classes/system/common_functions.php

<?php
/*******************************************************************************
 * Copyright (c) 2007-2003 Intalio, Inc., IBM Corporation and others.
 * All rights reserved. This program and the accompanying materials
 * are made available under the terms of the Eclipse Public License v1.0
 * which accompanies this distribution, and is available at
 * http://www.eclipse.org/legal/epl-v10.html
 *
 * Contributors:
 *    Antoine Toulme, Intalio Inc. 217488: Remove Phoenix as a requirement for Babel server
 *    Kit Lo (IBM) - 272661 - Pseudo translations change " to ', breaking link texts
 *    Kit Lo (IBM) - [402215] Extract Orion JavaScript files for translation
 *******************************************************************************/

    /**
     * Sanitize incoming value to prevent SQL injections
     * @param string value to sanitize
     * @param dbh database resource to use
     * @return string santized string
     */
    function sqlSanitize($_value, $_dbh = null) {
        if(get_magic_quotes_gpc()) {
            $_value = stripslashes($_value);
        }
        $_value = mysqli_real_escape_string($_dbh, $_value);
        return $_value;
    }
    
    function returnQuotedString($_String) {
        # Accept: String - String to be quoted
        # return: string - Quoted String
        
        // replace " with '
        $_String = str_replace('"', "'", $_String);
    
        return "\"" . $_String . "\"";
    }

    function returnEscapedQuotedString($_String) {
        # Accept: String - String to be quoted
        # return: string - Quoted String
        
        // replace \" with \\"", then quote the whole string
	// for example: Generate an HTML5 \"Hello World\" website => "Generate an HTML5 \\""Hello World\\"" website"
        $_String = str_replace('\\"', '\\\\""', $_String);
    
        return "\"" . $_String . "\"";
    }

    # Bug 272661 - Pseudo translations change " to ', breaking link texts
    # Use new returnSmartQuotedString function for value string which does not replace " with '.
    function returnSmartQuotedString($_String) {
        # Accept: String - String to be quoted
        # return: string - Quoted String
        #
        # If the input string contains double quote, a single quoted string will be returned.
        #

        # Note: Use the === operator for testing the return value of the strpos function
        # because the double quote could be at the 0th position.
        if (strpos($_String, '"') === false) {
          $_value = "'" . $_String . "'";
        } else {
          $_value = '"' . $_String . '"';
        }

        return $_value;
    }

    function getCURDATE() {
        return date("Y-m-d");
    }
    
    /** @author droy
     * @since version - Oct 19, 2006
     * @param String _param_name name of the HTTP GET/POST parameter
     * @param String _method GET or POST, or the empty string for POST,GET order 
     * @return String HTTP GET/POST parameter value, or the empty string
     *  
     * Fetch the HTTP parameter
     * 
     */
    function getHTTPParameter($_param_name, $_method="") {
        $rValue = "";
        $_method = strtoupper($_method);

        # Always fetch the GET VALUE, override with POST unless a GET was specifically requested
        if(isset($_GET[$_param_name])) {
            $rValue = $_GET[$_param_name];
        }
        if(isset($_POST[$_param_name]) && $_method != "GET") {  
            $rValue = $_POST[$_param_name];
        }
        return $rValue;
    }
    
    function addAndIfNotNull($_String) {
        # Accept: String - String to be AND'ed
        # return: string - AND'ed String
        
        if($_String != "") {
            $_String = $_String . " AND ";
        }
        
        return $_String;
    }
    
    function exitTo() {
        # TODO: sqlClose();
        if (func_num_args() == 1) {
            $url = func_get_arg(0);
            header("Location: $url");
            exit;
        } else if (func_num_args() == 2) {
            $url  = func_get_arg(0);
            $arg1 = func_get_arg(1);
            SetSessionVar("errStr",$arg1);
            header("Location: $url");
            exit;
        } else if (func_num_args() == 3) {
            $url  = func_get_arg(0);
             $arg1 = func_get_arg(1);
            $arg2 = func_get_arg(2);
            SetSessionVar($arg1,$arg2);
            header("Location: $url");
            exit;
        }
    }
    
    function GetSessionVar($varName) {
        if (isset($_SESSION[$varName]))
            return $_SESSION[$varName];
        return 0;
    }

    function SetSessionVar($varName,$varVal) {
        global $_SESSION;

        $GLOBALS[$varName]  = $varVal;
        $_SESSION[$varName] = $varVal;
        return $varVal;
    }

    function mysqli_result($res, $row=0, $col=0) {
    	$numrows = mysqli_num_rows($res);
    	if ($numrows && $row <= ($numrows-1) && $row >=0) {
    		mysqli_data_seek($res, $row);
    		$resrow = (is_numeric($col)) ? mysqli_fetch_row($res) : mysqli_fetch_assoc($res);
    		if (isset($resrow[$col])) {
    			return $resrow[$col];
    		}
    	}
    	return false;
    }
?>