onokazu
onoka****@users*****
2005年 6月 30日 (木) 01:40:25 JST
Index: xoops2jp/html/modules/system/admin/findusers/main.php diff -u xoops2jp/html/modules/system/admin/findusers/main.php:1.2.6.2.2.1 xoops2jp/html/modules/system/admin/findusers/main.php:1.2.6.2.2.2 --- xoops2jp/html/modules/system/admin/findusers/main.php:1.2.6.2.2.1 Sun Jun 12 20:16:55 2005 +++ xoops2jp/html/modules/system/admin/findusers/main.php Thu Jun 30 01:40:24 2005 @@ -1,5 +1,5 @@ <?php -// $Id: main.php,v 1.2.6.2.2.1 2005/06/12 11:16:55 onokazu Exp $ +// $Id: main.php,v 1.2.6.2.2.2 2005/06/29 16:40:24 onokazu Exp $ // ------------------------------------------------------------------------ // // XOOPS - PHP Content Management System // // Copyright (c) 2000 XOOPS.org // @@ -154,16 +154,16 @@ $match = (!empty($_POST['user_uname_match'])) ? intval($_POST['user_uname_match']) : XOOPS_MATCH_START; switch ($match) { case XOOPS_MATCH_START: - $criteria->add(new Criteria('uname', $myts->addSlashes(trim($_POST['user_uname'])).'%', 'LIKE')); + $criteria->add(new Criteria('uname', $myts->stripSlashesGPC(trim($_POST['user_uname'])).'%', 'LIKE')); break; case XOOPS_MATCH_END: - $criteria->add(new Criteria('uname', '%'.$myts->addSlashes(trim($_POST['user_uname'])), 'LIKE')); + $criteria->add(new Criteria('uname', '%'.$myts->stripSlashesGPC(trim($_POST['user_uname'])), 'LIKE')); break; case XOOPS_MATCH_EQUAL: - $criteria->add(new Criteria('uname', $myts->addSlashes(trim($_POST['user_uname'])))); + $criteria->add(new Criteria('uname', $myts->stripSlashesGPC(trim($_POST['user_uname'])))); break; case XOOPS_MATCH_CONTAIN: - $criteria->add(new Criteria('uname', '%'.$myts->addSlashes(trim($_POST['user_uname'])).'%', 'LIKE')); + $criteria->add(new Criteria('uname', '%'.$myts->stripSlashesGPC(trim($_POST['user_uname'])).'%', 'LIKE')); break; } } @@ -171,16 +171,16 @@ $match = (!empty($_POST['user_name_match'])) ? intval($_POST['user_name_match']) : XOOPS_MATCH_START; switch ($match) { case XOOPS_MATCH_START: - $criteria->add(new Criteria('name', $myts->addSlashes(trim($_POST['user_name'])).'%', 'LIKE')); + $criteria->add(new Criteria('name', $myts->stripSlashesGPC(trim($_POST['user_name'])).'%', 'LIKE')); break; case XOOPS_MATCH_END: - $criteria->add(new Criteria('name', '%'.$myts->addSlashes(trim($_POST['user_name'])), 'LIKE')); + $criteria->add(new Criteria('name', '%'.$myts->stripSlashesGPC(trim($_POST['user_name'])), 'LIKE')); break; case XOOPS_MATCH_EQUAL: - $criteria->add(new Criteria('name', $myts->addSlashes(trim($_POST['user_name'])))); + $criteria->add(new Criteria('name', $myts->stripSlashesGPC(trim($_POST['user_name'])))); break; case XOOPS_MATCH_CONTAIN: - $criteria->add(new Criteria('name', '%'.$myts->addSlashes(trim($_POST['user_name'])).'%', 'LIKE')); + $criteria->add(new Criteria('name', '%'.$myts->stripSlashesGPC(trim($_POST['user_name'])).'%', 'LIKE')); break; } } @@ -188,16 +188,16 @@ $match = (!empty($_POST['user_email_match'])) ? intval($_POST['user_email_match']) : XOOPS_MATCH_START; switch ($match) { case XOOPS_MATCH_START: - $criteria->add(new Criteria('email', $myts->addSlashes(trim($_POST['user_email'])).'%', 'LIKE')); + $criteria->add(new Criteria('email', $myts->stripSlashesGPC(trim($_POST['user_email'])).'%', 'LIKE')); break; case XOOPS_MATCH_END: - $criteria->add(new Criteria('email', '%'.$myts->addSlashes(trim($_POST['user_email'])), 'LIKE')); + $criteria->add(new Criteria('email', '%'.$myts->stripSlashesGPC(trim($_POST['user_email'])), 'LIKE')); break; case XOOPS_MATCH_EQUAL: - $criteria->add(new Criteria('email', $myts->addSlashes(trim($_POST['user_email'])))); + $criteria->add(new Criteria('email', $myts->stripSlashesGPC(trim($_POST['user_email'])))); break; case XOOPS_MATCH_CONTAIN: - $criteria->add(new Criteria('email', '%'.$myts->addSlashes(trim($_POST['user_email'])).'%', 'LIKE')); + $criteria->add(new Criteria('email', '%'.$myts->stripSlashesGPC(trim($_POST['user_email'])).'%', 'LIKE')); break; } } @@ -209,16 +209,16 @@ $match = (!empty($_POST['user_icq_match'])) ? intval($_POST['user_icq_match']) : XOOPS_MATCH_START; switch ($match) { case XOOPS_MATCH_START: - $criteria->add(new Criteria('user_icq', $myts->addSlashes(trim($_POST['user_icq'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_icq', $myts->stripSlashesGPC(trim($_POST['user_icq'])).'%', 'LIKE')); break; case XOOPS_MATCH_END: - $criteria->add(new Criteria('user_icq', '%'.$myts->addSlashes(trim($_POST['user_icq'])), 'LIKE')); + $criteria->add(new Criteria('user_icq', '%'.$myts->stripSlashesGPC(trim($_POST['user_icq'])), 'LIKE')); break; case XOOPS_MATCH_EQUAL: - $criteria->add(new Criteria('user_icq', '%'.$myts->addSlashes(trim($_POST['user_icq'])))); + $criteria->add(new Criteria('user_icq', '%'.$myts->stripSlashesGPC(trim($_POST['user_icq'])))); break; case XOOPS_MATCH_CONTAIN: - $criteria->add(new Criteria('user_icq', '%'.$myts->addSlashes(trim($_POST['user_icq'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_icq', '%'.$myts->stripSlashesGPC(trim($_POST['user_icq'])).'%', 'LIKE')); break; } } @@ -226,16 +226,16 @@ $match = (!empty($_POST['user_aim_match'])) ? intval($_POST['user_aim_match']) : XOOPS_MATCH_START; switch ($match) { case XOOPS_MATCH_START: - $criteria->add(new Criteria('user_aim', $myts->addSlashes(trim($_POST['user_aim'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_aim', $myts->stripSlashesGPC(trim($_POST['user_aim'])).'%', 'LIKE')); break; case XOOPS_MATCH_END: - $criteria->add(new Criteria('user_aim', '%'.$myts->addSlashes(trim($_POST['user_aim'])), 'LIKE')); + $criteria->add(new Criteria('user_aim', '%'.$myts->stripSlashesGPC(trim($_POST['user_aim'])), 'LIKE')); break; case XOOPS_MATCH_EQUAL: - $criteria->add(new Criteria('user_aim', $myts->addSlashes(trim($_POST['user_aim'])))); + $criteria->add(new Criteria('user_aim', $myts->stripSlashesGPC(trim($_POST['user_aim'])))); break; case XOOPS_MATCH_CONTAIN: - $criteria->add(new Criteria('user_aim', '%'.$myts->addSlashes(trim($_POST['user_aim'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_aim', '%'.$myts->stripSlashesGPC(trim($_POST['user_aim'])).'%', 'LIKE')); break; } } @@ -243,16 +243,16 @@ $match = (!empty($_POST['user_yim_match'])) ? intval($_POST['user_yim_match']) : XOOPS_MATCH_START; switch ($match) { case XOOPS_MATCH_START: - $criteria->add(new Criteria('user_yim', $myts->addSlashes(trim($_POST['user_yim'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_yim', $myts->stripSlashesGPC(trim($_POST['user_yim'])).'%', 'LIKE')); break; case XOOPS_MATCH_END: - $criteria->add(new Criteria('user_yim', '%'.$myts->addSlashes(trim($_POST['user_yim'])), 'LIKE')); + $criteria->add(new Criteria('user_yim', '%'.$myts->stripSlashesGPC(trim($_POST['user_yim'])), 'LIKE')); break; case XOOPS_MATCH_EQUAL: - $criteria->add(new Criteria('user_yim', $myts->addSlashes(trim($_POST['user_yim'])))); + $criteria->add(new Criteria('user_yim', $myts->stripSlashesGPC(trim($_POST['user_yim'])))); break; case XOOPS_MATCH_CONTAIN: - $criteria->add(new Criteria('user_yim', '%'.$myts->addSlashes(trim($_POST['user_yim'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_yim', '%'.$myts->stripSlashesGPC(trim($_POST['user_yim'])).'%', 'LIKE')); break; } } @@ -260,27 +260,27 @@ $match = (!empty($_POST['user_msnm_match'])) ? intval($_POST['user_msnm_match']) : XOOPS_MATCH_START; switch ($match) { case XOOPS_MATCH_START: - $criteria->add(new Criteria('user_msnm', $myts->addSlashes(trim($_POST['user_msnm'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_msnm', $myts->stripSlashesGPC(trim($_POST['user_msnm'])).'%', 'LIKE')); break; case XOOPS_MATCH_END: - $criteria->add(new Criteria('user_msnm', '%'.$myts->addSlashes(trim($_POST['user_msnm'])), 'LIKE')); + $criteria->add(new Criteria('user_msnm', '%'.$myts->stripSlashesGPC(trim($_POST['user_msnm'])), 'LIKE')); break; case XOOPS_MATCH_EQUAL: - $criteria->add(new Criteria('user_msnm', '%'.$myts->addSlashes(trim($_POST['user_msnm'])))); + $criteria->add(new Criteria('user_msnm', '%'.$myts->stripSlashesGPC(trim($_POST['user_msnm'])))); break; case XOOPS_MATCH_CONTAIN: - $criteria->add(new Criteria('user_msnm', '%'.$myts->addSlashes(trim($_POST['user_msnm'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_msnm', '%'.$myts->stripSlashesGPC(trim($_POST['user_msnm'])).'%', 'LIKE')); break; } } if ( !empty($_POST['user_from']) ) { - $criteria->add(new Criteria('user_from', '%'.$myts->addSlashes(trim($_POST['user_from'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_from', '%'.$myts->stripSlashesGPC(trim($_POST['user_from'])).'%', 'LIKE')); } if ( !empty($_POST['user_intrest']) ) { - $criteria->add(new Criteria('user_intrest', '%'.$myts->addSlashes(trim($_POST['user_intrest'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_intrest', '%'.$myts->stripSlashesGPC(trim($_POST['user_intrest'])).'%', 'LIKE')); } if ( !empty($_POST['user_occ']) ) { - $criteria->add(new Criteria('user_occ', '%'.$myts->addSlashes(trim($_POST['user_occ'])).'%', 'LIKE')); + $criteria->add(new Criteria('user_occ', '%'.$myts->stripSlashesGPC(trim($_POST['user_occ'])).'%', 'LIKE')); } if ( !empty($_POST['user_lastlog_more']) && is_numeric($_POST['user_lastlog_more']) ) {