}
第二步:打开extend.func.php文件在底部加入以下代码:
/*联动筛选字符过滤函数*/
function wwwcms_filter($str,$stype="inject") {
if ($stype=="inject") {
$str = str_replace(
array( "select", "insert", "update", "delete", "alter",
"cas", "union", "into", "load_file", "outfile", "create", "join",
"where", "like", "drop", "modify", "rename", "'", "/*", "*", "../",
"./"),
array("","","","","","","","","","","","","","","","","","","","","",""),
$str);
} else if ($stype=="xss") {
$farr = array("/\s+/" ,
"/
|i?frame|b|strong|style|html|img|P|o:p|iframe|u
|em|strike|BR|div|a|TABLE|TBODY|object|tr|td
|st1:chsdate|FONT|span|MARQUEE|body|title |\r\n|link
|meta|\?|\%)([^>]*?)>/isU",
"/(]*)on[a-zA-Z]+\s*=([^>]*>)/isU",
);
$tarr = array(" ",
"",
"\\1\\2",
);
$str = preg_replace($farr, $tarr, $str);
$str = str_replace(
array( "", "'", "\"", ";", "/*", "*", "../", "./"),
array("<",">","","","","","","",""),
$str);
}
return $str;
}
/**
* 载入自定义表单(用于发布)
*
* @access public
* @param string $fieldset 字段列表
* @param string $loadtype 载入类型
* @return string
*/
function AddFilter($channelid, $type=1, $fieldsnamef, $defaulttid, $loadtype='autofield')
{
global $tid,$dsql,$id;
$tid = $defaulttid ? $defaulttid : $tid;
if ($id!="")
{
$tidsq = $dsql->GetOne(" Select typeid From `dede_archives` where id='$id' ");
$tid = $tidsq["typeid"];
}
$nofilter = (isset($_REQUEST['TotalResult']) ?
"&TotalResult=".$_REQUEST['TotalResult'] :
'').(isset($_REQUEST['PageNo']) ? "&PageNo=".$_REQUEST['PageNo'] :
'');
$filterarr = wwwcms_filter(stripos($_SERVER['REQUEST_URI'],
"list.php?tid=") ? str_replace($nofilter, '', $_SERVER['REQUEST_URI']) :
$GLOBALS['cfg_cmsurl']."/plus/list.php?tid=".$tid);
$cInfos = $dsql->GetOne(" Select * From `dede_channeltype` where id='$channelid' ");
$fieldset=$cInfos['fieldset'];
$dtp = new DedeTagParse();
$dtp->SetNameSpace('field','');
$dtp->LoadSource($fieldset);
$dede_addonfields = '';
if(is_array($dtp->CTags))
{
foreach($dtp->CTags as $tid=>$ctag)
{
$fieldsname = $fieldsnamef ? explode(",", $fieldsnamef) : explode(",", $ctag->GetName());
if(($loadtype!='autofield' || ($loadtype=='autofield' &&
$ctag->GetAtt('autofield')==1)) &&
in_array($ctag->GetName(), $fieldsname) )
{
$href1 = explode($ctag->GetName().'=', $filterarr);
$href2 = explode('&', $href1[1]);
$fields_value = $href2[0];
$dede_addonfields .= '
-
'.$ctag->GetAtt('itemname').':
-
';
switch ($type) {
case 1:
$dede_addonfields .=
(preg_match("/&".$ctag->GetName()."=/is",$filterarr,$regm) ?
'
href="'.str_replace("&".$ctag->GetName()."=".$fields_value,"",$filterarr).'">全部
': '
-
全部').'';
$addonfields_items = explode(",",$ctag->GetAtt('default'));
for ($i=0; $i
{
$href = stripos($filterarr,$ctag->GetName().'=') ?
str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr)
:
$filterarr.'&'.$ctag->GetName().'='.urlencode($addonfields_items[$i]);//echo
$href;
$dede_addonfields .=
($fields_value!=urlencode($addonfields_items[$i]) ? '
title="'.$addonfields_items[$i].'"
href="'.$href.'">'.$addonfields_items[$i].'
' : 'class="on">'.$addonfields_items[$i].'
');}
$dede_addonfields .= '
break;
case 2:
$dede_addonfields .= '
name="filter"'.$ctag->GetName().'
οnchange="window.location=this.options[this.selectedIndex].value">
'.'
value="'.str_replace("&".$ctag->GetName()."=".$fields_value,"",$filterarr).'">全部
';$addonfields_items = explode(",",$ctag->GetAtt('default'));
for ($i=0; $i
{
$href = stripos($filterarr,$ctag->GetName().'=') ?
str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr)
:
$filterarr.'&'.$ctag->GetName().'='.urlencode($addonfields_items[$i]);
$dede_addonfields .= '
value="'.$href.'"'.($fields_value==urlencode($addonfields_items[$i]) ? '
selected="selected"' :
'').'>'.$addonfields_items[$i].'
';
}
$dede_addonfields .= '
';
break;
}
}
}
}
echo $dede_addonfields;
}