PHP filter_text_input函数代码示例

 function nv_block_config_bdown_news_submit($module, $lang_block)
 {
     global $nv_Request;
     $return = array();
     $return['error'] = array();
     $return['config'] = array();
     $return['config']['title_length'] = $nv_Request->get_int('config_title_length', 'post', 24);
     $return['config']['numrow'] = $nv_Request->get_int('config_numrow', 'post', 5);
     $return['config']['class_name'] = filter_text_input('config_class_name', 'post', 'list_item');
     $return['config']['img_bullet'] = filter_text_input('config_img_bullet', 'post', '');
     return $return;
 }

 /**
  * nv_block_data_config_rss_submit()
  * 
  * @param mixed $module
  * @param mixed $lang_block
  * @return
  */
 function nv_block_data_config_rss_submit($module, $lang_block)
 {
     global $nv_Request;
     $return = array();
     $return['error'] = array();
     $return['config'] = array();
     $return['config']['url'] = filter_text_input('config_url', 'post', '', 0);
     $return['config']['number'] = $nv_Request->get_int('config_number', 'post', 0);
     $return['config']['isdescription'] = $nv_Request->get_int('config_isdescription', 'post', 0);
     $return['config']['ishtml'] = $nv_Request->get_int('config_ishtml', 'post', 0);
     $return['config']['ispubdate'] = $nv_Request->get_int('config_ispubdate', 'post', 0);
     $return['config']['istarget'] = $nv_Request->get_int('config_istarget', 'post', 0);
     $return['config']['title_length'] = $nv_Request->get_int('config_title_length', 'post', 0);
     if (!nv_is_url($return['config']['url'])) {
         $return['error'][] = $lang_block['error_url'];
     }
     return $return;
 }

$fpart = isset($array_op[0]) ? $array_op[0] : 0;
$fpart = $nv_Request->get_int('fpart', 'post,get', $fpart);
$ftitle = filter_text_input('ftitle', 'post,get', '', 1, 250);
if (!empty($array_rows)) {
    $checkss = filter_text_input('checkss', 'post', '');
    if ($checkss == md5($client_info['session_id'] . $global_config['sitekey'])) {
        if (defined('NV_IS_USER')) {
            $fname = !empty($user_info['full_name']) ? $user_info['full_name'] : $user_info['username'];
            $femail = $user_info['email'];
        } else {
            $fname = filter_text_input('fname', 'post', '', 1, 100);
            $femail = filter_text_input('femail', 'post', '', 1, 100);
        }
        $fphone = filter_text_input('fphone', 'post', '', 1, 100);
        $fcon = filter_text_textarea('fcon', '', NV_ALLOWED_HTML_TAGS);
        $fcode = filter_text_input('fcode', 'post', '');
        $check_valid_email = nv_check_valid_email($femail);
        if (empty($fname)) {
            $error = $lang_module['error_fullname'];
        } elseif (!empty($check_valid_email)) {
            $error = $check_valid_email;
        } elseif (empty($ftitle)) {
            $error = $lang_module['error_title'];
        } elseif (empty($fcon)) {
            $error = $lang_module['error_content'];
        } elseif (!isset($array_rows[$fpart])) {
            $error = $lang_module['error_part'];
        } elseif (!nv_capcha_txt($fcode)) {
            $error = $lang_module['error_captcha'];
        } else {
            $fcon = nv_nl2br($fcon);

$theme_array_file = nv_scandir(NV_ROOTDIR . "/themes", $global_config['check_theme']);
$theme_array_file = array_flip($theme_array_file);
$theme_array_file = array_keys($theme_array_file);
$sql = "SELECT DISTINCT `theme` FROM `" . NV_PREFIXLANG . "_modthemes`  WHERE `func_id`=0";
$result = $db->sql_query($sql);
while (list($theme) = $db->sql_fetchrow($result)) {
    if (in_array($theme, $theme_array_file)) {
        $theme_list[] = $theme;
    }
}
$groups_list = nv_groups_list();
if ($nv_Request->get_int('save', 'post') == '1') {
    nv_insert_logs(NV_LANG_DATA, $module_name, 'log_edit_modul', "module  " . $mod, $admin_info['userid']);
    $custom_title = filter_text_input('custom_title', 'post', 1);
    $theme = filter_text_input('theme', 'post', '', 1);
    $keywords = filter_text_input('keywords', 'post', '', 1);
    $act = $nv_Request->get_int('act', 'post', 0);
    $rss = $nv_Request->get_int('rss', 'post', 0);
    if (!empty($theme) and !in_array($theme, $theme_list)) {
        $theme = "";
    }
    if (!empty($keywords)) {
        $keywords = explode(",", $keywords);
        $keywords = array_map("trim", $keywords);
        $keywords = implode(", ", $keywords);
    }
    if ($mod != $global_config['site_home_module']) {
        $who_view = $nv_Request->get_int('who_view', 'post', 0);
        if ($who_view < 0 or $who_view > 3) {
            $who_view = 0;
        }

<?php

/**
 * @Project NUKEVIET 3.x
 * @Author VINADES.,JSC (contact@vinades.vn)
 * @Copyright (C) 2012 VINADES.,JSC. All rights reserved
 * @Createdate 2-10-2010 17:30
 */
if (!defined('NV_IS_FILE_MODULES')) {
    die('Stop!!!');
}
$mod = filter_text_input('mod', 'post');
if (empty($mod) or !preg_match($global_config['check_module'], $mod)) {
    die("NO_" . $mod);
}
$sql = "SELECT `submenu` FROM `" . NV_MODULES_TABLE . "` WHERE `title`=" . $db->dbescape($mod);
$result = $db->sql_query($sql);
$numrows = $db->sql_numrows($result);
if ($numrows != 1) {
    die('NO_' . $mod);
}
$row = $db->sql_fetchrow($result);
$submenu = $row['submenu'] ? 0 : 1;
$sql = "UPDATE `" . NV_MODULES_TABLE . "` SET `submenu`=" . $submenu . " WHERE `title`=" . $db->dbescape($mod);
$db->sql_query($sql);
nv_del_moduleCache('modules');
include NV_ROOTDIR . "/includes/header.php";
echo 'OK_' . $mod;
include NV_ROOTDIR . "/includes/footer.php";

<?php

/**
 * @Project NUKEVIET 3.0
 * @Author VINADES.,JSC (contact@vinades.vn)
 * @Copyright (C) 2010 VINADES.,JSC. All rights reserved
 * @Createdate 2-2-2010 12:55
 */
if (!defined('NV_IS_FILE_MODULES')) {
    die('Stop!!!');
}
$filename = filter_text_input('filename', 'get', '');
$checkss = filter_text_input('checkss', 'get', '');
$mod = filter_text_input('mod', 'get', '');
$path_filename = NV_ROOTDIR . "/" . NV_TEMP_DIR . "/" . $filename;
if (!empty($mod) and file_exists($path_filename) and $checkss == md5($filename . $client_info['session_id'] . $global_config['sitekey'])) {
    //Download file
    require_once NV_ROOTDIR . '/includes/class/download.class.php';
    $download = new download($path_filename, NV_ROOTDIR . "/" . NV_TEMP_DIR, $mod);
    $download->download_file();
    exit;
} else {
    $contents = 'file not exist !';
    include NV_ROOTDIR . "/includes/header.php";
    echo nv_admin_theme($contents);
    include NV_ROOTDIR . "/includes/footer.php";
}

}
$xtpl = new XTemplate("copy.tpl", NV_ROOTDIR . "/themes/" . $global_config['module_theme'] . "/modules/" . $module_file);
$xtpl->assign('LANG', $lang_module);
$xtpl->assign('GLANG', $lang_global);
if (empty($array_lang_exit)) {
    $xtpl->assign('URL', NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "&" . NV_OP_VARIABLE . "=setting");
    $xtpl->parse('empty');
    $contents = $xtpl->text('empty');
    include NV_ROOTDIR . "/includes/header.php";
    echo nv_admin_theme($contents);
    include NV_ROOTDIR . "/includes/footer.php";
    exit;
}
if ($nv_Request->isset_request('newslang,typelang,checksess', 'post') and $nv_Request->get_string('checksess', 'post') == md5(session_id())) {
    $newslang = filter_text_input('newslang', 'post', '');
    $typelang = filter_text_input('typelang', 'post', '');
    if ($typelang == "-vi") {
        $typelang = "-";
        $replace_lang_vi = true;
    } else {
        $replace_lang_vi = false;
    }
    if (isset($language_array[$newslang])) {
        nv_admin_add_field_lang($newslang);
        if ($replace_lang_vi == true) {
            nv_copyfile(NV_ROOTDIR . "/js/language/vi.js", NV_ROOTDIR . "/js/language/" . $newslang . ".js");
            $db->sql_query("UPDATE `" . NV_LANGUAGE_GLOBALTABLE . "_file` SET `author_" . $newslang . "`=`author_vi`");
            $query = "SELECT `id`, `lang_vi` FROM `" . NV_LANGUAGE_GLOBALTABLE . "`";
            $result = $db->sql_query($query);
            while (list($id, $author_lang) = $db->sql_fetchrow($result)) {
                $author_lang = nv_EncString($author_lang);

    cp_check_permission($nv_Request);
    $cp_permissions = unserialize($nv_Request->get_string('cp_permission', 'session'));
}
$can_write = $cp_permissions['can_write'];
$can_publish = $cp_permissions['can_publish'];
$stype = $nv_Request->get_string('stype', 'get', '-');
$catid = $nv_Request->get_int('catid', 'get', 0);
$per_page_old = $nv_Request->get_int('per_page', 'cookie', 50);
$per_page = $nv_Request->get_int('per_page', 'get', $per_page_old);
if ($per_page < 1 and $per_page > 500) {
    $per_page = 50;
}
if ($per_page_old != $per_page) {
    $nv_Request->set_Cookie('per_page', $per_page, NV_LIVE_COOKIE_TIME);
}
$q = filter_text_input('q', 'get', '', 1);
$ordername = $nv_Request->get_string('ordername', 'get', 'publtime');
$order = $nv_Request->get_string('order', 'get') == "asc" ? 'asc' : 'desc';
$array_search = array("-" => "---", "title" => $lang_module['search_title'], "bodytext" => $lang_module['search_bodytext'], "author" => $lang_module['search_author'], "admin_id" => $lang_module['search_admin']);
$array_in_rows = array("title", "bodytext", "author");
$array_in_ordername = array("title", "publtime", "exptime");
if (!in_array($stype, array_keys($array_search))) {
    $stype = "-";
}
if (!in_array($ordername, array_keys($array_in_ordername))) {
    $ordername = "id";
}
if ($catid == 0) {
    $from = "`" . NV_PREFIXLANG . "_" . $module_data . "_rows`";
} else {
    $from = "`" . NV_PREFIXLANG . "_" . $module_data . "_" . $catid . "`";

<?php

/**
 * @Project NUKEVIET 3.0
 * @Author VINADES.,JSC (contact@vinades.vn)
 * @Copyright (C) 2010 VINADES., JSC. All rights reserved
 * @Createdate 3/7/2010 2:23
 */
if (!defined('NV_IS_FILE_THEMES')) {
    die('Stop!!!');
}
$func_id = $nv_Request->get_int('funcid', 'post');
$layout = filter_text_input('layout', 'post', '', 1);
$selectthemes_old = $nv_Request->get_string('selectthemes', 'cookie', $global_config['site_theme']);
$selectthemes = $nv_Request->get_string('selectthemes', 'get', $selectthemes_old);
$numfunc = $db->sql_numrows($db->sql_query("SELECT func_id FROM `" . NV_PREFIXLANG . "_modthemes` WHERE `func_id`='" . $func_id . "' AND theme='" . $selectthemes . "'"));
if ($numfunc) {
    $sql = "UPDATE `" . NV_PREFIXLANG . "_modthemes` SET `layout`=" . $db->dbescape($layout) . " WHERE `func_id`=" . $func_id;
} else {
    $sql = "INSERT INTO `" . NV_PREFIXLANG . "_modthemes` VALUES('{$func_id}'," . $db->dbescape($layout) . ", " . $db->dbescape($selectthemes) . ")";
}
$result = $db->sql_query($sql);
if ($result) {
    echo $lang_module['setup_updated_layout'];
} else {
    echo $lang_module['setup_error_layout'];
}
nv_del_moduleCache('themes');

$numrows = $db->sql_numrows($result);
if ($numrows != 1) {
    Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name);
    die;
}
$row = $db->sql_fetchrow($result);
$error = "";
if ($nv_Request->get_int('save', 'post', 0)) {
    $lev = $nv_Request->get_int('lev', 'post', 0);
    $editor = filter_text_input('editor', 'post');
    $allow_files_type = $nv_Request->get_array('allow_files_type', 'post', array());
    $allow_create_subdirectories = $nv_Request->get_int('allow_create_subdirectories', 'post', 0);
    $allow_modify_files = $nv_Request->get_int('allow_modify_files', 'post', 0);
    $allow_modify_subdirectories = $nv_Request->get_int('allow_modify_subdirectories', 'post', 0);
    $modules = $nv_Request->get_array('modules', 'post', array());
    $position = filter_text_input('position', 'post', '', 1);
    if (empty($position)) {
        $error = $lang_module['position_incorrect'];
    } else {
        $lev = ($lev != 2 or !defined("NV_IS_GODADMIN")) ? 3 : 2;
        $mds = array();
        if ($lev == 3 and !empty($modules)) {
            $is_delCache = false;
            foreach (array_keys($site_mods) as $mod) {
                if (!empty($mod) and in_array($mod, $modules)) {
                    $site_mods_admins = $site_mods[$mod]['admins'] . (!empty($site_mods[$mod]['admins']) ? "," : "") . $userid;
                    $site_mods_admins = explode(",", $site_mods_admins);
                    $site_mods_admins = array_unique($site_mods_admins);
                    $site_mods_admins = implode(",", $site_mods_admins);
                    $sql = "UPDATE `" . NV_MODULES_TABLE . "` SET `admins`=" . $db->dbescape($site_mods_admins) . " WHERE `title`=" . $db->dbescape($mod);
                    $db->sql_query($sql);

 }
 $query = "SELECT * FROM `" . NV_PREFIXLANG . "_" . $module_data . "_comments` WHERE `id`=" . $id;
 $result = $db->sql_query($query);
 $numrows = $db->sql_numrows($result);
 if ($numrows != 1) {
     Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "&" . NV_OP_VARIABLE . "=comment&status=1");
     exit;
 }
 $row = $db->sql_fetchrow($result);
 $array = array();
 $is_error = false;
 $error = "";
 if ($nv_Request->isset_request('submit', 'post')) {
     $array['subject'] = filter_text_input('subject', 'post', '', 1);
     $array['comment'] = filter_text_textarea('comment', '', NV_ALLOWED_HTML_TAGS);
     $array['admin_reply'] = filter_text_input('admin_reply', 'post', '', 1);
     $array['admin_id'] = (int) $row['admin_id'];
     if (empty($array['subject'])) {
         $is_error = true;
         $error = $lang_module['comment_edit_error1'];
     } elseif (empty($array['comment'])) {
         $is_error = true;
         $error = $lang_module['comment_edit_error2'];
     } else {
         $array['comment'] = nv_nl2br($array['comment'], "<br />");
         if (!empty($array['admin_reply']) and $array['admin_reply'] != $row['admin_reply']) {
             $array['admin_id'] = $admin_info['admin_id'];
         }
         $sql = "UPDATE `" . NV_PREFIXLANG . "_" . $module_data . "_comments` SET \n            `subject`=" . $db->dbescape($array['subject']) . ", \n            `comment`=" . $db->dbescape($array['comment']) . ", \n            `admin_reply`=" . $db->dbescape($array['admin_reply']) . ", \n            `admin_id`=" . $array['admin_id'] . " \n            WHERE `id`=" . $id;
         $result = $db->sql_query($sql);
         if (!$result) {

    nv_info_die($global_config['site_description'], $lang_global['site_info'], $lang_global['firewallincorrect'] . "<META HTTP-EQUIV=\"refresh\" content=\"5;URL=" . $global_config['site_url'] . "\" />");
}
$error = "";
$login = "";
$array_gfx_chk = array(1, 5, 6, 7);
if (in_array($global_config['gfx_chk'], $array_gfx_chk)) {
    $global_config['gfx_chk'] = 1;
} else {
    $global_config['gfx_chk'] = 0;
}
$admin_login_redirect = $nv_Request->get_string('admin_login_redirect', 'session', '');
if ($nv_Request->isset_request('nv_login,nv_password', 'post')) {
    $nv_username = filter_text_input('nv_login', 'post', '', '', 100);
    $nv_password = filter_text_input('nv_password', 'post', '', '', 50);
    if ($global_config['gfx_chk'] == 1) {
        $nv_seccode = filter_text_input('nv_seccode', 'post', '');
    }
    if (empty($nv_username)) {
        $error = $lang_global['nickname_empty'];
    } elseif (empty($nv_password)) {
        $error = $lang_global['password_empty'];
    } elseif ($global_config['gfx_chk'] == 1 and !nv_capcha_txt($nv_seccode)) {
        $error = $lang_global['securitycodeincorrect'];
    } else {
        if (defined('NV_IS_USER_FORUM')) {
            define('NV_IS_MOD_USER', true);
            require_once NV_ROOTDIR . '/' . DIR_FORUM . '/nukeviet/login.php';
        }
        $userid = 0;
        $sql = "SELECT userid, username, password FROM `" . NV_USERS_GLOBALTABLE . "` WHERE md5username ='" . md5($nv_username) . "'";
        $result = $db->sql_query($sql);

<?php

/**
 * @Project NUKEVIET 3.0
 * @Author VINADES.,JSC (contact@vinades.vn)
 * @Copyright (C) 2010 VINADES.,JSC. All rights reserved
 * @Createdate 2-1-2010 21:51
 */
if (!defined('NV_IS_FILE_DATABASE')) {
    die('Stop!!!');
}
if ($nv_Request->get_bool('show_tabs', 'post')) {
    nv_show_tables();
    exit;
}
if ($nv_Request->isset_request('tab', 'get') and preg_match("/^(" . $db_config['prefix'] . ")\\_[a-zA-Z0-9\\_\\.\\-]+\$/", filter_text_input('tab', 'get'))) {
    nv_show_tab();
    exit;
}
$database = array();
$database['db_host_info'] = mysql_get_host_info();
$database['db_sql_version'] = $db->sql_version;
$database['db_proto_info'] = mysql_get_proto_info();
$database['server'] = $db->server;
$database['db_dbname'] = $db->dbname;
$database['db_uname'] = $db->user;
$result = $db->sql_query('SELECT @@session.time_zone AS `db_time_zone`, @@session.character_set_database AS `db_charset`, @@session.collation_database AS `db_collation`');
$row = $db->sql_fetch_assoc($result);
$db->sql_freeresult($result);
$database['db_charset'] = $row['db_charset'];
$database['db_collation'] = $row['db_collation'];

     Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "&" . NV_OP_VARIABLE . "=cat");
     exit;
 }
 $sql = "SELECT * FROM `" . NV_PREFIXLANG . "_" . $module_data . "_categories` WHERE `id`=" . $catid;
 $result = $db->sql_query($sql);
 $numcat = $db->sql_numrows($result);
 if ($numcat != 1) {
     Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "&" . NV_OP_VARIABLE . "=cat");
     exit;
 }
 $row = $db->sql_fetchrow($result);
 $is_error = false;
 if ($nv_Request->isset_request('submit', 'post')) {
     $array['parentid'] = $nv_Request->get_int('parentid', 'post', 0);
     $array['title'] = filter_text_input('title', 'post', '', 1);
     $array['description'] = filter_text_input('description', 'post', '');
     $array['who_view'] = $nv_Request->get_int('who_view', 'post', 0);
     $array['groups_view'] = $nv_Request->get_typed_array('groups_view', 'post', 'int');
     $alias = change_alias($array['title']);
     if (empty($array['title'])) {
         $error = $lang_module['faq_error_cat2'];
         $is_error = true;
     } else {
         if (!empty($array['parentid'])) {
             $sql = "SELECT COUNT(*) AS count FROM `" . NV_PREFIXLANG . "_" . $module_data . "_categories` WHERE `id`=" . $array['parentid'];
             $result = $db->sql_query($sql);
             list($count) = $db->sql_fetchrow($result);
             if (!$count) {
                 $error = $lang_module['faq_error_cat3'];
                 $is_error = true;
             }

 * @Project NUKEVIET 3.0
 * @Author VINADES.,JSC (contact@vinades.vn)
 * @Copyright (C) 2010 VINADES., JSC. All rights reserved
 * @Createdate 3-6-2010 0:14
 */
if (!defined('NV_IS_MOD_NEWS')) {
    die('Stop!!!');
}
if (!defined('NV_IS_AJAX')) {
    die('Wrong URL');
}
$contents = "";
$array_point = array(1, 2, 3, 4, 5);
$id = $nv_Request->get_int('id', 'post', 0);
$point = $nv_Request->get_int('point', 'post', 0);
$checkss = filter_text_input('checkss', 'post');
$time_set = $nv_Request->get_int($module_name . '_' . $op . '_' . $id, 'session', 0);
if ($id > 0 and in_array($point, $array_point) and $checkss == md5($id . $client_info['session_id'] . $global_config['sitekey'])) {
    if (!empty($time_set)) {
        die($lang_module['rating_error2']);
    }
    $nv_Request->set_Session($module_name . '_' . $op . '_' . $id, NV_CURRENTTIME);
    $query = $db->sql_query("SELECT `listcatid`, `allowed_rating`, `ratingdetail` FROM `" . NV_PREFIXLANG . "_" . $module_data . "_rows` WHERE `id` = " . $id . " AND `status`=1 AND `publtime` < " . NV_CURRENTTIME . " AND (`exptime`=0 OR `exptime`>" . NV_CURRENTTIME . ")");
    $row = $db->sql_fetchrow($query);
    if (isset($row['allowed_rating']) and $row['allowed_rating'] == 1) {
        $ratingdetail = array_map("intval", explode("|", $row['ratingdetail']));
        $rating['total'] = $ratingdetail[0] + $point;
        $rating['click'] = $ratingdetail[1] + 1;
        $rating['points'] = round($rating['total'] / $rating['click']);
        $ratingdetail = $rating['total'] . '|' . $rating['click'];
        $query = "UPDATE `" . NV_PREFIXLANG . "_" . $module_data . "_rows` SET `ratingdetail`=" . $db->dbescape($ratingdetail) . " WHERE `id`=" . $id;