【留言板】发表留言相关数据验证实现

luoyanshou
1 parent 37d6de1b
Showing 3 changed files with 72 additions and 10 deletions
trunk/Message/Api/Controller/Message/MessInputController.class.php
trunk/www/apidocassets/javascript/mess_front.js
trunk/www/mess_front/input.PHP
@@ -8,7 +8,7 @@
  
 namespace Api\Controller\Message;
  
-use Common\Model\RightModel;
+use Common\Model\MessagesModel;
  
 class MessInputController extends \Api\Controller\AbstractController
 {
@@ -20,20 +20,55 @@ class MessInputController extends \Api\Controller\AbstractController
     protected $_require_login = false;
  
  
-    public function Index_get()
+    public function Index_post()
     {
-        $this->_result = "您已留言成功，请等待审核。";
+
+        session_start();
+
+        $data = $this->checkFields( I('post.') );
+
+        if( !$data ){
+            $this->_result = "数据验证失败";
+            die;
+        }
+
+        $messagesModel = new MessagesModel();
+
+        $messagesModel->m_uid     = $_SESSION['userid'];
+        $messagesModel->m_title   = $data['title'];
+        $messagesModel->m_content = $data['message'];
+        $messagesModel->m_ip      = $_SERVER['REMOTE_ADDR'];
+
+        //$this->_result = "您已留言成功，请等待审核。";
  
     }
  
     /**
      * 验证提交参数字段合法性
      *
-     * @param array $post
+     * @param array $postData
      * @return bool
      */
-    private function checkFields($post = [])
+    private function checkFields($postData = [])
     {
-        return true;
+        $parrent = "/\ |\/|\~|\!|\@|\#|\\$|\%|\^|\&|\*|\(|\)|\_|\+|\{|\}|\:|\<|\>|\?|\[|\]|\,|\.|\/|\;|\\' | \`|\-|\=|\\\|\|/";
+        $data = [];
+
+        if( empty($postData['title']) || strlen($postData['title'])>80 ){
+            $this->_result = "标题不能为空且标题长度必须小于80。";
+            return false;
+
+        }else{
+            $data['title'] = preg_replace( $parrent, "", $postData['title']);
+        }
+
+        if( empty($postData['message']) || strlen($postData['message'])>500 ){
+            $this->_result = "留言内容不能为空且长度必须小于500。";
+            return false;
+        }else{
+            $data['message'] = preg_replace( $parrent, "", $postData['message'] );
+        }
+
+        return $data;
     }
 }
@@ -10,7 +10,31 @@
 function inputCheck( src )
 {
     // 发表留言场景
-    if( src == 'mess' ){}
+    if( src == 'mess' ){
+        var title   = $('#txtTitle').val();
+        var content = $('#txtCon').val();
+
+        if( title == '' || title.length >80){
+            return false;
+        }
+
+        if( content !='' && content.length <=500){
+            var pattern = new RegExp("[`~!@#$^&*()=|{}':;',\\[\\].<>/?~！@#￥……&*（）——|{}【】‘；：”“'。，、？]");
+            var message = "";
+            for(var i=0;i<content.length;i++)
+            {
+                message += content.substr(i, 1).replace(pattern, '');
+            }
+
+            $("#message").val( message );
+
+        }else{
+            return false;
+        }
+
+        return true;
+    }
+
  
     // 登录场景
     if( src == 'login' ){
@@ -35,6 +59,8 @@ function jumpSubmit()
         return false;
     }
  
+    $("#frm_input").submit();
+
 }
  
 /**
@@ -20,7 +20,7 @@
 </head>
 <body>
     <div class="con">
-    <form action="http://lys.com/wx5019b9c455ea9c81/Message/Api/Message/MessInput" method="post" id="frm_input">
+    <form action="http://lys.com/wx5019b9c455ea9c81/Message/Api/Message/MessInput/Index" method="post" id="frm_input">
         <table>
             <caption><h2>发表留言</h2></caption>
             <!--<tr>
@@ -32,13 +32,14 @@
             <tr>
                 <td>标题:</td>
                 <td>
-                    <input name="txtTitle" id="txtTitle" type="text" maxlength="80" >
+                    <input name="title" id="txtTitle" type="text" maxlength="80" >
                 </td>
             </tr>
             <tr>
                 <td>留言内容：</td>
                 <td>
-                    <textarea rows="8" cols="40" name="txtCon" id="txtCon" ></textarea>
+                    <textarea rows="8" cols="40" name="content" id="txtCon" ></textarea>
+                    <input type="hidden" value="" name="message" id="message" >
                 </td>
             </tr>
             <tr>