PHP 过滤示例

示例#1

文件： doeditkey.php 项目： Zhi2014/cogs

<?php

require_once "../include/header.php";
gethead(8, "admin", "");
过滤();
$p = new DataAccess();
$sql = "update settings set value='{$_POST[value]}' where ssid={$_REQUEST[ssid]}";
$p->dosql($sql);
提示("修改参数<code>{$_REQUEST[ssid]}</code>成功！", 取路径("admin/settings.php?settings=settings"));

示例#2

文件： doeditprob.php 项目： Zhi2014/cogs

<?php

require_once "../include/header.php";
gethead(8, "sess", "");
过滤("cate");
$uid = (int) $_SESSION['ID'];
$pid = (int) $_GET['pid'];
$filename = $_POST['filename'];
if ($pid) {
    $p = new DataAccess();
    $sql = "select * from problem where pid={$pid}";
    $cnt = $p->dosql($sql);
    $d = $p->rtnrlt(0);
    if (!有此权限("修改题目") && $uid != $d['addid']) {
        异常("没有修改权限！", 取路径("problem/index.php"));
    }
}
if ($_GET[action] == "change") {
    if (有此权限("修改题目") && 有此权限("查看题目")) {
        $sql = "update problem set submitable=1-submitable where pid={$pid}";
        $p->dosql($sql);
        提示("修改可用与否成功！", 取路径("problem/index.php?order=asc&rank=submitable"));
    } else {
        异常("没有权限修改或查看题目！", 取路径("problem/index.php?order=asc&rank=submitable"));
    }
}
if ($_FILES['datafile']['size'] && !$_FILES['datafile']['error']) {
    //chdir($cfg['testdata']);
    chdir("/tmp");
    //$dir="{$cfg['testdata']}/{$filename}/";
    $dir = "/tmp/{$filename}/";