From e1ceb050e19c7574bca146a8da7047ee4ff456b5 Mon Sep 17 00:00:00 2001 From: Marius Burkard <m.burkard@pixcept.de> Date: Sun, 10 Jul 2016 05:02:35 -0400 Subject: [PATCH] Merge branch 'stable-3.1' --- interface/lib/classes/tform_base.inc.php | 51 ++++++++++++++++++++++++++++++++++++++++----------- 1 files changed, 40 insertions(+), 11 deletions(-) diff --git a/interface/lib/classes/tform_base.inc.php b/interface/lib/classes/tform_base.inc.php index 4405de4..0c9cda5 100644 --- a/interface/lib/classes/tform_base.inc.php +++ b/interface/lib/classes/tform_base.inc.php @@ -206,7 +206,7 @@ break; case 'DATE': - if($record[$key] != '' && $record[$key] != '0000-00-00') { + if($record[$key] != '' && !is_null($record[$key]) && $record[$key] != '0000-00-00') { $tmp = explode('-', $record[$key]); $new_record[$key] = date($this->dateformat, mktime(0, 0, 0, $tmp[1] , $tmp[2], $tmp[0])); } @@ -562,6 +562,18 @@ $new_record[$key] = $this->_getDateTimeHTML($key, $dt_value, $display_seconds); break; + case 'DATE': + if (strtotime($val) !== false) { + $dt_value = $val; + } elseif ( isset($field['default']) && (strtotime($field['default']) !== false) ) { + $dt_value = $field['default']; + } else { + $dt_value = 0; + } + + $new_record[$key] = $this->_getDateHTML($key, $dt_value); + break; + default: if(isset($record[$key])) { $new_record[$key] = htmlspecialchars($record[$key]); @@ -672,6 +684,12 @@ $new_record[$key] = $this->_getDateTimeHTML($key, $dt_value, $display_seconds); break; + + case 'DATE': + $dt_value = (isset($field['default'])) ? $field['default'] : 0; + + $new_record[$key] = $this->_getDateHTML($key, $dt_value); + break; default: $new_record[$key] = htmlspecialchars($field['default']); @@ -770,7 +788,7 @@ } break; case 'DATE': - if($record[$key] != '' && $record[$key] != '0000-00-00') { + if($record[$key] != '' && !is_null($record[$key]) && $record[$key] != '0000-00-00') { if(function_exists('date_parse_from_format')) { $date_parts = date_parse_from_format($this->dateformat, $record[$key]); $new_record[$key] = $date_parts['year'].'-'.str_pad($date_parts['month'], 2, "0", STR_PAD_LEFT).'-'.str_pad($date_parts['day'], 2, "0", STR_PAD_LEFT); @@ -779,7 +797,7 @@ $new_record[$key] = date('Y-m-d', $tmp); } } else { - $new_record[$key] = '0000-00-00'; + $new_record[$key] = null; } break; case 'INTEGER': @@ -802,19 +820,19 @@ $new_record[$key] = date( 'Y-m-d H:i:s', mktime($_dt_hour, $_dt_minute, $_dt_second, $_dt_month, $_dt_day, $_dt_year) ); } } else {*/ - if($record[$key] != '' && $record[$key] != '0000-00-00 00:00:00') { + if($record[$key] != '' && !is_null($record[$key]) && $record[$key] != '0000-00-00 00:00:00') { //$tmp = strtotime($record[$key]); //$new_record[$key] = date($this->datetimeformat, $tmp); $parsed_date = date_parse_from_format($this->datetimeformat,$record[$key]); if($parsed_date['error_count'] > 0 || ($parsed_date['year'] == 1899 && $parsed_date['month'] == 12 && $parsed_date['day'] == 31)) { // There was an error, set the date to 0 - $new_record[$key] = '0000-00-00 00:00:00'; + $new_record[$key] = null; } else { // Date parsed successfully. Convert it to database format $new_record[$key] = date( 'Y-m-d H:i:s', mktime($parsed_date['hour'], $parsed_date['minute'], $parsed_date['second'], $parsed_date['month'], $parsed_date['day'], $parsed_date['year']) ); } } else { - $new_record[$key] = '0000-00-00 00:00:00'; + $new_record[$key] = null; } /*}*/ break; @@ -831,7 +849,7 @@ } //* Add slashes to all records, when we encode data which shall be inserted into mysql. - if($dbencode == true) $new_record[$key] = $app->db->quote($new_record[$key]); + if($dbencode == true && !is_null($new_record[$key])) $new_record[$key] = $app->db->quote($new_record[$key]); } } return $new_record; @@ -973,13 +991,22 @@ $this->errorMessage .= $errmsg."<br />\r\n"; } } + break; case 'ISEMAIL': + $error = false; if($validator['allowempty'] != 'y') $validator['allowempty'] = 'n'; if($validator['allowempty'] == 'y' && $field_value == '') { //* Do nothing } else { if(function_exists('filter_var')) { if(filter_var($field_value, FILTER_VALIDATE_EMAIL) === false) { + $error = true; + } else { + if (!preg_match("/^[^\\+]+$/", $field_value)) { // * disallow + in local-part + $error = true; + } + } + if ($error) { $errmsg = $validator['errmsg']; if(isset($this->wordbook[$errmsg])) { $this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n"; @@ -987,11 +1014,13 @@ $this->errorMessage .= $errmsg."<br />\r\n"; } } + } else $this->errorMessage .= "function filter_var missing <br />\r\n"; } + unset($error); break; case 'ISINT': - if(function_exists('filter_var') && $field_value < 2147483647) { + if(function_exists('filter_var') && $field_value < PHP_INT_MAX) { //if($field_value != '' && filter_var($field_value, FILTER_VALIDATE_INT, array("options" => array('min_range'=>0))) === false) { if($field_value != '' && filter_var($field_value, FILTER_VALIDATE_INT) === false) { $errmsg = $validator['errmsg']; @@ -1028,7 +1057,7 @@ break; case 'V6PREFIXLENGTH': // find shortes ipv6 subnet can`t be longer - $sql_v6 = $app->db->queryOneRecord("SELECT ip_address FROM server_ip WHERE ip_type = 'IPv6' AND virtualhost = 'y' ORDER BY CHAR_LENGTH(ip_address) ASC LIMIT 0,1;"); + $sql_v6 = $app->db->queryOneRecord("SELECT ip_address FROM server_ip WHERE ip_type = 'IPv6' AND virtualhost = 'y' ORDER BY CHAR_LENGTH(ip_address) ASC LIMIT 0,1"); $sql_v6_explode=explode(':',$sql_v6['ip_address']); $explode_field_value = explode(':',$field_value); if (count($sql_v6_explode) < count($explode_field_value) && isset($sql_v6['ip_address'])) { @@ -1233,7 +1262,7 @@ } } else { $sql_insert_key .= "`$key`, "; - $sql_insert_val .= "'".$record[$key]."', "; + $sql_insert_val .= (is_null($record[$key]) ? 'NULL' : "'".$record[$key]."'") . ", "; } } else { if($field['formtype'] == 'PASSWORD') { @@ -1260,7 +1289,7 @@ $sql_update .= "`$key` = '".$record[$key]."', "; } } else { - $sql_update .= "`$key` = '".$record[$key]."', "; + $sql_update .= "`$key` = " . (is_null($record[$key]) ? 'NULL' : "'".$record[$key]."'") . ", "; } } } else { -- Gitblit v1.9.1