PHP my_addslashes函数代码示例

function admin_plugin_externalcontent_run(&$bBlog)
{
    // Determine what our admin is attempting to do
    if (isset($_GET['action'])) {
        $action = $_GET['action'];
    } elseif (isset($_POST['action'])) {
        $action = $_POST['action'];
    } else {
        $action = '';
    }
    switch ($action) {
        case "New":
            // add new provider
            $bBlog->query("insert into " . T_EXT_CONTENT . "\n                set nicename='" . my_addslashes($_POST['nicename']) . "',\n                url='" . my_addslashes($_POST['url']) . "'");
            break;
        case "Delete":
            // delete provider
            $bBlog->query("delete from " . T_EXT_CONTENT . " where id=" . $_POST['providerid']);
            break;
        case "Save":
            // update an existing provider
            if (isset($_POST['enabled'])) {
                $enabled = 'true';
            } else {
                $enabled = 'false';
            }
            $bBlog->query("update " . T_EXT_CONTENT . "\n                set nicename='" . my_addslashes($_POST['nicename']) . "',\n                url='" . my_addslashes($_POST['url']) . "',\n                enabled='" . $enabled . "'\n                where id=" . $_POST['providerid']);
            break;
        default:
            // show form
            break;
    }
    $bBlog->smartyObj->assign('eproviders', $bBlog->get_results("select * from " . T_EXT_CONTENT . " order by nicename"));
}

/**
 * Reads all values from the Request Object either adding slashes or 
 * Removing them based on preference.
 *
 * @param string $buffer the text to remove slashes from.
 *
 * @return string $buffer the converted string.
 */
function parse_incoming($addslashes = false)
{
    global $_REQUEST;
    if ($addslashes) {
        return my_addslashes($_REQUEST);
    } else {
        return my_stripslashes($_REQUEST);
    }
}

 /**
  * Process a trackback someone sent to us
  * 
  * @param string $ip IP Address of the pinger
  * @param array $ext_vars The trackback data, in the format:
  * +================================================+
  * | key       |   value                            |
  * +-----------+------------------------------------+
  * | url*      | URL of the pinging site            |
  * +-----------+------------------------------------+
  * | title     | Title of the referring article     |
  * +-----------+------------------------------------+
  * | excerpt   | Excerpt from the referring article |
  * +-----------+------------------------------------+
  * | blog_name | Name of the referring blog         |
  * +===========+====================================+
  * @param int $commentid If given, the ID of a comment in a blog
  */
 function receiveTrackback($ip, $ext_vars, $commentid = null)
 {
     $this->_ip = $ip;
     $this->_tbdata = $ext_vars;
     $allow = $this->allowTrackback();
     if (is_array($allow)) {
         foreach ($allow['message'] as $msg) {
             $err .= ' ' . $msg;
         }
         $this->userResponse(1, $msg);
     } else {
         $replyto = is_null($commentid) ? $commentid : 0;
         /*
          * According to the spec, only URL is required, all else is optional
          */
         $vars['posterwebsite'] = my_addslashes($this->_tbdata['url']);
         /**
          * Policy:
          *   In the interests of spam-blocking, the only hypertext we allow is the
          *   URL of the poster. This is the only deviance from comment handling
          */
         $vars['title'] = isset($this->_tbdata['title']) ? my_addslashes(StringHandling::removeTags($this->_tbdata['title'])) : '';
         $vars['commenttext'] = isset($this->_tbdata['excerpt']) ? my_addslashes(StringHandling::removeTags($this->_tbdata['excerpt'])) : '';
         $vars['postername'] = isset($this->_tbdata['blog_name']) ? my_addslashes(StringHandling::removeTags($this->_tbdata['blog_name'])) : '';
         $vars['posttime'] = time();
         $vars['ip'] = $this->_ip;
         $vars['postid'] = $this->_post->postid;
         if ($replyto > 0) {
             $vars['parentid'] = $replyto;
         }
         /*
          * Added check for moderation.
          * Follow the same rules as for comments
          */
         $vars['commenttext'] = StringHandling::removeTags(my_addslashes($vars['commenttext']));
         $vars['onhold'] = $this->needsModeration($vars['commenttext']) ? 1 : 0;
         $vars['type'] = 'trackback';
         //Save the trackback
         $id = $this->saveComment($vars);
         if ($id > 0) {
             // notify owner
             if (C_NOTIFY == true) {
                 $this->notify($vars['postername'], $this->_post->permalink, $vars['onhold'], $vars['commenttext']);
             }
             $this->updateCommentCount($this->_db, $this->_post->postid);
             $this->userResponse(0);
         } else {
             $this->userResponse(1, "Error adding trackback : " . mysql_error());
         }
     }
 }

function prep_new_post()
{
    $post->title = my_addslashes($_POST['title_text']);
    $post->body = my_addslashes($_POST['body_text']);
    // there has to be abetter way that this but i'm tired.
    if (!isset($_POST['modifier'])) {
        $post->modifier = C_DEFAULT_MODIFIER;
    } else {
        $post->modifier = my_addslashes($_POST['modifier']);
    }
    if (!isset($_POST['pubstatus'])) {
        $post->status = C_DEFAULT_STATUS;
    } else {
        $post->status = my_addslashes($_POST['pubstatus']);
    }
    if (isset($_POST['sections'])) {
        $_tmp_sections = (array) $_POST['sections'];
    } else {
        $_tmp_sections = null;
    }
    $post->sections = array();
    $post->providing_sections = TRUE;
    // this is so that bBlog knows to delete sections if there are none.
    if (!is_null($_tmp_sections)) {
        foreach ($_tmp_sections as $_tmp_section) {
            if (is_numeric($_tmp_section)) {
                $post->sections[] = $_tmp_section;
            }
        }
    }
    if (isset($_POST['hidefromhome']) && $_POST['hidefromhome'] == 'hide') {
        $hidefromhome = 'hide';
    } else {
        $hidefromhome = 'donthide';
    }
    $post->hidefromhome = $hidefromhome;
    $post->allowcomments = $_POST['commentoptions'];
    if (isset($_POST['disallowcommentsdays'])) {
        $disdays = (int) $_POST['disallowcommentsdays'];
    } else {
        $disdays = 0;
    }
    $time = (int) time();
    $autodisabledate = $time + $disdays * 3600 * 24;
    $post->autodisabledate = $autodisabledate;
    return $post;
}

 /**
  * Process a trackback someone sent to us
  * 
  * @param string $ip IP Address of the pinger
  * @param array $ext_vars The trackback data, in the format:
  * +================================================+
  * | key       |   value                            |
  * +-----------+------------------------------------+
  * | url*      | URL of the pinging site            |
  * +-----------+------------------------------------+
  * | title     | Title of the referring article     |
  * +-----------+------------------------------------+
  * | excerpt   | Excerpt from the referring article |
  * +-----------+------------------------------------+
  * | blog_name | Name of the referring blog         |
  * +===========+====================================+
  * @param int $commentid If given, the ID of a comment in a blog
  */
 function receiveTrackback($ip, $ext_vars, $commentid = null)
 {
     $this->_ip = $ip;
     $this->_tbdata = $ext_vars;
     $allow = $this->allowTrackback();
     if (is_array($allow)) {
         foreach ($allow['message'] as $msg) {
             $err .= ' ' . $msg;
         }
         $this->userResponse(1, $msg);
     } else {
         $replyto = is_null($commentid) ? $commentid : 0;
         /*
          * According to the spec, only URL is required, all else is optional
          */
         $vars['posterwebsite'] = my_addslashes($this->_tbdata['url']);
         $vars['title'] = isset($this->_tbdata['title']) ? my_addslashes($this->_tbdata['title']) : '';
         $vars['commenttext'] = isset($this->_tbdata['excerpt']) ? my_addslashes($this->_tbdata['excerpt']) : '';
         $vars['postername'] = isset($this->_tbdata['blog_name']) ? my_addslashes($this->_tbdata['blog_name']) : '';
         $vars['posttime'] = time();
         $vars['ip'] = $this->_ip;
         $vars['postid'] = $this->_post->postid;
         if ($replyto > 0) {
             $vars['parentid'] = $replyto;
         }
         /*
          * Added check for moderation.
          * Follow the same rules as for comments
          */
         $vars['commenttext'] = Comments::processCommentText(my_addslashes($vars['commenttext']));
         $vars['onhold'] = Comments::needsModeration($vars['commenttext']) ? 1 : 0;
         $vars['type'] = 'trackback';
         //Save the trackback
         $id = Comments::saveComment(&$db, $vars);
         if ($id > 0) {
             // notify owner
             if (C_NOTIFY == true) {
                 Comments::notify($vars['postername'], $this->_post->permalink, $vars['onhold'], $vars['commenttext']);
             }
             Comments::updateCommentCount($this->_db, $this->_post->postid);
             $this->userResponse(0);
         } else {
             $this->userResponse(1, "Error adding trackback : " . mysql_error());
         }
     }
 }

function saveconfig()
{
    global $db;
    $default_point = intval($_POST['default_point']);
    $zs_points = intval($_POST['zs_points']);
    $getpoints = my_addslashes($_POST['getpoints']);
    $array = array('default_point' => $default_point, 'getpoints' => $getpoints, 'zs_points' => $zs_points);
    $db->update('ve123_zz_config', $array, "config_id='1'");
    $config = $db->get_one('select * from ve123_zz_config limit 1');
    $str .= '<?php' . chr(13) . chr(10);
    $str .= "\$zz_config['default_point']=" . $default_point . ';' . chr(13) . chr(10);
    $str .= "\$zz_config['zs_points']=" . $zs_points . ';' . chr(13) . chr(10);
    $str .= "\$zz_config['getpoints']=\"" . $getpoints . "\";" . chr(13) . chr(10);
    $str .= '?>';
    $fp = @fopen('../cache/zz_config.php', 'w') or die('写方式打开文件失败，请检查程序目录是否为可写');
    @fputs($fp, $str) or die('文件写入失败,请检查程序目录是否为可写');
    @fclose($fp);
    jsalert('修改成功!');
}

function saveconfig()
{
    global $db;
    $default_point = intval($_POST["default_point"]);
    $zs_points = intval($_POST["zs_points"]);
    $getpoints = my_addslashes($_POST["getpoints"]);
    $array = array('default_point' => $default_point, 'getpoints' => $getpoints, 'zs_points' => $zs_points);
    $db->update("ve123_tg_config", $array, "config_id='1'");
    $config = $db->get_one("select * from ve123_tg_config limit 1");
    $str .= "<?php" . chr(13) . chr(10);
    $str .= "\$tg_config['default_point']=" . $default_point . ";" . chr(13) . chr(10);
    $str .= "\$tg_config['zs_points']=" . $zs_points . ";" . chr(13) . chr(10);
    $str .= "\$tg_config['getpoints']=\"" . $getpoints . "\";" . chr(13) . chr(10);
    $str .= "?>";
    $fp = @fopen("../cache/tg_config.php", "w") or die("写方式打开文件失败，请检查程序目录是否为可写");
    //配置conn.php文件
    @fputs($fp, $str) or die("文件写入失败,请检查程序目录是否为可写");
    @fclose($fp);
    jsalert("修改成功!");
}

 function prepFields($vars, $replyto, $id)
 {
     $rval['postername'] = my_addslashes(htmlspecialchars($vars["name"]));
     if (empty($rval['postername'])) {
         $rval['postername'] = "Anonymous";
     }
     $rval['posteremail'] = my_addslashes(htmlspecialchars($vars["email"]));
     $rval['title'] = my_addslashes(htmlspecialchars($vars["title"]));
     $rval['posterwebsite'] = my_addslashes(StringHandling::transformLinks(htmlspecialchars($vars["website"])));
     $rval['commenttext'] = Comments::processCommentText(my_addslashes($vars["comment"]));
     $rval['pubemail'] = $vars["public_email"] == 1 ? 1 : 0;
     $rval['pubwebsite'] = $vars["public_website"] == 1 ? 1 : 0;
     $rval['posternotify'] = $vars["notify"] == 1 ? 1 : 0;
     $rval['posttime'] = time();
     $rval['ip'] = $_SERVER['REMOTE_ADDR'];
     $rval['onhold'] = Comments::needsModeration($rval['commenttext']) ? 1 : 0;
     $rval['postid'] = $id;
     if ($replyto > 0) {
         $rval['parentid'] = $replyto;
     }
     $rval['type'] = 'comment';
     return $rval;
 }

/**
 *
 *
 * @param unknown $bBlog (reference)
 */
function admin_plugin_sections_run(&$bBlog)
{
    // Again, the plugin API needs work.
    if (isset($_GET['sectdo'])) {
        $sectdo = $_GET['sectdo'];
    } elseif (isset($_POST['sectdo'])) {
        $sectdo = $_POST['sectdo'];
    } else {
        $sectdo = '';
    }
    switch ($sectdo) {
        case 'new':
            // sections are being editied
            $bBlog->query("insert into " . T_SECTIONS . "\n\t\t\tset nicename='" . my_addslashes($_POST['nicename']) . "',\n\t\t\tname='" . my_addslashes($_POST['urlname']) . "'");
            $insid = $bBlog->insert_id;
            $bBlog->get_sections();
            // update the section cache
            break;
        case "Delete":
            // delete section
            // have to remove all references to the section in the posts
            $sect_id = $bBlog->sect_by_name[$_POST['sname']];
            if ($sect_id > 0) {
                //
                $posts_in_section_q = $bBlog->make_post_query(array("sectionid" => $sect_id));
                $posts_in_section = $bBlog->get_posts($posts_in_section_q, TRUE);
                if ($posts_in_section) {
                    foreach ($posts_in_section as $post) {
                        unset($tmpr);
                        $tmpr = array();
                        $tmpsections = explode(":", $post->sections);
                        foreach ($tmpsections as $tmpsection) {
                            if ($tmpsection != $sect_id) {
                                $tmpr[] = $tmpsection;
                            }
                        }
                        $newsects = implode(":", $tmpr);
                        // update the posts to remove the section
                        $bBlog->query("update " . T_POSTS . " set sections='{$newsects}'\n                                \twhere postid='{$post->postid}'");
                    }
                    // end foreach ($post_in_section as $post)
                }
                // end if($posts_in_section)
                // delete the section
                //$bBlog->get_results("delete from ".T_SECTIONS." where sectionid='$sect_id'");
                $bBlog->query("delete from " . T_SECTIONS . " where sectionid='{$sect_id}'");
                //echo "delete from ".T_SECTIONS." where sectionid='$sect_id'";
                $bBlog->get_sections();
                //$bBlog->debugging=TRUE;
            }
            // else show error
        // else show error
        case "Save":
            $sect_id = $bBlog->sect_by_name[$_POST['sname']];
            if ($sect_id < 1) {
                break;
            }
            $bBlog->query("update " . T_SECTIONS . " set nicename='" . my_addslashes($_POST['nicename']) . "'\n                        where sectionid='{$sect_id}'");
            $bBlog->get_sections();
            // update section cache
            break;
        default:
            // show form
            break;
    }
    $bBlog->assign('esections', $bBlog->sections);
}

function saveform()
{
    global $db;
    $keywords = trim($_POST['keywords']);
    $title = trim($_POST['title']);
    $url = trim($_POST['url']);
    $description = trim($_POST['description']);
    $jscode = my_addslashes(trim($_POST['jscode']));
    $price = trim($_POST['price']);
    $pic = trim($_POST['pic']);
    $link_id = intval($_POST['link_id']);
    $do_action = $_POST['do_action'];
    if ($do_action == 'modify') {
        $array = array('keywords' => $keywords, 'title' => $title, 'url' => $url, 'description' => $description, 'jscode' => $jscode, 'price' => $price, 'pic' => $pic);
        $db->update('ve123_zz_open', $array, "link_id='{$link_id}'");
        jsalert('修改成功');
    } else {
        $array = array('keywords' => $keywords, 'title' => $title, 'url' => $url, 'description' => $description, 'jscode' => $jscode, 'price' => $price, 'pic' => $pic);
        $db->insert('ve123_zz_open', $array);
        jsalert('提交成功');
    }
}

            $file_htaccess = @fopen('.htaccess', 'w');
            if ($file_htaccess) {
                $saved = fputs($file_htaccess, $htaccess);
                fclose($file_htaccess);
            } else {
                $saved = false;
            }
        }
        if (false !== $saved) {
            $msg = $lang['L_HTACC_CREATED'];
            $tpl->assign_block_vars('CREATE_SUCCESS', array('HTACCESS' => nl2br(my_quotes($htaccess)), 'HTPASSWD' => nl2br(my_quotes($htpasswd))));
            @chmod($config['paths']['root'], 0755);
        } else {
            $tpl->assign_block_vars('CREATE_ERROR', array('HTACCESS' => nl2br(my_quotes($htaccess)), 'HTPASSWD' => nl2br(my_quotes($htpasswd))));
        }
    }
}
if (sizeof($error) > 0 || !isset($_POST['username'])) {
    $tpl->assign_vars(array('PASSWORDS_UNEQUAL' => my_addslashes($lang['L_PASSWORDS_UNEQUAL']), 'HTACC_CONFIRM_DELETE' => my_addslashes($lang['L_HTACC_CONFIRM_DELETE'])));
    $tpl->assign_block_vars('INPUT', array('USERNAME' => my_quotes($username), 'USERPASS1' => my_quotes($userpass1), 'USERPASS2' => my_quotes($userpass2), 'TYPE0_CHECKED' => $type == 0 ? ' checked="checked"' : '', 'TYPE1_CHECKED' => $type == 1 ? ' checked="checked"' : '', 'TYPE2_CHECKED' => $type == 2 ? ' checked="checked"' : '', 'TYPE3_CHECKED' => $type == 3 ? ' checked="checked"' : ''));
}
if (sizeof($error) > 0) {
    $msg = '<span class="error">' . implode('<br>', $error) . '</span>';
}
if ($msg > '') {
    $tpl->assign_block_vars('MSG', array('TEXT' => $msg));
}
$tpl->pparse('show');
echo MSDFooter();
ob_end_flush();
die;

function saveform()
{
    global $db, $config;
    $title = addslashes(HtmlReplace(trim($_POST['title'])));
    $content = my_addslashes(trim($_POST['content']));
    $filename = HtmlReplace(trim($_POST['filename']));
    $url = HtmlReplace(trim($_POST['url']));
    $sortid = intval($_POST['sortid']);
    $about_id = intval($_POST['about_id']);
    $do_action = HtmlReplace($_POST['do_action']);
    $is_show = $_POST['is_show'];
    ob_start();
    require 'temp/open.php';
    $str = ob_get_contents();
    ob_end_clean();
    $str = stripslashes($str);
    file_put_contents('../tg/html/' . $filename . '.html', $str);
    if ($do_action == 'modify') {
        $array = array('title' => $title, 'content' => $content, 'url' => $url, 'filename' => $filename, 'sortid' => $sortid, 'is_show' => $is_show);
        $db->update('ve123_tg_open', $array, "about_id='{$about_id}'");
        jsalert('修改成功');
    } else {
        $array = array('title' => $title, 'content' => $content, 'url' => $url, 'filename' => $filename, 'sortid' => $sortid, 'is_show' => $is_show);
        $db->insert('ve123_tg_open', $array);
        jsalert('提交成功');
    }
}

function admin_plugin_sections_run(&$bBlog)
{
    // Again, the plugin API needs work.
    if (isset($_GET['sectdo'])) {
        $sectdo = $_GET['sectdo'];
    } elseif (isset($_POST['sectdo'])) {
        $sectdo = $_POST['sectdo'];
    } else {
        $sectdo = '';
    }
    switch ($sectdo) {
        case 'new':
            // sections are being editied
            $nicename = StringHandling::removeMagicQuotes($_POST['nicename']);
            $urlname = StringHandling::removeMagicQuotes($_POST['urlname']);
            $bBlog->_adb->Execute("insert into " . T_SECTIONS . " set nicename=" . $bBlog->_adb->quote($nicename) . ", name=" . $bBlog->_adb->quote($urlname));
            $insid = $bBlog->_adb->insert_id();
            break;
        case "Delete":
            // delete section
            // have to remove all references to the section in the posts
            $sname = StringHandling::removeMagicQuotes($_POST['sname']);
            $sect_id = $bBlog->section_ids_by_name[$sname];
            if ($sect_id > 0) {
                $ph = $bBlog->_ph;
                $posts_in_section_q = $ph->make_post_query(array("sectionid" => $sect_id));
                $posts_in_section = $ph->get_posts($posts_in_section_q, TRUE);
                if ($posts_in_section) {
                    foreach ($posts_in_section as $post) {
                        unset($tmpr);
                        $tmpr = array();
                        $tmpsections = explode(":", $post->sections);
                        foreach ($tmpsections as $tmpsection) {
                            if ($tmpsection != $sect_id) {
                                $tmpr[] = $tmpsection;
                            }
                        }
                        $newsects = implode(":", $tmpr);
                        // update the posts to remove the section
                        $bBlog->_adb->Execute("update " . T_POSTS . " set sections='{$newsects}' where postid={$post->postid}");
                    }
                    // end foreach ($post_in_section as $post)
                }
                // end if($posts_in_section)
                // delete the section
                $bBlog->_adb->Execute("delete from " . T_SECTIONS . " where sectionid={$sect_id}");
            }
            // else show error
        // else show error
        case "Save":
            $sect_id = $bBlog->sect_by_name[$_POST['sname']];
            if ($sect_id < 1) {
                break;
            }
            $sql = "update " . T_SECTIONS . " set nicename='" . my_addslashes($_POST['nicename']) . "' where sectionid='{$sect_id}'";
            $bBlog->_adb->Execute($sql);
            break;
        default:
            // show form
            break;
    }
    $bBlog->get_sections();
    $bBlog->assign('esections', $bBlog->sections);
}

 function admin_logged_in()
 {
     $query = "\n        SELECT\n            `id`,\n            `nickname`,\n            `password`\n        FROM\n            `" . T_AUTHORS . "`\n        WHERE\n                (`nickname`='" . my_addslashes(@$_SESSION['nickname']) . "')\n            AND\n                (`password`='" . my_addslashes(@$_SESSION['password']) . "')\n        ";
     $result = $this->get_row($query);
     if (@$result->id > 0 && @$_SESSION['checksum'] == md5($result->nickname . $result->password . BBLOGID)) {
         return $result->id;
     } else {
         return $this->admin_logged_ip();
     }
 }

if (isset($_POST['url']) && is_numeric($tbpost)) {
    // incoming trackback ping.
    // we checked that :
    // a ) url is suplied by POST
    // b ) that the tbpost, suplied by GET, is valid.
    // GET varibles from the trackback url:
    if (is_numeric($tbcid) && $tbcid > 0) {
        $replyto = $tbcid;
    } else {
        $replyto = 0;
    }
    // POST varibles - the trackback protocol no longer supports GET.
    $tb_url = my_addslashes($_POST['url']);
    $title = my_addslashes($_POST['title']);
    $excerpt = my_addslashes($_POST['excerpt']);
    $blog_name = my_addslashes($_POST['blog_name']);
    // according to MT, only url is _required_. So we'll set some useful defaults.
    // if we got this far, we can assume that this file is not included
    // as part of bBlog but is being called seperatly.
    // so we include the config file and therefore have access to the
    // bBlog object.
    $now = time();
    $remaddr = $_SERVER['REMOTE_ADDR'];
    $q = "insert into " . T_COMMENTS . "\n\t\t\tset \n\t\t\tpostid='{$tbpost}',\n\t\t\tparentid='{$replyto}',\n\t\t\tposttime='{$now}',\n\t\t\tpostername='{$blog_name}',\n\t\t\tposteremail='',\n\t\t\tposterwebsite='{$tb_url}',\n\t\t\tposternotify='0',\n\t\t\tpubemail='0',\n\t\t\tpubwebsite='1',\n\t\t\tip='{$remaddr}',\n\t\t\ttitle='{$title}',\n\t\t\tcommenttext='{$excerpt}',\n\t\t\ttype='trackback'";
    $bBlog->_adb->Execute($q);
    $insid = $bBlog->insert_id;
    if ($insid < 1) {
        trackback_response(1, "Error adding trackback : " . mysql_error());
    } else {
        // notify owner
        include_once BBLOGROOT . 'inc/mail.php';