DZX filter function encapsulation extraction sharing-PHP Tutorial-php.cn

DZX filter function encapsulation extraction sharing

WBOY

Release： 2016-07-25 09:01:27

Original

1036 people have browsed it

I newly installed dzx, and suddenly I remembered that the server is php5.4.10. The *_magic_quotes_* functions are disabled and not supported. Want to see how dzx does it. I looked through the code. No addslashes found. Then the filter function of dzx was extracted. Share it. It's of no use. You can take a look.

All function definitions are in /source/class/discuz/discuz_database.php

The DB class is defined at the bottom of /source/class/class_core.php

function quote($str, $noarray = false) {
if (is_string($str))
return ''' . addcslashes($str, "nr\'"
function quote_field($field) {
if (is_array($field)) {
foreach ($field as $k => $v) {
$field[$k] = self::quote_field($ v);
}
} else {
if (strpos($field, '`') !== false)
$field = str_replace(''', '', $field);
$field = '`' . $field . '`';
}
return $field;
}
Copy code

function format($sql, $arg) {

$count = substr_count($sql, '%');

if (!$count) {

return $sql;

throw new DbException('SQL string format error! This SQL need "' . $count . '" vars to replace into.', 0, $sql);
}
$len = strlen( $sql);
$i = $find = 0;
$ret = '';
while ($i <= $len && $find < $count) {
if ($sql{$i} == '%') {
$next = $sql{$i + 1};
if ($next == 't') {
$ret .= self::table($arg[$find]);
} elseif ($next == 's') {

$ret .= self::quote(is_array($arg[$find]) ? serialize($arg[$find]) : (string) $arg[$find] );

} elseif ($next == 'f') { $ret .= sprintf('%F', $arg[$find]); } elseif ($next == 'd') {

$ ret .= dintval($arg[$find]);

} elseif ($next == 'i') {

$ret .= $arg[$find];

if (!empty($arg[$find])) {
$ret .= is_array($arg[$find]) ? implode(',', self::quote($arg[$find])) : self::quote($arg[$find]);
} else {
$ret .= '0';
}
} else {
$ret .= self::quote($arg[$find]) ;
}
$i++;
$find++;
} else {
$ret .= $sql{$i};
}
$i++;
}
if ($i < $len) {
$ret . = substr($sql, $i);
}
return $ret;
}
}
Copy code