织梦DEDE联动筛选（支持多条件多级选项）功能实现

 

 

//联动筛选功能实现获得附加表的相关信息 开始

$addtable  = $this->ChannelUnit->ChannelInfos['addtable'];

if($addtable!="")

{

$addJoin = " LEFT JOIN `$addtable` ON arc.id = ".$addtable.'.aid ';

$addField = '';

$fields = explode(',',$this->ChannelUnit->ChannelInfos['listfields']);

foreach($fields as $k=>$v)

{

$nfields[$v] = $k;

}

if(is_array($this->ChannelUnit->ChannelFields) && !empty($this->ChannelUnit->ChannelFields))

{

foreach($this->ChannelUnit->ChannelFields as $k=>$arr)

{

if(isset($nfields[$k]))

{

if(!empty($arr['rename'])) {

$addField .= ','.$addtable.'.'.$k.' as '.$arr['rename'];

}

else {

$addField .= ','.$addtable.'.'.$k;

}

}

}

}

if (isset($_REQUEST['tid']))

{

foreach($_GET as $key => $value) {

$filtersql .= ($key!="tid" && $key!="TotalResult" && $key!="PageNo") ? " AND $addtable.".wwwcms_filter($key)." = '".wwwcms_filter(urldecode($value))."'" : '';

}

}

}

else

{

$addField = '';

$addJoin = '';

}

/*联动筛选字符过滤函数开始*/

function wwwcms_filter($str,$stype="inject") {

  if ($stype=="inject")  {

   $str = str_replace(

          array( "select", "insert", "update", "delete", "alter", "cas", "union", "into", "load_file", "outfile", "create", "join", "where", "like", "drop", "modify", "rename", "'", "/*", "*", "../", "./"),

       array("","","","","","","","","","","","","","","","","","","","","",""),

       $str);

  } else if ($stype=="xss") {

   $farr = array("/s+/" ,

                 "/<(/?)(script|META|STYLE|HTML|HEAD|BODY|STYLE |i?frame|b|strong|style|html|img|P|o:p|iframe|u |em|strike|BR|div|a|TABLE|TBODY|object|tr|td |st1:chsdate|FONT|span|MARQUEE|body|title | |link |meta|?|%)([^>]*?)>/isU",

        "/(<[^>]*)on[a-zA-Z]+s*=([^>]*>)/isU",

        );

   $tarr = array(" ",

                 "",

        "
",

        );

   $str = preg_replace($farr, $tarr, $str);

   $str = str_replace(

          array( "<", ">", "'", """, ";", "/*", "*", "../", "./"),

       array("<",">","","","","","","",""),

       $str);

  }

  return $str;

 }

 

/**

  *  载入自定义表单(用于发布)

  *

  * @access    public

  * @param     string  $fieldset  字段列表

 * @param     string  $loadtype  载入类型

 * @return    string

  */

 

 function AddFilter($channelid, $type=1, $fieldsnamef, $defaulttid, $loadtype='autofield')

 {

  global $tid,$dsql,$id;

  $tid = $defaulttid ? $defaulttid : $tid;

  if ($id!="")

  {

   $tidsq = $dsql->GetOne(" Select typeid From `dede_archives` where id='$id' ");

   $tid = $tidsq["typeid"];

  }

  $nofilter = (isset($_REQUEST['TotalResult']) ? "&TotalResult=".$_REQUEST['TotalResult'] : '').(isset($_REQUEST['PageNo']) ? "&PageNo=".$_REQUEST['PageNo'] : '');

  $filterarr = wwwcms_filter(stripos($_SERVER['REQUEST_URI'], "list.php?tid=") ? str_replace($nofilter, '', $_SERVER['REQUEST_URI']) : $GLOBALS['cfg_cmsurl']."/plus/list.php?tid=".$tid);

     $cInfos = $dsql->GetOne(" Select * From  `dede_channeltype` where id='$channelid' ");

  $fieldset=$cInfos['fieldset'];

  $dtp = new DedeTagParse();

     $dtp->SetNameSpace('field','<','>');

     $dtp->LoadSource($fieldset);

     $dede_addonfields = '';

     if(is_array($dtp->CTags))

     {

         foreach($dtp->CTags as $tid=>$ctag)

         {

             $fieldsname = $fieldsnamef ? explode(",", $fieldsnamef) : explode(",", $ctag->GetName());

    if(($loadtype!='autofield' || ($loadtype=='autofield' && $ctag->GetAtt('autofield')==1)) && in_array($ctag->GetName(), $fieldsname) )

             {

                 $href1 = explode($ctag->GetName().'=', $filterarr);

     $href2 = explode('&', $href1[1]);

     $fields_value = $href2[0];

     $dede_addonfields .= '<dl><dt>'.$ctag->GetAtt('itemname').'：</dt><dd>';

     switch ($type) {

      case 1:

       $dede_addonfields .= (preg_match("/&".$ctag->GetName()."=/is",$filterarr,$regm) ? '<a  title="全部" href="'.str_replace("&".$ctag->GetName()."=".$fields_value,"",$filterarr).'">全部</a>' : '<dd><a class="on">全部</a>').'';

     

       $addonfields_items = explode(",",$ctag->GetAtt('default'));

       for ($i=0; $i<count($addonfields_items); $i++)

       {

        $href = stripos($filterarr,$ctag->GetName().'=') ? str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr) : $filterarr.'&'.$ctag->GetName().'='.urlencode($addonfields_items[$i]);//echo $href;

        $dede_addonfields .= ($fields_value!=urlencode($addonfields_items[$i]) ? '<a  title="'.$addonfields_items[$i].'" href="'.$href.'">'.$addonfields_items[$i].'</a>' : '<a class="on">'.$addonfields_items[$i].'</a>');

       }

       $dede_addonfields .= '</dd></dl>';

      break;

     

      case 2:

       $dede_addonfields .= '<select name="filter"'.$ctag->GetName().' οnchange="window.location=this.options[this.selectedIndex].value">

        '.'<option value="'.str_replace("&".$ctag->GetName()."=".$fields_value,"",$filterarr).'">全部</option>';

       $addonfields_items = explode(",",$ctag->GetAtt('default'));

       for ($i=0; $i<count($addonfields_items); $i++)

       {

        $href = stripos($filterarr,$ctag->GetName().'=') ? str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr) : $filterarr.'&'.$ctag->GetName().'='.urlencode($addonfields_items[$i]);

        $dede_addonfields .= '<option value="'.$href.'"'.($fields_value==urlencode($addonfields_items[$i]) ? ' selected="selected"' : '').'>'.$addonfields_items[$i].'</option>

        ';

       }

       $dede_addonfields .= '</select><br/>

       ';

      break;

     }

             }

         }

     }

  echo $dede_addonfields;

}