static function Html_Special($date) { if (is_array($date)) { foreach ($date as $key => $value) { $string[Tool::Html_Special($key)] = Tool::Html_Special($value); } return $string; } elseif (is_object($date)) { foreach ($date as $key => $value) { $string->{$key} = Tool::Html_Special($value); } return $string; } else { return htmlspecialchars($date); } }
public function updateManage() { $this->username = Tool::Html_Special($_POST['admin_user']); $this->pass = sha1($_POST['admin_pass']); $this->level = $_POST['level']; $this->id = $_GET['id']; if (empty($this->pass)) { //如果密码为空,那么不修改密码 $sql = "update\r\n\t\t\t\t\t\t\t\t\t\tmanage\r\n\t\t\t\t\t\t\t\tset\r\n\t\t\t\t\t\t\t\t\t\tusername='******',\r\n\t\t\t\t\t\t\t\t\t\tlevel='{$this->level}'\r\n\t\t\t\t\t\t\twhere\r\n\t\t\t\t\t\t\t\t\t\tid='{$_POST['id']}';"; } else { //密码不为空 $sql = "update\r\n\t\t\t\t\t\t\t\t\t\t\t\tmanage \r\n\t\t\t\t\t\t\t\t\t\tset\r\n\t\t\t\t\t\t\t\t\t\t\t\t username='******',\r\n\t\t\t\t\t\t\t\t\t\t\t\tpassword='******',\r\n\t\t\t\t\t\t\t\t\t\t\t\tlevel='{$this->level}'\r\n\t\t\t\t\t\t\t\t\t where \r\n\t\t\t\t\t\t\t\t\t\t\t\tid='{$_POST['id']}';"; } $affected_rows = parent::add_up_de($sql); if ($affected_rows == 1) { Tool::alertLocation('恭喜你,修改成功', $_POST['prev_url']); } else { Tool::alertBack('很遗憾,修改失败'); } }
public function Add_Nav() { $this->sort = $this->Next_Nav_Id(); $this->name = Tool::Html_Gpc(Tool::Html_Special($_POST['nav_name'])); $this->info = Tool::Html_Special($_POST['nav_info']); $this->parid = $_POST['parid']; $sql = "insert into \r\n\t\t\t\t\t\t\t\t\t\t\tnav \r\n\t\t\t\t\t\t\t\t\t\t\t(name,\r\n\t\t\t\t\t\t\t\t\t\t\tinfo,\r\n\t\t\t\t\t\t\t\t\t\t\tparid,\r\n\t\t\t\t\t\t\t\t\t\t\tsort) \r\n\t\t\t\t\t\t\t\tvalues (\r\n\t\t\t\t\t\t\t\t\t\t\t'{$this->name}',\r\n\t\t\t\t\t\t\t\t\t\t\t'{$this->info}',\r\n\t\t\t\t\t\t\t\t\t\t\t'{$this->parid}',\r\n\t\t\t\t\t\t\t\t\t\t\t'{$this->sort}')"; $affected_rows = parent::add_up_de($sql); if ($affected_rows == 1) { Tool::alertLocation('恭喜你,导航新增成功', 'nav.php?action=show'); } else { Tool::alertBack('很遗憾,导航新增失败'); } }