PHP string::haddslashes方法代码示例

 function dodefault()
 {
     if (!isset($this->post['submit'])) {
         $this->view->assign("relatedoc", $this->setting['relateddoc']);
         $this->view->assign("isrelate", $this->setting['isrelate']);
         $this->view->display("admin_relation");
         exit;
     }
     $isrelate = $this->post['isrelate'];
     $setting = array();
     $relatedoc = trim($this->post['relatedoc']);
     $relatelist = array_unique(explode(';', $relatedoc));
     foreach ($relatelist as $relate) {
         $relate = trim($relate);
         $relate = string::stripscript($relate);
         if (empty($relate)) {
             unset($relate);
         } else {
             $relate = string::haddslashes($relate);
             $relatelists[] = $relate;
         }
     }
     if (count($relatelist) > 10) {
         $this->message($this->view->lang['relatedtitlemore'], 'index.php?admin_relation');
     }
     $setting['relateddoc'] = implode(";", $relatelists);
     $setting['isrelate'] = $isrelate;
     $_ENV['setting']->update_setting($setting);
     $this->cache->removecache('setting');
     $this->message($this->view->lang['relatedtitlesuccess'], 'index.php?admin_relation');
 }

 function dojs()
 {
     if (!isset($this->get['2'])) {
         $datastr = $this->view->lang['parameterError'];
         return false;
     }
     $datastr = $_ENV['datacall']->call($this->get['2'], 2);
     if (empty($datastr)) {
         $datastr = $this->view->lang['noDate'];
     }
     header("content-type:text/html; charset=" . WIKI_CHARSET);
     $datastr = nl2br($datastr);
     $datastr = str_replace("\n", "", $datastr);
     $datastr = str_replace("\r", "", $datastr);
     $datastr = string::haddslashes($datastr, 1);
     echo "document.write('" . $datastr . "')";
 }

 function doedittask()
 {
     if (isset($this->post['submit'])) {
         $name = string::haddslashes(htmlspecialchars($this->post['newname']));
         $w = intval($this->post['weekday']);
         $d = intval($this->post['day']);
         $h = intval($this->post['hour']);
         $i = intval($this->post['minute']);
         $id = intval(@$this->post['id']);
         $_ENV['task']->edit_task($id, $name, $w, $d, $h, $i);
         $this->message($this->view->lang['taskSuccess'], 'index.php?admin_task');
     } else {
         $id = intval($this->get[2]);
         $task = $_ENV['task']->get_task($id);
         $this->view->assign('task', $task);
         $this->view->display('admin_edittask');
     }
 }

 function dosavesynonym()
 {
     $destdid = $this->post['destdid'];
     if (!is_numeric($destdid)) {
         exit;
     }
     $synonyms = array();
     foreach ($this->post['srctitles'] as $srctitle) {
         $srctitle = htmlspecialchars(string::haddslashes(string::hiconv(trim($srctitle))));
         if ('' != $srctitle) {
             $synonyms[] = $srctitle;
         }
     }
     $desttitle = trim($this->post['desttitle']);
     if (WIKI_CHARSET == 'GBK') {
         $desttitle = string::hiconv($desttitle);
     }
     if (empty($synonyms)) {
         $_ENV['synonym']->removesynonym($destdid);
         exit("empty");
     }
     $srctitles = $synonyms;
     $filter = $_ENV["synonym"]->is_filter($srctitles, $desttitle);
     if ($filter[0] < 0) {
         echo $filter[0];
         exit;
     }
     if (is_array($srctitles) && !empty($desttitle)) {
         $num = $_ENV['synonym']->savesynonym($destdid, $desttitle, $srctitles);
         if ($num > 0) {
             $synonyms_list = $_ENV['synonym']->get_synonym_by_dest($destdid, '');
             $str = '';
             for ($i = 0; $i < count($synonyms_list); $i++) {
                 $str .= "<a href='index.php?doc-innerlink-" . urlencode($synonyms_list[$i]['srctitle']) . "' name='synonym'> " . $synonyms_list[$i]['srctitle'] . "</a>";
             }
             exit($str);
         } else {
             exit('0');
         }
     } else {
         echo $filter[0];
         exit;
     }
 }

 /**
  * 检查是否已经安装
  */
 function init_request()
 {
     if (!file_exists(HDWIKI_ROOT . '/data/install.lock')) {
         header('location:install/install.php');
         exit;
     }
     header('Content-type: text/html; charset=' . WIKI_CHARSET);
     $querystring = $_SERVER['QUERY_STRING'];
     if (strpos($querystring, 'plugin-hdapi-hdapi-default') !== false) {
         $querystring = str_replace('plugin-hdapi-', '', $querystring);
     }
     $pos = strpos($querystring, '.');
     if ($pos !== false) {
         $querystring = substr($querystring, 0, $pos);
     }
     $this->get = explode('-', $querystring);
     if (count($this->get) <= 3 && count($_POST) == 0 && substr($querystring, 0, 6) == 'admin_' && substr($querystring, 0, 10) != 'admin_main') {
         $this->querystring = $querystring;
     }
     if (empty($this->get[0])) {
         $this->get[0] = 'index';
     }
     if (empty($this->get[1])) {
         $this->get[1] = 'default';
     }
     if (count($this->get) < 2) {
         exit(' Access Denied !');
     }
     # unset($_ENV, $HTTP_GET_VARS, $HTTP_POST_VARS, $HTTP_COOKIE_VARS, $HTTP_SERVER_VARS, $HTTP_ENV_VARS);
     $this->get = string::haddslashes($this->get, 1);
     $this->post = string::haddslashes($_POST);
     $_COOKIE = string::haddslashes($_COOKIE);
     $this->checksecurity();
     $remain = array('_SERVER', '_FILES', '_COOKIE', 'GLOBALS', 'starttime', 'mquerynum');
     foreach ($GLOBALS as $key => $value) {
         if (!in_array($key, $remain)) {
             unset($GLOBALS[$key]);
         }
     }
 }

 function doadd()
 {
     if (!isset($this->post['submit'])) {
         $this->view->display('admin_addgift');
     } else {
         $title = htmlspecialchars(string::haddslashes(string::hiconv(trim($this->post['title']))));
         $credit = trim($this->post['credit']);
         $description = htmlspecialchars(string::haddslashes(string::hiconv(trim($this->post['description']))));
         $imgname = $_FILES['giftfile']['name'];
         $extname = file::extname($imgname);
         $destfile = 'uploads/gift/' . util::random(8) . '.' . $extname;
         $uploadreturn = file::uploadfile($_FILES['giftfile'], $destfile);
         util::image_compress($destfile, '', 500, 500, '');
         $iamge = util::image_compress($destfile, '', 106, 106, '_s');
         $destfile = $iamge['tempurl'];
         if ($uploadreturn['result'] === false) {
             $this->message($uploadreturn['msg'], 'index.php?admin_gift-search');
         }
         $_ENV['gift']->add($title, $destfile, $credit, $description);
         $this->message($this->view->lang['usermanageOptSuccess'], 'index.php?admin_gift-search');
     }
 }

 function recover($data)
 {
     $data = string::haddslashes($data, 1);
     $this->db->query("INSERT INTO  " . DB_TABLEPRE . "user (uid,username,password,email,gender,credit2,credit1,birthday,image,location,regip,regtime,lastip,lasttime,groupid,timeoffset,style,language,signature,creates,edits,views,checkup) \r\n\t\t\t\t\tVALUES ('" . $data['uid'] . "','" . $data['username'] . "','" . $data['password'] . "','" . $data['email'] . "','" . $data['gender'] . "','" . $data['credits'] . "','" . $data['credit1'] . "','" . $data['birthday'] . "','" . $data['image'] . "','" . $data['location'] . "','" . $data['regip'] . "','" . $data['regtime'] . "','" . $data['lastip'] . "','" . $data['lasttime'] . "','" . $data['groupid'] . "','" . $data['timeoffset'] . "','" . $data['style'] . "','" . $data['language'] . "','" . $data['signature'] . "','" . $data['creates'] . "','" . $data['edits'] . "','" . $data['views'] . "','" . $data['checkup'] . "')");
 }

 function recover($data)
 {
     $data = string::haddslashes($data, 1);
     $this->db->query("INSERT INTO  " . DB_TABLEPRE . "attachment (id,did,time,filename,description,filetype,filesize,attachment,downloads,isimage,uid,state,focus) \r\n\t\t\t\t\tVALUES ('" . $data['id'] . "','" . $data['did'] . "','" . $data['time'] . "','" . $data['filename'] . "','" . $data['description'] . "','" . $data['filetype'] . "','" . $data['filesize'] . "','" . $data['attachment'] . "','" . $data['downloads'] . "','" . $data['isimage'] . "','" . $data['uid'] . "','" . $data['state'] . "','" . $data['focus'] . "')");
 }

 function dosearch()
 {
     $num = 16;
     $page = isset($this->get[3]) ? $this->get[3] : '';
     if (empty($page) || !is_numeric($page)) {
         $page = 1;
         //下面的search_time代码只有在此时执行。
         $search_time = isset($this->setting['search_time']) ? $this->setting['search_time'] : 30;
         if ('' != $this->hgetcookie('searchtime') && $search_time > $this->time - $this->hgetcookie('searchtime')) {
             $this->message($this->view->lang['search_time_error1'] . $search_time . $this->view->lang['search_time_error2'], "BACK", 0);
         } else {
             $this->hsetcookie('searchtime', $this->time, 24 * 3600 * 365);
         }
     }
     $searchtext = isset($this->post['searchtext']) ? $this->post['searchtext'] : string::haddslashes(urldecode($this->get[2]), 1);
     $searchtext = string::hiconv(trim($searchtext));
     if (empty($searchtext)) {
         $this->message($this->view->lang['pic_no_title'], 'BACK', 0);
     }
     $start_limit = ($page - 1) * $num;
     $count = $_ENV['pic']->search_pic_num($searchtext);
     $piclist = $_ENV['pic']->search_pic($searchtext, $start_limit, $num);
     if (empty($piclist)) {
         $this->message($this->view->lang['cannotFindPic'], 'BACK', 0);
     }
     if ('gbk' == strtolower(WIKI_CHARSET)) {
         $searchtexts = string::hiconv($searchtext, 'utf-8', 'gbk');
     }
     $url = $this->setting['seo_prefix'] ? "pic-search-" . urlencode($searchtext) : "index.php?pic-search-" . urlencode($searchtext);
     $departstr = $this->multi($count, $num, $page, $url);
     $this->view->assign("leftpic", array_shift($piclist));
     $this->view->assign("piclist", $piclist);
     $this->view->assign('departstr', $departstr);
     $this->view->assign('count', $count);
     $this->view->assign('navtitle', $searchtext . $this->view->lang['pic_search']);
     $this->view->assign('searchtext', $searchtext);
     //$this->view->display('searchpic');
     $_ENV['block']->view('searchpic');
 }

 function editionconvert($type, $number)
 {
     if ($type == 'txt') {
         $changenum = 100;
         $maxeid = $this->db->result_first("SELECT MAX(eid) FROM " . DB_TABLEPRE . "edition WHERE 1");
         if ($maxeid < $number - $changenum) {
             return true;
         }
         $query = $this->db->query("SELECT eid,content FROM " . DB_TABLEPRE . "edition WHERE eid >({$number}-{$changenum}) AND eid <= {$number}");
         while ($edition = $this->db->fetch_array($query)) {
             if ($edition['content']) {
                 $path = 'data/edition/' . ceil($edition['eid'] / $changenum) * $changenum;
                 file::forcemkdir($path);
                 file::writetofile($path . "/" . $edition['eid'] . ".txt", $edition['content']);
             }
         }
         $this->db->query("UPDATE " . DB_TABLEPRE . "edition SET content=''  WHERE eid >({$number}-{$changenum}) AND eid <= {$number}");
     } else {
         $dirlist = array();
         if ($handle = opendir('data/edition')) {
             while (false !== ($dir = readdir($handle))) {
                 $dirlist[] = $dir;
             }
             closedir($handle);
         }
         $maxeid = @max($dirlist);
         if ($number > $maxeid) {
             return true;
         }
         $path = "data/edition/{$number}";
         $files = file::get_file_by_ext($path, array('txt'));
         foreach ((array) $files as $file) {
             $eid = substr($file, 0, -4);
             $filename = $path . "/" . $file;
             $content = string::haddslashes(file::readfromfile($filename), 1);
             if ($content) {
                 $this->db->query("UPDATE " . DB_TABLEPRE . "edition SET content='{$content}' WHERE eid={$eid}");
                 @unlink($filename);
             }
         }
     }
     return false;
 }

 function check_visitrate()
 {
     if ($this->_check_ip_exception()) {
         // 如果IP存在于IP例外数组，则不判断，直接返回
         return true;
     } else {
         // 否则判断访问频率
         if (isset($this->base->setting['visitrate'])) {
             $vr_setting = unserialize($this->base->setting['visitrate']);
         } else {
             return true;
         }
         $ua = isset($_SERVER['HTTP_USER_AGENT']) ? string::haddslashes(substr($_SERVER['HTTP_USER_AGENT'], 0, 255)) : '';
         $time_start = $this->base->time - $vr_setting['duration'];
         $this->db->query("DELETE FROM " . DB_TABLEPRE . "visitlist WHERE `time` <= {$time_start}");
         $count = $this->db->fetch_total("visitlist", "`time` > {$time_start} AND `ip` = '{$this->base->ip}' AND `useragent` = '{$ua}'");
         if ($count > $vr_setting['pages']) {
             $this->base->load('banned');
             $userip = explode(".", $this->base->ip);
             $ban_expiration = $vr_setting['ban_time'] > 0 ? 3600 * $vr_setting['ban_time'] : 3600;
             $this->db->query("INSERT INTO `" . DB_TABLEPRE . "banned` (`ip1`,`ip2`,`ip3`,`ip4`,`admin`,`time`,`expiration`) VALUES \r\n\t\t\t\t\t('{$userip[0]}', '{$userip[1]}', '{$userip[2]}', '{$userip[3]}', 'SYSTEM', '{$this->base->time}', '{$ban_expiration}')");
             $_ENV['banned']->updatebannedip();
             return false;
         } else {
             $this->db->query("INSERT INTO " . DB_TABLEPRE . "visitlist (`ip`,`useragent`,`time`) values ('{$this->base->ip}', '{$ua}', '{$this->base->time}')");
             return true;
         }
     }
 }

 function copy_edition($eid)
 {
     $edition = $this->get_edition($eid);
     if (!is_array($edition)) {
         return false;
     }
     $edition['tags'] = $data['tag'];
     $edition['time'] = $this->base->time;
     $edition['visible'] = $this->base->setting['verify_doc'] ? '0' : '1';
     $this->edit_doc(string::haddslashes($edition, 1));
     return true;
 }

 function hdgetcat()
 {
     $evaljs = '';
     $did = intval($this->post['did']);
     $cats = $_ENV['doc']->get_cids_by_did($did);
     if ($cats) {
         foreach ($cats as $cat) {
             $cat['name'] = string::haddslashes($cat['name'], 1);
             $evaljs .= "catevalue.scids.push(" . $cat['cid'] . ");catevalue.scnames.push('" . string::haddslashes($cat['name']) . "');";
         }
     }
     $this->message($evaljs, '', 2);
 }

 function editsql($datacall)
 {
     if (empty($datacall)) {
         return false;
     } else {
         $datacall['desc'] = !trim($datacall['desc']) ? $this->base->view->lang['sqlcall'] : trim($datacall['desc']);
         $datacall['desc'] = string::substring($datacall['desc'], 0, 80);
         $datacall['param']['tplcode'] = !trim($datacall['param']['tplcode']) ? '' : trim($datacall['param']['tplcode']);
         $datacall['param']['empty_tplcode'] = !trim($datacall['param']['empty_tplcode']) ? '' : trim($datacall['param']['empty_tplcode']);
         $param_str = string::haddslashes(serialize(string::hstripslashes($datacall['param'])), 1);
         $classname = 'sql';
         $function = 'sql';
         $type = 'sql';
         if (isset($datacall['editflag'])) {
             $sql = "UPDATE `" . DB_TABLEPRE . "datacall` SET ";
             $sql .= "`name`='" . $datacall['name'] . "',`category`='" . $datacall['category'] . "', `classname`='" . $classname . "', `function`='" . $function . "', `desc`='" . $datacall['desc'] . "', `param`='" . $param_str . "', `cachetime`='" . $datacall['cachetime'] . "'";
             $sql .= " WHERE `id`='" . $datacall['id'] . "'";
         } else {
             $sql = 'INSERT INTO ' . DB_TABLEPRE . 'datacall (`name`,`type`, `category`, `classname`, `function`, `desc`, `param`, `cachetime`) ';
             $sql .= " SELECT '" . $datacall['name'] . "','" . $type . "','" . $datacall['category'] . "','" . $classname . "','" . $function . "', ";
             $sql .= "'" . $datacall['desc'] . "', '" . $param_str . "', '" . $datacall['cachetime'] . "'";
             $sql .= " FROM dual WHERE not exists (SELECT * FROM " . DB_TABLEPRE . "datacall WHERE name= '" . $datacall['name'] . "' )";
         }
         return $this->db->query($sql);
     }
 }

 function dofulltext()
 {
     if (!$this->get[3] && !$this->get[10]) {
         if (1 == $this->setting['cloud_search']) {
             // 云搜索开启后，关闭本地搜索
             $this->header();
         }
         $all_category = $_ENV['category']->get_category_cache();
         $categorytree = $_ENV['category']->get_categrory_tree($all_category);
         $this->view->assign("categorytree", $categorytree);
         $_ENV['block']->view('search');
     } else {
         $page = isset($this->get[11]) ? $this->get[11] : '';
         if (empty($page) || !is_numeric($page)) {
             $page = 1;
             // 指定时间内只能进行一次搜索
             $search_time = isset($this->setting['search_time']) ? $this->setting['search_time'] : 30;
             if ('' != $this->hgetcookie('searchtime') && $search_time > $this->time - $this->hgetcookie('searchtime')) {
                 $this->message($this->view->lang['search_time_error1'] . $search_time . $this->view->lang['search_time_error2'], "BACK", 0);
             } else {
                 $this->hsetcookie('searchtime', $this->time, 24 * 3600 * 365);
             }
         }
         // 获得搜索类型和搜索关键字
         $element['searchtype'] = $this->get[2];
         // tag or title
         $element['keyword'] = isset($this->get[3]) ? string::haddslashes(str_replace(array('-', '.'), array('-', '.'), rawurldecode($this->get[3]))) : '';
         // 自动转码，将编码变为当前设置编码
         //$element['keyword']= string::hiconv(trim($element['keyword']));
         //$element['keyword']=string::haddslashes($element['keyword'],1);
         $author = isset($this->get[4]) ? string::haddslashes(urldecode($this->get[4])) : '';
         $element['author'] = $author ? str_replace('*', '%', $author) : '';
         $element['categoryid'] = isset($this->get[5]) ? explode(",", $this->get[5]) : 'all';
         $element['timelimited'] = isset($this->get[6]) ? $this->get[6] : 0;
         $element['withinbefore'] = isset($this->get[7]) ? $this->get[7] : 'within';
         $element['ordertype'] = isset($this->get[8]) ? $this->get[8] : 'time';
         $element['ascdesc'] = isset($this->get[9]) ? $this->get[9] : 'desc';
         if (!(bool) $element['keyword']) {
             $this->message($this->view->lang['searchKeywordNull'], "BACK", 0);
         } elseif (strtoupper(substr($element['keyword'], 0, 4)) == 'TAG:' && strlen($element['keyword']) > 4) {
             $element['keyword'] = substr($element['keyword'], 4);
             $element['searchtype'] = 'tag';
         }
         if ($element['searchtype'] != "title" && $element['searchtype'] != "tag" && $element['searchtype'] != "content") {
             $element['searchtype'] = "title";
         }
         if ($element['categoryid'] != "all" && !preg_match("/^\\d[\\d\\,]*?\$/i", implode(",", $element['categoryid']))) {
             $element['categoryid'][0] = "all";
         }
         if (!is_numeric($element['timelimited'])) {
             $element['timelimited'] = 0;
         }
         if ($element['withinbefore'] != "within" && $element['timelimited'] != "before") {
             $element['timelimited'] = "within";
         }
         if ($element['ordertype'] != "time" && $element['ordertype'] != "comments" && $element['ordertype'] != "views") {
             $element['ordertype'] = "time";
         }
         if ($element['ascdesc'] != "asc" && $element['ascdesc'] != "desc") {
             $element['ascdesc'] = "desc";
         }
         // 初始化云搜索
         $cloudsearch = 0;
         if (1 == $this->setting['cloud_search']) {
             //最后一次云搜索异常时间
             $cloud_search_last_time = $this->hgetcookie('lasttime');
             // 异常时，关闭云搜索的时间，默认关闭30秒
             $cloud_search_close_time = isset($this->setting['cloud_search_close_time']) ? $this->setting['cloud_search_close_time'] : 30;
             if (empty($cloud_search_last_time) || $this->time - $cloud_search_last_time > $cloud_search_close_time) {
                 $cloudsearch = 1;
                 // 云搜索
                 $iframesrc = $_ENV['search']->cloud_search($element['keyword']);
                 $this->view->assign('iframesrc', $iframesrc);
                 if (!$iframesrc || 2 > strlen($iframesrc)) {
                     // 显示超时信息
                     // 云搜索超时
                     // 设置暂时关闭云搜索
                     $this->hsetcookie('lasttime', $this->time, $cloud_search_last_time);
                     $cloudsearch = 0;
                 }
             }
         }
         if (0 == $cloudsearch) {
             $result = $_ENV['search']->join_sql($element);
             $count = $_ENV['search']->get_total_num($result['dsql']);
             $count = $count <= 500 ? $count : 500;
             // 最多500条记录
             $num = isset($this->setting['list_prepage']) ? $this->setting['list_prepage'] : 20;
             $start_limit = ($page - 1) * $num;
             $list = $_ENV['search']->fulltext_search($result['sql'], $start_limit, $num);
             $keyword_for_view = str_replace("|", "\\|", $element['keyword']);
             foreach ($list as $key => $value) {
                 $list[$key]['title'] = preg_replace("|({$keyword_for_view})|i", "<span style='color:red'>\$1</span>", $value['title']);
             }
             $url = "search-fulltext-{$element['searchtype']}-" . str_replace(array('-', '.'), array('&#45;', '&#46;'), rawurlencode($element[keyword])) . "-" . urlencode($element[author]) . "-" . implode(',', $element[categoryid]) . "-{$element['timelimited']}-{$element['withinbefore']}-{$element['ordertype']}-{$element['ascdesc']}-1";
             $url = isset($this->setting['seo_prefix']) ? $url : "index.php?" . $url;
             $departstr = $this->multi($count, $num, $page, $url);
             $allcategory = $_ENV['category']->get_category_cache();
             $categorylist = $_ENV['category']->get_site_category(0, $allcategory);
         }
//.........这里部分代码省略.........