PHP ew_StripSlashes函数代码示例

 function Page_Main()
 {
     global $conn;
     $GLOBALS["Page"] =& $this;
     //***$conn = ew_Connect();
     // Get fn / table name parameters
     $key = EW_RANDOM_KEY . session_id();
     $fn = @$_GET["fn"] != "" ? ew_StripSlashes($_GET["fn"]) : "";
     if ($fn != "" && EW_ENCRYPT_FILE_PATH) {
         $fn = ew_Decrypt($fn, $key);
     }
     $table = @$_GET["t"] != "" ? ew_StripSlashes($_GET["t"]) : "";
     if ($table != "" && EW_ENCRYPT_FILE_PATH) {
         $table = ew_Decrypt($table, $key);
     }
     // Global Page Loading event (in userfn*.php)
     //***Page_Loading();
     // Get resize parameters
     $resize = @$_GET["resize"] != "";
     $width = @$_GET["width"] != "" ? $_GET["width"] : 0;
     $height = @$_GET["height"] != "" ? $_GET["height"] : 0;
     if (@$_GET["width"] == "" && @$_GET["height"] == "") {
         $width = EW_THUMBNAIL_DEFAULT_WIDTH;
         $height = EW_THUMBNAIL_DEFAULT_HEIGHT;
     }
     // Resize image from physical file
     if ($fn != "") {
         $fn = str_replace("", "", $fn);
         $fn = ew_IncludeTrailingDelimiter(ew_AppRoot(), TRUE) . $fn;
         if (file_exists($fn) || @fopen($fn, "rb") !== FALSE) {
             // Allow remote file
             if (ob_get_length()) {
                 ob_end_clean();
             }
             $pathinfo = pathinfo($fn);
             $ext = strtolower(@$pathinfo["extension"]);
             $ct = ew_ContentType("", $fn);
             if ($ct != "") {
                 header("Content-type: " . $ct);
             }
             if (in_array($ext, explode(",", EW_IMAGE_ALLOWED_FILE_EXT))) {
                 $size = @getimagesize($fn);
                 if ($size) {
                     header("Content-type: {$size['mime']}");
                 }
                 if ($width > 0 || $height > 0) {
                     echo ew_ResizeFileToBinary($fn, $width, $height);
                 } else {
                     echo file_get_contents($fn);
                 }
             } elseif (in_array($ext, explode(",", EW_DOWNLOAD_ALLOWED_FILE_EXT))) {
                 echo file_get_contents($fn);
             }
         }
     }
     // Global Page Unloaded event (in userfn*.php)
     //***Page_Unloaded();
     // Close connection
     //***ew_CloseConn();
 }

 function Page_Main()
 {
     $GLOBALS["Page"] =& $this;
     $post = ew_StripSlashes($_POST);
     if (count($post) == 0) {
         die("Missing post data.");
     }
     //$sql = $qs->getValue("s");
     $sql = @$post["s"];
     $sql = ew_Decrypt($sql);
     if ($sql == "") {
         die("Missing SQL.");
     }
     if (strpos($sql, "{filter}") > 0) {
         $filters = "";
         for ($i = 0; $i < 5; $i++) {
             // Get the filter values (for "IN")
             $filter = ew_Decrypt(@$post["f" . $i]);
             if ($filter != "") {
                 $value = @$post["v" . $i];
                 if ($value == "") {
                     if ($i > 0) {
                         // Empty parent field
                         //continue; // Allow
                         ew_AddFilter($filters, "1=0");
                     }
                     // Disallow
                     continue;
                 }
                 $arValue = explode(",", $value);
                 $fldtype = intval(@$post["t" . $i]);
                 for ($j = 0, $cnt = count($arValue); $j < $cnt; $j++) {
                     $arValue[$j] = ew_QuotedValue($arValue[$j], ew_FieldDataType($fldtype));
                 }
                 $filter = str_replace("{filter_value}", implode(",", $arValue), $filter);
                 ew_AddFilter($filters, $filter);
             }
         }
         $sql = str_replace("{filter}", $filters != "" ? $filters : "1=1", $sql);
     }
     // Get the query value (for "LIKE" or "=")
     $value = ew_AdjustSql(@$post["q"]);
     if ($value != "") {
         $sql = preg_replace('/LIKE \'(%)?\\{query_value\\}%\'/', ew_Like('\'$1{query_value}%\''), $sql);
         $sql = str_replace("{query_value}", $value, $sql);
     }
     // Replace {query_value_n}
     preg_match_all('/\\{query_value_(\\d+)\\}/', $sql, $out);
     $cnt = count($out[0]);
     for ($i = 0; $i < $cnt; $i++) {
         $j = $out[1][$i];
         $v = ew_AdjustSql(@$post["q" . $j]);
         $sql = str_replace("{query_value_" . $j . "}", $v, $sql);
     }
     $this->GetLookupValues($sql);
 }

 function Page_Main()
 {
     $post = ew_StripSlashes($_POST);
     if (count($post) == 0) {
         die("Missing post data.");
     }
     //$sql = $qs->getValue("s");
     $sql = $post["s"];
     $sql = TEAdecrypt($sql, EW_RANDOM_KEY);
     if ($sql == "") {
         die("Missing SQL.");
     }
     if (strpos($sql, "{filter}") > 0) {
         $filters = "";
         for ($i = 0; $i < 5; $i++) {
             // Get the filter values (for "IN")
             $filter = TEAdecrypt($post["f" . $i], EW_RANDOM_KEY);
             if ($filter != "") {
                 $value = $post["v" . $i];
                 if ($value == "") {
                     if ($i > 0) {
                         // Empty parent field
                         //continue; // Allow
                         ew_AddFilter($filters, "1=0");
                     }
                     // Disallow
                     continue;
                 }
                 $arValue = explode(",", $value);
                 $fldtype = intval($post["t" . $i]);
                 for ($j = 0, $cnt = count($arValue); $j < $cnt; $j++) {
                     $arValue[$j] = ew_QuotedValue($arValue[$j], ew_FieldDataType($fldtype));
                 }
                 $filter = str_replace("{filter_value}", implode(",", $arValue), $filter);
                 ew_AddFilter($filters, $filter);
             }
         }
         $sql = str_replace("{filter}", $filters != "" ? $filters : "1=1", $sql);
     }
     // Get the query value (for "LIKE" or "=")
     $value = ew_AdjustSql(@$post["q"]);
     if ($value != "") {
         $sql = preg_replace('/LIKE \'(%)?\\{query_value\\}%\'/', ew_Like('\'$1{query_value}%\''), $sql);
         $sql = str_replace("{query_value}", $value, $sql);
     }
     // Check custom function
     $fn = @$post["fn"];
     if ($fn != "" && function_exists($fn)) {
         // Custom function(&$sql)
         $sql = $fn($sql);
     }
     $this->GetLookupValues($sql);
 }

 function SetUpSortOrder()
 {
     // Check for "order" parameter
     if (@$_GET["order"] != "") {
         $this->CurrentOrder = ew_StripSlashes(@$_GET["order"]);
         $this->CurrentOrderType = @$_GET["ordertype"];
         $this->UpdateSort($this->tipo_mantenimiento);
         // tipo_mantenimiento
         $this->UpdateSort($this->taller);
         // taller
         $this->UpdateSort($this->Patente);
         // Patente
         $this->UpdateSort($this->modelo);
         // modelo
         $this->UpdateSort($this->nombre);
         // nombre
         $this->UpdateSort($this->fecha_ini);
         // fecha_ini
         $this->UpdateSort($this->fecha_fin);
         // fecha_fin
         $this->UpdateSort($this->codigo);
         // codigo
         $this->setStartRecordNumber(1);
         // Reset start position
     }
 }

 function ExportEmail($EmailContent)
 {
     global $gTmpImages, $Language;
     $sSender = @$_GET["sender"];
     $sRecipient = @$_GET["recipient"];
     $sCc = @$_GET["cc"];
     $sBcc = @$_GET["bcc"];
     $sContentType = @$_GET["contenttype"];
     // Subject
     $sSubject = ew_StripSlashes(@$_GET["subject"]);
     $sEmailSubject = $sSubject;
     // Message
     $sContent = ew_StripSlashes(@$_GET["message"]);
     $sEmailMessage = $sContent;
     // Check sender
     if ($sSender == "") {
         return "<p class=\"text-error\">" . $Language->Phrase("EnterSenderEmail") . "</p>";
     }
     if (!ew_CheckEmail($sSender)) {
         return "<p class=\"text-error\">" . $Language->Phrase("EnterProperSenderEmail") . "</p>";
     }
     // Check recipient
     if (!ew_CheckEmailList($sRecipient, EW_MAX_EMAIL_RECIPIENT)) {
         return "<p class=\"text-error\">" . $Language->Phrase("EnterProperRecipientEmail") . "</p>";
     }
     // Check cc
     if (!ew_CheckEmailList($sCc, EW_MAX_EMAIL_RECIPIENT)) {
         return "<p class=\"text-error\">" . $Language->Phrase("EnterProperCcEmail") . "</p>";
     }
     // Check bcc
     if (!ew_CheckEmailList($sBcc, EW_MAX_EMAIL_RECIPIENT)) {
         return "<p class=\"text-error\">" . $Language->Phrase("EnterProperBccEmail") . "</p>";
     }
     // Check email sent count
     if (!isset($_SESSION[EW_EXPORT_EMAIL_COUNTER])) {
         $_SESSION[EW_EXPORT_EMAIL_COUNTER] = 0;
     }
     if (intval($_SESSION[EW_EXPORT_EMAIL_COUNTER]) > EW_MAX_EMAIL_SENT_COUNT) {
         return "<p class=\"text-error\">" . $Language->Phrase("ExceedMaxEmailExport") . "</p>";
     }
     // Send email
     $Email = new cEmail();
     $Email->Sender = $sSender;
     // Sender
     $Email->Recipient = $sRecipient;
     // Recipient
     $Email->Cc = $sCc;
     // Cc
     $Email->Bcc = $sBcc;
     // Bcc
     $Email->Subject = $sEmailSubject;
     // Subject
     $Email->Format = $sContentType == "url" ? "text" : "html";
     $Email->Charset = EW_EMAIL_CHARSET;
     if ($sEmailMessage != "") {
         $sEmailMessage = ew_RemoveXSS($sEmailMessage);
         $sEmailMessage .= $sContentType == "url" ? "\r\n\r\n" : "<br><br>";
     }
     if ($sContentType == "url") {
         $sUrl = ew_ConvertFullUrl(ew_CurrentPage() . "?" . $this->ExportQueryString());
         $sEmailMessage .= $sUrl;
         // Send URL only
     } else {
         foreach ($gTmpImages as $tmpimage) {
             $Email->AddEmbeddedImage($tmpimage);
         }
         $sEmailMessage .= $EmailContent;
         // Send HTML
     }
     $Email->Content = $sEmailMessage;
     // Content
     $EventArgs = array();
     $bEmailSent = FALSE;
     if ($this->Email_Sending($Email, $EventArgs)) {
         $bEmailSent = $Email->Send();
     }
     // Check email sent status
     if ($bEmailSent) {
         // Update email sent count
         $_SESSION[EW_EXPORT_EMAIL_COUNTER]++;
         // Sent email success
         return "<p class=\"text-success\">" . $Language->Phrase("SendEmailSuccess") . "</p>";
         // Set up success message
     } else {
         // Sent email failure
         return "<p class=\"text-error\">" . $Email->SendErrDescription . "</p>";
     }
 }

 function Page_Init()
 {
     global $gsExport, $gsExportFile, $UserProfile, $Language, $Security, $objForm;
     // Security
     $Security = new cAdvancedSecurity();
     if (!$Security->IsLoggedIn()) {
         $Security->AutoLogin();
     }
     if (!$Security->IsLoggedIn()) {
         $Security->SaveLastUrl();
         $this->Page_Terminate("login.php");
     }
     // Get export parameters
     if (@$_GET["export"] != "") {
         $this->Export = $_GET["export"];
     } elseif (ew_IsHttpPost()) {
         if (@$_POST["exporttype"] != "") {
             $this->Export = $_POST["exporttype"];
         }
     } else {
         $this->setExportReturnUrl(ew_CurrentUrl());
     }
     $gsExport = $this->Export;
     // Get export parameter, used in header
     $gsExportFile = $this->TableVar;
     // Get export file, used in header
     if (@$_GET["guru_id"] != "") {
         if ($gsExportFile != "") {
             $gsExportFile .= "_";
         }
         $gsExportFile .= ew_StripSlashes($_GET["guru_id"]);
     }
     $this->CurrentAction = @$_GET["a"] != "" ? $_GET["a"] : @$_POST["a_list"];
     // Set up current action
     // Setup export options
     $this->SetupExportOptions();
     // Global Page Loading event (in userfn*.php)
     Page_Loading();
     // Page Load event
     $this->Page_Load();
     // Update url if printer friendly for Pdf
     if ($this->PrinterFriendlyForPdf) {
         $this->ExportOptions->Items["pdf"]->Body = str_replace($this->ExportPdfUrl, $this->ExportPrintUrl . "&pdf=1", $this->ExportOptions->Items["pdf"]->Body);
     }
 }

 function SetUpSortOrder()
 {
     // Check for "order" parameter
     if (@$_GET["order"] != "") {
         $this->CurrentOrder = ew_StripSlashes(@$_GET["order"]);
         $this->CurrentOrderType = @$_GET["ordertype"];
         $this->UpdateSort($this->EvaluateAnswerID);
         // EvaluateAnswerID
         $this->UpdateSort($this->lastModified);
         // lastModified
         $this->UpdateSort($this->Date);
         // Date
         $this->UpdateSort($this->ID);
         // ID
         $this->setStartRecordNumber(1);
         // Reset start position
     }
 }

 function SetUpSortOrder()
 {
     global $order;
     // Check for "order" parameter
     if (@$_GET["order"] != "") {
         $order->CurrentOrder = ew_StripSlashes(@$_GET["order"]);
         $order->CurrentOrderType = @$_GET["ordertype"];
         $order->UpdateSort($order->orderid);
         // orderid
         $order->UpdateSort($order->bookid);
         // bookid
         $order->UpdateSort($order->orderstatus);
         // orderstatus
         $order->UpdateSort($order->zemail);
         // email
         $order->UpdateSort($order->datatime);
         // datatime
         $order->setStartRecordNumber(1);
         // Reset start position
     }
 }

 function SetUpSortOrder()
 {
     // Check for "order" parameter
     if (@$_GET["order"] != "") {
         $this->CurrentOrder = ew_StripSlashes(@$_GET["order"]);
         $this->CurrentOrderType = @$_GET["ordertype"];
         $this->UpdateSort($this->id_mapel);
         // id_mapel
         $this->UpdateSort($this->nilai_afektif);
         // nilai_afektif
         $this->UpdateSort($this->nilai_komulatif);
         // nilai_komulatif
         $this->UpdateSort($this->nilai_psikomotorik);
         // nilai_psikomotorik
         $this->UpdateSort($this->nilai_rata_rata);
         // nilai_rata_rata
         $this->setStartRecordNumber(1);
         // Reset start position
     }
 }

 function SetUpSortOrder()
 {
     global $ItemIngredients;
     // Check for an Order parameter
     if (@$_GET["order"] != "") {
         $ItemIngredients->CurrentOrder = ew_StripSlashes(@$_GET["order"]);
         $ItemIngredients->CurrentOrderType = @$_GET["ordertype"];
         $ItemIngredients->UpdateSort($ItemIngredients->ItemIngredientID);
         // Field
         $ItemIngredients->UpdateSort($ItemIngredients->ItemID);
         // Field
         $ItemIngredients->UpdateSort($ItemIngredients->IngredientID);
         // Field
         $ItemIngredients->UpdateSort($ItemIngredients->Amount);
         // Field
         $ItemIngredients->UpdateSort($ItemIngredients->Type);
         // Field
         $ItemIngredients->UpdateSort($ItemIngredients->Letter_Code);
         // Field
         $ItemIngredients->UpdateSort($ItemIngredients->Vegetarian);
         // Field
         $ItemIngredients->setStartRecordNumber(1);
         // Reset start position
     }
 }

// Turn on output buffering
include_once "ewcfg11.php";
include_once "adodb5/adodb.inc.php";
include_once "phpfn11.php";
// Get resize parameters
$resize = @$_GET["resize"] != "";
$width = @$_GET["width"] != "" ? $_GET["width"] : 0;
$height = @$_GET["height"] != "" ? $_GET["height"] : 0;
if (@$_GET["width"] == "" && @$_GET["height"] == "") {
    $width = EW_THUMBNAIL_DEFAULT_WIDTH;
    $height = EW_THUMBNAIL_DEFAULT_HEIGHT;
}
$quality = @$_GET["quality"] != "" ? $_GET["quality"] : EW_THUMBNAIL_DEFAULT_QUALITY;
// Resize image from physical file
if (@$_GET["fn"] != "") {
    $fn = ew_StripSlashes($_GET["fn"]);
    $fn = str_replace("", "", $fn);
    $fn = ew_IncludeTrailingDelimiter(ew_AppRoot(), TRUE) . $fn;
    if (file_exists($fn) || fopen($fn, "rb") !== FALSE) {
        // Allow remote file
        $pathinfo = pathinfo($fn);
        $ext = strtolower(@$pathinfo["extension"]);
        if (in_array($ext, explode(",", EW_IMAGE_ALLOWED_FILE_EXT))) {
            $size = @getimagesize($fn);
            if ($size) {
                header("Content-type: {$size['mime']}");
            }
            echo ew_ResizeFileToBinary($fn, $width, $height, $quality);
        }
    }
    exit;

 function LoadSearchValues()
 {
     global $objForm;
     // Load search values
     // codigo
     $this->codigo->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_codigo"]);
     if ($this->codigo->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->codigo->AdvancedSearch->SearchOperator = @$_GET["z_codigo"];
     // responsable
     $this->responsable->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_responsable"]);
     if ($this->responsable->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->responsable->AdvancedSearch->SearchOperator = @$_GET["z_responsable"];
     // Patente
     $this->Patente->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_Patente"]);
     if ($this->Patente->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->Patente->AdvancedSearch->SearchOperator = @$_GET["z_Patente"];
     // kg_carga
     $this->kg_carga->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_kg_carga"]);
     if ($this->kg_carga->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->kg_carga->AdvancedSearch->SearchOperator = @$_GET["z_kg_carga"];
     // tarifa
     $this->tarifa->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_tarifa"]);
     if ($this->tarifa->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->tarifa->AdvancedSearch->SearchOperator = @$_GET["z_tarifa"];
     // sub_total
     $this->sub_total->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_sub_total"]);
     if ($this->sub_total->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->sub_total->AdvancedSearch->SearchOperator = @$_GET["z_sub_total"];
     // porcentaje
     $this->porcentaje->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_porcentaje"]);
     if ($this->porcentaje->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->porcentaje->AdvancedSearch->SearchOperator = @$_GET["z_porcentaje"];
     // comision_chofer
     $this->comision_chofer->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_comision_chofer"]);
     if ($this->comision_chofer->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->comision_chofer->AdvancedSearch->SearchOperator = @$_GET["z_comision_chofer"];
     // adelanto
     $this->adelanto->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_adelanto"]);
     if ($this->adelanto->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->adelanto->AdvancedSearch->SearchOperator = @$_GET["z_adelanto"];
     // total
     $this->total->AdvancedSearch->SearchValue = ew_StripSlashes(@$_GET["x_total"]);
     if ($this->total->AdvancedSearch->SearchValue != "") {
         $this->Command = "search";
     }
     $this->total->AdvancedSearch->SearchOperator = @$_GET["z_total"];
 }

 function SetUpSortOrder()
 {
     // Check for "order" parameter
     if (@$_GET["order"] != "") {
         $this->CurrentOrder = ew_StripSlashes(@$_GET["order"]);
         $this->CurrentOrderType = @$_GET["ordertype"];
         $this->UpdateSort($this->MetaID);
         // MetaID
         $this->UpdateSort($this->ID);
         // ID
         $this->UpdateSort($this->EducationalStatus);
         // EducationalStatus
         $this->UpdateSort($this->Created);
         // Created
         $this->setStartRecordNumber(1);
         // Reset start position
     }
 }

 function SetUpSortOrder()
 {
     // Check for "order" parameter
     if (@$_GET["order"] != "") {
         $this->CurrentOrder = ew_StripSlashes(@$_GET["order"]);
         $this->CurrentOrderType = @$_GET["ordertype"];
         $this->UpdateSort($this->id_hoja_mantenimiento);
         // id_hoja_mantenimiento
         $this->UpdateSort($this->descripcion);
         // descripcion
         $this->UpdateSort($this->fecha);
         // fecha
         $this->UpdateSort($this->hora_trabajo);
         // hora_trabajo
         $this->UpdateSort($this->id_tipo_mantenimiento);
         // id_tipo_mantenimiento
         $this->setStartRecordNumber(1);
         // Reset start position
     }
 }

 function Page_Main()
 {
     global $Language, $tbl_ga_stat;
     // Load key parameters
     $sKey = "";
     $bSingleDelete = TRUE;
     // Initialize as single delete
     $nKeySelected = 0;
     // Initialize selected key count
     $sFilter = "";
     if (@$_GET["id_profile"] != "") {
         $tbl_ga_stat->id_profile->setQueryStringValue($_GET["id_profile"]);
         if (!is_numeric($tbl_ga_stat->id_profile->QueryStringValue)) {
             $this->Page_Terminate("tbl_ga_statlist.php");
         }
         // Prevent SQL injection, exit
         $sKey .= $tbl_ga_stat->id_profile->QueryStringValue;
     } else {
         $bSingleDelete = FALSE;
     }
     if (@$_GET["stat_date"] != "") {
         $tbl_ga_stat->stat_date->setQueryStringValue($_GET["stat_date"]);
         if ($sKey != "") {
             $sKey .= EW_COMPOSITE_KEY_SEPARATOR;
         }
         $sKey .= $tbl_ga_stat->stat_date->QueryStringValue;
     } else {
         $bSingleDelete = FALSE;
     }
     if (@$_GET["hour"] != "") {
         $tbl_ga_stat->hour->setQueryStringValue($_GET["hour"]);
         if ($sKey != "") {
             $sKey .= EW_COMPOSITE_KEY_SEPARATOR;
         }
         $sKey .= $tbl_ga_stat->hour->QueryStringValue;
     } else {
         $bSingleDelete = FALSE;
     }
     if ($bSingleDelete) {
         $nKeySelected = 1;
         // Set up key selected count
         $this->arRecKeys[0] = $sKey;
     } else {
         if (isset($_POST["key_m"])) {
             // Key in form
             $nKeySelected = count($_POST["key_m"]);
             // Set up key selected count
             $this->arRecKeys = ew_StripSlashes($_POST["key_m"]);
         }
     }
     if ($nKeySelected <= 0) {
         $this->Page_Terminate("tbl_ga_statlist.php");
     }
     // No key specified, return to list
     // Build filter
     foreach ($this->arRecKeys as $sKey) {
         $sFilter .= "(";
         $arKeyFlds = explode(EW_COMPOSITE_KEY_SEPARATOR, trim($sKey));
         // Split key by separator
         if (count($arKeyFlds) != 3) {
             $this->Page_Terminate($tbl_ga_stat->getReturnUrl());
         }
         // Invalid key, exit
         // Set up key field
         $sKeyFld = $arKeyFlds[0];
         if (!is_numeric($sKeyFld)) {
             $this->Page_Terminate("tbl_ga_statlist.php");
         }
         // Prevent SQL injection, return to list
         $sFilter .= "`id_profile`=" . ew_AdjustSql($sKeyFld) . " AND ";
         // Set up key field
         $sKeyFld = $arKeyFlds[1];
         $sFilter .= "`stat_date`='" . ew_AdjustSql($sKeyFld) . "' AND ";
         // Set up key field
         $sKeyFld = $arKeyFlds[2];
         $sFilter .= "`hour`='" . ew_AdjustSql($sKeyFld) . "' AND ";
         if (substr($sFilter, -5) == " AND ") {
             $sFilter = substr($sFilter, 0, strlen($sFilter) - 5) . ") OR ";
         }
     }
     if (substr($sFilter, -4) == " OR ") {
         $sFilter = substr($sFilter, 0, strlen($sFilter) - 4);
     }
     // Set up filter (SQL WHHERE clause) and get return SQL
     // SQL constructor in tbl_ga_stat class, tbl_ga_statinfo.php
     $tbl_ga_stat->CurrentFilter = $sFilter;
     // Get action
     if (@$_POST["a_delete"] != "") {
         $tbl_ga_stat->CurrentAction = $_POST["a_delete"];
     } else {
         $tbl_ga_stat->CurrentAction = "D";
         // Delete record directly
     }
     switch ($tbl_ga_stat->CurrentAction) {
         case "D":
             // Delete
             $tbl_ga_stat->SendEmail = TRUE;
             // Send email on delete success
             if ($this->DeleteRows()) {
                 // delete rows
//.........这里部分代码省略.........