PHP Generic::secure方法代码示例

 function __construct()
 {
     // Only allow guests to view this page
     parent::guestOnly();
     /* Has the admin disabled user registrations? */
     $disable = parent::getOption('disable-registrations-enable');
     if ($disable) {
         $this->error = sprintf('<div class="alert alert-block alert-error">%s</div>', _('<h4 class="alert-heading">Registrations disabled.</h4><p>Already have an account? <a href="login.php">Sign in here</a>!</p>'));
         parent::displayMessage($this->error, true);
     }
     $this->use_emails = parent::getOption('email-as-username-enable');
     $this->username_type = $this->use_emails ? 'email' : 'username';
     // jQuery form validation
     parent::checkExists();
     // Generate a unique token for security purposes
     parent::generateToken();
     // Has the form been submitted?
     if (!empty($_POST)) {
         // Sign up form post data
         foreach ($_POST as $field => $value) {
             $this->settings[$field] = parent::secure($value);
         }
         $this->process();
     }
     if (isset($_GET['new_social'])) {
         $this->error = sprintf('<div class="alert alert-success">%s</div>', _('We don\'t see you as a registered user. Perhaps you\'d like to sign up :)'));
     }
     parent::displayMessage($this->error, false);
 }

 function __construct()
 {
     // Assign their username to a variable
     if (isset($_SESSION['jigowatt']['username'])) {
         $this->user = $_SESSION['jigowatt']['username'];
     }
     // Are they clicking from an email?
     if (isset($_GET['key'])) {
         $this->key = parent::secure($_GET['key']);
         $this->getKey();
         // Do they want the key resent?
     } else {
         if (isset($_GET['resend']) && $_GET['resend'] == '1') {
             $this->resendKey();
             // Are they already signed in without a key?
         } else {
             if (isset($this->user) && !isset($this->key)) {
                 $this->signedIn();
             } else {
                 header('location: home.php');
                 exit;
             }
         }
     }
     // Display any errors
     parent::displayMessage($this->error, false);
 }

 function __construct()
 {
     if (isset($_POST['searchUsers'])) {
         $this->searchUsers();
         exit;
     }
     // jQuery form validation
     parent::checkExists();
     if (isset($_POST['add_user'])) {
         $this->name = parent::secure($_POST['name']);
         $this->username = parent::secure($_POST['username']);
         $this->email = parent::secure($_POST['email']);
         $this->password = substr(md5(rand() . rand()), 0, 6);
         // Confirm all details are correct
         $this->verify();
         // Create the user
         $this->adduser();
         if (!empty($this->error)) {
             parent::displayMessage($this->error);
         } else {
             echo $this->result;
         }
         exit;
     }
 }

 private function grabCurrentUser()
 {
     $this->id = parent::secure($_GET['uid']);
     $params = array(':user_id' => $this->id);
     $stmt = parent::query("SELECT user_id, user_level, restricted, username, name, email FROM login_users WHERE user_id = :user_id;", $params);
     if ($stmt->rowCount() < 1) {
         parent::displayMessage("<div class='alert alert-danger'>" . _('No such user!') . "</div>");
     }
     foreach ($stmt->fetch(PDO::FETCH_ASSOC) as $field => $value) {
         $this->options[$field] = $value;
     }
 }

 function __construct()
 {
     // Once the form has been processed
     if (!empty($_POST)) {
         foreach ($_POST as $key => $value) {
             $this->options[$key] = parent::secure($value);
         }
         // Validate fields
         $this->validate();
         // Process form
         echo empty($this->error) ? $this->process() : $this->error;
         exit;
     }
 }

 function __construct()
 {
     // jQuery form validation
     parent::checkExists();
     if (isset($_POST['searchLevels'])) {
         $this->searchLevels();
         exit;
     }
     if (isset($_POST['add_level'])) {
         $this->auth = parent::secure($_POST['auth']);
         $this->level = parent::secure($_POST['level']);
         // Confirm all details are correct
         $this->verify();
         // Create the level
         $this->addlevel();
     }
 }

 function __construct()
 {
     // Save level and auth
     if (!empty($_GET['lid'])) {
         $this->retrieveInfo();
     }
     if (isset($_POST['do_edit'])) {
         foreach ($_POST as $key => $value) {
             $this->options[$key] = parent::secure($value);
         }
         $this->options['level_disabled'] = !empty($_POST['disable']) ? 'checked' : '';
         $this->options['welcome_email'] = !empty($_POST['welcome_email']) ? 'checked' : '';
         // Validate fields
         $this->validate();
     }
     if (!empty($this->error)) {
         parent::displayMessage("<div class='alert alert-warning'>{$this->error}</div>", false);
     }
     if (!empty($this->result)) {
         parent::displayMessage("<div class='alert alert-success'>{$this->result}</div>", false);
     }
 }

 private function retrieveFields()
 {
     $params = array(':user_id' => $this->user_id);
     $stmt = parent::query("SELECT `user_id`, `username`, `name`, `email` FROM `accounts` WHERE `user_id` = :user_id;", $params);
     if ($stmt->rowCount() < 1) {
         $this->error = sprintf('<div class="alert alert-warning">%s</div>', _('Sorry, that user does not exist.'));
         parent::displayMessage($this->error, true);
         return false;
     }
     foreach ($stmt->fetch(PDO::FETCH_ASSOC) as $field => $value) {
         $this->settings[$field] = parent::secure($value);
     }
 }

 public function modal_process()
 {
     if (isset($_POST['usernamemail'])) {
         $usernamemail = parent::secure($_POST['usernamemail']);
         // The input field wasn't filled out
         if (empty($usernamemail)) {
             $this->error = '<div class="alert alert-danger">' . _('Please enter your username or email address.') . '</div>';
         } else {
             $params = array(':usernameEmail' => $usernamemail);
             $stmt = parent::query("SELECT * FROM `login_users` WHERE `username` = :usernameEmail OR `email` = :usernameEmail;", $params);
             if ($stmt->rowCount() > 0) {
                 $row = $stmt->fetch();
                 // Reuse the email variable.
                 $email = $row['email'];
                 // Check that a recovery key doesn't already exist, if it does, remove it.
                 $params = array(':email' => $email);
                 $stmt = parent::query("SELECT * FROM `login_confirm` WHERE `email` = :email AND `type` = 'forgot_pw';", $params);
                 if ($stmt->rowCount() > 0) {
                     parent::query("DELETE FROM `login_confirm` WHERE email = :email AND `type` = 'forgot_pw';", $params);
                 }
                 // Generate a new recovery key
                 $key = md5(uniqid(mt_rand(), true));
                 $params = array(':email' => $email, ':key' => $key);
                 parent::query("INSERT INTO `login_confirm` (`email`, `key`, `type`) VALUES (:email, :key, 'forgot_pw');", $params);
                 $shortcodes = array('site_address' => SITE_PATH, 'full_name' => $row['name'], 'username' => $row['username'], 'reset' => SITE_PATH . "forgot.php?key={$key}");
                 $subj = parent::getOption('email-forgot-subj');
                 $msg = parent::getOption('email-forgot-msg');
                 // Send an email confirming their password reset
                 if (!parent::sendEmail($email, $subj, $msg, $shortcodes)) {
                     $this->error = '<div class="alert alert-danger">' . _('ERROR. Mail not sent') . '</div>';
                 } else {
                     $this->error = "<div class='alert alert-success'>" . _('We\'ve emailed you password reset instructions. Check your email.') . "</div>";
                 }
             } else {
                 $this->error = '<div class="alert alert-danger">' . _('This account does not exist.') . '</div>';
             }
         }
         echo $this->error;
     }
 }