Members/shoshi/webvirt: cake/libs/sanitize.php annotate

author	Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp>
date	Sun, 24 Jul 2011 21:08:31 +0900
parents
children

rev	line source
0 261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	1 <?php
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	2 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	3 * Washes strings from unwanted noise.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	4 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	5 * Helpful methods to make unsafe strings usable.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	6 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	7 * PHP versions 4 and 5
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	8 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	9 * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	10 * Copyright 2005-2010, Cake Software Foundation, Inc. (http://cakefoundation.org)
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	11 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	12 * Licensed under The MIT License
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	13 * Redistributions of files must retain the above copyright notice.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	14 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	15 * @copyright Copyright 2005-2010, Cake Software Foundation, Inc. (http://cakefoundation.org)
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	16 * @link http://cakephp.org CakePHP(tm) Project
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	17 * @package cake
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	18 * @subpackage cake.cake.libs
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	19 * @since CakePHP(tm) v 0.10.0.1076
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	20 * @license MIT License (http://www.opensource.org/licenses/mit-license.php)
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	21 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	22
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	23 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	24 * Data Sanitization.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	25 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	26 * Removal of alpahnumeric characters, SQL-safe slash-added strings, HTML-friendly strings,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	27 * and all of the above on arrays.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	28 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	29 * @package cake
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	30 * @subpackage cake.cake.libs
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	31 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	32 class Sanitize {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	33
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	34 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	35 * Removes any non-alphanumeric characters.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	36 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	37 * @param string $string String to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	38 * @param array $allowed An array of additional characters that are not to be removed.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	39 * @return string Sanitized string
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	40 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	41 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	42 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	43 function paranoid($string, $allowed = array()) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	44 $allow = null;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	45 if (!empty($allowed)) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	46 foreach ($allowed as $value) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	47 $allow .= "\\$value";
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	48 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	49 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	50
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	51 if (is_array($string)) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	52 $cleaned = array();
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	53 foreach ($string as $key => $clean) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	54 $cleaned[$key] = preg_replace("/[^{$allow}a-zA-Z0-9]/", '', $clean);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	55 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	56 } else {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	57 $cleaned = preg_replace("/[^{$allow}a-zA-Z0-9]/", '', $string);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	58 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	59 return $cleaned;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	60 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	61
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	62 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	63 * Makes a string SQL-safe.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	64 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	65 * @param string $string String to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	66 * @param string $connection Database connection being used
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	67 * @return string SQL safe string
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	68 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	69 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	70 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	71 function escape($string, $connection = 'default') {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	72 $db =& ConnectionManager::getDataSource($connection);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	73 if (is_numeric($string) \|\| $string === null \|\| is_bool($string)) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	74 return $string;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	75 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	76 $string = substr($db->value($string), 1);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	77 $string = substr($string, 0, -1);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	78 return $string;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	79 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	80
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	81 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	82 * Returns given string safe for display as HTML. Renders entities.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	83 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	84 * strip_tags() does not validating HTML syntax or structure, so it might strip whole passages
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	85 * with broken HTML.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	86 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	87 * ### Options:
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	88 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	89 * - remove (boolean) if true strips all HTML tags before encoding
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	90 * - charset (string) the charset used to encode the string
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	91 * - quotes (int) see http://php.net/manual/en/function.htmlentities.php
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	92 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	93 * @param string $string String from where to strip tags
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	94 * @param array $options Array of options to use.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	95 * @return string Sanitized string
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	96 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	97 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	98 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	99 function html($string, $options = array()) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	100 static $defaultCharset = false;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	101 if ($defaultCharset === false) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	102 $defaultCharset = Configure::read('App.encoding');
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	103 if ($defaultCharset === null) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	104 $defaultCharset = 'UTF-8';
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	105 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	106 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	107 $default = array(
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	108 'remove' => false,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	109 'charset' => $defaultCharset,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	110 'quotes' => ENT_QUOTES
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	111 );
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	112
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	113 $options = array_merge($default, $options);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	114
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	115 if ($options['remove']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	116 $string = strip_tags($string);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	117 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	118
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	119 return htmlentities($string, $options['quotes'], $options['charset']);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	120 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	121
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	122 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	123 * Strips extra whitespace from output
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	124 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	125 * @param string $str String to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	126 * @return string whitespace sanitized string
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	127 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	128 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	129 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	130 function stripWhitespace($str) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	131 $r = preg_replace('/[\n\r\t]+/', '', $str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	132 return preg_replace('/\s{2,}/', ' ', $r);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	133 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	134
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	135 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	136 * Strips image tags from output
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	137 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	138 * @param string $str String to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	139 * @return string Sting with images stripped.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	140 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	141 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	142 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	143 function stripImages($str) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	144 $str = preg_replace('/(<a[^>]>)(<img[^>]+alt=")([^"])("[^>]*>)(<\/a>)/i', '$1$3$5<br />', $str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	145 $str = preg_replace('/(<img[^>]+alt=")([^"])("[^>]>)/i', '$2<br />', $str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	146 $str = preg_replace('/<img[^>]*>/i', '', $str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	147 return $str;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	148 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	149
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	150 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	151 * Strips scripts and stylesheets from output
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	152 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	153 * @param string $str String to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	154 * @return string String with <script>, <style>, <link> elements removed.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	155 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	156 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	157 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	158 function stripScripts($str) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	159 return preg_replace('/(<link[^>]+rel="[^"]stylesheet"[^>]>\|<img[^>]>\|style="[^"]")\|<script[^>]>.?<\/script>\|<style[^>]>.?<\/style>\|<!--.*?-->/is', '', $str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	160 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	161
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	162 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	163 * Strips extra whitespace, images, scripts and stylesheets from output
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	164 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	165 * @param string $str String to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	166 * @return string sanitized string
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	167 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	168 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	169 function stripAll($str) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	170 $str = Sanitize::stripWhitespace($str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	171 $str = Sanitize::stripImages($str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	172 $str = Sanitize::stripScripts($str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	173 return $str;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	174 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	175
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	176 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	177 * Strips the specified tags from output. First parameter is string from
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	178 * where to remove tags. All subsequent parameters are tags.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	179 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	180 * Ex.`$clean = Sanitize::stripTags($dirty, 'b', 'p', 'div');`
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	181 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	182 * Will remove all `<b>`, `<p>`, and `<div>` tags from the $dirty string.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	183 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	184 * @param string $str String to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	185 * @param string $tag Tag to remove (add more parameters as needed)
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	186 * @return string sanitized String
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	187 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	188 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	189 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	190 function stripTags() {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	191 $params = params(func_get_args());
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	192 $str = $params[0];
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	193
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	194 for ($i = 1, $count = count($params); $i < $count; $i++) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	195 $str = preg_replace('/<' . $params[$i] . '\b[^>]*>/i', '', $str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	196 $str = preg_replace('/<\/' . $params[$i] . '[^>]*>/i', '', $str);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	197 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	198 return $str;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	199 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	200
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	201 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	202 * Sanitizes given array or value for safe input. Use the options to specify
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	203 * the connection to use, and what filters should be applied (with a boolean
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	204 * value). Valid filters:
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	205 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	206 * - odd_spaces - removes any non space whitespace characters
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	207 * - encode - Encode any html entities. Encode must be true for the `remove_html` to work.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	208 * - dollar - Escape `$` with `\$`
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	209 * - carriage - Remove `\r`
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	210 * - unicode -
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	211 * - escape - Should the string be SQL escaped.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	212 * - backslash -
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	213 * - remove_html - Strip HTML with strip_tags. `encode` must be true for this option to work.
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	214 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	215 * @param mixed $data Data to sanitize
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	216 * @param mixed $options If string, DB connection being used, otherwise set of options
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	217 * @return mixed Sanitized data
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	218 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	219 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	220 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	221 function clean($data, $options = array()) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	222 if (empty($data)) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	223 return $data;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	224 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	225
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	226 if (is_string($options)) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	227 $options = array('connection' => $options);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	228 } else if (!is_array($options)) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	229 $options = array();
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	230 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	231
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	232 $options = array_merge(array(
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	233 'connection' => 'default',
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	234 'odd_spaces' => true,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	235 'remove_html' => false,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	236 'encode' => true,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	237 'dollar' => true,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	238 'carriage' => true,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	239 'unicode' => true,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	240 'escape' => true,
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	241 'backslash' => true
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	242 ), $options);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	243
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	244 if (is_array($data)) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	245 foreach ($data as $key => $val) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	246 $data[$key] = Sanitize::clean($val, $options);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	247 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	248 return $data;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	249 } else {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	250 if ($options['odd_spaces']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	251 $data = str_replace(chr(0xCA), '', str_replace(' ', ' ', $data));
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	252 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	253 if ($options['encode']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	254 $data = Sanitize::html($data, array('remove' => $options['remove_html']));
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	255 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	256 if ($options['dollar']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	257 $data = str_replace("\\\$", "$", $data);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	258 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	259 if ($options['carriage']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	260 $data = str_replace("\r", "", $data);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	261 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	262
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	263 $data = str_replace("'", "'", str_replace("!", "!", $data));
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	264
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	265 if ($options['unicode']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	266 $data = preg_replace("/&#([0-9]+);/s", "&#\\1;", $data);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	267 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	268 if ($options['escape']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	269 $data = Sanitize::escape($data, $options['connection']);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	270 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	271 if ($options['backslash']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	272 $data = preg_replace("/\\\(?!&#\|\?#)/", "\\", $data);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	273 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	274 return $data;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	275 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	276 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	277
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	278 /**
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	279 * Formats column data from definition in DBO's $columns array
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	280 *
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	281 * @param Model $model The model containing the data to be formatted
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	282 * @access public
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	283 * @static
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	284 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	285 function formatColumns(&$model) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	286 foreach ($model->data as $name => $values) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	287 if ($name == $model->alias) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	288 $curModel =& $model;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	289 } elseif (isset($model->{$name}) && is_object($model->{$name}) && is_subclass_of($model->{$name}, 'Model')) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	290 $curModel =& $model->{$name};
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	291 } else {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	292 $curModel = null;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	293 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	294
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	295 if ($curModel != null) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	296 foreach ($values as $column => $data) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	297 $colType = $curModel->getColumnType($column);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	298
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	299 if ($colType != null) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	300 $db =& ConnectionManager::getDataSource($curModel->useDbConfig);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	301 $colData = $db->columns[$colType];
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	302
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	303 if (isset($colData['limit']) && strlen(strval($data)) > $colData['limit']) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	304 $data = substr(strval($data), 0, $colData['limit']);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	305 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	306
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	307 if (isset($colData['formatter']) \|\| isset($colData['format'])) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	308
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	309 switch (strtolower($colData['formatter'])) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	310 case 'date':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	311 $data = date($colData['format'], strtotime($data));
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	312 break;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	313 case 'sprintf':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	314 $data = sprintf($colData['format'], $data);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	315 break;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	316 case 'intval':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	317 $data = intval($data);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	318 break;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	319 case 'floatval':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	320 $data = floatval($data);
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	321 break;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	322 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	323 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	324 $model->data[$name][$column]=$data;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	325 /*
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	326 switch ($colType) {
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	327 case 'integer':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	328 case 'int':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	329 return $data;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	330 break;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	331 case 'string':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	332 case 'text':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	333 case 'binary':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	334 case 'date':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	335 case 'time':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	336 case 'datetime':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	337 case 'timestamp':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	338 case 'date':
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	339 return "'" . $data . "'";
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	340 break;
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	341 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	342 */
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	343 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	344 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	345 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	346 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	347 }
261e66bd5a0c hg init Shoshi TAMAKI <shoshi@cr.ie.u-ryukyu.ac.jp> parents: diff changeset	348 }

0

261e66bd5a0c hg init