PHP to_html函数代码示例

 /**
  * @dataProvider xssData
  */
 public function testXssFilterBean($before, $after)
 {
     $bean = new EmailTemplate();
     $bean->body_html = to_html($before);
     $bean->cleanBean();
     $this->assertEquals(to_html($after), $bean->body_html);
 }

 function safeHtmlFilter($content, $smarty)
 {
     //return htmlspecialchars($content,ENT_QUOTES,UTF-8);
     // NOTE: to_html is being used as data-extraction depends on this
     // We shall improve this as it plays role across the product.
     return to_html($content);
 }

 public function testto_html()
 {
     //execute the method and test if it returns expected values
     $string = '';
     $expected = '';
     $actual = to_html($string);
     $this->assertSame($expected, $actual);
     $string = "'test'&trial<\">";
     $expected = '&#039;test&#039;&trial&lt;&quot;&gt;';
     $actual = to_html($string);
     $this->assertSame($expected, $actual);
 }

 /**
  * Generating new label with HTML tags
  * @group 43069
  */
 public function testLabelSaving()
 {
     $mod_strings = return_module_language($this->_lang, $this->_test_module);
     $this->_old_label = $mod_strings[$this->_test_label];
     $pref = '<img alt="<script>" src="www.test.com/img.png" ="alert(7001)" width="1" height="1"/>';
     $prepared_pref = to_html(strip_tags(from_html($pref)));
     $new_label = $prepared_pref . ' ' . $this->_old_label;
     // save the new label to the language file
     ParserLabel::addLabels($this->_lang, array($this->_test_label => $new_label), $this->_test_module);
     // read the language file to get the new value
     include "custom/modules/{$this->_test_module}/language/{$this->_lang}.lang.php";
     $this->assertEquals($new_label, $mod_strings[$this->_test_label]);
     $this->assertNotEquals($pref . ' ' . $this->_old_label, $mod_strings[$this->_test_label]);
 }

 protected function ConstruireElemRetourInvisible(&$element)
 {
     $retourInvisible = 'contexte=' . CONT_ORIENTATION . '&cf=' . GSession::NumCheckFormulaire();
     foreach ($this->champs as $nomChamp => $champ) {
         if ($champ[LISTE_CHAMPLISTE_RETOURINVISIBLE] === true) {
             if ($retourInvisible !== '') {
                 $retourInvisible .= '&';
             }
             $retourInvisible .= GContexte::FormaterVariable(CONT_ORIENTATION, $nomChamp) . '=' . $element[$nomChamp][LISTE_ELEMENT_VALEURCONSULT];
         }
     }
     // On enregistre ce retour pour l'élément.
     $element[LISTE_ELEMENT_RETOUR] = to_html($retourInvisible);
     $divRetInv = new SBalise(BAL_DIV);
     $divRetInv->AddClass(LISTE_JQ_ELEMENT_PARAM);
     $divRetInv->SetText($element[LISTE_ELEMENT_RETOUR]);
     return $divRetInv;
 }

 public function getCurrentUserSidebarFavorites($id = null)
 {
     global $db, $current_user;
     $return_array = array();
     if ($id) {
         $query = "SELECT parent_id, parent_type FROM favorites WHERE assigned_user_id = '" . $current_user->id . "' AND parent_id = '" . $id . "' AND deleted = 0 ORDER BY date_entered desc";
     } else {
         $query = "SELECT parent_id, parent_type FROM favorites WHERE assigned_user_id = '" . $current_user->id . "' AND deleted = 0 ORDER BY date_entered desc";
     }
     $result = $db->query($query);
     $i = 0;
     while ($row = $db->fetchByAssoc($result)) {
         $bean = BeanFactory::getBean($row['parent_type'], $row['parent_id']);
         $return_array[$i]['item_summary'] = $bean->name;
         $return_array[$i]['item_summary_short'] = to_html(getTrackerSubstring($bean->name));
         $return_array[$i]['id'] = $row['parent_id'];
         $return_array[$i]['module_name'] = $row['parent_type'];
         $return_array[$i]['image'] = SugarThemeRegistry::current()->getImage($row['parent_type'], 'border="0" align="absmiddle"', null, null, '.gif', $bean->name);
         $i++;
     }
     return $return_array;
 }

 public function process(Vtiger_Request $request)
 {
     $moduleName = $request->getModule();
     $tplId = $request->get('id');
     $record = $request->get('record_id');
     $selectModule = $request->get('select_module');
     $recordModel = Vtiger_Record_Model::getCleanInstance($moduleName);
     $output = $recordModel->getTemplete($tplId);
     if ($record && $selectModule) {
         $recordModel->findVar($output['content'], 0, $record, $selectModule, 'a', $request);
         $recordModel->findVar($output['content'], 0, $record, $selectModule, 'b', $request);
         $recordModel->findVar($output['content'], 0, $record, $selectModule, 'c', $request);
         $recordModel->findVar($output['content'], 0, $record, $selectModule, 'd', $request);
         $recordModel->findVar($output['content'], 0, $record, $selectModule, 's', $request);
     }
     if ('true' === $request->get('as_var')) {
         $output['content'] = to_html($output['content']);
         return $output;
     } else {
         $response = new Vtiger_Response();
         $response->setResult($output);
         $response->emit();
     }
 }

 function query_result_rowdata(&$result, $row = 0)
 {
     if (!is_object($result)) {
         throw new Exception("result is not an object");
     }
     $result->Move($row);
     $rowdata = $this->change_key_case($result->FetchRow());
     foreach ($rowdata as $col => $coldata) {
         if ($col != 'fieldlabel') {
             $rowdata[$col] = to_html($coldata);
         }
     }
     return $rowdata;
 }

 /**
  * sets up the search forms, populates the preset values
  *
  */
 function setup()
 {
     global $mod_strings, $app_strings, $app_list_strings, $theme, $timedate;
     $GLOBALS['log']->debug('SearchForm.php->setup()');
     $this->xtpl = new XTemplate($this->tpl);
     $this->xtpl->assign("MOD", $mod_strings);
     $this->xtpl->assign("APP", $app_strings);
     $this->xtpl->assign("THEME", $theme);
     $this->xtpl->assign("CALENDAR_DATEFORMAT", $timedate->get_cal_date_format());
     $this->xtpl->assign("USER_DATEFORMAT", '(' . $timedate->get_user_date_format() . ')');
     foreach ($this->searchFields as $name => $params) {
         if (isset($params['template_var'])) {
             $templateVar = $params['template_var'];
         } else {
             $templateVar = strtoupper($name);
         }
         if (isset($params['value'])) {
             // populate w/ preselected values
             if (isset($params['options'])) {
                 $options = $app_list_strings[$params['options']];
                 if (isset($params['options_add_blank']) && $params['options_add_blank']) {
                     array_unshift($options, '');
                 }
                 $this->xtpl->assign($templateVar, get_select_options_with_id($options, $params['value']));
             } else {
                 if (isset($params['input_type'])) {
                     switch ($params['input_type']) {
                         case 'checkbox':
                             // checkbox input
                             if ($params['value'] == 'on' || $params['value']) {
                                 $this->xtpl->assign($templateVar, 'checked');
                             }
                             break;
                     }
                 } else {
                     // regular text input
                     if (is_array($params['value'])) {
                         $value = array_map('to_html', $params['value']);
                     } else {
                         if (is_string($params['value'])) {
                             $value = to_html($params['value']);
                         }
                     }
                     $this->xtpl->assign($templateVar, $value);
                 }
             }
         } else {
             // populate w/o preselected values
             if (isset($params['options'])) {
                 $options = $app_list_strings[$params['options']];
                 if (isset($params['options_add_blank']) && $params['options_add_blank']) {
                     array_unshift($options, '');
                 }
                 $this->xtpl->assign($templateVar, get_select_options_with_id($options, ''));
             }
         }
     }
     if (!empty($_REQUEST['assigned_user_id'])) {
         $this->xtpl->assign("USER_FILTER", get_select_options_with_id(get_user_array(FALSE), $_REQUEST['assigned_user_id']));
     } else {
         $this->xtpl->assign("USER_FILTER", get_select_options_with_id(get_user_array(FALSE), ''));
     }
     // handle my items only
     if (isset($this->searchFields['current_user_only']) && isset($this->searchFields['current_user_only']['value'])) {
         $this->xtpl->assign("CURRENT_USER_ONLY", "checked");
     }
 }

 ********************************************************************************/
/*********************************************************************************
 * $Header: /advent/projects/wesat/vtiger_crm/sugarcrm/modules/Users/Authenticate.php,v 1.10 2005/02/28 05:25:22 jack Exp $
 * Description:  TODO: To be written.
 * Portions created by SugarCRM are Copyright (C) SugarCRM, Inc.
 * All Rights Reserved.
 * Contributor(s): ______________________________________..
 ********************************************************************************/
require_once 'modules/Users/Users.php';
require_once 'modules/Users/CreateUserPrivilegeFile.php';
require_once 'include/logging.php';
require_once 'user_privileges/audit_trail.php';
global $mod_strings, $default_charset;
$focus = new Users();
// Add in defensive code here.
$focus->column_fields["user_name"] = to_html($_REQUEST['user_name']);
$user_password = vtlib_purify($_REQUEST['user_password']);
$focus->load_user($user_password);
if ($focus->is_authenticated()) {
    //Inserting entries for audit trail during login
    if ($audit_trail == 'true') {
        if ($record == '') {
            $auditrecord = '';
        } else {
            $auditrecord = $record;
        }
        $date_var = $adb->formatDate(date('Y-m-d H:i:s'), true);
        $query = "insert into vtiger_audit_trial values(?,?,?,?,?,?)";
        $params = array($adb->getUniqueID('vtiger_audit_trial'), $focus->id, 'Users', 'Authenticate', '', $date_var);
        $adb->pquery($query, $params);
    }

 /**
  * @param string $string
  * @param bool   $encoded
  *
  * @return mixed|string
  */
 public static function stripTags($string, $encoded = true)
 {
     if ($encoded) {
         $string = from_html($string);
     }
     $string = filter_var($string, FILTER_SANITIZE_STRIPPED, FILTER_FLAG_NO_ENCODE_QUOTES);
     return $encoded ? to_html($string) : $string;
 }

/**
 * Generate the compose data package consumed by the full and quick compose screens.
 *
 * @param Array $data
 * @param Bool $forFullCompose If full compose is set to TRUE, then continue execution and include the full Emails UI.  Otherwise
 *             the data generated is returned.
 * @param SugarBean $bean Optional - parent object with data
 */
function generateComposeDataPackage($data, $forFullCompose = TRUE, $bean = null)
{
    // we will need the following:
    if (isset($data['parent_type']) && !empty($data['parent_type']) && isset($data['parent_id']) && !empty($data['parent_id']) && !isset($data['ListView']) && !isset($data['replyForward'])) {
        if (empty($bean)) {
            global $beanList;
            global $beanFiles;
            global $mod_strings;
            $parentName = '';
            $class = $beanList[$data['parent_type']];
            require_once $beanFiles[$class];
            $bean = new $class();
            $bean->retrieve($data['parent_id']);
        }
        if (isset($bean->full_name)) {
            $parentName = $bean->full_name;
        } elseif (isset($bean->name)) {
            $parentName = $bean->name;
        } else {
            $parentName = '';
        }
        $parentName = from_html($parentName);
        $namePlusEmail = '';
        if (isset($data['to_email_addrs'])) {
            $namePlusEmail = $data['to_email_addrs'];
            $namePlusEmail = from_html(str_replace(" ", " ", $namePlusEmail));
        } else {
            if (isset($bean->full_name)) {
                $namePlusEmail = from_html($bean->full_name) . " <" . from_html($bean->emailAddress->getPrimaryAddress($bean)) . ">";
            } else {
                if (isset($bean->emailAddress)) {
                    $namePlusEmail = "<" . from_html($bean->emailAddress->getPrimaryAddress($bean)) . ">";
                }
            }
        }
        $subject = "";
        $body = "";
        $email_id = "";
        $attachments = array();
        if ($bean->module_dir == 'Cases') {
            $subject = str_replace('%1', $bean->case_number, $bean->getEmailSubjectMacro() . " " . from_html($bean->name));
            //bug 41928
            $bean->load_relationship("contacts");
            $contact_ids = $bean->contacts->get();
            $contact = new Contact();
            foreach ($contact_ids as $cid) {
                $contact->retrieve($cid);
                $namePlusEmail .= empty($namePlusEmail) ? "" : ", ";
                $namePlusEmail .= from_html($contact->full_name) . " <" . from_html($contact->emailAddress->getPrimaryAddress($contact)) . ">";
            }
        }
        if ($bean->module_dir == 'KBDocuments') {
            require_once "modules/Emails/EmailUI.php";
            $subject = $bean->kbdocument_name;
            $article_body = str_replace('/cache/images/', $GLOBALS['sugar_config']['site_url'] . '/cache/images/', KBDocument::get_kbdoc_body_without_incrementing_count($bean->id));
            $body = from_html($article_body);
            $attachments = KBDocument::get_kbdoc_attachments_for_newemail($bean->id);
            $attachments = $attachments['attachments'];
        }
        // if
        if ($bean->module_dir == 'Quotes' && isset($data['recordId'])) {
            $quotesData = getQuotesRelatedData($bean, $data);
            global $current_language;
            $namePlusEmail = $quotesData['toAddress'];
            $subject = $quotesData['subject'];
            $body = $quotesData['body'];
            $attachments = $quotesData['attachments'];
            $email_id = $quotesData['email_id'];
        }
        // if
        $ret = array('to_email_addrs' => $namePlusEmail, 'parent_type' => $data['parent_type'], 'parent_id' => $data['parent_id'], 'parent_name' => $parentName, 'subject' => $subject, 'body' => $body, 'attachments' => $attachments, 'email_id' => $email_id);
    } else {
        if (isset($_REQUEST['ListView'])) {
            $email = new Email();
            $namePlusEmail = $email->getNamePlusEmailAddressesForCompose($_REQUEST['action_module'], explode(",", $_REQUEST['uid']));
            $ret = array('to_email_addrs' => $namePlusEmail);
        } else {
            if (isset($data['replyForward'])) {
                require_once "modules/Emails/EmailUI.php";
                $ret = array();
                $ie = new InboundEmail();
                $ie->email = new Email();
                $ie->email->email2init();
                $replyType = $data['reply'];
                $email_id = $data['record'];
                $ie->email->retrieve($email_id);
                $emailType = "";
                if ($ie->email->type == 'draft') {
                    $emailType = $ie->email->type;
                }
                $ie->email->from_addr = $ie->email->from_addr_name;
                $ie->email->to_addrs = to_html($ie->email->to_addrs_names);
//.........这里部分代码省略.........

/** Returns the URL for Basic and Advance Search
 ** Added to fix the issue 4600
 **/
function getBasic_Advance_SearchURL()
{
    $url = '';
    if ($_REQUEST['searchtype'] == 'BasicSearch') {
        $url .= isset($_REQUEST['query']) ? '&query=' . $_REQUEST['query'] : '';
        $url .= isset($_REQUEST['search_field']) ? '&search_field=' . $_REQUEST['search_field'] : '';
        $url .= isset($_REQUEST['search_text']) ? '&search_text=' . to_html($_REQUEST['search_text']) : '';
        $url .= isset($_REQUEST['searchtype']) ? '&searchtype=' . $_REQUEST['searchtype'] : '';
        $url .= isset($_REQUEST['type']) ? '&type=' . $_REQUEST['type'] : '';
    }
    if ($_REQUEST['searchtype'] == 'advance') {
        $url .= isset($_REQUEST['query']) ? '&query=' . $_REQUEST['query'] : '';
        $count = $_REQUEST['search_cnt'];
        for ($i = 0; $i < $count; $i++) {
            $url .= isset($_REQUEST['Fields' . $i]) ? '&Fields' . $i . '=' . stripslashes(str_replace("'", "", $_REQUEST['Fields' . $i])) : '';
            $url .= isset($_REQUEST['Condition' . $i]) ? '&Condition' . $i . '=' . $_REQUEST['Condition' . $i] : '';
            $url .= isset($_REQUEST['Srch_value' . $i]) ? '&Srch_value' . $i . '=' . to_html($_REQUEST['Srch_value' . $i]) : '';
        }
        $url .= isset($_REQUEST['searchtype']) ? '&searchtype=' . $_REQUEST['searchtype'] : '';
        $url .= isset($_REQUEST['search_cnt']) ? '&search_cnt=' . $_REQUEST['search_cnt'] : '';
        $url .= isset($_REQUEST['matchtype']) ? '&matchtype=' . $_REQUEST['matchtype'] : '';
    }
    return $url;
}

function trace_to_html($trace)
{
    $result = "";
    foreach ($trace as $step) {
        //arguments
        $args = array();
        if (isset($step['args'])) {
            foreach ($step['args'] as $arg) {
                $args[] = to_html($arg);
            }
        }
        $args = implode(", ", $args);
        //the rest
        if (array_key_exists("file", $step)) {
            $file = $step["file"];
        } else {
            $file = "Unknown file";
        }
        if (array_key_exists("line", $step)) {
            $line = $step["line"];
        } else {
            $line = "?";
        }
        if (array_key_exists("function", $step)) {
            $func = $step["function"];
        } else {
            $func = "Unknown Function";
        }
        //create message
        $step_message = "";
        $step_message .= $func . "({$args})<br>";
        $step_message .= "&nbsp;&nbsp;&nbsp;&nbsp;" . html_escape(basename($file)) . " (" . $line . ")<br>";
        $step_message .= "<br>";
        //store it
        $result .= $step_message;
    }
    return $result;
}

    ?>
&#&#&#
<?php 
}
?>
<form name="massdelete" method="POST" id="massdelete">
	<input name='search_url' id="search_url" type='hidden' value='<?php 
echo $this->_tpl_vars['SEARCH_URL'];
?>
'>
	<input name="idlist" id="idlist" type="hidden">
	<input name="change_owner" type="hidden">
	<input name="change_status" type="hidden">
	<input name="action" type="hidden">
	<input name="where_export" type="hidden" value="<?php 
echo to_html($_SESSION['export_where']);
?>
">
	<input name="step" type="hidden">
	<input name="allids" type="hidden" id="allids" value="<?php 
echo $this->_tpl_vars['ALLIDS'];
?>
">
	<input name="selectedboxes" id="selectedboxes" type="hidden" value="<?php 
echo $this->_tpl_vars['SELECTEDIDS'];
?>
">
	<input name="allselectedboxes" id="allselectedboxes" type="hidden" value="<?php 
echo $this->_tpl_vars['ALLSELECTEDIDS'];
?>
">