PHP Security::encodeHTML方法代码示例

 /**
  * the html to select colorset of the skin
  * @return void
  */
 function getCommunicationAdminColorset()
 {
     $skin = Context::get('skin');
     $type = Context::get('type') == 'P' ? 'P' : 'M';
     Context::set('type', $type);
     if ($type == 'P') {
         $dir = 'skins';
     } else {
         $dir = 'm.skins';
     }
     if (!$skin) {
         $tpl = "";
     } else {
         $oModuleModel = getModel('module');
         $skin_info = $oModuleModel->loadSkinInfo($this->module_path, $skin, $dir);
         Context::set('skin_info', $skin_info);
         $oModuleModel = getModel('module');
         $communication_config = $oModuleModel->getModuleConfig('communication');
         if (!$communication_config->colorset) {
             $communication_config->colorset = "white";
         }
         Context::set('communication_config', $communication_config);
         $security = new Security();
         $security->encodeHTML('skin_info.colorset..title', 'skin_info.colorset..name');
         $security->encodeHTML('skin_info.colorset..name');
         $oTemplate = TemplateHandler::getInstance();
         $tpl = $oTemplate->compile($this->module_path . 'tpl', 'colorset_list');
     }
     $this->add('tpl', $tpl);
     $this->add('type', $type);
 }

 function dispNcenterliteAdminSkinsetting()
 {
     $oModuleModel = getModel('module');
     $oLayoutModel = getModel('layout');
     $oNcenterliteModel = getModel('ncenterlite');
     $config = $oNcenterliteModel->getConfig();
     Context::set('config', $config);
     $layout_list = $oLayoutModel->getLayoutList();
     Context::set('layout_list', $layout_list);
     $mobile_layout_list = $oLayoutModel->getLayoutList(0, 'M');
     Context::set('mlayout_list', $mobile_layout_list);
     $skin_list = $oModuleModel->getSkins($this->module_path);
     Context::set('skin_list', $skin_list);
     $mskin_list = $oModuleModel->getSkins($this->module_path, "m.skins");
     Context::set('mskin_list', $mskin_list);
     if (!$skin_list[$config->skin]) {
         $config->skin = 'default';
     }
     Context::set('colorset_list', $skin_list[$config->skin]->colorset);
     if (!$mskin_list[$config->mskin]) {
         $config->mskin = 'default';
     }
     Context::set('mcolorset_list', $mskin_list[$config->mskin]->colorset);
     $security = new Security();
     $security->encodeHTML('config..');
     $security->encodeHTML('skin_list..title');
     $security->encodeHTML('colorset_list..name', 'colorset_list..title');
 }

 /**
  * Display output list (administrative)
  * @return void
  */
 function dispTrackbackAdminList()
 {
     // Wanted set
     $oModuleModel =& getModel('module');
     $config = $oModuleModel->getModuleConfig('trackback');
     Context::set('config', $config);
     // Options to get a list
     $args->page = Context::get('page');
     // / "Page
     $args->list_count = 30;
     // / "One page of posts to show the
     $args->page_count = 10;
     // / "Number of pages that appear in the page navigation
     $args->sort_index = 'list_order';
     // / "Sorting values
     $args->module_srl = Context::get('module_srl');
     // Get a list
     $oTrackbackAdminModel =& getAdminModel('trackback');
     $output = $oTrackbackAdminModel->getTotalTrackbackList($args);
     // To write to a template parameter settings
     Context::set('total_count', $output->total_count);
     Context::set('total_page', $output->total_page);
     Context::set('page', $output->page);
     Context::set('trackback_list', $output->data);
     Context::set('page_navigation', $output->page_navigation);
     //Security
     $security = new Security();
     $security->encodeHTML('config.');
     $security->encodeHTML('trackback_list..');
     // Set a template
     $this->setTemplatePath($this->module_path . 'tpl');
     $this->setTemplateFile('trackback_list');
 }

 /**
  * configuration to manage messages and friends
  * @return void
  */
 function dispCommunicationAdminConfig()
 {
     // Creating an object
     $oEditorModel = getModel('editor');
     $oModuleModel = getModel('module');
     $oLayoutModel = getModel('layout');
     $oCommunicationModel = getModel('communication');
     // get the configurations of communication module
     Context::set('config', $oCommunicationModel->getConfig());
     // get a list of layout
     Context::set('layout_list', $oLayoutModel->getLayoutList());
     // get a list of editor skins
     Context::set('editor_skin_list', $oEditorModel->getEditorSkinList());
     // get a list of communication skins
     Context::set('skin_list', $oModuleModel->getSkins($this->module_path));
     // get a list of communication skins
     Context::set('mobile_skin_list', $oModuleModel->getSkins($this->module_path, 'm.skins'));
     // Get a layout list
     $layout_list = $oLayoutModel->getLayoutList();
     Context::set('layout_list', $layout_list);
     $mlayout_list = $oLayoutModel->getLayoutList(0, 'M');
     Context::set('mlayout_list', $mlayout_list);
     $security = new Security();
     $security->encodeHTML('config..');
     $security->encodeHTML('layout_list..');
     $security->encodeHTML('editor_skin_list..');
     $security->encodeHTML('skin_list..title');
     $security->encodeHTML('mobile_skin_list..title');
     $oMemberModel = getModel('member');
     $group_list = $oMemberModel->getGroups($this->site_srl);
     Context::set('group_list', $group_list);
     // specify a template
     $this->setTemplatePath($this->module_path . 'tpl');
     $this->setTemplateFile('index');
 }

 function dispNcenterliteAdminConfig()
 {
     $oModuleModel = getModel('module');
     $oNcenterliteModel = getModel('ncenterlite');
     $oLayoutModel = getModel('layout');
     $config = $oNcenterliteModel->getConfig();
     Context::set('config', $config);
     $layout_list = $oLayoutModel->getLayoutList();
     Context::set('layout_list', $layout_list);
     $mobile_layout_list = $oLayoutModel->getLayoutList(0, 'M');
     Context::set('mlayout_list', $mobile_layout_list);
     $skin_list = $oModuleModel->getSkins($this->module_path);
     Context::set('skin_list', $skin_list);
     $mskin_list = $oModuleModel->getSkins($this->module_path, "m.skins");
     Context::set('mskin_list', $mskin_list);
     if (!$skin_list[$config->skin]) {
         $config->skin = 'default';
     }
     Context::set('colorset_list', $skin_list[$config->skin]->colorset);
     if (!$mskin_list[$config->mskin]) {
         $config->mskin = 'default';
     }
     Context::set('mcolorset_list', $mskin_list[$config->mskin]->colorset);
     $security = new Security();
     $security->encodeHTML('config..');
     $security->encodeHTML('skin_list..title');
     $security->encodeHTML('colorset_list..name', 'colorset_list..title');
     $mid_list = $oModuleModel->getMidList(null, array('module_srl', 'mid', 'browser_title', 'module'));
     Context::set('mid_list', $mid_list);
     // 사용환경정보 전송 확인
     $ncenterlite_module_info = $oModuleModel->getModuleInfoXml('ncenterlite');
     $agreement_file = FileHandler::getRealPath(sprintf('%s%s.txt', './files/ncenterlite/ncenterlite-', $ncenterlite_module_info->version));
     $agreement_ver_file = FileHandler::getRealPath(sprintf('%s%s.txt', './files/ncenterlite/ncenterlite_ver-', $ncenterlite_module_info->version));
     if (file_exists($agreement_file)) {
         $agreement = FileHandler::readFile($agreement_file);
         Context::set('_ncenterlite_env_agreement', $agreement);
         $agreement_ver = FileHandler::readFile($agreement_ver_file);
         if ($agreement == 'Y') {
             $_ncenterlite_iframe_url = 'http://sosifam.com/index.php?mid=ncenterlite_iframe';
             if (!$agreement_ver) {
                 $_host_info = urlencode($_SERVER['HTTP_HOST']) . '-NC' . $ncenterlite_module_info->version . '-PHP' . phpversion() . '-XE' . __XE_VERSION__;
             }
             Context::set('_ncenterlite_iframe_url', $_ncenterlite_iframe_url . '&_host=' . $_host_info);
             Context::set('ncenterlite_module_info', $ncenterlite_module_info);
         }
         FileHandler::writeFile($agreement_ver_file, 'Y');
     } else {
         Context::set('_ncenterlite_env_agreement', 'NULL');
     }
 }

 function init()
 {
     $oTimelineModel = getModel('timeline');
     $module_srl = Context::get('module_srl');
     $timeline_info = $oTimelineModel->getTimelineInfo($module_srl);
     // 타임라인 게시판 정보 유효성 검증
     if ($timeline_info) {
         $standard_date = sscanf($timeline_info->standard_date, '%04d%02d%02d%02d%02d%02d');
         $limit_date = sscanf($timeline_info->limit_date, '%04d%02d%02d%02d%02d%02d');
         Context::set('timeline_info', $timeline_info);
         Context::set('attach_info', $timeline_info->attach_info);
         Context::set('standard_date', $standard_date);
         Context::set('limit_date', $limit_date);
     } else {
         Context::set('module_srl', '');
     }
     // 모듈 분류 불러오기
     $oModuleModel = getModel('module');
     $module_category = $oModuleModel->getModuleCategories();
     Context::set('module_category', $module_category);
     $security = new Security();
     $security->encodeHTML('module_category..');
     // 모듈 설치 여부 불러오기
     $is_installed = !$this->checkUpdate();
     Context::set('is_installed', $is_installed);
     // 템플릿 경로 설정
     $this->setTemplatePath($this->module_path . 'tpl');
 }

 function init()
 {
     // Get the member configuration
     $oMemberModel = getModel('member');
     $this->member_config = $oMemberModel->getMemberConfig();
     Context::set('member_config', $this->member_config);
     $oSecurity = new Security();
     $oSecurity->encodeHTML('member_config.signupForm..');
     $mskin = $this->member_config->mskin;
     // Set the template path
     if (!$mskin) {
         $mskin = 'default';
         $template_path = sprintf('%sm.skins/%s', $this->module_path, $mskin);
     } else {
         $template_path = sprintf('%sm.skins/%s', $this->module_path, $mskin);
     }
     // if member_srl exists, set memberInfo
     $member_srl = Context::get('member_srl');
     if ($member_srl) {
         $oMemberModel = getModel('member');
         $this->memberInfo = $oMemberModel->getMemberInfoByMemberSrl($member_srl);
         if (!$this->memberInfo) {
             Context::set('member_srl', '');
         } else {
             Context::set('member_info', $this->memberInfo);
         }
     }
     $this->setTemplatePath($template_path);
     $oLayoutModel = getModel('layout');
     $layout_info = $oLayoutModel->getLayout($this->member_config->mlayout_srl);
     if ($layout_info) {
         $this->module_info->mlayout_srl = $this->member_config->mlayout_srl;
         $this->setLayoutPath($layout_info->path);
     }
 }

 function init()
 {
     $oSecurity = new Security();
     $oSecurity->encodeHTML('document_srl', 'comment_srl', 'vid', 'mid', 'page', 'category', 'search_target', 'search_keyword', 'sort_index', 'order_type', 'trackback_srl');
     if ($this->module_info->list_count) {
         $this->list_count = $this->module_info->list_count;
     }
     if ($this->module_info->search_list_count) {
         $this->search_list_count = $this->module_info->search_list_count;
     }
     if ($this->module_info->page_count) {
         $this->page_count = $this->module_info->page_count;
     }
     $this->except_notice = $this->module_info->except_notice == 'N' ? false : true;
     // $this->_getStatusNameListecret option backward compatibility
     $oDocumentModel = getModel('document');
     $statusList = $this->_getStatusNameList($oDocumentModel);
     if (isset($statusList['SECRET'])) {
         $this->module_info->secret = 'Y';
     }
     // use_category <=1.5.x, hide_category >=1.7.x
     $count_category = count($oDocumentModel->getCategoryList($this->module_info->module_srl));
     if ($count_category) {
         if ($this->module_info->hide_category) {
             $this->module_info->use_category = $this->module_info->hide_category == 'Y' ? 'N' : 'Y';
         } else {
             if ($this->module_info->use_category) {
                 $this->module_info->hide_category = $this->module_info->use_category == 'Y' ? 'N' : 'Y';
             } else {
                 $this->module_info->hide_category = 'N';
                 $this->module_info->use_category = 'Y';
             }
         }
     } else {
         $this->module_info->hide_category = 'Y';
         $this->module_info->use_category = 'N';
     }
     /**
      * check the consultation function, if the user is admin then swich off consultation function
      * if the user is not logged, then disppear write document/write comment./ view document
      **/
     if ($this->module_info->consultation == 'Y' && !$this->grant->manager) {
         $this->consultation = true;
         if (!Context::get('is_logged')) {
             $this->grant->list = $this->grant->write_document = $this->grant->write_comment = $this->grant->view = false;
         }
     } else {
         $this->consultation = false;
     }
     $oDocumentModel = getModel('document');
     $extra_keys = $oDocumentModel->getExtraKeys($this->module_info->module_srl);
     Context::set('extra_keys', $extra_keys);
     $template_path = sprintf("%sm.skins/%s/", $this->module_path, $this->module_info->mskin);
     if (!is_dir($template_path) || !$this->module_info->mskin) {
         $this->module_info->mskin = 'default';
         $template_path = sprintf("%sm.skins/%s/", $this->module_path, $this->module_info->mskin);
     }
     $this->setTemplatePath($template_path);
     Context::addJsFilter($this->module_path . 'tpl/filter', 'input_password.xml');
 }

 /**
  * @brief Spam Filter configurations
  *        Output the list of banned IPs and words
  **/
 function dispSpamfilterAdminSetting()
 {
     // Get configurations (using module model object)
     $oModuleModel =& getModel('module');
     $config = $oModuleModel->getModuleConfig('spamfilter');
     // Get the list of denied IP addresses and words
     $oSpamFilterModel =& getModel('spamfilter');
     $ip_list = $oSpamFilterModel->getDeniedIPList();
     $word_list = $oSpamFilterModel->getDeniedWordList();
     Context::set('config', $config);
     Context::set('ip_list', $ip_list);
     Context::set('word_list', $word_list);
     $security = new Security();
     $security->encodeHTML('word_list..word');
     $security->encodeHTML('ip_list..');
     // Set a template file
     $this->setTemplateFile('index');
 }

 /**
  * In case an administrator page has been initialized
  *
  * @return Object
  */
 function dispRssAdminIndex()
 {
     $oModuleModel = getModel('module');
     $rss_config = $oModuleModel->getModulePartConfigs('rss');
     $total_config = $oModuleModel->getModuleConfig('rss');
     if (!$total_config) {
         $total_config = new stdClass();
     }
     $oRssModel = getModel('rss');
     if ($rss_config) {
         $feed_config = array();
         foreach ($rss_config as $module_srl => $config) {
             if ($config) {
                 $module_info = $oModuleModel->getModuleInfoByModuleSrl($module_srl);
                 $columnList = array('sites.domain');
                 $site = $oModuleModel->getSiteInfo($module_info->site_srl, $columnList);
                 if (!strpos($site->domain, '.')) {
                     $vid = $site->domain;
                 } else {
                     $site = null;
                 }
                 if ($site) {
                     $feed_config[$module_srl]['url'] = $oRssModel->getModuleFeedUrl($vid, $module_info->mid, 'rss');
                 }
                 $feed_config[$module_srl]['mid'] = $module_info->mid;
                 $feed_config[$module_srl]['open_feed'] = $config->open_rss;
                 $feed_config[$module_srl]['open_total_feed'] = $config->open_total_feed;
                 $feed_config[$module_srl]['feed_description'] = $config->feed_description;
             }
         }
     }
     if (!$total_config->feed_document_count) {
         $total_config->feed_document_count = 15;
     }
     $total_config->url = $oRssModel->getModuleFeedUrl(NULL, '', 'rss', true);
     Context::set('feed_config', $feed_config);
     Context::set('total_config', $total_config);
     $security = new Security();
     $security->encodeHTML('feed_config..mid', 'feed_config..url');
     $security->encodeHTML('total_config..');
     $this->setTemplatePath($this->module_path . 'tpl');
     $this->setTemplateFile('rss_admin_index');
 }

 function init()
 {
     $oTextyleHubModel =& getModel('textylehub');
     $this->module_info = $oTextyleHubModel->getTextyleHubInfo();
     Context::set('module_info', $this->module_info);
     Context::set('module_srl', $this->module_info->module_srl);
     $this->setTemplatePath($this->module_path . 'tpl');
     $security = new Security();
     $security->encodeHTML('module_info.');
 }

 /**
  * mSkin setting page for the module
  * @param $module_srl sequence of module
  * @return string The HTML code
  */
 function _getMobileexSkinHTML($module_srl)
 {
     $xe_version = preg_match('/^1.5/', __ZBXE_VERSION__) ? '5' : '4';
     $oModuleModel =& getModel('module');
     $module_info = $oModuleModel->getModuleInfoByModuleSrl($module_srl);
     if (!$module_info) {
         return;
     }
     $skin = $module_info->mskin;
     $module_path = './modules/' . $module_info->module;
     // Get XML information of the skin and skin sinformation set in DB
     $skin_info = $oModuleModel->loadSkinInfo($module_path, $skin, 'm.skins');
     $skin_vars = $this->getMobileexMobileSkinVars($module_srl);
     if (count($skin_info->extra_vars)) {
         foreach ($skin_info->extra_vars as $key => $val) {
             $group = $val->group;
             $name = $val->name;
             $type = $val->type;
             if ($skin_vars[$name]) {
                 $value = $skin_vars[$name]->value;
             } else {
                 $value = '';
             }
             if ($type == "checkbox") {
                 $value = $value ? unserialize($value) : array();
             }
             $skin_info->extra_vars[$key]->value = $value;
         }
     }
     Context::set('xe_version', $xe_version);
     Context::set('module_info', $module_info);
     Context::set('mid', $module_info->mid);
     Context::set('skin_info', $skin_info);
     Context::set('skin_vars', $skin_vars);
     //Security
     $security = new Security();
     $security->encodeHTML('mid');
     $security->encodeHTML('module_info.browser_title');
     $security->encodeHTML('skin_info...');
     $oTemplate =& TemplateHandler::getInstance();
     return $oTemplate->compile($this->module_path . 'tpl', 'mskin_config');
 }

 /**
  * @brief Output the list of banned words
  */
 function dispSpamfilterAdminDeniedWordList()
 {
     // Get the list of denied IP addresses and words
     $oSpamFilterModel = getModel('spamfilter');
     $word_list = $oSpamFilterModel->getDeniedWordList();
     Context::set('word_list', $word_list);
     $security = new Security();
     $security->encodeHTML('word_list..word');
     // Set a template file
     $this->setTemplateFile('denied_word_list');
 }

 public function dispSyndicationAdminConfig()
 {
     $oModuleModel = getModel('module');
     $module_config = $oModuleModel->getModuleConfig('syndication');
     if (!$module_config->target_services) {
         $module_config->target_services = array();
     }
     foreach ($this->services as $key => $val) {
         unset($obj);
         $obj = new stdClass();
         $obj->service = $key;
         $obj->ping = $val;
         $obj->selected = in_array($key, $module_config->target_services) ? true : false;
         $services[] = $obj;
     }
     Context::set('services', $services);
     if (!$module_config->site_url) {
         $module_config->site_url = Context::getDefaultUrl() ? Context::getDefaultUrl() : getFullUrl();
     }
     Context::set('site_url', preg_replace('/^(http|https):\\/\\//i', '', $module_config->site_url));
     if (!$module_config->year) {
         $module_config->year = date("Y");
     }
     Context::set('year', $module_config->year);
     $output = executeQueryArray('syndication.getExceptModules');
     $except_module_list = array();
     if ($output->data && count($output->data) > 0) {
         foreach ($output->data as $item) {
             $except_module_list[] = $item;
         }
     }
     Context::set('except_module', $except_module_list);
     //Security
     $security = new Security();
     $security->encodeHTML('services..service', 'except_module..ping');
     $security->encodeHTML('except_module..mid', 'except_module..browser_title');
     $this->setTemplatePath($this->module_path . 'tpl');
     $this->setTemplateFile('config');
 }

 public function dispSyndicationAdminConfig()
 {
     $oModuleModel = getModel('module');
     $module_config = $oModuleModel->getModuleConfig('syndication');
     $oSyndicationModel = getModel('syndication');
     Context::set('ping_log', $oSyndicationModel->getResentPingLog());
     if (!$module_config->syndication_use) {
         $module_config->syndication_use = 'Y';
     }
     if (!$module_config->site_url) {
         $module_config->site_url = Context::getDefaultUrl() ? Context::getDefaultUrl() : getFullUrl();
     }
     if (!$module_config->year) {
         $module_config->year = date("Y");
     }
     if (!isset($module_config->syndication_password)) {
         $module_config->syndication_password = uniqid();
     }
     Context::set('syndication_use', $module_config->syndication_use);
     Context::set('site_url', preg_replace('/^(http|https):\\/\\//i', '', $module_config->site_url));
     Context::set('year', $module_config->year);
     Context::set('syndication_token', $module_config->syndication_token);
     Context::set('syndication_password', $module_config->syndication_password);
     $output = executeQueryArray('syndication.getExceptModules');
     $except_module_list = array();
     if ($output->data && count($output->data) > 0) {
         foreach ($output->data as $item) {
             $except_module_list[] = $item;
         }
     }
     Context::set('except_module', $except_module_list);
     //Security
     $security = new Security();
     $security->encodeHTML('services..service', 'except_module..ping');
     $security->encodeHTML('except_module..mid', 'except_module..browser_title');
     $this->setTemplatePath($this->module_path . 'tpl');
     $this->setTemplateFile('config');
 }