DedeBIZ
/
DedeV6
Segui 2
Vota 0
Forka 0
Codice Pull Requests 0 Rilasci 25 Attività
国内流行的内容管理系统（CMS）多端全媒体解决方案 https://www.dedebiz.com
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
172 Commit
3 Rami (Branch)
1.8GB
Albero (Tree): 8d541209e5
Rami (Branch) Tag
${ item.name }
Crea branch ${ searchTerm }
da '8d541209e5'
${ noResults }
DedeV6/src/include/Lurd.class.php

1144 lines
43KB
Originale Blame Cronologia 

  1. <?php   if(!defined('DEDEINC')) exit("Request Error!");

  2. /**

  3.  *

  4.  *  本类用于指定一个 MySQL 的数据表

  5.  *  自动生成列出、修改、删除、增加等操作

  6.  *

  7.  *   2011-11-08 [完善]对LURD类进行如下完善

  8.  *		1.增加单条记录管理功能,指定$lurd->singleManage=TRUE,增加单条记录的管理页面;

  9.  *		2.修改LURD默认管理页面的体验;

  10.  *		3.模板页面支持~self~指向当前页地址;

  11.  *		4.lurd支持get模式,便于单条记录的管理;

  12.  *   2010-11-17 [修复]启用request类默认数据处理问题

  13.  *   2010-11-17 [修复]如果存在UNIQUE表字段分析错误的问题

  14.  *   2010-11-17 [增加]增加检索条件匹配方法

  15.  *   2010-11-16 [增加]如果表字段存在注释,则列表项的title中则直接显示注释信息

  16.  *   2010-11-14 [修复]数据表存在前缀,模板名称解析问题,同时可以对Lurd单独设定模板

  17.  *

  18.  *

  19.  * @version        $Id: lurd.class.php 7 14:07 2011/11/8 IT柏拉图,tianya $

  20.  * @package        DedeCMS.Libraries

  21.  * @copyright      Copyright (c) 2007 - 2018, DesDev, Inc.

  22.  * @copyright      Copyright (c) 2020, DedeBIZ.COM

  23.  * @license        https://www.dedebiz.com/license/v6

  24.  * @link           https://www.dedebiz.com

  25.  */

  26. 

  27. require_once(DEDEINC.'/datalistcp.class.php');

  28. 

  29. /***********************************

  30.  @ class lurd

  31. 

  32. ***********************************/

  33. class Lurd extends DataListCP

  34. {

  35.     // 固定属性

  36.     var $dateTypes = array('DATE', 'DATETIME', 'TIMESTAMP', 'TIME', 'YEAR');

  37.     var $floatTypes = array('FLOAT', 'DOUBLE', 'DECIMAL');

  38.     var $intTypes = array('TINYINT', 'SMALLINT', 'MEDIUMINT', 'INT', 'BIGINT');

  39.     var $charTypes = array('VARCHAR', 'CHAR', 'TINYTEXT');

  40.     var $textTypes = array('TEXT', 'MEDIUMTEXT', 'LONGTEXT');

  41.     var $binTypes = array('TINYBLOB', 'BLOB', 'MEDIUMBLOB', 'LONGBLOB', 'BINARY', 'VARBINARY');

  42.     var $emTypes = array('ENUM', 'SET');

  43.     // 普通属性

  44.     var $tableName = '';

  45.     var $templateDir = '';

  46.     var $lurdTempdir = '';

  47.     var $tplName = '';

  48.     var $appName = '';

  49.     var $primaryKey = '';

  50.     var $autoField = '';

  51.     var $orderQuery = '';

  52.     // 所的字段及属性数组

  53.     var $fields = array(); 

  54.     // 当这个值为TRUE，每次都会生成新模板，用于调试模式

  55.     var $isDebug = FALSE;

  56.     // 文本内容安全级别 

  57.     // 0 为不处理， 1 为禁止不安全HTML内容(javascript等)，2完全禁止HTML内容，并替换部份不安全字符串（如：eval(、union、CONCAT(、--、等）

  58.     var $stringSafe = 1;

  59.     // 这个变量用于存放连结表的参数

  60.     // 可以通过 $lurd->AddLinkTable($tablelurd, linkfields, mylinkid, linkid); 联结一个表

  61.     var $linkTables = array();

  62.     // 联结表的指定字段(如果后一个表的字段和前一个重名, 前者会被替换)

  63.     var $addFields = array();

  64.     // 查询条件

  65.     var $searchParameters = array();

  66. 	

  67. 	// 单条记录管理,修改/删除

  68. 	var $singleManage = TRUE;

  69. 

  70.     //构造函数，指定要操作的表名

  71.     function __construct($tablename, $templatedir='', $lurdtempdir='')

  72.     {

  73.         global $dsql;

  74.         $prefix = "#@__";

  75.         $this->tplName = str_replace($prefix, '', $tablename);

  76.         $this->tableName = str_replace($prefix, $GLOBALS['cfg_dbprefix'], $tablename);

  77.         $this->templateDir = $templatedir;

  78.         $this->lurdTempdir = empty($lurdtempdir) ? $this->templateDir.'/lurd' : $lurdtempdir;

  79.         parent::__construct();

  80.         $this->AnalyseTable();

  81.         $ct = isset($GLOBALS['ct'])? $GLOBALS['ct'] : request('ct', '');

  82.         if(!empty($ct))

  83.         {

  84.             $this->SetParameter('ct', $ct);

  85.         }

  86.         $this->SetParameter('ac', 'list');

  87.     }

  88.     

  89.     //监听器，根据指定的ac(ac)调用相应处理方法

  90.     function ListenAll($listfield = '', $wherequery = '', $orderquery ='')

  91.     {

  92.         global $action;

  93.         $action = !empty($action)? $action : request('action');

  94.         switch($action)

  95.         {

  96.             case 'add' :

  97.                 $this->AddData();

  98.                 break;

  99.             case 'edit':

  100.                 $this->EditData();

  101.                 break;

  102.             case 'del':

  103.                 $this->DelData();

  104.                 break;

  105.             case 'saveadd':

  106.                 $this->SaveAddData();

  107.                 break;

  108.             case 'saveedit':

  109.                 $this->SaveEditData();

  110.                 break;

  111.             default:

  112.                 $this->ListData($listfield, $wherequery, $orderquery);

  113.                 break;

  114.         }

  115.     }

  116. 

  117.     // 指定主键

  118.     // 在数据表没有主键的情况下，必须指定一个字段为主键字段，否则系统用所有数据的md5值作为主键

  119.     function AddPriKey($fieldname)

  120.     {

  121.         $this->primaryKey = $fieldname;

  122.     }

  123.     

  124.     // 指定应用的名称

  125.     function AddAppName($appname)

  126.     {

  127.         $this->appName = $appname;

  128.     }

  129.     

  130.     //设置用于排序的SQL，如 order by id desc

  131.     function SetOrderQuery($query)

  132.     {

  133.         $this->orderQuery = $query;

  134.     }

  135.     

  136.     //强制指定字段为其它类型

  137.     function BindType($fieldname, $ftype, $format='')

  138.     {

  139.         //'type' =>'','length' =>'0','unsigned'=>FALSE,'autokey'=>FALSE,

  140.         //'null'=>FALSE,default'=>'','em'=>'','format'=>'','listtemplate'=>'','edittemplate'=>''

  141.         $typesArr = array_merge($this->dateTypes, $this->floatTypes, $this->intTypes, $this->charTypes, $this->textTypes, $this->binTypes, $this->emTypes);

  142.         if( isset($this->fields[$fieldname]) && in_array(strtoupper($ftype), $typesArr) )

  143.         {

  144.             $this->fields[$fieldname]['type'] = $ftype;

  145.             $this->fields[$fieldname]['format'] = $format;

  146.         }

  147.     }

  148.     

  149.     //强制指定字模板（列表list和编辑edit、增加add模板里用）

  150.     function BindTemplate($fieldname, $tmptype='list', $temp='')

  151.     {

  152.         if( isset($this->fields[$fieldname]) )

  153.         {

  154.             $this->fields[$fieldname][$tmptype.'template'] = $temp;

  155.         }

  156.     }

  157.     

  158.     // 列出数据

  159.     /*********************************

  160.      * $listfield = '' 指定要列出的字段(默认为'*') ，只需填写当前表

  161.                                                   联结表出的字段在 AddLinkTable 指定， 因此不需要 表名.字段名 方式识别

  162.      * $wherequery = '' 查询query，如果联结了其它表，需用 表名.字段名 识别字段

  163.      * $orderquery = '' 排序query，如果联结了其它表，需用 表名.字段名 识别字段

  164.      **********************************/

  165.     function ListData($listfield = '*', $wherequery = '', $orderquery ='', $Suff = '_list.htm')

  166.     {

  167.         $listdd = '';

  168.         if(trim($listfield)=='') $listfield = '*';

  169.         

  170.         $template = $this->templateDir.'/'.$this->tplName.$Suff;

  171.         //生成列表模板

  172.         if( !file_exists($template) || $this->isDebug )

  173.         {

  174.             $this->MakeListTemplate($listfield);

  175.         }

  176.         

  177.         // 获取检索条件

  178.         if( $wherequery == '' )

  179.         {

  180.             $wherequery = $this->GetSearchQuery();

  181.         }

  182. 

  183.         //是否有联结其它的表

  184.         $islink = count($this->linkTables) > 0 ? TRUE : FALSE;

  185.         //主表索引字段(Select * From 部份)

  186.         $listfields = explode(',', $listfield);

  187.         foreach($listfields as $v)

  188.         {

  189.                 $v = trim($v);

  190.                 if( !isset($this->fields[$v]) && $v != '*' ) continue;

  191.                 if($islink) {

  192.                     $listdd .= ($listdd=='' ? "{$this->tableName}.{$v}" : ", {$this->tableName}.{$v} ");

  193.                 }

  194.                 else {

  195.                     if($v=='*') $listdd .= ' * ';

  196.                     else $listdd .= ($listdd=='' ? "`$v`" : ",`$v`");

  197.                 }

  198.         }

  199.         if($listdd=='') $listdd = " * ";

  200.         

  201.         //联结表索引字段

  202.         if($islink)

  203.         {

  204.             $joinQuery = '';

  205.             foreach($this->linkTables as $k=>$linkTable)

  206.             {

  207.                 $k++;

  208.                 $linkTableName = $linkTable[0]->tableName;

  209.                 $joinQuery .= " LEFT JOIN `{$linkTableName}` ON {$linkTableName}.{$linkTable[2]} = {$this->tableName}.{$linkTable[1]} ";

  210.                 foreach($this->addFields as $f=>$v)

  211.                 {

  212.                     if($v['table'] != $linkTableName) continue;

  213.                     $listdd .= ", {$linkTableName}.{$f} ";

  214.                 }

  215.             }

  216.             $query = "SELECT $listdd FROM `{$this->tableName}` $joinQuery $wherequery $orderquery ";

  217.         }

  218.         else

  219.         {

  220.             $query = "SELECT $listdd FROM `{$this->tableName}` $wherequery $orderquery ";

  221.         }

  222.         

  223.         $this->SaveCurUrl();

  224.         $this->SetTemplate($template);

  225.         $this->SetSource($query);

  226.         $this->Display();

  227.     }

  228.     

  229.     //记录列表网址到cookie，方便返回时调用

  230.     function SaveCurUrl()

  231.     {

  232.         setcookie('LURD_GOBACK_URL', $this->GetCurFullUrl(), time()+3600, '/');

  233.     }

  234.     

  235.     function GetCurFullUrl()

  236.     {

  237.         if(!empty($_SERVER["REQUEST_URI"]))

  238.         {

  239.             $scriptName = $_SERVER["REQUEST_URI"];

  240.             $nowurl = $scriptName;

  241.         }

  242.         else

  243.         {

  244.             $scriptName = $_SERVER["PHP_SELF"];

  245.             $nowurl = empty($_SERVER["QUERY_STRING"]) ? $scriptName : $scriptName."?".$_SERVER["QUERY_STRING"];

  246.         }

  247.         return $nowurl;

  248.     }

  249.     

  250.     //生成全部模板

  251.     function MakeAllTemplate($listfield = '')

  252.     {

  253.         $this->MakeListTemplate($listfield);

  254.         $this->MakeAddEditTemplate('add');

  255.         $this->MakeAddEditTemplate('edit');

  256.     }

  257.     

  258.     //生成列表模板

  259.     function MakeListTemplate($listfield = '')

  260.     {

  261.         $templateTemplate = $this->lurdTempdir.'/lurd-list.htm';

  262.         $template = $this->templateDir.'/'.$this->tplName.'_list.htm';

  263.         $tempstr = '';

  264.         $fp = fopen($templateTemplate, 'r');

  265.         while( !feof($fp) ) $tempstr .= fread($fp, 1024);

  266.         fclose($fp);

  267.         $tempItems = array('appname'=>'', 'totalitem'=>'', 'titleitem'=>'', 'fielditem'=>'');

  268.         $tempItems['appname'] = empty($this->appName) ? "管理数据表： ".$this->tableName : $this->appName;

  269.         //设置选择项

  270.         $tempItems['totalitem'] = 1;

  271.         $tempItems['self'] = $_SERVER["PHP_SELF"];

  272.         $titleitem = "    <td class='nowrap'>选择</td>\r\n";

  273.         if( !preg_match("/,/", $this->primaryKey) )

  274.         {

  275.                 $fielditem = "    <td class='nowrap'><input type=\"checkbox\" name=\"{$this->primaryKey}[]\" value=\"{dede:field name='{$this->primaryKey}' /}\" /></td>\r\n";

  276.         }

  277.         else

  278.         {

  279.                 $prikeys = explode(',', $this->primaryKey);

  280.                 $prikeyValue = '<'.'?php echo md5("key"';

  281.                 foreach($prikeys as $v)

  282.                 {

  283.                     $prikeyValue .= '.$fields["'.$v.'"]';

  284.                 }

  285.                 $prikeyValue .= '); ?'.'>';

  286.                 $fielditem = "    <td class='nowrap'><input type=\"checkbox\" name=\"primarykey[]\" value=\"{$prikeyValue}\" /></td>\r\n";

  287.         }

  288.         //使用手工指定列出字段

  289.         if(!empty($listfield) && $listfield != '*' )

  290.         {

  291.             $listfields = explode(',', $listfield);

  292.             $tempItems['totalitem'] = count($listfields) + 1;

  293.             foreach($listfields as $k)

  294.             {

  295.                 $k = trim($k);

  296.                 if( !isset($this->fields[$k]) ) continue;

  297.                 $v = $this->fields[$k];

  298.                 $title = !empty($v['comment'])? $v['comment'] : $k;

  299.                 $titleitem .= "    <td class='nowrap'>$title</td>\r\n";

  300.                 if( !empty($v['listtemplate']) )

  301.                 {

  302.                     $fielditem .= "    <td class='nowrap'>{$v['listtemplate']}</td>\r\n";

  303.                 }

  304.                 else

  305.                 {

  306.                     $dofunc = $dtype = $fformat = '';

  307.                     $dtype = !empty($v['type']) ? $v['type'] : 'check';

  308.                     if(isset($v['format']))

  309.                     {

  310.                         $fformat = $v['format'];

  311.                     }

  312.                     if(isset($v['dofunc']))

  313.                     {

  314.                         $dofunc = $v['dofunc'];

  315.                     }

  316.                     if(isset($v['type']))

  317.                     {

  318.                         $this->fields[$k]['type'] = $v['type'];

  319.                     }

  320.                     if( in_array($v['type'], $this->floatTypes) ) 

  321.                     {

  322.                         $dtype = 'float';

  323.                         $dofunc = ($dofunc=='' ? "function=\"Lurd::FormatFloat(@me, '$fformat')\"" : '');

  324.                     }

  325.                     if( in_array($v['type'], $this->dateTypes) )

  326.                     {

  327.                         $dtype = 'date';

  328.                         $dofunc = ($dofunc=='' ? "function=\"Lurd::FormatDate(@me, '{$this->fields[$k]['type']}', '$fformat')\"" : '');

  329.                     }

  330.                     $fielditem .= "    <td class='nowrap'>{dede:field name='{$k}' $dofunc /}</td>\r\n";

  331.                 }

  332.             }//End foreach

  333.         }

  334.         //自动处理

  335.         else

  336.         {

  337.             foreach($this->fields as $k=>$v)

  338.             {

  339.                 if(in_array($v['type'], $this->binTypes) )

  340.                 {

  341.                     continue;

  342.                 }

  343.                 $tempItems['totalitem']++;

  344. 				$title = !empty($v['comment'])? $v['comment'] : $k;

  345.                 $titleitem .= "    <td class='nowrap'>$title</td>\r\n";

  346.                 $dofunc = $dtype = $fformat = '';

  347.                 if(isset($v['format']))

  348.                 {

  349.                         $fformat = $v['format'];

  350.                 }

  351.                 if( in_array($v['type'], $this->floatTypes) ) 

  352.                 {

  353.                     $dtype = 'float';

  354.                     $dofunc = ($dofunc=='' ? "function=\"Lurd::FormatFloat(@me, '$fformat')\"" : '');

  355.                 }

  356.                 if( in_array($v['type'], $this->dateTypes) )

  357.                 {

  358.                     $dtype = 'date';

  359.                     $dofunc = ($dofunc=='' ? "function=\"Lurd::FormatDate(@me, '{$this->fields[$k]['type']}', '$fformat')\"" : '');

  360.                 }

  361.                 $fielditem .= "    <td class='nowrap'>{dede:field name='{$k}' $dofunc /}</td>\r\n";

  362.             }

  363.         }

  364. 		

  365.         //是否有联结其它的表

  366.         $islink = count($this->linkTables) > 0 ? TRUE : FALSE;

  367.         //附加表的字段

  368.         if($islink)

  369.         {

  370.             foreach($this->addFields as $k=>$v)

  371.             {

  372.                 if(in_array($v['type'], $this->binTypes) )

  373.                 {

  374.                     continue;

  375.                 }

  376.                 $tempItems['totalitem']++;

  377.                 $titleitem .= "    <td class='nowrap'>$k</td>\r\n";

  378.                 $dofunc = $dtype = $fformat = '';

  379.                 if( in_array($v['type'], $this->floatTypes) ) 

  380.                 {

  381.                     $dtype = 'float';

  382.                     $dofunc = ($dofunc=='' ? "function=\"Lurd::FormatFloat(@me, '$fformat')\"" : '');

  383.                 }

  384.                 if( in_array($v['type'], $this->dateTypes) )

  385.                 {

  386.                     $dtype = 'date';

  387.                     $dofunc = ($dofunc=='' ? "function=\"Lurd::FormatDate(@me, '{$this->fields[$k]['type']}', '$fformat')\"" : '');

  388.                 }

  389.                 $fielditem .= "    <td class='nowrap'>{dede:field name='{$k}' $dofunc /}</td>\r\n";

  390.             }

  391.         }

  392. 		

  393. 		if($this->singleManage)

  394. 		{

  395. 			$tempItems['totalitem']++;

  396. 			$titleitem .= "    <td class='nowrap'>管理</td>\r\n";

  397. 			$currentUrl = $this->GetCurUrl();

  398. 			$fielditem .= "    <td class='nowrap'>  

  399. 			<a href=\"{$currentUrl}?{$this->primaryKey}={dede:field name='{$this->primaryKey}' /}&ac=edit&get=yes\">修改</a> 

  400. 			|  <a href=\"{$currentUrl}?{$this->primaryKey}={dede:field name='{$this->primaryKey}' /}&ac=del&get=yes\">删除</a> </td>\r\n";

  401. 		}

  402. 		

  403.         $tempItems['titleitem'] = $titleitem;

  404.         $tempItems['fielditem'] = $fielditem;

  405.         foreach($tempItems as $k => $v)

  406.         {

  407.             $tempstr = str_replace("~$k~", $v, $tempstr);

  408.         }

  409.         $fp = fopen($template, 'w');

  410.         fwrite($fp, $tempstr);

  411.         fclose($fp);

  412.     }

  413.     

  414.     //生成发布或编辑模板

  415.     function MakeAddEditTemplate($getTemplets='add')

  416.     {

  417.         $templateTemplate = $this->lurdTempdir."/lurd-{$getTemplets}.htm";

  418.         $template = $this->templateDir.'/'.$this->tplName."_{$getTemplets}.htm";

  419.         $tempstr = '';

  420.         $fp = fopen($templateTemplate, 'r');

  421.         while( !feof($fp) ) $tempstr .= fread($fp, 1024);

  422.         fclose($fp);

  423.         $tempItems = array('appname'=>'', 'fields'=>'', 'primarykey'=>'');

  424.         $tempItems['appname'] = empty($this->appName) ? "在 {$this->tableName} ".($getTemplets=='add' ? '添加数据' : '编辑数据' ) : $this->appName;

  425.         $tempItems['fields'] = '';

  426. 		$tempItems['self'] = $_SERVER["PHP_SELF"];

  427.         if( !preg_match("/,/", $this->primaryKey) )

  428.         {

  429.             $tempItems['primarykey'] = "    <input type=\"hidden\" name=\"{$this->primaryKey}\" value=\"{dede:field name='{$this->primaryKey}' /}\" />\r\n";

  430.         }

  431.         else

  432.         {

  433.             $prikeys = explode(',', $this->primaryKey);

  434.             $prikeyValue = '<'.'?php echo md5("key"';

  435.             foreach($prikeys as $v)

  436.             {

  437.                 $prikeyValue .= '.$fields["'.$v.'"]';

  438.             }

  439.             $prikeyValue .= '); ?'.'>';

  440.             $tempItems['primarykey'] = "    <input type=\"hidden\" name=\"primarykey[]\" value=\"{$prikeyValue}\" />\r\n";

  441.         }

  442.         $fielditem = '';

  443.         foreach($this->fields as $k=>$v)

  444.         {

  445.             $aeform = $dtype = $defaultvalue = $fformat = '';

  446. 			$title = !empty($v['comment'])? $v['comment'] : $k;

  447.             //在指定了字段模板情况下不使用自动生成

  448.             if(isset($this->fields[$k][$getTemplets.'template']))

  449.             {

  450.                 $fielditem .= $this->fields[$k][$getTemplets.'template'];

  451.                 continue;

  452.             }

  453.             //排除自动递增键

  454.             if($k==$this->autoField)

  455.             {

  456.                 continue;

  457.             }

  458.             //编辑时，排除主键

  459.             if($k==$this->primaryKey && $getTemplets=='edit')

  460.             {

  461.                 continue;

  462.             }

  463.             //格式化选项(编辑时用)

  464.             if(isset($this->fields[$k]['format']))

  465.             {

  466.                 $fformat = $this->fields[$k]['format'];

  467.             }

  468.             //获得字段默认值（编辑时从数据库获取）

  469.             if($getTemplets=='edit')

  470.             {

  471.                 if( in_array($this->fields[$k]['type'], $this->binTypes) ) $dfvalue = '';

  472.                 else $dfvalue = "{dede:field name='$k' /}";

  473.             }

  474.             else

  475.             {

  476.                 $dfvalue = $this->fields[$k]['default'];

  477.             }

  478.             //小数类型

  479.             if( in_array($this->fields[$k]['type'], $this->floatTypes) ) 

  480.             {

  481.                 if($getTemplets=='edit')

  482.                 {

  483.                     $dfvalue = "{dede:field name='$k' function=\"Lurd::FormatFloat(@me, '$fformat')\" /}";

  484.                 }

  485.                 else if($this->fields[$k]['default']=='')

  486.                 {

  487.                     $dfvalue = 0;

  488.                 }

  489.                 $aeform  = "<input type='input' name='{$k}' class='txtnumber' value='$dfvalue' />";

  490.             }

  491.             //整数类型

  492.             if( in_array($this->fields[$k]['type'], $this->intTypes) ) 

  493.             {

  494.                 $aeform  = "<input type='input' name='{$k}' class='txtnumber' value='$dfvalue' />";

  495.             }

  496.             //时间类型

  497.             else if( in_array($this->fields[$k]['type'], $this->dateTypes))

  498.             {

  499.                 if(empty($fformat)) $fformat = 'Y-m-d H:i:s';

  500.                 if($getTemplets=='edit')

  501.                 {

  502.                     $dfvalue = "{dede:field name='$k' function=\"MyDate(@me, '$fformat')\" /}";

  503.                 }

  504.                 else if(empty($this->fields[$k]['default']))

  505.                 {

  506.                     $dfvalue = "{dede:var.a function=\"MyDate(time(), '$fformat')\" /}";

  507.                 }

  508.                 $aeform  = "<input type='input' name='{$k}' class='txtdate' value='$dfvalue' />";

  509.             }

  510.             //长文本类型

  511.             else if( in_array($this->fields[$k]['type'], $this->textTypes))

  512.             {

  513.                 $aeform  = "<textarea name='$k' class='txtarea'>{$dfvalue}</textarea>";

  514.             }

  515.             //二进制类型

  516.             else if( in_array($this->fields[$k]['type'], $this->textTypes))

  517.             {

  518.                 $aeform = "<input type='file' name='$k' size='45' />";

  519.             }

  520.             //SET类型

  521.             else if( $this->fields[$k]['type']=='SET' )

  522.             {

  523.                 $ems = explode(',', $this->fields[$k]['em']);

  524.                 if($getTemplets=='edit')

  525.                 {

  526.                     $aeform .= '<'.'?php $enumItems = explode(\',\', $fields[\''.$k.'\']); ?'.'>';

  527.                 }

  528.                 foreach($ems as $em)

  529.                 {

  530.                     if($getTemplets=='add')

  531.                     {

  532.                         $aeform .= "<input type='checkbox' name='{$k}[]' value='$em' />$em \r\n";

  533.                     }

  534.                     else

  535.                     {

  536.                         $aeform .= "<input type='checkbox' name='{$k}[]' value='$em' {dede:if in_array('$em', \$enumItems)}checked{/dede:if} />$em \r\n";

  537.                     }

  538.                 }

  539.             }

  540.             //ENUM类型

  541.             else if( $this->fields[$k]['type']=='ENUM' )

  542.             {

  543.                 $ems = explode(',', $this->fields[$k]['em']);

  544.                 foreach($ems as $em)

  545.                 {

  546.                     if($getTemplets=='edit') {

  547.                         $aeform .= "<input type='radio' name='$k' value='$em' {dede:if \$fields['$k']}=='$em'}checked{/dede:if} />$em \r\n";

  548.                     }

  549.                     else {

  550.                         $aeform .= "<input type='radio' name='$k' value='$em' />$em \r\n";

  551.                     }

  552.                 }

  553.             }

  554.             else

  555.             {

  556.                 $aeform  = "<input type='input' name='{$k}' class='txt' value='$dfvalue' />";

  557.             }

  558.             $fielditem .= "    <tr>\r\n<td height='28' align='center' bgcolor='#FFFFFF'>{$title}</td>\r\n<td bgcolor='#FFFFFF'>{$aeform}</td>\r\n</tr>\r\n";

  559.         }

  560.         $tempItems['fields'] = $fielditem;

  561.         foreach($tempItems as $k=>$v)

  562.         {

  563.             $tempstr = str_replace("~$k~", $v, $tempstr);

  564.         }

  565.         $fp = fopen($template, 'w');

  566.         fwrite($fp, $tempstr);

  567.         fclose($fp);

  568.     }

  569. 

  570.     // 读取数据

  571.     function EditData()

  572.     {

  573.         $template = $this->templateDir.'/'.$this->tplName.'_edit.htm';

  574.         //生成列表模板

  575.         if( !file_exists($template) || $this->isDebug )

  576.         {

  577.             $this->MakeAddEditTemplate('edit');

  578.         }

  579.         $whereQuery = '';

  580.         $GLOBALS[$this->primaryKey] = isset($GLOBALS[$this->primaryKey])? $GLOBALS[$this->primaryKey] : request($this->primaryKey);

  581.         if(empty($GLOBALS['primarykey'][0]) && empty($GLOBALS[$this->primaryKey][0]))

  582.         {

  583.             ShowMsg('请选择要修改的记录！', '-1');

  584.             exit();

  585.         }

  586.         if(preg_match("/,/", $this->primaryKey))

  587.         {

  588.             $whereQuery = "WHERE md5(CONCAT('key', `".str_replace(',', '`,`', $this->primaryKey)."`) = '{$GLOBALS['primarykey'][0]}' ";

  589.         }

  590.         else

  591.         {

  592. 			$pkey = (request('get') == 'yes')? request($this->primaryKey) : $GLOBALS[$this->primaryKey][0];

  593.             $whereQuery = "WHERE `{$this->primaryKey}` = '".$GLOBALS[$this->primaryKey][0]."' ";

  594.         }

  595. 

  596.         //列出数据

  597.         $query = "SELECT * FROM `{$this->tableName}` $whereQuery ";

  598.         $this->SetTemplate($template);

  599.         $this->SetSource($query);

  600.         $this->Display();

  601.     }

  602. 

  603.     // 新增数据

  604.     function AddData()

  605.     {

  606.         $template = $this->templateDir.'/'.$this->tplName.'_add.htm';

  607.         //生成列表模板

  608.         if( !file_exists($template) || $this->isDebug )

  609.         {

  610.             $this->MakeAddEditTemplate('add');

  611.         }

  612.         //生成发布表单数据

  613.         $this->SetTemplate($template);

  614.         $this->Display();

  615.         exit();

  616.     }

  617. 

  618.     // 保存新增数据

  619.     function SaveAddData($isturn=TRUE)

  620.     {

  621.         $allfield = $allvalue = '';

  622.         foreach($this->fields as $k=>$v)

  623.         {

  624.             //自动递增键不处理

  625.             if($k==$this->autoField)

  626.             {

  627.                 continue;

  628.             }

  629.             $allfield .= ($allfield=='' ? "`$k`" : ' , '."`$k`");

  630.             $v = $this->GetData($k);

  631.             $allvalue .= ($allvalue=='' ? "'$v'" : ' , '."'$v'");

  632.         }

  633.         $inQuery = "INSERT INTO `$this->tableName`($allfield) VALUES($allvalue); ";

  634.         $rs = $this->dsql->ExecuteNoneQuery($inQuery);

  635.         

  636.         //只返回结果

  637.         if(!$isturn)

  638.         {

  639.             return $rs;

  640.         }

  641.         //完全处理模式

  642.         $gourl = !empty($_COOKIE['LURD_GOBACK_URL']) ? $_COOKIE['LURD_GOBACK_URL'] : '-1';

  643.         if(!$rs)

  644.         {

  645.             $this->dsql->SaveErrorLog($inQuery);

  646.             ShowMsg('保存数据失败，请检查数据库错误日志！', $gourl);

  647.             exit();

  648.         }

  649.         else

  650.         {

  651.             ShowMsg('成功保存一组数据！', $gourl);

  652.             exit();

  653.         }

  654.     }

  655. 

  656.     // 保存编辑数据

  657.     function SaveEditData($isturn=TRUE)

  658.     {

  659.         $editfield = '';

  660.         foreach($this->fields as $k=>$v)

  661.         {

  662.             //自动递增键不处理

  663.             $GLOBALS[$k] = isset($GLOBALS[$k])? $GLOBALS[$k] : $GLOBALS['request']->forms[$k];

  664.             if($k==$this->autoField || !isset($GLOBALS[$k]))

  665.             {

  666.                 continue;

  667.             }

  668.             $v = $this->GetData($k);

  669.             $editfield .= ($editfield=='' ? " `$k`='$v' " : ",\n `$k`='$v' ");

  670.         }

  671.         //获得主键值

  672.         if(preg_match("#,#", $this->primaryKey))

  673.         {

  674.             $keyvalue = (isset($GLOBALS['primarykey']) ? $GLOBALS['primarykey'] : '');

  675.         }

  676.         else

  677.         {

  678.             $keyvalue = $this->GetData($this->primaryKey);

  679.         }

  680.         $keyvalue = preg_replace("#[^0-9a-z]#i", "", $keyvalue);

  681.         if( !preg_match("#,#", $this->primaryKey) )

  682.         {

  683.             $inQuery = " UPDATE `$this->tableName` SET $editfield WHERE `{$this->primaryKey}`='{$keyvalue}' ";

  684.         }

  685.         else

  686.         {

  687.             $inQuery = " UPDATE `$this->tableName` SET $editfield WHERE md5('key', `".str_replace(',','`,`',$this->primaryKey)."`='{$keyvalue}' ";

  688.         }

  689.         $rs = $this->dsql->ExecuteNoneQuery($inQuery);

  690.         //只返回结果

  691.         if(!$isturn)

  692.         {

  693.             return $rs;

  694.         }

  695.         //完全处理模式

  696.         $gourl = !empty($_COOKIE['LURD_GOBACK_URL']) ? $_COOKIE['LURD_GOBACK_URL'] : '-1';

  697.         if(!$rs)

  698.         {

  699.             $this->dsql->SaveErrorLog($inQuery);

  700.             ShowMsg('保存数据失败，请检查数据库错误日志！', $gourl);

  701.             exit();

  702.         }

  703.         else

  704.         {

  705.             ShowMsg('成功保存一组数据！', $gourl);

  706.             exit();

  707.         }

  708.     }

  709. 	

  710.     //获得当前网址

  711.     function GetCurUrl()

  712.     {

  713.         if(!empty($_SERVER["REQUEST_URI"]))

  714.         {

  715.             $nowurl = $_SERVER["REQUEST_URI"];

  716.             $nowurls = explode("?",$nowurl);

  717.             $nowurl = $nowurls[0];

  718.         }

  719.         else

  720.         {

  721.             $nowurl = $_SERVER["PHP_SELF"];

  722.         }

  723.         return $nowurl;

  724.     }

  725. 

  726.     // 删除数据

  727.     function DelData($isturn=TRUE)

  728.     {

  729.         $GLOBALS[$this->primaryKey] = isset($GLOBALS[$this->primaryKey])? $GLOBALS[$this->primaryKey] : request($this->primaryKey);

  730.         if(preg_match("#,#", $this->primaryKey))

  731.         {

  732.             $keyArr = (isset($GLOBALS['primarykey']) ? $GLOBALS['primarykey'] : '');

  733.         }

  734.         else

  735.         {

  736.             $keyArr = isset($GLOBALS[$this->primaryKey]) ? $GLOBALS[$this->primaryKey] : '';

  737.         }

  738.         if(!is_array($keyArr))

  739.         {

  740.             ShowMsg('没指定要删除的记录！', '-1');

  741.             exit();

  742.         }

  743.         else

  744.         {

  745.             $isid = !preg_match("#,#", $this->primaryKey) ? TRUE : FALSE;

  746.             $i = 0;

  747.             foreach($keyArr as $v)

  748.             {

  749.                 $v = preg_replace("#[^0-9a-z]#i", '', $v);

  750.                 if(empty($v)) continue;

  751.                 $i++;

  752.                 if($isid)

  753.                 {

  754.                     $this->dsql->ExecuteNoneQuery("DELETE FROM `{$this->tableName}` WHERE `$this->primaryKey`='$v' ");

  755.                 }

  756.                 else

  757.                 {

  758.                     $this->dsql->ExecuteNoneQuery("DELETE FROM `{$this->tableName}` WHERE md5('key', `".str_replace(',','`,`',$this->primaryKey)."`='$v' ");

  759.                 }

  760.             }

  761.             if($isturn)

  762.             {

  763.                 $gourl = !empty($_COOKIE['LURD_GOBACK_URL']) ? $_COOKIE['LURD_GOBACK_URL'] : '-1';

  764.                 ShowMsg('成功删除指定的记录！', $gourl);

  765.                 exit();

  766.             }

  767.             else

  768.             {

  769.                 return $i;

  770.             }

  771.         }

  772.     }

  773.     

  774.     //联结其它表(用于数据查询的情况)

  775.     //$tablelurd 目标表lurd对象, $linkfields select的字段

  776.     //$mylinkid 当前表用于联结的字段

  777.     //$linkid 目标表用于联结的字段

  778.     function AddLinkTable(&$tablelurd, $mylinkid, $linkid, $linkfields='*')

  779.     {

  780.         if(trim($linkfields)=='') $linkfields = '*';

  781.         $this->linkTables[] = array($tablelurd, $mylinkid, $linkid, $linkfields);

  782.         //记录附加表的字段信息

  783.         if($linkfields != '*')

  784.         {

  785.             $fs = explode(',', $linkfields);

  786.             foreach($fs as $f)

  787.             {

  788.                 $f = trim($f);

  789.                 if(isset($tablelurd->fields[$f]))

  790.                 {

  791.                     $this->addFields[$f] = $tablelurd->fields[$f];

  792.                     $this->addFields[$f]['table'] = $tablelurd->tableName;

  793.                 }

  794.             }

  795.         }

  796.         else

  797.         {

  798.             foreach($tablelurd->fields as $k=>$v) 

  799.             {

  800.                 $this->addFields[$k] = $v;

  801.                 $this->addFields[$k]['table'] = $tablelurd->tableName;

  802.             }

  803.         }

  804.     }

  805. 

  806.     //分析表结构

  807.     function AnalyseTable()

  808.     {

  809.         if($this->tableName == '')

  810.         {

  811.             exit(" No Input Table! ");

  812.         }

  813.         

  814.         $this->dsql->Execute('ana', " SHOW CREATE TABLE `{$this->tableName}`; ");

  815.         $row = $this->dsql->GetArray('ana', MYSQL_NUM);

  816.         if(!is_array($row))

  817.         {

  818.             exit(" Analyse Table `$tablename` Error! ");

  819.         }

  820. 

  821.         // 先去掉内容中的注释

  822.         // $row[1] = preg_replace('#COMMENT \'(.*?)\'#i', '', $row[1]);

  823.         // echo $row[1];exit;

  824.         $flines = explode("\n", $row[1]);

  825.         $parArray = array('date', 'float', 'int', 'char', 'text', 'bin', 'em');

  826.         $prikeyTmp = '';

  827.         for($i=1; $i < count($flines)-1; $i++ )

  828.         {

  829.             $line = trim($flines[$i]);

  830.             $lines = explode(' ', str_replace('`', '', $line));

  831. 

  832.             if( $lines[0] == 'KEY' ) continue;

  833.             if( $lines[0] == 'UNIQUE' ) continue;

  834.             

  835.             if( $lines[0] == 'PRIMARY' )

  836.             {

  837.                 $this->primaryKey = preg_replace("/[\(\)]|,$/", '', $lines[count($lines)-1]);

  838.                 continue;

  839.             }

  840.             //字段名称、类型

  841.             $this->fields[$lines[0]] = array('type' => '',  'length' => '', 'unsigned' => FALSE, 'autokey' => FALSE, 'null' => TRUE, 'default' => '', 'em' => '', 'comment' => '');

  842.             $this->fields[$lines[0]]['type'] = strtoupper(preg_replace("/\(.*$|,/", '', $lines[1]));

  843.             $this->fields[$lines[0]]['length'] = preg_replace("/^.*\(|\)/", '', $lines[1]);

  844.             if(preg_match("#[^0-9]#", $this->fields[$lines[0]]['length']))

  845.             {

  846.                 if($this->fields[$lines[0]]['type'] == 'SET'

  847.                     || $this->fields[$lines[0]]['type'] == 'ENUM')

  848.                 {

  849.                     $this->fields[$lines[0]]['em'] = preg_replace("/'/", '', $this->fields[$lines[0]]['length']);

  850.                 }

  851.                 $this->fields[$lines[0]]['length'] = 0;

  852.             }

  853.             

  854.             //把特定类型的数据加入数组中

  855.             foreach($parArray as $v)

  856.             {

  857.                 $tmpstr = "if(in_array(\$this->fields[\$lines[0]]['type'], \$this->{$v}Types))

  858.                 {

  859.                     \$this->{$v}Fields[] = \$lines[0];

  860.                 }";

  861.                 eval($tmpstr);

  862.             }

  863.             if( !in_array($this->fields[$lines[0]]['type'], $this->textTypes) 

  864.                 && !in_array($this->fields[$lines[0]]['type'], $this->binTypes) )

  865.             {

  866.                 $prikeyTmp .= ($prikeyTmp=='' ? $lines[0] : ','.$lines[0]);

  867.             }

  868.             

  869.             //分析其它属性

  870.             // echo $line;exit;

  871.             if(preg_match("#unsigned#i", $line))

  872.             {

  873.                 $this->fields[$lines[0]]['unsigned'] = TRUE;

  874.             }

  875.             if(preg_match("#auto_increment#i", $line))

  876.             {

  877.                 $this->fields[$lines[0]]['autokey'] = TRUE;

  878.                 $this->autoField = $lines[0];

  879.             }

  880.             if(preg_match("#NOT NULL#i", $line))

  881.             {

  882.                 $this->fields[$lines[0]]['null'] = FALSE;

  883.             }

  884.             if(preg_match("#default#i", $line))

  885.             {

  886.                 preg_match("#default '(.*?)'#i", $line, $dfmatchs);

  887.                 $this->fields[$lines[0]]['default'] = isset($dfmatchs[1])? $dfmatchs[1] : NULL;

  888.             }

  889.             if(preg_match("#comment#i", $line))

  890.             {

  891.                 preg_match("#comment '(.*?)'#i", $line, $cmmatchs);

  892.                 $this->fields[$lines[0]]['comment'] = isset($cmmatchs[1])? $cmmatchs[1] : NULL;

  893.             }

  894.             

  895.         }//end for

  896.         if( $this->primaryKey=='' )

  897.         {

  898.             $this->primaryKey = $prikeyTmp;

  899.         }

  900.     }

  901.     

  902.     /**

  903.     * 增加搜索条件

  904.     * @parem $fieldname 字段名称

  905.     * @parem $fieldvalue 传入的 value 值必须先经过转义

  906.     * @parem $condition 条件 >、<、=、<> 、like、%like%、%like、like%

  907.     * @parem $linkmode AND 或 OR

  908.     */

  909.     function AddSearchParameter($fieldname, $fieldvalue, $condition, $linkmode='AND')

  910.     {

  911.         $c = count($this->searchParameters);

  912.         //对于指定了多个字段，使用 CONCAT 进行联结（通常是like操作）

  913.         if( preg_match('/,/', $fieldname) )

  914.         {

  915.             $fs = explode(',', $fieldname);

  916.             $fieldname = "CONCAT(";

  917.             $ft = '';

  918.             foreach($fs as $f)

  919.             {

  920.                 $f = trim($f);

  921.                 $ft .= ($ft=='' ? "`{$f}`" : ",`{$f}`");

  922.             }

  923.             $fieldname .= "{$ft}) ";

  924.         }

  925.         $this->searchParameters[$c]['field'] = $fieldname;

  926.         $this->searchParameters[$c]['value'] = $fieldvalue;

  927.         $this->searchParameters[$c]['condition'] = $condition;

  928.         $this->searchParameters[$c]['mode'] = $linkmode;

  929.     }

  930. 

  931.     // 获取搜索条件

  932.     function GetSearchQuery()

  933.     {

  934.         $wquery = '';

  935.         if( count( $this->searchParameters ) == 0 )

  936.         {

  937.             return '';

  938.         }

  939.         else

  940.         {

  941.             foreach($this->searchParameters as $k=>$v)

  942.             {

  943.                 if( preg_match("/like/i", $v['condition']) )

  944.                 {

  945.                     $v['value'] = preg_replace("/like/i", $v['value'], $v['condition']);

  946.                 }

  947.                 $v['condition'] = preg_replace("/%/", '', $v['condition']);

  948.                 if( $wquery=='' )

  949.                 {

  950.                     if(!preg_match("/\./", $v['field'])) $v['field'] = "{$v['field']}";

  951.                     $wquery .= "WHERE ".$v['field']." {$v['condition']} '{$v['value']}' ";

  952.                 }

  953.                 else

  954.                 {

  955.                     if(!preg_match("/\./", $v['field'])) $v['field'] = "{$v['field']}";

  956.                     $wquery .= $v['mode']." ".$v['field']." {$v['condition']} '{$v['value']}' ";

  957.                 }

  958.             }

  959.         }

  960.         return $wquery ;

  961.     }

  962.     

  963.     //把从表单传递回来的数值进行处理

  964.     function GetData($fname)

  965.     {

  966.         $reValue = '';

  967.         $ftype = $this->fields[$fname]['type'];

  968.         $GLOBALS[$fname] = isset($GLOBALS[$fname])? $GLOBALS[$fname] : @$GLOBALS['request']->forms[$fname];

  969.         //二进制单独处理

  970.         if( in_array($ftype, $this->binTypes) )

  971.         {

  972.             return $this->GetBinData($fname);

  973.         }

  974.         //没有这个变量返回默认值

  975.         else if( !isset($GLOBALS[$fname]) )

  976.         {

  977.             if( isset($this->fields[$fname]['default']) )

  978.             {

  979.                 return $this->fields[$fname]['default'];

  980.             }

  981.             else

  982.             {

  983.                 if(in_array($ftype, $this->intTypes) || in_array($ftype, $this->floatTypes)) {

  984.                     return 0;

  985.                 }

  986.                 else if(in_array($ftype, $this->charTypes) || in_array($ftype, $this->textTypes)) {

  987.                     return '';

  988.                 }

  989.                 else {

  990.                     return 'NULL';

  991.                 }

  992.             }

  993.         }

  994.         //处理整数

  995.         else if( preg_match("#YEAR|INT#", $ftype) )

  996.         {

  997.             // $temp = isset($GLOBALS[$fname][0])? $GLOBALS[$fname][0] : 0;

  998.             $negTag = is_int($GLOBALS[$fname]) && $GLOBALS[$fname]< 0 ? '-' : $GLOBALS[$fname];

  999.             $reValue = preg_replace("#[^0-9]#", '', $GLOBALS[$fname]);

  1000.             $reValue = empty($reValue) ? 0 : intval($reValue);

  1001.             if($negTag=='-' && !$this->fields[$fname]['unsigned']

  1002.                  && $reValue != 0 && $ftype != 'YEAR')

  1003.             {

  1004.                 $reValue = intval('-'.$reValue);

  1005.             }

  1006.         }

  1007.         //处理小数类型

  1008.         else if(in_array($ftype, $this->floatTypes))

  1009.         {

  1010.             $negTag = $GLOBALS[$fname][0];

  1011.             $reValue = preg_replace("#[^0-9\.]|^\.#", '', $GLOBALS[$fname]);

  1012.             $reValue = empty($reValue) ? 0 : doubleval($reValue);

  1013.             if($negTag=='-' && !$this->fields[$fname]['unsigned'] && $reValue != 0)

  1014.             {

  1015.                 $reValue = intval('-'.$reValue);

  1016.             }

  1017.         }

  1018.         //字符串类型

  1019.         else if(in_array($ftype, $this->charTypes))

  1020.         {

  1021.             $reValue = cn_substrR($this->StringSafe($GLOBALS[$fname]), $this->fields[$fname]['length']);

  1022.         }

  1023.         //文本类型

  1024.         else if(in_array($ftype, $this->textTypes))

  1025.         {

  1026.             $reValue = $this->StringSafe($GLOBALS[$fname]);

  1027.         }

  1028.         //SET类型

  1029.         else if($ftype=='SET')

  1030.         {

  1031.             $sysSetArr = explode(',', $this->fields[$fname]['em']);

  1032.             if( !is_array($GLOBALS[$fname]) )

  1033.             {

  1034.                 $setArr[] = $GLOBALS[$fname];

  1035.             }

  1036.             else

  1037.             {

  1038.                 $setArr = $GLOBALS[$fname];

  1039.             }

  1040.             $reValues = array();

  1041.             foreach($setArr as $a)

  1042.             {

  1043.                 if(in_array($a, $sysSetArr)) $reValues[] = $a;

  1044.             }

  1045.             $reValue = count($reValues)==0 ? 'NULL' : join(',', $reValues);

  1046.         }

  1047.         //枚举类型

  1048.         else if($ftype=='ENUM')

  1049.         {

  1050.             $sysEnumArr = explode(',', $this->fields[$fname]['em']);

  1051.             if(in_array($GLOBALS[$fname], $sysEnumArr)) $reValue = $GLOBALS[$fname];

  1052.             else $reValue = 'NULL';

  1053.         }

  1054.         //时间日期类型

  1055.         else if(in_array($ftype, $this->dateTypes))

  1056.         {

  1057.             if($ftype=='TIMESTAMP')

  1058.             {

  1059.                 $reValue = GetMkTime($GLOBALS[$fname]);

  1060.             }

  1061.             else

  1062.             {

  1063.                 $reValue = preg_replace("#[^0-9 :-]#", '', $GLOBALS[$fname]);

  1064.             }

  1065.         }

  1066.         return $reValue;

  1067.     }

  1068.     

  1069.     //对请求的字符串进行安全处理

  1070.     function StringSafe($str, $safestep=-1)

  1071.     {

  1072.         $safestep = ($safestep > -1) ? $safestep : $this->stringSafe;

  1073.         //过滤危险的HTML(默认级别)

  1074.         if($safestep == 1)

  1075.         {

  1076.             $str = preg_replace("#script:#i", "ｓｃｒｉｐｔ：", $str);

  1077.             $str = preg_replace("#<[\/]{0,1}(link|meta|ifr|fra|scr)[^>]*>#isU", '', $str);

  1078.             $str = preg_replace("#[\r\n\t ]{1,}#", ' ', $str);

  1079.             return $str;

  1080.         }

  1081.         //完全禁止HTML

  1082.         //并转换一些不安全字符串（如：eval(、union、CONCAT(、--、等）

  1083.         else if($this->stringSafe == 2)

  1084.         {

  1085.             $str = addslashes(dede_htmlspecialchars(stripslashes($str)));

  1086.             $str = preg_replace("#eval#i", 'ｅｖａｌ', $str);

  1087.             $str = preg_replace("#union#i", 'ｕｎｉｏｎ', $str);

  1088.             $str = preg_replace("#concat#i", 'ｃｏｎｃａｔ', $str);

  1089.             $str = preg_replace("#--#", '－－', $str);

  1090.             $str = preg_replace("#[\r\n\t ]{1,}#", ' ', $str);

  1091.             return $str;

  1092.         }

  1093.         //不作安全处理

  1094.         else

  1095.         {

  1096.             return $str;

  1097.         }

  1098.     }

  1099.     //保存二进制文件数据

  1100.     //为了安全起见，对二进制数据保存使用base64编码后存入

  1101.     function GetBinData($fname)

  1102.     {

  1103.         $lurdtmp = DEDEDATA.'/lurdtmp';

  1104.         if(!isset($_FILES[$fname]['tmp_name']) || !is_uploaded_file($_FILES[$fname]['tmp_name']))

  1105.         {

  1106.             return '';

  1107.         }

  1108.         else

  1109.         {

  1110.             $tmpfile = $lurdtmp.'/'.md5( time() . Sql::ExecTime() . mt_rand(1000, 5000) ).'.tmp';

  1111.             $rs = move_uploaded_file($_FILES[$fname]['tmp_name'], $tmpfile);

  1112.             if(!$rs) return '';

  1113.             $fp = fopen($tmpfile, 'r');

  1114.             $data = base64_encode(fread($fp, filesize($tmpfile)));

  1115.             fclose($fp);

  1116.             return $data;

  1117.         }

  1118.     }

  1119. 

  1120.     //格式化浮点数字

  1121.     function FormatFloat($fvalue, $ftype='')

  1122.     {

  1123.         if($ftype=='') $ftype='%0.4f';

  1124.         return sprintf($ftype, $fvalue);

  1125.     }

  1126.     

  1127.     //获得默认时间格式

  1128.     function GetDateTimeDf($ftype)

  1129.     {

  1130.         if($ftype=='DATE') return 'Y-m-d';

  1131.         else if($ftype=='TIME') return 'H:i:s';

  1132.         else if($ftype=='YEAR') return 'Y';

  1133.         else return 'Y-m-d H:i:s';

  1134.     }

  1135.     

  1136.     //格式化日期

  1137.     function FormatDate($fvalue, $ftype, $fformat='')

  1138.     {

  1139.         if($ftype=='INT' || $ftype='TIMESTAMP' ) return MyDate($fvalue, $fformat);

  1140.         else return $fvalue;

  1141.     }

  1142. 

  1143. }

  1144. ?>