gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-02-06 15:14:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

- get rid of function sanitizeString()

Browse Source
This commit is contained in:
steinm 2011-12-01 14:11:07 +00:00
parent c89d082e75
commit 9fdcd9ab1f
3 changed files with 231 additions and 231 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
out/out.CategoryChooser.php
View File

@ -23,8 +23,8 @@ include("../inc/inc.DBInit.php");
include("../inc/inc.Language.php");
include("../inc/inc.Authentication.php");
$form = sanitizeString($_GET["form"]);
$selcats = sanitizeString($_GET["cats"]);
$form = preg_replace('/[^A-Za-z0-9_]+/', '', $_GET["form"]);
$selcats = preg_replace('/[^0-9,]+/', '', $_GET["cats"]);
UI::htmlStartPage(getMLText("choose_target_category"));
UI::globalBanner();

300
out/out.DocumentChooser.php
View File

@ -1,151 +1,151 @@
<?php
// MyDMS. Document Management System
// Copyright (C) 2002-2005 Markus Westphal
// Copyright (C) 2006-2008 Malcolm Cowe
// Copyright (C) 2006-2008 Malcolm Cowe
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
include("../inc/inc.Settings.php");
include("../inc/inc.ClassUI.php");
include("../inc/inc.DBInit.php");
include("../inc/inc.Language.php");
include("../inc/inc.Authentication.php");
$folderid = intval($_GET["folderid"]);
$form = sanitizeString($_GET["form"]);
<?php
// MyDMS. Document Management System
// Copyright (C) 2002-2005 Markus Westphal
// Copyright (C) 2006-2008 Malcolm Cowe
// Copyright (C) 2006-2008 Malcolm Cowe
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
function getImgPath($img) {
global $theme;
if ( is_file("../themes/$theme/images/$img") )
{
return "../themes/$theme/images/$img";
}
return "../out/images/$img";
}
function printTree($path, $level = 0)
{
GLOBAL $user, $form;
$folder = $path[$level];
$subFolders = LetoDMS_Core_DMS::filterAccess($folder->getSubFolders(), $user, M_READ);
$documents = LetoDMS_Core_DMS::filterAccess($folder->getDocuments(), $user, M_READ);
if ($level+1 < count($path))
$nextFolderID = $path[$level+1]->getID();
else
$nextFolderID = -1;
if ($level == 0) {
print "<ul style='list-style-type: none;'>\n";
}
print " <li>\n";
print "<img class='treeicon' src=\"";
if ($level == 0) UI::printImgPath("minus.png");
else if (count($subFolders) + count($documents) > 0) UI::printImgPath("minus.png");
else UI::printImgPath("blank.png");
print "\" border=0>\n";
if ($folder->getAccessMode($user) >= M_READ) {
print "<a class=\"foldertree_selectable\" href=\"javascript:folderSelected(" . $folder->getID() . ", '" . sanitizeString($folder->getName()) . "')\">";
print "<img src=\"".UI::getImgPath("folder_opened.gif")."\" border=0>".$folder->getName()."</a>\n";
}
else
print "<img src=\"".UI::getImgPath("folder_opened.gif")."\" width=18 height=18 border=0>".$folder->getName()."\n";
print " </li>\n";
print "<ul style='list-style-type: none;'>";
for ($i = 0; $i < count($subFolders); $i++) {
if ($subFolders[$i]->getID() == $nextFolderID)
printTree($path, $level+1);
else {
print "<li>\n";
$subFolders_ = LetoDMS_Core_DMS::filterAccess($subFolders[$i]->getSubFolders(), $user, M_READ);
$documents_ = LetoDMS_Core_DMS::filterAccess($subFolders[$i]->getDocuments(), $user, M_READ);
if (count($subFolders_) + count($documents_) > 0)
print "<a href=\"out.DocumentChooser.php?form=$form&folderid=".$subFolders[$i]->getID()."\"><img class='treeicon' src=\"".getImgPath("plus.png")."\" border=0></a>";
else
print "<img class='treeicon' src=\"".getImgPath("blank.png")."\">";
print "<img src=\"".getImgPath("folder_closed.gif")."\" border=0>".$subFolders[$i]->getName()."\n";
print "</li>";
}
}
for ($i = 0; $i < count($documents); $i++) {
print "<li>\n";
print "<img class='treeicon' src=\"images/blank.png\">";
print "<a class=\"foldertree_selectable\" href=\"javascript:documentSelected(".$documents[$i]->getID().",'".sanitizeString($documents[$i]->getName())."');\"><img src=\"images/file.gif\" border=0>".$documents[$i]->getName()."</a>";
print "</li>";
}
print "</ul>\n";
if ($level == 0) {
print "</ul>\n";
}
}
UI::htmlStartPage(getMLText("choose_target_document"));
UI::globalBanner();
UI::pageNavigation(getMLText("choose_target_document"));
?>
<script language="JavaScript">
function decodeString(s) {
s = new String(s);
s = s.replace(/&amp;/, "&");
s = s.replace(/&#0037;/, "%"); // percent
s = s.replace(/&quot;/, "\""); // double quote
s = s.replace(/&#0047;&#0042;/, "/*"); // start of comment
s = s.replace(/&#0042;&#0047;/, "*/"); // end of comment
s = s.replace(/&lt;/, "<");
s = s.replace(/&gt;/, ">");
s = s.replace(/&#0061;/, "=");
s = s.replace(/&#0041;/, ")");
s = s.replace(/&#0040;/, "(");
s = s.replace(/&#0039;/, "'");
s = s.replace(/&#0043;/, "+");
return s;
}
var targetName;
var targetID;
function documentSelected(id, name) {
targetName.value = decodeString(name);
targetID.value = id;
window.close();
return true;
}
</script>
<?php
$folder = $dms->getFolder($folderid);
UI::contentContainerStart();
printTree($folder->getPath());
UI::contentContainerEnd();
?>
<script language="JavaScript">
targetName = opener.document.<?php echo $form?>.docname<?php print $form ?>;
targetID = opener.document.<?php echo $form?>.docid<?php print $form ?>;
</script>
<?php
UI::htmlEndPage();
?>
include("../inc/inc.Settings.php");
include("../inc/inc.ClassUI.php");
include("../inc/inc.DBInit.php");
include("../inc/inc.Language.php");
include("../inc/inc.Authentication.php");
$folderid = intval($_GET["folderid"]);
$form = preg_replace('/[^A-Za-z0-9_]+/', '', $_GET["form"]);
function getImgPath($img) {
global $theme;
if ( is_file("../themes/$theme/images/$img") )
{
return "../themes/$theme/images/$img";
}
return "../out/images/$img";
}
function printTree($path, $level = 0)
{
GLOBAL $user, $form;
$folder = $path[$level];
$subFolders = LetoDMS_Core_DMS::filterAccess($folder->getSubFolders(), $user, M_READ);
$documents = LetoDMS_Core_DMS::filterAccess($folder->getDocuments(), $user, M_READ);
if ($level+1 < count($path))
$nextFolderID = $path[$level+1]->getID();
else
$nextFolderID = -1;
if ($level == 0) {
print "<ul style='list-style-type: none;'>\n";
}
print " <li>\n";
print "<img class='treeicon' src=\"";
if ($level == 0) UI::printImgPath("minus.png");
else if (count($subFolders) + count($documents) > 0) UI::printImgPath("minus.png");
else UI::printImgPath("blank.png");
print "\" border=0>\n";
if ($folder->getAccessMode($user) >= M_READ) {
print "<a class=\"foldertree_selectable\" href=\"javascript:folderSelected(" . $folder->getID() . ", '" . sanitizeString($folder->getName()) . "')\">";
print "<img src=\"".UI::getImgPath("folder_opened.gif")."\" border=0>".$folder->getName()."</a>\n";
}
else
print "<img src=\"".UI::getImgPath("folder_opened.gif")."\" width=18 height=18 border=0>".$folder->getName()."\n";
print " </li>\n";
print "<ul style='list-style-type: none;'>";
for ($i = 0; $i < count($subFolders); $i++) {
if ($subFolders[$i]->getID() == $nextFolderID)
printTree($path, $level+1);
else {
print "<li>\n";
$subFolders_ = LetoDMS_Core_DMS::filterAccess($subFolders[$i]->getSubFolders(), $user, M_READ);
$documents_ = LetoDMS_Core_DMS::filterAccess($subFolders[$i]->getDocuments(), $user, M_READ);
if (count($subFolders_) + count($documents_) > 0)
print "<a href=\"out.DocumentChooser.php?form=$form&folderid=".$subFolders[$i]->getID()."\"><img class='treeicon' src=\"".getImgPath("plus.png")."\" border=0></a>";
else
print "<img class='treeicon' src=\"".getImgPath("blank.png")."\">";
print "<img src=\"".getImgPath("folder_closed.gif")."\" border=0>".$subFolders[$i]->getName()."\n";
print "</li>";
}
}
for ($i = 0; $i < count($documents); $i++) {
print "<li>\n";
print "<img class='treeicon' src=\"images/blank.png\">";
print "<a class=\"foldertree_selectable\" href=\"javascript:documentSelected(".$documents[$i]->getID().",'".sanitizeString($documents[$i]->getName())."');\"><img src=\"images/file.gif\" border=0>".$documents[$i]->getName()."</a>";
print "</li>";
}
print "</ul>\n";
if ($level == 0) {
print "</ul>\n";
}
}
UI::htmlStartPage(getMLText("choose_target_document"));
UI::globalBanner();
UI::pageNavigation(getMLText("choose_target_document"));
?>
<script language="JavaScript">
function decodeString(s) {
s = new String(s);
s = s.replace(/&amp;/, "&");
s = s.replace(/&#0037;/, "%"); // percent
s = s.replace(/&quot;/, "\""); // double quote
s = s.replace(/&#0047;&#0042;/, "/*"); // start of comment
s = s.replace(/&#0042;&#0047;/, "*/"); // end of comment
s = s.replace(/&lt;/, "<");
s = s.replace(/&gt;/, ">");
s = s.replace(/&#0061;/, "=");
s = s.replace(/&#0041;/, ")");
s = s.replace(/&#0040;/, "(");
s = s.replace(/&#0039;/, "'");
s = s.replace(/&#0043;/, "+");
return s;
}
var targetName;
var targetID;
function documentSelected(id, name) {
targetName.value = decodeString(name);
targetID.value = id;
window.close();
return true;
}
</script>
<?php
$folder = $dms->getFolder($folderid);
UI::contentContainerStart();
printTree($folder->getPath());
UI::contentContainerEnd();
?>
<script language="JavaScript">
targetName = opener.document.<?php echo $form?>.docname<?php print $form ?>;
targetID = opener.document.<?php echo $form?>.docid<?php print $form ?>;
</script>
<?php
UI::htmlEndPage();
?>

158
out/out.FolderChooser.php
View File

@ -1,37 +1,37 @@
<?php
// MyDMS. Document Management System
// Copyright (C) 2002-2005 Markus Westphal
// Copyright (C) 2006-2008 Malcolm Cowe
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
include("../inc/inc.Settings.php");
include("../inc/inc.ClassUI.php");
<?php
// MyDMS. Document Management System
// Copyright (C) 2002-2005 Markus Westphal
// Copyright (C) 2006-2008 Malcolm Cowe
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
include("../inc/inc.Settings.php");
include("../inc/inc.ClassUI.php");
include("../inc/inc.DBInit.php");
include("../inc/inc.Language.php");
include("../inc/inc.Authentication.php");
$form = sanitizeString($_GET["form"]);
$mode = intval($_GET["mode"]);
$exclude = intval($_GET["exclude"]);
UI::htmlStartPage(getMLText("choose_target_folder"));
UI::globalBanner();
UI::pageNavigation(getMLText("choose_target_folder"));
?>
include("../inc/inc.Language.php");
include("../inc/inc.Authentication.php");
$form = preg_replace('/[^A-Za-z0-9_]+/', '', $_GET["form"]);
$mode = intval($_GET["mode"]);
$exclude = intval($_GET["exclude"]);
UI::htmlStartPage(getMLText("choose_target_folder"));
UI::globalBanner();
UI::pageNavigation(getMLText("choose_target_folder"));
?>
<script language="JavaScript">
function toggleTree(id){
@ -42,49 +42,49 @@ function toggleTree(id){
else obj.style.display = "none";
}
function decodeString(s) {
s = new String(s);
s = s.replace(/&amp;/, "&");
s = s.replace(/&#0037;/, "%"); // percent
s = s.replace(/&quot;/, "\""); // double quote
s = s.replace(/&#0047;&#0042;/, "/*"); // start of comment
s = s.replace(/&#0042;&#0047;/, "*/"); // end of comment
s = s.replace(/&lt;/, "<");
s = s.replace(/&gt;/, ">");
s = s.replace(/&#0061;/, "=");
s = s.replace(/&#0041;/, ")");
s = s.replace(/&#0040;/, "(");
s = s.replace(/&#0039;/, "'");
s = s.replace(/&#0043;/, "+");
return s;
}
var targetName;
var targetID;
function folderSelected(id, name) {
targetName.value = decodeString(name);
targetID.value = id;
window.close();
return true;
}
</script>
<?php
UI::contentContainerStart();
UI::printFoldersTree($mode, $exclude, $settings->_rootFolderID);
UI::contentContainerEnd();
?>
<script language="JavaScript">
targetName = opener.document.<?php echo $form?>.targetname<?php print $form ?>;
targetID = opener.document.<?php echo $form?>.targetid<?php print $form ?>;
</script>
<?php
UI::htmlEndPage();
?>
function decodeString(s) {
s = new String(s);
s = s.replace(/&amp;/, "&");
s = s.replace(/&#0037;/, "%"); // percent
s = s.replace(/&quot;/, "\""); // double quote
s = s.replace(/&#0047;&#0042;/, "/*"); // start of comment
s = s.replace(/&#0042;&#0047;/, "*/"); // end of comment
s = s.replace(/&lt;/, "<");
s = s.replace(/&gt;/, ">");
s = s.replace(/&#0061;/, "=");
s = s.replace(/&#0041;/, ")");
s = s.replace(/&#0040;/, "(");
s = s.replace(/&#0039;/, "'");
s = s.replace(/&#0043;/, "+");
return s;
}
var targetName;
var targetID;
function folderSelected(id, name) {
targetName.value = decodeString(name);
targetID.value = id;
window.close();
return true;
}
</script>
<?php
UI::contentContainerStart();
UI::printFoldersTree($mode, $exclude, $settings->_rootFolderID);
UI::contentContainerEnd();
?>
<script language="JavaScript">
targetName = opener.document.<?php echo $form?>.targetname<?php print $form ?>;
targetID = opener.document.<?php echo $form?>.targetid<?php print $form ?>;
</script>
<?php
UI::htmlEndPage();
?>