Functions Dev: Difference between revisions
No edit summary |
m (→GETPOST) Tag: 2017 source edit |
||
| (6 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
{{ | {{TemplateDocDevEn}} | ||
The following page describes some important functions used by dolibarr. | The following page describes some important functions used by dolibarr. | ||
| Line 5: | Line 5: | ||
==GETPOST== | ==GETPOST== | ||
GETPOST() : function to retrieve the content of GET or POST variables in a more secure way. The PHP methods $_GET and $_POST should not be used. | GETPOST() : function to retrieve the content of GET or POST variables in a more secure way. | ||
The PHP methods $_GET and $_POST should not be used. | |||
| Line 12: | Line 13: | ||
Example in php: | Example in php: | ||
$myField= $_POST["myField"]; | $myField= $_POST["myField"]; | ||
becomes if the element passed in parameter is a number : | becomes if the element passed in parameter is a number : | ||
$myField= GETPOST("myField", 'int'); | $myField= GETPOST("myField", 'int'); | ||
Possible parameters of the second argument : | Possible parameters of the second argument : | ||
{| class="wikitable" | {| class="wikitable" | ||
| Line 42: | Line 31: | ||
|- | |- | ||
|'int' | |'int' | ||
|check that it's a numeric (integer or decimal) | |check that it's a numeric (integer or decimal). Warning, for an amount or a rate, you must use alpha to accept non decimal chars or thousand separators used by some countries. The data must be then converted with price2num(GETPOST('key', 'alpha')) | ||
|- | |- | ||
|'intcomma' | |'intcomma' | ||
|checks that it is | |checks that it is a list of ID separated with commas ('1,8,123,99,...') | ||
|- | |- | ||
|'alpha' | |'alpha' | ||
| | |same than 'alphanohtml' (kept for backward compatibility) | ||
|- | |- | ||
|'aZ' | |'aZ' | ||
| Line 54: | Line 43: | ||
|- | |- | ||
|'aZ09' | |'aZ09' | ||
| | |verifies that it is non-special characters and numbers | ||
|- | |- | ||
|'array' | |'array' | ||
| | |verifies that it is an array | ||
|- | |- | ||
|'san_alpha' | |'san_alpha' | ||
| | |purged string (do not use for free text) | ||
|- | |- | ||
|'nohtml' | |'nohtml' | ||
| | |verifies that there is no html code | ||
|- | |- | ||
|'alphanohtml' | |'alphanohtml' | ||
| | |checks that the data is a non dangerous string with no html code inside. | ||
|- | |||
|'restricthtml' | |||
|must be used for any data entered by users to enter a html content | |||
|- | |- | ||
|'custom' | |'custom' | ||
| | |defined by the following filters and options with the parameters $filter and $options | ||
|} | |} | ||
| Line 81: | Line 73: | ||
Example in php: | Example in php: | ||
if (isset($_POST['myField'])){...} | if (isset($_POST['myField'])){...} | ||
becomes : | becomes : | ||
if (GETPOSTISSET('myField')){...} | if (GETPOSTISSET('myField')){...} | ||
For more information see the comments of the function in the file htdocs/core/lib/functions.lib.php | For more information see the comments of the function in the file htdocs/core/lib/functions.lib.php | ||
Latest revision as of 15:05, 1 April 2021
The following page describes some important functions used by dolibarr.
GETPOST
GETPOST() : function to retrieve the content of GET or POST variables in a more secure way. The PHP methods $_GET and $_POST should not be used.
Possible use :
Example in php:
$myField= $_POST["myField"];
becomes if the element passed in parameter is a number :
$myField= GETPOST("myField", 'int');
Possible parameters of the second argument :
| Parameters | |
|---|---|
| 'none' | for no parameter type check |
| 'int' | check that it's a numeric (integer or decimal). Warning, for an amount or a rate, you must use alpha to accept non decimal chars or thousand separators used by some countries. The data must be then converted with price2num(GETPOST('key', 'alpha')) |
| 'intcomma' | checks that it is a list of ID separated with commas ('1,8,123,99,...') |
| 'alpha' | same than 'alphanohtml' (kept for backward compatibility) |
| 'aZ' | verifies that it is a-z only |
| 'aZ09' | verifies that it is non-special characters and numbers |
| 'array' | verifies that it is an array |
| 'san_alpha' | purged string (do not use for free text) |
| 'nohtml' | verifies that there is no html code |
| 'alphanohtml' | checks that the data is a non dangerous string with no html code inside. |
| 'restricthtml' | must be used for any data entered by users to enter a html content |
| 'custom' | defined by the following filters and options with the parameters $filter and $options |
For more information see the comments of the function in the file htdocs/core/lib/functions.lib.php
GETPOSTISSET()
GETPOSTISSET(variableName) allows to know if the GET or POST variable passed in parameter is defined.
Example in php:
if (isset($_POST['myField'])){...}
becomes :
if (GETPOSTISSET('myField')){...}
For more information see the comments of the function in the file htdocs/core/lib/functions.lib.php
img_picto
img_picto() function to insert an image.
print img_picto(imagetitle,imagename);
For more information see the comments of the function in the file htdocs/core/lib/functions.lib.php