Changeset 15020

Timestamp:

2007/07/04 10:48:13 (16 years ago)

Author:

adati

Message:

お問い合わせ内容で、入力内容にURLが含まれているかチェックするようにした

Location:

branches/rel

Files:

• data/class/SC_CheckError.php (modified) (1 diff)
• html/contact/index.php (modified) (2 diffs)

branches/rel/data/class/SC_CheckError.php

@@ -812 +812 @@
             $this->arrErr[$value[1]] = "¢¨ " . $value[0] . "¤Ï·ÈÂÓÅÅÏäΤâ¤Î¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£<br />";
         }
-    }       
+    }
+    /**
+     * ¶Ø»ßʸ»úÎó¤Î¥Á¥§¥Ã¥¯
+     * value[0] = ¹àÌÜ̾ value[1] = ȽÄêÂоÝʸ»úÎó
+     * value[2] = ÆþÎϤò¶Ø»ß¤¹¤ëʸ»úÎó(ÇÛÎó)
+     * 
+     * @example $objErr->doFunc(array("URL", "contents", $arrReviewDenyURL), array("PROHIBITED_STR_CHECK"));
+     */ 
+    function PROHIBITED_STR_CHECK( $value ) {
+        if( isset($this->arrErr[$value[1]]) || empty($this->arrParam[$value[1]]) ) {
+            return;
+        }
+        
+        $targetStr     = $this->arrParam[$value[1]];
+        $prohibitedStr = str_replace(array('|', '/'), array('\|', '\/'), $value[2]);
+        
+        $pattern = '/' . join('|', $prohibitedStr) . '/i';
+        if(preg_match_all($pattern, $this->arrParam[$value[1]], $matches)) {
+            $this->arrErr[$value[1]] = "¢¨ " . $value[0] . "¤ÏÆþÎϤǤ­¤Þ¤»¤ó¡£<br />";
+        }
+    }
 }
 ?>

branches/rel/html/contact/index.php

@@ -111 +111 @@
 //¥¨¥é¡¼¥Á¥§¥Ã¥¯½èÍýÉô
 function lfErrorCheck($array) {
-
-    $objErr = new SC_CheckError($array);
+    $objErr = new SC_CheckError($array);
     $objErr->doFunc(array("¤ªÌ¾Á°(À«)", 'name01', STEXT_LEN), array("EXIST_CHECK","SPTAB_CHECK","MAX_LENGTH_CHECK"));
     $objErr->doFunc(array("¤ªÌ¾Á°(̾)", 'name02', STEXT_LEN), array("EXIST_CHECK","SPTAB_CHECK","MAX_LENGTH_CHECK"));
@@ -129 +128 @@
     $objErr->doFunc(array("¤ªÅÅÏÃÈÖ¹æ3", 'tel03', TEL_ITEM_LEN), array("NUM_CHECK", "MAX_LENGTH_CHECK"));
     
-
+    if (REVIEW_ALLOW_URL == false) {
+        // URL¤ÎÆþÎϤò¶Ø»ß
+        global $arrReviewDenyURL;
+        $objErr->doFunc(array("URL", "contents", $arrReviewDenyURL), array("PROHIBITED_STR_CHECK"));
+    }
+    
     return $objErr->arrErr;
-
 }