PHP PostVar函数代码示例

<?php

include S_SECTIONS . "/member/memberaccess.php";
$table = PostVar('table');
$id = PostVar('id');
$fields = PostVar('fields');
//$where = GetVar('where');
if ($fields == 'all') {
    $fields = '*';
}
if ($table != '') {
    if ($id != '') {
        $sql = "select {$fields} from {$table}  where iOrganizationID = '{$id}' ";
    }
    //echo $sql;exit;
    if ($sql != '') {
        $dtls = $dbobj->MySqlSelect($sql);
    }
}
// prints($dtls);exit;
//echo $dtls[0]['vPhone'];exit;
$Phone = array();
if (strpos($dtls[0]['vPhone'], '-') !== false) {
    $Phone = @explode('-', $dtls[0]['vPhone']);
} else {
    $Phone[0] = '';
    $Phone[1] = $dtls[0]['vPhone'];
}
if (!isset($cntstObj)) {
    include_once SITE_CLASS_GEN . "class.countrystate.php";
    $cntstObj = new CountryState();

        $where .= " AND r2bd.eStatus='current'";
    } else {
        $where .= " AND r2bd.eStatus='outbidded'";
    }
}
if ($sess_usertype_short == 'OU' || $sess_usertype_short == 'OA') {
    $where .= " AND rpb2.iBuyer2Id={$curORGID} AND sm.vStatus_en='Verify' ";
}
/* else if($sess_usertype_short == 'OA') {
  $where .= " AND rfq2.iOrganizationID=$curORGID ";
  } */
// echo $where; exit;
### SORTING ###
$cursort = PostVar('cursort');
$cursort = stripslashes($cursort);
$cursorttype = PostVar('cursorttype');
$cursorttype = stripslashes($cursorttype);
if ($cursort != '') {
    if ($cursorttype == '1') {
        $cursort_type = 'ASC';
    } else {
        $cursort_type = 'DESC';
    }
    if (strpos($cursort, ',') !== false) {
        $cursort = str_replace(",", " {$cursort_type}, ", $cursort);
    }
    $orderBy = " {$cursort} {$cursort_type}";
} else {
    $orderBy = " r2bd.dBidDate DESC ";
}
## ENDS HERE ###

<?php

$iProductId = PostVar('iProductId');
$iInvoiceID = PostVar('iInvoiceID');
$eType = PostVar('eType');
$iPurchaseOrderID = PostVar('iPurchaseOrderID');
$elid = PostVar('elid');
$elnm = PostVar('elnm');
$ocf = PostVar('ocf');
$ext = stripcslashes(PostVar('ext'));
$dflt = stripcslashes(PostVar('dflt'));
if (!isset($invOrdObj)) {
    include_once SITE_CLASS_APPLICATION . "user/class.InvoiceOrderHeading.php";
    $invOrdObj = new InvoiceOrderHeading();
}
if (!isset($purOrdObj)) {
    include_once SITE_CLASS_APPLICATION . "user/class.PurchaseOrderHeading.php";
    $purOrdObj = new PurchaseOrderHeading();
}
$orgas = "";
if ($eType == "Invoice") {
    $invdtls = $invOrdObj->getDetails('iBuyerOrganizationID,iSupplierOrganizationID', " AND iInvoiceID={$iInvoiceID} ");
} else {
    if ($eType == "PO") {
        $invdtls = $purOrdObj->getDetails('iBuyerOrganizationID,iSupplierOrganizationID', " AND iPurchaseOrderID={$iPurchaseOrderID} ");
    }
}
if ($invdtls[0]['iBuyerOrganizationID'] == $curORGID) {
    $orgas = "Buyer";
} else {
    if ($invdtls[0]['iSupplierOrganizationID'] == $curORGID) {

 */
include_once SITE_CLASS_APPLICATION . 'class.AdminUser.php';
$adminUserObj = new AdminUser();
include_once SITE_CLASS_APPLICATION . 'class.AccessPerModule.php';
$accModObj = new AccessPerModule();
$mode = PostVar('mode');
$Data = PostVar('Data');
$actionfile = PostVar('actionfile');
$listArr = PostVar('listing');
$addArr = PostVar('add');
$updateArr = PostVar('update');
$DeleteArr = PostVar('delete');
$activeArr = PostVar('active');
$inactiveArr = PostVar('inactive');
$blockArr = PostVar('block');
$searchArr = PostVar('search');
$arr = $adminUserObj->select($Data['iAdminId']);
//prints($arr);exit;
$Data['eAdminType'] = $arr[0]['eType'];
if (count($_POST) > 0) {
    if (count($listArr) > 0) {
        $Data['tListing'] = @implode(",", $listArr);
    } else {
        $Data['tListing'] = "";
    }
    if (count($addArr) > 0) {
        $Data['tAdd'] = @implode(",", $addArr);
    } else {
        $Data['tAdd'] = "";
    }
    if (count($updateArr) > 0) {

}
if (!isset($emailObj)) {
    include_once SITE_CLASS_APPLICATION . 'class.EmailTemplate.php';
    $emailObj = new EmailTemplate();
}
$Data = PostVar("Data");
if (is_array($Data['vCurrency'])) {
    $Data['vCurrency'] = @implode(',', $Data['vCurrency']);
}
if (trim($Data['eSecureImportExport']) != 'Yes') {
    $Data['eSecureImportExport'] = 'No';
}
$iAdditionalInfoID = PostVar("iAdditionalInfoID");
$iOrganizationID = PostVar("iOrganizationID");
$iASMID = PostVar("iASMID");
$view = PostVar("view");
if ($iOrganizationID != '') {
    //$orgObj->setiOrganizationID($iOrganizationID);
    $orgdtls = $orgObj->select($iOrganizationID);
    $arr = $orgprefObj->getDetails('*', " AND iOrganizationID={$iOrganizationID}");
    if ($arr[0]['iAdditionalInfoID'] != '') {
        $view = 'edit';
    } else {
        $view = 'add';
    }
}
//------------------------DEFALT VALUES OF PURCHASE ORDER -----------------------------------------//
if ($orgdtls[0]['eOrganizationType'] != 'Supplier') {
    $where = ' AND eFor = "PO"  AND eType = "Default" AND eStatus = "Active"';
    $postatus = $stMstrObj->getDetails('*', $where);
    foreach ($postatus as $k => $v) {

        if (is_array($uar)) {
            $emlar = $uar;
        }
    }
}
// $orgObj->setiOrganizationID($dt['iBuyerOrganizationID']);
$dt = $orgObj->select($iBuyerOrganizationID);
$vBuyerCode = $dt[0]['vOrganizationCode'];
// $orgObj->getvOrganizationCode();
$vBuyerName = $dt[0]['vCompanyName'];
$iSupplierAssocationID = PostVar('assocorgs');
$del = PostVar('del');
// prints($_POST); exit;
// $arr=$orgAssocObj->getDetails('iBuyerOrganizationID',' AND iAsociationID="'.$iAsociationID.'" and eStatus != "Inactive" ');
//$vSupplierCode = PostVar('suporgcode');
$vSupplierCode = PostVar('assocCode');
$data['iBuyerOrganizationID'] = $iBuyerOrganizationID;
$data['vAssociationCode'] = $vAssociationCode;
$data['vBuyerCode'] = $vBuyerCode;
$data['iCreatedBy'] = $_SESSION['SESS_' . PRJ_CONST_PREFIX . '_ID'];
$data['eCreatedBy'] = $_SESSION['SESS_' . PRJ_CONST_PREFIX . '_USER_TYPE_SHORT'];
// pr($data); exit;
// if(count($emlar) > 0){
$data['eStatus'] = 'Need to Verify';
/*}else{
   $data['eStatus'] = 'Active';
}*/
### CHECK MULTIPLE ADMIN AVAILABLE FOR THIS ORGANIZATION OR NOT
/*$chkMulAdmin = $orgObj->ChkMultipleOrgAdmin();
if($chkMulAdmin == '1'){
   $data['eStatus'] = 'Active';

} else {
    if (is_array($smdt)) {
        $emailArr = $smdt;
    } else {
        if (is_array($ordt)) {
            $emailArr = $ordt;
        }
    }
}
// prints($emailArr); exit;
$view = $_POST['view'];
$frmbuyer = $_POST['frmbuyer'];
$Data1 = $_POST['Data'];
$eFrom = $Data1['eFrom'];
unset($Data1['eFrom']);
$iInvoiceID = PostVar('iInvoiceID');
$generalobj->getRequestVars();
// prints($Data);exit;
$buyerOrgDtls = $orgObj->select($Data['iBuyerOrganizationID']);
// prints($buyerOrgDtls); exit;
$Data['vAssociatePOBuyerCode'] = $buyerOrgDtls[0]['vOrganizationCode'];
$Data['vBuyerName'] = $buyerOrgDtls[0]['vCompanyName'];
//$Data['vBuyerContactName'] = $_SESSION['SESS_'.PRJ_CONST_PREFIX.'_USER_NAME'];
if (isset($_SESSION['SESS_' . PRJ_CONST_PREFIX . '_ORGTYPE']) && ($_SESSION['SESS_' . PRJ_CONST_PREFIX . '_ORGTYPE'] == 'Supplier' || $_SESSION['SESS_' . PRJ_CONST_PREFIX . '_ORGTYPE'] == 'Both' && $frmbuyer != 'y') && ($view == 'add' || $view == '' || $view == 'edit')) {
    $supplierOrgDtls = $orgObj->select($curORGID);
    $Data['vSupplierName'] = $supplierOrgDtls[0]['vCompanyName'];
    $Data['vSupplierAddLine1'] = $supplierOrgDtls[0]['vAddressLine1'];
    $Data['vSupplierAddLine2'] = $supplierOrgDtls[0]['vAddressLine2'];
    $Data['vSupplierZipCode'] = $supplierOrgDtls[0]['vZipcode'];
    $Data['vSupplierState'] = $supplierOrgDtls[0]['vState'];
    $Data['vSupplierCountry'] = $supplierOrgDtls[0]['vCountry'];

 $resArr = $validation->isEmpty($RequiredFiledArr);
 if ($resArr) {
     $_SESSION['Data'] = $Data;
     header("Location:" . $_SERVER['HTTP_REFERER'] . "");
     exit;
 }
 //prints($resArr);exit;
 $vPassword['vPassword'] = $Data['vPassword'];
 $cPassword['vPassword'] = $_POST['vConPassword'];
 $vldmsg = array('vPassword' => $smarty->get_template_vars('MSG_PASS_NOT_EQUEL'));
 $pass = $validation->isEqual($vPassword, $cPassword, $vldmsg);
 if ($pass == 'er') {
     header("Location:" . $_SERVER['HTTP_REFERER'] . "");
     exit;
 }
 $iMemberId = PostVar('iUserId');
 $vPassword = $generalobj->encrypt($Data['vPassword']);
 if ($sess_usertype == 'securitymanager') {
     $where = "iSMID={$iMemberId}";
     $data = array('vPassword' => $vPassword);
     $id = $dbobj->MySQLQueryPerform(PRJ_DB_PREFIX . "_security_manager", $data, 'update', $where);
     // $secManObj->updateData($data,$where);	// $secManObj->changePAssword($iMemberId,$vPassword);
 } else {
     if ($sess_usertype == 'orguser' || $sess_usertype == 'orgadmin') {
         $where = "iUserId={$iMemberId}";
         $data = array('vPassword' => $vPassword);
         $id = $dbobj->MySQLQueryPerform(PRJ_DB_PREFIX . "_organization_user", $data, 'update', $where);
         // $orgUsrObj->updateData($data,$where);	// $secManObj->changePAssword($iMemberId,$vPassword);
     }
 }
 if ($id > 0) {

         $body_arr = array("#NAME#", "#MODIFIED_BY#", "#RFQ2CODE#", "#BIDNUM#", "#ADVANCE#", "#PRICE#", "#LINK#", "#MAIL_FOOTER#", "#SITE_URL#");
     }
 } else {
     $sts = $statusmasterObj->getDetails('iStatusID', " AND vForAuction LIKE '%RFQ2 Bid,%' AND vStatus_en='Verify' ");
     $Data['iStatusID'] = $sts[0]['iStatusID'];
     $Data['eStatus'] = 'current';
     $sub = "New Bid For RFQ2";
     $typ = "Create";
 }
 // pr($Data); exit;
 $Data['iModifiedById'] = $sess_id;
 $res = $r2bdObj->updateData($Data, " iBidId={$iBidId} ");
 $id = $iBidId;
 if ($res) {
     $files = $_FILES['files'];
     $dfid = PostVar('deleteFiles');
     if (trim($dfid) != '') {
         $dfl = $r2bdflObj->getDetails('*', " AND iBidFileId IN ({$dfid}) ");
         $drs = $r2bdflObj->del(" iBidFileId IN ({$dfid}) ");
         if ($drs) {
             if (is_array($dfl) && count($dfl) > 0) {
                 for ($l = 0; $l < count($dfl); $l++) {
                     @unlink($cfgimg['rfq2bid']['docs']['path'] . $dfl[$l]['iBidId'] . '/' . $dfl[$l]['vFile']);
                 }
             }
         }
     }
     for ($i = 0; $i < count($files['name']); $i++) {
         $flnm = '';
         if ($files['error'][$i] == 0 && $files['size'][$i] > 0) {
             $fileUpload['name'] = $files['name'][$i];

<?php

// pr($_POST); exit;
$view = PostVar('view');
$iBidId = PostVar('iBidId');
$iAwardId = PostVar('iAwardId');
if (!isset($r2bdObj)) {
    include_once SITE_CLASS_APPLICATION . "user/" . "class.Rfq2Bids.php";
    $r2bdObj = new Rfq2Bids();
}
if (!isset($r2awObj)) {
    include_once SITE_CLASS_APPLICATION . "user/" . "class.Rfq2Award.php";
    $r2awObj = new Rfq2Award();
}
if (!isset($rfq2Obj)) {
    include_once SITE_CLASS_APPLICATION . "user/class.RFQ2Master.php";
    $rfq2Obj = new RFQ2Master();
}
if (!isset($orgObj)) {
    include_once SITE_CLASS_APPLICATION . 'user/class.Organization.php';
    $orgObj = new Organization();
}
if (!isset($orgprefObj)) {
    include_once SITE_CLASS_APPLICATION . "organization/class.OrganizationPreference.php";
    $orgprefObj = new OrganizationPreference();
}
if (!isset($statusmasterObj)) {
    include_once SITE_CLASS_APPLICATION . "class.StatusMaster.php";
    $statusmasterObj = new StatusMaster();
}
if (!isset($userActionObj)) {

include SITE_CLASS_GEN . "class.sendmail.php";
$sendMail = new SendPHPMail();
if (!isset($secManObj)) {
    include_once SITE_CLASS_APPLICATION . 'securitymanager/class.SecurityManager.php';
    $secManObj = new SecurityManager();
}
$gdbobj->getRequestVars();
//prints($_POST);exit;
$password = md5(PostVar('vPassword'));
$Data['vPassword'] = $password;
$iSMID = PostVar("iSMID");
$arr = $secManObj->select($iSMID);
$secManObj->setAllVar($arr);
$secManObj->setAllVar($Data);
$where = "iSMID = '" . $iSMID . "'";
$res = $secManObj->update($where);
if ($res) {
    $NAME = $arr[0]['vFirstName'] . " " . $arr[0]['vLastName'];
    //set the valuse of the body of email format
    $body_arr = array("#NAME#", "#PASSWORD#", "#MAIL_FOOTER#", "#SITE_URL#");
    $post_arr = array($NAME, PostVar('vPassword'), $MAIL_FOOTER, SITE_URL_DUM);
    //send mail to the desired member
    $sendMail->Send("Password changed", "Security Manager", $arr[0]['vEmail'], $body_arr, $post_arr);
}
if ($res) {
    $var_msg = "Password changed Successfully.";
} else {
    $var_msg = "Eror-in password change.";
}
header("Location:index.php?file=se-smchangepass&view=edit&iSMID=" . $iSMID . "&parent=se-securitymanage&var_msg={$var_msg}");
exit;

<?php

$userid = $_SESSION['SESS_' . PRJ_CONST_PREFIX . '_ID'];
$rfqarr = PostVar('iRFQ2Id');
if (!isset($rfq2watchlistObj)) {
    include_once SITE_CLASS_APPLICATION . "user/class.Rfq2Watchlist.php";
    $rfq2watchlistObj = new Rfq2Watchlist();
}
$rfq2ids = "";
if (is_array($rfqarr) && count($rfqarr) > 0) {
    $rfq2ids = @implode(',', $rfqarr);
}
$msg = $smarty->get_template_vars('MSG_RFQ2_REM_FROM_WATCHLIST_ERR') . ':m';
if (trim($rfq2ids) != '') {
    $where = " iRFQ2Id IN ({$rfq2ids}) AND iUserID={$userid} ";
    $rs = $rfq2watchlistObj->del($where);
    if ($rs) {
        $msg = $smarty->get_template_vars('MSG_RFQ2_REM_FROM_WATCHLIST_SUCC') . ':m';
    }
}
echo $msg;
exit;

switch ($action) {
    case "tableBackup":
        # Variables have replaced original hard-coded values
        $dumper = new Mysqldumper(SITE_SERVER, SITE_USERNAME, SITE_PASS, SITE_DB);
        $dumper->setDBtables($chk);
        $dumpfinished = $dumper->createDump("callBack");
        $msg = rawurlencode("Database Saved Successfully ");
        header("Location:index.php?file=ge-fullbkup&view=edit&AX=Yes&var_msg={$msg}");
        exit;
    case "filedownload":
        if (!headers_sent()) {
            ob_clean();
            ob_flush();
            header('Content-type: application/download');
            header('Content-Disposition: attachment; filename=' . PostVar('filedown'));
            readfile(BACKUP_DBPATH . PostVar('filedown'));
            exit;
        }
        break;
    case "delete_db_file":
        for ($i = 0; $i < count($_POST[chkFull]); $i++) {
            $fileName = BACKUP_DBPATH . $_POST['chkFull'][$i];
            @unlink($fileName);
        }
        $msg = rawurlencode("DB backup file has been Deleted successfully.");
        header("Location:index.php?file=ge-fullbkup&view=edit&AX=Yes&var_msg={$msg}");
        exit;
        break;
    case "sourcebackup":
        source_backup("");
        $msg = rawurlencode("Files/Folders Successfully Backup ");

include SITE_CLASS_GEN . "class.validation.php";
$validation = new Validation();
### SERVER SIDE VALIDATION ####
$RequiredFiledArr = array('vFirstName' => $smarty->get_template_vars('LBL_ENTER_FIRST_NAME'), 'vLastName' => $smarty->get_template_vars('LBL_ENTER_LAST_NAME'), 'vCountry' => $smarty->get_template_vars('LBL_ENTER_COUNTRY'), 'vState' => $smarty->get_template_vars('LBL_ENTER_STATE'), 'vZipcode' => $smarty->get_template_vars('LBL_ZIPCODE'), 'vEmail' => $smarty->get_template_vars('LBL_EMAIL_ADDRESS'), 'vCity' => $smarty->get_template_vars('LBL_ENTER_CITY'), 'vAddressLine1' => $smarty->get_template_vars('LBL_ENTER_ADDRESSLINE1'));
$resArr = $validation->isEmpty($RequiredFiledArr);
//prints($resArr);exit;
if ($resArr) {
    //echo "hi"; exit;
    header("Location:" . $_SERVER['HTTP_REFERER'] . "");
    exit;
}
if (!isset($Data['eEmailNotification'])) {
    $Data['eEmailNotification'] = 'No';
}
//prints($Data);exit;
$Data_access = PostVar("Data_access");
$curr_date = calcGTzTime(date('Y-m-d H:i:s'), 'Y-m-d H:i:s');
$arr = $secManObj->select($iSMID);
$secManObj->setAllVar($arr);
$Data = array_merge($Data, array("dLastAccessDate" => $curr_date));
//	$sql="select vLanguageCode from b2b_language where vLanguage='".$Data['vDefaltLan']."'";
//	$res=$dbobj->MySQLSelect($sql);
//	$_SESSION['SESS_B2B_LANG'] = $res[0]['vLanguageCode'];
$secManObj->setAllVar($Data);
$where = " iSMID = '" . $iSMID . "'";
$res = $secManObj->update($where);
if ($res) {
    $var_msg = "rus";
} else {
    $var_msg = "ruserr.";
}

    $fname = 'smdashboard';
    $iPrId = 'iSMID';
}
//check customer authentification to login
$member = $memobj->checkauthentication($username, $Password, $memtype, $table, $iPrId, $orgcode);
// pr($_SESSION); exit;
// prints($member);exit;
$user = "b2b_usr";
$pass = "b2b_pswd";
$res_lgnprm = $lgnprmobj->getLoginParameter($username, $Password, $orgcode, $loginparameter);
if (!$res_lgnprm) {
    $member = "0";
}
if ($member == '1') {
    if (PostVar('chk')) {
        if (PostVar('chk') == 'true') {
            setcookie($user, $username, time() + 2592000);
            setcookie($pass, $pswd, time() + 2592000);
        } else {
            setcookie($user, "", time() + 2592000);
            setcookie($pass, "", time() + 2592000);
        }
    }
} elseif ($member == '2') {
    setcookie($user, "", time() + 2592000);
    setcookie($pass, "", time() + 2592000);
    $msg = "loginactive";
} elseif ($member == '3') {
    setcookie($user, "", time() + 2592000);
    setcookie($pass, "", time() + 2592000);
    $msg = "loginblock";