PHP functions::q方法代码示例

 public function __construct()
 {
     $this->folder = functions::q($_POST['id']);
     $this->act = functions::q($_POST['op']);
     $this->db = new DataBase();
     $this->f = new functions();
     $this->image = new SimpleImage();
     if ($this->act == 'upload') {
         $name = $_FILES['uploadfile']['name'];
         $exp = explode('.', $name);
         $this->ext = $exp[count($exp) - 1];
         $filetypes = array('jpg', 'gif', 'bmp', 'png', 'JPG', 'BMP', 'GIF', 'PNG', 'jpeg', 'JPEG');
         if (!in_array($this->ext, $filetypes)) {
             die("wrong_format");
         } else {
             $this->photoName();
             if ($this->getNum() < $this->_count) {
                 $this->uploadFile();
             } else {
                 die("Максимальное количество загружаемых фотографий в объявление не должно превышать 6 шт.");
             }
         }
     } elseif ($this->act == 'delete') {
         $this->delete();
     }
 }

function applyStatus($id, $act)
{
    if ($act == 'top') {
        $sql = "UPDATE board SET top_time='" . (14 * 86400 + time()) . "' WHERE id='{$id}'";
    } elseif ($act == 'color') {
        $sql = "UPDATE board SET is_color='1' WHERE id='" . functions::q($id) . "'";
    } elseif ($act == 'important') {
        $sql = "UPDATE board SET is_important='1' WHERE id='" . functions::q($id) . "'";
    }
    return mysql_query($sql);
}

    ini_set('display_errors', 1);
    ini_set('display_startup_errors', 1);
    error_reporting(-1);
}
define("HOST", $_SERVER['HTTP_HOST']);
define("HOME", "http://" . $_SERVER['HTTP_HOST'] . "/");
define("URL", "http://" . HOST . $_SERVER['REQUEST_URI']);
define("DIR", dirname(__FILE__));
include_once "classes/functions.php";
if (isset($_GET['r'])) {
    if ($db->result("SELECT COUNT(*) FROM region WHERE href = '" . functions::q($_GET['r']) . "'")) {
        //var_dump($_GET['r']);
        define("REGION", $_GET['r']);
        if (isset($_GET['cat_href'])) {
            define("CATEGORY", $_GET['cat_href']);
            if ($db->result("SELECT COUNT(*) FROM categories WHERE href = '" . functions::q(CATEGORY) . "'") == 0) {
                header("Location: " . HOME . "error/");
            }
        } else {
            define("CATEGORY", "");
        }
    } elseif ($db->result("SELECT COUNT(*) FROM categories WHERE href = '" . functions::q($_GET['r']) . "'")) {
        define("CATEGORY", $_GET['r']);
        define("REGION", "");
    } else {
        header("Location: " . HOME . "error/");
    }
} else {
    define("REGION", "");
    define("CATEGORY", "");
}

 function ____changeCatMobile($cat)
 {
     $info = "";
     $errors = "";
     $required = array("name", "href", "title");
     if (count($_POST) > 0) {
         foreach ($_POST as $k => $v) {
             if (in_array($k, $required) && $v == "") {
                 $errors = "<div class=\"alert alert-danger\" role=\"alert\">Не заполнены обязательные поля</div>";
             }
             $values .= "{$k} = '" . functions::q($v) . "', ";
         }
         $values = substr($values, 0, strlen($values) - 2);
         if (!preg_match("([A-Za-z0-9_\\-]+)", $_POST['href'])) {
             $info .= "<div class=\"alert alert-danger\" role=\"alert\">Неправильный URL категории</div>";
         } elseif (!empty($errors)) {
             $info .= $errors;
         } elseif ($this->db->result("SELECT COUNT(*) FROM categories WHERE href = '" . functions::q($_POST['href']) . "'") > 1) {
             $info .= "<div class=\"alert alert-danger\" role=\"alert\">Категория с таким URL уже существует</div>";
         } elseif ($this->db->query("UPDATE categories SET {$values} WHERE id = '" . functions::q($cat) . "'")) {
             $info .= "<div class=\"alert alert-success\" role=\"alert\">Категория успешно изменена</div>";
         } else {
             $info .= "<div class=\"alert alert-danger\" role=\"alert\">Произошла ошибка</div>";
         }
     }
     echo $info;
     echo "<h4>Изменить категорию</h4>";
     $this->db->query("SELECT * FROM categories WHERE id = '" . functions::q($cat) . "'");
     if ($this->db->getNumRows() > 0) {
         echo "<form method='post' action='http://" . HOST . "/" . $_SERVER['REDIRECT_URL'] . "'>";
         while ($cat = mysql_fetch_assoc($this->db->data)) {
             $menu = array('name' => array('Имя категории', 'text'), 'title' => array('Тег title', 'text'), 'h1' => array('Заголовок H1', 'text'), 'href' => array('URL категории', 'text'), 'description' => array('Описание (description)', 'textarea'), 'keywords' => array('Ключивые слова (keywords)', 'textarea'), 'foot_text' => array('Текст внизу', 'textarea'), 'root_id' => array('', 'hidden'), 'visible' => array('Статус', 'select', array('1' => 'Опубликовано', '0' => 'Не опубликовано')));
             $this->getFormMobile($menu, $cat);
             if ($cat['root_id'] == 0) {
                 $this->getSubCategoriesMobile($cat['id'], HOME . "profile/admin/categories/");
             }
             echo '<button type="submit" class="btn btn-success">Изменить категорию</button>';
         }
         echo "</form>";
     } else {
         echo "Категория не найдена";
     }
 }

 if (isset($_GET['act'])) {
     $db->query("SELECT * FROM board WHERE href = '" . functions::q($_GET['act']) . "'");
     $b = $db->returnFirst();
     //if(!$board->getAdmin() || $board->getUserId() != $b['user_id']) exit("У Вас нет прав для редкатирования этого объявления!<br />");
     if ($board->getAdmin() || $board->getUserId() == $b['user_id']) {
         $values = array("title", "city", "autor", "phone", "email", "type", "text", "id_category", "price", "price_t", "address", "photos_id");
         foreach ($values as $v) {
             ${$v} = $b[$v];
         }
         $root_category = $db->result("SELECT root_id FROM categories WHERE id = '" . functions::q($id_category) . "'");
         $root_region = $db->result("SELECT root_id FROM region WHERE href = '" . functions::q($city) . "'");
     }
 } else {
     //$id_category = 0;
     //$root_category = 0;
     $root_category = $db->result("SELECT root_id FROM categories WHERE id = '" . functions::q($id_category) . "'");
     $type = 'S';
     $photos_id = PHOTO_ID;
     if ($board->getUser()) {
         $email = $board->email;
     } else {
         $email = "";
     }
 }
 $view = View::main();
 $view->set('errors', $errors);
 $view->set('FlagAddAdv', $FlagAddAdv);
 $view->set('photos_id', $photos_id);
 $view->set('title', $title);
 $view->set('autor', $autor);
 $view->set('phone', $phone);

 protected function getMorphy($txt = null)
 {
     require_once $_SERVER['DOCUMENT_ROOT'] . '/plugins/phpmorphy/src/common.php';
     $opts = array('storage' => PHPMORPHY_STORAGE_FILE, 'with_gramtab' => false, 'predict_by_suffix' => true, 'predict_by_db' => true);
     // Path to directory where dictionaries located
     $dir = $_SERVER['DOCUMENT_ROOT'] . '/plugins/phpmorphy/dicts/';
     // Create descriptor for dictionary located in $dir directory with russian language
     $dict_bundle = new phpMorphy_FilesBundle($dir, 'rus');
     // Create phpMorphy instance
     try {
         $morphy = new phpMorphy($dict_bundle, $opts);
     } catch (phpMorphy_Exception $e) {
         die('Error occured while creating phpMorphy instance: ' . $e->getMessage());
     }
     $search = $_GET['q'];
     $search = mysql_real_escape_string($search);
     $search = mb_substr($search, 0, 30, 'UTF-8');
     $search = explode(" ", $search);
     $q = '';
     for ($i = 0; $i < count($search); $i++) {
         $ass = $search[$i];
         $ass = mb_strtoupper($ass, 'utf-8');
         $pseudo_root = $morphy->getPseudoRoot($ass);
         if (false === $pseudo_root) {
             $rep = $ass;
         } else {
             $rep = $pseudo_root[0];
         }
         if ($txt == "text") {
             $q = $q . "A.text LIKE '%" . functions::q($rep) . "%' and ";
         } else {
             $q = $q . "A.title LIKE '%" . functions::q($rep) . "%' and ";
         }
     }
     $searchwords = substr($q, 0, strlen($q) - 4);
     return $searchwords;
 }

<?php

include "mysql.php";
include "defines.php";
include "classes/main.php";
$act = empty($_GET['act']) ? "index" : functions::q($_GET['act']);
$array = $db->returnFirst("SELECT * FROM pages WHERE href = '{$act}'");
$board->INFO = $array;
$board->getInfo();
$db->query("SELECT * FROM pages");
$pages = [];
while ($page = mysql_fetch_array($db->data)) {
    $pages[] = $page;
}
$view = View::main();
$view->set('pages', $pages);
$view->render('rules');

 function getInfo($page_id = 'index')
 {
     $replace = array('%CATEGORY%' => $this->search->CATEGORY['name'], '%REGION%' => !empty($this->search->R) ? $this->search->REGION['name'] : "Украина", '%SITE%' => "Market");
     if (empty($this->INFO)) {
         if ($page_id == 'search' && isset($this->search->INFO) && !empty($this->search->INFO)) {
             $result = $this->search->INFO;
         } else {
             $result = $this->db->query("SELECT * FROM options WHERE link = '" . functions::q($page_id) . "'");
             if ($this->db->getNumRows() > 0) {
                 $result = $this->db->returnFirst();
             } else {
                 $result = $this->db->returnFirst("SELECT * FROM options WHERE link = 'default'");
             }
         }
     } else {
         $result = $this->INFO;
     }
     if (is_array($result)) {
         foreach ($result as $k => $v) {
             $result[$k] = str_replace(array_keys($replace), $replace, $v);
         }
     }
     $this->INFO = $result;
 }

 function rememberMobile()
 {
     if (isset($_POST['email'])) {
         if (empty($_POST['email'])) {
             $this->errors .= "E-mail не введен<br />";
         }
         if ($this->db->result("SELECT COUNT(*) FROM users WHERE email = '" . functions::q($_POST['email']) . "'") == 0) {
             $this->errors .= "E-mail не найден в базе<br />";
         }
         if (empty($this->errors)) {
             $this->rememberPassword($_POST['email']);
         } else {
             $this->getRememberFormMobile();
         }
     } else {
         $this->getRememberFormMobile();
     }
 }

    echo json_encode($array);
} elseif (isset($_GET['cat_id'])) {
    $array = array();
    $db->query("SELECT * FROM categories WHERE root_id='" . functions::q($_GET['cat_id']) . "'");
    while ($reg = mysql_fetch_array($db->data)) {
        $array[$reg['id']] = $reg['name'];
    }
    echo json_encode($array);
} elseif (isset($_GET['op']) && $_GET['op'] == 'regions') {
    $board->getAjaxRegions();
} elseif (isset($_GET['op']) && $_GET['op'] == 'phone') {
    $phone = $db->result("SELECT phone FROM board WHERE id = '" . functions::q($_GET['board_id']) . "'");
    if (!empty($phone)) {
        echo $phone;
        $res = $db->query('SELECT ip FROM board_hits WHERE type = \'phone\' AND ip = \'' . functions::q($_SERVER['REMOTE_ADDR']) . "' AND board_id = " . functions::q($_GET['board_id']));
        $ip = mysql_fetch_array($res);
        if (!$ip['ip']) {
            $db->query("INSERT INTO board_hits(type, board_id, ip) VALUES ('phone', " . functions::q($_GET['board_id']) . ", '" . functions::q($_SERVER['REMOTE_ADDR']) . "')");
        }
    } else {
        echo "Нет телефона";
    }
} elseif (isset($_GET['op']) && $_GET['op'] == 'mailmessage') {
    $b = $db->returnFirst("SELECT * FROM board WHERE id = '" . functions::q($_GET['board_id']) . "'");
    $replace = array("%BOARD%" => $b['title'], "%EMAIL%" => $_GET['email'], "%TEXT%" => "<div style='padding: 10px; background: #F5F5F5;'>" . $_GET['text'] . "</div>");
    if ($board->gomail($b['email'], "mailmessage", $replace)) {
        echo "ok";
    } else {
        echo "Неизвестная ошибка!";
    }
}