) {
     showmsg('模型表单不存在', '-1');
     exit;
 }
 $inadd_f = '';
 if (!empty($dede_fields)) {
     $fieldarr = explode(';', $dede_fields);
     if (is_array($fieldarr)) {
         foreach ($fieldarr as $field) {
             if ($field == '') {
                 continue;
             }
             $fieldinfo = explode(',', $field);
             if ($fieldinfo[1] == 'textdata') {
                 ${$fieldinfo[0]} = FilterSearch(stripslashes(${$fieldinfo[0]}));
                 ${$fieldinfo[0]} = addslashes(${$fieldinfo[0]});
             } else {
                 if ($fieldinfo[1] == 'img') {
                     ${$fieldinfo[0]} = addslashes(${$fieldinfo[0]});
                 } else {
                     if (empty(${$fieldinfo[0]})) {
                         ${$fieldinfo[0]} = '';
                     }
                     ${$fieldinfo[0]} = GetFieldValue(${$fieldinfo[0]}, $fieldinfo[1], 0, 'add', '', 'diy', $fieldinfo[0]);
                 }
             }
             if ($fieldinfo[0] == "birthday") {
                 ${$fieldinfo[0]} = GetDateMk(${$fieldinfo[0]});
             }
             $inadd_f .= ',' . $fieldinfo[0] . " ='" . ${$fieldinfo[0]} . "'";

 * @package        DedeCMS.Site
 * @copyright      Copyright (c) 2007 - 2010, DesDev, Inc.
 * @license        http://help.dedecms.com/usersguide/license.html
 * @link           http://www.dedecms.com
 */
require_once dirname(__FILE__) . "/include/common.inc.php";
require_once DEDEINC . "/arc.taglist.class.php";
$PageNo = 1;
if (isset($_SERVER['QUERY_STRING'])) {
    $tag = trim($_SERVER['QUERY_STRING']);
    $tags = explode('/', $tag);
    if (isset($tags[1])) {
        $tag = $tags[1];
    }
    if (isset($tags[2])) {
        $PageNo = intval($tags[2]);
    }
} else {
    $tag = '';
}
$tag = FilterSearch(urldecode($tag));
if ($tag != addslashes($tag)) {
    $tag = '';
}
if ($tag == '') {
    $dlist = new TagList($tag, 'tag.htm');
} else {
    $dlist = new TagList($tag, 'taglist.htm');
}
$dlist->Display();
exit;

}
//如果指定了内容模型ID但没有指定栏目ID，那么自动获得为这个内容模型的第一个顶级栏目作为频道默认栏目
if (!empty($channelid) && empty($tid)) {
    $tinfos = $dsql->GetOne("SELECT tp.id,ch.issystem FROM `#@__arctype` tp LEFT JOIN `#@__channeltype` ch ON ch.id=tp.channeltype WHERE tp.channeltype='{$channelid}' And tp.reid=0 order by sortrank asc");
    if (!is_array($tinfos)) {
        die(" No catalogs in the channel! ");
    }
    $tid = $tinfos['id'];
} else {
    $tinfos = $dsql->GetOne("SELECT ch.issystem FROM `#@__arctype` tp LEFT JOIN `#@__channeltype` ch ON ch.id=tp.channeltype WHERE tp.id='{$tid}' ");
}
if ($tinfos['issystem'] == -1) {
    $nativeplace = empty($nativeplace) || !is_numeric($nativeplace) ? 0 : $nativeplace;
    $infotype = empty($infotype) || !is_numeric($infotype) ? 0 : $infotype;
    if (!empty($keyword)) {
        $keyword = FilterSearch($keyword);
    }
    $cArr = array();
    if (!empty($nativeplace)) {
        $cArr['nativeplace'] = $nativeplace;
    }
    if (!empty($infotype)) {
        $cArr['infotype'] = $infotype;
    }
    if (!empty($keyword)) {
        $cArr['keyword'] = $keyword;
    }
    include DEDEINC . "/arc.sglistview.class.php";
    $lv = new SgListView($tid, $cArr);
} else {
    include DEDEINC . "/arc.listview.class.php";

<?php

require "../global.php";
require "../cache/s_cate_array.php";
require_once "global.func.php";
require_once "search.class.php";
$s = intval($_GET["s"]);
$wd = $_GET["wd"];
$from_host = str_replace("http://", "", GetSiteUrl($_SERVER['HTTP_REFERER']));
if ($from_host != $_SERVER['HTTP_HOST']) {
    $wd = get_encoding($wd, "GB2312");
}
$old_wd = $wd;
$wd = FilterSearch($wd);
if (strlen($wd) <= 0) {
    header("location:" . $config["url"]);
}
$wd_en = urlencode($wd);
$is_site = false;
//////////////////////
class runtime
{
    var $StartTime = 0;
    var $StopTime = 0;
    function get_microtime()
    {
        list($usec, $sec) = explode(' ', microtime());
        return (double) $usec + (double) $sec;
    }
    function start()
    {

    if ($nativeplace != 0) {
        $min = $nativeplace - 1;
        $max = $nativeplace + 500;
        $wheresql .= " and (company.place = '{$nativeplace}' or (company.place >= '{$min}' and company.place < '{$max}'))";
    }
}
if ($vocation > 0) {
    if ($vocation % 500 != 0) {
        $wheresql .= " and company.vocation = '{$vocation}' ";
    } else {
        $max = ceil(($vocation + 1) / 500) * 500;
        $min = $max - 500;
        $wheresql .= " and company.vocation >= '{$min}' and company.vocation < '{$max}'";
    }
}
$cname = FilterSearch(stripslashes($cname));
$cname = addslashes(cn_substr($cname, 30));
if ($cname != '') {
    $wheresql .= " and (company.company like '%{$cname}%' or company.product like '%{$cname}%')";
}
/*
//如果要允许搜索具体地址，在模板增加搜索地址的文本框name='town'，然后去除此注解即可。
$town = FilterSearch(stripslashes($town));
$town = addslashes(cn_substr($town, 20));
if($town != '')
{
    $wheresql .= " and company.address like '%$town%'";
}
*/
$sql = "select company.*, member.userid from `#@__member_company` company\r\n             left join `#@__member` member on member.mid=company.mid\r\n             where {$wheresql} order by uptime desc, mid desc ";
$dl = new DataListCP();

    $leftarray = $goodsobj->getdata(10, "flag='c'", 'buynum desc,gid desc', 'gid,gtypeid,goodsname,goodsprice,goodsimg,rindex,views,buynum,listorder,flag,addtime');
    addfield($goodsobj->table, 'views', "gid=" . $gid, 1);
    //增加浏览次数
    include template('shop_view');
    //包含输出指定模板
} else {
    InitGP(array("c", "k"));
    //初始化变量全局返回
    if (!empty($c) || !empty($k)) {
        if (!empty($c)) {
            $tids = $tree->getChilds($c);
            $tids[] = $c;
            $wherestr[] = "gtypeid in(" . getdotstring($tids, 'int') . ")";
        }
        if (!empty($k) && strlen($k) >= 2) {
            $keyword = FilterSearch(stripslashes($k));
            //过滤搜索
            $wherestr[] = "goodsname like '%" . $keyword . "%'";
        }
    } else {
        $wherestr[] = "flag='c'";
    }
    if (!empty($wherestr)) {
        $wheresql = implode(' AND ', $wherestr);
    }
    //条件汇总
    //获取当前页码
    $total = $goodsobj->getcount($wheresql);
    //总信息数
    $pagesize = 9;
    //一页显示信息数

<?php

include "common.inc.php";
InitGP(array("action", "type", "oid", "sid", "page", "minPrice", "maxPrice", "pages", "goodprices", "addtime", "k", "c"));
include_once INC_PATH . "/order.class.php";
$o = OrderClass::init();
$Table = new OrderClass();
$typeobj = new TableClass('otype', 'typeid');
if (empty($action)) {
    $k = FilterSearch(stripslashes($k));
    //过滤搜索
    if ($k != '' || strlen($k) > 2) {
        $wherestr[] = "goodsname like '%" . $k . "%'";
    }
    $c = GetNum($c);
    if ($c) {
        $wherestr[] = "typeid='" . $c . "'";
    }
    $wherestr[] = "state=1";
    $wherestr[] = "type=1";
    if (!empty($minPrice) && !empty($maxPrice)) {
        $wherestr[] = "goodsprice between {$minPrice} and {$maxPrice}";
    }
    if (!empty($pages)) {
        $pagesize = $pages;
    } else {
        $pagesize = 9;
    }
    if (!empty($goodprices)) {
        if ($goodprices == asc) {
            $orderby = "goodsprice asc";

 protected function FilterSearch($query)
 {
     if (function_exists('FilterSearch')) {
         return FilterSearch($query);
     } else {
         return $query;
     }
 }