Exemplos de turn_string_sql em PHP

Exemplo n.º 1

Arquivo: logincheck.php Projeto: ZH9009/jjczj

<?php

require_once '../include/conmysql.php';
require_once '../include/public_function.php';
require_once '../include/user_function.php';
$public_function = new public_function();
$blog_userid = $_SESSION['UID'];
$user_type = $_SESSION['UTYPE'];
if ($_SESSION['UID'] == null || $_SESSION['UID'] == 0) {
    echo "<script>location.href='../admin.php'</script>";
}
$public_function = new public_function();
$user_function = new user_function();
$username = turn_string_sql($_REQUEST['name']);
$userpasswd = md5(md5(md5(md5(md5(md5(md5(md5(md5(md5(md5(md5(turn_string_sql($_REQUEST['pwd'])))))))))))));
function clearCookies()
{
    setcookie('uid', '', time() - 3600);
}
?>

<?php 
$sql = "select user_id,user_name,user_passwd,user_isedlogin,user_type from blog_user where user_name='{$username}'";
$user_result = mysql_query($sql);
if (mysql_num_rows($user_result) > 0) {
    $user_array = mysql_fetch_array($user_result);
    if ($user_array['user_passwd'] == $userpasswd) {
        if ($user_array['user_isedlogin'] == 1) {
            $user_function->user_login_registersession($user_array['user_id'], $user_array['user_type']);
            //setcookie("UID1", "cccccccccccc", time()+3600*24*365);
            //$user_function->user_login_registercookie($user_array['user_id'],$user_array['user_type']);

Exemplo n.º 2

Arquivo: username.php Projeto: ZH9009/jjczj

/*********
**
Writer:David
Date  :2013-07-02
Describe:实现验证登录名
**
**********/
//数据库连接，smarty引入
require_once '../../../../include/conmysql.php';
require_once '../../../../include/public_function.php';
require_once '../../../../include/blog_menu_function.php';
require_once '../../../../include/user_function.php';
$public_function = new public_function();
$user_function = new user_function();
$username = turn_string_sql($_GET['pid']);
header("content-type:text/html;charset=gb2312");
if ($username == "") {
    echo "<font color='red'>警告:用户名不能为空!</font>";
    exit;
} else {
    $sql = "select user_name,user_isedlogin from blog_user where user_name='" . $username . "'";
    $query = $public_function->getresult($sql);
    $num = $public_function->getnum($query);
    $array = $public_function->getarray($query);
    if ($num > 0) {
        if ($array['user_isedlogin'] == 1) {
            echo "<font color='green'>√&nbsp;恭喜:该用户名正确</font>";
            exit;
        } else {
            echo "<font color='red'>警告:该用户无登陆权限，请联系管理员</font>";

Exemplo n.º 3

Arquivo: gl_blog.php Projeto: ZH9009/jjczj

	$bg="../../images/bg/bg3.jpg";
}
$types_option=turn_string_str($_GET['types']);
//日记管理
$select_blog_sql="select blog_id,blog_title,
	blog_content,blog_userid,blog_type,blog_right,blog_date,
	blog_viewtime,blog_shoucangtime,blog_zhuanfatime,blog_zantime,
	blog_fenxiangtime,blog_isedview,blog_isedzhuanzai,blog_isedshoucang,
	blog_isedzan,blog_isedfenxiang,blog_isedshow from blog_blog where blog_userid='$blog_userid'
	order by blog_id desc";
$select_blog_result=$public_function->getresult($select_blog_sql);
$select_blog_num=$public_function->getnum($select_blog_result);

$settypes="gl_blog";
if($types_option=="setpagesize"){
	$public_function->setPageSize(turn_string_sql($_GET['pagesizeset']), turn_string_sql($_GET['settypes']), $blog_userid);
	echo "<script>location.href='gl_blog.php'</script>";
}
$ised_pagesize_result=mysql_query("select * from czj_pagesize where types='$settypes' and userid='$blog_userid'");
$ised_pagesize_num=mysql_num_rows($ised_pagesize_result);
$ised_pagesize_array=mysql_fetch_array($ised_pagesize_result);
if($ised_pagesize_num>0){
	$pagesize=$ised_pagesize_array['pagesize'];
}else{
	$pagesize=$PAGESIZE;
}

//$pagesize=$PAGESIZE;
$yeshu=ceil($select_blog_num/$pagesize);          //求得一共需要多少页
$geshu=3;                                  //一页显示10个页码*-*
if($_POST['page']!=null){

Exemplo n.º 4

Arquivo: update_bbs_type.php Projeto: ZH9009/jjczj

<?php

require_once '../../../include/conmysql.php';
require_once '../../../include/public_function.php';
$public_function = new public_function();
$blog_userid = $_SESSION['UID'];
$bbstypeid = turn_string_sql($_GET['bbstypeid']);
$bbs_type = turn_string_sql($_GET['bbs_type']);
if ($bbstypeid == "" || $bbstypeid == 0 || $bbstypeid == null) {
    $sql = "insert into blog_bbs_type(bbs_type) values('{$bbs_type}')";
} else {
    $sql = "update blog_bbs_type set bbs_type='{$bbs_type}' where ids='{$bbstypeid}'";
}
$select_sql = "select bbs_type from blog_bbs_type where bbs_type='{$bbs_type}'";
$select_result = $public_function->getresult($select_sql);
$select_num = $public_function->getnum($select_result);
if ($select_num > 0) {
    echo "<script>location.href='../shyule_bbsmodule_gl.php'</script>";
} else {
    $result = $public_function->getresult($sql);
    echo "<script>location.href='../shyule_bbsmodule_gl.php'</script>";
}