<?php class RUN { public function sicher($string) { global $datenbank; return trim(strip_tags($datenbank->escape($string))); } public function vars($type = 'REQUEST'){ if($type == 'REQUEST') $ay = $_REQUEST; elseif($type == 'POST') $ay = $_POST; elseif($type == 'GET') $ay = $_GET; $rtn = new stdClass(); foreach($ay['run'] as $a1 => $a2){ $rtn->{$this->sicher($a1)} = $this->sicher($a2); } return $rtn; } public function value($rtn){ $count = count((array)$rtn); $i = 1; foreach($rtn as $key => $value) { if($i <= $count){ $post = array("name" => $key, "value" => $value); } $i++; } return $post; } public function datei_holen($value){ global $datenbank,$error,$meldung; $query = "SELECT datei FROM ". PREFIX . RUN_INC ." WHERE value = '". $datenbank->escape($value['value']) ."' AND name = '". $datenbank->escape($value['name']) ."' "; $dat = $datenbank->num_rows($query); if($dat == 1){ $a = $datenbank->get_row($query,true); }else{ $error = 1; $meldung = 'Aktion kann nicht ausgeführt werden.'; } return $a->datei; } }