<?php
/**
 * ZenTaoPHP的验证和过滤类。
 * The validater and fixer class file of ZenTaoPHP framework.
 *
 * The author disclaims copyright to this source code.  In place of
 * a legal notice, here is a blessing:
 * 
 *  May you do good and not evil.
 *  May you find forgiveness for yourself and forgive others.
 *  May you share freely, never taking more than you give.
 */

/**
 * validater类，检查数据是否符合规则。
 * The validater class, checking data by rules.
 * 
 * @package framework
 */
class baseValidater
{
    /**
     * 最大参数个数。
     * The max count of args.
     */
    const MAX_ARGS = 3;

    /**
     * 是否是Bool类型。
     * Bool checking.
     * 
     * @param  bool $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkBool($var)
    {
        return filter_var($var, FILTER_VALIDATE_BOOLEAN);
    }

    /**
     * 是否是Int类型。
     * Int checking.
     * 
     * @param  int $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkInt($var)
    {
        $args = func_get_args();
        if($var != 0) $var = ltrim($var, 0);  // 去掉变量左边的0，00不是Int类型
        // Remove the left 0, filter don't think 00 is an int.

        /* 如果设置了最小的整数。  Min is setted.  */
        if(isset($args[1]))
        {
            /* 如果最大的整数也设置了。  And Max is setted.  */
            if(isset($args[2]))
            {
                $options = array('options' => array('min_range' => $args[1], 'max_range' => $args[2]));
            }
            else
            {
                $options = array('options' => array('min_range' => $args[1]));
            }

            return filter_var($var, FILTER_VALIDATE_INT, $options);
        }
        else
        {
            return filter_var($var, FILTER_VALIDATE_INT);
        }
    }

    /**
     * 检查不是Int类型。
     * Not int checking. 
     * 
     * @param  int    $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkNotInt($var)
    {
        return !self::checkInt($var);
    }

    /**
     * 检查Float类型。
     * Float checking.
     * 
     * @param  float  $var 
     * @param  string $decimal 
     * @static
     * @access public
     * @return bool
     */
    public static function checkFloat($var, $decimal = '.')
    {
        return filter_var($var, FILTER_VALIDATE_FLOAT, array('options' => array('decimal' => $decimal)));
    }

    /**
     * 检查Email。
     * Email checking.
     * 
     * @param  string $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkEmail($var)
    {
        return filter_var($var, FILTER_VALIDATE_EMAIL);
    }

    /**
     * 检查电话或手机号码
     * Check phone number.
     * 
     * @param  string    $var 
     * @static
     * @access public
     * @return void
     */
    public static function checkPhone($var)
    {
        return (validater::checkTel($var) or validater::checkMobile($var));
    }

    /**
     * 检查电话号码
     * Check tel number.
     * 
     * @param  int    $var 
     * @static
     * @access public
     * @return void
     */
    public static function checkTel($var)
    {
        return preg_match("/^([0-9]{3,4}-?)?[0-9]{7,8}$/", $var);
    }

    /**
     * 检查手机号码
     * Check mobile number.
     * 
     * @param  string    $var 
     * @static
     * @access public
     * @return void
     */
    public static function checkMobile($var)
    {
        return preg_match("/^1[3-5,7,8]{1}[0-9]{9}$/", $var);
    }

    /**
     * 检查网址。
     * 该规则不支持中文字符的网址。
     *
     * URL checking. 
     * The check rule of filter don't support chinese.
     * 
     * @param  string $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkURL($var)
    {
        return filter_var($var, FILTER_VALIDATE_URL);
    }

    /**
     * 检查域名，不支持中文。
     * Domain checking. 
     *
     * The check rule of filter don't support chinese.
     * 
     * @param  string $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkDomain($var)
    {
        return preg_match('/^([a-z0-9-]+\.)+[a-z]{2,15}$/', $var);
    }

    /**
     * 检查IP地址。
     * IP checking.
     * 
     * @param  ip $var 
     * @param  string $range all|public|static|private
     * @static
     * @access public
     * @return bool
     */
    public static function checkIP($var, $range = 'all')
    {
        if($range == 'all') return filter_var($var, FILTER_VALIDATE_IP);
        if($range == 'public static') return filter_var($var, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE);
        if($range == 'private')
        {
            if($var == '127.0.0.1' or filter_var($var, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE) === false) return true;
            return false;
        }
    }

    /**
     * 身份证号检查。
     * Idcard checking.
     * 
     * @access public
     * @return void
     */
    public static function checkIdcard($idcard)
    {
        if(strlen($idcard)!=18) return false;
        $idcard = strtoupper($idcard); 
        $cityList = array(
            '11','12','13','14','15','21','22',
            '23','31','32','33','34','35','36',
            '37','41','42','43','44','45','46',
            '50','51','52','53','54','61','62',
            '63','64','65','71','81','82','91'
        );

        if (!preg_match('/^([\d]{17}[xX\d]|[\d]{15})$/', $idcard)) return false;

        if (!in_array(substr($idcard, 0, 2), $cityList)) return false;

        $baseCode     = substr($idcard, 0, 17);
        $verifyCode   = substr($idcard, 17, 1);
        $interference = array(7, 9, 10, 5, 8, 4, 2, 1, 6, 3, 7, 9, 10, 5, 8, 4, 2);

        $verifyConfig = array('1', '0', 'X', '9', '8', '7', '6', '5', '4', '3', '2');

        $total = 0;
        for($i=0; $i<17; $i++) $total += substr($baseCode, $i, 1) * $interference[$i];

        $mod = $total % 11;

        return $verifyCode == $verifyConfig[$mod];
    }

    /**
     * 日期检查。注意，2009-09-31是一个合法日期，系统会将它转换为2009-10-01。
     * Date checking. Note: 2009-09-31 will be an valid date, because strtotime auto fixed it to 10-01.
     * 
     * @param  date $date 
     * @static
     * @access public
     * @return bool
     */
    public static function checkDate($date)
    {
        if(empty($date)) return true;
        if($date == '0000-00-00') return true;
        $stamp = strtotime($date);
        if(!is_numeric($stamp)) return false; 
        return checkdate(date('m', $stamp), date('d', $stamp), date('Y', $stamp));
    }

    /**
     * Check datetime.
     * 
     * @param  string    $datetime 
     * @static
     * @access public
     * @return bool
     */
    public static function checkDatetime($datetime)
    {
        if(empty($datetime)) return true;
        if($datetime == '0000-00-00') return true;
        if($datetime == '0000-00-00 00:00:00') return true;
        $stamp = strtotime($datetime);
        if(!is_numeric($stamp)) return false; 
        return checkdate(date('m', $stamp), date('d', $stamp), date('Y', $stamp));
    }

    /**
     * 检查正则表达式。
     * REG checking.
     * 
     * @param  string $var 
     * @param  string $reg 
     * @static
     * @access public
     * @return bool
     */
    public static function checkREG($var, $reg)
    {
        return filter_var($var, FILTER_VALIDATE_REGEXP, array('options' => array('regexp' => $reg)));
    }

    /**
     * 检查长度。
     * Length checking.
     * 
     * @param  string $var 
     * @param  string $max 
     * @param  int    $min 
     * @static
     * @access public
     * @return bool
     */
    public static function checkLength($var, $max, $min = 0)
    {
        $length = function_exists('mb_strlen') ? mb_strlen($var, 'utf-8') : strlen($var);
        return self::checkInt($length, $min, $max);
    }

    /**
     * 检查不为空。
     * Not empty checking.
     * 
     * @param  mixed $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkNotEmpty($var)
    {
        return !empty($var);
    }

    /**
     * 检查为空。
     * Empty checking.
     * 
     * @param  mixed $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkEmpty($var)
    {
        return empty($var);
    }

    /**
     * 检查用户名。
     * Account checking.
     * 
     * @param  string $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkAccount($var)
    {
        global $config;
        $accountRule = empty($config->accountRule) ? '|^[a-zA-Z0-9_]{1}[a-zA-Z0-9_\.]{1,}[a-zA-Z0-9_]{1}$|' : $config->accountRule;
        return self::checkREG($var, $accountRule);
    }

    /**
     * 检查Code。
     * Check code.
     * 
     * @param  string $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkCode($var)
    {
        return self::checkREG($var, '|^[A-Za-z0-9]+$|');
    }

    /**
     * 检查验证码。
     * Check captcha.
     * 
     * @param  mixed    $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkCaptcha($var)
    {
        if(!isset($_SESSION['captcha'])) return false;
        return $var == $_SESSION['captcha'];
    }

    /**
     * 是否等于给定的值。
     * Must equal a value.
     * 
     * @param  mixed  $var 
     * @param  mixed $value 
     * @static
     * @access public
     * @return bool
     */
    public static function checkEqual($var, $value)
    {
        return $var == $value;
    }

    /**
     * 检查不等于给定的值
     * Must not equal a value.
     * 
     * @param  mixed    $var 
     * @param  mixed    $value 
     * @static
     * @access public
     * @return bool
     */
    public static function checkNotEqual($var, $value)
    {
        return $var != $value;
    }

    /**
     * 检查大于给定的值。
     * Must greater than a value.
     * 
     * @param  mixed    $var 
     * @param  mixed    $value 
     * @static
     * @access public
     * @return bool
     */
    public static function checkGT($var, $value)
    {
        return $var > $value;
    }

    /**
     * 检查小于给定的值
     * Must less than a value.
     * 
     * @param  mixed    $var 
     * @param  mixed    $value 
     * @static
     * @access public
     * @return bool
     */
    public static function checkLT($var, $value)
    {
        return $var < $value;
    }

    /**
     * 检查大于等于给定的值
     * Must greater than a value or equal a value.
     * 
     * @param  mixed    $var 
     * @param  mixed    $value 
     * @static
     * @access public
     * @return bool
     */
    public static function checkGE($var, $value)
    {
        return $var >= $value;
    }

    /**
     * 检查小于等于给定的值
     * Must less than a value or equal a value.
     * 
     * @param  mixed    $var 
     * @param  mixed    $value 
     * @static
     * @access public
     * @return bool
     */
    public static function checkLE($var, $value)
    {
        return $var <= $value;
    }

    /**
     * 检查是否在给定的列表里面。
     * Must in value list.
     * 
     * @param  mixed  $var 
     * @param  mixed $value 
     * @static
     * @access public
     * @return bool
     */
    public static function checkIn($var, $value)
    {
        if(!is_array($value)) $value = explode(',', $value);
        return in_array($var, $value);
    }

    /**
     * 检查文件名。
     * Check file name.
     * 
     * @param  string    $var 
     * @static
     * @access public
     * @return bool
     */
    public static function checkFileName($var)
    {
        return !preg_match('/>+|:+|<+/', $var);
    }

    /**
     * 检查敏感词。
     * Check sensitive words.
     * 
     * @param  object   $vars 
     * @param  array    $dicts 
     * @static
     * @access public
     * @return void
     */
    public static function checkSensitive($vars, $dicts)
    {
        foreach($vars as $var)
        {
            if(!$var) continue;
            foreach($dicts as $dict)
            {
                if(strpos($var, $dict) === false) continue;
                if(strpos($var, $dict) !== false) return false;
            }
        }
        return true;
    }

    /**
     * 过滤附件。
     * Filter files. 
     * 
     * @access public
     * @return array
     */
    public static function filterFiles()
    {
        global $config;
        if(empty($_FILES)) return $_FILES;

        foreach($_FILES as $varName => $files)
        {
            if(is_array($files['name']))
            {
                foreach($files['name'] as $i => $fileName)
                {
                    $extension = ltrim(strrchr($fileName, '.'), '.');
                    if(stripos(",{$config->file->dangers},", ",{$extension},") !== false)
                    {
                        unset($_FILES);
                        return array();
                    }
                }
            }
            else
            {
                $extension = ltrim(strrchr($files['name'], '.'), '.');
                if(stripos(",{$config->file->dangers},", ",{$extension},") !== false)
                {
                    unset($_FILES);
                    return array();
                }
            }
        }

        return $_FILES;
    }

    /**
     * 过滤超级变量。
     * Filter super vars.
     * 
     * @param  array    $super 
     * @access public
     * @return array
     */
    public static function filterSuper($super)
    {
        if(!is_array($super)) return $super;

        $super = self::filterBadKeys($super);
        foreach($super as $key => $item)
        {
            if(is_array($item))
            {
                $item = self::filterBadKeys($item);
                foreach($item as $subkey => $subItem)
                {
                    if(is_array($subItem)) continue;
                    $subItem = self::filterTrojan($subItem);
                    $super[$key][$subkey] = self::filterXSS($subItem);
                }
            }
            else
            {
                $item = self::filterTrojan($item);
                $super[$key] = self::filterXSS($item);
            }
        }

        return $super;
    }

    /**
     * 过滤不符合规则的键值。
     * Filter bad keys.
     * 
     * @param  mix    $var 
     * @access public
     * @return mix
     */
    public static function filterBadKeys($var)
    {
        global $config;
        if(empty($config->framework->filterBadKeys)) return $var;
        foreach($var as $key => $value) if(preg_match('/[^a-zA-Z0-9_\.\-]/', $key)) unset($var[$key]);
        return $var;
    }

    /**
     * 过滤木马代码。
     * Filter trojan codes.
     * 
     * @param  string    $var 
     * @access public
     * @return string
     */
    public static function filterTrojan($var)
    {
        global $config;
        if(empty($config->framework->filterTrojan)) return $var;
        if(strpos(htmlspecialchars_decode($var), '<?') === false) return $var;

        $var      = (string) $var;
        $evils    = array('eval', 'exec', 'passthru', 'proc_open', 'shell_exec', 'system', '$$', 'include', 'require', 'assert');
        $replaces = array('e v a l', 'e x e c', ' p a s s t h r u', ' p r o c _ o p e n', 's h e l l _ e x e c', 's y s t e m', '$ $', 'i n c l u d e', 'r e q u i r e', 'a s s e r t');
        $var      = str_ireplace($evils, $replaces, $var);

        return $var;
    }

    /**
     * 过滤 XSS代码。
     * Filter XSS codes.
     * 
     * @param  string    $var 
     * @access public
     * @return string
     */
    public static function filterXSS($var)
    {
        global $config;
        if(empty($config->framework->filterXSS)) return $var;

        if(stripos($var, '<script') !== false)
        {
            $var      = (string) $var;
            $evils    = array('appendchild(', 'createElement(', 'xss.re', 'onfocus', 'onclick', 'innerHTML', 'replaceChild(', 'html(', 'append(', 'appendTo(', 'prepend(', 'prependTo(', 'after(', 'insertBefore', 'before(', 'replaceWith(');
            $replaces = array('a p p e n d c h i l d (', 'c r e a t e E l e  m e n t (', 'x s s . r e', 'o n f o c u s', 'o n c l i c k', 'i n n e r H T M L', 'r e p l a c e C h i l d (', 'h t m l (', 'a p p e n d (', 'a p p e n d T o (', 'p r e p e n d (', 'p r e p e n d T o (', 'a f t e r (', 'i n s e r t B e f o r e(', 'b e f o r e (', 'r e p l a c e W i t h (');
            $var      = str_ireplace($evils, $replaces, $var);
        }

        /* Process like 'javascript:' */
        $var = preg_replace('/j\s*a\s*v\s*a\s*s\s*c\s*r\s*i\s*p\s*t\s*:/Ui', 'j a v a s c r i p t :', $var);

        return $var;
    }

    /**
     * Filter param.
     * 
     * @param  array    $var 
     * @param  string   $type 
     * @static
     * @access public
     * @return array
     */
    public static function filterParam($var, $type)
    {
        global $config, $filter, $app;

        $moduleName   = $app->getModuleName();
        $methodName   = $app->getMethodName();
        $params       = $app->getParams();

        if($type == 'cookie')
        {
            $pagerCookie = 'pager' . ucfirst($moduleName) . ucfirst($methodName);
            $filter->default->cookie[$pagerCookie] = 'int';
        }
        foreach($var as $key => $value)
        {
            if($config->requestType == 'GET' and $type == 'get' and isset($params[$key])) continue;

            $rules = '';
            if(isset($filter->{$moduleName}->{$methodName}->{$type}[$key]))
            {
                $rules = $filter->{$moduleName}->{$methodName}->{$type}[$key];
            }
            elseif(isset($filter->{$moduleName}->default->{$type}[$key]))
            {
                $rules = $filter->{$moduleName}->default->{$type}[$key];
            }
            elseif(isset($filter->default->{$type}[$key]))
            {
                $rules = $filter->default->{$type}[$key];
            }

            if(!self::checkByRule($value, $rules)) unset($var[$key]);
        }
        return $var;
    }

    /**
     * Check by rule.
     * 
     * @param  string   $var 
     * @param  string   $rule   like: int account reg::md5 reg::/^[a-zA-Z0-9]+$/.
     * @static
     * @access public
     * @return bool
     */
    public static function checkByRule($var, $rule)
    {
        if(empty($rule)) return false;

        /* Parse rule to operator and param. */
        list($operator, $param) = baseValidater::parseRuleString($rule);

        /* check by operator. */
        $checkMethod = 'check' . $operator;
        if(method_exists('baseValidater', $checkMethod))
        {
            if(empty($param)  and self::$checkMethod($var) === false) return false;
            if(!empty($param) and self::$checkMethod($var, $param) === false) return false;
        }
        elseif(function_exists('is_' . $operator))
        {
            $checkFunction = 'is_' . $operator;
            if(!$checkFunction($var)) return false;
        }
        else
        {
            return false;
        }

        return true;
    }

    /**
     * Parse rule string.
     * 
     * @param  string $rule   like: int account reg::md5 reg::/^[a-zA-Z0-9]+$/.
     * @static
     * @access public
     * @return array
     */
    public static function parseRuleString($rule)
    {
        global $filter;

        if(strpos($rule, '::') !== false) list($operator, $param) = explode('::', $rule);
        if(strpos($rule, '::') === false) list($operator, $param) = array($rule, '');
        if($operator == 'reg' and isset($filter->rules->$param)) $param = $filter->rules->$param;

        return array($operator, $param);
    }

    /**
     * 调用一个方法进行检查。
     * Call a function to check it.
     * 
     * @param  mixed  $var 
     * @param  string $func 
     * @static
     * @access public
     * @return bool
     */
    public static function call($var, $func)
    {
        return filter_var($var, FILTER_CALLBACK, array('options' => $func));
    }
}

/**
 * fixer类，处理数据。
 * fixer class, to fix data types.
 * 
 * @package framework
 */
class baseFixer
{
    /**
     * 处理的数据。
     * The data to be fixed.
     * 
     * @var object
     * @access public
     */
    public $data;

    /**
     * 跳过处理的字段。
     * The fields to striped.
     * 
     * @var array 
     * @access public
     */
    public $stripedFields = array();

    /**
     * 构造方法，将超级全局变量转换为对象。
     * The construction function, according the scope, convert it to object.
     * 
     * @param  string $scope    the scope of the var, should be post|get|server|session|cookie|env
     * @access public
     * @return void
     */
    public function __construct($scope)
    {
        switch($scope)
        {
        case 'post':
            $this->data = (object)$_POST;
            break;
        case 'server':
            $this->data = (object)$_SERVER;
            break;
        case 'get':
            $this->data = (object)$_GET;
            break;
        case 'session':
            $this->data = (object)$_SESSION;
            break;
        case 'cookie':
            $this->data = (object)$_COOKIE;
            break;
        case 'env':
            $this->data = (object)$_ENV;
            break;
        case 'file':
            $this->data = (object)$_FILES;
            break;

        default:
            die('scope not supported, should be post|get|server|session|cookie|env');
        }
    }

    /**
     * 工厂方法。
     * The factory function.
     * 
     * @param  string $scope 
     * @access public
     * @return object fixer object.
     */
    public static function input($scope)
    {
        return new fixer($scope);
    }

    /**
     * 处理Email。
     * Email fix.
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object.
     */
    public function cleanEmail($fieldName)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName) $this->data->$fieldName = filter_var($this->data->$fieldName, FILTER_SANITIZE_EMAIL);
        return $this;
    }

    /**
     * url编码。
     * urlencode.
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object.
     */
    public function encodeURL($fieldName)
    {
        $fields = $this->processFields($fieldName);
        $args   = func_get_args();
        foreach($fields as $fieldName)
        {
            $this->data->$fieldName = isset($args[1]) ?  filter_var($this->data->$fieldName, FILTER_SANITIZE_ENCODED, $args[1]) : filter_var($this->data->$fieldName, FILTER_SANITIZE_ENCODED);
        }
        return $this;
    }

    /**
     * 清理网址。
     * Clean the url.
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object.
     */
    public function cleanURL($fieldName)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName) $this->data->$fieldName = filter_var($this->data->$fieldName, FILTER_SANITIZE_URL);
        return $this;
    }

    /**
     * 处理Float类型。
     * Float fixer.
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object.
     */
    public function cleanFloat($fieldName)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName) $this->data->$fieldName = filter_var($this->data->$fieldName, FILTER_SANITIZE_NUMBER_FLOAT, FILTER_FLAG_ALLOW_FRACTION|FILTER_FLAG_ALLOW_THOUSAND);
        return $this;
    }

    /**
     * 处理Int类型。
     * Int fixer. 
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object.
     */
    public function cleanINT($fieldName = '')
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName)
        {
            $filterVar = filter_var($this->data->$fieldName, FILTER_SANITIZE_NUMBER_INT);
            if(empty($filterVar)) $filterVar = 0;

            $this->data->$fieldName = $filterVar;
        }
        return $this;
    }

    /**
     * 将字符串转换为可以在浏览器查看的编码。
     * Special chars.
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object
     */
    public function specialChars($fieldName)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName)
        {
            if(empty($this->stripedFields) or !in_array($fieldName, $this->stripedFields)) $this->data->$fieldName = $this->specialArray($this->data->$fieldName);
        }
        return $this;
    }

    /**
     * Special array 
     * 
     * @param  mix      $data 
     * @access public
     * @return mix
     */
    public function specialArray($data)
    {
        if(!is_array($data)) return htmlspecialchars($data, ENT_QUOTES);

        foreach($data as &$value) $value = $this->specialArray($value);

        return $data;
    }

    /**
     * 忽略该标签。
     * Strip tags 
     * 
     * @param  string $fieldName 
     * @param  string $allowableTags 
     * @access public
     * @return object fixer object
     */
    public function stripTags($fieldName, $allowedTags = '')
    {
        global $app, $config;
        if(empty($allowedTags) and isset($config->allowedTags)) $allowedTags = $config->allowedTags;
        $usePurifier = isset($config->framework->purifier) ? $config->framework->purifier : false;
        if($usePurifier)
        {
            $app->loadClass('purifier', true);
            $purifierConfig = HTMLPurifier_Config::createDefault();
            $purifierConfig->set('Filter.YouTube', 1);

            /* Disable caching. */
            $purifierConfig->set('Cache.DefinitionImpl', null);

            $purifier = new HTMLPurifier($purifierConfig);
            $def = $purifierConfig->getHTMLDefinition(true);
            $def->addAttribute('a', 'target', 'Enum#_blank,_self,_target,_top');
        }

        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName)
        {
            if(function_exists('get_magic_quotes_gpc') and get_magic_quotes_gpc()) $this->data->$fieldName = stripslashes($this->data->$fieldName);

            if(!in_array($fieldName, $this->stripedFields))
            {
                if(!defined('RUN_MODE') or RUN_MODE != 'admin')
                {
                    /*
                     * purifier会把&nbsp;替换空格，kindeditor在会吧行首的空格去掉。
                     * purifier will change &nbsp; to ' ', and edit it will no space in line head use kindeditor. 
                     **/
                    $this->data->$fieldName = preg_replace('/<[^>]+</', '<', $this->data->$fieldName);
                    $this->data->$fieldName = preg_replace('/>[^<]+>/', '>', $this->data->$fieldName);
                    if($usePurifier) $this->data->$fieldName = str_replace('&nbsp;', '&spnb;', $this->data->$fieldName);
                    $this->data->$fieldName = $usePurifier ? $purifier->purify($this->data->$fieldName) : strip_tags($this->data->$fieldName, $allowedTags);
                    if($usePurifier) $this->data->$fieldName = str_replace('&amp;spnb;', '&nbsp;', $this->data->$fieldName);
                }
            }
            $this->stripedFields[] = $fieldName;
        }
        return $this;
    }

    /**
     * 忽略处理给定的字段。
     * Skip special chars check.
     * 
     * @param  string    $filename 
     * @access public
     * @return object fixer object
     */
    public function skipSpecial($fieldName)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName) $this->stripedFields[] = $fieldName;
        return $this;
    }

    /**
     * 给字段添加引用，防止字符与关键字冲突。
     * Quote 
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object
     */
    public function quote($fieldName)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName) $this->data->$fieldName = filter_var($this->data->$fieldName, FILTER_SANITIZE_MAGIC_QUOTES);
        return $this;
    }

    /**
     * 设置字段的默认值。
     * Set default value of some fileds.
     * 
     * @param  string $fields 
     * @param  mixed  $value 
     * @access public
     * @return object fixer object
     */
    public function setDefault($fields, $value)
    {
        $fields = strpos($fields, ',') ? explode(',', str_replace(' ', '', $fields)) : array($fields);
        foreach($fields as $fieldName)if(!isset($this->data->$fieldName) or empty($this->data->$fieldName)) $this->data->$fieldName = $value;
        return $this;
    }

    /**
     * 如果条件为真，则为字段赋值。
     * Set value of a filed on the condition is true.
     * 
     * @param  bool   $condition 
     * @param  string $fieldName 
     * @param  string $value 
     * @access public
     * @return object fixer object
     */
    public function setIF($condition, $fieldName, $value)
    {
        if($condition) $this->data->$fieldName = $value;
        return $this;
    }

    /**
     * 强制给字段赋值。
     * Set the value of a filed in force.
     * 
     * @param  string $fieldName 
     * @param  mixed  $value 
     * @access public
     * @return object fixer object
     */
    public function setForce($fieldName, $value)
    {
        $this->data->$fieldName = $value;
        return $this;
    }

    /**
     * 移除一个字段。
     * Remove a field.
     * 
     * @param  string $fieldName 
     * @access public
     * @return object fixer object
     */
    public function remove($fieldName)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName) unset($this->data->$fieldName);
        return $this;
    }

    /**
     * 如果条件为真，移除该字段。
     * Remove a filed on the condition is true.
     * 
     * @param  bool   $condition 
     * @param  string $fields 
     * @access public
     * @return object fixer object
     */
    public function removeIF($condition, $fields)
    {
        $fields = $this->processFields($fields);
        if($condition) foreach($fields as $fieldName) unset($this->data->$fieldName);
        return $this;
    }

    /**
     * 为数据添加新的项。
     * Add an item to the data.
     * 
     * @param  string $fieldName 
     * @param  mixed  $value 
     * @access public
     * @return object fixer object
     */
    public function add($fieldName, $value)
    {
        $this->data->$fieldName = $value;
        return $this;
    }

    /**
     * 如果条件为真，则为数据添加新的项。
     * Add an item to the data on the condition if true.
     * 
     * @param  bool   $condition 
     * @param  string $fieldName 
     * @param  mixed  $value 
     * @access public
     * @return object fixer object
     */
    public function addIF($condition, $fieldName, $value)
    {
        if($condition) $this->data->$fieldName = $value;
        return $this;
    }

    /**
     * 为指定字段增加值。 
     * Join the field.
     * 
     * @param  string $fieldName 
     * @param  string $value 
     * @access public
     * @return object fixer object
     */
    public function join($fieldName, $value)
    {
        if(!isset($this->data->$fieldName) or !is_array($this->data->$fieldName)) return $this;
        $this->data->$fieldName = join($value, $this->data->$fieldName);
        return $this;
    }

    /**
     * 调用一个方法来处理数据。
     * Call a function to fix it.
     * 
     * @param  string $fieldName 
     * @param  string $func 
     * @access public
     * @return object fixer object
     */
    public function callFunc($fieldName, $func)
    {
        $fields = $this->processFields($fieldName);
        foreach($fields as $fieldName) $this->data->$fieldName = filter_var($this->data->$fieldName, FILTER_CALLBACK, array('options' => $func));
        return $this;
    }

    /**
     * 处理完成后返回数据。
     * Get the data after fixing.
     * 
     * @param  string $fieldName 
     * @access public
     * @return object
     */
    public function get($fields = '')
    {
        $fields = str_replace(' ', '', trim($fields));
        foreach($this->data as $field => $value) $this->specialChars($field);

        if(empty($fields)) return $this->data;
        if(strpos($fields, ',') === false) return $this->data->$fields;

        $fields = array_flip(explode(',', $fields));
        foreach($this->data as $field => $value)
        {
            if(!isset($fields[$field])) unset($this->data->$field);
            if(!in_array($field, $this->stripedFields)) $this->specialChars($field);
        }

        return $this->data;
    }

    /**
     * 处理字段，如果字段中含有','，拆分成数组。如果字段不在$data中，删除掉。
     * Process fields, if contains ',', split it to array. If not in $data, remove it.
     * 
     * @param  string $fields 
     * @access public
     * @return array
     */
    public function processFields($fields)
    {
        $fields = strpos($fields, ',') ? explode(',', str_replace(' ', '', $fields)) : array($fields);
        foreach($fields as $key => $fieldName) if(!isset($this->data->$fieldName)) unset($fields[$key]);
        return $fields;
    }
}
