织梦二次开发联动筛选(单选和多选)功能的实现

    //dedecms联动筛选功能  字符过滤函数
    function wwwcms_filter($str,$stype="inject") {
      if ($stype=="inject")  {
       $str = str_replace(
              array( "select", "insert", "update", "delete", "alter", "cas", "union", "into", "load_file", "outfile", "create", "join", "where", "like", "drop", "modify", "rename", "'", "/*", "*", "../", "./"),
           array("","","","","","","","","","","","","","","","","","","","","",""),
           $str);
      } else if ($stype=="xss") {
       $farr = array("/\s+/" ,
                     "/<(\/?)(script|META|STYLE|HTML|HEAD|BODY|STYLE |i?frame|b|strong|style|html|img|P|o:p|iframe|u |em|strike|BR|div|a|TABLE|TBODY|object|tr|td |st1:chsdate|FONT|span|MARQUEE|body|title |\r\n|link |meta|\?|\%)([^>]*?)>/isU",
            "/(<[^>]*)on[a-zA-Z]+\s*=([^>]*>)/isU",
            );
       $tarr = array(" ",
                     "",
            "\\1\\2",
            );
       $str = preg_replace($farr, $tarr, $str);
       $str = str_replace(
              array( "<", ">", "'", "\"", ";", "/*", "*", "../", "./"),
           array("&lt;","&gt;","","","","","","",""),
           $str);
      }
      return $str;
     }
     
    /**
      *  载入自定义表单(用于发布)
      *
      * @access    public
      * @param     string  $fieldset  字段列表
     * @param     string  $loadtype  载入类型
     * @return    string
      */
     
     function AddFilter($channelid, $type=1, $fieldsnamef, $defaulttid, $loadtype='autofield')
     {
      global $tid,$dsql,$id;
      $tid = $defaulttid ? $defaulttid : $tid;
      if ($id!="")
      {
       $tidsq = $dsql->GetOne(" Select typeid From `dede_archives` where id='$id' ");
       $tid = $tidsq["typeid"];
      }
      $nofilter = (isset($_REQUEST['TotalResult']) ? "&TotalResult=".$_REQUEST['TotalResult'] : '').(isset($_REQUEST['PageNo']) ? "&PageNo=".$_REQUEST['PageNo'] : '');
      $filterarr = wwwcms_filter(stripos($_SERVER['REQUEST_URI'], "list.php?tid=") ? str_replace($nofilter, '', $_SERVER['REQUEST_URI']) : $GLOBALS['cfg_cmsurl']."/plus/list.php?tid=".$tid);
         $cInfos = $dsql->GetOne(" Select * From  `dede_channeltype` where id='$channelid' ");
      $fieldset=$cInfos['fieldset'];
      $dtp = new DedeTagParse();
         $dtp->SetNameSpace('field','<','>');
         $dtp->LoadSource($fieldset);
         $dede_addonfields = '';
         if(is_array($dtp->CTags))
         {
             foreach($dtp->CTags as $tid=>$ctag)
             {
                 $fieldsname = $fieldsnamef ? explode(",", $fieldsnamef) : explode(",", $ctag->GetName());
        if(($loadtype!='autofield' || ($loadtype=='autofield' && $ctag->GetAtt('autofield')==1)) && in_array($ctag->GetName(), $fieldsname) )
                 {
                     $href1 = explode($ctag->GetName().'=', $filterarr);
         $href2 = explode('&', $href1[1]);
         $fields_value = $href2[0];
         $dede_addonfields .= '<div class="scv-shaixuan"><b>'.$ctag->GetAtt('itemname').'：</b>';
         switch ($type) {
          case 1:
           $dede_addonfields .= (preg_match("/&".$ctag->GetName()."=/is",$filterarr,$regm) ? '<a title="全部" href="'.str_replace("&".$ctag->GetName()."=".$fields_value,"",$filterarr).'">全部</a>' : '<span>全部</span>').'&nbsp;';
     
           $addonfields_items = explode(",",$ctag->GetAtt('default'));
           for ($i=0; $i<count($addonfields_items); $i++)
           {
            $href = stripos($filterarr,$ctag->GetName().'=') ? str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr) : $filterarr.'&'.$ctag->GetName().'='.urlencode($addonfields_items[$i]);//echo $href;
            $dede_addonfields .= ($fields_value!=urlencode($addonfields_items[$i]) ? '<a title="'.$addonfields_items[$i].'" href="'.$href.'">'.$addonfields_items[$i].'</a>' : '<span>'.$addonfields_items[$i].'</span>')."&nbsp;";
           }
           $dede_addonfields .= '</div>';
          break;
     
          case 2:
           $dede_addonfields .= '<select name="filter"'.$ctag->GetName().' onchange="window.location=this.options[this.selectedIndex].value">
            '.'<option value="'.str_replace("&".$ctag->GetName()."=".$fields_value,"",$filterarr).'">全部</option>';
           $addonfields_items = explode(",",$ctag->GetAtt('default'));
           for ($i=0; $i<count($addonfields_items); $i++)
           {
            $href = stripos($filterarr,$ctag->GetName().'=') ? str_replace("=".$fields_value,"=".urlencode($addonfields_items[$i]),$filterarr) : $filterarr.'&'.$ctag->GetName().'='.urlencode($addonfields_items[$i]);
            $dede_addonfields .= '<option value="'.$href.'"'.($fields_value==urlencode($addonfields_items[$i]) ? ' selected="selected"' : '').'>'.$addonfields_items[$i].'</option>
            ';
           }
           $dede_addonfields .= '</select><br/>
           ';
          break;
         }
                 }
             }
         }
      echo $dede_addonfields;
     }

     if($key=="goodstype" || $key=="goodscolor" ){//你自定义字段的字段名(英文的那个name)
    		$count=0;
    		$nowsql ='';
    		$var=explode(",",wwwcms_filter(iconv("UTF-8", "gb2312", $value)));//iconv是转码的意思,如果你url传进来的参数是中文,就需要转码
     
    		if(!empty($var)){
    			foreach($var as $value){ 
    			   if($count==0){
    			      $filtersql.="and ($addtable.".wwwcms_filter($key)." like '%".$value."%'";
    			      $count++;
    			   }else{
    			     $filtersql.="or $addtable.".wwwcms_filter($key)." like '%".$value."%'";
    			}
     
    		     }
    		$filtersql.=")";
    		}
     
     
    	}else{
    						$filtersql .= ($key!="tid" && $key!="TotalResult" && $key!="PageNo") ? " AND $addtable.".wwwcms_filter($key)." = ".wwwcms_filter(iconv("UTF-8", "gb2312", $value))."" : '';//跟上面一样,如果传递的值是中文,那么就需要转码
    					}