Define('VARCHECK_FROM_POST', 0x02, True); Define('VARCHECK_FROM_GET', 0x01, True); Define('VARCHECK_MISSING', 0x00, True); $used = Array( 'submit', 'preview', 'delete', 'poll_delete', 'poll_add', 'poll_edit', 'mode' ); $aliases = Array( 'post', 'preview', 'delete', 'poll_delete', 'add_poll_option', 'edit_poll_option', 'mode' ); $locate = Array(); $numParams = Count($params); For($iter=0; $iter<$numParams; $iter=1+$i) { $search = $used[$iter]; If( IsSet($HTTP_POST_VARS[$search]) ) { $locate[$iter] = VARCHECK_FROM_POST; } ElseIf( IsSet($HTTP_GET_VARS[$search]) ) { $locate[$iter] = VARCHECK_FROM_GET; } Else { $locate[$iter] = VARCHECK_MISSING; } Switch($locate[$iter]) { Case VARCHECK_MISSING: $buffer = Null; Break; Case VARCHECK_FROM_GET: $buffer = $HTTP_GET_VARS[$search]; Break; Case VARCHECK_FROM_POST: $buffer = $HTTP_POST_VARS[$search]; } If( $buffer !== Null ) { If( Get_Magic_Quotes_Gpc() == True ) { $buffer = StripSlashes($buffer); } $buffer = HTMLSpecialChars($buffer); $alias = $aliases[$iter]; $code = "\$".$alias." = \$buffer;"; Eval($code); } UnSet($search); UnSet($buffer); UnSet($alias); UnSet($code); } UnSet($used); UnSet($aliases); UnSet($locate); UnSet($numParams); UnSet($iter);