Zhimeng DedeCMS secondary development realizes linkage screening function (including multiple selection function)
//Start of dedecms linkage filtering function code function wwwcms_filter($str,$stype="inject") { if ($stype=="inject") { $str = str_replace( array( "select", "insert", "update", "delete", "alter", "cas", "union", "into", "load_file", "outfile", "create", "join", "where", "like", "drop", "modify", "rename", "'", "/*", "*", "../", "./"), array("","","","","","","","","","","","","","","","","","","","","",""), $str); } else if ($stype=="xss") { $farr = array("/s+/" , "/<(/?)(script|META|STYLE|HTML|HEAD|BODY|STYLE |i?frame|b|strong|style|html|img|P|o:p|iframe|u |em|strike|BR|div|a|TABLE|TBODY|object|tr|td |st1:chsdate|FONT|span|MARQUEE|body|title | |link |meta|?|%) ([^>]*?)>/isU", "/(<[^>]*)on[a-zA-Z]+s*=([^>]*>)/isU", ); $tarr = array(" ", "", "\1\2", ); $str = preg_replace($farr, $tarr, $str); $str = str_replace( array( "<", ">", "'", """, ";", "/*", "*", "../", "./"), array("<",">","","","","","","",""), $str); } return $str; } /** *Load custom form (for publishing) * * @access public *@ param string $fieldset field list *@ param string $loadtype * @return string */ function AddFilter($channelid, $type=1, $fieldsnamef, $defaulttid, $loadtype='autofield') { global $tid,$dsql,$id; $tid = $defaulttid ? $ defaulttid : $tid; if ($id!="") { $tidsq=$dsql ->GetOne ("Select typeid From ` # [Separator] @ __archives ` where id='$id'"); $tid = $tidsq["typeid"]; } $nofilter = (isset($_REQUEST['TotalResult']) ? "&TotalResult=".$_ REQUEST['TotalResult'] : ''). (isset($_REQUEST['PageNo']) ? "&PageNo=".$_ REQUEST['PageNo'] : ''); $filterarr = wwwcms_filter(stripos($_SERVER['REQUEST_URI'], "list.php?tid=") ? str_replace($nofilter, '', $_SERVER['REQUEST_URI']) : $GLOBALS['cfg_cmsurl']. "/plus/list.php?tid=".$ tid); $cInfos=$dsql ->GetOne ("Select * From ` # [Separator] @ __channeltype ` where id='$channelid'"); $fieldset=$cInfos['fieldset']; $dtp = new DedeTagParse(); $dtp->SetNameSpace('field','<','>'); $dtp->LoadSource($fieldset); $dede_addonfields = ''; if(is_array($dtp->CTags)) { foreach($dtp->CTags as $tid=>$ctag) { $fieldsname = $fieldsnamef ? explode(",", $fieldsnamef) : explode(",", $ctag->GetName()); if(($loadtype!='autofield' || ($loadtype=='autofield' && $ctag->GetAtt('autofield')==1)) && in_array($ctag->GetName(), $fieldsname) ) { $href1 = explode($ctag->GetName().'=', $ filterarr); $href2 = explode('&', $href1[1]); $fields_value = $href2[0]; $dede_addonfields .= '< div class="scv-shaixuan"><b>'.$ ctag->GetAtt('itemname').':</ b>'; switch ($type) { case 1: $dede_addonfields .= (preg_match("/&".$ctag->GetName(). "=/is",$filterarr,$regm) ? '< A title="All" href="'. str_replace ("&". $ctag ->GetName()."=". $fields_value," ", $filterarr).'">All</a>':'<span>All</span>').'& nbsp;'; $addonfields_items = explode(",",$ctag->GetAtt('default')); for ($i=0; $i<count($addonfields_items); $ i++) { $href = stripos($filterarr,$ctag->GetName().'=') ? str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr) : $filterarr.'&'.$ ctag->GetName().'='. urlencode($addonfields_items[$i]);// echo $href; $dede_addonfields .= ($fields_value!=urlencode($addonfields_items[$i]) ? '< a title="'.$addonfields_items[$i].'" href="'.$href.'">'.$ addonfields_items[$i].'</ a>' : '<span>'.$ addonfields_items[$i].'</ span>'). " "; } $dede_addonfields .= '</ div>'; break; case 2: $dede_addonfields .= '< select name="filter"'.$ ctag->GetName().' onchange="window.location=this.options[this.selectedIndex].value"> '.'< Option value="'. str_replace ("&". $ctag ->GetName()."=". $fields_value," ", $filterarr).'">All</option>'; $addonfields_items = explode(",",$ctag->GetAtt('default')); for ($i=0; $i<count($addonfields_items); $ i++) { $href = stripos($filterarr,$ctag->GetName().'=') ? str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr) : $filterarr.'&'.$ ctag->GetName().'='. urlencode($addonfields_items[$i]); $dede_addonfields .= '< option value="'.$href.'"'. ($fields_value==urlencode($addonfields_items[$i]) ? ' selected="selected"' : '').'>'.$ addonfields_items[$i].'</ option> '; } $dede_addonfields .= '</ select><br/> '; break; } } } } echo $dede_addonfields; }

{dede:php}AddFilter(4,1,'linestyle,linethem,youdays,jgqujian'); {/dede:php}
If ($key=="goodtype" | | $key=="goodscolor") {//The field name of your custom field (the English name) $count=0; $nowsql =''; $var=explode(",",wwwcms_filter(iconv("UTF-8", "gb2312", $value)));// Iconv means transcoding. If the parameter from your url is in Chinese, you need to transcode if(!empty($var)){ foreach($var as $value){ if($count==0){ $filtersql.= "and ($addtable.".wwwcms_filter($key). " like '%".$ value. "%'"; $count++; }else{ $filtersql.= "or $addtable.".wwwcms_filter($key). " like '%".$ value. "%'"; } } $filtersql.= ")"; } }else{ $filtersql .= ($key!="tid" && $key!="TotalResult" && $key!="PageNo") ? " AND $addtable.".wwwcms_filter($key). " = ".wwwcms_filter(iconv("UTF-8", "gb2312", $value)). "" : '';// As above, if the value passed is in Chinese, transcoding is required }