| @@ 287-300 (lines=14) @@ | ||
| 284 | ||
| 285 | // strip escapes of &  | 
                                |
| 286 | $nextarg = strpos($filtered_sql, '\&');  | 
                                |
| 287 |     while ($nextarg !== false) { | 
                                |
| 288 | $escapesCount = 0;  | 
                                |
| 289 | while ((($nextarg - $escapesCount - 1) > 0)  | 
                                |
| 290 |             && (substr($filtered_sql, $nextarg - $escapesCount - 1, 1) == '\\')) { | 
                                |
| 291 | $escapesCount++;  | 
                                |
| 292 | }  | 
                                |
| 293 |         if (($escapesCount % 2) == 0) { | 
                                |
| 294 | // strip escapes of &  | 
                                |
| 295 | $filtered_sql = substr($filtered_sql, 0, $nextarg) . '&' . substr($filtered_sql, $nextarg + 2);  | 
                                |
| 296 | $nextarg--;  | 
                                |
| 297 | }  | 
                                |
| 298 | ||
| 299 | $nextarg = strpos($filtered_sql, '\&', $nextarg + 2);  | 
                                |
| 300 | }  | 
                                |
| 301 | ||
| 302 | //  | 
                                |
| 303 | // ok ... filtered_sql is ready for usage  | 
                                |
| @@ 355-371 (lines=17) @@ | ||
| 352 | ||
| 353 | // \& durch & ersetzen  | 
                                |
| 354 | $nextarg = mb_strpos($filtered_sql, '\&');  | 
                                |
| 355 |     while ($nextarg !== false) { | 
                                |
| 356 | $escapesCount = 0;  | 
                                |
| 357 | while ((($nextarg - $escapesCount - 1) > 0) &&  | 
                                |
| 358 |             (mb_substr($filtered_sql, $nextarg - $escapesCount - 1, 1) == '\\')) { | 
                                |
| 359 | $escapesCount++;  | 
                                |
| 360 | }  | 
                                |
| 361 |         if (($escapesCount % 2) == 0) { | 
                                |
| 362 | // \& ersetzen durch &  | 
                                |
| 363 | $filtered_sql = mb_substr($filtered_sql, 0, $nextarg) . '&' . mb_substr($filtered_sql, $nextarg + 2);  | 
                                |
| 364 | $nextarg--;  | 
                                |
| 365 | }  | 
                                |
| 366 | ||
| 367 | $nextarg = mb_strpos($filtered_sql, '\&', $nextarg + 2);  | 
                                |
| 368 | }  | 
                                |
| 369 | ||
| 370 | //  | 
                                |
| 371 | // ok ... hier ist filtered_sql fertig  | 
                                |
| 372 | //  | 
                                |
| 373 | ||
| 374 | /* todo:  | 
                                |