PHP ew_QuotedValue函数代码示例

 function Page_Main()
 {
     $qs = new cQueryString();
     if ($qs->Count > 0) {
         $Sql = $qs->getValue("s");
         $Sql = TEAdecrypt($Sql, EW_RANDOM_KEY);
         if ($Sql != "") {
             // Get the filter values (for "IN")
             $Value = ew_AdjustSql($qs->getConvertedValue("f"));
             if ($Value != "") {
                 $arValue = explode(",", $Value);
                 $FldType = $qs->getValue("lft");
                 // Filter field data type
                 if (is_numeric($FldType)) {
                     $FldType = intval($FldType);
                 }
                 $cnt = count($arValue);
                 for ($i = 0; $i < $cnt; $i++) {
                     $arValue[$i] = ew_QuotedValue($arValue[$i], $FldType);
                 }
                 $Sql = str_replace("{filter_value}", implode(",", $arValue), $Sql);
             }
             // get the query value (for "LIKE" or "=")
             $Value = ew_AdjustSql($qs->getConvertedValue("q"));
             if ($Value != "") {
                 $Sql = str_replace("{query_value}", $Value, $Sql);
             }
             $this->GetLookupValues($Sql);
         }
     } else {
         die("Missing querystring.");
     }
 }

 function Page_Main()
 {
     $GLOBALS["Page"] =& $this;
     $post = ew_StripSlashes($_POST);
     if (count($post) == 0) {
         die("Missing post data.");
     }
     //$sql = $qs->getValue("s");
     $sql = @$post["s"];
     $sql = ew_Decrypt($sql);
     if ($sql == "") {
         die("Missing SQL.");
     }
     if (strpos($sql, "{filter}") > 0) {
         $filters = "";
         for ($i = 0; $i < 5; $i++) {
             // Get the filter values (for "IN")
             $filter = ew_Decrypt(@$post["f" . $i]);
             if ($filter != "") {
                 $value = @$post["v" . $i];
                 if ($value == "") {
                     if ($i > 0) {
                         // Empty parent field
                         //continue; // Allow
                         ew_AddFilter($filters, "1=0");
                     }
                     // Disallow
                     continue;
                 }
                 $arValue = explode(",", $value);
                 $fldtype = intval(@$post["t" . $i]);
                 for ($j = 0, $cnt = count($arValue); $j < $cnt; $j++) {
                     $arValue[$j] = ew_QuotedValue($arValue[$j], ew_FieldDataType($fldtype));
                 }
                 $filter = str_replace("{filter_value}", implode(",", $arValue), $filter);
                 ew_AddFilter($filters, $filter);
             }
         }
         $sql = str_replace("{filter}", $filters != "" ? $filters : "1=1", $sql);
     }
     // Get the query value (for "LIKE" or "=")
     $value = ew_AdjustSql(@$post["q"]);
     if ($value != "") {
         $sql = preg_replace('/LIKE \'(%)?\\{query_value\\}%\'/', ew_Like('\'$1{query_value}%\''), $sql);
         $sql = str_replace("{query_value}", $value, $sql);
     }
     // Replace {query_value_n}
     preg_match_all('/\\{query_value_(\\d+)\\}/', $sql, $out);
     $cnt = count($out[0]);
     for ($i = 0; $i < $cnt; $i++) {
         $j = $out[1][$i];
         $v = ew_AdjustSql(@$post["q" . $j]);
         $sql = str_replace("{query_value_" . $j . "}", $v, $sql);
     }
     $this->GetLookupValues($sql);
 }

 function Page_Main()
 {
     $post = ew_StripSlashes($_POST);
     if (count($post) == 0) {
         die("Missing post data.");
     }
     //$sql = $qs->getValue("s");
     $sql = $post["s"];
     $sql = TEAdecrypt($sql, EW_RANDOM_KEY);
     if ($sql == "") {
         die("Missing SQL.");
     }
     if (strpos($sql, "{filter}") > 0) {
         $filters = "";
         for ($i = 0; $i < 5; $i++) {
             // Get the filter values (for "IN")
             $filter = TEAdecrypt($post["f" . $i], EW_RANDOM_KEY);
             if ($filter != "") {
                 $value = $post["v" . $i];
                 if ($value == "") {
                     if ($i > 0) {
                         // Empty parent field
                         //continue; // Allow
                         ew_AddFilter($filters, "1=0");
                     }
                     // Disallow
                     continue;
                 }
                 $arValue = explode(",", $value);
                 $fldtype = intval($post["t" . $i]);
                 for ($j = 0, $cnt = count($arValue); $j < $cnt; $j++) {
                     $arValue[$j] = ew_QuotedValue($arValue[$j], ew_FieldDataType($fldtype));
                 }
                 $filter = str_replace("{filter_value}", implode(",", $arValue), $filter);
                 ew_AddFilter($filters, $filter);
             }
         }
         $sql = str_replace("{filter}", $filters != "" ? $filters : "1=1", $sql);
     }
     // Get the query value (for "LIKE" or "=")
     $value = ew_AdjustSql(@$post["q"]);
     if ($value != "") {
         $sql = preg_replace('/LIKE \'(%)?\\{query_value\\}%\'/', ew_Like('\'$1{query_value}%\''), $sql);
         $sql = str_replace("{query_value}", $value, $sql);
     }
     // Check custom function
     $fn = @$post["fn"];
     if ($fn != "" && function_exists($fn)) {
         // Custom function(&$sql)
         $sql = $fn($sql);
     }
     $this->GetLookupValues($sql);
 }

 function Delete(&$rs, $where = "")
 {
     global $conn;
     // Cascade delete detail table 'gallery_detail'
     if (!isset($GLOBALS["gallery_detail"])) {
         $GLOBALS["gallery_detail"] = new cgallery_detail();
     }
     $rscascade = array();
     $GLOBALS["gallery_detail"]->Delete($rscascade, "`g_id` = " . ew_QuotedValue($rs['g_id'], EW_DATATYPE_NUMBER));
     return $conn->Execute($this->DeleteSQL($rs, $where));
 }

 function BuildBasicSearchSql(&$Where, &$Fld, $Keyword)
 {
     if ($Keyword == EW_NULL_VALUE) {
         $sWrk = $Fld->FldExpression . " IS NULL";
     } elseif ($Keyword == EW_NOT_NULL_VALUE) {
         $sWrk = $Fld->FldExpression . " IS NOT NULL";
     } else {
         $sFldExpression = $Fld->FldVirtualExpression != $Fld->FldExpression ? $Fld->FldVirtualExpression : $Fld->FldBasicSearchExpression;
         $sWrk = $sFldExpression . ew_Like(ew_QuotedValue("%" . $Keyword . "%", EW_DATATYPE_STRING));
     }
     if ($Where != "") {
         $Where .= " OR ";
     }
     $Where .= $sWrk;
 }

 function DeleteSQL(&$rs)
 {
     $SQL = "DELETE FROM `categories` WHERE ";
     $SQL .= EW_DB_QUOTE_START . 'id' . EW_DB_QUOTE_END . '=' . ew_QuotedValue($rs['id'], $this->id->FldDataType) . ' AND ';
     if (substr($SQL, -5) == " AND ") {
         $SQL = substr($SQL, 0, strlen($SQL) - 5);
     }
     if ($this->CurrentFilter != "") {
         $SQL .= " AND " . $this->CurrentFilter;
     }
     return $SQL;
 }

 function DeleteSQL(&$rs, $where = "")
 {
     $sql = "DELETE FROM " . $this->UpdateTable . " WHERE ";
     if ($rs) {
         $sql .= ew_QuotedName('subject_type_id') . '=' . ew_QuotedValue($rs['subject_type_id'], $this->subject_type_id->FldDataType) . ' AND ';
     }
     if (substr($sql, -5) == " AND ") {
         $sql = substr($sql, 0, -5);
     }
     $filter = $this->CurrentFilter;
     ew_AddFilter($filter, $where);
     if ($filter != "") {
         $sql .= " AND " . $filter;
     }
     return $sql;
 }

 function UpdateSQL(&$rs, $where = "")
 {
     $sql = "UPDATE " . $this->UpdateTable . " SET ";
     foreach ($rs as $name => $value) {
         if (!isset($this->fields[$name])) {
             continue;
         }
         $sql .= $this->fields[$name]->FldExpression . "=";
         $sql .= ew_QuotedValue($value, $this->fields[$name]->FldDataType) . ",";
     }
     while (substr($sql, -1) == ",") {
         $sql = substr($sql, 0, -1);
     }
     $filter = $this->CurrentFilter;
     ew_AddFilter($filter, $where);
     if ($filter != "") {
         $sql .= " WHERE " . $filter;
     }
     return $sql;
 }

 function DeleteSQL(&$rs)
 {
     $SQL = "DELETE FROM Subscriptions Inner Join Customers On Customers.CustomerID = Subscriptions.CustomerID Left Join Orders On Subscriptions.DeliveryDate = Orders.DeliveryDate And Subscriptions.CustomerID = Orders.CustomerID WHERE ";
     $SQL .= EW_DB_QUOTE_START . 'SubscriptionID' . EW_DB_QUOTE_END . '=' . ew_QuotedValue($rs['SubscriptionID'], $this->SubscriptionID->FldDataType) . ' AND ';
     if (substr($SQL, -5) == " AND ") {
         $SQL = substr($SQL, 0, strlen($SQL) - 5);
     }
     if ($this->CurrentFilter != "") {
         $SQL .= " AND " . $this->CurrentFilter;
     }
     return $SQL;
 }

 function Delete(&$rs, $where = "")
 {
     global $conn;
     // Cascade delete detail table 'seguimiento_tramites'
     if (!isset($GLOBALS["seguimiento_tramites"])) {
         $GLOBALS["seguimiento_tramites"] = new cseguimiento_tramites();
     }
     $rscascade = array();
     $GLOBALS["seguimiento_tramites"]->Delete($rscascade, "`id_tramite` = " . ew_QuotedValue($rs['codigo'], EW_DATATYPE_NUMBER));
     return $conn->Execute($this->DeleteSQL($rs, $where));
 }

 function UpdateSQL(&$rs, $where = "", $curfilter = TRUE)
 {
     $sql = "UPDATE " . $this->UpdateTable . " SET ";
     foreach ($rs as $name => $value) {
         if (!isset($this->fields[$name]) || $this->fields[$name]->FldIsCustom) {
             continue;
         }
         if (EW_ENCRYPTED_PASSWORD && $name == 'admin_pass') {
             $value = EW_CASE_SENSITIVE_PASSWORD ? ew_EncryptPassword($value) : ew_EncryptPassword(strtolower($value));
         }
         $sql .= $this->fields[$name]->FldExpression . "=";
         $sql .= ew_QuotedValue($value, $this->fields[$name]->FldDataType, $this->DBID) . ",";
     }
     while (substr($sql, -1) == ",") {
         $sql = substr($sql, 0, -1);
     }
     $filter = $curfilter ? $this->CurrentFilter : "";
     if (is_array($where)) {
         $where = $this->ArrayToFilter($where);
     }
     ew_AddFilter($filter, $where);
     if ($filter != "") {
         $sql .= " WHERE " . $filter;
     }
     return $sql;
 }

 function Delete(&$rs, $where = "")
 {
     global $conn;
     // Cascade delete detail table 'servicio_medico_prestado'
     if (!isset($GLOBALS["servicio_medico_prestado"])) {
         $GLOBALS["servicio_medico_prestado"] = new cservicio_medico_prestado();
     }
     $rscascade = array();
     $GLOBALS["servicio_medico_prestado"]->Delete($rscascade, "`idservicio_medico` = " . ew_QuotedValue($rs['idservicio_medico'], EW_DATATYPE_NUMBER));
     return $conn->Execute($this->DeleteSQL($rs, $where));
 }

 function DeleteSQL(&$rs)
 {
     $SQL = "DELETE FROM patient_detail Inner Join patient_main On patient_detail.PatientID = patient_main.PatientID WHERE ";
     $SQL .= EW_DB_QUOTE_START . 'DetailNo' . EW_DB_QUOTE_END . '=' . ew_QuotedValue($rs['DetailNo'], $this->DetailNo->FldDataType) . ' AND ';
     if (substr($SQL, -5) == " AND ") {
         $SQL = substr($SQL, 0, strlen($SQL) - 5);
     }
     if ($this->CurrentFilter != "") {
         $SQL .= " AND " . $this->CurrentFilter;
     }
     return $SQL;
 }

 function Page_Main()
 {
     global $conn;
     $GLOBALS["Page"] =& $this;
     $post = ew_StripSlashes($_POST);
     if (count($post) == 0) {
         die("Missing post data.");
     }
     //$sql = $qs->getValue("s");
     $sql = @$post["s"];
     $sql = ew_Decrypt($sql);
     if ($sql == "") {
         die("Missing SQL.");
     }
     $dbid = @$post["d"];
     $conn = ew_Connect($dbid);
     // Global Page Loading event (in userfn*.php)
     Page_Loading();
     if (ob_get_length()) {
         // Clear output
         ob_clean();
     }
     if (strpos($sql, "{filter}") > 0) {
         $filters = "";
         $ar = preg_grep('/^f\\d+$/', array_keys($post));
         foreach ($ar as $key) {
             // Get the filter values (for "IN")
             $filter = ew_Decrypt(@$post[$key]);
             if ($filter != "") {
                 $i = preg_replace('/^f/', '', $key);
                 $value = @$post["v" . $i];
                 if ($value == "") {
                     if ($i > 0) {
                         // Empty parent field
                         //continue; // Allow
                         ew_AddFilter($filters, "1=0");
                     }
                     // Disallow
                     continue;
                 }
                 $arValue = explode(",", $value);
                 $fldtype = intval(@$post["t" . $i]);
                 $flddatatype = ew_FieldDataType($fldtype);
                 $bValidData = TRUE;
                 for ($j = 0, $cnt = count($arValue); $j < $cnt; $j++) {
                     if ($flddatatype == EW_DATATYPE_NUMBER && !is_numeric($arValue[$j])) {
                         $bValidData = FALSE;
                         break;
                     } else {
                         $arValue[$j] = ew_QuotedValue($arValue[$j], $flddatatype, $dbid);
                     }
                 }
                 if ($bValidData) {
                     $filter = str_replace("{filter_value}", implode(",", $arValue), $filter);
                 } else {
                     $filter = "1=0";
                 }
                 $fn = @$post["fn" . $i];
                 if ($fn == "" || !function_exists($fn)) {
                     $fn = "ew_AddFilter";
                 }
                 $fn($filters, $filter);
             }
         }
         $sql = str_replace("{filter}", $filters != "" ? $filters : "1=1", $sql);
     }
     // Get the query value (for "LIKE" or "=")
     $value = ew_AdjustSql(@$_GET["q"], $dbid);
     // Get the query value from querystring
     if ($value == "") {
         $value = ew_AdjustSql(@$post["q"], $dbid);
     }
     // Get the value from post
     if ($value != "") {
         $sql = preg_replace('/LIKE \'(%)?\\{query_value\\}%\'/', ew_Like('\'$1{query_value}%\'', $dbid), $sql);
         $sql = str_replace("{query_value}", $value, $sql);
     }
     // Replace {query_value_n}
     preg_match_all('/\\{query_value_(\\d+)\\}/', $sql, $out);
     $cnt = count($out[0]);
     for ($i = 0; $i < $cnt; $i++) {
         $j = $out[1][$i];
         $v = ew_AdjustSql(@$post["q" . $j], $dbid);
         $sql = str_replace("{query_value_" . $j . "}", $v, $sql);
     }
     $this->GetLookupValues($sql, $dbid);
     $result = ob_get_contents();
     // Global Page Unloaded event (in userfn*.php)
     Page_Unloaded();
     if (ob_get_length()) {
         // Clear output
         ob_clean();
     }
     // Close connection
     ew_CloseConn();
     // Output
     echo $result;
 }

 function DeleteSQL(&$rs)
 {
     $SQL = "DELETE FROM `Subscriptions` WHERE ";
     $SQL .= EW_DB_QUOTE_START . 'DeliveryDate' . EW_DB_QUOTE_END . '=' . ew_QuotedValue($rs['DeliveryDate'], $this->DeliveryDate->FldDataType) . ' AND ';
     $SQL .= EW_DB_QUOTE_START . 'CustomerID' . EW_DB_QUOTE_END . '=' . ew_QuotedValue($rs['CustomerID'], $this->CustomerID->FldDataType) . ' AND ';
     if (substr($SQL, -5) == " AND ") {
         $SQL = substr($SQL, 0, strlen($SQL) - 5);
     }
     if ($this->CurrentFilter != "") {
         $SQL .= " AND " . $this->CurrentFilter;
     }
     return $SQL;
 }