PHP array_htmlspecialchars函数代码示例

 /**
  * Searches the recipes database and returns the results
  * @return array
  */
 public function searchRecipes($postData)
 {
     if ($_SERVER['REQUEST_METHOD'] == 'POST' && !empty($_POST)) {
         array_htmlspecialchars($_POST);
         // store search tokens
         $search_string = $_POST['search'];
         // explode search tokens to array
         $tokens = explode(" ", $search_string);
         // remove empty fields from tokens and re-index
         $tokens = array_values(array_filter($tokens));
         // print_var($tokens);
         // if actual search intput was provided
         if (!empty($tokens)) {
             $select = 'SELECT * FROM recipes WHERE ';
             $construct = "";
             # append search fields
             foreach ($tokens as $key => $value) {
                 $construct .= 'recipe_name LIKE "%' . $value . '%" OR ';
             }
             // remove the last two characters as they contain an extra OR
             $construct = substr($construct, 0, strlen($construct) - 3);
             // create final SQL query
             $select .= $construct;
             // prepare query
             $statementHandler = Database::getInstance()->query($select);
             // fetch results
             return $results = $statementHandler->fetchAll(PDO::FETCH_ASSOC);
         }
     }
 }

 public function validateLoginCredentails()
 {
     // send form data to the model
     if ($_SERVER['REQUEST_METHOD'] == 'POST') {
         // clean user input
         array_htmlspecialchars($_POST);
         // store username and password in object
         $this->username = $_POST['username'];
         $this->password = $_POST['password'];
         // invoke login form validator
         $LoginModel = new LoginModel();
         $LoginModel->validateFormData($_POST);
         var_dump($LoginModel->validateFormData($_POST));
         // get errors array
         $errorsArray = $LoginModel->getErrorsArray();
         if (filter_by_value($errorsArray, 'error', '1')) {
             // render errors to client
             require APP_PATH . 'views/login/login.php';
         } else {
         }
         echo "<br><br>ERRORS START: <br>";
         print_var($errorsArray);
         // render errors to client
         // require(APP_PATH . 'views/login/login.php');
         echo "HELLLLLO";
         echo URL_WITH_INDEX_FILE;
     }
 }

 public function saveAction()
 {
     $values = Zend_Json::decode($this->getParam("data"));
     // convert all special characters to their entities so the xml writer can put it into the file
     $values = array_htmlspecialchars($values);
     try {
         $sphinx_config = new SphinxSearch_Config();
         $sphinx_config->writeSphinxConfig();
         $plugin_config = new SphinxSearch_Config_Plugin();
         $config_data = $plugin_config->getData();
         $config_data["path"]["pid"] = $values["sphinxsearch.path_pid"];
         $config_data["path"]["querylog"] = $values["sphinxsearch.path_querylog"];
         $config_data["path"]["log"] = $values["sphinxsearch.path_logfile"];
         $config_data["path"]["indexer"] = $values["sphinxsearch.path_indexer"];
         $config_data["path"]["phpcli"] = $values["sphinxsearch.path_phpcli"];
         $config_data["path"]["searchd"] = $values["sphinxsearch.path_searchd"];
         $config_data["indexer"]["period"] = $values["sphinxsearch.indexer_period"];
         $config_data["indexer"]["runwithmaintenance"] = $values["sphinxsearch.indexer_maintenance"] == "true" ? "true" : "false";
         $config_data["indexer"]["onchange"] = $values["sphinxsearch.indexer_onchange"];
         $config_data["documents"]["use_i18n"] = $values["sphinxsearch.documents_i18n"] == "true" ? "true" : "false";
         $config_data["searchd"]["port"] = $values["sphinxsearch.searchd_port"];
         $plugin_config->setData($config_data);
         $plugin_config->save();
         $this->_helper->json(array("success" => true));
     } catch (Exception $e) {
         $this->_helper->json(false);
     }
 }

 public function setAction()
 {
     $values = \Zend_Json::decode($this->getParam("data"));
     $values = array_htmlspecialchars($values);
     foreach ($values as $key => $value) {
         Model\Configuration::set($key, $value);
     }
     $this->_helper->json(array("success" => true));
 }

/**
 * @param  $array
 * @return array
 */
function array_htmlspecialchars($array)
{
    foreach ($array as $key => $value) {
        if (is_string($value) || is_numeric($value)) {
            $array[$key] = htmlspecialchars($value, ENT_COMPAT, "UTF-8");
        } else {
            if (is_array($value)) {
                $array[$key] = array_htmlspecialchars($value);
            }
        }
    }
    return $array;
}

 public function updateAction()
 {
     $code = Qrcode\Config::getByName($this->getParam("name"));
     $data = \Zend_Json::decode($this->getParam("configuration"));
     $data = array_htmlspecialchars($data);
     foreach ($data as $key => $value) {
         $setter = "set" . ucfirst($key);
         if (method_exists($code, $setter)) {
             $code->{$setter}($value);
         }
     }
     $code->save();
     $this->_helper->json(array("success" => true));
 }

 function aq_array_htmlspecialchars(&$input)
 {
     if (is_array($input)) {
         foreach ($input as $key => $value) {
             if (is_array($value)) {
                 $input[$key] = array_htmlspecialchars($value);
             } else {
                 $input[$key] = htmlspecialchars($value);
             }
         }
         return $input;
     }
     return htmlspecialchars($input);
 }

 public function setAction()
 {
     $values = \Zend_Json::decode($this->getParam("data"));
     // convert all special characters to their entities so the xml writer can put it into the file
     $values = array_htmlspecialchars($values);
     // email settings
     $oldConfig = Config::getConfig();
     $oldValues = $oldConfig->toArray();
     $settings = array("base" => array("base-currency" => $values["base.base-currency"]), "product" => array("default-image" => $values["product.default-image"], "days-as-new" => $values["product.days-as-new"]), "category" => array("default-image" => $values["category.default-image"]));
     $config = new \Zend_Config($settings, true);
     $writer = new \Zend_Config_Writer_Xml(array("config" => $config, "filename" => CORESHOP_CONFIGURATION));
     $writer->write();
     $this->_helper->json(array("success" => true));
 }

function getGET_POST($inputs, $mode)
{
    $mode = strtoupper(trim($mode));
    $data = $GLOBALS['_' . $mode];
    $data = array_htmlspecialchars($data);
    array_walk_recursive($data, "trim");
    $keys = array_keys($data);
    $filters = explode(',', $inputs);
    foreach ($keys as $k) {
        if (!in_array($k, $filters)) {
            unset($data[$k]);
        }
    }
    return $data;
}

 public function updateAction()
 {
     $letter = Newsletter\Config::getByName($this->getParam("name"));
     $data = \Zend_Json::decode($this->getParam("configuration"));
     $data = array_htmlspecialchars($data);
     if ($emailDoc = Document::getByPath($data["document"])) {
         $data["document"] = $emailDoc->getId();
     }
     foreach ($data as $key => $value) {
         $setter = "set" . ucfirst($key);
         if (method_exists($letter, $setter)) {
             $letter->{$setter}($value);
         }
     }
     $letter->save();
     $this->_helper->json(array("success" => true));
 }

 /**
  * @param array $config
  */
 public function config($config = array())
 {
     $settings = null;
     // check for an initial configuration template
     // used eg. by the demo installer
     $configTemplatePath = PIMCORE_CONFIGURATION_DIRECTORY . "/system.xml.template";
     if (file_exists($configTemplatePath)) {
         try {
             $configTemplate = new \Zend_Config_Xml($configTemplatePath);
             if ($configTemplate->general) {
                 // check if the template contains a valid configuration
                 $settings = $configTemplate->toArray();
                 // unset database configuration
                 unset($settings["database"]["params"]["host"]);
                 unset($settings["database"]["params"]["port"]);
             }
         } catch (\Exception $e) {
         }
     }
     // set default configuration if no template is present
     if (!$settings) {
         // write configuration file
         $settings = array("general" => array("timezone" => "Europe/Berlin", "language" => "en", "validLanguages" => "en", "debug" => "1", "debugloglevel" => "debug", "custom_php_logfile" => "1", "extjs6" => "1"), "database" => array("adapter" => "Mysqli", "params" => array("username" => "root", "password" => "", "dbname" => "")), "documents" => array("versions" => array("steps" => "10"), "default_controller" => "default", "default_action" => "default", "error_pages" => array("default" => "/"), "createredirectwhenmoved" => "", "allowtrailingslash" => "no", "allowcapitals" => "no", "generatepreview" => "1"), "objects" => array("versions" => array("steps" => "10")), "assets" => array("versions" => array("steps" => "10")), "services" => array(), "cache" => array("excludeCookie" => ""), "httpclient" => array("adapter" => "Zend_Http_Client_Adapter_Socket"));
     }
     $settings = array_replace_recursive($settings, $config);
     // convert all special characters to their entities so the xml writer can put it into the file
     $settings = array_htmlspecialchars($settings);
     // create initial /website/var folder structure
     // @TODO: should use values out of startup.php (Constants)
     $varFolders = array("areas", "assets", "backup", "cache", "classes", "config", "email", "log", "plugins", "recyclebin", "search", "system", "tmp", "versions", "webdav");
     foreach ($varFolders as $folder) {
         \Pimcore\File::mkdir(PIMCORE_WEBSITE_VAR . "/" . $folder);
     }
     $config = new \Zend_Config($settings, true);
     $writer = new \Zend_Config_Writer_Xml(array("config" => $config, "filename" => PIMCORE_CONFIGURATION_SYSTEM));
     $writer->write();
 }

        $message = param('message', '', FALSE);
        $cover = param('cover');
        $seo_title = param('seo_title');
        $seo_keywords = param('seo_keywords');
        $seo_description = param('seo_description');
        !$cateid and message(1, '文章分类未指定');
        $arr = array('cateid' => $cateid, 'subject' => $subject, 'brief' => $brief, 'message' => $message, 'cover' => $cover, 'uid' => $uid, 'create_date' => $time, 'update_date' => $time, 'ip' => $longip, 'seo_title' => $seo_title, 'seo_keywords' => $seo_keywords, 'seo_description' => $seo_description);
        $r = article_replace($articleid, $arr);
        $r !== FALSE ? message(0, '创建成功') : message(11, '创建失败');
    }
} elseif ($action == 'update') {
    if ($method == 'GET') {
        $articleid = param(2, 0);
        $header['title'] = '更新文章';
        $article = article_read($articleid);
        array_htmlspecialchars($article);
        include "./admin/view/article_update.htm";
    } elseif ($method == 'POST') {
        $articleid = param(2, 0);
        $cateid = param('cateid', 0);
        $subject = param('subject');
        $brief = param('brief');
        $message = param('message', '', FALSE);
        $cover = param('cover');
        $seo_title = param('seo_title');
        $seo_keywords = param('seo_keywords');
        $seo_description = param('seo_description');
        !$cateid and message(1, '请指定文章分类');
        !$subject and message(2, '请填写标题');
        !$message and message(3, '请填写内容');
        $arr = array('cateid' => $cateid, 'subject' => $subject, 'brief' => $brief, 'message' => $message, 'cover' => $cover, 'update_date' => $time, 'seo_title' => $seo_title, 'seo_keywords' => $seo_keywords, 'seo_description' => $seo_description);

}
?>
        <link rel="bookmark" href="http://lsd.fi.muni.cz/webgen/" title="<?php 
echo $webgen_info[$language];
?>
" />
        <script type="text/javascript">
            
            <?php 
// promenne ze SESSION do JS
// nejprve pridame vsem prvkum ve vzbranych polich addslashes()
$_SESSION = array_htmlspecialchars_decode(array_map_r('addslashes', $_SESSION));
// nahrajeme promenne do JS
getJavascriptArray($_SESSION, 'session', $result);
// vratime na puvodni hodnotu pomoci stripslashes()
$_SESSION = array_htmlspecialchars(array_map_r('stripslashes', $_SESSION));
// ulozim si aktualni krok, kvuli napovede
getJavascriptArray($_GET, 'get', $result);
// nacteni nekterych promluv do js promennych
getJavascriptArray($webgen_basic_info, 'webgen_basic_info', $result);
getJavascriptArray($feat_answ_next, 'feat_answ_next', $result);
getJavascriptArray($webgen_u_r_day, 'webgen_u_r_day', $result);
getJavascriptArray($webgen_u_s_project_next, 'webgen_u_s_project_next', $result);
getJavascriptArray($webgen_u_s_project_coauthor_next, 'webgen_u_s_project_coauthor_next', $result);
getJavascriptArray($webgen_firm_direction_another, 'webgen_firm_direction_another', $result);
getJavascriptArray($webgen_firm_workload_another, 'webgen_firm_workload_another', $result);
getJavascriptArray($hobby_next, 'hobby_next', $result);
getJavascriptArray($knowledge_next, 'knowledge_next', $result);
getJavascriptArray($webgen_cv_edu_from, 'webgen_cv_edu_from', $result);
getJavascriptArray($webgen_cv_lang_type, 'webgen_cv_lang_type', $result);
getJavascriptArray($webgen_links_undef_description, 'webgen_links_undef_description', $result);

 /**
  * Validates new projects being created by performing error checks on user input
  * @return boolean Returns false if user input fields threw an error
  */
 public function validateNewProject()
 {
     if ($_SERVER['REQUEST_METHOD'] == 'POST') {
         array_htmlspecialchars($_POST);
         $this->project_name = $_POST['projectName'];
         $this->facilitator = $_POST['facilitator'];
         $this->project_due_date = $_POST['projectDueDate'];
         $this->project_description = trim($_POST['projectDescription']);
         // validate project name
         if (!ctype_alnum(remove_whitespace($this->project_name))) {
             $this->errors['project_name']['error'] = 1;
         } elseif ($this->projectAlreadyExists() == TRUE) {
             $this->errors['project_exists']['error'] = 1;
         }
         // validate instructor name
         if (validate_instructor($this->facilitator) == FALSE) {
             $this->errors['instructor']['error'] = 1;
         }
         // validate project description
         if (strlen($this->project_description) < 100) {
             $this->errors['project_description']['error'] = 1;
         }
         // validating due date field by attempting to make a DateTime object
         if (DateTime::createFromFormat("Y-m-d", $this->project_due_date) == false) {
             $this->errors['project_due_date_invalid']['error'] = 1;
         }
         // check for empty fields
         if (empty($this->project_name) or empty($this->facilitator)) {
             $this->errors['empty']['error'] = 1;
         }
         // check if a file was uploaded and if so run validation
         $this->confidentiality_agreement_file_validation();
         // run through the errors array and check if any errors are set to 1
         $error_exists = 0;
         foreach ($this->errors as $key => $value) {
             if ($this->errors[$key]['error'] == 1) {
                 $error_exists = 1;
             }
         }
         // return true if file was validated
         if ($error_exists == 0) {
             /**
              * insert project record to database depending on user type
              * 
              * note - professor accounts will update the claimed section automatically to 1
              * 		so that the project does not show up on the search results once claimed
              */
             if ($_SESSION['Account_Type'] == 'Professor') {
                 $this->insertNewProjectProfessor();
             } elseif ($_SESSION['Account_Type'] = 'Business') {
                 $this->insertNewProjectBusiness();
             }
             // save uploaded file to disk drive
             if (!empty($_SESSION['Create_New_Project'])) {
                 $this->saveFileToDisk();
             }
             // unset session variable
             unset($_SESSION['Create_New_Project']);
             // redirect user
             header('Location: create_project_success.php');
         } else {
             return false;
         }
     }
 }

 public function tagManagementUpdateAction()
 {
     $this->checkPermission("tag_snippet_management");
     $tag = Model\Tool\Tag\Config::getByName($this->getParam("name"));
     $data = \Zend_Json::decode($this->getParam("configuration"));
     $data = array_htmlspecialchars($data);
     $items = array();
     foreach ($data as $key => $value) {
         $setter = "set" . ucfirst($key);
         if (method_exists($tag, $setter)) {
             $tag->{$setter}($value);
         }
         if (strpos($key, "item.") === 0) {
             $cleanKeyParts = explode(".", $key);
             $items[$cleanKeyParts[1]][$cleanKeyParts[2]] = $value;
         }
     }
     $tag->resetItems();
     foreach ($items as $item) {
         $tag->addItem($item);
     }
     // parameters get/post
     $params = array();
     for ($i = 0; $i < 5; $i++) {
         $params[] = array("name" => $data["params.name" . $i], "value" => $data["params.value" . $i]);
     }
     $tag->setParams($params);
     if ($this->getParam("name") != $data["name"]) {
         $tag->setName($this->getParam("name"));
         // set the old name again, so that the old file get's deleted
         $tag->delete();
         // delete the old config / file
         $tag->setName($data["name"]);
     }
     $tag->save();
     $this->_helper->json(array("success" => true));
 }