PHP checkSqlArg Examples

Example #1

File: updateforapp.php Project: gaoerjun/Web

    $error = "请输入祈祷意向!";
    gotoend();
}
if (!isset($_SESSION['pray_time'])) {
    $_SESSION['pray_time'] = 0;
}
$cur_time = date(time());
$last_time = $_SESSION['pray_time'];
if (abs($cur_time - $last_time) < 3600) {
    //10分钟只能提交一次祈祷意向
    $error = '请不要频繁提交祈祷意向，' . (3600 - abs($cur_time - $last_time)) . '秒后再试，主佑！';
    gotoend();
} else {
    $_SESSION['pray_time'] = $cur_time;
}
if (isset($_GET['name'])) {
    $name = checkSqlArg(trim($_GET['name']));
}
if (strpos($name, "张译公") !== false || strpos($text, "张译公") !== false) {
    die("");
}
//先从数据库中获取
$result = mysql_query("insert into pray (name,text,createtime) values ('" . $name . "','" . $text . "',utc_timestamp());");
if (mysql_affected_rows() < 1) {
    $error = "添加祈祷意向失败，请稍后重试...";
    gotoend();
}
//send to wbto
//add2weibolist('#彼此代祷# '.$name.'：'.$text);
$ret['error'] = $error;
die($_GET['callback'] . '(' . json_encode($ret) . ')');

Example #2

File: login.php Project: gaoerjun/Web

<?php

require_once "../include/dbconn.php";
require_once "../include/define.php";
session_start();
header("Content-type: text/html; charset=utf-8");
//登录
if (!isset($_POST['submit'])) {
    exit('非法访问!');
}
$username = checkSqlArg($_POST['username']);
$password = checkSqlArg($_POST['password']);
//检测用户名及密码是否正确
$result = mysql_query("select * from users where username='******' and password='******' limit 1;");
if ($result = mysql_fetch_array($result)) {
    //登录成功
    $_SESSION['username'] = $username;
    $_SESSION['userid'] = $result['id'];
    $_SESSION['name'] = $result['name'];
    $_SESSION['isadmin'] = $result['isadmin'];
    exit('登录成功!');
}
exit('登录失败!');

Example #3

File: update.php Project: gaoerjun/Web

$last_time = $_SESSION['pray_time'];
if (abs($cur_time - $last_time) < 3600) {
    //10分钟只能提交一次祈祷意向
    $error = '请不要频繁提交祈祷意向，' . (3600 - abs($cur_time - $last_time)) . '秒后再试，主佑！';
    gotoend();
} else {
    $_SESSION['pray_time'] = $cur_time;
}
if (!isset($_POST['cap'])) {
    die('验证码错误！');
} else {
    $cap = trim($_POST['cap']);
    if ($cap != $_SESSION["helloweba_math"]) {
        die('验证码错误！');
    }
}
if (isset($_POST['name'])) {
    $name = checkSqlArg(trim($_POST['name']));
    $_SESSION['name'] = $name;
}
if (strpos($name, "张译公") !== false || strpos($text, "张译公") !== false) {
    die("");
}
//先从数据库中获取
$result = mysql_query("insert into pray (name,text,createtime) values ('" . $name . "','" . $text . "',utc_timestamp());");
if (mysql_affected_rows() < 1) {
    $error = "添加祈祷意向失败，请稍后重试...";
    gotoend();
}
//send to wbto
//add2weibolist('#彼此代祷# '.$name.'：'.$text);