X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Frequest-functions.php;h=7f15d42b50ef443093f49c74263f1f4a13786ac6;hp=b110317396d89a7f79617ae8a9edb9b4fc2acf6e;hb=4373e155854012d687fdfcae4c69d1a940883fab;hpb=f74581eca45c393033acfd9d7798b958031bc625

diff --git a/inc/request-functions.php b/inc/request-functions.php
index b110317396..7f15d42b50 100644
--- a/inc/request-functions.php
+++ b/inc/request-functions.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 02/28/2009 *
- * ===============                              Last change: 02/28/2009 *
+ * Mailer v0.2.1-FINAL                                Start: 02/28/2009 *
+ * ===================                          Last change: 02/28/2009 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : request-functions.php                            *
@@ -10,10 +10,9 @@
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Spezialle Funktionen fuer die Anfragebehandlung  *
  * -------------------------------------------------------------------- *
- *                                                                      *
- * -------------------------------------------------------------------- *
- * Copyright (c) 2003 - 2008 by Roland Haeder                           *
- * For more information visit: http://www.mxchange.org                  *
+ * Copyright (c) 2003 - 2009 by Roland Haeder                           *
+ * Copyright (c) 2009 - 2013 by Mailer Developer Team                   *
+ * For more information visit: http://mxchange.org                      *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
@@ -33,25 +32,30 @@
 
 // Some security stuff...
 if (!defined('__SECURITY')) {
-	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
-	require($INC);
+	die();
 } // END - if
 
+// Initialize the request elements
+function initRequest () {
+	$GLOBALS['raw_request']['get']  = (array) $_GET;
+	$GLOBALS['raw_request']['post'] = (array) $_POST;
+}
+
 // Wrapper for elements in $_GET
-function REQUEST_GET ($element) {
+function getRequestElement ($element) {
 	// By default no element is there
-	$value = null;
+	$value = NULL;
 
 	// Is the element cached or there?
-	if (isset($GLOBALS['cache_array']['request_get'][$element])) {
+	if (isset($GLOBALS['cache_request']['get'][$element])) {
 		// Then use the cache
-		$value = $GLOBALS['cache_array']['request_get'][$element];
-	} elseif (REQUEST_ISSET_GET($element)) {
+		$value = $GLOBALS['cache_request']['get'][$element];
+	} elseif (isGetRequestElementSet($element)) {
 		// Then get it directly
-		$value = SQL_ESCAPE($_GET[$element]);
+		$value = sqlEscapeString($GLOBALS['raw_request']['get'][$element]);
 
 		// Store it in cache
-		$GLOBALS['cache_array']['request_get'][$element] = $value;
+		$GLOBALS['cache_request']['get'][$element] = $value;
 	} // END - if
 
 	// Return value
@@ -59,31 +63,32 @@ function REQUEST_GET ($element) {
 }
 
 // Checks if an element in $_GET exists
-function REQUEST_ISSET_GET ($element, $extra="") {
-	if (empty($extra)) {
-		return (isset($_GET[$element]));
+function isGetRequestElementSet ($element, $subElement = '') {
+	if (empty($subElement)) {
+		return ((isset($GLOBALS['raw_request']['get'][$element])) && ('' . ($GLOBALS['raw_request']['get'][$element] . '') != ''));
 	} else {
-		return (isset($_GET[$element][$extra]));
+		return ((isset($GLOBALS['raw_request']['get'][$element][$subElement])) && ('' . ($GLOBALS['raw_request']['get'][$element][$subElement] . '') != ''));
 	}
 }
 
 // Removes an element from $_GET
-function REQUEST_UNSET_GET ($element) {
-	unset($_GET[$element]);
+function unsetGetRequestElement ($element) {
+	unset($GLOBALS['cache_request']['get'][$element]);
+	unset($GLOBALS['raw_request']['get'][$element]);
 }
 
 // Getter for whole $_GET array
-function REQUEST_GET_ARRAY () {
-	return $_GET;
+function getRequestArray () {
+	return $GLOBALS['raw_request']['get'];
 }
 
 // Counts entries in $_GET or returns false if not an array
-function REQUEST_GET_COUNT () {
+function countRequestGet () {
 	// By default this is not an array
-	$count = false;
+	$count = FALSE;
 
 	// Get the array
-	$GET = REQUEST_GET_ARRAY();
+	$GET = getRequestArray();
 
 	// Is it an array?
 	if (is_array($GET)) {
@@ -94,62 +99,184 @@ function REQUEST_GET_COUNT () {
 	// Return value
 }
 
+// Setter for element in $_GET
+function setGetRequestElement ($element, $value) {
+	// Escape both
+	$element = sqlEscapeString($element);
+	$value   = sqlEscapeString($value);
+
+	// Set in $_GET
+	$GLOBALS['raw_request']['get'][$element] = $value;
+
+	// Update cache
+	$GLOBALS['cache_request']['get'][$element] = $value;
+}
+
 // Wrapper for elements in $_POST
-function REQUEST_POST ($element) {
+function postRequestElement ($element, $subElement = NULL) {
+	//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element[' . gettype($element) . ']=' . $element . ',subElement[' . gettype($subElement) . ']=' . $subElement . ' - ENTERED!');
 	// By default no element is there
-	$value = null;
+	$value = NULL;
 
-	// Is the element there?
-	if (REQUEST_ISSET_POST($element)) {
+	// Is the element in cache?
+	if (isset($GLOBALS['cache_request']['post'][$element][$subElement])) {
+		// Then use it
+		$value = $GLOBALS['cache_request']['post'][$element][$subElement];
+		//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element[' . gettype($element) . ']=' . $element . ',subElement[' . gettype($subElement) . ']=' . $subElement . ',value[' . gettype($value) . ']=' . $value . ' - CACHE!');
+	} elseif (isPostRequestElementSet($element)) {
 		// Then use it
-		$value = $_POST[$element];
+		$value = $GLOBALS['raw_request']['post'][$element];
+
+		// Is $subElement set?
+		if ((!is_null($subElement)) && (isPostRequestElementSet($element, $subElement))) {
+			// Then use this
+			$value = sqlEscapeString($value[$subElement]);
+			//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ',subElement=' . $subElement . ' - SUB!');
+		} elseif ((!is_array($value)) && (function_exists('sqlEscapeString'))) {
+			// Escape it here
+			$value = sqlEscapeString($value);
+			//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ' - REGULAR!');
+		}
+
+		// Set it in cache
+		//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ',subElement=' . $subElement . ',value=' . $value.' - ADDED!');
+		$GLOBALS['cache_request']['post'][$element][$subElement] = $value;
 	} // END - if
 
 	// Return value
+	//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element[' . gettype($element) . ']=' . $element . ',subElement[' . gettype($subElement) . ']=' . $subElement . ',value[' . gettype($value) . ']=' . $value . ' - EXIT!');
 	return $value;
 }
 
 // Checks if an element in $_POST exists
-function REQUEST_ISSET_POST ($element, $extra="") {
-	if (empty($extra)) {
-		return (isset($_POST[$element]));
+function isPostRequestElementSet ($element, $subElement = NULL) {
+	/*
+	 * Always check that $element is a string and that $subElement is NULL or
+	 * a string as numerical indexes are not wanted in POST data (in this
+	 * project).
+	 */
+	//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element[]=' . gettype($element) . ',subElement[]=' . gettype($subElement));
+	assert(is_string($element) && ((is_null($subElement)) || (is_string($subElement)) || (is_int($subElement)) || (is_double($subElement))));
+
+	// Is a sub element set?
+	if (is_null($subElement)) {
+		// No, then only check $element
+		return ((isset($GLOBALS['raw_request']['post'][$element])) && ((is_array($GLOBALS['raw_request']['post'][$element])) || (('' . $GLOBALS['raw_request']['post'][$element] . '') != '')));
 	} else {
-		return (isset($_POST[$element][$extra]));
+		// Yes, then check both together
+		return ((isset($GLOBALS['raw_request']['post'][$element][$subElement])) && (('' . $GLOBALS['raw_request']['post'][$element][$subElement] . '') != ''));
 	}
 }
 
 // Removes an element from $_POST
-function REQUEST_UNSET_POST ($element) {
-	unset($_POST[$element]);
+function unsetPostRequestElement ($element) {
+	unset($GLOBALS['raw_request']['post'][$element]);
+	unset($GLOBALS['cache_request']['post'][$element]);
 }
 
 // Getter for whole $_POST array
-function REQUEST_POST_ARRAY () {
-	return $_POST;
+function postRequestArray () {
+	return $GLOBALS['raw_request']['post'];
+}
+
+// Setter for whole $_POST array
+function setPostRequestArray ($postData) {
+	$GLOBALS['raw_request']['post'] = $postData;
 }
 
 // Counts entries in $_POST or returns false if not an array
-function REQUEST_POST_COUNT () {
+function countRequestPost () {
 	// By default this is not an array
-	$count = false;
+	$count = FALSE;
 
 	// Get the array
-	$POST = REQUEST_POST_ARRAY();
+	$postData = postRequestArray();
 
 	// Is it an array?
-	if (is_array($POST)) {
+	if (is_array($postData)) {
 		// Then count it
-		$count = count($POST);
+		$count = count($postData);
 	} // END - if
 
 	// Return value
+	return $count;
 }
 
-// Checks wether a form was sent. If so, the $_POST['ok'] element must be set
-function IS_FORM_SENT () {
+// Setter for element in $_POST
+function setPostRequestElement ($element, $value) {
+	// Is $element or $value an array?
+	if (is_array($element)) {
+		// Set array
+		$eval = "\$GLOBALS['raw_request']['post']['";
+
+		// Add all entries
+		$eval .= implode("']['", $element);
+
+		// Finish eval() command
+		$eval .= sprintf("'] = \"%s\";", sqlEscapeString($value));
+
+		// And run it
+		eval($eval);
+	} elseif (is_array($value)) {
+		// Escape element
+		$element = sqlEscapeString($element);
+
+		// Value is an array so set it directly
+		$GLOBALS['raw_request']['post'][$element] = $value;
+	} else {
+		// Debug message
+		//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ',value=' . $value . ' - BEFORE!');
+
+		// Escape both
+		$element = sqlEscapeString($element);
+		$value   = sqlEscapeString($value);
+
+		// Debug message
+		//* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'element=' . $element . ',value=' . $value . ' - AFTER!');
+
+		// Set regular entry
+		$GLOBALS['raw_request']['post'][$element] = $value;
+	}
+
+	// Update cache
+	$GLOBALS['cache_request']['post'][$element][NULL] = $value;
+}
+
+// Checks whether a form was sent. If so, the $_POST['ok'] element must be set
+function isFormSent ($requestParameter = 'ok') {
 	// Simply wrap it!
-	return REQUEST_ISSET_POST('ok');
+	return isPostRequestElementSet($requestParameter);
+}
+
+// Getter for request URI
+function getRequestUri () {
+	// Is it not set?
+	if (!isset($_SERVER['REQUEST_URI'])) {
+		// Return empty string
+		return '';
+	} // END - if
+
+	// Return it
+	return $_SERVER['REQUEST_URI'];
+}
+
+// Add all GET parameters to a string (without leading sign)
+function addAllGetRequestParameters () {
+	// Init variable
+	$return = '';
+
+	// Now add all parameters
+	foreach (getRequestArray() as $key => $value) {
+		// Add it secured
+		$return .= sqlEscapeString($key) . '=' . sqlEscapeString($value) . '&amp;';
+	} // END - foreach
+
+	// Remove trailing &amp;
+	$return = substr($return, 0, -5);
+
+	// Return it
+	return $return;
 }
 
-//
+// [EOF]
 ?>