ThinkPHP/Common/extend.php

<?php
// +----------------------------------------------------------------------
// | ThinkPHP [ WE CAN DO IT JUST THINK IT ]
// +----------------------------------------------------------------------
// | Copyright (c) 2010 http://thinkphp.cn All rights reserved.
// +----------------------------------------------------------------------
// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
// +----------------------------------------------------------------------
// | Author: liu21st <[email protected]>
// +----------------------------------------------------------------------
// $Id$

/**
 +------------------------------------------------------------------------------
 * Think扩展函数库 需要手动加载后调用或者放入项目函数库
 +------------------------------------------------------------------------------
 * @category   Think
 * @package  Common
 * @author   liu21st <[email protected]>
 * @version  $Id$
 +------------------------------------------------------------------------------
 */

// 获取客户端IP地址//getenv()获取环境变量,环境变量可以通过phpinfo()函数查看//strcasecmp()二进制安全的字符串比较函数,如果相等返回0
function get_client_ip(){
   if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown"))
       $ip = getenv("HTTP_CLIENT_IP");
   else if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown"))
       $ip = getenv("HTTP_X_FORWARDED_FOR");
   else if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown"))
       $ip = getenv("REMOTE_ADDR");
   else if (isset($_SERVER[‘REMOTE_ADDR‘]) && $_SERVER[‘REMOTE_ADDR‘] && strcasecmp($_SERVER[‘REMOTE_ADDR‘], "unknown"))
       $ip = $_SERVER[‘REMOTE_ADDR‘];
   else
       $ip = "unknown";
   return($ip);
}

/**
 * 获取给定IP的物理地址
 * /addons/libs/misc/sry.dat在此路径下放置ip数据库文件,可采用纯真ip数据库
 * @param string $ip
 * @return string
 */
function convert_ip($ip) {
    $return = ‘‘;//正则表达式判断是否为ip格式
    if(preg_match("/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/", $ip)) {
        $iparray = explode(‘.‘, $ip);
        if($iparray[0] == 10 || $iparray[0] == 127 || ($iparray[0] == 192 && $iparray[1] == 168) || ($iparray[0] == 172 && ($iparray[1] >= 16 && $iparray[1] <= 31))) {
            $return = ‘- LAN‘;
        } elseif($iparray[0] > 255 || $iparray[1] > 255 || $iparray[2] > 255 || $iparray[3] > 255) {
            $return = ‘- Invalid IP Address‘;
        } else {
            $fullipfile = SITE_PATH . ‘/addons/libs/misc/wry.dat‘;
            $return = convert_ip_full($ip, $fullipfile);
        }
    }
    $return = iconv(‘GBK‘, ‘UTF-8‘, $return);
    return $return;
}

/**
 * @see convert_ip()
 */
function convert_ip_full($ip, $ipdatafile) {
    if (! $fd = @fopen ( $ipdatafile, ‘rb‘ )) {
        return ‘- Invalid IP data file‘;
    }

    $ip = explode ( ‘.‘, $ip );
    $ipNum = $ip [0] * 16777216 + $ip [1] * 65536 + $ip [2] * 256 + $ip [3];

    if (! ($DataBegin = fread ( $fd, 4 )) || ! ($DataEnd = fread ( $fd, 4 )))
        return;
    @$ipbegin = implode ( ‘‘, unpack ( ‘L‘, $DataBegin ) );
    if ($ipbegin < 0)
        $ipbegin += pow ( 2, 32 );
    @$ipend = implode ( ‘‘, unpack ( ‘L‘, $DataEnd ) );
    if ($ipend < 0)
        $ipend += pow ( 2, 32 );
    $ipAllNum = ($ipend - $ipbegin) / 7 + 1;

    $BeginNum = $ip2num = $ip1num = 0;
    $ipAddr1 = $ipAddr2 = ‘‘;
    $EndNum = $ipAllNum;

    while ( $ip1num > $ipNum || $ip2num < $ipNum ) {
        $Middle = intval ( ($EndNum + $BeginNum) / 2 );

        fseek ( $fd, $ipbegin + 7 * $Middle );
        $ipData1 = fread ( $fd, 4 );
        if (strlen ( $ipData1 ) < 4) {
            fclose ( $fd );
            return ‘- System Error‘;
        }
        $ip1num = implode ( ‘‘, unpack ( ‘L‘, $ipData1 ) );
        if ($ip1num < 0)
            $ip1num += pow ( 2, 32 );

        if ($ip1num > $ipNum) {
            $EndNum = $Middle;
            continue;
        }

        $DataSeek = fread ( $fd, 3 );
        if (strlen ( $DataSeek ) < 3) {
            fclose ( $fd );
            return ‘- System Error‘;
        }
        $DataSeek = implode ( ‘‘, unpack ( ‘L‘, $DataSeek . chr ( 0 ) ) );
        fseek ( $fd, $DataSeek );
        $ipData2 = fread ( $fd, 4 );
        if (strlen ( $ipData2 ) < 4) {
            fclose ( $fd );
            return ‘- System Error‘;
        }
        $ip2num = implode ( ‘‘, unpack ( ‘L‘, $ipData2 ) );
        if ($ip2num < 0)
            $ip2num += pow ( 2, 32 );

        if ($ip2num < $ipNum) {
            if ($Middle == $BeginNum) {
                fclose ( $fd );
                return ‘- Unknown‘;
            }
            $BeginNum = $Middle;
        }
    }

    $ipFlag = fread ( $fd, 1 );
    if ($ipFlag == chr ( 1 )) {
        $ipSeek = fread ( $fd, 3 );
        if (strlen ( $ipSeek ) < 3) {
            fclose ( $fd );
            return ‘- System Error‘;
        }
        $ipSeek = implode ( ‘‘, unpack ( ‘L‘, $ipSeek . chr ( 0 ) ) );
        fseek ( $fd, $ipSeek );
        $ipFlag = fread ( $fd, 1 );
    }

    if ($ipFlag == chr ( 2 )) {
        $AddrSeek = fread ( $fd, 3 );
        if (strlen ( $AddrSeek ) < 3) {
            fclose ( $fd );
            return ‘- System Error‘;
        }
        $ipFlag = fread ( $fd, 1 );
        if ($ipFlag == chr ( 2 )) {
            $AddrSeek2 = fread ( $fd, 3 );
            if (strlen ( $AddrSeek2 ) < 3) {
                fclose ( $fd );
                return ‘- System Error‘;
            }
            $AddrSeek2 = implode ( ‘‘, unpack ( ‘L‘, $AddrSeek2 . chr ( 0 ) ) );
            fseek ( $fd, $AddrSeek2 );
        } else {
            fseek ( $fd, - 1, SEEK_CUR );
        }

        while ( ($char = fread ( $fd, 1 )) != chr ( 0 ) )
            $ipAddr2 .= $char;

        $AddrSeek = implode ( ‘‘, unpack ( ‘L‘, $AddrSeek . chr ( 0 ) ) );
        fseek ( $fd, $AddrSeek );

        while ( ($char = fread ( $fd, 1 )) != chr ( 0 ) )
            $ipAddr1 .= $char;
    } else {
        fseek ( $fd, - 1, SEEK_CUR );
        while ( ($char = fread ( $fd, 1 )) != chr ( 0 ) )
            $ipAddr1 .= $char;

        $ipFlag = fread ( $fd, 1 );
        if ($ipFlag == chr ( 2 )) {
            $AddrSeek2 = fread ( $fd, 3 );
            if (strlen ( $AddrSeek2 ) < 3) {
                fclose ( $fd );
                return ‘- System Error‘;
            }
            $AddrSeek2 = implode ( ‘‘, unpack ( ‘L‘, $AddrSeek2 . chr ( 0 ) ) );
            fseek ( $fd, $AddrSeek2 );
        } else {
            fseek ( $fd, - 1, SEEK_CUR );
        }
        while ( ($char = fread ( $fd, 1 )) != chr ( 0 ) )
            $ipAddr2 .= $char;
    }
    fclose ( $fd );

    if (preg_match ( ‘/http/i‘, $ipAddr2 )) {
        $ipAddr2 = ‘‘;
    }
    $ipaddr = "$ipAddr1 $ipAddr2";
    $ipaddr = preg_replace ( ‘/CZ88\.NET/is‘, ‘‘, $ipaddr );
    $ipaddr = preg_replace ( ‘/^\s*/is‘, ‘‘, $ipaddr );
    $ipaddr = preg_replace ( ‘/\s*$/is‘, ‘‘, $ipaddr );
    if (preg_match ( ‘/http/i‘, $ipaddr ) || $ipaddr == ‘‘) {
        $ipaddr = ‘- Unknown‘;
    }

    return ‘- ‘ . $ipaddr;

}
/**
 +----------------------------------------------------------
 * 字符串截取,支持中文和其他编码
 +----------------------------------------------------------
 * @static
 * @access public
 +----------------------------------------------------------
 * @param string $str 需要转换的字符串
 * @param string $start 开始位置
 * @param string $length 截取长度
 * @param string $charset 编码格式
 * @param string $suffix 截断显示字符
 +----------------------------------------------------------
 * @return string
 +----------------------------------------------------------
 */
function msubstr($str, $start=0, $length, $charset="utf-8", $suffix=true)
{
    if(function_exists("mb_substr"))
        return mb_substr($str, $start, $length, $charset);
    elseif(function_exists(‘iconv_substr‘)) {
        return iconv_substr($str,$start,$length,$charset);
    }
    $re[‘utf-8‘]   = "/[\x01-\x7f]|[\xc2-\xdf][\x80-\xbf]|[\xe0-\xef][\x80-\xbf]{2}|[\xf0-\xff][\x80-\xbf]{3}/";
    $re[‘gb2312‘] = "/[\x01-\x7f]|[\xb0-\xf7][\xa0-\xfe]/";
    $re[‘gbk‘]    = "/[\x01-\x7f]|[\x81-\xfe][\x40-\xfe]/";
    $re[‘big5‘]   = "/[\x01-\x7f]|[\x81-\xfe]([\x40-\x7e]|\xa1-\xfe])/";
    preg_match_all($re[$charset], $str, $match);
    $slice = join("",array_slice($match[0], $start, $length));
    if($suffix) return $slice."…";
    return $slice;
}

/**
 +----------------------------------------------------------
 * 产生随机字串,可用来自动生成密码 默认长度6位 字母和数字混合
 +----------------------------------------------------------
 * @param string $len 长度
 * @param string $type 字串类型
 * 0 字母 1 数字 其它 混合
 * @param string $addChars 额外字符
 +----------------------------------------------------------
 * @return string
 +----------------------------------------------------------
 */
function rand_string($len=6,$type=‘‘,$addChars=‘‘) {
    $str =‘‘;
    switch($type) {
        case 0:
            $chars=‘ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz‘.$addChars;
            break;
        case 1:
            $chars= str_repeat(‘0123456789‘,3);
            break;
        case 2:
            $chars=‘ABCDEFGHIJKLMNOPQRSTUVWXYZ‘.$addChars;
            break;
        case 3:
            $chars=‘abcdefghijklmnopqrstuvwxyz‘.$addChars;
            break;
        case 4:
            $chars = "们以我到他会作时要动国产的一是工就年阶义发成部民可出能方进在了不和有大这主中人上为来分生对于学下级地个用同行面说种过命度革而多子后自社加小机也经力线本电高量长党得实家定深法表着水理化争现所二起政三好十战无农使性前等反体合斗路图把结第里正新开论之物从当两些还天资事队批点育重其思与间内去因件日利相由压员气业代全组数果期导平各基或月毛然如应形想制心样干都向变关问比展那它最及外没看治提五解系林者米群头意只明四道马认次文通但条较克又公孔领军流入接席位情运器并飞原油放立题质指建区验活众很教决特此常石强极土少已根共直团统式转别造切九你取西持总料连任志观调七么山程百报更见必真保热委手改管处己将修支识病象几先老光专什六型具示复安带每东增则完风回南广劳轮科北打积车计给节做务被整联步类集号列温装即毫知轴研单色坚据速防史拉世设达尔场织历花受求传口断况采精金界品判参层止边清至万确究书术状厂须离再目海交权且儿青才证低越际八试规斯近注办布门铁需走议县兵固除般引齿千胜细影济白格效置推空配刀叶率述今选养德话查差半敌始片施响收华觉备名红续均药标记难存测士身紧液派准斤角降维板许破述技消底床田势端感往神便贺村构照容非搞亚磨族火段算适讲按值美态黄易彪服早班麦削信排台声该击素张密害侯草何树肥继右属市严径螺检左页抗苏显苦英快称坏移约巴材省黑武培著河帝仅针怎植京助升王眼她抓含苗副杂普谈围食射源例致酸旧却充足短划剂宣环落首尺波承粉践府鱼随考刻靠够满夫失包住促枝局菌杆周护岩师举曲春元超负砂封换太模贫减阳扬江析亩木言球朝医校古呢稻宋听唯输滑站另卫字鼓刚写刘微略范供阿块某功套友限项余倒卷创律雨让骨远帮初皮播优占死毒圈伟季训控激找叫云互跟裂粮粒母练塞钢顶策双留误础吸阻故寸盾晚丝女散焊功株亲院冷彻弹错散商视艺灭版烈零室轻血倍缺厘泵察绝富城冲喷壤简否柱李望盘磁雄似困巩益洲脱投送奴侧润盖挥距触星松送获兴独官混纪依未突架宽冬章湿偏纹吃执阀矿寨责熟稳夺硬价努翻奇甲预职评读背协损棉侵灰虽矛厚罗泥辟告卵箱掌氧恩爱停曾溶营终纲孟钱待尽俄缩沙退陈讨奋械载胞幼哪剥迫旋征槽倒握担仍呀鲜吧卡粗介钻逐弱脚怕盐末阴丰雾冠丙街莱贝辐肠付吉渗瑞惊顿挤秒悬姆烂森糖圣凹陶词迟蚕亿矩康遵牧遭幅园腔订香肉弟屋敏恢忘编印蜂急拿扩伤飞露核缘游振操央伍域甚迅辉异序免纸夜乡久隶缸夹念兰映沟乙吗儒杀汽磷艰晶插埃燃欢铁补咱芽永瓦倾阵碳演威附牙芽永瓦斜灌欧献顺猪洋腐请透司危括脉宜笑若尾束壮暴企菜穗楚汉愈绿拖牛份染既秋遍锻玉夏疗尖殖井费州访吹荣铜沿替滚客召旱悟刺脑措贯藏敢令隙炉壳硫煤迎铸粘探临薄旬善福纵择礼愿伏残雷延烟句纯渐耕跑泽慢栽鲁赤繁境潮横掉锥希池败船假亮谓托伙哲怀割摆贡呈劲财仪沉炼麻罪祖息车穿货销齐鼠抽画饲龙库守筑房歌寒喜哥洗蚀废纳腹乎录镜妇恶脂庄擦险赞钟摇典柄辩竹谷卖乱虚桥奥伯赶垂途额壁网截野遗静谋弄挂课镇妄盛耐援扎虑键归符庆聚绕摩忙舞遇索顾胶羊湖钉仁音迹碎伸灯避泛亡答勇频皇柳哈揭甘诺概宪浓岛袭谁洪谢炮浇斑讯懂灵蛋闭孩释乳巨徒私银伊景坦累匀霉杜乐勒隔弯绩招绍胡呼痛峰零柴簧午跳居尚丁秦稍追梁折耗碱殊岗挖氏刃剧堆赫荷胸衡勤膜篇登驻案刊秧缓凸役剪川雪链渔啦脸户洛孢勃盟买杨宗焦赛旗滤硅炭股坐蒸凝竟陷枪黎救冒暗洞犯筒您宋弧爆谬涂味津臂障褐陆啊健尊豆拔莫抵桑坡缝警挑污冰柬嘴啥饭塑寄赵喊垫丹渡耳刨虎笔稀昆浪萨茶滴浅拥穴覆伦娘吨浸袖珠雌妈紫戏塔锤震岁貌洁剖牢锋疑霸闪埔猛诉刷狠忽灾闹乔唐漏闻沈熔氯荒茎男凡抢像浆旁玻亦忠唱蒙予纷捕锁尤乘乌智淡允叛畜俘摸锈扫毕璃宝芯爷鉴秘净蒋钙肩腾枯抛轨堂拌爸循诱祝励肯酒绳穷塘燥泡袋朗喂铝软渠颗惯贸粪综墙趋彼届墨碍启逆卸航衣孙龄岭骗休借".$addChars;
            break;
        default :
            // 默认去掉了容易混淆的字符oOLl和数字01,要添加请使用addChars参数
            $chars=‘ABCDEFGHIJKMNPQRSTUVWXYZabcdefghijkmnpqrstuvwxyz23456789‘.$addChars;
            break;
    }
    if($len>10 ) {//位数过长重复字符串一定次数
        $chars= $type==1? str_repeat($chars,$len) : str_repeat($chars,5);
    }
    if($type!=4) {
        $chars   =   str_shuffle($chars);
        $str     =   substr($chars,0,$len);
    }else{
        // 中文随机字
        for($i=0;$i<$len;$i++){
          $str.= msubstr($chars, floor(mt_rand(0,mb_strlen($chars,‘utf-8‘)-1)),1);
        }
    }
    return $str;
}

/**
 +----------------------------------------------------------
 * 获取登录验证码 默认为4位数字
 +----------------------------------------------------------
 * @param string $fmode 文件名
 +----------------------------------------------------------
 * @return string
 +----------------------------------------------------------
 */
function build_verify ($length=4,$mode=1) {
    return rand_string($length,$mode);
}

/**
 +----------------------------------------------------------
 * 字节格式化 把字节数格式为 B K M G T 描述的大小
 +----------------------------------------------------------
 * @return string
 +----------------------------------------------------------
 */
function byte_format($size, $dec=2)
{
    $a = array("B", "KB", "MB", "GB", "TB", "PB");
    $pos = 0;
    while ($size >= 1024) {
         $size /= 1024;
           $pos++;
    }
    return round($size,$dec)." ".$a[$pos];
}

/**
 +----------------------------------------------------------
 * 检查字符串是否是UTF8编码
 +----------------------------------------------------------
 * @param string $string 字符串
 +----------------------------------------------------------
 * @return Boolean
 +----------------------------------------------------------
 */
function is_utf8($string)
{
    return preg_match(‘%^(?:
         [\x09\x0A\x0D\x20-\x7E]            # ASCII
       | [\xC2-\xDF][\x80-\xBF]             # non-overlong 2-byte
       |  \xE0[\xA0-\xBF][\x80-\xBF]        # excluding overlongs
       | [\xE1-\xEC\xEE\xEF][\x80-\xBF]{2}  # straight 3-byte
       |  \xED[\x80-\x9F][\x80-\xBF]        # excluding surrogates
       |  \xF0[\x90-\xBF][\x80-\xBF]{2}     # planes 1-3
       | [\xF1-\xF3][\x80-\xBF]{3}          # planes 4-15
       |  \xF4[\x80-\x8F][\x80-\xBF]{2}     # plane 16
   )*$%xs‘, $string);
}
/**
 +----------------------------------------------------------
 * 代码加亮
 +----------------------------------------------------------
 * @param String  $str 要高亮显示的字符串 或者 文件名
 * @param Boolean $show 是否输出
 +----------------------------------------------------------
 * @return String
 +----------------------------------------------------------
 */
function highlight_code($str,$show=false)
{
    if(file_exists($str)) {
        $str    =   file_get_contents($str);
    }
    $str  =  stripslashes(trim($str));
    // The highlight string function encodes and highlights
    // brackets so we need them to start raw
    $str = str_replace(array(‘&lt;‘, ‘&gt;‘), array(‘<‘, ‘>‘), $str);

    // Replace any existing PHP tags to temporary markers so they don‘t accidentally
    // break the string out of PHP, and thus, thwart the highlighting.

    $str = str_replace(array(‘&lt;?php‘, ‘?&gt;‘,  ‘\\‘), array(‘phptagopen‘, ‘phptagclose‘, ‘backslashtmp‘), $str);

    // The highlight_string function requires that the text be surrounded
    // by PHP tags.  Since we don‘t know if A) the submitted text has PHP tags,
    // or B) whether the PHP tags enclose the entire string, we will add our
    // own PHP tags around the string along with some markers to make replacement easier later

    $str = ‘<?php //tempstart‘."\n".$str.‘//tempend ?>‘; // <?

    // All the magic happens here, baby!
    $str = highlight_string($str, TRUE);

    // Prior to PHP 5, the highlight function used icky font tags
    // so we‘ll replace them with span tags.
    if (abs(phpversion()) < 5)
    {
        $str = str_replace(array(‘<font ‘, ‘</font>‘), array(‘<span ‘, ‘</span>‘), $str);
        $str = preg_replace(‘#color="(.*?)"#‘, ‘style="color: \\1"‘, $str);
    }

    // Remove our artificially added PHP
    $str = preg_replace("#\<code\>.+?//tempstart\<br />\</span\>#is", "<code>\n", $str);
    $str = preg_replace("#\<code\>.+?//tempstart\<br />#is", "<code>\n", $str);
    $str = preg_replace("#//tempend.+#is", "</span>\n</code>", $str);

    // Replace our markers back to PHP tags.
    $str = str_replace(array(‘phptagopen‘, ‘phptagclose‘, ‘backslashtmp‘), array(‘&lt;?php‘, ‘?&gt;‘, ‘\\‘), $str); //<?
    $line   =   explode("<br />", rtrim(ltrim($str,‘<code>‘),‘</code>‘));
    $result =   ‘<div class="code"><ol>‘;
    foreach($line as $key=>$val) {
        $result .=  ‘<li>‘.$val.‘</li>‘;
    }
    $result .=  ‘</ol></div>‘;
    $result = str_replace("\n", "", $result);
    if( $show!== false) {
        echo($result);
    }else {
        return $result;
    }
}
//输出安全的html
function h($text, $tags = null){
    $text    =    trim($text);
    //完全过滤注释
    $text    =    preg_replace(‘/<!--?.*-->/‘,‘‘,$text);
    //完全过滤动态代码
    $text    =    preg_replace(‘/<\?|\?‘.‘>/‘,‘‘,$text);
    //完全过滤js
    $text    =    preg_replace(‘/<script?.*\/script>/‘,‘‘,$text);

    $text    =    str_replace(‘[‘,‘[‘,$text);
    $text    =    str_replace(‘]‘,‘]‘,$text);
    $text    =    str_replace(‘|‘,‘|‘,$text);
    //过滤换行符
    $text    =    preg_replace(‘/\r?\n/‘,‘‘,$text);
    //br
    $text    =    preg_replace(‘/<br(\s\/)?‘.‘>/i‘,‘[br]‘,$text);
    $text    =    preg_replace(‘/(\[br\]\s*){10,}/i‘,‘[br]‘,$text);
    //过滤危险的属性,如:过滤on事件lang js
    while(preg_match(‘/(<[^><]+)( lang|on|action|background|codebase|dynsrc|lowsrc)[^><]+/i‘,$text,$mat)){
        $text=str_replace($mat[0],$mat[1],$text);
    }
    while(preg_match(‘/(<[^><]+)(window\.|javascript:|js:|about:|file:|document\.|vbs:|cookie)([^><]*)/i‘,$text,$mat)){
        $text=str_replace($mat[0],$mat[1].$mat[3],$text);
    }
    if(empty($tags)) {
        $tags = ‘table|td|th|tr|i|b|u|strong|img|p|br|div|strong|em|ul|ol|li|dl|dd|dt|a‘;
    }
    //允许的HTML标签
    $text    =    preg_replace(‘/<(‘.$tags.‘)( [^><\[\]]*)>/i‘,‘[\1\2]‘,$text);
    //过滤多余html
    $text    =    preg_replace(‘/<\/?(html|head|meta|link|base|basefont|body|bgsound|title|style|script|form|iframe|frame|frameset|applet|id|ilayer|layer|name|script|style|xml)[^><]*>/i‘,‘‘,$text);
    //过滤合法的html标签
    while(preg_match(‘/<([a-z]+)[^><\[\]]*>[^><]*<\/\1>/i‘,$text,$mat)){
        $text=str_replace($mat[0],str_replace(‘>‘,‘]‘,str_replace(‘<‘,‘[‘,$mat[0])),$text);
    }
    //转换引号
    while(preg_match(‘/(\[[^\[\]]*=\s*)(\"|\‘)([^\2=\[\]]+)\2([^\[\]]*\])/i‘,$text,$mat)){
        $text=str_replace($mat[0],$mat[1].‘|‘.$mat[3].‘|‘.$mat[4],$text);
    }
    //过滤错误的单个引号
    while(preg_match(‘/\[[^\[\]]*(\"|\‘)[^\[\]]*\]/i‘,$text,$mat)){
        $text=str_replace($mat[0],str_replace($mat[1],‘‘,$mat[0]),$text);
    }
    //转换其它所有不合法的 < >
    $text    =    str_replace(‘<‘,‘&lt;‘,$text);
    $text    =    str_replace(‘>‘,‘&gt;‘,$text);
    $text    =    str_replace(‘"‘,‘&quot;‘,$text);
     //反转换
    $text    =    str_replace(‘[‘,‘<‘,$text);
    $text    =    str_replace(‘]‘,‘>‘,$text);
    $text    =    str_replace(‘|‘,‘"‘,$text);
    //过滤多余空格
    $text    =    str_replace(‘  ‘,‘ ‘,$text);
    return $text;
}

function ubb($Text) {
  $Text=trim($Text);
  //$Text=htmlspecialchars($Text);
  $Text=preg_replace("/\\t/is","  ",$Text);
  $Text=preg_replace("/\[h1\](.+?)\[\/h1\]/is","<h1>\\1</h1>",$Text);
  $Text=preg_replace("/\[h2\](.+?)\[\/h2\]/is","<h2>\\1</h2>",$Text);
  $Text=preg_replace("/\[h3\](.+?)\[\/h3\]/is","<h3>\\1</h3>",$Text);
  $Text=preg_replace("/\[h4\](.+?)\[\/h4\]/is","<h4>\\1</h4>",$Text);
  $Text=preg_replace("/\[h5\](.+?)\[\/h5\]/is","<h5>\\1</h5>",$Text);
  $Text=preg_replace("/\[h6\](.+?)\[\/h6\]/is","<h6>\\1</h6>",$Text);
  $Text=preg_replace("/\[separator\]/is","",$Text);
  $Text=preg_replace("/\[center\](.+?)\[\/center\]/is","<center>\\1</center>",$Text);
  $Text=preg_replace("/\[url=http:\/\/([^\[]*)\](.+?)\[\/url\]/is","<a href=\"http://\\1\" target=_blank>\\2</a>",$Text);
  $Text=preg_replace("/\[url=([^\[]*)\](.+?)\[\/url\]/is","<a href=\"http://\\1\" target=_blank>\\2</a>",$Text);
  $Text=preg_replace("/\[url\]http:\/\/([^\[]*)\[\/url\]/is","<a href=\"http://\\1\" target=_blank>\\1</a>",$Text);
  $Text=preg_replace("/\[url\]([^\[]*)\[\/url\]/is","<a href=\"\\1\" target=_blank>\\1</a>",$Text);
  $Text=preg_replace("/\[img\](.+?)\[\/img\]/is","<img src=\\1>",$Text);
  $Text=preg_replace("/\[color=(.+?)\](.+?)\[\/color\]/is","<font color=\\1>\\2</font>",$Text);
  $Text=preg_replace("/\[size=(.+?)\](.+?)\[\/size\]/is","<font size=\\1>\\2</font>",$Text);
  $Text=preg_replace("/\[sup\](.+?)\[\/sup\]/is","<sup>\\1</sup>",$Text);
  $Text=preg_replace("/\[sub\](.+?)\[\/sub\]/is","<sub>\\1</sub>",$Text);
  $Text=preg_replace("/\[pre\](.+?)\[\/pre\]/is","<pre>\\1</pre>",$Text);
  $Text=preg_replace("/\[email\](.+?)\[\/email\]/is","<a href=‘mailto:\\1‘>\\1</a>",$Text);
  $Text=preg_replace("/\[colorTxt\](.+?)\[\/colorTxt\]/eis","color_txt(‘\\1‘)",$Text);
  $Text=preg_replace("/\[emot\](.+?)\[\/emot\]/eis","emot(‘\\1‘)",$Text);
  $Text=preg_replace("/\[i\](.+?)\[\/i\]/is","<i>\\1</i>",$Text);
  $Text=preg_replace("/\[u\](.+?)\[\/u\]/is","<u>\\1</u>",$Text);
  $Text=preg_replace("/\[b\](.+?)\[\/b\]/is","<b>\\1</b>",$Text);
  $Text=preg_replace("/\[quote\](.+?)\[\/quote\]/is"," <div class=‘quote‘><h5>引用:</h5><blockquote>\\1</blockquote></div>", $Text);
  $Text=preg_replace("/\[code\](.+?)\[\/code\]/eis","highlight_code(‘\\1‘)", $Text);
  $Text=preg_replace("/\[php\](.+?)\[\/php\]/eis","highlight_code(‘\\1‘)", $Text);
  $Text=preg_replace("/\[sig\](.+?)\[\/sig\]/is","<div class=‘sign‘>\\1</div>", $Text);
  $Text=preg_replace("/\\n/is","<br/>",$Text);
  return $Text;
}

// 随机生成一组字符串
function build_count_rand ($number,$length=4,$mode=1) {
    if($mode==1 && $length<strlen($number) ) {
        //不足以生成一定数量的不重复数字
        return false;
    }
    $rand   =  array();
    for($i=0; $i<$number; $i++) {
        $rand[] =   rand_string($length,$mode);
    }
    $unqiue = array_unique($rand);
    if(count($unqiue)==count($rand)) {
        return $rand;
    }
    $count   = count($rand)-count($unqiue);
    for($i=0; $i<$count*3; $i++) {
        $rand[] =   rand_string($length,$mode);
    }
    $rand = array_slice(array_unique ($rand),0,$number);
    return $rand;
}

function remove_xss($val) {
   // remove all non-printable characters. CR(0a) and LF(0b) and TAB(9) are allowed
   // this prevents some character re-spacing such as <java\0script>
   // note that you have to handle splits with \n, \r, and \t later since they *are* allowed in some inputs
   $val = preg_replace(‘/([\x00-\x08,\x0b-\x0c,\x0e-\x19])/‘, ‘‘, $val);

   // straight replacements, the user should never need these since they‘re normal characters
   // this prevents like <IMG [email protected]:alert(‘XSS‘)>
   $search = ‘abcdefghijklmnopqrstuvwxyz‘;
   $search .= ‘ABCDEFGHIJKLMNOPQRSTUVWXYZ‘;
   $search .= ‘[email protected]#$%^&*()‘;
   $search .= ‘~`";:?+/={}[]-_|\‘\\‘;
   for ($i = 0; $i < strlen($search); $i++) {
      // ;? matches the ;, which is optional
      // 0{0,7} matches any padded zeros, which are optional and go up to 8 chars

      // @ @ search for the hex values
      $val = preg_replace(‘/(&#[xX]0{0,8}‘.dechex(ord($search[$i])).‘;?)/i‘, $search[$i], $val); // with a ;
      // @ @ 0{0,7} matches ‘0‘ zero to seven times
      $val = preg_replace(‘/(&#0{0,8}‘.ord($search[$i]).‘;?)/‘, $search[$i], $val); // with a ;
   }

   // now the only remaining whitespace attacks are \t, \n, and \r
   $ra1 = array(‘javascript‘, ‘vbscript‘, ‘expression‘, ‘applet‘, ‘meta‘, ‘xml‘, ‘blink‘, ‘link‘, ‘style‘, ‘script‘, ‘embed‘, ‘object‘, ‘iframe‘, ‘frame‘, ‘frameset‘, ‘ilayer‘, ‘layer‘, ‘bgsound‘, ‘title‘, ‘base‘);
   $ra2 = array(‘onabort‘, ‘onactivate‘, ‘onafterprint‘, ‘onafterupdate‘, ‘onbeforeactivate‘, ‘onbeforecopy‘, ‘onbeforecut‘, ‘onbeforedeactivate‘, ‘onbeforeeditfocus‘, ‘onbeforepaste‘, ‘onbeforeprint‘, ‘onbeforeunload‘, ‘onbeforeupdate‘, ‘onblur‘, ‘onbounce‘, ‘oncellchange‘, ‘onchange‘, ‘onclick‘, ‘oncontextmenu‘, ‘oncontrolselect‘, ‘oncopy‘, ‘oncut‘, ‘ondataavailable‘, ‘ondatasetchanged‘, ‘ondatasetcomplete‘, ‘ondblclick‘, ‘ondeactivate‘, ‘ondrag‘, ‘ondragend‘, ‘ondragenter‘, ‘ondragleave‘, ‘ondragover‘, ‘ondragstart‘, ‘ondrop‘, ‘onerror‘, ‘onerrorupdate‘, ‘onfilterchange‘, ‘onfinish‘, ‘onfocus‘, ‘onfocusin‘, ‘onfocusout‘, ‘onhelp‘, ‘onkeydown‘, ‘onkeypress‘, ‘onkeyup‘, ‘onlayoutcomplete‘, ‘onload‘, ‘onlosecapture‘, ‘onmousedown‘, ‘onmouseenter‘, ‘onmouseleave‘, ‘onmousemove‘, ‘onmouseout‘, ‘onmouseover‘, ‘onmouseup‘, ‘onmousewheel‘, ‘onmove‘, ‘onmoveend‘, ‘onmovestart‘, ‘onpaste‘, ‘onpropertychange‘, ‘onreadystatechange‘, ‘onreset‘, ‘onresize‘, ‘onresizeend‘, ‘onresizestart‘, ‘onrowenter‘, ‘onrowexit‘, ‘onrowsdelete‘, ‘onrowsinserted‘, ‘onscroll‘, ‘onselect‘, ‘onselectionchange‘, ‘onselectstart‘, ‘onstart‘, ‘onstop‘, ‘onsubmit‘, ‘onunload‘);
   $ra = array_merge($ra1, $ra2);

   $found = true; // keep replacing as long as the previous round replaced something
   while ($found == true) {
      $val_before = $val;
      for ($i = 0; $i < sizeof($ra); $i++) {
         $pattern = ‘/‘;
         for ($j = 0; $j < strlen($ra[$i]); $j++) {
            if ($j > 0) {
               $pattern .= ‘(‘;
               $pattern .= ‘(&#[xX]0{0,8}([9ab]);)‘;
               $pattern .= ‘|‘;
               $pattern .= ‘|(&#0{0,8}([9|10|13]);)‘;
               $pattern .= ‘)*‘;
            }
            $pattern .= $ra[$i][$j];
         }
         $pattern .= ‘/i‘;
         $replacement = substr($ra[$i], 0, 2).‘<x>‘.substr($ra[$i], 2); // add in <> to nerf the tag
         $val = preg_replace($pattern, $replacement, $val); // filter out the hex tags
         if ($val_before == $val) {
            // no replacements were made, so exit the loop
            $found = false;
         }
      }
   }
   return $val;
}

/**
 +----------------------------------------------------------
 * 把返回的数据集转换成Tree
 +----------------------------------------------------------
 * @access public
 +----------------------------------------------------------
 * @param array $list 要转换的数据集
 * @param string $pid parent标记字段
 * @param string $level level标记字段
 +----------------------------------------------------------
 * @return array
 +----------------------------------------------------------
 */
function list_to_tree($list, $pk=‘id‘,$pid = ‘pid‘,$child = ‘_child‘,$root=0)
{
    // 创建Tree
    $tree = array();
    if(is_array($list)) {
        // 创建基于主键的数组引用
        $refer = array();
        foreach ($list as $key => $data) {
            $refer[$data[$pk]] =& $list[$key];
        }
        foreach ($list as $key => $data) {
            // 判断是否存在parent
            $parentId = $data[$pid];
            if ($root == $parentId) {
                $tree[] =& $list[$key];
            }else{
                if (isset($refer[$parentId])) {
                    $parent =& $refer[$parentId];
                    $parent[$child][] =& $list[$key];
                }
            }
        }
    }
    return $tree;
}

/**
 +----------------------------------------------------------
 * 对查询结果集进行排序
 +----------------------------------------------------------
 * @access public
 +----------------------------------------------------------
 * @param array $list 查询结果
 * @param string $field 排序的字段名
 * @param array $sortby 排序类型
 * asc正向排序 desc逆向排序 nat自然排序
 +----------------------------------------------------------
 * @return array
 +----------------------------------------------------------
 */
function list_sort_by($list,$field, $sortby=‘asc‘) {
   if(is_array($list)){
       $refer = $resultSet = array();
       foreach ($list as $i => $data)
           $refer[$i] = &$data[$field];
       switch ($sortby) {
           case ‘asc‘: // 正向排序
                asort($refer);
                break;
           case ‘desc‘:// 逆向排序
                arsort($refer);
                break;
           case ‘nat‘: // 自然排序
                natcasesort($refer);
                break;
       }
       foreach ( $refer as $key=> $val)
           $resultSet[] = &$list[$key];
       return $resultSet;
   }
   return false;
}

/**
 +----------------------------------------------------------
 * 在数据列表中搜索
 +----------------------------------------------------------
 * @access public
 +----------------------------------------------------------
 * @param array $list 数据列表
 * @param mixed $condition 查询条件
 * 支持 array(‘name‘=>$value) 或者 name=$value
 +----------------------------------------------------------
 * @return array
 +----------------------------------------------------------
 */
function list_search($list,$condition) {
    if(is_string($condition))
        parse_str($condition,$condition);
    // 返回的结果集合
    $resultSet = array();
    foreach ($list as $key=>$data){
        $find   =   false;
        foreach ($condition as $field=>$value){
            if(isset($data[$field])) {
                if(0 === strpos($value,‘/‘)) {
                    $find   =   preg_match($value,$data[$field]);
                }elseif($data[$field]==$value){
                    $find = true;
                }
            }
        }
        if($find)
            $resultSet[]     =   &$list[$key];
    }
    return $resultSet;
}

// 发送Http状态信息
function send_http_status($code) {
    static $_status = array(
        // Informational 1xx
        100 => ‘Continue‘,
        101 => ‘Switching Protocols‘,
        // Success 2xx
        200 => ‘OK‘,
        201 => ‘Created‘,
        202 => ‘Accepted‘,
        203 => ‘Non-Authoritative Information‘,
        204 => ‘No Content‘,
        205 => ‘Reset Content‘,
        206 => ‘Partial Content‘,
        // Redirection 3xx
        300 => ‘Multiple Choices‘,
        301 => ‘Moved Permanently‘,
        302 => ‘Moved Temporarily ‘,  // 1.1
        303 => ‘See Other‘,
        304 => ‘Not Modified‘,
        305 => ‘Use Proxy‘,
        // 306 is deprecated but reserved
        307 => ‘Temporary Redirect‘,
        // Client Error 4xx
        400 => ‘Bad Request‘,
        401 => ‘Unauthorized‘,
        402 => ‘Payment Required‘,
        403 => ‘Forbidden‘,
        404 => ‘Not Found‘,
        405 => ‘Method Not Allowed‘,
        406 => ‘Not Acceptable‘,
        407 => ‘Proxy Authentication Required‘,
        408 => ‘Request Timeout‘,
        409 => ‘Conflict‘,
        410 => ‘Gone‘,
        411 => ‘Length Required‘,
        412 => ‘Precondition Failed‘,
        413 => ‘Request Entity Too Large‘,
        414 => ‘Request-URI Too Long‘,
        415 => ‘Unsupported Media Type‘,
        416 => ‘Requested Range Not Satisfiable‘,
        417 => ‘Expectation Failed‘,
        // Server Error 5xx
        500 => ‘Internal Server Error‘,
        501 => ‘Not Implemented‘,
        502 => ‘Bad Gateway‘,
        503 => ‘Service Unavailable‘,
        504 => ‘Gateway Timeout‘,
        505 => ‘HTTP Version Not Supported‘,
        509 => ‘Bandwidth Limit Exceeded‘
    );
    if(array_key_exists($code,$_status)) {
        header(‘HTTP/1.1 ‘.$code.‘ ‘.$_status[$code]);
    }
}
//用户自定义函数开始

// 实例化服务
function service($name,$params=array()) {
    return X($name,$params=array(),‘Service‘);
}

// 实例化model
function model($name,$params=array()) {
    return X($name,$params=array(),‘Model‘);
}

// 调用接口服务
function X($name,$params=array(),$domain=‘Service‘) {
    static $_service = array();
    //if(empty($app))
    $app =  C(‘DEFAULT_APP‘);

    if(isset($_service[$domain.‘_‘.$app.‘_‘.$name]))
        return $_service[$domain.‘_‘.$app.‘_‘.$name];

    $class = $name.$domain;

    require_cache(SITE_PATH.‘/addons/‘.strtolower($domain).‘s/‘.$class.‘.class.php‘);

    //服务不可用时 记录日志 或 抛出异常
    if(class_exists($class)){
        $obj   =  new $class($params);
        $_service[$domain.‘_‘.$app.‘_‘.$name] =  $obj;
        return $obj;
    }else{
        throw_exception(L(‘_CLASS_NOT_EXIST_‘).‘:‘.$class);
    }
}
?>
时间: 2024-08-23 07:31:24

ThinkPHP/Common/extend.php的相关文章

php xss过滤

XSS又叫CSS (Cross Site Script) ,跨站脚本攻击.它指的是恶意攻击者往Web页面里插入恶意html代码,当用户浏览该页之时,嵌入当中Web里面的html代码会被运行,进而达到某些人的攻击目的. 比如在有get接收的链接后面加入?id=19"><div+style%3Dwidth%3Aexpression(alert(42873))> 会导致页面错乱,甚至还会有弹出框! 以下是thinkphp里面的一段代码.用于过滤xss ThinkPHP\Code\Th

ThinkPHP框架系统源码解析——URL路由解析

1 一.ThinkPHP框架目录 2 /test/index.php //项目入口文件 3 /ThinkPHP/ThinkPHP.php //框架入口文件 4 5 Common 框架公共文件目录(函数库) 6 ThinkPHP/Common/runtime.php //框架初次运行文件 7 ThinkPHP/Common/common.php //框架基础函数库 8 ThinkPHP/Common/functions.php //标准模式公共函数库 9 10 Conf 框架配置文件目录 11 T

ThinkPHP 3.2.3 数据缓存与静态缓存

ThinkPHP 3.2.3 中手册中数据缓存的地址是:http://www.kancloud.cn/manual/thinkphp/1835 静态缓存的地址是:http://www.kancloud.cn/manual/thinkphp/1839 数据缓存 使用 S 方法进行数据缓存,缓存文件默认的方式是文件缓存(DATA_CACHE_TYPE = File),文件缓存默认的保存路径是 ./Application/Runtime/Temp 当使用默认的缓存方式时,不需要在配置文件中进行配置,直

Thinkphp 源码分析

ThinkPHP是国内非常火的一个轻量级框架,采用MVC模式,结构写的非常好,今天 大象 带大家走一下ThinkPHP框架系统运行流程,我将跟随ThinkPHP的执行进行代码讲解,第一课,先讲解URL路由解析 一.ThinkPHP框架目录 /test/index.php //项目入口文件 /ThinkPHP/ThinkPHP.php //框架入口文件 Common 框架公共文件目录(函数库) ThinkPHP/Common/runtime.php //框架初次运行文件 ThinkPHP/Comm

ThinkPHP 3.2 的变化

前言 ThinkPHP 3.2 基于 ThinkPHP 3.1 的基础上有许多的变化,我觉得这个版本应该设立为 ThinkPHP 4.0 而不是什么 3.2.如果你在使用 ThinkPHP 3.1 请勿贸然迁移升级,这可不是简单的覆盖下文件就安然无恙的事情. 1. PHP 的版本 ThinkPHP 3.2 要求 PHP 5.3 以上的版本,而 ThinkPHP 3.1 只需要 PHP 5.2 就好了 2. 程序文件夹的修改 ThinkPHP 3.2 使用 Application 作为程序文件夹,

ThinkPHP 3.2.3 简单后台模块开发(一)常用配置

一.项目分组 下载解压 ThinkPHP 3.2.3,在默认的应用 Application(./Application) 中,包含一个默认的模块 Home(./Application/Home). 需要在该默认应用中创建一个用于后台管理的 Admin 模块,可以通过在应用入口文件(./index.php)中绑定 Admin 模块来 自动生成 Admin 模块: define('BIND_MODULE','Admin'); 此时访问 http://serverName/index.php 便会自动

ThinkPHP - 文件上传

获取上传类 ThinkPHP的扩展中提供了文件上传类库UploadFile,可以在在http://www.thinkphp.cn/extend/224.html下载,或者下载官方的完整扩展包(http://www.thinkphp.cn/down/253.html)里面也已经包含上传扩展类了.如果是单独下载的上传类库,把解压后的UploadFile.class.php 放入ThinkPHP/Extend/Library/ORG/Net/(如果没有请手动创建)目录下面. 效果: 前台代码: 1 <

ThinkPHP数据分页Page.class.php

获取分页类 ThinkPHP提供了数据分页的扩展类库Page,可以在http://www.thinkphp.cn/extend/241.html下载,或者下载官方的完整扩展包(http://www.thinkphp.cn/down/253.html)里面也已经包含分页扩展类了.把解压后的Page.class.php放入ThinkPHP/Extend/Library/ORG/Util/(如果没有请手动创建)目录下面. 当然,扩展类库的位置其实比较随意,你也可以放入项目的类库目录下面,区别只是在于你

Thinkphp关闭缓存方法总结(转)

ThinkPHP在数据缓存方面包括文件方式.共享内存方式和数据库方式在内的多种方式进行缓存,通过插件方式还可以增加以后需要的缓存类,让应用开发可以选择更加适合自己的缓存方式,从而有效地提高应用执行效率.目前已经支持的缓存方式包括:File.Apachenote.Apc.Eaccelerator.Memcache.Shmop.Sqlite.Db.Redis和Xcache.更多详细内容请查看:http://www.111cn.net/phper/thinkPhp/45890.htm为了开发的方便,可