PHP form_security_field函数代码示例

 /**
  * 
  *
  */
 function create(&$argsObj, &$guiObj, $oWebEditorKeys)
 {
     $uiObj = new stdClass();
     $uiObj->doActionValue = 'doCreate';
     $uiObj->buttonValue = $this->l18n['btn_create'];
     $uiObj->caption = $this->l18n['caption_new_tproject'];
     $uiObj->testprojects = $this->tprojectMgr->get_all(null, array('access_key' => 'id'));
     // update by refence
     $argsObj->active = 1;
     $argsObj->is_public = 1;
     $guiObj->initWebEditorFromTemplate = true;
     $guiObj->testprojects = $uiObj->testprojects;
     $guiObj->reloadType = 'none';
     $guiObj->form_security_field = form_security_field();
     return $uiObj;
 }

# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
auth_reauthenticate();
access_ensure_global_level(config_get('manage_plugin_threshold'));
html_page_top(plugin_lang_get('title'));
print_manage_menu();
?>

<br/>
<form action="<?php 
echo plugin_page('config_edit');
?>
" method="post">
<?php 
echo form_security_field('plugin_jQueryDecorate_config_edit');
?>
<table align="center" class="width75" cellspacing="1">

<tr>
	<td class="form-title" colspan="3">
		<?php 
echo plugin_lang_get('title') . ': ' . plugin_lang_get('config');
?>
	</td>
</tr>

<?php 
if (current_user_is_administrator()) {
    ?>

			<td><?php 
    echo get_enum_element('custom_field_type', $t_desc['type']);
    ?>
</td>
			<td><?php 
    echo string_display($t_desc['possible_values']);
    ?>
</td>
			<td><?php 
    echo string_display($t_desc['default_value']);
    ?>
</td>
		</tr><?php 
}
# Create Form END
?>
	</table>
	<form method="post" action="manage_custom_field_create.php">
		<fieldset>
			<?php 
echo form_security_field('manage_custom_field_create');
?>
			<input type="text" name="name" size="32" maxlength="64" />
			<input type="submit" class="button" value="<?php 
echo lang_get('add_custom_field_button');
?>
" />
		</fieldset>
	</form>
</div><?php 
html_page_bottom();

# don't index bug report page
html_robots_noindex();
html_page_top(lang_get('report_bug_link'));
print_recently_visited();
$t_form_encoding = '';
if ($t_show_attachments) {
    $t_form_encoding = 'enctype="multipart/form-data"';
}
?>
<br />
<form name="report_bug_form" method="post" <?php 
echo $t_form_encoding;
?>
 action="bug_report.php">
<?php 
echo form_security_field('bug_report');
?>
<div class="table-container">
<table cellspacing="1">
	<tr>
		<td class="form-title" colspan="2">
			<input type="hidden" name="m_id" value="<?php 
echo $f_master_bug_id;
?>
" />
			<input type="hidden" name="project_id" value="<?php 
echo $t_project_id;
?>
" />
			<?php 
echo lang_get('enter_report_details_title');

require_api('lang_api.php');
require_api('utility_api.php');
# Check if project documentation feature is enabled.
if (OFF == config_get('enable_project_documentation') || !file_is_uploading_enabled() || !file_allow_project_upload()) {
    access_denied();
}
access_ensure_project_level(config_get('upload_project_file_threshold'));
$t_max_file_size = (int) min(ini_get_number('upload_max_filesize'), ini_get_number('post_max_size'), config_get('max_file_size'));
html_page_top();
?>

<br />
<div>
<form method="post" enctype="multipart/form-data" action="proj_doc_add.php">
<?php 
echo form_security_field('proj_doc_add');
?>
<table class="width75" cellspacing="1">
<tr>
	<td class="form-title">
		<?php 
echo lang_get('upload_file_title');
?>
	</td>
	<td class="right">
		<?php 
print_doc_menu('proj_doc_add_page.php');
?>
	</td>
</tr>
<tr class="row-1">

<br />
<div align="center">
<center><b><?php 
print string_display(filter_db_get_name($f_query_id));
?>
</b></center>
<?php 
echo lang_get('query_delete_msg');
?>

<form method="post" action="<?php 
print $t_delete_url;
?>
">
<?php 
echo form_security_field('query_delete');
?>
<br /><br />
<input type="hidden" name="source_query_id" value="<?php 
print $f_query_id;
?>
"/>
<input type="submit" class="button" value="<?php 
print lang_get('delete_query');
?>
"/>
</form>

<form method="post" action="<?php 
print $t_redirect_url;
?>

</span>
	</td>
	<td>
		<input type="submit" class="button" value="<?php 
echo lang_get('file_update_button');
?>
" />
	</td>
</tr>
</table>
</form>

<br />
	<form method="post" action="proj_doc_delete.php">
	<?php 
echo form_security_field('proj_doc_delete');
?>
	<input type="hidden" name="file_id" value="<?php 
echo $f_file_id;
?>
" />
	<input type="hidden" name="title" value="<?php 
echo $v_title;
?>
" />
	<input type="submit" class="button" value="<?php 
echo lang_get('file_delete_button');
?>
" />
	</form>
</div>

get_capability_row(lang_get('delete_own_bugnotes'), 'bugnote_user_delete_threshold');
get_capability_row(lang_get('view_private_notes'), 'private_bugnote_threshold');
get_capability_row(lang_get('change_view_state_own_bugnotes'), 'bugnote_user_change_view_state_threshold');
get_section_end();
# Others
get_section_begin_mcwt(lang_get('others'));
get_capability_row(lang_get('view') . ' ' . lang_get('changelog_link'), 'view_changelog_threshold');
get_capability_row(lang_get('view') . ' ' . lang_get('assigned_to'), 'view_handler_threshold');
get_capability_row(lang_get('view') . ' ' . lang_get('bug_history'), 'view_history_threshold');
get_capability_row(lang_get('send_reminders'), 'bug_reminder_threshold');
get_section_end();
if ($t_show_submit) {
    echo "<input type=\"submit\" class=\"button\" value=\"" . lang_get('change_configuration') . "\" />\n";
}
echo "</form>\n";
if ($t_show_submit && 0 < count($t_overrides)) {
    echo "<div class=\"right\"><form name=\"threshold_config_action\" method=\"post\" action=\"manage_config_revert.php\">\n";
    echo form_security_field('manage_config_revert');
    echo "<input name=\"revert\" type=\"hidden\" value=\"" . implode(',', $t_overrides) . "\"></input>";
    echo "<input name=\"project\" type=\"hidden\" value=\"{$t_project_id}\"></input>";
    echo "<input name=\"return\" type=\"hidden\" value=\"" . form_action_self() . "\"></input>";
    echo "<input type=\"submit\" class=\"button\" value=\"";
    if (ALL_PROJECTS == $t_project_id) {
        echo lang_get('revert_to_system');
    } else {
        echo lang_get('revert_to_all_project');
    }
    echo "\" />\n";
    echo "</form></div>\n";
}
html_page_bottom();

    echo lang_get('copy_columns_from');
    ?>
" /><?php 
}
?>
			<input type="submit" name="copy_to" class="button" value="<?php 
echo lang_get('copy_columns_to');
?>
" />
		</fieldset>
	</form>
</div>

<?php 
if ($t_account_page) {
    ?>
<div class="form-container">
	<form method="post" action="manage_config_columns_reset.php">
		<fieldset>
			<?php 
    echo form_security_field('manage_config_columns_reset');
    ?>
			<span class="submit-button"><input type="submit" class="button" value="<?php 
    echo lang_get('reset_columns_configuration');
    ?>
" /></span>
		</fieldset>
	</form>
</div>
<?php 
}

    ?>
		</td>
	</tr>

<?php 
    if ($t_can_sponsor) {
        ?>
	<tr class="row-1">
		<th class="category" width="15%"><?php 
        echo lang_get('sponsor_issue');
        ?>
</th>
		<td>
			<form method="post" action="bug_set_sponsorship.php">
				<?php 
        echo form_security_field('bug_set_sponsorship');
        ?>
				<?php 
        echo sponsorship_get_currency();
        ?>
				<input type="hidden" name="bug_id" value="<?php 
        echo $f_bug_id;
        ?>
" size="4" />
				<input type="text" name="amount" value="<?php 
        echo config_get('minimum_sponsorship_amount');
        ?>
" size="4" />
				<input type="submit" class="button" name="sponsor" value="<?php 
        echo lang_get('sponsor_verb');
        ?>

/**
 * Edit Printing preferences
 * @param int $p_user_id user id
 * @param bool $p_error_if_protected error if account protected
 * @param string $p_redirect_url redirect url
 */
function edit_printing_prefs($p_user_id = null, $p_error_if_protected = true, $p_redirect_url = '')
{
    if (null === $p_user_id) {
        $p_user_id = auth_get_current_user_id();
    }
    $c_user_id = db_prepare_int($p_user_id);
    # protected account check
    if ($p_error_if_protected) {
        user_ensure_unprotected($p_user_id);
    }
    $t_user_print_pref_table = db_get_table('user_print_pref');
    if (is_blank($p_redirect_url)) {
        $p_redirect_url = 'print_all_bug_page.php';
    }
    # get the fields list
    $t_field_name_arr = get_field_names();
    $field_name_count = count($t_field_name_arr);
    # Grab the data
    $query = "SELECT print_pref\n\t\t\tFROM {$t_user_print_pref_table}\n\t\t\tWHERE user_id=" . db_param();
    $result = db_query_bound($query, array($c_user_id));
    ## OOPS, No entry in the database yet.  Lets make one
    if (0 == db_num_rows($result)) {
        # create a default array, same size than $t_field_name
        for ($i = 0; $i < $field_name_count; $i++) {
            $t_default_arr[$i] = 1;
        }
        $t_default = implode('', $t_default_arr);
        # all fields are added by default
        $query = "INSERT\n\t\t\t\tINTO {$t_user_print_pref_table}\n\t\t\t\t(user_id, print_pref)\n\t\t\t\tVALUES\n\t\t\t\t(" . db_param() . "," . db_param() . ")";
        $result = db_query_bound($query, array($c_user_id, $t_default));
        # Rerun select query
        $query = "SELECT print_pref\n\t\t\t\tFROM {$t_user_print_pref_table}\n\t\t\t\tWHERE user_id=" . db_param();
        $result = db_query_bound($query, array($c_user_id));
    }
    # putting the query result into an array with the same size as $t_fields_arr
    $row = db_fetch_array($result);
    $t_prefs = $row['print_pref'];
    # Account Preferences Form BEGIN
    $t_index_count = 0;
    ?>
<br />
<div>
<form method="post" action="print_all_bug_options_update.php">
<?php 
    echo form_security_field('print_all_bug_options_update');
    ?>
<input type="hidden" name="user_id" value="<?php 
    echo $p_user_id;
    ?>
" />
<input type="hidden" name="redirect_url" value="<?php 
    echo string_attribute($p_redirect_url);
    ?>
" />
<table class="width75" cellspacing="1">
<tr>
	<td class="form-title">
		<?php 
    echo lang_get('printing_preferences_title');
    ?>
	</td>
	<td class="right">
	</td>
</tr>


<?php 
    # display the checkboxes
    for ($i = 0; $i < $field_name_count; $i++) {
        echo '<tr>';
        ?>

	<th class="category">
		<?php 
        echo lang_get($t_field_name_arr[$i]);
        ?>
	</th>
	<td>
		<input type="checkbox" name="<?php 
        echo 'print_' . $t_field_name_arr[$i];
        ?>
"
		<?php 
        if (isset($t_prefs[$i]) && $t_prefs[$i] == 1) {
            echo 'checked="checked"';
        }
        ?>
 />
	</td>
</tr>

<?php 
    }
    ?>
//.........这里部分代码省略.........

</a>
		<?php 
    }
    ?>
		</div>
	</td>
</tr>
<form action="<?php 
    echo plugin_page('config_edit.php');
    ?>
" 
				method="post" id="config_form" enctype="multipart/form-data">
<input type="hidden" id="deleteField" name="deleteField" value="">
<input type="hidden" id="changeUnit" name="changeUnit" value="">
<?php 
    echo form_security_field('plugin_format_config_edit');
    if (plugin_is_loaded('agileMantisExpert')) {
        ?>
<tr <?php 
        echo helper_alternate_class();
        ?>
>
	<td><?php 
        echo plugin_lang_get('manage_settings_upload_license');
        ?>
</td>
	<td><input type="file" name="license" size="50" /></td>
</tr>
<?php 
    }
    ?>

 */
/**
 * MantisBT Core API's
 */
require_once 'core.php';
auth_reauthenticate();
access_ensure_global_level(config_get('manage_user_threshold'));
$t_ldap = LDAP == config_get('login_method');
html_page_top();
print_manage_menu('manage_user_create_page.php');
?>
<br />
<div align="center">
<form method="post" action="manage_user_create.php">
<?php 
echo form_security_field('manage_user_create');
?>
<table class="width50" cellspacing="1">
<tr>
	<td class="form-title" colspan="2">
		<?php 
echo lang_get('create_new_account_title');
?>
	</td>
</tr>
<tr <?php 
echo helper_alternate_class();
?>
>
	<td class="category" width="25%">
		<?php 

global $g_plugin_cache;
$t_plugins_installed = array();
$t_plugins_available = array();
foreach ($t_plugins as $t_basename => $t_plugin) {
    if (isset($g_plugin_cache[$t_basename])) {
        $t_plugins_installed[$t_basename] = $t_plugin;
    } else {
        $t_plugins_available[$t_basename] = $t_plugin;
    }
}
if (0 < count($t_plugins_installed)) {
    ?>
<br />
<form action="manage_plugin_update.php" method="post">
<?php 
    echo form_security_field('manage_plugin_update');
    ?>
<table class="width100" cellspacing="1">

<!-- Title -->
<tr>
	<td class="form-title" colspan="7">
		<?php 
    echo lang_get('plugins_installed');
    ?>

	</td>
</tr>

<!-- Info -->
<tr class="row-category">

<?php 
# Only display the edit form if user is authorized to change configuration
if ($t_read_write_access) {
    ?>

<!-- Config Set Form -->

<?php 
    if (config_can_delete($t_edit_option)) {
        ?>
<div id="config-edit-div" class="form-container">
<form id="config_set_form" method="post" action="adm_config_set.php">
	<fieldset>
		<?php 
        echo form_security_field('adm_config_set');
        ?>

		<!-- Title -->
		<legend><span>
			<?php 
        echo lang_get('set_configuration_option');
        ?>
		</span></legend>

		<!-- Username -->
		<div class="field-container">
			<label for="config-user-id"><span><?php 
        echo lang_get('username');
        ?>
</span></label>