PHP sanitize_and_format函数代码示例

function gen_blogposts_cache()
{
    global $dbtable_prefix;
    $dirname = dirname(__FILE__);
    $temp = array();
    if ($dirname[0] == '/') {
        // unixes here
        $temp = explode('/', $dirname);
    } else {
        // windows here
        $temp = explode('\\', $dirname);
    }
    $interval = (int) $temp[count($temp) - 1];
    // that's how often we're executed ;)
    $short_blog_chars = 400;
    $config = get_site_option(array('bbcode_blogs', 'use_smilies'), 'core_blog');
    require_once _BASEPATH_ . '/includes/classes/fileop.class.php';
    $fileop = new fileop();
    $post_ids = array();
    $query = "SELECT a.`post_id`,UNIX_TIMESTAMP(a.`date_posted`) as `date_posted`,a.`fk_user_id`,a.`_user` as `user`,a.`fk_blog_id`,a.`title`,a.`post_content`,b.`_photo` as `photo`,c.`blog_name` FROM `{$dbtable_prefix}blog_posts` a,`{$dbtable_prefix}user_profiles` b,`{$dbtable_prefix}user_blogs` c WHERE a.`fk_user_id`=b.`fk_user_id` AND a.`fk_blog_id`=c.`blog_id` AND a.`status`=" . STAT_APPROVED . " AND a.`last_changed`>=DATE_SUB('" . gmdate('YmdHis') . "',INTERVAL " . ($interval + 2) . " MINUTE)";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    while ($blog = mysql_fetch_assoc($res)) {
        $post_ids[] = $blog['post_id'];
        $blog['title'] = remove_banned_words(sanitize_and_format($blog['title'], TYPE_STRING, $GLOBALS['__field2format'][TEXT_DB2EDIT]));
        $blog['post_content'] = remove_banned_words($blog['post_content']);
        $post_content_short = substr($blog['post_content'], 0, strrpos(substr($blog['post_content'], 0, $short_blog_chars), ' '));
        $post_content_short = sanitize_and_format($post_content_short, TYPE_STRING, $GLOBALS['__field2format'][TEXT_DB2DISPLAY]);
        $blog['post_content'] = sanitize_and_format($blog['post_content'], TYPE_STRING, $GLOBALS['__field2format'][TEXT_DB2DISPLAY]);
        if (!empty($config['bbcode_blogs'])) {
            $blog['post_content'] = bbcode2html($blog['post_content']);
            $post_content_short = bbcode2html($post_content_short);
        }
        if (!empty($config['use_smilies'])) {
            $blog['post_content'] = text2smilies($blog['post_content']);
            $post_content_short = text2smilies($post_content_short);
        }
        if (empty($blog['photo']) || !is_file(_PHOTOPATH_ . '/t1/' . $blog['photo'])) {
            $blog['photo'] = 'no_photo.gif';
        } else {
            $blog['has_photo'] = true;
        }
        if (empty($blog['fk_user_id'])) {
            unset($blog['fk_user_id']);
        }
        $towrite = '<?php $post=' . var_export($blog, true) . ';';
        $fileop->file_put_contents(_CACHEPATH_ . '/blogs/posts/' . $blog['post_id'][0] . '/' . $blog['post_id'] . '.inc.php', $towrite);
        $blog['post_content'] = $post_content_short;
        $towrite = '<?php $post=' . var_export($blog, true) . ';';
        $fileop->file_put_contents(_CACHEPATH_ . '/blogs/posts/' . $blog['post_id'][0] . '/' . $blog['post_id'] . '_short.inc.php', $towrite);
    }
    return true;
}

 function __construct($error, $config = array())
 {
     $this->_init();
     $this->config = array_merge($this->config, $config);
     $error = array_merge(array('module_name' => '', 'text' => ''), $error);
     if ($this->config['log_mode'] == _ERRORLOG_DB_) {
         $dbtable_prefix = $GLOBALS['dbtable_prefix'];
         $query = "INSERT IGNORE INTO `{$dbtable_prefix}error_log` SET `module`='" . $error['module_name'] . "',`error`='" . sanitize_and_format($error['text'], TYPE_STRING, FORMAT_ADDSLASH) . "'";
         @mysql_query($query);
     } elseif ($this->config['log_mode'] == _ERRORLOG_FILE_) {
         error_log("\n-------\n" . date('Y-m-d H:i:s', time()) . ': ' . $error['module_name'] . ': ' . $error['text'] . "\n\n", 3, $this->config['file_log']);
     } elseif ($this->config['log_mode'] == _ERRORLOG_STDOUT_) {
         echo $error['module_name'] . ': ' . $error['text'];
     }
 }

function upcoming_eot()
{
    global $dbtable_prefix;
    $config['days_before'] = 4;
    $query_strlen = 20000;
    $now = gmdate('Ymd');
    $query = "SELECT b.`email`,c.`_user` as `user` FROM `{$dbtable_prefix}payments` a,`" . USER_ACCOUNTS_TABLE . "` b,`{$dbtable_prefix}user_profiles` c WHERE a.`fk_user_id`=b.`" . USER_ACCOUNT_ID . "` AND a.`fk_user_id`=c.`fk_user_id` AND a.`paid_until`='{$now}'-INTERVAL " . $config['days_before'] . " DAY AND a.`is_active`=1 AND a.`is_recurring`=0";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    $alerts = array();
    while ($rsrow = mysql_fetch_assoc($res)) {
        $alerts[$rsrow['email']] = $rsrow;
    }
    if (!empty($alerts)) {
        $skin = get_default_skin_dir();
        $tpl = new phemplate(_BASEPATH_ . '/skins_site/' . $skin . '/emails/', 'remove_nonjs');
        $tpl->set_file('temp', 'subscr_expire_alert.html');
        $tpl->set_var('tplvars', $tplvars);
        $subject = sprintf($GLOBALS['_lang'][218], _SITENAME_);
        $subject = sanitize_and_format($subject, TYPE_STRING, $GLOBALS['__field2format'][FIELD_TEXTFIELD]);
        $insert = "INSERT INTO `{$dbtable_prefix}queue_email` (`to`,`subject`,`message_body`) VALUES ";
        $iquery = $insert;
        foreach ($alerts as $email => $v) {
            $tpl->set_var('output', $v);
            $message_body = $tpl->process('', 'temp', TPL_LOOP | TPL_OPTLOOP | TPL_OPTIONAL | TPL_FINISH);
            $message_body = sanitize_and_format($message_body, TYPE_STRING, $GLOBALS['__field2format'][FIELD_TEXTAREA]);
            if (strlen($iquery) > $query_strlen) {
                $iquery = substr($iquery, 0, -1);
                if (!($res = @mysql_query($iquery))) {
                    trigger_error(mysql_error(), E_USER_ERROR);
                }
                $iquery = $insert;
            }
            $iquery .= "('{$email}','{$subject}','{$message_body}'),";
        }
        if ($iquery != $insert) {
            $iquery = substr($iquery, 0, -1);
            if (!($res = @mysql_query($iquery))) {
                trigger_error(mysql_error(), E_USER_ERROR);
            }
        }
    }
    return true;
}

function get_osignal_feed()
{
    global $dbtable_prefix;
    require_once _BASEPATH_ . '/includes/classes/feed_reader.class.php';
    $module_code = 'osignal_feed';
    $config = get_site_option(array('enabled', 'feed_url'), $module_code);
    if ($config['enabled']) {
        $fr = new feedReader();
        $ok = $fr->getFeed($config['feed_url']);
        if ($ok) {
            $query = "REPLACE INTO `{$dbtable_prefix}feed_cache` SET `module_code`='{$module_code}',`feed_xml`='" . sanitize_and_format($fr->getRawXML(), TYPE_STRING, FORMAT_ADDSLASH) . "',`update_time`='" . gmdate('YmdHis') . "'";
            if (!($res = @mysql_query($query))) {
                trigger_error(mysql_error(), E_USER_ERROR);
            }
        } else {
            echo 'error retrieving the feed--> ';
        }
    }
    return true;
}

 function admin_processor()
 {
     $error = false;
     $my_input = array();
     global $input, $__field2format, $dbtable_prefix, $default_skin_code;
     if (!$this->is_search) {
         $my_input['use_bbcode'] = sanitize_and_format_gpc($_POST, 'use_bbcode', TYPE_INT, 0, 0);
         $my_input['use_smilies'] = sanitize_and_format_gpc($_POST, 'use_smilies', TYPE_INT, 0, 0);
         $my_input['changes_status'] = sanitize_and_format_gpc($_POST, 'changes_status', TYPE_INT, 0, 0);
         $my_input['ta_len'] = sanitize_and_format_gpc($_POST, 'ta_len', TYPE_INT, 0, 0);
         $input['custom_config'] = sanitize_and_format(serialize($my_input), TYPE_STRING, FORMAT_ADDSLASH);
     } else {
         return array();
     }
     return $error;
 }

            default:
                break;
        }
    }
    check_login_member($input['acclevel_code']);
    if (!$error) {
        $query = "SELECT {$select} FROM {$from} WHERE {$where} ORDER BY {$orderby}";
        //print $query;
        //die;
        if (!($res = @mysql_query($query))) {
            trigger_error(mysql_error(), E_USER_ERROR);
        }
        for ($i = 0; $i < mysql_num_rows($res); ++$i) {
            $post_ids[] = mysql_result($res, $i, 0);
        }
        $serialized_input = sanitize_and_format(serialize($input), TYPE_STRING, $__field2format[FIELD_TEXTFIELD]);
        $output['search_md5'] = md5($serialized_input);
        $query = "INSERT IGNORE INTO `{$dbtable_prefix}site_searches` SET `search_md5`='" . $output['search_md5'] . "',`search_type`=" . SEARCH_BLOG . ",`search`='{$serialized_input}',`results`='" . join(',', $post_ids) . "'";
        if (!empty($_SESSION[_LICENSE_KEY_]['user']['user_id'])) {
            $query .= ",`fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
        }
        if (!($res = @mysql_query($query))) {
            trigger_error(mysql_error(), E_USER_ERROR);
        }
    }
}
$output['totalrows'] = count($post_ids);
// get the results from user cache for the found post_ids
$loop = array();
if (!empty($output['totalrows'])) {
    if ($o >= $output['totalrows']) {

 function admin_processor()
 {
     $error = false;
     global $input, $__field2format, $dbtable_prefix, $default_skin_code;
     $my_input = array();
     if (!$this->is_search) {
         $age_start = sanitize_and_format_gpc($_POST, 'age_start', TYPE_INT, 0, 0);
         $age_end = sanitize_and_format_gpc($_POST, 'age_end', TYPE_INT, 0, 0);
         if ($age_start > $age_end) {
             $temp = $age_end;
             $age_end = $age_start;
             $age_start = $temp;
         }
         if ($age_start == $age_end) {
             $error = true;
             $GLOBALS['topass']['message']['type'] = MESSAGE_ERROR;
             $GLOBALS['topass']['message']['text'] = 'The start and end ages must not be equal';
         }
         if (!$error) {
             $my_input['accepted_values'] = array('min' => $age_start, 'max' => $age_end);
             if (!empty($input['searchable']) && !empty($input['search_type'])) {
                 $search_field = new $input['search_type'](array(), true);
                 $temp = $search_field->admin_processor();
                 if (is_array($temp) && !empty($temp)) {
                     $my_input = array_merge($my_input, $temp);
                 }
             }
             $input['custom_config'] = sanitize_and_format(serialize($my_input), TYPE_STRING, FORMAT_ADDSLASH);
         }
     } else {
         return array();
     }
     return $error;
 }

require_once '../includes/admin_functions.inc.php';
require_once '../includes/tables/loc_countries.inc.php';
allow_dept(DEPT_ADMIN);
$tpl = new phemplate('skin/', 'remove_nonjs');
$countries = $countries_default['defaults'];
if (isset($_SESSION['topass']['input'])) {
    $countries = $_SESSION['topass']['input'];
} elseif (!empty($_GET['country_id'])) {
    $country_id = (int) $_GET['country_id'];
    $query = "SELECT `country_id`,`country`,`iso3166`,`prefered_input` FROM `{$dbtable_prefix}loc_countries` WHERE `country_id`={$country_id}";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    if (mysql_num_rows($res)) {
        $countries = mysql_fetch_assoc($res);
        $countries['country'] = sanitize_and_format($countries['country'], TYPE_STRING, $__field2format[TEXT_DB2EDIT]);
    }
}
$countries['prefered_input'] = vector2options($country_prefered_input, $countries['prefered_input']);
$tpl->set_file('content', 'loc_countries_addedit.html');
$tpl->set_var('countries', $countries);
if (isset($_GET['o'])) {
    $tpl->set_var('o', $_GET['o']);
}
if (isset($_GET['r'])) {
    $tpl->set_var('r', $_GET['r']);
}
$tpl->process('content', 'content');
$tplvars['title'] = 'Location Management: Countries';
$tplvars['page'] = 'loc_countries_addedit';
include 'frame.php';

     trigger_error(mysql_error(), E_USER_ERROR);
 }
 $totalrows = mysql_result($res, 0, 0);
 $loop = array();
 if (!empty($totalrows)) {
     $config = get_site_option(array('datetime_format', 'time_offset'), 'def_user_prefs');
     $query = "SELECT `mail_id`,`is_read`,`fk_user_id_other`,`_user_other`,`subject`,UNIX_TIMESTAMP(`date_sent`) as `date_sent`,`message_type` FROM {$from} WHERE {$where} ORDER BY `date_sent` DESC LIMIT {$o},{$r}";
     if (!($res = @mysql_query($query))) {
         trigger_error(mysql_error(), E_USER_ERROR);
     }
     $i = 0;
     while ($rsrow = mysql_fetch_assoc($res)) {
         if ($rsrow['message_type'] == MESS_SYSTEM) {
             $rsrow['_user_other'] = 'SYSTEM';
         } else {
             $rsrow['_user_other'] = sanitize_and_format($rsrow['_user_other'], TYPE_STRING, $__field2format[TEXT_DB2DISPLAY]);
         }
         // no need to sanitize
         //			$rsrow['subject']=sanitize_and_format($rsrow['subject'],TYPE_STRING,$__field2format[TEXT_DB2DISPLAY]);
         $rsrow['date_sent'] = strftime($config['datetime_format'], $rsrow['date_sent'] + $config['time_offset']);
         if ($rsrow['is_read']) {
             $rsrow['is_read'] = 'mail_read';
         } else {
             $rsrow['is_read'] = 'mail_notread';
         }
         if ($rsrow['message_type'] == MESS_SYSTEM || empty($rsrow['fk_user_id_other'])) {
             unset($rsrow['fk_user_id_other']);
         }
         $loop[] = $rsrow;
         ++$i;
     }

    }
    $output['ips'] = join(', ', $output['ips']);
}
$output['pic_width'] = get_site_option('pic_width', 'core_photo');
if (empty($output['search_md5'])) {
    unset($output['search_md5']);
}
if (isset($_GET['o'])) {
    $output['o'] = $_GET['o'];
}
if (isset($_GET['r'])) {
    $output['r'] = $_GET['r'];
}
$output['return2me'] = 'profile.php';
if (!empty($_SERVER['QUERY_STRING'])) {
    $output['return2me'] .= '?' . $_SERVER['QUERY_STRING'];
}
$output['return2me'] = rawurlencode($output['return2me']);
if (isset($_GET['return'])) {
    $output['return2'] = sanitize_and_format($_GET['return'], TYPE_STRING, $__field2format[FIELD_TEXTFIELD]);
}
$tpl->set_file('content', 'profile.html');
$tpl->set_loop('categs', $categs);
$tpl->set_var('output', $output);
$tpl->set_var('account', $account);
$tpl->process('content', 'content', TPL_MULTILOOP | TPL_OPTIONAL);
$tpl->drop_loop('categs');
$tplvars['title'] = sprintf('%1$s Member Profile', $output['_user']);
$tplvars['css'] = 'profile.css';
$tplvars['page'] = 'profile';
include 'frame.php';

while ($rsrow = mysql_fetch_assoc($res)) {
    $memberships[$i] = $rsrow;
    if ($memberships[$i]['is_custom']) {
        $memberships[$i]['m_name'] .= ' <a href="javascript:;" onclick="del_membership(' . $memberships[$i]['m_id'] . ')" title="Delete this membership"><img src="skin/images/del.png" alt="Delete this membership" /></a>';
    }
    ++$i;
}
$query = "SELECT `level_id`,`level_code`,`level_diz`,`level`,`disabled_level` FROM `{$dbtable_prefix}access_levels`";
if (!($res = @mysql_query($query))) {
    trigger_error(mysql_error(), E_USER_ERROR);
}
$i = 0;
$access_levels = array();
while ($rsrow = mysql_fetch_assoc($res)) {
    $rsrow['level_code'] = sanitize_and_format($rsrow['level_code'], TYPE_STRING, $__field2format[TEXT_DB2DISPLAY]);
    $rsrow['level_diz'] = sanitize_and_format($rsrow['level_diz'], TYPE_STRING, $__field2format[TEXT_DB2DISPLAY]);
    $access_levels[$i]['row'] = '<td><a href="access_levels_addedit.php?level_id=' . $rsrow['level_id'] . '" title="' . $rsrow['level_diz'] . '">' . $rsrow['level_code'] . "</a></td>\n";
    for ($j = 0; isset($memberships[$j]); ++$j) {
        $access_levels[$i]['row'] .= '<td><input type="checkbox" name="levels[' . $rsrow['level_id'] . '][' . $memberships[$j]['m_value'] . ']" value="1"';
        if ((int) $memberships[$j]['m_value'] & (int) $rsrow['level']) {
            $access_levels[$i]['row'] .= ' checked="checked"';
        }
        if ((int) $memberships[$j]['m_value'] & (int) $rsrow['disabled_level']) {
            $access_levels[$i]['row'] .= ' disabled="disabled"';
        }
        $access_levels[$i]['row'] .= " /></td>\n";
    }
    ++$i;
}
$tpl->set_file('content', 'access_levels.html');
$tpl->set_loop('access_levels', $access_levels);

$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$output = $user_blogs_default['defaults'];
if (isset($_SESSION['topass']['input'])) {
    $output = $_SESSION['topass']['input'];
    // our 'return' here was decoded in the processor
    $output['return2'] = $output['return'];
    $output['return'] = rawurlencode($output['return']);
} elseif (!empty($_GET['bid'])) {
    $blog_id = (int) $_GET['bid'];
    $query = "SELECT `blog_id`,`blog_name`,`blog_diz` FROM `{$dbtable_prefix}user_blogs` WHERE `blog_id`={$blog_id} AND `fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    if (mysql_num_rows($res)) {
        $output = mysql_fetch_assoc($res);
        $output = sanitize_and_format($output, TYPE_STRING, $__field2format[TEXT_DB2EDIT]);
    }
}
if (empty($output['return'])) {
    $output['return2'] = sanitize_and_format_gpc($_GET, 'return', TYPE_STRING, $__field2format[FIELD_TEXTFIELD], '');
    $output['return'] = rawurlencode($output['return2']);
}
$tpl->set_file('content', 'blog_addedit.html');
$tpl->set_var('output', $output);
$tpl->process('content', 'content');
$tplvars['title'] = $GLOBALS['_lang'][220];
$tplvars['page_title'] = $GLOBALS['_lang'][220];
$tplvars['page'] = 'blog_addedit';
$tplvars['css'] = 'blog_addedit.css';
if (is_file('blog_addedit_left.php')) {
    include 'blog_addedit_left.php';

    $output = $_SESSION['topass']['input'];
    $output['return2'] = $output['return'];
    $output['return'] = rawurlencode($output['return']);
} else {
    if (!empty($_REQUEST['search'])) {
        $output['search'] = sanitize_and_format_gpc($_REQUEST, 'search', TYPE_STRING, $__field2format[FIELD_TEXTFIELD], '');
        $query = "SELECT `results` FROM `{$dbtable_prefix}site_searches` WHERE `search_md5`='" . $output['search'] . "' AND `search_type`=" . SEARCH_USER;
        if (!($res = @mysql_query($query))) {
            trigger_error(mysql_error(), E_USER_ERROR);
        }
        if (mysql_num_rows($res)) {
            $results = mysql_result($res, 0, 0);
            $output['uids'] = explode(',', $results);
        }
    } elseif (!empty($_REQUEST['uids'])) {
        $output['uids'] = sanitize_and_format($_REQUEST['uids'], TYPE_INT, 0, array());
    }
}
if (!empty($output['uids'])) {
    $output['uids'] = join('|', $output['uids']);
} else {
    $topass['message']['type'] = MESSAGE_ERROR;
    $topass['message']['text'] = 'No members selected';
    if (!empty($output['return'])) {
        $nextpage = _BASEURL_ . '/admin/' . $output['return'];
    } else {
        $nextpage = _BASEURL_ . '/admin/member_search.php';
    }
    redirect2page($nextpage, $topass, '', true);
}
if (empty($output['return'])) {

===============================================================================
File:                       admin/file_edit.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require_once '../includes/common.inc.php';
require_once '../includes/admin_functions.inc.php';
allow_dept(DEPT_ADMIN);
$tpl = new phemplate('skin/', 'remove_nonjs');
$output = array();
$output['file'] = str_replace('..', '', preg_replace('~[^a-zA-Z0-9\\._/-]~', '', sanitize_and_format_gpc($_GET, 'f', TYPE_STRING, $__field2format[FIELD_TEXTFIELD], '')));
if (!empty($output['file']) && $output['file'][0] == '/') {
    $output['file'] = substr($output['file'], 1);
}
$file = _BASEPATH_ . '/' . $output['file'];
$mode = isset($_GET['m']) ? (int) $_GET['m'] : 1;
if (is_file($file)) {
    $output['file_content'] = str_replace(array('{', '}'), array('{', '}'), sanitize_and_format(file_get_contents($file), TYPE_STRING, $__field2format[TEXT_DB2EDIT]));
}
$tpl->set_file('content', 'file_edit.html');
$output['path'] = urlencode(pathinfo($output['file'], PATHINFO_DIRNAME));
$tpl->set_var('output', $output);
$tpl->process('content', 'content', TPL_OPTIONAL);
$tplvars['title'] = 'File editor';
$tplvars['css'] = 'file_edit.css';
$tplvars['page'] = 'file_edit';
include 'frame.php';

require_once '../includes/admin_functions.inc.php';
require_once '../includes/tables/subscriptions_auto.inc.php';
allow_dept(DEPT_ADMIN);
$tpl = new phemplate('skin/', 'remove_nonjs');
$subscriptions_auto = $subscriptions_auto_default['defaults'];
if (isset($_SESSION['topass']['input'])) {
    $subscriptions_auto = $_SESSION['topass']['input'];
} elseif (!empty($_GET['asubscr_id'])) {
    $asubscr_id = (int) $_GET['asubscr_id'];
    $query = "SELECT * FROM `{$dbtable_prefix}subscriptions_auto` WHERE `asubscr_id`={$asubscr_id}";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    if (mysql_num_rows($res)) {
        $subscriptions_auto = mysql_fetch_assoc($res);
        $subscriptions_auto = sanitize_and_format($subscriptions_auto, TYPE_STRING, $__field2format[TEXT_DB2EDIT]);
    }
}
$subscriptions_auto['fk_subscr_id'] = dbtable2options("`{$dbtable_prefix}subscriptions`", '`subscr_id`', '`subscr_name`', '`subscr_id`', $subscriptions_auto['fk_subscr_id']);
if (empty($subscriptions_auto['dbfield'])) {
    $subscriptions_auto['to_members_1'] = 'checked="checked"';
} else {
    $subscriptions_auto['to_members_2'] = 'checked="checked"';
}
$dbfields = array();
foreach ($_pfields as $pfield_id => $pfield) {
    if (get_class($pfield) == 'field_select') {
        $dbfields[$pfield['dbfield']] = $pfield->config['label'] . ' (' . $pfield->config['dbfield'] . ')';
    }
}
if (!empty($subscriptions_auto['dbfield'])) {