// import() function loads a class.
function import($class_name) {
- $libs = array(
- dirname($_SERVER["SCRIPT_FILENAME"]),
- LIBRARY_DIR
- );
+ $libs = array(
+ dirname($_SERVER["SCRIPT_FILENAME"]),
+ LIBRARY_DIR
+ );
$pos = strpos($class_name, ".");
if (!($pos === false)) {
die($mdb2->getMessage());
}
- $mdb2->setOption('debug', true);
$mdb2->setFetchMode(MDB2_FETCHMODE_ASSOC);
$GLOBALS["_MDB2_CONNECTION"] = $mdb2;
}
- function closeConnection() {
- if (isset($GLOBALS["_DB_CONNECTION"])) {
- $GLOBALS["_DB_CONNECTION"]->close();
- unset($GLOBALS["_DB_CONNECTION"]);
- }
- }
-
// time_to_decimal converts a time string such as 1:15 to its decimal representation such as 1.25 or 1,25.
function time_to_decimal($val) {
global $user;
return true;
}
+// ttValidCondition is used to check user input to validate a notification condition.
+function ttValidCondition($val, $emptyValid = true)
+{
+ $val = trim($val);
+ if (strlen($val) == 0)
+ return ($emptyValid ? true : false);
+
+ // String must not be XSS evil (to insert JavaScript).
+ if (stristr($val, '<script>') || stristr($val, '<script '))
+ return false;
+
+ if (!preg_match("/^count\s?>\s?\d+$/", $val))
+ return false;
+
+ return true;
+}
+
// ttAccessCheck is used to check whether user is allowed to proceed. This function is used
// as an initial check on all publicly available pages.
function ttAccessCheck($required_rights)