PHP slashes函数代码示例

function slashes(&$el)
{
    if (is_array($el)) {
        foreach ($el as $k => $v) {
            slashes($el[$k]);
        }
    } else {
        $el = stripslashes($el);
    }
}

 /**
  * 主方法
  *@param $json    为NULL输出模板。为1时输出列表数据到前端，格式为Json
  *@param $method  为1时，单独输出记录数
  *@examlpe 
  */
 public function index($json = NULL, $pid = NULL, $method = NULL)
 {
     $Public = A('Index', 'Public');
     $Public->check('Log', array('r'));
     //main
     if (!is_int((int) $json)) {
         $json = NULL;
     }
     $view = C('DATAGRID_VIEW');
     $page_row = C('PAGE_ROW');
     $groupid = $_SESSION['login']['se_groupID'];
     $comyid = $_SESSION['login']['se_comyID'];
     $comy = M('User_company_table');
     if ($json == 1) {
         $userid = $_SESSION['login']['se_id'];
         $protype = $comy->where('id=' . $comyid)->getField('type');
         if (!$userid) {
             echo '';
             exit;
         }
         $notice = D('Log_table');
         /*
         $data = array(
         	'user_id'=>1,
         	'title'=>'测试数据',
         	'content'=>'测试内容',
         	'status'=>2,
         	'addtime'=>'2014-12-09'
         );
         for($i=0; $i<2000000; $i++){
         	$notice->add($data);
         }
         exit;
         */
         $result = M();
         $Log_table = C('DB_PREFIX') . 'log_table';
         $Log_main = C('DB_PREFIX') . 'log_main_table';
         $Porject_table = C('DB_PREFIX') . 'project_table';
         $Task_table = C('DB_PREFIX') . 'task_table';
         $Linkage = C('DB_PREFIX') . 'linkage';
         $Reply_main = C('DB_PREFIX') . 'reply_main_table';
         $User_table = C('DB_PREFIX') . 'user_table';
         $map = array();
         if (cookie('aLog')) {
             $str_map = slashes(cookie('aLog'));
             $map = unserialize($str_map);
             unset($str_map);
         } else {
             $map['id'] = 'id>0 and type=3';
         }
         if ($pid) {
             $map['pro_id'] = ' and pro_id=' . $pid;
         }
         if ($protype) {
             $map['client_id'] = ' and client_id=' . $comyid . ' and views=15';
         }
         cookie('aTask', serialize($map));
         $map = implode(' ', $map);
         $get_page = $this->_get('page');
         $get_rows = $this->_get('rows');
         $page = isset($get_page) ? intval($get_page) : 1;
         $rows = isset($get_rows) ? intval($get_rows) : $page_row;
         $now_page = $page - 1;
         $offset = $now_page * $rows;
         $arr_flelds = array('id' => 't1.id as id', 'type' => 't1.type as type', 'user_id' => 't1.user_id as user_id', 'task_id' => 't2.task_id as task_id', 'pro_id' => 't2.pro_id as pro_id', 'title' => 'concat_ws(\'\',t3.username,\' 于 \',t1.workdate,\' 执行了 \',t4.val,\'-\',t5.title) as title', 'usages' => 't1.usage as usages', 'status' => 't6.val as status', 'proname' => 'concat_ws(\'\',\'<a href=javascript:showTab("项目-\',t7.title,\'"\\,\',t7.id,\')>\',t7.title,\'</a>\') as proname', 'client_id' => 't7.client_id as client_id', 'views' => 't7.views as views', 'addtime' => 't1.addtime as addtime', 'workdate' => 't1.workdate as workdate');
         $fields = implode(',', $arr_flelds);
         unset($arr_flelds);
         if (!$view) {
             $info = $result->table($Log_table . ' as t1')->field('SQL_CALC_FOUND_ROWS ' . $fields)->join(' ' . $Log_main . ' as t2 on t2.log_id = t1.id')->join(' ' . $User_table . ' as t3 on t3.id = t1.user_id')->join(' right join ' . $Task_table . ' as t5 on t5.id = t2.task_id')->join(' ' . $Linkage . ' as t4 on t4.id = t5.type')->join(' ' . $Linkage . ' as t6 on t6.id = t1.status')->join(' right join ' . $Porject_table . ' as t7 on t7.id = t2.pro_id')->having($map)->order('addtime desc')->limit($offset, $rows)->select();
             $count = $result->query('SELECT FOUND_ROWS() as total');
             $count = $count[0]['total'];
         } else {
             $info = $result->table($Log_table . ' as t1')->field($fields)->join(' ' . $Log_main . ' as t2 on t2.log_id = t1.id')->join(' ' . $User_table . ' as t3 on t3.id = t1.user_id')->join(' ' . $Task_table . ' as t5 on t5.id = t2.task_id')->join(' ' . $Linkage . ' as t4 on t4.id = t5.type')->join(' ' . $Linkage . ' as t6 on t6.id = t1.status')->join(' ' . $Porject_table . ' as t7 on t7.id = t2.pro_id')->having($map)->order('addtime desc')->select();
             $count = count($info);
         }
         //dump($info);exit;
         $new_info = array();
         $items = array();
         $new_info['total'] = $count;
         if ($method == 'total') {
             echo json_encode($new_info);
             exit;
         } elseif ($method == 'excel') {
             if (!$view) {
                 $info = $result->table($Log_table . ' as t1')->field($fields)->join(' ' . $Log_main . ' as t2 on t2.log_id = t1.id')->join(' ' . $User_table . ' as t3 on t3.id = t1.user_id')->join(' ' . $Task_table . ' as t5 on t5.id = t2.task_id')->join(' ' . $Linkage . ' as t4 on t4.id = t5.type')->join(' ' . $Linkage . ' as t6 on t6.id = t1.status')->join(' ' . $Porject_table . ' as t7 on t7.id = t2.pro_id')->having($map)->order('addtime desc')->select();
             }
             $char = C('CFG_CHARSET');
             $filename = '项目：' . strip_tags($info[0]['proname']) . ' 操作记录';
             header("Content-type:application/octet-stream");
             header("Accept-Ranges:bytes");
             header("Content-type:application/vnd.ms-excel");
             header("Content-Disposition:attachment;filename=" . $filename . ".xls");
             header("Pragma: no-cache");
             header("Expires: 0");
//.........这里部分代码省略.........

            echo '</td><td>';
            if ($login['user_access_useredit']) {
                echo '<a href="admin_group.php?gid=' . $gid . '&amp;group_add_user=' . $user_id . '">' . _h('Add user to group') . '</a>';
            }
            echo '</td></tr>' . chr(10);
        }
        echo '</table>' . chr(10);
    }
} elseif (isset($_POST['add'])) {
    // Adding
    if (!$login['user_access_useredit']) {
        showAccessDenied($day, $month, $year, $area, true);
        exit;
    }
    // Checking input
    $add = slashes(htmlspecialchars(strip_tags($_POST['add']), ENT_QUOTES));
    mysql_query("INSERT INTO `groups` ( `group_id` , `user_ids` , `group_name` ) VALUES ('', '', '" . $add . "');");
    header("Location: admin_group.php");
    exit;
} else {
    include "include/admin_middel.php";
    echo '<h1>' . __('Usergroups') . '</h1>';
    // Add
    echo '<form action="admin_group.php" method="post">' . chr(10);
    echo '<b>' . __('Add group') . '</b><br>' . chr(10);
    if ($login['user_access_useredit']) {
        echo '<input type="text" name="add"><br>' . chr(10);
        echo '<input type="submit" value="' . __('Add') . '">' . chr(10);
    } else {
        echo __('You are not allowed to do this.');
    }

    <?php 
        }
        ?>


    <div class="okbc_box">
      <h3>
        <?php 
        echo $lang['mis_f'];
        ?>
 
      </h3>

      <?php 
        if (isset($editMoving) && $editMoving == true) {
            $mov = mysql_query("SELECT * FROM `{$dData['tablec']}` WHERE `category`='" . slashes($_POST['category']) . "';");
            $dData['movSubs'] = unserialize(stripslashes(mysql_result($mov, 0, "subcategory")));
            ?>
 
        <div class="okbc_block">
          <form action="<?php 
            echo $_SERVER['PHP_SELF'];
            ?>
" method="post">
            <div class="okbc_row">
              <strong><?php 
            echo $lang['mis_g'];
            ?>
</strong><br />
              <?php 
            echo $lang['mis_h'];

    echo " done.<br>Updating repeating entries: ";
    $sql = "select id,name,description from mrbs_repeat";
    $repeats_res = sql_query($sql);
    for ($i = 0; $row = sql_row($repeats_res, $i); $i++) {
        $id = $row[0];
        $name = slashes(iconv($encoding, "utf-8", $row[1]));
        $desc = slashes(iconv($encoding, "utf-8", $row[2]));
        $upd_sql = "update mrbs_repeat set name='{$name}',description='{$desc}' where id={$id}";
        sql_command($upd_sql);
        echo ".";
    }
    echo " done.<br>Updating normal entries: ";
    $sql = "select id,name,description from mrbs_entry";
    $entries_res = sql_query($sql);
    for ($i = 0; $row = sql_row($entries_res, $i); $i++) {
        $id = $row[0];
        $name = slashes(iconv($encoding, "utf-8", $row[1]));
        $desc = slashes(iconv($encoding, "utf-8", $row[2]));
        $upd_sql = "update mrbs_entry set name='{$name}',description='{$desc}' where id={$id}";
        sql_command($upd_sql);
        echo ".";
    }
    echo 'done.<p>

    Finished everything, byebye!
';
}
?>
  </body>
</html>

 for ($i = 0; $i < $nfields; $i++) {
     if ($field_name[$i] == "id") {
         $Field[$i] = $Id;
     }
     if ($field_name[$i] == "name") {
         $Field[$i] = strtolower($Field[$i]);
     }
     if ($field_name[$i] == "password" && $password0 != "") {
         $Field[$i] = md5($password0);
     }
     /* print "$field_name[$i] = $Field[$i]<br>"; */
     if ($i > 0) {
         $operation = $operation . ", ";
     }
     if ($field_istext[$i]) {
         $operation .= "'" . slashes($Field[$i]) . "'";
     } else {
         if ($field_isnum[$i] && $Field[$i] == "") {
             $Field[$i] = "0";
         }
         $operation = $operation . $Field[$i];
     }
 }
 $operation = $operation . ");";
 print $operation . "<br>\n";
 $r = sql_command($operation);
 if ($r == -1) {
     print_header(0, 0, 0, "");
     // This is unlikely to happen in normal  operation. Do not translate.
     print "Error updating the {$tbl_users} table.<br>\n";
     print sql_error() . "<br>\n";

 if (isset($_POST['attachment']) && is_array($_POST['attachment'])) {
     foreach ($_POST['attachment'] as $att_id) {
         $att_id = (int) $att_id;
         $attachment = getAttachment($att_id);
         if (count($attachment)) {
             $log_data['att' . $att_id] = $att_id;
             $attachments[$att_id] = $attachment;
         } else {
             $log_data['att_faild' . $att_id] = $att_id;
         }
     }
 }
 $rev_num = $entry['rev_num'] + 1;
 mysql_query("UPDATE `entry` SET `confirm_email` = '1', `time_last_edit` = '" . time() . "', `rev_num` = '{$rev_num}' WHERE `entry_id` = '" . $entry['entry_id'] . "' LIMIT 1 ;");
 // Insert to get confirmation ID
 mysql_query("INSERT INTO `entry_confirm` (\n\t\t\t\t`confirm_id` ,\n\t\t\t\t`entry_id` ,\n\t\t\t\t`rev_num` ,\n\t\t\t\t`user_id` ,\n\t\t\t\t`confirm_time` ,\n\t\t\t\t`confirm_to` ,\n\t\t\t\t`confirm_txt` ,\n\t\t\t\t`confirm_tpl` ,\n\t\t\t\t`confirm_pdf` ,\n\t\t\t\t`confirm_pdf_tpl` ,\n\t\t\t\t`confirm_pdf_txt` ,\n\t\t\t\t`confirm_pdffile`,\n\t\t\t\t`confirm_comment`\n\t\t\t)\n\t\t\tVALUES (\n\t\t\t\tNULL , \n\t\t\t\t'" . $entry['entry_id'] . "', \n\t\t\t\t'" . $rev_num . "', \n\t\t\t\t'" . $login['user_id'] . "', \n\t\t\t\t'" . time() . "', \n\t\t\t\t'" . serialize($emails) . "', \n\t\t\t\t'" . slashes(htmlspecialchars($confirm_txt, ENT_QUOTES)) . "', \n\t\t\t\t'" . slashes(htmlspecialchars($confirm_tpl, ENT_QUOTES)) . "', \n\t\t\t\t'" . $confirm_pdf . "',\n\t\t\t\t'" . slashes(htmlspecialchars($confirm_pdf_tpl, ENT_QUOTES)) . "', \n\t\t\t\t'" . slashes(htmlspecialchars($confirm_pdf_txt, ENT_QUOTES)) . "', \n\t\t\t\t'" . $confirm_pdffile . "',\n\t\t\t\t'" . $confirm_comment . "'\n\t\t\t);");
 if (mysql_errno()) {
     echo mysql_error();
     exit;
 }
 // Generating $log_data
 $log_data = array();
 $log_data['confirm_id'] = mysql_insert_id();
 if ($confirm_comment != '') {
     $log_data['confirm_comment'] = $confirm_comment;
 }
 $i = 0;
 foreach ($emails as $email) {
     // Sending email
     if ($confirm_pdf == '1') {
         if (emailSendConfirmationPDF($entry, $email, $confirm_pdffile, $attachments, $confirm_txt)) {

 $txt = slashes(htmlspecialchars($_POST['template_txt'], ENT_QUOTES));
 if ($tpl_db) {
     // Work against DB
     if (!isset($_POST['template_type']) || !array_key_exists($_POST['template_type'], $template_types)) {
         include "include/admin_middel.php";
         echo '<h1>' . __('Templates') . '</h1>';
         echo __('Error: No template type is defined.');
         exit;
     }
     if (!isset($_POST['template_name']) || $_POST['template_name'] == '') {
         include "include/admin_middel.php";
         echo '<h1>' . __('Templates') . '</h1>';
         echo __('Error: No template name is made.');
         exit;
     }
     $template_name = slashes(htmlspecialchars(strip_tags($_POST['template_name']), ENT_QUOTES));
     if ($id == 'new') {
         // Insert
         mysql_query("INSERT INTO `template` (\n\t\t\t\t\t`template_id` ,\n\t\t\t\t\t`template` ,\n\t\t\t\t\t`template_name` ,\n\t\t\t\t\t`template_type`,\n\t\t\t\t\t`template_time_last_edit`\n\t\t\t\t)\n\t\t\t\tVALUES (\n\t\t\t\t\tNULL , \n\t\t\t\t\t'{$txt}', \n\t\t\t\t\t'{$template_name}', \n\t\t\t\t\t'" . $_POST['template_type'] . "',\n\t\t\t\t\t'" . time() . "'\n\t\t\t\t);");
     } else {
         // Update
         mysql_query("UPDATE `template` SET \n\t\t\t\t\t`template` = '{$txt}',\n\t\t\t\t\t`template_name` = '{$template_name}',\n\t\t\t\t\t`template_type` = '" . $_POST['template_type'] . "',\n\t\t\t\t\t`template_time_last_edit` = '" . time() . "'\n\t\t\t\tWHERE `template_id` ={$id} LIMIT 1 ;");
     }
 } else {
     $fp = @fopen($filename, "w");
     if ($fp) {
         fwrite($fp, htmlspecialchars_decode($txt, ENT_QUOTES));
         fclose($fp);
     } else {
         include "include/admin_middel.php";
         echo '<h1>' . __('Templates') . '</h1>';

along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
*/
/*
 * JM-booking
 * - Edit or add of a customer
 */
include_once "glob_inc.inc.php";
if (!isset($_GET['id']) || !isset($_GET['name'])) {
    exit;
}
if ($_GET['id'] == '' || $_GET['name'] == '') {
    exit;
}
$id = slashes(htmlspecialchars($_GET['id'], ENT_QUOTES));
$name = slashes(htmlspecialchars($_GET['name'], ENT_QUOTES));
// Form...
echo '<HTML>
<HEAD>
<TITLE>JM-booking</TITLE><LINK REL="stylesheet" href="css/jm-booking.css" type="text/css">
<META HTTP-EQUIV="Content-Type" content="text/html; charset=iso-8859-1">

<script type="text/javascript" src="js/bsn.AutoSuggest_2.1.3_comp-municipal.js"></script>
</HEAD>

<body>
';
echo '<script language="javascript">

function choose_municipal (id, name)
{

 }
 if (isset($_GET['forgot_pw']) && $_GET['forgot_pw'] == '1' && $forgot_pw_user != '') {
     // Forgot password
     $user = slashes(htmlspecialchars(strip_tags($forgot_pw_user), ENT_QUOTES));
     // Username
     $Q_login = mysql_query("\n\t\t\tselect user_id, deactivated, user_newpassword_key, user_newpassword_validto from `users` where \n\t\t\t\tdeactivated = '0' and \n\t\t\t\t(\n\t\t\t\t\tuser_name_short = '" . $user . "' ||\n\t\t\t\t\tuser_email = '" . $user . "'\n\t\t\t\t)\n\t\t\t\tlimit 1");
     if (mysql_num_rows($Q_login) > 0) {
         $user_id = mysql_result($Q_login, 0, 'user_id');
         $forgot_pw_found = true;
         if (isset($_GET['key'])) {
             $forgot_pw_keyfound = true;
             $newpw_failed_msg = '';
             $newpw_pw = '';
             $newpw_failed = false;
             $newpw_user = getUser($user_id);
             $newpw_key = slashes(htmlspecialchars(strip_tags($_GET['key']), ENT_QUOTES));
             if (!count($newpw_user)) {
                 echo 'Systemfeil. Arg... Sorry :-(';
                 exit;
             }
             if ($newpw_key == mysql_result($Q_login, 0, 'user_newpassword_key') && mysql_result($Q_login, 0, 'user_newpassword_validto') >= time()) {
                 $forgot_pw_keyokey = true;
                 if (!isset($_POST['password_new'])) {
                     // Extend life time of key
                     $valid_to = time() + 60 * 15;
                     // 15 min
                     mysql_query("\n\t\t\t\t\t\t\tupdate `users`\n\t\t\t\t\t\t\tset \n\t\t\t\t\t\t\t\tuser_newpassword_validto = '{$valid_to}'\n\t\t\t\t\t\t\twhere\n\t\t\t\t\t\t\t\tuser_id = '{$user_id}'");
                 } else {
                     // Setting the new password
                     $newpw_user['user_password_lastchanged'] = time();
                     // All new

 case 'infoscreen_txt':
 case 'entry_title':
 case 'user_assigned2':
 case 'contact_person_name':
 case 'contact_person_phone':
 case 'contact_person_email':
 case 'program_description':
 case 'service_description':
 case 'invoice_ref_your':
 case 'invoice_internal_comment':
 case 'invoice_email':
     // Text data is input. (can contain a lot of shit)
     if (!isset($_POST[$field['var']])) {
         ${$field}['var'] = '';
     } else {
         ${$field}['var'] = slashes(htmlspecialchars($_POST[$field['var']], ENT_QUOTES));
     }
     addValue($field['var'], ${$field}['var']);
     break;
 case 'num_person_child':
 case 'num_person_adult':
     if (!isset($_POST[$field['var']])) {
         ${$field}['var'] = '';
     } elseif ($_POST[$field['var']] != '' && !is_numeric($_POST[$field['var']])) {
         ${$field}['var'] = '';
         if ($field['var'] == 'num_person_child') {
             $form_errors[] = __('Number of children must be a number, if anything.');
         } elseif ($field['var'] == 'num_person_adult') {
             $form_errors[] = __('Number of adults must be a number, if anything.');
         }
     } else {

      <?php 
    }
    ?>
 

      <a href="<?php 
    echo $_SERVER['PHP_SELF'] . ($_GET['start'] > 1 ? "?start=" . $_GET['start'] : "") . searchhold($_GET['start'] == 1);
    ?>
"><strong><?php 
    echo $lang['termb'];
    ?>
</strong></a>

    <?php 
} else {
    $buildQry = ($dData['usercat'] ? "AND `category`='" . slashes($dData['usercat']) . "'" : "") . ($dData['usersub'] ? " AND `subcategory`='" . slashes($dData['usersub']) . "'" : "");
    $qTbl = sql_query_read("SELECT * FROM `{$dData['tblquest']}` WHERE `online`='Yes' {$buildQry} ORDER BY `visited` DESC;");
    if ($_GET['q']) {
        $keys = explode(" ", strtolower($_GET['q']));
    }
    $qList = array();
    for ($i = 0; $i < mysql_numrows($qTbl); $i++) {
        $qList[$i]['QID'] = mysql_result($qTbl, $i, "QID");
        $qList[$i]['category'] = mysql_result($qTbl, $i, "category");
        $qList[$i]['question'] = mysql_result($qTbl, $i, "question");
        $qList[$i]['answer'] = mysql_result($qTbl, $i, "answer");
        $qList[$i]['keywords'] = mysql_result($qTbl, $i, "keywords");
        $qList[$i]['score'] = 0;
        if (isset($keys)) {
            for ($j = 0; $j < count($keys); $j++) {
                if (strpos(strtolower($qList[$i]['question']), $keys[$j]) !== false) {

 /**
  * 工具栏搜索控制
  *@param $act  传入的字段名
  *@param $mode  为like时，模糊搜索
  *@examlpe 
  */
 public function change($act, $mode = NULL)
 {
     if (cookie('Notice')) {
         $str_map = slashes(cookie('Notice'));
         $map = unserialize($str_map);
     }
     unset($str_map);
     $id = strval(I('val'));
     switch ($act) {
         case 'user_id':
             $map['user_id'] = " and t1_old_user_id='" . $id . "'";
             if (!$id) {
                 unset($map['user_id']);
             }
             break;
     }
     cookie('All', 0);
     cookie('Notice', serialize($map));
 }

         $i++;
         if ($i != 5) {
             $thisone['address_line_' . $i] = trim(slashes(htmlspecialchars($line, ENT_QUOTES)));
         } else {
             $thisone['address_line_' . $i] = str_replace("\r", '', str_replace("\n", ', ', trim(slashes(htmlspecialchars($line, ENT_QUOTES)))));
         }
     }
 }
 if (isset($_POST['address_postalnum'])) {
     if (postalNumber($_POST['address_postalnum'])) {
         $thisone['address_line_6'] = $_POST['address_postalnum'] . ' ' . slashes(htmlspecialchars(postalNumber($_POST['address_postalnum']), ENT_QUOTES));
         $thisone['address_postalnum'] = $_POST['address_postalnum'];
     }
 }
 if (isset($_POST['address_country'])) {
     $thisone['address_line_7'] = slashes(htmlspecialchars($_POST['address_country'], ENT_QUOTES));
 }
 // Generate address_full
 $addrline = array();
 if ($thisone['address_line_1']) {
     $addrline[] = $thisone['address_line_1'];
 }
 if ($thisone['address_line_2']) {
     $addrline[] = $thisone['address_line_2'];
 }
 if ($thisone['address_line_3']) {
     $addrline[] = $thisone['address_line_3'];
 }
 if ($thisone['address_line_4']) {
     $addrline[] = $thisone['address_line_4'];
 }

                        $subsa = mysql_query("SELECT * FROM `{$dData['tblcateg']}` WHERE `category`='" . slashes($dData['usercat']) . "';");
                        $subsb = unserialize(stripslashes(mysql_result($subsa, 0, "subcategory")));
                        $dData['usersub'] = in_array($_POST['subcategory'], $subsb) ? $_POST['subcategory'] : "";
                    } else {
                        $dData['usersub'] = "";
                    }
                }
            }
        }
    }
}
setcookie("orca_user", base64_encode(serialize(array($dData['usercat'], $dData['usersub']))), time() + 18600, $_SERVER['PHP_SELF']);
/* ***** Unpack Subcategories for Selected Category *********** */
$dData['categories'] = mysql_query("SELECT * FROM `{$dData['tblcateg']}` ORDER BY `category`;");
if ($dData['usercat']) {
    $grabSubs = mysql_query("SELECT * FROM `{$dData['tblcateg']}` WHERE `category`='" . slashes($dData['usercat']) . "';");
    $dData['subcategories'] = unserialize(stripslashes(mysql_result($grabSubs, 0, "subcategory")));
} else {
    $dData['usersub'] = "";
}
/* ***** Get Selected Question ******************************** */
if (isset($_GET['qid'])) {
    $aData['action'] = true;
    $qQry = mysql_query("SELECT * FROM `{$dData['tblquest']}` WHERE `QID`='{$_GET['qid']}' AND `online`='Yes';");
    if (mysql_numrows($qQry) && preg_match("/\\d/", $_GET['qid'])) {
        $qIncre = mysql_query("UPDATE `{$dData['tblquest']}` SET `visited`='" . (mysql_result($qQry, 0, "visited") + 1) . "' WHERE `QID`='{$_GET['qid']}';");
        $aData['question'] = htmlspecialchars(mysql_result($qQry, 0, "question"));
        $aData['date'] = dateStamp(mysql_result($qQry, 0, "date"));
        $aData['category'] = htmlspecialchars(mysql_result($qQry, 0, "category"));
        $aData['subcategory'] = htmlspecialchars(mysql_result($qQry, 0, "subcategory"));
        $aData['answer'] = www_nl2br(mysql_result($qQry, 0, "answer"));